Email: 636714 Autolearn: 0 AvgScore: 0.11 AvgScanTime: 1.87 sec Spam: 91544 Autolearn: 0 AvgScore: 12.04 AvgScanTime: 3.68 sec Ham: 545170 Autolearn: 0 AvgScore: -1.90 AvgScanTime: 1.57 sec Time Spent Running SA: 331.11 hours Time Spent Processing Spam: 93.64 hours Time Spent Processing Ham: 237.47 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 89033 98.06 97.26 98.20 2 HTML_MESSAGE 86157 89.51 94.12 88.73 3 DKIM_SIGNED 69558 76.19 75.98 76.22 4 XM_DK_Pass 67573 74.81 73.81 74.97 5 XM_B_Unicode 64680 69.78 70.65 69.64 6 RELAYCOUNTRY_US 63652 81.30 69.53 83.28 7 XMListUnsubscribeExists 60870 53.88 66.49 51.77 8 DKIM_VALID 56154 69.40 61.34 70.76 9 XM_DK_Undo_02 48235 17.79 52.69 11.93 10 DKIM_VALID_AU 40697 52.06 44.46 53.34 11 MIME_HTML_ONLY 38728 25.10 42.31 22.21 12 BAYES_99 37355 12.48 40.81 7.72 13 XM_B_Unicode3 32980 39.40 36.03 39.97 14 BAYES_50 31726 50.72 34.66 53.42 15 BAYES_999 30762 10.04 33.60 6.08 16 RELAYCOUNTRY_META 29454 9.20 32.17 5.34 17 LOC_TINY_FONT_1 29302 25.36 32.01 24.25 18 DKIM_VALID_EF 27462 27.64 30.00 27.24 19 BOTNET 27076 6.87 29.58 3.05 20 XMSubLong 25335 22.24 27.68 21.33 21 T_KAM_HTML_FONT_INVALID 23822 19.89 26.02 18.86 22 HTML_FONT_LOW_CONTRAST 22624 26.33 24.71 26.61 23 FVGT_m_MULTI_ODD 21825 21.95 23.84 21.63 24 RCVD_IN_MSPIKE_H2 19915 23.82 21.75 24.17 25 UNTRUSTED_Relay 19877 4.71 21.71 1.86 26 XM_UncommonTLD01 17680 5.51 19.31 3.20 27 T_TM2_M_HEADER_IN_MSG 17232 26.02 18.82 27.23 28 BOTNET_IPINHOSTNAME 16657 7.12 18.20 5.27 29 XM_Body_Dirty_Words 16389 14.43 17.90 13.84 30 XM_Multi_Part_URI 14353 12.24 15.68 11.66 31 LOTS_OF_MONEY 14135 9.91 15.44 8.98 32 DKIM_INVALID 13404 6.78 14.64 5.47 33 HTML_IMAGE_RATIO_02 10258 7.73 11.21 7.15 34 XM_B_Phish_Phrases 10140 8.02 11.08 7.50 35 NO_DNS_FOR_FROM 9990 3.89 10.91 2.71 36 XM_B_Unsub 9756 11.98 10.66 12.20 37 T_REMOTE_IMAGE 9671 4.58 10.56 3.58 38 XMSexyCombo_05 9617 5.46 10.51 4.61 39 RCVD_IN_MSPIKE_BL 9612 1.93 10.50 0.49 40 BODY_URI_ONLY 8610 1.48 9.41 0.15 41 XM_Evil_Numbers_Gen 8595 8.31 9.39 8.13 42 RCVD_IN_BL_SPAMCOP_NET 7288 2.59 7.96 1.69 43 LotsOfNums_01 7120 8.72 7.78 8.88 44 RELAYCOUNTRY_CA 6880 2.58 7.52 1.75 45 XM_UB99 6870 1.09 7.50 0.01 46 BAYES_60 6869 6.62 7.50 6.47 47 RCVD_IN_MSPIKE_WL 6836 21.73 7.47 24.13 48 XM_CamelCaseFrm001 6671 2.94 7.29 2.21 49 URIBL_SBL_A 6588 1.23 7.20 0.23 50 HTML_MIME_NO_HTML_TAG 6484 3.28 7.08 2.64 51 XM_UB50 6346 1.95 6.93 1.11 52 BAYES_80 6327 4.54 6.91 4.15 53 TR_XM_MaxBayes 6021 1.01 6.58 0.08 54 BOTNET_NORDNS 6005 0.96 6.56 0.02 55 RCVD_IN_MSPIKE_L3 5977 1.18 6.53 0.29 56 TR_XM_PhishingBody 5931 3.72 6.48 3.25 57 XM_B_COVIDMETA 5921 3.01 6.47 2.43 58 SpammyFromTLD_01 5911 1.68 6.46 0.88 59 MPART_ALT_DIFF 5761 6.17 6.29 6.15 60 XM_UB999 5539 0.87 6.05 0.00 61 XMSubMetaSx_00 5499 4.20 6.01 3.89 62 TooManyTo_001 5456 8.70 5.96 9.16 63 XMBody_17 5369 1.54 5.86 0.81 64 XM_SPF_SoftFail 5350 2.23 5.84 1.62 65 HTML_IMAGE_RATIO_04 5309 6.44 5.80 6.54 66 TR_XM_COVIDMETA4 5215 1.56 5.70 0.87 67 T_HTML_TAG_BALANCE_CENTER 5118 0.98 5.59 0.21 68 XMNumbers 5108 3.45 5.58 3.09 69 RELAYCOUNTRY_FR 5066 1.03 5.53 0.27 70 XM_H_Long_From01 5045 5.63 5.51 5.65 71 RELAYCOUNTRY_DE 5008 1.12 5.47 0.39 72 RCVD_IN_RP_RNBL 4833 0.81 5.28 0.06 73 T_XMDrugObfuBody_08 4682 2.10 5.11 1.60 74 XMHTML_After_End 4393 1.40 4.80 0.83 75 TR_XM_INV_DKIM 4331 0.86 4.73 0.21 76 MIME_HTML_MOSTLY 4116 2.81 4.50 2.53 77 UNPARSEABLE_RELAY 4096 6.91 4.47 7.32 78 RCVD_IN_MSPIKE_H3 4078 12.48 4.45 13.82 79 XM_BadFromFormat 4068 0.84 4.44 0.24 80 XM_DIRTYINTL 4036 1.14 4.41 0.60 81 XM_B_SpammyTLD 3974 2.47 4.34 2.16 82 XM_B_Phish66 3832 2.20 4.19 1.87 83 HTML_IMAGE_ONLY_08 3707 0.77 4.05 0.22 84 XMStrtUSub 3660 4.88 4.00 5.03 85 SpammyFromTLD_02 3635 1.00 3.97 0.50 86 XM_OfRef6 3611 1.55 3.94 1.15 87 HTML_SHORT_LINK_IMG_1 3587 0.66 3.92 0.12 88 HDRS_LCASE_IMGONLY 3483 0.65 3.80 0.12 89 BAYES_95 3385 2.64 3.70 2.47 90 XM_SendGrid 3329 6.15 3.64 6.57 91 RCVD_IN_PSBL 3305 0.60 3.61 0.09 92 XMBrknScrpt_02 3239 1.44 3.54 1.08 93 TR_XM_MaxSPIKE 3146 0.52 3.44 0.03 94 KHOP_HELO_FCRDNS 3091 2.00 3.38 1.77 95 XM_URI_RBL 2944 0.67 3.22 0.24 96 FROM_EXCESS_BASE64 2872 2.93 3.14 2.89 97 MIME_QP_LONG_LINE 2868 5.60 3.13 6.01 98 TM2_M_URI_OPT_OUT 2867 3.96 3.13 4.10 99 HTML_IMAGE_RATIO_06 2749 3.82 3.00 3.96 100 T_PDS_OTHER_BAD_TLD 2722 0.91 2.97 0.57 101 RCVD_IN_MSPIKE_H4 2675 8.29 2.92 9.20 102 FROM_SUSPICIOUS_NTLD 2583 0.50 2.82 0.11 103 T_TooManySym_01 2530 4.19 2.76 4.43 104 RCVD_IN_MSPIKE_L5 2529 0.51 2.76 0.13 105 XM_JunkDunk 2509 0.39 2.74 0.00 106 FROM_SUSPICIOUS_NTLD_FP 2483 0.48 2.71 0.11 107 XM_UB60 2453 0.49 2.68 0.12 108 SCRIPT_GIBBERISH 2440 0.39 2.67 0.00 109 DATE_IN_PAST_06_12 2408 0.51 2.63 0.16 110 TR_LOTS_OF_MONEY3 2397 0.97 2.62 0.69 111 DATE_IN_PAST_03_06 2369 0.44 2.59 0.08 112 TR_XM_COVIDMETA1 2267 0.84 2.48 0.57 113 TR_XM_PHPDW 2201 0.81 2.40 0.54 114 XM_B_Unsub2 2166 3.85 2.37 4.09 115 TR_XM_PHPForged 2163 0.78 2.36 0.51 116 TR_Mismatch_TLD_01 2151 0.56 2.35 0.26 117 TR_XM_FormFill2 2147 0.78 2.35 0.51 118 BAYES_40 2141 4.40 2.34 4.75 119 XM_H_PHPOS 2137 0.77 2.33 0.51 120 MIME_HTML_ONLY_MULTI 2122 3.80 2.32 4.05 121 XMDiploma_00 2114 1.57 2.31 1.44 122 HTML_IMAGE_RATIO_08 2111 2.54 2.31 2.58 123 XM_UB80 1973 0.35 2.16 0.05 124 LongTLD 1967 0.46 2.15 0.18 125 SUBJ_ALL_CAPS 1827 1.50 2.00 1.41 126 XMSexyCombo_01 1793 0.92 1.96 0.75 127 TR_XM_RelayPhish 1792 0.44 1.96 0.18 128 RELAYCOUNTRY_GB 1752 1.11 1.91 0.97 129 T_XMHurry_00 1737 1.12 1.90 0.99 130 T_XMDrugObfuBody_14 1680 1.66 1.84 1.63 131 BAYES_20 1671 3.35 1.83 3.61 132 URI_PHP_REDIR 1645 0.31 1.80 0.06 133 T_XMDrugObfuBody_00 1629 0.85 1.78 0.69 134 RELAYCOUNTRY_NL 1627 0.45 1.78 0.23 135 XMGenDplmaNmb 1618 0.92 1.77 0.77 136 URI_HEX 1607 1.45 1.76 1.40 137 XM_ProductURIs 1578 1.02 1.72 0.90 138 HDRS_MISSP 1567 0.30 1.71 0.06 139 URI_TRY_3LD 1560 1.53 1.70 1.50 140 DKIM_ADSP_CUSTOM_MED 1462 1.37 1.60 1.33 141 URI_NO_WWW_INFO_CGI 1427 0.26 1.56 0.04 142 TM2_M_VERY_LONG_WORD 1385 1.26 1.51 1.22 143 T_TooManySym_02 1373 1.98 1.50 2.06 144 TR_Symld_Words 1317 1.54 1.44 1.56 145 MAILING_LIST_MULTI 1307 2.12 1.43 2.24 146 NML_ADSP_CUSTOM_MED 1305 1.02 1.43 0.95 147 TR_XM_DK_SendGrid 1291 3.52 1.41 3.87 148 T_Symld_Words_02 1288 0.64 1.41 0.51 149 XM_OfRef7 1278 0.32 1.40 0.14 150 DKIM_ADSP_NXDOMAIN 1265 0.42 1.38 0.26 151 XM_UB95 1262 0.22 1.38 0.02 152 TR_Mismatch_TLD_02 1238 0.26 1.35 0.08 153 XM_DK_Undo_01 1182 1.72 1.29 1.79 154 RDNS_DYNAMIC 1165 0.46 1.27 0.32 155 ALL_TRUSTED 1123 11.18 1.23 12.85 156 BAYES_00 1098 12.88 1.20 14.84 157 XMStockSpam_06 1089 1.11 1.19 1.10 158 RCVD_IN_MSPIKE_L4 1081 0.23 1.18 0.07 159 FROM_ADDR_WS 1079 0.17 1.18 0.01 160 RCVD_IN_IADB_LISTED 1073 4.59 1.17 5.17 161 DIET_1 1071 0.50 1.17 0.39 162 XMSubNoVowel 1048 1.15 1.14 1.16 163 T_FILL_THIS_FORM_SHORT 1037 0.82 1.13 0.77 164 FILL_THIS_FORM 1034 0.39 1.13 0.26 165 T_TooManySym_03 1031 0.74 1.13 0.68 166 HK_RANDOM_REPLYTO 1019 0.32 1.11 0.19 167 XMSubMetaSxObfu_03 1018 0.61 1.11 0.52 168 FORGED_GMAIL_RCVD 1012 0.65 1.11 0.58 169 XMBody_78 988 0.59 1.08 0.51 170 XM_PDF 981 4.08 1.07 4.59 171 XM_H_PHPMailer 980 0.65 1.07 0.58 172 RCVD_IN_IADB_SPF 969 4.04 1.06 4.54 173 URIBL_BLACK 967 0.19 1.06 0.05 174 XM_H_MailChimp 950 0.33 1.04 0.21 175 BAYES_05 949 2.35 1.04 2.57 176 RELAYCOUNTRY_IN 946 0.24 1.03 0.11 177 URI_NOVOWEL 941 0.49 1.03 0.40 178 DATE_IN_PAST_12_24 938 0.21 1.02 0.07 179 RCVD_IN_IADB_DK 933 3.58 1.02 4.01 180 XMPhish30 930 0.58 1.02 0.51 181 RCVD_IN_IADB_SENDERID 924 3.61 1.01 4.04 182 URIBL_DBL_SPAM 920 0.16 1.00 0.01 183 XMReplyNow 916 0.23 1.00 0.10 184 XM_XX_Yahoo 896 0.21 0.98 0.08 185 T_MONEY_PERCENT 893 0.52 0.98 0.44 186 TR_LOTS_OF_MONEY2 893 0.52 0.98 0.44 187 TR_XM_COVIDMETA3 868 0.17 0.95 0.04 188 TR_MetaPhish_Combo_01 867 0.77 0.95 0.74 189 XMSubMetaI_00 856 0.52 0.94 0.45 190 MIME_CHARSET_FARAWAY 855 0.22 0.93 0.10 191 HELO_NODOT 840 1.27 0.92 1.33 192 HELO_NO_DOMAIN 838 1.27 0.92 1.33 193 TooManyTo_002 796 1.83 0.87 1.99 194 XM_H_PHPOS_M 788 0.30 0.86 0.21 195 XMMoneyMeta_00 776 0.60 0.85 0.56 196 HTTPS_HTTP_MISMATCH 774 0.70 0.85 0.68 197 CHARSET_FARAWAY_HEADER 769 0.15 0.84 0.03 198 XMPhish14 765 0.48 0.84 0.42 199 XM_H_Long_From02 758 1.15 0.83 1.21 200 XMBdyGiftCard01 739 0.97 0.81 1.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 535346 98.06 97.26 98.20 2 HTML_MESSAGE 483752 89.51 94.12 88.73 3 RELAYCOUNTRY_US 454021 81.30 69.53 83.28 4 DKIM_SIGNED 415538 76.19 75.98 76.22 5 XM_DK_Pass 408740 74.81 73.81 74.97 6 DKIM_VALID 385743 69.40 61.34 70.76 7 XM_B_Unicode 379650 69.78 70.65 69.64 8 BAYES_50 291238 50.72 34.66 53.42 9 DKIM_VALID_AU 290797 52.06 44.46 53.34 10 XMListUnsubscribeExists 282218 53.88 66.49 51.77 11 XM_B_Unicode3 217907 39.40 36.03 39.97 12 DKIM_VALID_EF 148495 27.64 30.00 27.24 13 T_TM2_M_HEADER_IN_MSG 148445 26.02 18.82 27.23 14 HTML_FONT_LOW_CONTRAST 145049 26.33 24.71 26.61 15 LOC_TINY_FONT_1 132188 25.36 32.01 24.25 16 RCVD_IN_MSPIKE_H2 131758 23.82 21.75 24.17 17 RCVD_IN_MSPIKE_WL 131539 21.73 7.47 24.13 18 MIME_HTML_ONLY 121072 25.10 42.31 22.21 19 FVGT_m_MULTI_ODD 117934 21.95 23.84 21.63 20 XMSubLong 116287 22.24 27.68 21.33 21 T_KAM_HTML_FONT_INVALID 102846 19.89 26.02 18.86 22 BAYES_00 80907 12.88 1.20 14.84 23 XM_Body_Dirty_Words 75468 14.43 17.90 13.84 24 RCVD_IN_MSPIKE_H3 75358 12.48 4.45 13.82 25 ALL_TRUSTED 70034 11.18 1.23 12.85 26 XM_B_Unsub 66529 11.98 10.66 12.20 27 XM_DK_Undo_02 65013 17.79 52.69 11.93 28 XM_Multi_Part_URI 63575 12.24 15.68 11.66 29 RCVD_IN_MSPIKE_H4 50136 8.29 2.92 9.20 30 TooManyTo_001 49929 8.70 5.96 9.16 31 LOTS_OF_MONEY 48965 9.91 15.44 8.98 32 LotsOfNums_01 48403 8.72 7.78 8.88 33 XM_Evil_Numbers_Gen 44310 8.31 9.39 8.13 34 TR_XM_DK_Bayes 43403 6.91 0.65 7.96 35 BAYES_99 42089 12.48 40.81 7.72 36 IN_ZIMBRA_NJ_WHITELIST 41426 6.51 0.04 7.60 37 XM_B_Phish_Phrases 40909 8.02 11.08 7.50 38 TR_XM_DK_Bayes1 40382 6.41 0.48 7.41 39 RCVD_IN_RP_SAFE 40042 6.39 0.72 7.34 40 UNPARSEABLE_RELAY 39916 6.91 4.47 7.32 41 HTML_IMAGE_RATIO_02 38962 7.73 11.21 7.15 42 RCVD_IN_RP_CERTIFIED 37116 5.90 0.47 6.81 43 XM_DKIMWhitelistDomains 36507 5.73 0.01 6.70 44 XM_SendGrid 35817 6.15 3.64 6.57 45 TR_XM_DK_Bayes2 35681 5.64 0.23 6.54 46 HTML_IMAGE_RATIO_04 35676 6.44 5.80 6.54 47 BAYES_60 35282 6.62 7.50 6.47 48 MPART_ALT_DIFF 33507 6.17 6.29 6.15 49 BAYES_999 33173 10.04 33.60 6.08 50 MIME_QP_LONG_LINE 32768 5.60 3.13 6.01 51 XM_H_Long_From01 30782 5.63 5.51 5.65 52 DKIM_INVALID 29795 6.78 14.64 5.47 53 RELAYCOUNTRY_META 29109 9.20 32.17 5.34 54 BOTNET_IPINHOSTNAME 28705 7.12 18.20 5.27 55 RCVD_IN_IADB_LISTED 28163 4.59 1.17 5.17 56 XMStrtUSub 27424 4.88 4.00 5.03 57 BAYES_40 25902 4.40 2.34 4.75 58 XMSexyCombo_05 25125 5.46 10.51 4.61 59 XM_PDF 25006 4.08 1.07 4.59 60 RCVD_IN_IADB_SPF 24761 4.04 1.06 4.54 61 T_TooManySym_01 24133 4.19 2.76 4.43 62 BAYES_80 22608 4.54 6.91 4.15 63 TM2_M_URI_OPT_OUT 22326 3.96 3.13 4.10 64 XM_B_Unsub2 22324 3.85 2.37 4.09 65 MIME_HTML_ONLY_MULTI 22083 3.80 2.32 4.05 66 RCVD_IN_IADB_SENDERID 22048 3.61 1.01 4.04 67 RCVD_IN_IADB_DK 21882 3.58 1.02 4.01 68 HTML_IMAGE_RATIO_06 21576 3.82 3.00 3.96 69 XMSubMetaSx_00 21232 4.20 6.01 3.89 70 TR_XM_DK_SendGrid 21108 3.52 1.41 3.87 71 XM_H_Trusted_IP 20954 3.29 0.00 3.84 72 BAYES_20 19665 3.35 1.83 3.61 73 T_REMOTE_IMAGE 19500 4.58 10.56 3.58 74 ANY_BOUNCE_MESSAGE 18346 2.95 0.50 3.37 75 BOUNCE_MESSAGE 18341 2.95 0.50 3.36 76 TR_XM_PhishingBody 17729 3.72 6.48 3.25 77 XM_UncommonTLD01 17428 5.51 19.31 3.20 78 XMNumbers 16831 3.45 5.58 3.09 79 RCVD_IN_IADB_VOUCHED 16721 2.69 0.41 3.07 80 BOTNET 16636 6.87 29.58 3.05 81 FROM_EXCESS_BASE64 15766 2.93 3.14 2.89 82 NO_DNS_FOR_FROM 14789 3.89 10.91 2.71 83 HTML_MIME_NO_HTML_TAG 14397 3.28 7.08 2.64 84 HTML_IMAGE_RATIO_08 14060 2.54 2.31 2.58 85 BAYES_05 14024 2.35 1.04 2.57 86 MIME_HTML_MOSTLY 13802 2.81 4.50 2.53 87 BAYES_95 13453 2.64 3.70 2.47 88 XM_B_COVIDMETA 13260 3.01 6.47 2.43 89 MAILING_LIST_MULTI 12191 2.12 1.43 2.24 90 XM_CamelCaseFrm001 12025 2.94 7.29 2.21 91 XM_B_SpammyTLD 11765 2.47 4.34 2.16 92 T_TooManySym_02 11234 1.98 1.50 2.06 93 TooManyTo_002 10846 1.83 0.87 1.99 94 RCVD_IN_IADB_OPTIN 10313 1.67 0.37 1.89 95 XM_B_Phish66 10195 2.20 4.19 1.87 96 UNTRUSTED_Relay 10125 4.71 21.71 1.86 97 HTML_FONT_FACE_BAD 10071 1.66 0.58 1.85 98 XM_DK_Undo_01 9747 1.72 1.29 1.79 99 KHOP_HELO_FCRDNS 9669 2.00 3.38 1.77 100 RELAYCOUNTRY_CA 9563 2.58 7.52 1.75 101 RCVD_IN_BL_SPAMCOP_NET 9212 2.59 7.96 1.69 102 T_XMDrugObfuBody_14 8883 1.66 1.84 1.63 103 XM_SPF_SoftFail 8854 2.23 5.84 1.62 104 TVD_RCVD_IP 8788 1.44 0.42 1.61 105 T_XMDrugObfuBody_08 8707 2.10 5.11 1.60 106 TR_Symld_Words 8487 1.54 1.44 1.56 107 URI_TRY_3LD 8151 1.53 1.70 1.50 108 XMDiploma_00 7873 1.57 2.31 1.44 109 SUBJ_ALL_CAPS 7696 1.50 2.00 1.41 110 IN_HORDE_ADDRESS_BOOK 7681 1.21 0.03 1.41 111 URI_HEX 7632 1.45 1.76 1.40 112 INVALID_MSGID 7422 1.21 0.28 1.36 113 HELO_NODOT 7273 1.27 0.92 1.33 114 HELO_NO_DOMAIN 7272 1.27 0.92 1.33 115 DKIM_ADSP_CUSTOM_MED 7237 1.37 1.60 1.33 116 TooManyTo_003 7168 1.22 0.69 1.31 117 XM_GoogleGroups 7055 1.18 0.49 1.29 118 TM2_M_VERY_LONG_WORD 6641 1.26 1.51 1.22 119 XM_H_Long_From02 6571 1.15 0.83 1.21 120 TO_MALFORMED 6488 1.02 0.02 1.19 121 XMSubNoVowel 6299 1.15 1.14 1.16 122 XM_OfRef6 6275 1.55 3.94 1.15 123 XM_UB50 6072 1.95 6.93 1.11 124 RCVD_IN_MSPIKE_H5 6045 0.96 0.09 1.11 125 XMGappySubj_01 6038 0.97 0.15 1.11 126 XMStockSpam_06 6009 1.11 1.19 1.10 127 XMBrknScrpt_02 5902 1.44 3.54 1.08 128 XMCapTrack 5599 0.97 0.60 1.03 129 XMBdyGiftCard01 5449 0.97 0.81 1.00 130 T_XMHurry_00 5414 1.12 1.90 0.99 131 TooManyTo_004 5337 0.93 0.62 0.98 132 RELAYCOUNTRY_GB 5315 1.11 1.91 0.97 133 NML_ADSP_CUSTOM_MED 5199 1.02 1.43 0.95 134 XM_ProductURIs 4912 1.02 1.72 0.90 135 USER_IN_DEF_DKIM_WL 4855 0.76 0.00 0.89 136 SpammyFromTLD_01 4813 1.68 6.46 0.88 137 TR_XM_COVIDMETA4 4746 1.56 5.70 0.87 138 TR_MSPIKEBAYES00 4671 0.73 0.01 0.86 139 XMHTML_After_End 4518 1.40 4.80 0.83 140 XMBody_17 4435 1.54 5.86 0.81 141 TooManyTo_005 4289 0.74 0.48 0.79 142 XMGenDplmaNmb 4219 0.92 1.77 0.77 143 T_FILL_THIS_FORM_SHORT 4179 0.82 1.13 0.77 144 XMSexyCombo_01 4064 0.92 1.96 0.75 145 TR_MetaPhish_Combo_01 4052 0.77 0.95 0.74 146 FROM_GOV_DKIM_AU 3900 0.62 0.08 0.72 147 TR_LOTS_OF_MONEY3 3788 0.97 2.62 0.69 148 T_XMDrugObfuBody_00 3763 0.85 1.78 0.69 149 T_TooManySym_03 3694 0.74 1.13 0.68 150 HTTPS_HTTP_MISMATCH 3681 0.70 0.85 0.68 151 T_OBFU_PDF_ATTACH 3658 0.60 0.15 0.67 152 XM_DIRTYINTL 3248 1.14 4.41 0.60 153 XM_SPF_Unknown 3205 0.61 0.71 0.59 154 XM_H_PHPMailer 3167 0.65 1.07 0.58 155 FORGED_GMAIL_RCVD 3136 0.65 1.11 0.58 156 HTML_IMAGE_ONLY_20 3136 0.54 0.36 0.58 157 TR_XM_COVIDMETA1 3112 0.84 2.48 0.57 158 T_PDS_OTHER_BAD_TLD 3093 0.91 2.97 0.57 159 XMMoneyMeta_00 3076 0.60 0.85 0.56 160 TR_XM_PHPDW 2941 0.81 2.40 0.54 161 XMHTMLBadTable_001 2908 0.50 0.31 0.53 162 XMNoVowels 2900 0.57 0.78 0.53 163 XMSubMetaSxObfu_03 2839 0.61 1.11 0.52 164 TR_XM_FormFill2 2803 0.78 2.35 0.51 165 T_Symld_Words_02 2795 0.64 1.41 0.51 166 XMBody_78 2795 0.59 1.08 0.51 167 TR_XM_PHPForged 2791 0.78 2.36 0.51 168 XM_H_PHPOS 2765 0.77 2.33 0.51 169 XMPhish30 2760 0.58 1.02 0.51 170 XM_ShortIntro_01 2753 0.52 0.59 0.50 171 SpammyFromTLD_02 2719 1.00 3.97 0.50 172 RCVD_IN_MSPIKE_BL 2673 1.93 10.50 0.49 173 HTML_TAG_BALANCE_BODY 2627 0.48 0.49 0.48 174 TM2_M_BODY_EMPTY 2557 0.42 0.10 0.47 175 XM_B_REG_HTML 2536 0.43 0.20 0.47 176 XMPhish08 2472 0.50 0.79 0.45 177 XM_B_COPY_HTML 2465 0.44 0.35 0.45 178 XMSubMetaI_00 2447 0.52 0.94 0.45 179 T_MONEY_PERCENT 2409 0.52 0.98 0.44 180 TR_LOTS_OF_MONEY2 2409 0.52 0.98 0.44 181 MISSING_HEADERS 2366 0.44 0.50 0.43 182 PLING_QUERY 2331 0.46 0.69 0.43 183 XMPhish14 2292 0.48 0.84 0.42 184 FROM_GOV_SPOOF 2281 0.41 0.34 0.42 185 TM2_M_A_HREF_HREF 2278 0.45 0.65 0.42 186 XMSolicitRefs_0 2211 0.41 0.42 0.41 187 RCVD_IN_SORBS_DUL 2210 0.40 0.35 0.41 188 URI_NOVOWEL 2190 0.49 1.03 0.40 189 TR_BOTNET_NEGATE 2125 0.36 0.16 0.39 190 XMLngstWrd_00 2116 0.39 0.40 0.39 191 DIET_1 2114 0.50 1.17 0.39 192 RELAYCOUNTRY_DE 2109 1.12 5.47 0.39 193 TVD_SPACE_RATIO 2082 0.35 0.15 0.38 194 XMBody_95 2058 0.35 0.17 0.38 195 XMBSHREFv2 2014 0.39 0.49 0.37 196 XM_UCStrings02 1994 0.32 0.07 0.37 197 T_MANY_PILL_PRICE 1983 0.31 0.00 0.36 198 RELAYCOUNTRY_AU 1964 0.38 0.51 0.36 199 MPART_ALT_DIFF_COUNT 1946 0.40 0.68 0.36 200 SHORT_HELO_AND_INLINE_IMAGE 1936 0.32 0.08 0.36 ----------------------------------------------------------------------