Email: 755420 Autolearn: 0 AvgScore: -0.91 AvgScanTime: 2.09 sec Spam: 102492 Autolearn: 0 AvgScore: 13.13 AvgScanTime: 4.27 sec Ham: 652928 Autolearn: 0 AvgScore: -3.11 AvgScanTime: 1.75 sec Time Spent Running SA: 438.13 hours Time Spent Processing Spam: 121.44 hours Time Spent Processing Ham: 316.68 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 98767 98.16 96.37 98.44 2 HTML_MESSAGE 94827 87.97 92.52 87.26 3 XM_B_Unicode 74636 69.85 72.82 69.38 4 DKIM_SIGNED 69563 66.92 67.87 66.77 5 RELAYCOUNTRY_US 67855 78.85 66.21 80.84 6 XM_DK_Pass 66972 65.54 65.34 65.57 7 XMListUnsubscribeExists 57413 46.49 56.02 45.00 8 DKIM_VALID 53408 60.16 52.11 61.42 9 XM_DK_Undo_02 47895 15.51 46.73 10.60 10 BAYES_50 38749 46.23 37.81 47.55 11 DKIM_VALID_AU 38296 45.54 37.36 46.82 12 BAYES_99 35048 10.07 34.20 6.29 13 XM_B_Unicode3 34742 40.00 33.90 40.96 14 MIME_HTML_ONLY 33162 23.93 32.36 22.60 15 RCVD_IN_MSPIKE_H2 32838 22.67 32.04 21.20 16 RELAYCOUNTRY_META 30672 9.19 29.93 5.94 17 BOTNET 29379 6.85 28.66 3.42 18 XMSubLong 29255 20.94 28.54 19.74 19 LOC_TINY_FONT_1 27576 21.89 26.91 21.11 20 FVGT_m_MULTI_ODD 27257 20.35 26.59 19.37 21 BAYES_999 26794 7.88 26.14 5.02 22 DKIM_VALID_EF 25260 25.23 24.65 25.32 23 HTML_FONT_LOW_CONTRAST 25004 24.21 24.40 24.18 24 UNTRUSTED_Relay 24336 5.62 23.74 2.78 25 T_TM2_M_HEADER_IN_MSG 24151 25.55 23.56 25.86 26 T_KAM_HTML_FONT_INVALID 19393 16.53 18.92 16.15 27 XM_Body_Dirty_Words 18519 13.08 18.07 12.29 28 XM_Multi_Part_URI 17752 12.70 17.32 11.98 29 LOTS_OF_MONEY 16853 8.73 16.44 7.52 30 RCVD_IN_BL_SPAMCOP_NET 16474 3.40 16.07 1.41 31 BOTNET_IPINHOSTNAME 16380 6.34 15.98 4.83 32 DKIM_INVALID 16155 6.77 15.76 5.35 33 RCVD_IN_PSBL 13607 1.82 13.28 0.02 34 XM_UncommonTLD01 13503 4.10 13.17 2.68 35 NO_DNS_FOR_FROM 13142 4.66 12.82 3.38 36 XM_B_Phish_Phrases 13011 8.00 12.69 7.26 37 XM_B_Unsub 12538 11.58 12.23 11.47 38 HTML_MIME_NO_HTML_TAG 10951 2.77 10.68 1.53 39 XM_UB50 10394 2.35 10.14 1.13 40 XMSexyCombo_05 10310 4.87 10.06 4.06 41 T_REMOTE_IMAGE 10146 4.18 9.90 3.28 42 T_TooManySym_01 10061 5.10 9.82 4.35 43 BAYES_80 9846 4.69 9.61 3.92 44 LotsOfNums_01 9749 8.27 9.51 8.08 45 RCVD_IN_MSPIKE_BL 9730 1.85 9.49 0.65 46 BODY_URI_ONLY 9225 1.27 9.00 0.06 47 HTML_IMAGE_ONLY_08 8186 1.16 7.99 0.09 48 HTML_SHORT_LINK_IMG_1 8113 1.10 7.92 0.03 49 XM_Evil_Numbers_Gen 8068 8.29 7.87 8.36 50 SHORT_URI_3 8040 1.12 7.84 0.07 51 BAYES_60 7976 6.19 7.78 5.94 52 XMSubject_48 7953 1.08 7.76 0.03 53 TR_XM_PhishingBody 7864 3.69 7.67 3.06 54 XM_SPF_SoftFail 7833 2.36 7.64 1.53 55 HTML_TAG_BALANCE_CENTER 7704 1.11 7.52 0.10 56 RCVD_IN_MSPIKE_WL 7504 20.44 7.32 22.49 57 RELAYCOUNTRY_CA 7041 2.49 6.87 1.81 58 SpammyFromTLD_01 6871 1.56 6.70 0.75 59 RCVD_IN_RP_RNBL 6705 0.96 6.54 0.08 60 HTML_IMAGE_RATIO_02 6472 5.66 6.31 5.56 61 XM_B_COVIDMETA 6469 2.47 6.31 1.87 62 MPART_ALT_DIFF 6129 8.85 5.98 9.31 63 XMSubMetaSx_00 5987 3.99 5.84 3.70 64 RCVD_IN_MSPIKE_L5 5890 0.95 5.75 0.20 65 HELO_NODOT 5833 2.58 5.69 2.10 66 HELO_NO_DOMAIN 5783 2.58 5.64 2.10 67 SUBJ_ALL_CAPS 5767 1.88 5.63 1.29 68 BOTNET_NORDNS 5725 0.77 5.59 0.02 69 BAYES_95 5692 2.72 5.55 2.27 70 XM_H_Long_From01 5633 4.68 5.50 4.55 71 UNPARSEABLE_RELAY 5570 5.85 5.43 5.91 72 T_XMDrugObfuBody_08 5464 2.39 5.33 1.93 73 TooManyTo_001 5448 6.64 5.32 6.84 74 KHOP_HELO_FCRDNS 5411 2.17 5.28 1.68 75 MISSING_HEADERS 5318 1.56 5.19 0.99 76 XM_B_Phish66 5190 2.24 5.06 1.79 77 REPLYTO_WITHOUT_TO_CC 5079 1.23 4.96 0.64 78 TR_LOTS_OF_MONEY1 4836 0.99 4.72 0.40 79 TR_XM_COVIDMETA4 4766 1.24 4.65 0.70 80 XMDiploma_00 4700 2.02 4.59 1.62 81 TR_XM_INV_DKIM 4622 0.76 4.51 0.17 82 RCVD_IN_MSPIKE_H3 4507 11.98 4.40 13.17 83 HTML_IMAGE_RATIO_04 4452 11.31 4.34 12.41 84 XM_SendGrid 4340 4.99 4.23 5.11 85 XM_DIRTYINTL 4288 1.09 4.18 0.60 86 XM_B_SpammyTLD 4269 1.91 4.17 1.56 87 XM_UB99 3853 0.51 3.76 0.00 88 TR_LOTS_OF_MONEY3 3852 1.51 3.76 1.15 89 TR_XM_MaxWHORU 3688 0.54 3.60 0.05 90 XM_UB80 3654 0.56 3.57 0.09 91 XMNumbers 3593 3.07 3.51 3.00 92 URIBL_SBL_A 3467 0.66 3.38 0.23 93 XM_OfRef6 3326 1.43 3.25 1.15 94 MIME_HTML_MOSTLY 3316 3.11 3.24 3.09 95 XM_UB60 3215 0.56 3.14 0.15 96 MONEY_ATM_CARD 3180 0.42 3.10 0.00 97 XMStrtUSub 3151 8.10 3.07 8.89 98 ADVANCE_FEE_4_NEW_MONEY 3141 0.42 3.06 0.00 99 HTML_IMAGE_RATIO_08 3092 2.23 3.02 2.11 100 XM_URI_RBL 3066 0.57 2.99 0.20 101 XMBody_17 3034 1.05 2.96 0.75 102 HTML_IMAGE_RATIO_06 2966 4.20 2.89 4.40 103 RCVD_IN_MSPIKE_L3 2958 0.73 2.89 0.39 104 TM2_M_URI_OPT_OUT 2957 7.02 2.89 7.67 105 TR_XM_MaxBayes 2949 0.42 2.88 0.04 106 XM_B_SEO 2895 0.49 2.82 0.13 107 RCVD_IN_MSPIKE_H4 2802 7.36 2.73 8.09 108 XMSubNoVowel 2764 3.59 2.70 3.73 109 TR_XM_UnparsRelay 2749 0.65 2.68 0.34 110 XM_DK_Undo_01 2648 1.64 2.58 1.49 111 MIME_QP_LONG_LINE 2625 4.57 2.56 4.89 112 XM_B_Unsub2 2622 3.81 2.56 4.01 113 XMSubEmpty 2594 0.53 2.53 0.22 114 XM_UB999 2538 0.34 2.48 0.00 115 SpammyFromTLD_02 2478 0.58 2.42 0.29 116 HTML_IMAGE_ONLY_16 2447 0.55 2.39 0.26 117 TR_XM_COVIDMETA1 2426 0.73 2.37 0.47 118 HK_RANDOM_FROM 2419 0.42 2.36 0.11 119 LOADSA_MONEY_COMBO 2380 0.72 2.32 0.47 120 XMGenDplmaNmb 2365 1.06 2.31 0.86 121 PDS_OTHER_BAD_TLD 2351 0.42 2.29 0.13 122 RELAYCOUNTRY_FR 2328 0.60 2.27 0.33 123 XFER_LOTSA_MONEY 2268 0.69 2.21 0.45 124 TR_XM_PHPDW 2242 0.63 2.19 0.39 125 XM_CamelCaseFrm001 2237 1.67 2.18 1.58 126 TR_XM_PHPForged 2234 0.61 2.18 0.36 127 TR_XM_FormFill2 2194 0.61 2.14 0.36 128 XM_H_PHPOS 2182 0.60 2.13 0.36 129 TR_Sbj_FN_Bdy 2171 0.44 2.12 0.17 130 T_XMDrugObfuBody_14 2153 1.50 2.10 1.41 131 ALL_TRUSTED 2112 12.79 2.06 14.47 132 FROM_EXCESS_BASE64 2076 2.31 2.03 2.35 133 XM_UB95 2051 0.29 2.00 0.02 134 DATE_IN_PAST_03_06 2021 0.37 1.97 0.12 135 BAYES_40 1949 4.60 1.90 5.02 136 RELAYCOUNTRY_JP 1936 0.29 1.89 0.04 137 T_XMHurry_00 1928 0.86 1.88 0.69 138 TM2_M_VERY_LONG_WORD 1926 1.07 1.88 0.95 139 IMG_ONLY_FM_DOM_INFO 1888 0.25 1.84 0.00 140 XMStockSpam_06 1861 1.10 1.82 0.98 141 XMBrknScrpt_02 1860 1.04 1.81 0.92 142 URI_HEX 1851 1.46 1.81 1.40 143 TR_XM_RelayPhish 1814 0.34 1.77 0.12 144 MIME_HTML_ONLY_MULTI 1799 6.63 1.76 7.39 145 TR_XM_MaxSPIKE 1789 0.28 1.75 0.04 146 XMBody_78 1758 0.52 1.72 0.34 147 XMSexyCombo_01 1731 1.02 1.69 0.91 148 MIME_CHARSET_FARAWAY 1728 0.31 1.69 0.10 149 RELAYCOUNTRY_UG 1699 0.23 1.66 0.00 150 ADVANCE_FEE_2_NEW_MONEY 1667 0.61 1.63 0.45 151 XMNoSubject 1662 0.30 1.62 0.09 152 MISSING_SUBJECT 1662 0.30 1.62 0.09 153 URI_OPTOUT_3LD 1635 0.65 1.60 0.50 154 URI_TRY_3LD 1597 1.13 1.56 1.07 155 MAILING_LIST_MULTI 1595 2.04 1.56 2.12 156 BAYES_20 1591 4.63 1.55 5.11 157 ANY_BOUNCE_MESSAGE 1590 6.39 1.55 7.15 158 TR_XM_DK_SendGrid 1584 2.63 1.55 2.80 159 DKIM_ADSP_CUSTOM_MED 1572 0.97 1.53 0.89 160 BOUNCE_MESSAGE 1545 6.38 1.51 7.14 161 TR_Symld_Words 1537 1.51 1.50 1.51 162 XM_JunkDunk 1516 0.20 1.48 0.00 163 MPART_ALT_DIFF_COUNT 1496 0.45 1.46 0.29 164 TVD_SPACE_RATIO_MINFP 1490 0.21 1.45 0.02 165 RELAYCOUNTRY_AU 1474 0.53 1.44 0.39 166 T_XMDrugObfuBody_00 1453 0.63 1.42 0.50 167 RELAYCOUNTRY_HK 1449 0.22 1.41 0.03 168 NML_ADSP_CUSTOM_MED 1443 0.73 1.41 0.63 169 FROM_SUSPICIOUS_NTLD 1418 0.21 1.38 0.03 170 TR_Mismatch_TLD_02 1409 0.24 1.37 0.06 171 URI_WP_DIRINDEX 1408 0.26 1.37 0.08 172 DATE_IN_PAST_06_12 1390 0.37 1.36 0.21 173 URI_WP_HACKED_2 1385 0.27 1.35 0.10 174 T_FILL_THIS_FORM_SHORT 1381 0.86 1.35 0.79 175 XMLngstWrd_00 1377 0.51 1.34 0.38 176 TR_Orig_Subnet 1377 0.19 1.34 0.01 177 FROM_SUSPICIOUS_NTLD_FP 1361 0.20 1.33 0.02 178 RELAYCOUNTRY_GB 1337 0.97 1.30 0.92 179 RELAYCOUNTRY_MU 1313 0.17 1.28 0.00 180 URI_PHP_REDIR 1286 0.22 1.25 0.05 181 HTML_IMAGE_ONLY_28 1284 0.48 1.25 0.35 182 XMHTML_After_End 1278 0.88 1.25 0.82 183 XM_PDF 1231 2.96 1.20 3.23 184 TR_Mismatch_TLD_01 1215 0.35 1.19 0.22 185 TR_Caps_n_Bayes_99 1186 0.23 1.16 0.09 186 CHARSET_FARAWAY_HEADER 1179 0.19 1.15 0.04 187 XM_H_Long_From02 1167 0.95 1.14 0.92 188 RELAYCOUNTRY_NL 1165 0.32 1.14 0.19 189 RDNS_DYNAMIC 1143 0.40 1.12 0.28 190 HK_RANDOM_REPLYTO 1128 0.31 1.10 0.19 191 T_MONEY_PERCENT 1127 0.37 1.10 0.25 192 TR_LOTS_OF_MONEY2 1127 0.37 1.10 0.25 193 XMLngstWrd_01 1125 0.44 1.10 0.34 194 REMOVE_BEFORE_LINK 1114 0.39 1.09 0.28 195 FROM_LOCAL_NOVOWEL 1106 0.17 1.08 0.03 196 LONG_JUNK_URI 1098 0.22 1.07 0.09 197 RELAYCOUNTRY_RU 1083 0.65 1.06 0.59 198 ONE_TIME 1078 0.26 1.05 0.14 199 FORGED_GMAIL_RCVD 1076 0.49 1.05 0.40 200 HTTPS_HTTP_MISMATCH 1062 0.74 1.04 0.70 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 642726 98.16 96.37 98.44 2 HTML_MESSAGE 569735 87.97 92.52 87.26 3 RELAYCOUNTRY_US 527813 78.85 66.21 80.84 4 XM_B_Unicode 453023 69.85 72.82 69.38 5 DKIM_SIGNED 435985 66.92 67.87 66.77 6 XM_DK_Pass 428131 65.54 65.34 65.57 7 DKIM_VALID 401023 60.16 52.11 61.42 8 BAYES_50 310487 46.23 37.81 47.55 9 DKIM_VALID_AU 305725 45.54 37.36 46.82 10 XMListUnsubscribeExists 293813 46.49 56.02 45.00 11 XM_B_Unicode3 267460 40.00 33.90 40.96 12 T_TM2_M_HEADER_IN_MSG 168830 25.55 23.56 25.86 13 DKIM_VALID_EF 165308 25.23 24.65 25.32 14 HTML_FONT_LOW_CONTRAST 157849 24.21 24.40 24.18 15 MIME_HTML_ONLY 147589 23.93 32.36 22.60 16 RCVD_IN_MSPIKE_WL 146873 20.44 7.32 22.49 17 RCVD_IN_MSPIKE_H2 138425 22.67 32.04 21.20 18 LOC_TINY_FONT_1 137802 21.89 26.91 21.11 19 XMSubLong 128914 20.94 28.54 19.74 20 FVGT_m_MULTI_ODD 126442 20.35 26.59 19.37 21 BAYES_00 119524 15.93 0.83 18.31 22 T_KAM_HTML_FONT_INVALID 105476 16.53 18.92 16.15 23 ALL_TRUSTED 94475 12.79 2.06 14.47 24 RCVD_IN_MSPIKE_H3 86021 11.98 4.40 13.17 25 HTML_IMAGE_RATIO_04 81003 11.31 4.34 12.41 26 XM_Body_Dirty_Words 80253 13.08 18.07 12.29 27 XM_Multi_Part_URI 78221 12.70 17.32 11.98 28 XM_B_Unsub 74910 11.58 12.23 11.47 29 XM_H_Trusted_IP 74494 9.86 0.00 11.41 30 XM_DK_Undo_02 69236 15.51 46.73 10.60 31 HTML_FONT_FACE_BAD 64779 8.71 1.02 9.92 32 MPART_ALT_DIFF 60755 8.85 5.98 9.31 33 XMStrtUSub 58040 8.10 3.07 8.89 34 XM_Evil_Numbers_Gen 54564 8.29 7.87 8.36 35 RCVD_IN_MSPIKE_H4 52812 7.36 2.73 8.09 36 LotsOfNums_01 52756 8.27 9.51 8.08 37 TM2_M_URI_OPT_OUT 50092 7.02 2.89 7.67 38 LOTS_OF_MONEY 49114 8.73 16.44 7.52 39 MIME_HTML_ONLY_MULTI 48280 6.63 1.76 7.39 40 TR_XM_DK_Bayes 47674 6.38 0.48 7.30 41 XM_B_Phish_Phrases 47407 8.00 12.69 7.26 42 ANY_BOUNCE_MESSAGE 46654 6.39 1.55 7.15 43 BOUNCE_MESSAGE 46630 6.38 1.51 7.14 44 IN_ZIMBRA_NJ_WHITELIST 45705 6.06 0.04 7.00 45 TooManyTo_001 44676 6.64 5.32 6.84 46 TR_XM_DK_Bayes1 44320 5.90 0.21 6.79 47 BAYES_99 41043 10.07 34.20 6.29 48 TR_XM_DK_Bayes2 39809 5.29 0.18 6.10 49 RCVD_IN_RP_SAFE 39166 5.26 0.52 6.00 50 RELAYCOUNTRY_META 38774 9.19 29.93 5.94 51 BAYES_60 38755 6.19 7.78 5.94 52 UNPARSEABLE_RELAY 38588 5.85 5.43 5.91 53 XM_DKIMWhitelistDomains 36699 4.87 0.07 5.62 54 RCVD_IN_RP_CERTIFIED 36312 4.86 0.40 5.56 55 HTML_IMAGE_RATIO_02 36301 5.66 6.31 5.56 56 BAYES_05 35868 4.85 0.77 5.49 57 DKIM_INVALID 34962 6.77 15.76 5.35 58 BAYES_20 33396 4.63 1.55 5.11 59 XM_SendGrid 33355 4.99 4.23 5.11 60 BAYES_40 32785 4.60 1.90 5.02 61 BAYES_999 32753 7.88 26.14 5.02 62 MIME_QP_LONG_LINE 31910 4.57 2.56 4.89 63 BOTNET_IPINHOSTNAME 31533 6.34 15.98 4.83 64 XM_H_Long_From01 29717 4.68 5.50 4.55 65 HTML_IMAGE_RATIO_06 28758 4.20 2.89 4.40 66 T_TooManySym_01 28435 5.10 9.82 4.35 67 XMSexyCombo_05 26489 4.87 10.06 4.06 68 XM_B_Unsub2 26162 3.81 2.56 4.01 69 BAYES_80 25606 4.69 9.61 3.92 70 RCVD_IN_IADB_LISTED 25411 3.46 0.68 3.89 71 XMSubNoVowel 24323 3.59 2.70 3.73 72 XMSubMetaSx_00 24151 3.99 5.84 3.70 73 RCVD_IN_IADB_SPF 22428 3.05 0.61 3.43 74 BOTNET 22359 6.85 28.66 3.42 75 NO_DNS_FOR_FROM 22046 4.66 12.82 3.38 76 T_REMOTE_IMAGE 21424 4.18 9.90 3.28 77 XM_PDF 21118 2.96 1.20 3.23 78 RCVD_IN_IADB_SENDERID 20183 2.75 0.59 3.09 79 MIME_HTML_MOSTLY 20177 3.11 3.24 3.09 80 TR_XM_PhishingBody 19978 3.69 7.67 3.06 81 RCVD_IN_IADB_DK 19656 2.68 0.59 3.01 82 XMNumbers 19589 3.07 3.51 3.00 83 TR_XM_DK_SendGrid 18269 2.63 1.55 2.80 84 UNTRUSTED_Relay 18146 5.62 23.74 2.78 85 XM_UncommonTLD01 17499 4.10 13.17 2.68 86 FROM_EXCESS_BASE64 15371 2.31 2.03 2.35 87 BAYES_95 14824 2.72 5.55 2.27 88 RCVD_IN_IADB_VOUCHED 14781 1.99 0.22 2.26 89 MAILING_LIST_MULTI 13842 2.04 1.56 2.12 90 HTML_IMAGE_RATIO_08 13770 2.23 3.02 2.11 91 HELO_NODOT 13687 2.58 5.69 2.10 92 HELO_NO_DOMAIN 13685 2.58 5.64 2.10 93 T_TooManySym_02 12640 1.75 0.59 1.94 94 T_XMDrugObfuBody_08 12575 2.39 5.33 1.93 95 XM_B_COVIDMETA 12180 2.47 6.31 1.87 96 RELAYCOUNTRY_CA 11791 2.49 6.87 1.81 97 XM_B_Phish66 11706 2.24 5.06 1.79 98 KHOP_HELO_FCRDNS 10953 2.17 5.28 1.68 99 TooManyTo_002 10813 1.55 0.90 1.66 100 XMDiploma_00 10561 2.02 4.59 1.62 101 XM_CamelCaseFrm001 10344 1.67 2.18 1.58 102 XM_B_SpammyTLD 10190 1.91 4.17 1.56 103 XM_SPF_SoftFail 10016 2.36 7.64 1.53 104 HTML_MIME_NO_HTML_TAG 9977 2.77 10.68 1.53 105 TVD_RCVD_IP 9942 1.37 0.41 1.52 106 TR_Symld_Words 9840 1.51 1.50 1.51 107 XM_DK_Undo_01 9728 1.64 2.58 1.49 108 RCVD_IN_IADB_OPTIN 9725 1.32 0.25 1.49 109 RCVD_IN_BL_SPAMCOP_NET 9238 3.40 16.07 1.41 110 T_XMDrugObfuBody_14 9179 1.50 2.10 1.41 111 URI_HEX 9152 1.46 1.81 1.40 112 SUBJ_ALL_CAPS 8443 1.88 5.63 1.29 113 RCVD_IN_MSPIKE_H5 8040 1.09 0.19 1.23 114 HELO_MISC_IP 7710 1.10 0.56 1.18 115 CK_HELO_DYNAMIC_SPLIT_IP 7700 1.10 0.62 1.18 116 IN_HORDE_ADDRESS_BOOK 7622 1.03 0.13 1.17 117 INVALID_MSGID 7602 1.08 0.58 1.16 118 TR_LOTS_OF_MONEY3 7537 1.51 3.76 1.15 119 XM_OfRef6 7490 1.43 3.25 1.15 120 XM_GoogleGroups 7474 1.06 0.49 1.14 121 XMSubGarbage 7400 1.05 0.55 1.13 122 XM_UB50 7396 2.35 10.14 1.13 123 XMSubLongNoVowel 7379 1.09 0.85 1.13 124 TooManyTo_003 7085 1.03 0.67 1.09 125 URI_TRY_3LD 6958 1.13 1.56 1.07 126 XM_E_Blogspot 6601 0.88 0.08 1.01 127 XMGappySubj_01 6531 0.90 0.23 1.00 128 XMCapTrack 6527 0.94 0.59 1.00 129 TO_MALFORMED 6524 0.87 0.07 1.00 130 MISSING_HEADERS 6434 1.56 5.19 0.99 131 XMStockSpam_06 6429 1.10 1.82 0.98 132 TM2_M_VERY_LONG_WORD 6178 1.07 1.88 0.95 133 XMBrknScrpt_02 6014 1.04 1.81 0.92 134 XM_H_Long_From02 6011 0.95 1.14 0.92 135 RELAYCOUNTRY_GB 6005 0.97 1.30 0.92 136 XMSexyCombo_01 5950 1.02 1.69 0.91 137 DKIM_ADSP_CUSTOM_MED 5792 0.97 1.53 0.89 138 XMGenDplmaNmb 5615 1.06 2.31 0.86 139 USER_IN_DEF_DKIM_WL 5453 0.72 0.00 0.84 140 XMBdyGiftCard01 5398 0.77 0.43 0.83 141 XMHTML_After_End 5373 0.88 1.25 0.82 142 TooManyTo_004 5223 0.77 0.56 0.80 143 T_FILL_THIS_FORM_SHORT 5130 0.86 1.35 0.79 144 T_TooManySym_03 5031 0.69 0.20 0.77 145 SpammyFromTLD_01 4918 1.56 6.70 0.75 146 XMBody_17 4904 1.05 2.96 0.75 147 TR_MetaPhish_Combo_01 4803 0.77 1.01 0.74 148 TR_XM_COVIDMETA4 4587 1.24 4.65 0.70 149 HTTPS_HTTP_MISMATCH 4553 0.74 1.04 0.70 150 T_XMHurry_00 4537 0.86 1.88 0.69 151 FROM_GOV_DKIM_AU 4440 0.60 0.07 0.68 152 TR_MSPIKEBAYES00 4399 0.58 0.01 0.67 153 TooManyTo_005 4311 0.63 0.46 0.66 154 XM_ProductURIs 4294 0.68 0.80 0.66 155 RCVD_IN_MSPIKE_BL 4234 1.85 9.49 0.65 156 REPLYTO_WITHOUT_TO_CC 4211 1.23 4.96 0.64 157 URI_TRUNCATED 4194 0.61 0.42 0.64 158 TR_BOTNET_NEGATE 4186 0.64 0.64 0.64 159 NML_ADSP_CUSTOM_MED 4098 0.73 1.41 0.63 160 T_OBFU_PDF_ATTACH 4033 0.56 0.18 0.62 161 XM_DIRTYINTL 3921 1.09 4.18 0.60 162 XMMoneyMeta_00 3881 0.62 0.82 0.59 163 RELAYCOUNTRY_RU 3855 0.65 1.06 0.59 164 XMSubMetaI_00 3605 0.57 0.67 0.55 165 XM_SPF_Unknown 3557 0.59 0.90 0.54 166 XM_RXBody 3410 0.53 0.57 0.52 167 XMBody_95 3372 0.46 0.07 0.52 168 HTML_IMAGE_ONLY_20 3292 0.49 0.42 0.50 169 T_XMDrugObfuBody_00 3272 0.63 1.42 0.50 170 URI_OPTOUT_3LD 3255 0.65 1.60 0.50 171 DKIM_ADSP_NXDOMAIN 3201 0.53 0.76 0.49 172 TR_XM_COVIDMETA1 3077 0.73 2.37 0.47 173 LOADSA_MONEY_COMBO 3071 0.72 2.32 0.47 174 XMPhish30 3018 0.53 0.96 0.46 175 XMNoVowels 2989 0.48 0.62 0.46 176 XFER_LOTSA_MONEY 2944 0.69 2.21 0.45 177 ADVANCE_FEE_2_NEW_MONEY 2926 0.61 1.63 0.45 178 XM_B_COPY_HTML 2926 0.44 0.40 0.45 179 XM_ShortIntro_01 2924 0.50 0.83 0.45 180 XMSubMetaSxObfu_03 2894 0.49 0.79 0.44 181 PLING_QUERY 2862 0.44 0.44 0.44 182 XM_H_PHPMailer 2848 0.51 0.99 0.44 183 XMPhish14 2785 0.51 1.02 0.43 184 XM_B_REG_HTML 2738 0.39 0.17 0.42 185 XMSexyCombo_04 2731 0.46 0.71 0.42 186 NUMERIC_HTTP_ADDR 2677 0.48 0.91 0.41 187 FORGED_GMAIL_RCVD 2626 0.49 1.05 0.40 188 TR_LOTS_OF_MONEY1 2624 0.99 4.72 0.40 189 FROM_GOV_SPOOF 2565 0.38 0.28 0.39 190 RELAYCOUNTRY_RO 2561 0.39 0.40 0.39 191 T_TooManySym_04 2559 0.35 0.10 0.39 192 HTML_TAG_BALANCE_BODY 2547 0.45 0.85 0.39 193 RCVD_IN_MSPIKE_L3 2543 0.73 2.89 0.39 194 T_Symld_Words_02 2533 0.42 0.60 0.39 195 RCVD_IN_SORBS_DUL 2532 0.39 0.41 0.39 196 TR_XM_PHPDW 2531 0.63 2.19 0.39 197 RELAYCOUNTRY_AU 2523 0.53 1.44 0.39 198 XMLngstWrd_00 2488 0.51 1.34 0.38 199 TM2_M_A_HREF_HREF 2433 0.43 0.79 0.37 200 XMPhish08 2412 0.43 0.79 0.37 ----------------------------------------------------------------------