Email: 656281 Autolearn: 0 AvgScore: 0.87 AvgScanTime: 1.43 sec Spam: 98489 Autolearn: 0 AvgScore: 12.25 AvgScanTime: 2.19 sec Ham: 557792 Autolearn: 0 AvgScore: -1.13 AvgScanTime: 1.30 sec Time Spent Running SA: 261.46 hours Time Spent Processing Spam: 59.98 hours Time Spent Processing Ham: 201.48 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 95167 97.89 96.63 98.11 2 HTML_MESSAGE 91091 89.28 92.49 88.71 3 DKIM_SIGNED 78388 77.59 79.59 77.24 4 XM_DK_Pass 75294 76.16 76.45 76.11 5 XM_B_Unicode 72808 72.48 73.93 72.22 6 DKIM_VALID 72195 73.67 73.30 73.74 7 XMListUnsubscribeExists 67787 56.10 68.83 53.86 8 RELAYCOUNTRY_US 65286 79.30 66.29 81.60 9 XM_B_SpammyWords 62187 52.73 63.14 50.89 10 DKIM_VALID_AU 54325 55.74 55.16 55.84 11 XM_DK_Undo_02 49781 17.28 50.54 11.41 12 XM_B_SpammyWords2 36264 25.83 36.82 23.88 13 BAYES_99 35637 11.64 36.18 7.31 14 DKIM_VALID_EF 35335 29.34 35.88 28.19 15 BAYES_50 35101 49.50 35.64 51.94 16 XM_B_Unicode3 35074 40.15 35.61 40.95 17 LOC_TINY_FONT_1 31576 25.85 32.06 24.75 18 RELAYCOUNTRY_META 30703 10.12 31.17 6.40 19 T_TM2_M_HEADER_IN_MSG 27456 29.01 27.88 29.21 20 BAYES_999 26907 9.04 27.32 5.82 21 T_KAM_HTML_FONT_INVALID 26454 19.82 26.86 18.58 22 HTML_FONT_LOW_CONTRAST 26114 27.16 26.51 27.28 23 FVGT_m_MULTI_ODD 25556 23.54 25.95 23.11 24 MIME_HTML_ONLY 25073 21.17 25.46 20.41 25 XMSubLong 24639 22.60 25.02 22.17 26 RCVD_IN_MSPIKE_H2 24626 26.09 25.00 26.28 27 BOTNET 24571 6.10 24.95 2.77 28 XM_Body_Dirty_Words 23333 14.91 23.69 13.36 29 UNTRUSTED_Relay 22425 6.01 22.77 3.06 30 XM_UncommonTLD01 19013 5.64 19.30 3.23 31 XM_Multi_Part_URI 17835 12.87 18.11 11.95 32 LOTS_OF_MONEY 15790 8.53 16.03 7.21 33 XM_B_Phish_Phrases 14419 7.79 14.64 6.58 34 BOTNET_IPINHOSTNAME 14369 6.71 14.59 5.32 35 XMSexyCombo_05 13365 5.38 13.57 3.93 36 MPART_ALT_DIFF 13244 6.41 13.45 5.17 37 XM_B_SpammyWords3 13055 7.64 13.26 6.65 38 XM_B_Unsub 13012 11.30 13.21 10.97 39 RCVD_IN_MSPIKE_BL 12790 2.81 12.99 1.01 40 MIME_HTML_MOSTLY 10238 3.63 10.40 2.43 41 SpammyFromTLD_01 10061 2.25 10.22 0.84 42 RCVD_IN_BL_SPAMCOP_NET 9969 2.97 10.12 1.71 43 BAYES_80 9954 5.40 10.11 4.57 44 XM_Evil_Numbers_Gen 9712 8.79 9.86 8.60 45 RCVD_IN_MSPIKE_WL 9691 25.26 9.84 27.98 46 LotsOfNums_01 8899 9.35 9.04 9.40 47 XM_SPF_SoftFail 8212 2.84 8.34 1.87 48 TR_XM_PhishingBody 8182 4.04 8.31 3.28 49 HTML_IMAGE_RATIO_02 7876 6.82 8.00 6.62 50 XMSubMetaSx_00 7597 4.60 7.71 4.05 51 BAYES_60 7581 7.18 7.70 7.09 52 RCVD_IN_RP_RNBL 7503 1.22 7.62 0.09 53 XM_B_COVIDMETA 7163 2.29 7.27 1.41 54 XM_DIRTYINTL 6977 1.59 7.08 0.62 55 RELAYCOUNTRY_FR 6919 1.31 7.03 0.30 56 XM_UB50 6764 2.60 6.87 1.85 57 RELAYCOUNTRY_CA 6582 2.50 6.68 1.76 58 URI_PHP_REDIR 6527 1.05 6.63 0.06 59 XMBody_17 6395 2.01 6.49 1.22 60 RCVD_IN_MSPIKE_L3 6201 1.47 6.30 0.62 61 DKIM_INVALID 6193 3.92 6.29 3.51 62 XM_UB99 6058 0.93 6.15 0.01 63 XMNumbers 6005 4.16 6.10 3.81 64 NO_DNS_FOR_FROM 5747 2.10 5.84 1.44 65 RCVD_IN_PSBL 5728 0.90 5.82 0.03 66 XM_B_Phish66 5706 2.51 5.79 1.93 67 UNPARSEABLE_RELAY 5703 7.69 5.79 8.02 68 TooManyTo_001 5701 7.87 5.79 8.24 69 RCVD_IN_MSPIKE_L5 5428 1.08 5.51 0.30 70 XM_B_SpammyTLD 5385 2.47 5.47 1.94 71 RCVD_IN_MSPIKE_H3 5297 14.18 5.38 15.74 72 T_XMDrugObfuBody_08 5273 2.19 5.35 1.63 73 XM_H_Long_From01 5084 5.59 5.16 5.67 74 XMDiploma_00 5021 2.56 5.10 2.11 75 XMBrknScrpt_02 4563 1.76 4.63 1.25 76 HTML_IMAGE_RATIO_04 4451 5.25 4.52 5.38 77 XM_UB999 4428 0.68 4.50 0.00 78 BAYES_95 4343 3.00 4.41 2.76 79 XM_SendGrid 4339 6.73 4.41 7.14 80 SpammyFromTLD_02 4175 0.97 4.24 0.40 81 RCVD_IN_MSPIKE_H4 4088 9.40 4.15 10.32 82 HTML_IMAGE_RATIO_08 3738 2.99 3.80 2.85 83 XM_UB60 3616 0.80 3.67 0.29 84 XM_UB80 3584 0.60 3.64 0.07 85 XMGenDplmaNmb 3548 1.39 3.60 1.00 86 TR_XM_COVIDMETA1 3488 0.82 3.54 0.34 87 TM2_M_URI_OPT_OUT 3459 3.38 3.51 3.35 88 TR_XM_MaxSPIKE 3306 0.55 3.36 0.06 89 XM_URI_RBL 3261 0.64 3.31 0.17 90 XM_B_SpammyWords4 3224 1.20 3.27 0.84 91 TR_XM_COVIDMETA4 3204 0.93 3.25 0.52 92 XM_B_Unsub2 3200 3.01 3.25 2.97 93 HTML_IMAGE_RATIO_06 3088 3.86 3.14 3.98 94 BOTNET_NORDNS 3045 0.48 3.09 0.02 95 URI_HEX 2995 2.01 3.04 1.83 96 ALL_TRUSTED 2981 11.60 3.03 13.11 97 XMStrtUSub 2924 3.94 2.97 4.11 98 XMSexyCombo_01 2899 1.11 2.94 0.79 99 URIBL_SBL_A 2880 0.63 2.92 0.22 100 XM_OfRef6 2707 1.42 2.75 1.18 101 TR_XM_UnparsRelay 2699 0.88 2.74 0.55 102 RELAYCOUNTRY_RU 2542 1.18 2.58 0.94 103 XM_XX_Yahoo 2525 0.42 2.56 0.05 104 TR_XM_PHPDW 2520 0.67 2.56 0.34 105 TR_XM_PHPForged 2497 0.65 2.54 0.32 106 XMHTML_After_End 2496 1.06 2.53 0.80 107 TR_Mismatch_TLD_01 2445 0.54 2.48 0.20 108 XM_BadFromFormat 2435 0.52 2.47 0.18 109 TR_XM_FormFill2 2434 0.64 2.47 0.32 110 XM_H_PHPOS 2428 0.63 2.47 0.31 111 BAYES_40 2375 4.28 2.41 4.61 112 XM_CamelCaseFrm001 2354 1.99 2.39 1.92 113 KHOP_HELO_FCRDNS 2336 1.62 2.37 1.48 114 TR_XM_INV_DKIM 2328 0.43 2.36 0.09 115 MIME_QP_LONG_LINE 2311 5.22 2.35 5.73 116 T_TooManySym_01 2265 4.03 2.30 4.34 117 HTML_MIME_NO_HTML_TAG 2257 2.17 2.29 2.15 118 RELAYCOUNTRY_IN 2201 0.45 2.23 0.13 119 T_REMOTE_IMAGE 2084 3.16 2.12 3.34 120 DATE_IN_PAST_03_06 2024 0.40 2.06 0.11 121 LH_URI_DOM_IN_PATH 2024 2.14 2.06 2.16 122 URI_TRY_3LD 2002 1.48 2.03 1.38 123 TR_XM_DK_SendGrid 1985 3.91 2.02 4.24 124 TR_XM_MaxBayes 1961 0.33 1.99 0.03 125 TM2_M_VERY_LONG_WORD 1956 1.27 1.99 1.14 126 SUBJ_ALL_CAPS 1913 1.77 1.94 1.74 127 T_XMDrugObfuBody_14 1905 1.81 1.93 1.79 128 T_XMDrugObfuBody_00 1899 0.87 1.93 0.68 129 TR_XM_RelayPhish 1886 0.42 1.91 0.16 130 TR_Symld_Words 1801 1.92 1.83 1.94 131 XM_ContractorBdy01 1775 0.27 1.80 0.00 132 MAILING_LIST_MULTI 1745 2.14 1.77 2.21 133 MIME_HTML_ONLY_MULTI 1717 3.16 1.74 3.41 134 BAYES_20 1713 3.84 1.74 4.22 135 DKIM_ADSP_CUSTOM_MED 1702 1.16 1.73 1.07 136 RELAYCOUNTRY_GB 1653 1.17 1.68 1.08 137 TR_LOTS_OF_MONEY3 1651 0.71 1.68 0.54 138 T_XMHurry_00 1646 0.72 1.67 0.55 139 XMStockSpam_06 1618 1.03 1.64 0.92 140 T_FILL_THIS_FORM_SHORT 1610 1.04 1.63 0.93 141 RELAYCOUNTRY_DE 1604 0.60 1.63 0.41 142 NML_ADSP_CUSTOM_MED 1584 0.90 1.61 0.78 143 FROM_SUSPICIOUS_NTLD 1550 0.30 1.57 0.07 144 FROM_EXCESS_BASE64 1504 2.43 1.53 2.59 145 XMSlimDrugH 1489 0.55 1.51 0.38 146 FROM_SUSPICIOUS_NTLD_FP 1465 0.28 1.49 0.06 147 T_PDS_OTHER_BAD_TLD 1435 0.60 1.46 0.45 148 XM_H_Long_From02 1422 1.38 1.44 1.37 149 URI_NOVOWEL 1406 2.21 1.43 2.34 150 XM_UB95 1403 0.23 1.42 0.02 151 XMSubNoVowel 1402 1.06 1.42 0.99 152 FORGED_GMAIL_RCVD 1401 0.66 1.42 0.52 153 RDNS_DYNAMIC 1368 0.56 1.39 0.41 154 XMSexyCombo_04 1348 0.40 1.37 0.22 155 HELO_NODOT 1338 1.57 1.36 1.60 156 HELO_NO_DOMAIN 1333 1.57 1.35 1.60 157 XMMoneyMeta_00 1320 0.78 1.34 0.68 158 RELAYCOUNTRY_GR 1309 0.20 1.33 0.01 159 TR_XM_MaxWHORU 1301 0.22 1.32 0.02 160 T_Symld_Words_02 1283 0.69 1.30 0.59 161 RCVD_IN_IADB_LISTED 1278 4.61 1.30 5.20 162 HTML_FONT_TINY_NORDNS 1274 0.30 1.29 0.12 163 XMGppyBdWords 1258 0.34 1.28 0.18 164 HK_RANDOM_REPLYTO 1242 0.46 1.26 0.32 165 SPOOFED_URL 1211 0.67 1.23 0.57 166 MIME_CHARSET_FARAWAY 1151 0.28 1.17 0.13 167 SPOOFED_URL_HOST 1120 0.61 1.14 0.52 168 REMOVE_BEFORE_LINK 1116 0.41 1.13 0.28 169 XM_DK_Undo_01 1114 1.69 1.13 1.79 170 XMBody_78 1104 0.61 1.12 0.52 171 XM_H_PHPMailer 1094 0.59 1.11 0.50 172 RCVD_IN_IADB_SPF 1093 4.05 1.11 4.57 173 XM_PDF 1088 3.64 1.10 4.08 174 DIET_1 1085 0.52 1.10 0.42 175 XMSubMetaD_00 1074 0.25 1.09 0.10 176 DATE_IN_PAST_06_12 1070 0.37 1.09 0.24 177 RCVD_IN_MSPIKE_L4 1068 0.24 1.08 0.09 178 DKIM_ADSP_NXDOMAIN 1049 0.62 1.07 0.54 179 TR_XM_Spammywords 1046 0.43 1.06 0.32 180 XM_S_SpammyWords 1046 0.43 1.06 0.32 181 TR_Mismatch_TLD_02 1045 0.26 1.06 0.12 182 HTTPS_HTTP_MISMATCH 1038 0.85 1.05 0.81 183 RCVD_IN_IADB_SENDERID 1031 3.62 1.05 4.08 184 RCVD_IN_IADB_DK 1026 3.53 1.04 3.97 185 XMPhish08 1023 0.54 1.04 0.45 186 LongTLD 1012 0.34 1.03 0.22 187 XMSubMetaSxObfu_03 995 0.53 1.01 0.45 188 INVESTMENT_ADVICE 987 0.25 1.00 0.12 189 BAYES_05 986 2.33 1.00 2.57 190 TR_LOTS_OF_MONEY2 980 0.32 1.00 0.20 191 T_MONEY_PERCENT 980 0.32 1.00 0.20 192 XM_HighProb1 960 0.15 0.97 0.00 193 NUMERIC_HTTP_ADDR 951 0.49 0.97 0.40 194 TooManyTo_002 909 1.83 0.92 1.99 195 CHARSET_FARAWAY_HEADER 905 0.19 0.92 0.06 196 URIBL_BLACK 904 0.16 0.92 0.03 197 XMBdyGiftCard01 895 0.87 0.91 0.86 198 XMObfuSubjects 895 0.16 0.91 0.03 199 TR_XM_FormFill 887 0.18 0.90 0.06 200 TR_MetaPhish_Combo_01 873 0.87 0.89 0.87 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 547264 97.89 96.63 98.11 2 HTML_MESSAGE 494812 89.28 92.49 88.71 3 RELAYCOUNTRY_US 455154 79.30 66.29 81.60 4 DKIM_SIGNED 430849 77.59 79.59 77.24 5 XM_DK_Pass 424562 76.16 76.45 76.11 6 DKIM_VALID 411295 73.67 73.30 73.74 7 XM_B_Unicode 402863 72.48 73.93 72.22 8 DKIM_VALID_AU 311496 55.74 55.16 55.84 9 XMListUnsubscribeExists 300410 56.10 68.83 53.86 10 BAYES_50 289730 49.50 35.64 51.94 11 XM_B_SpammyWords 283868 52.73 63.14 50.89 12 XM_B_Unicode3 228425 40.15 35.61 40.95 13 T_TM2_M_HEADER_IN_MSG 162919 29.01 27.88 29.21 14 DKIM_VALID_EF 157231 29.34 35.88 28.19 15 RCVD_IN_MSPIKE_WL 156069 25.26 9.84 27.98 16 HTML_FONT_LOW_CONTRAST 152163 27.16 26.51 27.28 17 RCVD_IN_MSPIKE_H2 146565 26.09 25.00 26.28 18 LOC_TINY_FONT_1 138078 25.85 32.06 24.75 19 XM_B_SpammyWords2 133224 25.83 36.82 23.88 20 FVGT_m_MULTI_ODD 128930 23.54 25.95 23.11 21 XMSubLong 123671 22.60 25.02 22.17 22 MIME_HTML_ONLY 113835 21.17 25.46 20.41 23 T_KAM_HTML_FONT_INVALID 103626 19.82 26.86 18.58 24 RCVD_IN_MSPIKE_H3 87789 14.18 5.38 15.74 25 BAYES_00 83309 12.82 0.81 14.94 26 XM_Body_Dirty_Words 74540 14.91 23.69 13.36 27 ALL_TRUSTED 73150 11.60 3.03 13.11 28 XM_Multi_Part_URI 66660 12.87 18.11 11.95 29 XM_DK_Undo_02 63646 17.28 50.54 11.41 30 XM_B_Unsub 61163 11.30 13.21 10.97 31 RCVD_IN_MSPIKE_H4 57582 9.40 4.15 10.32 32 LotsOfNums_01 52440 9.35 9.04 9.40 33 TR_XM_DK_Bayes 52340 8.04 0.40 9.38 34 TR_XM_DK_Bayes1 50420 7.74 0.38 9.04 35 XM_Evil_Numbers_Gen 47957 8.79 9.86 8.60 36 TooManyTo_001 45942 7.87 5.79 8.24 37 UNPARSEABLE_RELAY 44740 7.69 5.79 8.02 38 TR_XM_DK_Bayes2 44699 6.86 0.31 8.01 39 BAYES_99 40771 11.64 36.18 7.31 40 LOTS_OF_MONEY 40221 8.53 16.03 7.21 41 XM_SendGrid 39832 6.73 4.41 7.14 42 BAYES_60 39547 7.18 7.70 7.09 43 RCVD_IN_RP_SAFE 38470 5.98 0.79 6.90 44 XM_B_SpammyWords3 37081 7.64 13.26 6.65 45 HTML_IMAGE_RATIO_02 36899 6.82 8.00 6.62 46 XM_B_Phish_Phrases 36728 7.79 14.64 6.58 47 XM_DKIMWhitelistDomains 36394 5.55 0.00 6.52 48 RCVD_IN_RP_CERTIFIED 35997 5.56 0.50 6.45 49 RELAYCOUNTRY_META 35711 10.12 31.17 6.40 50 IN_ZIMBRA_NJ_WHITELIST 32568 4.97 0.08 5.84 51 BAYES_999 32444 9.04 27.32 5.82 52 MIME_QP_LONG_LINE 31977 5.22 2.35 5.73 53 XM_H_Long_From01 31617 5.59 5.16 5.67 54 HTML_IMAGE_RATIO_04 30014 5.25 4.52 5.38 55 BOTNET_IPINHOSTNAME 29658 6.71 14.59 5.32 56 RCVD_IN_IADB_LISTED 29007 4.61 1.30 5.20 57 MPART_ALT_DIFF 28838 6.41 13.45 5.17 58 BAYES_40 25721 4.28 2.41 4.61 59 BAYES_80 25479 5.40 10.11 4.57 60 RCVD_IN_IADB_SPF 25471 4.05 1.11 4.57 61 T_TooManySym_01 24199 4.03 2.30 4.34 62 TR_XM_DK_SendGrid 23647 3.91 2.02 4.24 63 BAYES_20 23521 3.84 1.74 4.22 64 XMStrtUSub 22953 3.94 2.97 4.11 65 XM_PDF 22783 3.64 1.10 4.08 66 RCVD_IN_IADB_SENDERID 22747 3.62 1.05 4.08 67 XMSubMetaSx_00 22598 4.60 7.71 4.05 68 HTML_IMAGE_RATIO_06 22227 3.86 3.14 3.98 69 RCVD_IN_IADB_DK 22149 3.53 1.04 3.97 70 XMSexyCombo_05 21946 5.38 13.57 3.93 71 XMNumbers 21275 4.16 6.10 3.81 72 DKIM_INVALID 19554 3.92 6.29 3.51 73 MIME_HTML_ONLY_MULTI 19042 3.16 1.74 3.41 74 ANY_BOUNCE_MESSAGE 18960 3.02 0.89 3.40 75 BOUNCE_MESSAGE 18959 3.02 0.88 3.40 76 TM2_M_URI_OPT_OUT 18702 3.38 3.51 3.35 77 T_REMOTE_IMAGE 18656 3.16 2.12 3.34 78 TR_XM_PhishingBody 18321 4.04 8.31 3.28 79 XM_UncommonTLD01 17997 5.64 19.30 3.23 80 RCVD_IN_IADB_VOUCHED 17735 2.80 0.64 3.18 81 UNTRUSTED_Relay 17046 6.01 22.77 3.06 82 XM_B_Unsub2 16557 3.01 3.25 2.97 83 HTML_IMAGE_RATIO_08 15916 2.99 3.80 2.85 84 XM_H_Trusted_IP 15554 2.37 0.00 2.79 85 BOTNET 15444 6.10 24.95 2.77 86 BAYES_95 15378 3.00 4.41 2.76 87 FROM_EXCESS_BASE64 14423 2.43 1.53 2.59 88 BAYES_05 14334 2.33 1.00 2.57 89 MIME_HTML_MOSTLY 13558 3.63 10.40 2.43 90 URI_NOVOWEL 13075 2.21 1.43 2.34 91 T_TooManySym_02 12563 2.04 0.82 2.25 92 MAILING_LIST_MULTI 12328 2.14 1.77 2.21 93 LH_URI_DOM_IN_PATH 12044 2.14 2.06 2.16 94 HTML_MIME_NO_HTML_TAG 12015 2.17 2.29 2.15 95 XMDiploma_00 11762 2.56 5.10 2.11 96 RCVD_IN_IADB_OPTIN 11629 1.85 0.54 2.08 97 TooManyTo_002 11103 1.83 0.92 1.99 98 XM_B_SpammyTLD 10816 2.47 5.47 1.94 99 TR_Symld_Words 10800 1.92 1.83 1.94 100 XM_B_Phish66 10783 2.51 5.79 1.93 101 XM_CamelCaseFrm001 10727 1.99 2.39 1.92 102 RCVD_IN_MSPIKE_H5 10698 1.68 0.31 1.92 103 XM_SPF_SoftFail 10428 2.84 8.34 1.87 104 XM_UB50 10297 2.60 6.87 1.85 105 URI_HEX 10197 2.01 3.04 1.83 106 XM_DK_Undo_01 9999 1.69 1.13 1.79 107 T_XMDrugObfuBody_14 9987 1.81 1.93 1.79 108 RELAYCOUNTRY_CA 9831 2.50 6.68 1.76 109 SUBJ_ALL_CAPS 9704 1.77 1.94 1.74 110 RCVD_IN_BL_SPAMCOP_NET 9538 2.97 10.12 1.71 111 TVD_RCVD_IP 9176 1.45 0.32 1.65 112 T_XMDrugObfuBody_08 9095 2.19 5.35 1.63 113 HELO_NODOT 8947 1.57 1.36 1.60 114 HELO_NO_DOMAIN 8944 1.57 1.35 1.60 115 KHOP_HELO_FCRDNS 8273 1.62 2.37 1.48 116 NO_DNS_FOR_FROM 8052 2.10 5.84 1.44 117 XM_B_COVIDMETA 7860 2.29 7.27 1.41 118 HELO_MISC_IP 7796 1.32 0.86 1.40 119 CK_HELO_DYNAMIC_SPLIT_IP 7787 1.30 0.76 1.40 120 URI_TRY_3LD 7717 1.48 2.03 1.38 121 XM_H_Long_From02 7651 1.38 1.44 1.37 122 IN_HORDE_ADDRESS_BOOK 7496 1.16 0.13 1.34 123 TooManyTo_003 7419 1.22 0.57 1.33 124 INVALID_MSGID 7325 1.17 0.35 1.31 125 XMGappySubj_01 7179 1.12 0.17 1.29 126 XM_GoogleGroups 7066 1.16 0.55 1.27 127 XMBrknScrpt_02 6982 1.76 4.63 1.25 128 XMBody_17 6802 2.01 6.49 1.22 129 USER_IN_DEF_DKIM_WL 6688 1.02 0.04 1.20 130 XM_OfRef6 6604 1.42 2.75 1.18 131 TO_MALFORMED 6375 0.98 0.03 1.14 132 TM2_M_VERY_LONG_WORD 6375 1.27 1.99 1.14 133 XMCapTrack 6357 1.04 0.49 1.14 134 TR_MSPIKEBAYES00 6063 0.92 0.00 1.09 135 RELAYCOUNTRY_GB 6033 1.17 1.68 1.08 136 DKIM_ADSP_CUSTOM_MED 5941 1.16 1.73 1.07 137 HTML_FONT_FACE_BAD 5767 0.97 0.63 1.03 138 RCVD_IN_MSPIKE_BL 5648 2.81 12.99 1.01 139 XMGenDplmaNmb 5572 1.39 3.60 1.00 140 XMSubNoVowel 5536 1.06 1.42 0.99 141 XM_ProductURIs 5409 0.92 0.66 0.97 142 RELAYCOUNTRY_RU 5227 1.18 2.58 0.94 143 T_FILL_THIS_FORM_SHORT 5208 1.04 1.63 0.93 144 TooManyTo_004 5192 0.87 0.49 0.93 145 XMStockSpam_06 5113 1.03 1.64 0.92 146 T_TooManySym_03 4946 0.78 0.16 0.89 147 TR_MetaPhish_Combo_01 4839 0.87 0.89 0.87 148 XMBdyGiftCard01 4823 0.87 0.91 0.86 149 SpammyFromTLD_01 4704 2.25 10.22 0.84 150 XM_B_SpammyWords4 4684 1.20 3.27 0.84 151 HTTPS_HTTP_MISMATCH 4509 0.85 1.05 0.81 152 XMHTML_After_End 4453 1.06 2.53 0.80 153 XMSexyCombo_01 4392 1.11 2.94 0.79 154 NML_ADSP_CUSTOM_MED 4347 0.90 1.61 0.78 155 XM_ShortIntro_01 4121 0.72 0.62 0.74 156 MISSING_HEADERS 4055 0.72 0.71 0.73 157 TooManyTo_005 4037 0.67 0.38 0.72 158 XMBody_95 4019 0.63 0.09 0.72 159 XMSubMetaI_00 3920 0.69 0.60 0.70 160 XMMoneyMeta_00 3804 0.78 1.34 0.68 161 T_XMDrugObfuBody_00 3798 0.87 1.93 0.68 162 XMHTMLBadTable_001 3704 0.63 0.42 0.66 163 T_OBFU_PDF_ATTACH 3663 0.58 0.15 0.66 164 XM_SPF_Unknown 3616 0.68 0.88 0.65 165 RCVD_IN_MSPIKE_L3 3453 1.47 6.30 0.62 166 XM_DIRTYINTL 3435 1.59 7.08 0.62 167 FROM_GOV_DKIM_AU 3347 0.53 0.11 0.60 168 T_Symld_Words_02 3271 0.69 1.30 0.59 169 SPOOFED_URL 3177 0.67 1.23 0.57 170 HTML_TAG_BALANCE_BODY 3128 0.60 0.82 0.56 171 TR_XM_UnparsRelay 3090 0.88 2.74 0.55 172 T_XMHurry_00 3070 0.72 1.67 0.55 173 TR_BOTNET_NEGATE 3055 0.53 0.41 0.55 174 TR_LOTS_OF_MONEY3 3033 0.71 1.68 0.54 175 DKIM_ADSP_NXDOMAIN 3018 0.62 1.07 0.54 176 FORGED_GMAIL_RCVD 2911 0.66 1.42 0.52 177 TR_XM_COVIDMETA4 2910 0.93 3.25 0.52 178 SPOOFED_URL_HOST 2884 0.61 1.14 0.52 179 XMBody_78 2873 0.61 1.12 0.52 180 XM_B_REG_HTML 2812 0.47 0.27 0.50 181 XM_H_PHPMailer 2801 0.59 1.11 0.50 182 PLING_QUERY 2719 0.48 0.47 0.49 183 XMNoVowels 2706 0.47 0.35 0.49 184 XMPhish14 2611 0.51 0.76 0.47 185 T_TooManySym_04 2518 0.39 0.03 0.45 186 T_PDS_OTHER_BAD_TLD 2500 0.60 1.46 0.45 187 XMSubMetaSxObfu_03 2496 0.53 1.01 0.45 188 XMPhish08 2492 0.54 1.04 0.45 189 HTML_IMAGE_ONLY_20 2456 0.42 0.28 0.44 190 XMPhish30 2387 0.49 0.84 0.43 191 XM_B_COPY_HTML 2354 0.45 0.59 0.42 192 XMBSHREFv2 2345 0.41 0.38 0.42 193 RCVD_IN_SORBS_DUL 2339 0.40 0.27 0.42 194 RELAYCOUNTRY_AU 2332 0.44 0.54 0.42 195 DIET_1 2317 0.52 1.10 0.42 196 RELAYCOUNTRY_DE 2314 0.60 1.63 0.41 197 TM2_M_BODY_EMPTY 2307 0.36 0.08 0.41 198 RDNS_DYNAMIC 2298 0.56 1.39 0.41 199 XM_S_SubURI 2297 0.37 0.15 0.41 200 HTML_IMAGE_ONLY_28 2259 0.40 0.36 0.40 ----------------------------------------------------------------------