Email: 725444 Autolearn: 0 AvgScore: -0.55 AvgScanTime: 1.73 sec Spam: 108009 Autolearn: 0 AvgScore: 14.27 AvgScanTime: 2.46 sec Ham: 617435 Autolearn: 0 AvgScore: -3.14 AvgScanTime: 1.60 sec Time Spent Running SA: 348.62 hours Time Spent Processing Spam: 73.96 hours Time Spent Processing Ham: 274.67 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 104290 98.06 96.56 98.33 2 HTML_MESSAGE 101712 91.25 94.17 90.74 3 RELAYCOUNTRY_US 74941 81.94 69.38 84.13 4 DKIM_SIGNED 67837 68.98 62.81 70.06 5 XM_B_Unicode 65727 72.06 60.85 74.02 6 XM_DK_Pass 65438 67.70 60.59 68.95 7 XMListUnsubscribeExists 58786 49.07 54.43 48.14 8 DKIM_VALID 57638 63.24 53.36 64.96 9 BAYES_99 46029 12.29 42.62 6.98 10 XM_DK_Undo_02 45071 15.12 41.73 10.46 11 MIME_HTML_ONLY 44279 26.37 41.00 23.81 12 DKIM_VALID_AU 41752 47.17 38.66 48.66 13 BOTNET 37519 7.28 34.74 2.48 14 BAYES_999 36533 9.75 33.82 5.54 15 BAYES_50 33554 46.81 31.07 49.57 16 RCVD_IN_MSPIKE_H2 32515 24.04 30.10 22.98 17 XM_B_Unicode3 30589 41.46 28.32 43.76 18 RELAYCOUNTRY_META 30027 8.70 27.80 5.36 19 LOC_TINY_FONT_1 29446 24.04 27.26 23.47 20 XM_UncommonTLD01 28185 6.35 26.10 2.89 21 DKIM_VALID_EF 26060 25.61 24.13 25.87 22 FVGT_m_MULTI_ODD 24375 20.80 22.57 20.49 23 XMSubLong 24284 21.18 22.48 20.95 24 T_TM2_M_HEADER_IN_MSG 23279 25.52 21.55 26.22 25 HTML_FONT_LOW_CONTRAST 23219 25.37 21.50 26.05 26 HTML_MIME_NO_HTML_TAG 23146 4.76 21.43 1.84 27 T_REMOTE_IMAGE 22960 5.84 21.26 3.15 28 UNTRUSTED_Relay 22840 5.06 21.15 2.25 29 FROM_EXCESS_BASE64 21892 5.18 20.27 2.54 30 T_KAM_HTML_FONT_INVALID 20482 17.33 18.96 17.04 31 XM_Multi_Part_URI 18193 11.67 16.84 10.76 32 BOTNET_NORDNS 17967 2.49 16.63 0.01 33 XM_Body_Dirty_Words 17071 12.67 15.81 12.13 34 LOTS_OF_MONEY 16071 9.50 14.88 8.56 35 SpammyFromTLD_02 15638 2.44 14.48 0.33 36 BOTNET_IPINHOSTNAME 14865 6.05 13.76 4.70 37 FROM_SUSPICIOUS_NTLD 14400 2.04 13.33 0.06 38 FROM_SUSPICIOUS_NTLD_FP 14321 2.01 13.26 0.04 39 HTML_IMAGE_RATIO_02 13907 7.83 12.88 6.95 40 RCVD_IN_PSBL 13834 1.92 12.81 0.01 41 HDRS_MISSP 13175 1.86 12.20 0.06 42 DKIM_ADSP_NXDOMAIN 13118 2.30 12.15 0.57 43 BODY_URI_ONLY 13044 1.85 12.08 0.06 44 RCVD_IN_MSPIKE_BL 12600 2.54 11.67 0.94 45 RCVD_IN_BL_SPAMCOP_NET 12276 2.92 11.37 1.45 46 XM_B_Phish_Phrases 12075 7.57 11.18 6.93 47 XM_B_Unsub 11550 10.71 10.69 10.72 48 BAYES_80 10287 5.04 9.52 4.25 49 DKIM_INVALID 10199 5.75 9.44 5.10 50 XMSexyCombo_05 10071 4.68 9.32 3.87 51 T_HTML_TAG_BALANCE_CENTER 9426 1.32 8.73 0.03 52 MPART_ALT_DIFF 9362 9.36 8.67 9.48 53 XM_JunkDunk 9070 1.25 8.40 0.00 54 LotsOfNums_01 8763 7.85 8.11 7.81 55 XM_UB99 8718 1.21 8.07 0.01 56 HTML_IMAGE_ONLY_16 8628 1.47 7.99 0.33 57 TR_XM_PhishingBody 8364 3.64 7.74 2.92 58 SpammyFromTLD_01 8351 1.81 7.73 0.77 59 RCVD_IN_MSPIKE_WL 8270 22.22 7.66 24.77 60 BAYES_60 8151 6.70 7.55 6.55 61 XMStrtUSub 8108 9.72 7.51 10.11 62 RCVD_IN_RP_RNBL 8076 1.19 7.48 0.09 63 XM_SPF_SoftFail 8015 2.49 7.42 1.62 64 HTML_SHORT_LINK_IMG_2 7846 1.14 7.26 0.07 65 XMSubMetaSx_00 7760 4.27 7.18 3.77 66 XM_Evil_Numbers_Gen 7686 8.62 7.12 8.89 67 RELAYCOUNTRY_CA 7142 2.35 6.61 1.61 68 XM_UB999 6858 0.95 6.35 0.00 69 RCVD_IN_MSPIKE_L5 6493 1.15 6.01 0.30 70 XM_UB50 6267 1.94 5.80 1.26 71 XM_H_Long_From01 5993 5.11 5.55 5.03 72 NO_DNS_FOR_FROM 5968 2.83 5.53 2.36 73 XM_B_Phish66 5868 2.23 5.43 1.67 74 BAYES_95 5782 2.96 5.35 2.55 75 MIME_HTML_MOSTLY 5768 2.79 5.34 2.35 76 XM_B_COVIDMETA 5625 2.11 5.21 1.57 77 UNPARSEABLE_RELAY 5403 6.48 5.00 6.74 78 TooManyTo_001 5296 6.54 4.90 6.83 79 RCVD_IN_MSPIKE_L3 4961 1.18 4.59 0.59 80 XMNumbers 4907 3.04 4.54 2.78 81 RCVD_IN_MSPIKE_H3 4798 12.71 4.44 14.16 82 T_XMDrugObfuBody_08 4785 2.24 4.43 1.85 83 XMBrknScrpt_02 4758 1.59 4.41 1.10 84 RELAYCOUNTRY_FR 4736 0.92 4.38 0.32 85 XM_DIRTYINTL 4625 1.20 4.28 0.66 86 XMBody_17 4338 1.38 4.02 0.92 87 XM_SendGrid 4198 5.73 3.89 6.05 88 XMDiploma_00 4082 2.41 3.78 2.17 89 TR_LOTS_OF_MONEY3 3997 1.34 3.70 0.93 90 HTML_TAG_BALANCE_CENTER 3965 0.61 3.67 0.07 91 HTML_IMAGE_RATIO_04 3834 12.82 3.55 14.44 92 TR_XM_INV_DKIM 3753 0.71 3.47 0.22 93 URI_PHP_REDIR 3745 0.57 3.47 0.06 94 PLING_QUERY 3720 0.79 3.44 0.32 95 XM_Combo_Sbj 3713 0.74 3.44 0.27 96 TR_XM_COVIDMETA4 3695 1.09 3.42 0.68 97 XM_B_SpammyTLD 3687 1.83 3.41 1.55 98 HTML_IMAGE_RATIO_08 3582 2.82 3.32 2.73 99 XM_OfRef6 3530 1.68 3.27 1.40 100 TR_XM_COVIDMETA1 3403 0.80 3.15 0.39 101 LOCALPART_IN_SUBJECT 3368 0.49 3.12 0.03 102 XMHTML_After_End 3335 1.41 3.09 1.11 103 XM_B_Unsub2 3313 3.35 3.07 3.40 104 TR_XM_MaxSPIKE 3271 0.50 3.03 0.05 105 RCVD_IN_MSPIKE_H4 3254 8.13 3.01 9.03 106 HTML_FONT_TINY_NORDNS 3133 0.62 2.90 0.22 107 TR_XM_UnparsRelay 2990 0.73 2.77 0.38 108 XM_URI_RBL 2965 0.67 2.75 0.30 109 TM2_M_URI_OPT_OUT 2943 3.08 2.72 3.14 110 URIBL_SBL_A 2909 0.55 2.69 0.18 111 HTML_IMAGE_RATIO_06 2845 4.17 2.63 4.44 112 XM_CamelCaseFrm001 2732 1.68 2.53 1.53 113 XM_UB80 2691 0.43 2.49 0.07 114 XM_UB60 2638 0.50 2.44 0.17 115 TR_XM_PHPForged 2629 0.77 2.43 0.48 116 TR_XM_PHPDW 2613 0.80 2.42 0.51 117 TR_XM_FormFill2 2576 0.76 2.38 0.48 118 XM_H_PHPOS 2569 0.75 2.38 0.47 119 KHOP_HELO_FCRDNS 2564 1.66 2.37 1.53 120 TR_XM_MaxBayes 2539 0.38 2.35 0.03 121 XM_B_SEO 2518 0.45 2.33 0.12 122 XMSexyCombo_01 2379 0.95 2.20 0.73 123 URI_HEX 2347 1.54 2.17 1.43 124 T_TooManySym_01 2316 3.74 2.14 4.02 125 SUBJ_ALL_CAPS 2230 1.44 2.06 1.32 126 RELAYCOUNTRY_GB 2224 1.05 2.06 0.88 127 IMG_ONLY_FM_DOM_INFO 2210 0.31 2.05 0.00 128 HK_RANDOM_FROM 2207 0.41 2.04 0.13 129 URI_TRY_3LD 2194 1.64 2.03 1.57 130 ALL_TRUSTED 2155 10.36 2.00 11.82 131 MIME_QP_LONG_LINE 2097 4.45 1.94 4.89 132 TR_XM_MaxWHORU 2068 0.31 1.91 0.03 133 DATE_IN_PAST_03_06 1947 0.35 1.80 0.10 134 T_XMHurry_00 1939 0.96 1.80 0.81 135 TM2_M_VERY_LONG_WORD 1929 1.13 1.79 1.02 136 T_XMDrugObfuBody_14 1875 1.63 1.74 1.62 137 MPART_ALT_DIFF_COUNT 1796 0.51 1.66 0.30 138 DATE_IN_PAST_06_12 1738 0.32 1.61 0.10 139 RELAYCOUNTRY_DE 1727 0.55 1.60 0.37 140 TR_XM_DK_SendGrid 1712 3.02 1.59 3.27 141 XM_UB95 1666 0.24 1.54 0.02 142 RDNS_DYNAMIC 1663 0.50 1.54 0.32 143 TR_XM_RelayPhish 1656 0.47 1.53 0.28 144 TR_Symld_Words 1623 1.48 1.50 1.48 145 RELAYCOUNTRY_NL 1620 0.42 1.50 0.23 146 MIME_HTML_ONLY_MULTI 1620 6.70 1.50 7.62 147 XMStockSpam_06 1584 1.14 1.47 1.09 148 T_XMDrugObfuBody_00 1538 0.84 1.42 0.74 149 BAYES_40 1538 4.68 1.42 5.25 150 HTML_IMAGE_ONLY_28 1519 0.54 1.41 0.39 151 T_FILL_THIS_FORM_SHORT 1515 0.96 1.40 0.88 152 XMSubMetaSSx_00 1454 0.37 1.35 0.20 153 XMSubNoVowel 1412 3.16 1.31 3.49 154 URI_NOVOWEL 1405 1.88 1.30 1.98 155 HK_RANDOM_REPLYTO 1329 0.41 1.23 0.27 156 PDS_OTHER_BAD_TLD 1266 0.29 1.17 0.13 157 XMSubMetaSxObfu_03 1258 0.53 1.16 0.42 158 XM_PDF 1251 3.50 1.16 3.91 159 MAILING_LIST_MULTI 1202 1.91 1.11 2.04 160 HELO_NODOT 1179 1.30 1.09 1.33 161 HELO_NO_DOMAIN 1176 1.30 1.09 1.33 162 BAYES_20 1170 3.98 1.08 4.48 163 TO_NAME_SUBJ_NO_RDNS 1144 0.16 1.06 0.00 164 DKIM_ADSP_CUSTOM_MED 1123 1.00 1.04 0.99 165 XMBody_78 1123 0.50 1.04 0.40 166 XM_DK_Undo_01 1110 1.56 1.03 1.66 167 TR_Mismatch_TLD_02 1108 0.22 1.03 0.08 168 URIBL_BLACK 1085 0.17 1.00 0.02 169 RCVD_IN_MSPIKE_L4 1074 0.19 0.99 0.05 170 XMGenDplmaNmb 1061 1.19 0.98 1.22 171 TR_Mismatch_TLD_01 1055 0.35 0.98 0.24 172 XM_H_PHPMailer 1047 0.59 0.97 0.52 173 XMPhish08 987 0.49 0.91 0.42 174 RELAYCOUNTRY_IN 984 0.23 0.91 0.11 175 FORGED_GMAIL_RCVD 983 0.57 0.91 0.51 176 NML_ADSP_CUSTOM_MED 979 0.72 0.91 0.69 177 XMSlimDrugH 967 0.45 0.90 0.37 178 LongTLD 964 0.26 0.89 0.15 179 TR_MetaPhish_Combo_01 941 0.72 0.87 0.69 180 DIET_1 936 0.45 0.87 0.37 181 RELAYCOUNTRY_RU 932 0.38 0.86 0.30 182 XM_SPF_Unknown 930 0.62 0.86 0.58 183 T_TooManySym_02 921 1.78 0.85 1.95 184 XMPhish14 918 0.48 0.85 0.42 185 FROM_LOCAL_NOVOWEL 896 0.14 0.83 0.02 186 RELAYCOUNTRY_HK 889 0.16 0.82 0.04 187 RCVD_IN_IADB_LISTED 885 3.93 0.82 4.48 188 XMGppyBdWords 884 0.25 0.82 0.15 189 HK_SCAM 875 0.14 0.81 0.02 190 XM_H_Long_From02 875 0.88 0.81 0.90 191 ANY_BOUNCE_MESSAGE 869 2.77 0.80 3.11 192 BOUNCE_MESSAGE 868 2.77 0.80 3.11 193 RELAYCOUNTRY_BR 866 0.14 0.80 0.02 194 TR_LOTS_OF_MONEY2 851 0.28 0.79 0.20 195 T_MONEY_PERCENT 851 0.28 0.79 0.20 196 T_Symld_Words_02 842 0.64 0.78 0.62 197 FILL_THIS_FORM 833 0.27 0.77 0.18 198 XM_HighProb1 829 0.21 0.77 0.11 199 XMReplyNow 820 0.23 0.76 0.13 200 XMSexyCombo_04 818 0.29 0.76 0.20 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 607114 98.06 96.56 98.33 2 HTML_MESSAGE 560240 91.25 94.17 90.74 3 RELAYCOUNTRY_US 519478 81.94 69.38 84.13 4 XM_B_Unicode 457055 72.06 60.85 74.02 5 DKIM_SIGNED 432596 68.98 62.81 70.06 6 XM_DK_Pass 425692 67.70 60.59 68.95 7 DKIM_VALID 401116 63.24 53.36 64.96 8 BAYES_50 306051 46.81 31.07 49.57 9 DKIM_VALID_AU 300463 47.17 38.66 48.66 10 XMListUnsubscribeExists 297214 49.07 54.43 48.14 11 XM_B_Unicode3 270211 41.46 28.32 43.76 12 T_TM2_M_HEADER_IN_MSG 161887 25.52 21.55 26.22 13 HTML_FONT_LOW_CONTRAST 160818 25.37 21.50 26.05 14 DKIM_VALID_EF 159736 25.61 24.13 25.87 15 RCVD_IN_MSPIKE_WL 152918 22.22 7.66 24.77 16 MIME_HTML_ONLY 147014 26.37 41.00 23.81 17 LOC_TINY_FONT_1 144940 24.04 27.26 23.47 18 RCVD_IN_MSPIKE_H2 141874 24.04 30.10 22.98 19 XMSubLong 129331 21.18 22.48 20.95 20 FVGT_m_MULTI_ODD 126489 20.80 22.57 20.49 21 T_KAM_HTML_FONT_INVALID 105240 17.33 18.96 17.04 22 BAYES_00 103272 14.34 0.70 16.73 23 HTML_IMAGE_RATIO_04 89188 12.82 3.55 14.44 24 RCVD_IN_MSPIKE_H3 87415 12.71 4.44 14.16 25 XM_Body_Dirty_Words 74870 12.67 15.81 12.13 26 HTML_FONT_FACE_BAD 74030 10.30 0.64 11.99 27 XM_H_Trusted_IP 73608 10.15 0.00 11.92 28 ALL_TRUSTED 73011 10.36 2.00 11.82 29 XM_Multi_Part_URI 66434 11.67 16.84 10.76 30 XM_B_Unsub 66159 10.71 10.69 10.72 31 XM_DK_Undo_02 64614 15.12 41.73 10.46 32 XMStrtUSub 62418 9.72 7.51 10.11 33 MPART_ALT_DIFF 58506 9.36 8.67 9.48 34 RCVD_IN_MSPIKE_H4 55747 8.13 3.01 9.03 35 XM_Evil_Numbers_Gen 54876 8.62 7.12 8.89 36 LOTS_OF_MONEY 52840 9.50 14.88 8.56 37 LotsOfNums_01 48193 7.85 8.11 7.81 38 MIME_HTML_ONLY_MULTI 47021 6.70 1.50 7.62 39 BAYES_99 43113 12.29 42.62 6.98 40 HTML_IMAGE_RATIO_02 42892 7.83 12.88 6.95 41 XM_B_Phish_Phrases 42818 7.57 11.18 6.93 42 TR_XM_DK_Bayes 42569 5.92 0.38 6.89 43 TooManyTo_001 42166 6.54 4.90 6.83 44 UNPARSEABLE_RELAY 41636 6.48 5.00 6.74 45 BAYES_60 40472 6.70 7.55 6.55 46 RCVD_IN_RP_SAFE 40181 5.59 0.35 6.51 47 TR_XM_DK_Bayes1 39791 5.53 0.29 6.44 48 XM_DKIMWhitelistDomains 39652 5.47 0.00 6.42 49 IN_ZIMBRA_NJ_WHITELIST 38034 5.25 0.02 6.16 50 RCVD_IN_RP_CERTIFIED 37895 5.26 0.22 6.14 51 XM_SendGrid 37337 5.73 3.89 6.05 52 TR_XM_DK_Bayes2 35217 4.88 0.20 5.70 53 BAYES_999 34185 9.75 33.82 5.54 54 RELAYCOUNTRY_META 33118 8.70 27.80 5.36 55 BAYES_40 32419 4.68 1.42 5.25 56 DKIM_INVALID 31480 5.75 9.44 5.10 57 XM_H_Long_From01 31084 5.11 5.55 5.03 58 MIME_QP_LONG_LINE 30187 4.45 1.94 4.89 59 BOTNET_IPINHOSTNAME 29043 6.05 13.76 4.70 60 BAYES_20 27669 3.98 1.08 4.48 61 RCVD_IN_IADB_LISTED 27637 3.93 0.82 4.48 62 HTML_IMAGE_RATIO_06 27442 4.17 2.63 4.44 63 BAYES_80 26270 5.04 9.52 4.25 64 T_TooManySym_01 24824 3.74 2.14 4.02 65 XM_PDF 24118 3.50 1.16 3.91 66 RCVD_IN_IADB_SPF 24115 3.43 0.69 3.91 67 XMSexyCombo_05 23888 4.68 9.32 3.87 68 XMSubMetaSx_00 23248 4.27 7.18 3.77 69 BAYES_05 21913 3.11 0.63 3.55 70 RCVD_IN_IADB_SENDERID 21538 3.07 0.66 3.49 71 XMSubNoVowel 21530 3.16 1.31 3.49 72 RCVD_IN_IADB_DK 20995 2.99 0.66 3.40 73 XM_B_Unsub2 20969 3.35 3.07 3.40 74 TR_XM_DK_SendGrid 20196 3.02 1.59 3.27 75 T_REMOTE_IMAGE 19425 5.84 21.26 3.15 76 TM2_M_URI_OPT_OUT 19394 3.08 2.72 3.14 77 ANY_BOUNCE_MESSAGE 19228 2.77 0.80 3.11 78 BOUNCE_MESSAGE 19227 2.77 0.80 3.11 79 TR_XM_PhishingBody 18029 3.64 7.74 2.92 80 XM_UncommonTLD01 17864 6.35 26.10 2.89 81 XMNumbers 17134 3.04 4.54 2.78 82 HTML_IMAGE_RATIO_08 16845 2.82 3.32 2.73 83 RCVD_IN_IADB_VOUCHED 16734 2.36 0.33 2.71 84 BAYES_95 15715 2.96 5.35 2.55 85 FROM_EXCESS_BASE64 15659 5.18 20.27 2.54 86 BOTNET 15286 7.28 34.74 2.48 87 NO_DNS_FOR_FROM 14549 2.83 5.53 2.36 88 MIME_HTML_MOSTLY 14497 2.79 5.34 2.35 89 UNTRUSTED_Relay 13875 5.06 21.15 2.25 90 XMDiploma_00 13424 2.41 3.78 2.17 91 MAILING_LIST_MULTI 12619 1.91 1.11 2.04 92 URI_NOVOWEL 12201 1.88 1.30 1.98 93 T_TooManySym_02 12027 1.78 0.85 1.95 94 T_XMDrugObfuBody_08 11430 2.24 4.43 1.85 95 HTML_MIME_NO_HTML_TAG 11360 4.76 21.43 1.84 96 RCVD_IN_IADB_OPTIN 10606 1.50 0.27 1.72 97 XM_B_Phish66 10311 2.23 5.43 1.67 98 TooManyTo_002 10300 1.53 0.72 1.67 99 XM_DK_Undo_01 10232 1.56 1.03 1.66 100 XM_SPF_SoftFail 10024 2.49 7.42 1.62 101 TVD_RCVD_IP 9980 1.45 0.50 1.62 102 T_XMDrugObfuBody_14 9977 1.63 1.74 1.62 103 RELAYCOUNTRY_CA 9913 2.35 6.61 1.61 104 RCVD_IN_MSPIKE_H5 9756 1.37 0.20 1.58 105 URI_TRY_3LD 9696 1.64 2.03 1.57 106 XM_B_COVIDMETA 9685 2.11 5.21 1.57 107 XM_B_SpammyTLD 9561 1.83 3.41 1.55 108 KHOP_HELO_FCRDNS 9463 1.66 2.37 1.53 109 XM_CamelCaseFrm001 9421 1.68 2.53 1.53 110 TR_Symld_Words 9131 1.48 1.50 1.48 111 RCVD_IN_BL_SPAMCOP_NET 8938 2.92 11.37 1.45 112 URI_HEX 8826 1.54 2.17 1.43 113 XM_OfRef6 8669 1.68 3.27 1.40 114 HELO_NODOT 8239 1.30 1.09 1.33 115 HELO_NO_DOMAIN 8233 1.30 1.09 1.33 116 SUBJ_ALL_CAPS 8181 1.44 2.06 1.32 117 XMSubGarbage 8074 1.13 0.08 1.31 118 XMSubLongNoVowel 7947 1.13 0.23 1.29 119 XM_UB50 7779 1.94 5.80 1.26 120 HELO_MISC_IP 7695 1.15 0.59 1.25 121 CK_HELO_DYNAMIC_SPLIT_IP 7691 1.14 0.57 1.25 122 INVALID_MSGID 7630 1.08 0.17 1.24 123 XMGenDplmaNmb 7561 1.19 0.98 1.22 124 IN_HORDE_ADDRESS_BOOK 7377 1.02 0.03 1.19 125 XM_GoogleGroups 6967 1.02 0.38 1.13 126 XMHTML_After_End 6873 1.41 3.09 1.11 127 XMBrknScrpt_02 6804 1.59 4.41 1.10 128 TooManyTo_003 6724 1.00 0.48 1.09 129 XMStockSpam_06 6721 1.14 1.47 1.09 130 TO_MALFORMED 6398 0.89 0.04 1.04 131 XMCapTrack 6292 0.93 0.45 1.02 132 TM2_M_VERY_LONG_WORD 6269 1.13 1.79 1.02 133 DKIM_ADSP_CUSTOM_MED 6140 1.00 1.04 0.99 134 XM_ProductURIs 6120 0.92 0.54 0.99 135 XMGappySubj_01 6107 0.87 0.17 0.99 136 RCVD_IN_MSPIKE_BL 5818 2.54 11.67 0.94 137 XM_E_Blogspot 5805 0.81 0.09 0.94 138 TR_LOTS_OF_MONEY3 5756 1.34 3.70 0.93 139 XMBody_17 5658 1.38 4.02 0.92 140 XM_H_Long_From02 5539 0.88 0.81 0.90 141 T_FILL_THIS_FORM_SHORT 5445 0.96 1.40 0.88 142 RELAYCOUNTRY_GB 5427 1.05 2.06 0.88 143 USER_IN_DEF_DKIM_WL 5090 0.70 0.00 0.82 144 T_XMHurry_00 5018 0.96 1.80 0.81 145 TooManyTo_004 4924 0.74 0.40 0.80 146 SpammyFromTLD_01 4752 1.81 7.73 0.77 147 T_TooManySym_03 4598 0.66 0.17 0.74 148 T_XMDrugObfuBody_00 4546 0.84 1.42 0.74 149 XMSexyCombo_01 4524 0.95 2.20 0.73 150 XMBdyGiftCard01 4328 0.68 0.53 0.70 151 TR_MetaPhish_Combo_01 4263 0.72 0.87 0.69 152 NML_ADSP_CUSTOM_MED 4240 0.72 0.91 0.69 153 TR_XM_COVIDMETA4 4220 1.09 3.42 0.68 154 TR_BOTNET_NEGATE 4110 0.64 0.53 0.67 155 TooManyTo_005 4109 0.62 0.33 0.67 156 XM_DIRTYINTL 4105 1.20 4.28 0.66 157 TR_MSPIKEBAYES00 3959 0.55 0.01 0.64 158 XMBody_95 3844 0.55 0.11 0.62 159 T_Symld_Words_02 3816 0.64 0.78 0.62 160 XMMoneyMeta_00 3798 0.63 0.71 0.62 161 HTTPS_HTTP_MISMATCH 3761 0.63 0.73 0.61 162 RCVD_IN_MSPIKE_L3 3616 1.18 4.59 0.59 163 XM_SPF_Unknown 3556 0.62 0.86 0.58 164 DKIM_ADSP_NXDOMAIN 3548 2.30 12.15 0.57 165 T_OBFU_PDF_ATTACH 3451 0.51 0.23 0.56 166 NUMERIC_HTTP_ADDR 3238 0.54 0.61 0.52 167 XM_H_PHPMailer 3222 0.59 0.97 0.52 168 TR_XM_PHPDW 3173 0.80 2.42 0.51 169 FORGED_GMAIL_RCVD 3144 0.57 0.91 0.51 170 XM_B_COPY_HTML 3078 0.49 0.46 0.50 171 XMHTMLBadTable_001 3064 0.46 0.25 0.50 172 TR_XM_PHPForged 2984 0.77 2.43 0.48 173 XM_ShortIntro_01 2956 0.49 0.57 0.48 174 TR_XM_FormFill2 2943 0.76 2.38 0.48 175 XMSubMetaI_00 2897 0.51 0.73 0.47 176 XM_H_PHPOS 2895 0.75 2.38 0.47 177 FROM_GOV_DKIM_AU 2837 0.42 0.21 0.46 178 XMNoVowels 2747 0.46 0.57 0.44 179 XM_B_REG_HTML 2739 0.40 0.15 0.44 180 HTML_IMAGE_ONLY_20 2620 0.46 0.66 0.42 181 XMSubMetaSxObfu_03 2604 0.53 1.16 0.42 182 HTML_TAG_BALANCE_BODY 2597 0.47 0.75 0.42 183 T_TooManySym_04 2595 0.36 0.04 0.42 184 XMPhish14 2589 0.48 0.85 0.42 185 XMPhish08 2573 0.49 0.91 0.42 186 RCVD_IN_SORBS_DUL 2515 0.38 0.24 0.41 187 XMPhish30 2508 0.45 0.73 0.41 188 XMBody_78 2476 0.50 1.04 0.40 189 MISSING_HEADERS 2441 0.43 0.63 0.40 190 TM2_M_BODY_EMPTY 2424 0.35 0.10 0.39 191 TR_XM_COVIDMETA1 2423 0.80 3.15 0.39 192 XMLngstWrd_00 2420 0.39 0.36 0.39 193 RELAYCOUNTRY_AU 2383 0.41 0.53 0.39 194 HTML_IMAGE_ONLY_28 2382 0.54 1.41 0.39 195 TR_XM_UnparsRelay 2330 0.73 2.77 0.38 196 DIET_1 2304 0.45 0.87 0.37 197 XMBSHREFv2 2304 0.37 0.34 0.37 198 XMSlimDrugH 2292 0.45 0.90 0.37 199 XM_S_SubURI 2289 0.32 0.04 0.37 200 FROM_GOV_SPOOF 2272 0.33 0.13 0.37 ----------------------------------------------------------------------