Email: 659734 Autolearn: 0 AvgScore: 0.05 AvgScanTime: 2.10 sec Spam: 88962 Autolearn: 0 AvgScore: 12.00 AvgScanTime: 4.43 sec Ham: 570772 Autolearn: 0 AvgScore: -1.82 AvgScanTime: 1.74 sec Time Spent Running SA: 384.81 hours Time Spent Processing Spam: 109.41 hours Time Spent Processing Ham: 275.40 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 86457 97.95 97.18 98.07 2 HTML_MESSAGE 82751 86.60 93.02 85.60 3 DKIM_SIGNED 70336 74.05 79.06 73.27 4 XM_DK_Pass 67620 72.69 76.01 72.17 5 XM_B_Unicode 64201 67.70 72.17 67.01 6 RELAYCOUNTRY_US 63431 78.43 71.30 79.54 7 XMListUnsubscribeExists 54750 50.18 61.54 48.41 8 DKIM_VALID 54485 66.62 61.25 67.46 9 XM_DK_Undo_02 48424 17.16 54.43 11.35 10 DKIM_VALID_AU 37027 49.59 41.62 50.83 11 BAYES_50 33603 48.90 37.77 50.64 12 XM_B_Unicode3 33603 37.99 37.77 38.02 13 BAYES_99 33406 11.26 37.55 7.16 14 LOC_TINY_FONT_1 29013 24.35 32.61 23.07 15 MIME_HTML_ONLY 28641 21.06 32.19 19.33 16 HTML_FONT_LOW_CONTRAST 26441 25.61 29.72 24.97 17 DKIM_VALID_EF 26131 27.81 29.37 27.57 18 BAYES_999 25945 8.87 29.16 5.71 19 RELAYCOUNTRY_META 25855 9.19 29.06 6.09 20 BOTNET 25693 6.79 28.88 3.34 21 RCVD_IN_MSPIKE_H2 24607 24.06 27.66 23.49 22 XMSubLong 23411 21.70 26.32 20.98 23 FVGT_m_MULTI_ODD 23250 21.37 26.13 20.63 24 T_KAM_HTML_FONT_INVALID 18856 18.20 21.20 17.74 25 XM_Body_Dirty_Words 18305 13.98 20.58 12.95 26 T_TM2_M_HEADER_IN_MSG 17898 26.10 20.12 27.04 27 XM_Multi_Part_URI 17803 14.37 20.01 13.49 28 UNTRUSTED_Relay 16537 4.72 18.59 2.56 29 DKIM_INVALID 15851 7.43 17.82 5.82 30 XM_UncommonTLD01 15448 4.87 17.36 2.92 31 BOTNET_IPINHOSTNAME 14588 6.54 16.40 5.00 32 XM_B_Unsub 14062 12.47 15.81 11.95 33 LOTS_OF_MONEY 12540 8.45 14.10 7.57 34 NO_DNS_FOR_FROM 12021 4.76 13.51 3.39 35 RCVD_IN_BL_SPAMCOP_NET 11177 2.78 12.56 1.25 36 XM_B_Phish_Phrases 10490 7.59 11.79 6.93 37 XMSexyCombo_05 10404 5.08 11.69 4.05 38 UNPARSEABLE_RELAY 9034 7.43 10.15 7.00 39 XM_Evil_Numbers_Gen 8844 8.42 9.94 8.18 40 RCVD_IN_MSPIKE_BL 8736 1.95 9.82 0.73 41 LotsOfNums_01 8147 8.24 9.16 8.09 42 XM_SendGrid 7613 6.54 8.56 6.22 43 HTML_IMAGE_RATIO_02 7595 6.83 8.54 6.56 44 RCVD_IN_MSPIKE_WL 7378 22.44 8.29 24.64 45 RELAYCOUNTRY_CA 6910 2.67 7.77 1.88 46 BAYES_80 6770 4.53 7.61 4.05 47 XMSubMetaSx_00 6746 4.10 7.58 3.55 48 TR_XM_PhishingBody 6643 3.97 7.47 3.42 49 SpammyFromTLD_02 6126 1.21 6.89 0.33 50 XM_UB50 6093 1.97 6.85 1.21 51 MPART_ALT_DIFF 5984 5.31 6.73 5.09 52 XM_H_Long_From01 5717 5.46 6.43 5.31 53 XM_SPF_SoftFail 5574 2.30 6.27 1.69 54 BAYES_60 5550 6.34 6.24 6.36 55 XM_B_COVIDMETA 5480 2.28 6.16 1.68 56 TooManyTo_001 5284 7.69 5.94 7.97 57 PDS_OTHER_BAD_TLD 5218 0.95 5.87 0.18 58 RCVD_IN_RP_RNBL 5189 0.85 5.83 0.08 59 XMStrtUSub 4830 5.10 5.43 5.05 60 TR_XM_COVIDMETA4 4824 1.46 5.42 0.85 61 TR_XM_INV_DKIM 4488 0.85 5.04 0.20 62 MIME_HTML_MOSTLY 4421 2.51 4.97 2.13 63 XM_OfRef6 4400 1.79 4.95 1.30 64 XM_DIRTYINTL 4348 1.25 4.89 0.69 65 HTML_MIME_NO_HTML_TAG 4311 2.39 4.85 2.01 66 HTML_IMAGE_RATIO_04 4282 4.91 4.81 4.92 67 XM_B_SpammyTLD 4274 2.17 4.80 1.76 68 SpammyFromTLD_01 4273 1.31 4.80 0.76 69 XM_B_Phish66 4221 2.22 4.74 1.83 70 XM_UB99 4215 0.64 4.74 0.01 71 RCVD_IN_MSPIKE_H3 4196 13.22 4.72 14.54 72 RCVD_IN_MSPIKE_L5 4020 0.83 4.52 0.26 73 XMNumbers 3997 3.51 4.49 3.35 74 BOTNET_NORDNS 3720 0.58 4.18 0.02 75 T_XMDrugObfuBody_08 3711 2.03 4.17 1.70 76 HTML_IMAGE_RATIO_08 3678 2.85 4.13 2.65 77 TR_XM_MaxWHORU 3622 0.61 4.07 0.07 78 BAYES_95 3536 2.69 3.97 2.49 79 MIME_HEADER_CTYPE_ONLY 3506 0.60 3.94 0.08 80 TM2_M_URI_OPT_OUT 3469 7.29 3.90 7.82 81 RCVD_IN_MSPIKE_L3 3432 0.88 3.86 0.41 82 HTML_SHORT_LINK_IMG_1 3310 0.52 3.72 0.02 83 KHOP_HELO_FCRDNS 3299 1.98 3.71 1.71 84 SUBJ_ALL_CAPS 3257 1.72 3.66 1.42 85 RCVD_IN_PSBL 3233 0.62 3.63 0.15 86 RCVD_IN_MSPIKE_H4 3079 8.07 3.46 8.79 87 XMBody_17 3076 1.09 3.46 0.72 88 HTML_IMAGE_RATIO_06 3041 3.62 3.42 3.65 89 TR_XM_UnparsRelay 2915 0.75 3.28 0.36 90 XMDiploma_00 2883 2.23 3.24 2.07 91 XM_UB999 2859 0.44 3.21 0.00 92 RELAYCOUNTRY_FR 2816 0.69 3.17 0.30 93 XM_URI_RBL 2770 0.60 3.11 0.21 94 URIBL_SBL_A 2707 0.51 3.04 0.11 95 T_REMOTE_IMAGE 2676 3.25 3.01 3.28 96 XM_B_Unsub2 2561 3.84 2.88 3.99 97 TR_XM_PHPDW 2322 0.77 2.61 0.48 98 HTML_IMAGE_ONLY_08 2321 0.44 2.61 0.10 99 MIME_QP_LONG_LINE 2320 4.90 2.61 5.25 100 XMSexyCombo_01 2309 0.93 2.60 0.68 101 BAYES_40 2297 4.28 2.58 4.55 102 TR_XM_PHPForged 2296 0.75 2.58 0.47 103 TR_XM_FormFill2 2282 0.75 2.57 0.47 104 TR_XM_MaxSPIKE 2275 0.40 2.56 0.06 105 FROM_EXCESS_BASE64 2271 2.65 2.55 2.67 106 XM_H_PHPOS 2270 0.74 2.55 0.46 107 FROM_SUSPICIOUS_NTLD 2262 0.38 2.54 0.05 108 TR_XM_COVIDMETA1 2188 0.69 2.46 0.42 109 XMGenDplmaNmb 2057 1.15 2.31 0.97 110 TR_XM_MaxBayes 2054 0.33 2.31 0.02 111 T_TooManySym_01 2053 4.09 2.31 4.37 112 XM_UB80 2042 0.36 2.30 0.06 113 FROM_SUSPICIOUS_NTLD_FP 2033 0.35 2.29 0.04 114 XM_CamelCaseFrm001 1944 2.05 2.19 2.02 115 TR_Symld_Words 1902 1.68 2.14 1.60 116 TR_XM_DK_SendGrid 1886 3.28 2.12 3.46 117 RELAYCOUNTRY_RU 1878 0.67 2.11 0.45 118 TR_XM_RelayPhish 1875 0.42 2.11 0.16 119 XMBrknScrpt_02 1850 1.06 2.08 0.90 120 XM_UB60 1817 0.41 2.04 0.16 121 HTML_FONT_TINY_NORDNS 1814 0.60 2.04 0.38 122 URI_HEX 1788 1.50 2.01 1.42 123 XM_DK_Undo_01 1771 1.66 1.99 1.61 124 XMGppyBdWords 1749 0.42 1.97 0.18 125 HELO_NODOT 1742 1.64 1.96 1.59 126 MAILING_LIST_MULTI 1724 2.36 1.94 2.42 127 HELO_NO_DOMAIN 1717 1.64 1.93 1.59 128 T_XMDrugObfuBody_14 1675 1.51 1.88 1.45 129 T_XMHurry_00 1673 0.67 1.88 0.48 130 MIME_HTML_ONLY_MULTI 1672 2.99 1.88 3.16 131 LongTLD 1656 0.41 1.86 0.19 132 BAYES_20 1648 4.07 1.85 4.42 133 TR_Mismatch_TLD_02 1634 0.32 1.84 0.08 134 RELAYCOUNTRY_GB 1614 1.07 1.81 0.96 135 XMStockSpam_06 1613 0.97 1.81 0.84 136 T_XMDrugObfuBody_00 1606 0.92 1.81 0.78 137 DKIM_ADSP_CUSTOM_MED 1561 1.11 1.75 1.01 138 TR_LOTS_OF_MONEY3 1545 0.65 1.74 0.48 139 XMHTML_After_End 1468 1.12 1.65 1.03 140 NML_ADSP_CUSTOM_MED 1454 0.86 1.63 0.74 141 URI_TRY_3LD 1437 1.12 1.62 1.04 142 TR_Caps_n_Bayes_99 1429 0.32 1.61 0.12 143 TM2_M_VERY_LONG_WORD 1427 1.05 1.60 0.96 144 XMBody_78 1422 0.68 1.60 0.54 145 XMSubNoVowel 1393 1.97 1.57 2.03 146 RELAYCOUNTRY_DE 1319 0.59 1.48 0.45 147 MPART_ALT_DIFF_COUNT 1308 0.48 1.47 0.33 148 DKIM_ADSP_NXDOMAIN 1305 0.62 1.47 0.49 149 BODY_URI_ONLY 1292 0.25 1.45 0.07 150 TR_Mismatch_TLD_01 1289 0.39 1.45 0.22 151 XM_PDF 1252 3.79 1.41 4.16 152 RDNS_DYNAMIC 1251 0.47 1.41 0.32 153 ALL_TRUSTED 1249 13.91 1.40 15.85 154 RCVD_IN_MSPIKE_L4 1221 0.23 1.37 0.05 155 HTML_IMAGE_ONLY_12 1207 0.34 1.36 0.19 156 FORGED_GMAIL_RCVD 1202 0.57 1.35 0.45 157 XMSubMetaSxObfu_03 1190 0.61 1.34 0.50 158 HK_RANDOM_REPLYTO 1186 0.35 1.33 0.20 159 FSL_HELO_NON_FQDN_1 1157 0.19 1.30 0.02 160 T_FILL_THIS_FORM_SHORT 1142 0.78 1.28 0.70 161 DIET_1 1123 0.53 1.26 0.42 162 BAYES_00 1116 13.23 1.25 15.09 163 MIME_CHARSET_FARAWAY 1086 0.26 1.22 0.11 164 RELAYCOUNTRY_JP 1079 0.20 1.21 0.05 165 URI_WP_DIRINDEX 1073 0.17 1.21 0.00 166 FILL_THIS_FORM 1072 0.40 1.21 0.28 167 XMSubject_38 1058 0.20 1.19 0.05 168 T_Symld_Words_02 1052 0.61 1.18 0.52 169 XM_H_PHPMailer 1051 0.59 1.18 0.49 170 XMSexyCombo_04 1047 0.34 1.18 0.21 171 FILL_THIS_FORM_LONG 1030 0.28 1.16 0.14 172 XM_UB95 1019 0.17 1.15 0.02 173 URI_NOVOWEL 996 0.54 1.12 0.45 174 URIBL_BLACK 987 0.18 1.11 0.04 175 XMMoneyMeta_00 974 0.74 1.09 0.69 176 REMOVE_BEFORE_LINK 965 0.33 1.08 0.22 177 CHARSET_FARAWAY_HEADER 959 0.19 1.08 0.05 178 URI_WP_HACKED_2 951 0.17 1.07 0.03 179 XMPhish30 938 0.53 1.05 0.45 180 XM_H_MailChimp 933 0.32 1.05 0.20 181 RELAYCOUNTRY_NL 933 0.44 1.05 0.35 182 HK_SCAM 932 0.17 1.05 0.03 183 NUMERIC_HTTP_ADDR 928 0.63 1.04 0.57 184 XM_XX_Yahoo 904 0.20 1.02 0.07 185 INVESTMENT_ADVICE 891 0.23 1.00 0.12 186 TR_XM_SB_Phish 887 0.47 1.00 0.39 187 FVGT_m_MULTI_ODD_EMAIL 887 0.16 1.00 0.03 188 XMPhish08 887 0.73 1.00 0.69 189 HDRS_MISSP 885 0.19 0.99 0.07 190 XMBdyGiftCard01 877 0.97 0.99 0.96 191 DATE_IN_PAST_03_06 873 0.23 0.98 0.11 192 XM_HighProb1 865 0.14 0.97 0.01 193 XM_BadFromFormat 856 0.33 0.96 0.23 194 BAYES_05 848 4.60 0.95 5.17 195 FROM_MISSP_REPLYTO 847 0.13 0.95 0.01 196 TooManyTo_002 845 1.81 0.95 1.95 197 MISSING_HEADERS 838 0.58 0.94 0.52 198 TR_MetaPhish_Combo_01 831 0.86 0.93 0.84 199 PDS_BTC_ID 821 0.15 0.92 0.03 200 XM_Combo_Sbj 793 0.34 0.89 0.25 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 559741 97.95 97.18 98.07 2 HTML_MESSAGE 488604 86.60 93.02 85.60 3 RELAYCOUNTRY_US 453991 78.43 71.30 79.54 4 DKIM_SIGNED 418211 74.05 79.06 73.27 5 XM_DK_Pass 411934 72.69 76.01 72.17 6 DKIM_VALID 385016 66.62 61.25 67.46 7 XM_B_Unicode 382470 67.70 72.17 67.01 8 DKIM_VALID_AU 290118 49.59 41.62 50.83 9 BAYES_50 289022 48.90 37.77 50.64 10 XMListUnsubscribeExists 276333 50.18 61.54 48.41 11 XM_B_Unicode3 217013 37.99 37.77 38.02 12 DKIM_VALID_EF 157364 27.81 29.37 27.57 13 T_TM2_M_HEADER_IN_MSG 154312 26.10 20.12 27.04 14 HTML_FONT_LOW_CONTRAST 142507 25.61 29.72 24.97 15 RCVD_IN_MSPIKE_WL 140635 22.44 8.29 24.64 16 RCVD_IN_MSPIKE_H2 134096 24.06 27.66 23.49 17 LOC_TINY_FONT_1 131654 24.35 32.61 23.07 18 XMSubLong 119774 21.70 26.32 20.98 19 FVGT_m_MULTI_ODD 117733 21.37 26.13 20.63 20 MIME_HTML_ONLY 110308 21.06 32.19 19.33 21 T_KAM_HTML_FONT_INVALID 101244 18.20 21.20 17.74 22 ALL_TRUSTED 90488 13.91 1.40 15.85 23 BAYES_00 86151 13.23 1.25 15.09 24 RCVD_IN_MSPIKE_H3 82993 13.22 4.72 14.54 25 XM_Multi_Part_URI 77007 14.37 20.01 13.49 26 XM_Body_Dirty_Words 73941 13.98 20.58 12.95 27 XM_B_Unsub 68202 12.47 15.81 11.95 28 XM_DK_Undo_02 64799 17.16 54.43 11.35 29 RCVD_IN_MSPIKE_H4 50149 8.07 3.46 8.79 30 XM_Evil_Numbers_Gen 46675 8.42 9.94 8.18 31 TR_XM_DK_Bayes 46550 7.14 0.62 8.16 32 LotsOfNums_01 46192 8.24 9.16 8.09 33 TooManyTo_001 45470 7.69 5.94 7.97 34 TM2_M_URI_OPT_OUT 44626 7.29 3.90 7.82 35 LOTS_OF_MONEY 43190 8.45 14.10 7.57 36 TR_XM_DK_Bayes1 43138 6.59 0.38 7.56 37 IN_ZIMBRA_NJ_WHITELIST 41600 6.31 0.05 7.29 38 BAYES_99 40866 11.26 37.55 7.16 39 UNPARSEABLE_RELAY 39956 7.43 10.15 7.00 40 XM_B_Phish_Phrases 39565 7.59 11.79 6.93 41 ANY_BOUNCE_MESSAGE 38987 6.01 0.74 6.83 42 BOUNCE_MESSAGE 38986 6.01 0.74 6.83 43 TR_XM_DK_Bayes2 37513 5.73 0.35 6.57 44 XM_DKIMWhitelistDomains 37480 5.68 0.01 6.57 45 HTML_IMAGE_RATIO_02 37436 6.83 8.54 6.56 46 RCVD_IN_RP_SAFE 37173 5.71 0.59 6.51 47 BAYES_60 36300 6.34 6.24 6.36 48 XM_SendGrid 35521 6.54 8.56 6.22 49 RELAYCOUNTRY_META 34770 9.19 29.06 6.09 50 RCVD_IN_RP_CERTIFIED 34246 5.23 0.33 6.00 51 DKIM_INVALID 33195 7.43 17.82 5.82 52 BAYES_999 32594 8.87 29.16 5.71 53 XM_H_Long_From01 30311 5.46 6.43 5.31 54 MIME_QP_LONG_LINE 29981 4.90 2.61 5.25 55 BAYES_05 29529 4.60 0.95 5.17 56 MPART_ALT_DIFF 29053 5.31 6.73 5.09 57 XMStrtUSub 28796 5.10 5.43 5.05 58 BOTNET_IPINHOSTNAME 28550 6.54 16.40 5.00 59 HTML_IMAGE_RATIO_04 28091 4.91 4.81 4.92 60 RCVD_IN_IADB_LISTED 26055 4.06 0.81 4.56 61 BAYES_40 25972 4.28 2.58 4.55 62 BAYES_20 25232 4.07 1.85 4.42 63 T_TooManySym_01 24952 4.09 2.31 4.37 64 XM_PDF 23732 3.79 1.41 4.16 65 BAYES_80 23124 4.53 7.61 4.05 66 XMSexyCombo_05 23115 5.08 11.69 4.05 67 XM_B_Unsub2 22762 3.84 2.88 3.99 68 RCVD_IN_IADB_SPF 22505 3.51 0.71 3.94 69 XM_H_Trusted_IP 22005 3.34 0.00 3.86 70 HTML_IMAGE_RATIO_06 20824 3.62 3.42 3.65 71 XMSubMetaSx_00 20288 4.10 7.58 3.55 72 RCVD_IN_IADB_SENDERID 19876 3.11 0.69 3.48 73 TR_XM_DK_SendGrid 19731 3.28 2.12 3.46 74 TR_XM_PhishingBody 19539 3.97 7.47 3.42 75 NO_DNS_FOR_FROM 19351 4.76 13.51 3.39 76 RCVD_IN_IADB_DK 19303 3.02 0.68 3.38 77 XMNumbers 19129 3.51 4.49 3.35 78 BOTNET 19073 6.79 28.88 3.34 79 T_REMOTE_IMAGE 18738 3.25 3.01 3.28 80 MIME_HTML_ONLY_MULTI 18054 2.99 1.88 3.16 81 XM_UncommonTLD01 16652 4.87 17.36 2.92 82 RCVD_IN_IADB_VOUCHED 16394 2.52 0.25 2.87 83 FROM_EXCESS_BASE64 15218 2.65 2.55 2.67 84 HTML_IMAGE_RATIO_08 15150 2.85 4.13 2.65 85 UNTRUSTED_Relay 14609 4.72 18.59 2.56 86 BAYES_95 14197 2.69 3.97 2.49 87 MAILING_LIST_MULTI 13827 2.36 1.94 2.42 88 T_TooManySym_02 12965 2.04 0.58 2.27 89 MIME_HTML_MOSTLY 12136 2.51 4.97 2.13 90 XMDiploma_00 11833 2.23 3.24 2.07 91 XMSubNoVowel 11573 1.97 1.57 2.03 92 XM_CamelCaseFrm001 11556 2.05 2.19 2.02 93 HTML_MIME_NO_HTML_TAG 11473 2.39 4.85 2.01 94 TooManyTo_002 11102 1.81 0.95 1.95 95 RELAYCOUNTRY_CA 10724 2.67 7.77 1.88 96 RCVD_IN_IADB_OPTIN 10706 1.66 0.27 1.88 97 XM_B_Phish66 10446 2.22 4.74 1.83 98 XM_B_SpammyTLD 10041 2.17 4.80 1.76 99 KHOP_HELO_FCRDNS 9741 1.98 3.71 1.71 100 T_XMDrugObfuBody_08 9712 2.03 4.17 1.70 101 XM_SPF_SoftFail 9632 2.30 6.27 1.69 102 XM_B_COVIDMETA 9584 2.28 6.16 1.68 103 TVD_RCVD_IP 9259 1.47 0.50 1.62 104 XM_DK_Undo_01 9179 1.66 1.99 1.61 105 TR_Symld_Words 9151 1.68 2.14 1.60 106 HELO_NODOT 9089 1.64 1.96 1.59 107 HELO_NO_DOMAIN 9085 1.64 1.93 1.59 108 T_XMDrugObfuBody_14 8267 1.51 1.88 1.45 109 SUBJ_ALL_CAPS 8116 1.72 3.66 1.42 110 URI_HEX 8102 1.50 2.01 1.42 111 HELO_MISC_IP 7707 1.24 0.56 1.35 112 CK_HELO_DYNAMIC_SPLIT_IP 7700 1.24 0.53 1.35 113 TooManyTo_003 7517 1.24 0.77 1.32 114 RCVD_IN_MSPIKE_H5 7493 1.15 0.12 1.31 115 IN_HORDE_ADDRESS_BOOK 7464 1.15 0.11 1.31 116 XM_OfRef6 7423 1.79 4.95 1.30 117 INVALID_MSGID 7326 1.19 0.56 1.28 118 XM_GoogleGroups 7148 1.15 0.48 1.25 119 RCVD_IN_BL_SPAMCOP_NET 7136 2.78 12.56 1.25 120 XM_UB50 6881 1.97 6.85 1.21 121 XMGappySubj_01 6704 1.08 0.47 1.17 122 TO_MALFORMED 6378 0.98 0.11 1.12 123 XMCapTrack 5967 0.99 0.62 1.05 124 URI_TRY_3LD 5956 1.12 1.62 1.04 125 XMHTML_After_End 5895 1.12 1.65 1.03 126 DKIM_ADSP_CUSTOM_MED 5740 1.11 1.75 1.01 127 HTML_FONT_FACE_BAD 5621 0.94 0.66 0.98 128 XMGenDplmaNmb 5545 1.15 2.31 0.97 129 TooManyTo_004 5505 0.92 0.66 0.96 130 XMBdyGiftCard01 5495 0.97 0.99 0.96 131 TM2_M_VERY_LONG_WORD 5478 1.05 1.60 0.96 132 RELAYCOUNTRY_GB 5473 1.07 1.81 0.96 133 XM_H_Long_From02 5298 0.92 0.86 0.93 134 XM_ProductURIs 5288 0.91 0.79 0.93 135 T_TooManySym_03 5146 0.80 0.14 0.90 136 XMBrknScrpt_02 5145 1.06 2.08 0.90 137 USER_IN_DEF_DKIM_WL 5020 0.76 0.00 0.88 138 TR_MSPIKEBAYES00 4914 0.75 0.01 0.86 139 TR_XM_COVIDMETA4 4838 1.46 5.42 0.85 140 XMStockSpam_06 4817 0.97 1.81 0.84 141 TR_MetaPhish_Combo_01 4814 0.86 0.93 0.84 142 TooManyTo_005 4605 0.77 0.56 0.81 143 T_XMDrugObfuBody_00 4462 0.92 1.81 0.78 144 HTTPS_HTTP_MISMATCH 4424 0.79 0.85 0.78 145 SpammyFromTLD_01 4355 1.31 4.80 0.76 146 NML_ADSP_CUSTOM_MED 4226 0.86 1.63 0.74 147 XMBody_95 4207 0.66 0.17 0.74 148 RCVD_IN_MSPIKE_BL 4143 1.95 9.82 0.73 149 T_OBFU_PDF_ATTACH 4097 0.65 0.18 0.72 150 XMBody_17 4085 1.09 3.46 0.72 151 T_FILL_THIS_FORM_SHORT 3998 0.78 1.28 0.70 152 XMPhish08 3919 0.73 1.00 0.69 153 XMMoneyMeta_00 3917 0.74 1.09 0.69 154 XM_DIRTYINTL 3917 1.25 4.89 0.69 155 XMSexyCombo_01 3858 0.93 2.60 0.68 156 XMNoVowels 3531 0.62 0.60 0.62 157 XM_SPF_Unknown 3479 0.64 0.81 0.61 158 XMHTMLBadTable_001 3306 0.59 0.62 0.58 159 XM_ShortIntro_01 3288 0.60 0.79 0.58 160 NUMERIC_HTTP_ADDR 3232 0.63 1.04 0.57 161 PLING_QUERY 3210 0.58 0.70 0.56 162 TR_BOTNET_NEGATE 3123 0.54 0.47 0.55 163 XMSubMetaI_00 3094 0.57 0.75 0.54 164 XMBody_78 3065 0.68 1.60 0.54 165 T_Symld_Words_02 2984 0.61 1.18 0.52 166 MISSING_HEADERS 2962 0.58 0.94 0.52 167 HTML_IMAGE_ONLY_32 2878 0.46 0.20 0.50 168 FROM_GOV_DKIM_AU 2878 0.45 0.07 0.50 169 XMSubMetaSxObfu_03 2863 0.61 1.34 0.50 170 DKIM_ADSP_NXDOMAIN 2812 0.62 1.47 0.49 171 XM_H_PHPMailer 2811 0.59 1.18 0.49 172 TR_XM_PHPDW 2761 0.77 2.61 0.48 173 T_XMHurry_00 2749 0.67 1.88 0.48 174 TR_LOTS_OF_MONEY3 2719 0.65 1.74 0.48 175 T_TooManySym_04 2700 0.42 0.06 0.47 176 RELAYCOUNTRY_AU 2671 0.50 0.70 0.47 177 TR_XM_PHPForged 2668 0.75 2.58 0.47 178 TR_XM_FormFill2 2667 0.75 2.57 0.47 179 XM_H_PHPOS 2635 0.74 2.55 0.46 180 RELAYCOUNTRY_DE 2597 0.59 1.48 0.45 181 URI_NOVOWEL 2567 0.54 1.12 0.45 182 TM2_M_A_HREF_HREF 2561 0.48 0.72 0.45 183 XMPhish30 2560 0.53 1.05 0.45 184 SUBJ_DOLLARS 2559 0.49 0.78 0.45 185 FORGED_GMAIL_RCVD 2554 0.57 1.35 0.45 186 XMPhish14 2553 0.50 0.87 0.45 187 RELAYCOUNTRY_RU 2541 0.67 2.11 0.45 188 FROM_GOV_SPOOF 2529 0.41 0.17 0.44 189 HTML_IMAGE_ONLY_20 2527 0.45 0.49 0.44 190 RCVD_IN_SORBS_DUL 2492 0.41 0.24 0.44 191 HTML_TAG_BALANCE_BODY 2454 0.47 0.75 0.43 192 HTML_IMAGE_ONLY_28 2450 0.43 0.43 0.43 193 DIET_1 2391 0.53 1.26 0.42 194 TR_XM_COVIDMETA1 2376 0.69 2.46 0.42 195 SHORT_HELO_AND_INLINE_IMAGE 2369 0.46 0.76 0.42 196 RCVD_IN_MSPIKE_L3 2368 0.88 3.86 0.41 197 XM_B_COPY_HTML 2365 0.44 0.57 0.41 198 XMLngstWrd_00 2352 0.43 0.58 0.41 199 XM_S_SubURI 2297 0.36 0.06 0.40 200 XM_B_REG_HTML 2256 0.37 0.18 0.40 ----------------------------------------------------------------------