Email: 280037 Autolearn: 0 AvgScore: 0.40 AvgScanTime: 1.44 sec Spam: 50481 Autolearn: 0 AvgScore: 12.64 AvgScanTime: 1.66 sec Ham: 229556 Autolearn: 0 AvgScore: -2.29 AvgScanTime: 1.39 sec Time Spent Running SA: 112.21 hours Time Spent Processing Spam: 23.30 hours Time Spent Processing Ham: 88.91 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 50467 99.98 99.97 99.98 2 HTML_MESSAGE 46923 85.94 92.95 84.40 3 DKIM_SIGNED 42571 77.75 84.33 76.31 4 XM_DK_Pass 39792 75.08 78.83 74.26 5 DKIM_VALID 38439 73.34 76.15 72.73 6 XM_B_Unicode 38309 71.22 75.89 70.20 7 RELAYCOUNTRY_US 38230 79.01 75.73 79.73 8 XMListUnsubscribeExists 35683 57.75 70.69 54.90 9 XM_B_SpammyWords 35065 50.94 69.46 46.87 10 DKIM_VALID_AU 27554 57.55 54.58 58.20 11 XM_DK_Undo_02 24883 17.98 49.29 11.10 12 XM_B_Unicode3 21828 43.60 43.24 43.68 13 BAYES_50 20804 50.26 41.21 52.25 14 TR_XM_DKIM_Undo 20463 13.40 40.54 7.44 15 XM_B_SpammyWords2 19377 23.87 38.38 20.68 16 BAYES_99 18450 14.11 36.55 9.18 17 FVGT_m_MULTI_ODD 16618 26.68 32.92 25.31 18 HTML_FONT_LOW_CONTRAST 16079 31.17 31.85 31.02 19 LOC_TINY_FONT_1 15632 29.34 30.97 28.98 20 BAYES_999 14429 11.23 28.58 7.41 21 MIME_HTML_ONLY 14347 24.30 28.42 23.39 22 T_KAM_HTML_FONT_INVALID 14165 19.85 28.06 18.04 23 DKIM_VALID_EF 14139 27.78 28.01 27.73 24 RCVD_IN_MSPIKE_H2 13291 20.42 26.33 19.13 25 XM_Body_Dirty_Words 12890 16.49 25.53 14.51 26 RELAYCOUNTRY_META 12167 7.06 24.10 3.31 27 XMSubLong 10714 21.19 21.22 21.18 28 RCVD_IN_MSPIKE_WL 10342 28.61 20.49 30.40 29 T_TM2_M_HEADER_IN_MSG 10172 22.53 20.15 23.05 30 XM_Multi_Part_URI 8928 14.91 17.69 14.30 31 BOTNET_IPINHOSTNAME 8392 7.99 16.62 6.09 32 BOTNET 8330 4.51 16.50 1.88 33 TR_XM_SpammyWords2 7596 4.36 15.05 2.01 34 LOTS_OF_MONEY 7384 10.45 14.63 9.53 35 RCVD_IN_MSPIKE_H3 7083 14.83 14.03 15.01 36 TR_XM_SpammyRelay 6806 3.69 13.48 1.54 37 XM_B_Unsub 6733 12.63 13.34 12.47 38 TR_XM_SpammyWords4 6403 6.89 12.68 5.62 39 UNTRUSTED_Relay 6324 3.33 12.53 1.31 40 XM_UncommonTLD01 6111 5.39 12.11 3.91 41 XM_B_SpammyWords3 5929 5.84 11.75 4.54 42 RCVD_IN_BL_SPAMCOP_NET 5792 3.34 11.47 1.55 43 MPART_ALT_DIFF 5773 7.38 11.44 6.49 44 XMSexyCombo_05 5491 5.78 10.88 4.65 45 UNPARSEABLE_RELAY 5151 10.01 10.20 9.97 46 TR_XM_UnparsRelay 4950 8.21 9.81 7.86 47 RCVD_IN_MSPIKE_BL 4557 2.44 9.03 0.99 48 TR_XM_MSPIKECOMBO 4537 2.43 8.99 0.98 49 XMSubMetaSx_00 4331 5.74 8.58 5.12 50 DKIM_INVALID 4132 4.41 8.19 3.58 51 TR_XM_SPAMCOP 3940 1.76 7.80 0.43 52 XM_GoogleGroups 3884 2.69 7.69 1.59 53 MIME_HTML_ONLY_MULTI 3856 5.01 7.64 4.43 54 HTML_IMAGE_RATIO_02 3824 8.41 7.58 8.60 55 TooManyTo_001 3800 7.48 7.53 7.47 56 TM2_M_VERY_LONG_WORD 3782 2.91 7.49 1.90 57 XM_SendGrid 3745 8.54 7.42 8.79 58 RELAYCOUNTRY_CA 3639 2.07 7.21 0.93 59 BAYES_80 3438 5.46 6.81 5.16 60 HTML_MIME_NO_HTML_TAG 3376 2.81 6.69 1.95 61 MIME_HTML_MOSTLY 3294 3.27 6.53 2.55 62 BAYES_60 3273 9.51 6.48 10.17 63 TR_XM_PhishingBody 3214 3.64 6.37 3.04 64 XM_Evil_Numbers_Gen 3106 8.63 6.15 9.17 65 RCVD_IN_MSPIKE_H4 3064 11.76 6.07 13.01 66 XMLngstWrd_00 2975 2.08 5.89 1.24 67 TM2_M_URI_OPT_OUT 2948 5.16 5.84 5.01 68 XMLngstWrd_01 2939 2.00 5.82 1.16 69 XM_UB50 2796 1.71 5.54 0.86 70 LotsOfNums_01 2790 8.35 5.53 8.97 71 TR_XM_MaxUnsub 2756 2.18 5.46 1.46 72 HTML_TITLE_SUBJ_DIFF 2739 1.44 5.43 0.56 73 XMLngstWrd_02 2702 1.80 5.35 1.02 74 XMLngstWrd_03 2685 1.69 5.32 0.89 75 XM_B_Phish_Phrases 2661 4.12 5.27 3.87 76 UPPERCASE_75_100 2660 1.40 5.27 0.55 77 XMLngstWrd_04 2651 1.61 5.25 0.81 78 TR_XM_SpammyWords3 2633 1.34 5.22 0.49 79 MIME_QP_LONG_LINE 2535 5.31 5.02 5.37 80 SpammyFromTLD_01 2484 1.25 4.92 0.44 81 ALL_TRUSTED 2462 15.33 4.88 17.63 82 TR_XM_DK_SendGrid 2404 5.60 4.76 5.78 83 RCVD_IN_VALIDITY_RPBL 2367 0.94 4.69 0.12 84 SpammyFromTLD_02 2311 0.99 4.58 0.20 85 XM_H_Long_From01 2244 4.67 4.45 4.72 86 T_FILL_THIS_FORM_SHORT 2233 1.22 4.42 0.51 87 XMSexyCombo_01 2226 2.36 4.41 1.91 88 XM_B_Phish66 2171 1.89 4.30 1.36 89 URI_NOVOWEL 2137 2.87 4.23 2.57 90 RCVD_IN_RP_RNBL 2085 0.83 4.13 0.10 91 XM_DIRTYINTL 2044 1.03 4.05 0.37 92 XM_B_SpammyTLD 2035 2.51 4.03 2.18 93 XM_B_Investor 2033 1.75 4.03 1.25 94 TR_XM_PHPDW 2003 1.36 3.97 0.79 95 MAILING_LIST_MULTI 1910 2.30 3.78 1.98 96 TR_XM_SpammyWords5 1878 2.16 3.72 1.82 97 TR_XM_PHPForged 1765 1.20 3.50 0.70 98 TR_XM_FormFill2 1747 1.19 3.46 0.70 99 BAYES_95 1741 3.33 3.45 3.30 100 XM_H_PHPOS 1735 1.18 3.44 0.69 101 XMStrtUSub 1725 4.36 3.42 4.56 102 XMNumbers 1703 4.30 3.37 4.50 103 KHOP_HELO_FCRDNS 1682 1.34 3.33 0.90 104 HTML_IMAGE_RATIO_04 1666 5.17 3.30 5.58 105 URI_PHP_REDIR 1649 0.59 3.27 0.01 106 XM_SPF_SoftFail 1648 1.69 3.26 1.34 107 XM_UB99 1645 0.59 3.26 0.00 108 URIBL_DBL_SPAM 1630 0.59 3.23 0.01 109 RCVD_IN_MSPIKE_L5 1612 0.71 3.19 0.17 110 T_TooManySym_01 1607 6.34 3.18 7.04 111 NORDNS_LOW_CONTRAST 1594 0.58 3.16 0.01 112 RCVD_IN_MSPIKE_L4 1578 0.81 3.13 0.30 113 T_XMDrugObfuBody_00 1555 1.18 3.08 0.76 114 T_XMDrugObfuBody_14 1477 2.39 2.93 2.28 115 BOTNET_NORDNS 1456 0.53 2.88 0.02 116 T_XMDrugObfuBody_08 1445 1.45 2.86 1.13 117 XMBody_17 1419 1.03 2.81 0.64 118 RELAYCOUNTRY_CN 1411 0.55 2.80 0.05 119 XMDiploma_00 1387 1.55 2.75 1.29 120 XMSubNoVowel 1362 1.32 2.70 1.01 121 XM_OfRef6 1361 1.13 2.70 0.78 122 RCVD_IN_MSPIKE_L3 1347 0.90 2.67 0.51 123 XM_UB999 1338 0.48 2.65 0.00 124 MIME_CHARSET_FARAWAY 1302 0.65 2.58 0.22 125 XMSubMetaSx_01 1282 1.01 2.54 0.67 126 XMSexyCombo_02 1268 0.93 2.51 0.58 127 RELAYCOUNTRY_FR 1203 0.60 2.38 0.21 128 T_XMHurry_00 1192 1.08 2.36 0.79 129 TR_XM_FormFill 1187 0.43 2.35 0.01 130 HTML_IMAGE_RATIO_06 1176 3.35 2.33 3.57 131 SUBJ_ALL_CAPS 1159 1.83 2.30 1.73 132 CHARSET_FARAWAY_HEADER 1139 0.43 2.26 0.03 133 SHORT_URI_2 1121 1.51 2.22 1.36 134 BAYES_40 1104 4.06 2.19 4.47 135 XM_B_SpammyWords4 1099 0.81 2.18 0.51 136 JH_SPAMMY_HEADERS 1082 0.39 2.14 0.00 137 XM_Body_Dirty_Words_01 1078 0.54 2.14 0.19 138 TR_Symld_Words 1077 1.83 2.13 1.76 139 XM_DK_Undo_01 1072 1.63 2.12 1.52 140 TR_XM_INV_DKIM 1060 0.91 2.10 0.65 141 XMCapTrack 1043 0.69 2.07 0.39 142 XM_H_PHPMailer 1006 0.80 1.99 0.53 143 TR_XM_SB_Phish 1001 1.74 1.98 1.69 144 XM_CamelCaseFrm001 978 1.94 1.94 1.95 145 MIXED_ES 959 0.34 1.90 0.00 146 HTML_IMAGE_RATIO_08 953 2.16 1.89 2.22 147 PDS_OTHER_BAD_TLD 935 0.67 1.85 0.41 148 TR_XM_NoHeaderRelay 919 0.44 1.82 0.13 149 TR_XM_BayesRelay 910 0.33 1.80 0.01 150 XM_B_Unsub2 892 1.29 1.77 1.18 151 URIBL_BLACK 865 0.34 1.71 0.03 152 XM_URI_RBL 862 0.46 1.71 0.19 153 RCVD_IN_IADB_LISTED 856 3.89 1.70 4.38 154 XMBrknScrpt_02 846 1.22 1.68 1.12 155 RCVD_IN_VALIDITY_SAFE 809 6.71 1.60 7.83 156 T_REMOTE_IMAGE 802 2.87 1.59 3.15 157 RELAYCOUNTRY_AU 772 0.54 1.53 0.32 158 XMGenDplmaNmb 768 0.79 1.52 0.63 159 TR_Mismatch_TLD_01 767 0.53 1.52 0.31 160 RELAYCOUNTRY_RU 755 0.29 1.50 0.02 161 XMStockSpam_06 755 0.90 1.50 0.77 162 XMReplyNow 748 0.33 1.48 0.07 163 XM_UB60 744 0.32 1.47 0.07 164 XMSubPhish11 712 1.62 1.41 1.67 165 BAYES_20 692 2.71 1.37 3.00 166 RCVD_IN_IADB_SPF 680 3.36 1.35 3.80 167 DIET_1 671 0.72 1.33 0.58 168 BAYES_00 670 8.93 1.33 10.60 169 RCVD_IN_PSBL 667 0.31 1.32 0.08 170 URI_HEX 662 1.57 1.31 1.63 171 RELAYCOUNTRY_IN 640 0.28 1.27 0.06 172 TM2_M_A_HREF_HREF 639 0.82 1.27 0.72 173 RCVD_IN_IADB_DK 634 2.92 1.26 3.28 174 HTML_FONT_TINY_NORDNS 630 0.28 1.25 0.06 175 RCVD_IN_IADB_SENDERID 615 2.97 1.22 3.36 176 LONG_JUNK_URI 603 0.24 1.19 0.03 177 RCVD_IN_RP_SAFE 602 6.05 1.19 7.12 178 LONG_JUNK_URI3 599 0.24 1.19 0.03 179 RCVD_IN_VALIDITY_CERTIFIED 598 5.88 1.18 6.92 180 DKIM_ADSP_CUSTOM_MED 591 0.97 1.17 0.93 181 HTTPS_HTTP_MISMATCH 590 0.67 1.17 0.56 182 TR_LOTS_OF_MONEY2 589 0.28 1.17 0.09 183 T_MONEY_PERCENT 589 0.28 1.17 0.09 184 XMHTML_After_End 584 0.62 1.16 0.50 185 SHOPIFY_IMG_NOT_RCVD_SFY 583 0.47 1.15 0.32 186 XM_H_PHPOS_M 579 0.29 1.15 0.10 187 FROM_SUSPICIOUS_NTLD 574 0.25 1.14 0.05 188 HELO_NODOT 566 0.57 1.12 0.44 189 HELO_NO_DOMAIN 565 0.57 1.12 0.44 190 MONEY_NOHTML 565 0.27 1.12 0.08 191 XM_B_COVIDMETA 565 0.78 1.12 0.70 192 T_Symld_Words_02 558 0.51 1.11 0.38 193 XM_H_Undi_Recip 553 0.32 1.10 0.14 194 XMSubMetaI_00 550 0.73 1.09 0.65 195 TR_MetaPhish_Combo_01 548 0.88 1.09 0.84 196 DKIM_ADSP_NXDOMAIN 545 0.97 1.08 0.94 197 RELAYCOUNTRY_NL 533 0.33 1.06 0.17 198 TR_XM_COVIDMETA4 532 0.41 1.05 0.27 199 FROM_OFFERS 528 0.34 1.05 0.18 200 NO_DNS_FOR_FROM 522 0.91 1.03 0.88 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 229513 99.98 99.97 99.98 2 HTML_MESSAGE 193754 85.94 92.95 84.40 3 RELAYCOUNTRY_US 183026 79.01 75.73 79.73 4 DKIM_SIGNED 175171 77.75 84.33 76.31 5 XM_DK_Pass 170459 75.08 78.83 74.26 6 DKIM_VALID 166946 73.34 76.15 72.73 7 XM_B_Unicode 161144 71.22 75.89 70.20 8 DKIM_VALID_AU 133606 57.55 54.58 58.20 9 XMListUnsubscribeExists 126033 57.75 70.69 54.90 10 BAYES_50 119951 50.26 41.21 52.25 11 XM_B_SpammyWords 107584 50.94 69.46 46.87 12 XM_B_Unicode3 100268 43.60 43.24 43.68 13 HTML_FONT_LOW_CONTRAST 71210 31.17 31.85 31.02 14 RCVD_IN_MSPIKE_WL 69780 28.61 20.49 30.40 15 LOC_TINY_FONT_1 66521 29.34 30.97 28.98 16 DKIM_VALID_EF 63645 27.78 28.01 27.73 17 FVGT_m_MULTI_ODD 58091 26.68 32.92 25.31 18 MIME_HTML_ONLY 53693 24.30 28.42 23.39 19 T_TM2_M_HEADER_IN_MSG 52917 22.53 20.15 23.05 20 XMSubLong 48629 21.19 21.22 21.18 21 XM_B_SpammyWords2 47462 23.87 38.38 20.68 22 RCVD_IN_MSPIKE_H2 43905 20.42 26.33 19.13 23 T_KAM_HTML_FONT_INVALID 41416 19.85 28.06 18.04 24 ALL_TRUSTED 40479 15.33 4.88 17.63 25 RCVD_IN_MSPIKE_H3 34455 14.83 14.03 15.01 26 USER_IN_DEF_DKIM_WL 34026 12.26 0.62 14.82 27 XM_Body_Dirty_Words 33302 16.49 25.53 14.51 28 XM_Multi_Part_URI 32827 14.91 17.69 14.30 29 RCVD_IN_MSPIKE_H4 29861 11.76 6.07 13.01 30 XM_B_Unsub 28622 12.63 13.34 12.47 31 XM_DK_Undo_02 25472 17.98 49.29 11.10 32 BAYES_00 24324 8.93 1.33 10.60 33 BAYES_60 23347 9.51 6.48 10.17 34 UNPARSEABLE_RELAY 22889 10.01 10.20 9.97 35 LOTS_OF_MONEY 21866 10.45 14.63 9.53 36 XM_DKIMWhitelistDomains 21728 7.76 0.00 9.47 37 BAYES_99 21064 14.11 36.55 9.18 38 XM_Evil_Numbers_Gen 21052 8.63 6.15 9.17 39 LotsOfNums_01 20600 8.35 5.53 8.97 40 XM_SendGrid 20176 8.54 7.42 8.79 41 HTML_IMAGE_RATIO_02 19736 8.41 7.58 8.60 42 TR_XM_UnparsRelay 18034 8.21 9.81 7.86 43 RCVD_IN_VALIDITY_SAFE 17974 6.71 1.60 7.83 44 TooManyTo_001 17158 7.48 7.53 7.47 45 TR_XM_DKIM_Undo 17073 13.40 40.54 7.44 46 BAYES_999 17009 11.23 28.58 7.41 47 RCVD_IN_RP_SAFE 16349 6.05 1.19 7.12 48 T_TooManySym_01 16159 6.34 3.18 7.04 49 RCVD_IN_VALIDITY_CERTIFIED 15881 5.88 1.18 6.92 50 TR_XM_DK_Bayes 15522 5.71 0.93 6.76 51 TR_XM_DK_Bayes1 15189 5.59 0.92 6.62 52 MPART_ALT_DIFF 14895 7.38 11.44 6.49 53 RCVD_IN_RP_CERTIFIED 14511 5.32 0.79 6.32 54 BOTNET_IPINHOSTNAME 13974 7.99 16.62 6.09 55 TR_XM_DK_Bayes2 13343 4.88 0.62 5.81 56 TR_XM_DK_SendGrid 13272 5.60 4.76 5.78 57 TR_XM_SpammyWords4 12897 6.89 12.68 5.62 58 HTML_IMAGE_RATIO_04 12798 5.17 3.30 5.58 59 MIME_QP_LONG_LINE 12328 5.31 5.02 5.37 60 BAYES_80 11851 5.46 6.81 5.16 61 XMSubMetaSx_00 11743 5.74 8.58 5.12 62 TM2_M_URI_OPT_OUT 11507 5.16 5.84 5.01 63 IN_ZIMBRA_NJ_WHITELIST 10897 3.90 0.06 4.75 64 XM_H_Long_From01 10827 4.67 4.45 4.72 65 XMSexyCombo_05 10685 5.78 10.88 4.65 66 T_TooManySym_02 10575 3.89 0.62 4.61 67 XMStrtUSub 10476 4.36 3.42 4.56 68 XM_B_SpammyWords3 10431 5.84 11.75 4.54 69 XMNumbers 10328 4.30 3.37 4.50 70 BAYES_40 10266 4.06 2.19 4.47 71 MIME_HTML_ONLY_MULTI 10168 5.01 7.64 4.43 72 RCVD_IN_IADB_LISTED 10045 3.89 1.70 4.38 73 XM_UncommonTLD01 8986 5.39 12.11 3.91 74 XM_B_Phish_Phrases 8873 4.12 5.27 3.87 75 RCVD_IN_IADB_SPF 8725 3.36 1.35 3.80 76 FROM_EXCESS_BASE64 8632 3.25 0.96 3.76 77 ANY_BOUNCE_MESSAGE 8378 3.13 0.75 3.65 78 BOUNCE_MESSAGE 8378 3.13 0.75 3.65 79 DKIM_INVALID 8225 4.41 8.19 3.58 80 HTML_IMAGE_RATIO_06 8204 3.35 2.33 3.57 81 RCVD_IN_IADB_SENDERID 7706 2.97 1.22 3.36 82 RELAYCOUNTRY_META 7606 7.06 24.10 3.31 83 BAYES_95 7585 3.33 3.45 3.30 84 INVALID_MSGID 7577 2.75 0.22 3.30 85 RCVD_IN_IADB_DK 7532 2.92 1.26 3.28 86 T_REMOTE_IMAGE 7232 2.87 1.59 3.15 87 MSGID_NOFQDN1 7167 2.58 0.10 3.12 88 XM_H_Trusted_IP 6978 2.49 0.00 3.04 89 TR_XM_PhishingBody 6969 3.64 6.37 3.04 90 BAYES_20 6892 2.71 1.37 3.00 91 RCVD_IN_IADB_VOUCHED 6562 2.52 0.98 2.86 92 TO_MALFORMED 6012 2.16 0.05 2.62 93 URI_NOVOWEL 5892 2.87 4.23 2.57 94 MIME_HTML_MOSTLY 5861 3.27 6.53 2.55 95 RCVD_IN_MSPIKE_H5 5464 2.02 0.39 2.38 96 XM_PDF 5226 1.98 0.62 2.28 97 T_XMDrugObfuBody_14 5223 2.39 2.93 2.28 98 HTML_IMAGE_RATIO_08 5101 2.16 1.89 2.22 99 TVD_RCVD_IP 5029 1.83 0.17 2.19 100 XM_B_SpammyTLD 4997 2.51 4.03 2.18 101 XMBdyGiftCard01 4916 1.93 0.96 2.14 102 TR_XM_SpammyWords2 4614 4.36 15.05 2.01 103 MAILING_LIST_MULTI 4537 2.30 3.78 1.98 104 HTML_MIME_NO_HTML_TAG 4483 2.81 6.69 1.95 105 XM_CamelCaseFrm001 4465 1.94 1.94 1.95 106 XMSexyCombo_01 4375 2.36 4.41 1.91 107 IN_HORDE_ADDRESS_BOOK 4361 1.57 0.06 1.90 108 TM2_M_VERY_LONG_WORD 4357 2.91 7.49 1.90 109 BOTNET 4311 4.51 16.50 1.88 110 BAYES_05 4272 1.63 0.58 1.86 111 RCVD_IN_IADB_OPTIN 4177 1.63 0.76 1.82 112 TR_XM_SpammyWords5 4173 2.16 3.72 1.82 113 TR_Symld_Words 4035 1.83 2.13 1.76 114 SUBJ_ALL_CAPS 3968 1.83 2.30 1.73 115 TR_XM_SB_Phish 3870 1.74 1.98 1.69 116 XMSubPhish11 3838 1.62 1.41 1.67 117 XMBSHREFv2 3804 1.40 0.22 1.66 118 URI_HEX 3735 1.57 1.31 1.63 119 XM_GoogleGroups 3642 2.69 7.69 1.59 120 RCVD_IN_BL_SPAMCOP_NET 3551 3.34 11.47 1.55 121 TR_XM_SpammyRelay 3537 3.69 13.48 1.54 122 XM_DK_Undo_01 3500 1.63 2.12 1.52 123 TR_XM_MaxUnsub 3349 2.18 5.46 1.46 124 TVD_SPACE_RATIO 3152 1.14 0.09 1.37 125 XM_B_Phish66 3118 1.89 4.30 1.36 126 SHORT_URI_2 3116 1.51 2.22 1.36 127 XM_SPF_SoftFail 3085 1.69 3.26 1.34 128 XMGappySubj_01 3027 1.10 0.09 1.32 129 UNTRUSTED_Relay 2998 3.33 12.53 1.31 130 HTML_FONT_FACE_BAD 2973 1.16 0.53 1.30 131 XMDiploma_00 2967 1.55 2.75 1.29 132 XM_B_Investor 2858 1.75 4.03 1.25 133 XMLngstWrd_00 2843 2.08 5.89 1.24 134 XMBody_95 2839 1.05 0.21 1.24 135 XM_B_Unsub2 2707 1.29 1.77 1.18 136 XM_H_Long_From02 2694 1.10 0.75 1.17 137 XMLngstWrd_01 2660 2.00 5.82 1.16 138 T_XMDrugObfuBody_08 2605 1.45 2.86 1.13 139 TooManyTo_002 2583 1.10 1.00 1.13 140 XMBrknScrpt_02 2576 1.22 1.68 1.12 141 T_TooManySym_03 2375 0.88 0.20 1.03 142 XMLngstWrd_02 2338 1.80 5.35 1.02 143 XMSubNoVowel 2326 1.32 2.70 1.01 144 HTML_IMAGE_ONLY_20 2320 0.86 0.18 1.01 145 XM_D_tchamptons_WL 2306 0.82 0.00 1.00 146 RCVD_IN_MSPIKE_BL 2283 2.44 9.03 0.99 147 TR_XM_MSPIKECOMBO 2261 2.43 8.99 0.98 148 DKIM_ADSP_NXDOMAIN 2169 0.97 1.08 0.94 149 RELAYCOUNTRY_CA 2146 2.07 7.21 0.93 150 DKIM_ADSP_CUSTOM_MED 2128 0.97 1.17 0.93 151 KHOP_HELO_FCRDNS 2068 1.34 3.33 0.90 152 XMLngstWrd_03 2040 1.69 5.32 0.89 153 NO_DNS_FOR_FROM 2016 0.91 1.03 0.88 154 XM_UB50 1983 1.71 5.54 0.86 155 XMPhish30 1960 0.85 0.86 0.85 156 TR_MetaPhish_Combo_01 1928 0.88 1.09 0.84 157 TooManyTo_003 1868 0.82 0.83 0.81 158 XMLngstWrd_04 1865 1.61 5.25 0.81 159 XM_ProductURIs 1854 0.80 0.75 0.81 160 XM_B_COPY_HTML 1846 0.78 0.67 0.80 161 HTML_TAG_BALANCE_BODY 1839 0.78 0.68 0.80 162 T_XMHurry_00 1819 1.08 2.36 0.79 163 TR_XM_PHPDW 1812 1.36 3.97 0.79 164 XM_OfRef6 1793 1.13 2.70 0.78 165 XMStockSpam_06 1763 0.90 1.50 0.77 166 T_XMDrugObfuBody_00 1746 1.18 3.08 0.76 167 URI_TRY_3LD 1721 0.74 0.71 0.75 168 TM2_M_A_HREF_HREF 1644 0.82 1.27 0.72 169 XMHTMLBadTable_001 1639 0.69 0.57 0.71 170 XM_B_COVIDMETA 1615 0.78 1.12 0.70 171 TR_XM_PHPForged 1604 1.20 3.50 0.70 172 TR_XM_FormFill2 1596 1.19 3.46 0.70 173 TR_XM_MaxWHORU 1593 0.75 1.02 0.69 174 TR_MSPIKEBAYES00 1583 0.57 0.01 0.69 175 XM_H_PHPOS 1583 1.18 3.44 0.69 176 XMSubMetaSx_01 1534 1.01 2.54 0.67 177 RDNS_DYNAMIC 1520 0.67 0.71 0.66 178 XMSubMetaI_00 1503 0.73 1.09 0.65 179 TR_XM_INV_DKIM 1497 0.91 2.10 0.65 180 XMBody_17 1474 1.03 2.81 0.64 181 XMGenDplmaNmb 1444 0.79 1.52 0.63 182 NML_ADSP_CUSTOM_MED 1398 0.68 1.02 0.61 183 TooManyTo_004 1353 0.60 0.65 0.59 184 USER_IN_WHITELIST 1345 0.48 0.00 0.59 185 USER_IN_WELCOMELIST 1345 0.48 0.00 0.59 186 XMBody_78 1341 0.54 0.32 0.58 187 DIET_1 1339 0.72 1.33 0.58 188 MPART_ALT_DIFF_COUNT 1336 0.61 0.72 0.58 189 XMSexyCombo_02 1333 0.93 2.51 0.58 190 PLING_QUERY 1330 0.59 0.66 0.58 191 FORGED_GMAIL_RCVD 1304 0.64 0.97 0.57 192 HTTPS_HTTP_MISMATCH 1286 0.67 1.17 0.56 193 HTML_TITLE_SUBJ_DIFF 1282 1.44 5.43 0.56 194 DATE_IN_PAST_03_06 1257 0.58 0.74 0.55 195 HTML_TEXT_INVISIBLE_STYLE 1254 0.53 0.45 0.55 196 UPPERCASE_75_100 1253 1.40 5.27 0.55 197 XM_H_PHPMailer 1225 0.80 1.99 0.53 198 XMPhish14 1201 0.52 0.52 0.52 199 TooManyTo_005 1193 0.53 0.60 0.52 200 T_FILL_THIS_FORM_SHORT 1179 1.22 4.42 0.51 ----------------------------------------------------------------------