Email: 754498 Autolearn: 0 AvgScore: 0.94 AvgScanTime: 1.07 sec Spam: 116243 Autolearn: 0 AvgScore: 12.65 AvgScanTime: 1.22 sec Ham: 638255 Autolearn: 0 AvgScore: -1.20 AvgScanTime: 1.04 sec Time Spent Running SA: 224.29 hours Time Spent Processing Spam: 39.43 hours Time Spent Processing Ham: 184.86 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 112088 98.16 96.43 98.47 2 HTML_MESSAGE 109189 80.94 93.93 78.57 3 XM_B_Unicode 76930 64.64 66.18 64.36 4 RELAYCOUNTRY_US 74557 70.83 64.14 72.05 5 DKIM_SIGNED 74283 66.37 63.90 66.82 6 XM_DK_Pass 71974 65.23 61.92 65.83 7 DKIM_VALID 69595 63.39 59.87 64.03 8 XMListUnsubscribeExists 62628 48.23 53.88 47.20 9 XM_B_SpammyWords 60810 46.04 52.31 44.90 10 DKIM_VALID_AU 52111 47.84 44.83 48.39 11 MIME_HTML_ONLY 46421 21.36 39.93 17.97 12 BAYES_50 45852 45.81 39.44 46.97 13 XM_DK_Undo_02 44397 13.36 38.19 8.84 14 RELAYCOUNTRY_META 41460 9.55 35.67 4.79 15 BAYES_99 36836 9.87 31.69 5.90 16 RCVD_IN_MSPIKE_H2 35943 24.05 30.92 22.80 17 XM_B_SpammyWords2 35914 23.01 30.90 21.58 18 XM_B_Unicode3 34142 35.74 29.37 36.89 19 LOC_TINY_FONT_1 32164 23.14 27.67 22.32 20 UNTRUSTED_Relay 31176 5.94 26.82 2.13 21 DKIM_VALID_EF 30991 24.54 26.66 24.15 22 T_TM2_M_HEADER_IN_MSG 27947 25.57 24.04 25.85 23 BAYES_999 27409 7.56 23.58 4.64 24 HTML_FONT_LOW_CONTRAST 25392 24.04 21.84 24.44 25 FVGT_m_MULTI_ODD 25013 20.43 21.52 20.24 26 BOTNET 24995 4.89 21.50 1.86 27 XMSubLong 24309 20.07 20.91 19.91 28 LOTS_OF_MONEY 23267 9.37 20.02 7.43 29 T_KAM_HTML_FONT_INVALID 21789 18.08 18.74 17.95 30 XM_UncommonTLD01 21709 5.11 18.68 2.64 31 T_REMOTE_IMAGE 21432 5.43 18.44 3.06 32 XM_Body_Dirty_Words 20327 12.37 17.49 11.43 33 HTML_IMAGE_RATIO_02 20035 7.73 17.24 6.00 34 XM_Multi_Part_URI 20027 12.76 17.23 11.95 35 HTML_MIME_NO_HTML_TAG 18409 4.05 15.84 1.90 36 BOTNET_IPINHOSTNAME 16715 6.13 14.38 4.63 37 XM_UB50 14478 2.91 12.45 1.17 38 XM_B_Phish_Phrases 13461 6.74 11.58 5.86 39 XM_B_SpammyWords3 13014 6.97 11.20 6.20 40 RCVD_IN_PSBL 12500 1.70 10.75 0.05 41 FROM_EXCESS_BASE64 12261 3.58 10.55 2.31 42 SpammyFromTLD_02 11561 1.80 9.95 0.31 43 BODY_URI_ONLY 11492 1.56 9.89 0.05 44 XM_B_Unsub 11416 9.13 9.82 9.00 45 XM_Evil_Numbers_Gen 11184 8.10 9.62 7.82 46 XMSexyCombo_05 10863 4.57 9.35 3.71 47 XMBody_17 10801 2.04 9.29 0.72 48 RCVD_IN_MSPIKE_BL 10798 2.20 9.29 0.91 49 BAYES_80 10688 4.82 9.19 4.02 50 RCVD_IN_MSPIKE_WL 10335 22.17 8.89 24.59 51 TR_LOTS_OF_MONEY3 10051 1.69 8.65 0.43 52 BAYES_60 9498 6.41 8.17 6.09 53 MPART_ALT_DIFF 9311 5.14 8.01 4.62 54 RCVD_IN_BL_SPAMCOP_NET 9122 2.29 7.85 1.28 55 HTML_SHORT_LINK_IMG_1 8927 1.20 7.68 0.02 56 XMSubGiftCard1 8404 1.15 7.23 0.04 57 HTML_IMAGE_ONLY_16 8335 1.32 7.17 0.26 58 SUBJ_ALL_CAPS 8159 2.47 7.02 1.64 59 HTML_SHORT_LINK_IMG_2 7802 1.08 6.71 0.05 60 RELAYCOUNTRY_CA 7258 2.22 6.24 1.48 61 KHOP_HELO_FCRDNS 7222 2.32 6.21 1.61 62 LotsOfNums_01 7075 7.67 6.09 7.96 63 HELO_NODOT 6937 1.93 5.97 1.19 64 HELO_NO_DOMAIN 6915 1.92 5.95 1.19 65 XMStrtUSub 6910 3.94 5.94 3.58 66 MISSING_HEADERS 6837 1.22 5.88 0.38 67 MIME_HTML_MOSTLY 6812 2.62 5.86 2.02 68 BOTNET_NORDNS 6801 0.92 5.85 0.02 69 XMSubMetaSx_00 6702 3.85 5.77 3.50 70 TR_XM_PhishingBody 6551 3.51 5.64 3.12 71 REPLYTO_WITHOUT_TO_CC 6551 0.93 5.64 0.07 72 TR_LOTS_OF_MONEY1 6466 0.88 5.56 0.02 73 SpammyFromTLD_01 6308 1.42 5.43 0.70 74 XM_SPF_SoftFail 6256 2.05 5.38 1.45 75 RCVD_IN_MSPIKE_H3 6229 12.37 5.36 13.65 76 DEAR_SOMETHING 6096 0.91 5.24 0.12 77 XMNumbers 6057 4.43 5.21 4.29 78 TooManyTo_001 5895 6.67 5.07 6.96 79 RCVD_IN_MSPIKE_L3 5875 1.27 5.05 0.59 80 RELAYCOUNTRY_RO 5824 0.78 5.01 0.00 81 RELAYCOUNTRY_IN 5760 0.85 4.96 0.10 82 BAYES_95 5631 2.74 4.84 2.35 83 XM_H_Long_From01 5506 4.71 4.74 4.70 84 TR_Mismatch_TLD_02 5425 0.80 4.67 0.10 85 XM_B_COVIDMETA 5383 1.65 4.63 1.11 86 RCVD_IN_RP_RNBL 5123 0.78 4.41 0.12 87 XM_UB99 5108 0.68 4.39 0.01 88 RELAYCOUNTRY_FR 5068 0.90 4.36 0.27 89 T_XMDrugObfuBody_08 4896 2.15 4.21 1.78 90 UNPARSEABLE_RELAY 4893 6.32 4.21 6.71 91 HTML_IMAGE_RATIO_04 4834 5.12 4.16 5.29 92 DKIM_INVALID 4688 2.98 4.03 2.78 93 HTML_IMAGE_ONLY_12 4624 0.78 3.98 0.20 94 XM_DIRTYINTL 4548 1.18 3.91 0.69 95 SHORT_SHORTNER 4505 0.64 3.88 0.05 96 XMSubGiftCard2 4362 0.60 3.75 0.03 97 XMDiploma_00 4265 2.19 3.67 1.93 98 RCVD_IN_MSPIKE_L5 4201 0.77 3.61 0.26 99 XM_B_Phish66 4171 2.08 3.59 1.81 100 XM_OfRef6 4170 1.44 3.59 1.05 101 XM_B_SpammyTLD 4030 2.12 3.47 1.88 102 FROM_SUSPICIOUS_NTLD 4005 0.58 3.45 0.05 103 XM_SendGrid 3938 5.53 3.39 5.92 104 FROM_SUSPICIOUS_NTLD_FP 3915 0.56 3.37 0.04 105 XM_UB60 3862 0.67 3.32 0.18 106 TM2_M_URI_OPT_OUT 3797 3.26 3.27 3.26 107 RCVD_IN_MSPIKE_H4 3795 8.33 3.26 9.26 108 XMBrknScrpt_02 3778 1.45 3.25 1.12 109 URI_PHP_REDIR 3709 0.50 3.19 0.01 110 XM_UB80 3602 0.52 3.10 0.05 111 XM_URI_RBL 3600 0.63 3.10 0.18 112 HK_RANDOM_FROM 3549 0.58 3.05 0.13 113 DKIM_ADSP_NXDOMAIN 3468 0.85 2.98 0.46 114 XM_UB999 3454 0.46 2.97 0.00 115 XM_CamelCaseFrm001 3341 1.90 2.87 1.72 116 TR_XM_PHPDW 3341 0.70 2.87 0.30 117 TR_XM_PHPForged 3293 0.66 2.83 0.26 118 XM_B_Unsub2 3277 2.36 2.82 2.28 119 XMGenDplmaNmb 3245 1.33 2.79 1.07 120 TR_XM_FormFill2 3240 0.65 2.79 0.26 121 XM_H_PHPOS 3231 0.64 2.78 0.26 122 TR_XM_MaxSPIKE 3091 0.47 2.66 0.07 123 T_HTML_TAG_BALANCE_CENTER 2830 0.46 2.43 0.11 124 HTML_IMAGE_RATIO_08 2797 2.29 2.41 2.27 125 HTML_IMAGE_RATIO_06 2768 3.49 2.38 3.69 126 HTML_IMAGE_ONLY_04 2751 0.40 2.37 0.04 127 HDRS_MISSP 2682 0.38 2.31 0.03 128 URIBL_SBL_A 2670 0.59 2.30 0.27 129 LH_URI_DOM_IN_PATH 2666 1.85 2.29 1.77 130 SHORT_URI_2 2655 0.39 2.28 0.04 131 BAYES_40 2638 5.04 2.27 5.55 132 XMBody_50 2617 0.35 2.25 0.00 133 TR_XM_COVIDMETA4 2614 0.71 2.25 0.43 134 TR_XM_RelayPhish 2572 0.53 2.21 0.22 135 BAYES_20 2384 9.94 2.05 11.37 136 TR_XM_UnparsRelay 2368 0.61 2.04 0.35 137 T_TooManySym_01 2338 3.54 2.01 3.82 138 URI_HEX 2281 1.47 1.96 1.38 139 XM_B_SpammyWords4 2278 0.81 1.96 0.60 140 T_XMDrugObfuBody_14 2265 1.51 1.95 1.43 141 TR_XM_MaxBayes 2248 0.33 1.93 0.04 142 HTML_IMAGE_ONLY_08 2174 0.36 1.87 0.08 143 URI_TRY_3LD 2102 1.40 1.81 1.32 144 RELAYCOUNTRY_RU 2091 0.52 1.80 0.29 145 XMSexyCombo_01 2074 0.88 1.78 0.71 146 TM2_M_VERY_LONG_WORD 2040 1.22 1.75 1.12 147 RELAYCOUNTRY_GB 2026 0.93 1.74 0.79 148 TR_XM_DK_SendGrid 2002 3.17 1.72 3.43 149 DIET_1 1979 0.58 1.70 0.38 150 TR_XM_COVIDMETA1 1964 0.50 1.69 0.28 151 XMSlimDrugH 1938 0.56 1.67 0.36 152 XM_BadFromFormat 1887 0.36 1.62 0.13 153 TR_XM_INV_DKIM 1884 0.33 1.62 0.10 154 SHORT_URI_3 1878 0.31 1.62 0.07 155 MIME_QP_LONG_LINE 1861 4.49 1.60 5.02 156 ALL_TRUSTED 1839 20.63 1.58 24.10 157 HELO_MISC_IP 1834 1.28 1.58 1.23 158 CK_HELO_DYNAMIC_SPLIT_IP 1813 1.28 1.56 1.22 159 MIME_HTML_ONLY_MULTI 1784 2.80 1.53 3.03 160 T_XMDrugObfuBody_00 1771 0.67 1.52 0.52 161 XM_UB95 1767 0.25 1.52 0.02 162 T_PDS_OTHER_BAD_TLD 1750 0.59 1.51 0.42 163 TVD_SPACE_RATIO_MINFP 1741 0.24 1.50 0.01 164 TR_Sbj_FN_Bdy 1723 0.37 1.48 0.17 165 RELAYCOUNTRY_KR 1723 0.24 1.48 0.01 166 XMHTML_After_End 1691 0.85 1.45 0.73 167 XM_JunkDunk 1690 0.22 1.45 0.00 168 XMStockSpam_06 1662 0.87 1.43 0.76 169 MAILING_LIST_MULTI 1640 1.83 1.41 1.90 170 RCVD_IN_IADB_LISTED 1621 4.14 1.39 4.64 171 T_XMHurry_00 1619 0.66 1.39 0.53 172 XMSubNoVowel 1609 1.01 1.38 0.94 173 TR_Symld_Words 1600 2.57 1.38 2.78 174 SPOOFED_URL 1576 0.79 1.36 0.69 175 RELAYCOUNTRY_NL 1572 0.35 1.35 0.16 176 ANY_BOUNCE_MESSAGE 1557 12.06 1.34 14.01 177 BOUNCE_MESSAGE 1554 12.06 1.34 14.01 178 XM_H_Long_From02 1531 1.18 1.32 1.15 179 T_FILL_THIS_FORM_SHORT 1531 0.84 1.32 0.75 180 RDNS_DYNAMIC 1477 0.50 1.27 0.35 181 FROM_LOCAL_NOVOWEL 1452 0.21 1.25 0.03 182 SPOOFED_URL_HOST 1435 0.71 1.23 0.62 183 HTML_SHORT_CENTER 1435 0.19 1.23 0.00 184 URI_NOVOWEL 1391 1.95 1.20 2.09 185 XMSubEmpty 1385 0.36 1.19 0.21 186 BAYES_05 1362 3.52 1.17 3.95 187 BAYES_00 1351 11.85 1.16 13.80 188 XM_ContractorBdy01 1350 0.18 1.16 0.00 189 XM_S_SpammyWords 1336 0.43 1.15 0.29 190 XMGetyour 1336 0.19 1.15 0.01 191 TR_XM_Spammywords 1336 0.43 1.15 0.29 192 DKIM_ADSP_CUSTOM_MED 1329 1.00 1.14 0.97 193 HTML_TAG_BALANCE_BODY 1306 0.52 1.12 0.40 194 DATE_IN_PAST_03_06 1305 0.25 1.12 0.09 195 T_Symld_Words_02 1289 0.57 1.11 0.47 196 TR_Mismatch_TLD_01 1274 0.34 1.10 0.20 197 RCVD_IN_IADB_SPF 1273 3.62 1.10 4.08 198 NML_ADSP_CUSTOM_MED 1226 0.73 1.05 0.67 199 XMWghtMeta_00 1220 0.18 1.05 0.02 200 XM_PDF 1193 3.25 1.03 3.65 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 628497 98.16 96.43 98.47 2 HTML_MESSAGE 501470 80.94 93.93 78.57 3 RELAYCOUNTRY_US 459887 70.83 64.14 72.05 4 DKIM_SIGNED 426451 66.37 63.90 66.82 5 XM_DK_Pass 420185 65.23 61.92 65.83 6 XM_B_Unicode 410756 64.64 66.18 64.36 7 DKIM_VALID 408683 63.39 59.87 64.03 8 DKIM_VALID_AU 308832 47.84 44.83 48.39 9 XMListUnsubscribeExists 301273 48.23 53.88 47.20 10 BAYES_50 299762 45.81 39.44 46.97 11 XM_B_SpammyWords 286583 46.04 52.31 44.90 12 XM_B_Unicode3 235481 35.74 29.37 36.89 13 T_TM2_M_HEADER_IN_MSG 164995 25.57 24.04 25.85 14 RCVD_IN_MSPIKE_WL 156974 22.17 8.89 24.59 15 HTML_FONT_LOW_CONTRAST 155994 24.04 21.84 24.44 16 DKIM_VALID_EF 154135 24.54 26.66 24.15 17 ALL_TRUSTED 153827 20.63 1.58 24.10 18 RCVD_IN_MSPIKE_H2 145512 24.05 30.92 22.80 19 LOC_TINY_FONT_1 142462 23.14 27.67 22.32 20 XM_B_SpammyWords2 137729 23.01 30.90 21.58 21 FVGT_m_MULTI_ODD 129152 20.43 21.52 20.24 22 XMSubLong 127104 20.07 20.91 19.91 23 MIME_HTML_ONLY 114722 21.36 39.93 17.97 24 T_KAM_HTML_FONT_INVALID 114589 18.08 18.74 17.95 25 ANY_BOUNCE_MESSAGE 89446 12.06 1.34 14.01 26 BOUNCE_MESSAGE 89444 12.06 1.34 14.01 27 BAYES_00 88089 11.85 1.16 13.80 28 RCVD_IN_MSPIKE_H3 87117 12.37 5.36 13.65 29 XM_Multi_Part_URI 76247 12.76 17.23 11.95 30 XM_Body_Dirty_Words 72982 12.37 17.49 11.43 31 BAYES_20 72583 9.94 2.05 11.37 32 RCVD_IN_MSPIKE_H4 59091 8.33 3.26 9.26 33 XM_B_Unsub 57438 9.13 9.82 9.00 34 XM_DK_Undo_02 56413 13.36 38.19 8.84 35 LotsOfNums_01 50791 7.67 6.09 7.96 36 TR_XM_DK_Bayes 50414 6.73 0.32 7.90 37 XM_Evil_Numbers_Gen 49920 8.10 9.62 7.82 38 TR_XM_DK_Bayes1 48872 6.53 0.31 7.66 39 LOTS_OF_MONEY 47424 9.37 20.02 7.43 40 TooManyTo_001 44435 6.67 5.07 6.96 41 TR_XM_DK_Bayes2 43894 5.86 0.26 6.88 42 UNPARSEABLE_RELAY 42812 6.32 4.21 6.71 43 RCVD_IN_RP_SAFE 40553 5.46 0.56 6.35 44 XM_B_SpammyWords3 39590 6.97 11.20 6.20 45 BAYES_60 38896 6.41 8.17 6.09 46 HTML_IMAGE_RATIO_02 38325 7.73 17.24 6.00 47 XM_SendGrid 37789 5.53 3.39 5.92 48 BAYES_99 37638 9.87 31.69 5.90 49 XM_B_Phish_Phrases 37413 6.74 11.58 5.86 50 IN_ZIMBRA_NJ_WHITELIST 37315 4.95 0.02 5.85 51 RCVD_IN_RP_CERTIFIED 37145 4.97 0.31 5.82 52 XM_DKIMWhitelistDomains 36068 4.78 0.00 5.65 53 BAYES_40 35396 5.04 2.27 5.55 54 HTML_IMAGE_RATIO_04 33765 5.12 4.16 5.29 55 MIME_QP_LONG_LINE 32040 4.49 1.60 5.02 56 RELAYCOUNTRY_META 30558 9.55 35.67 4.79 57 XM_H_Long_From01 29998 4.71 4.74 4.70 58 RCVD_IN_IADB_LISTED 29639 4.14 1.39 4.64 59 BAYES_999 29631 7.56 23.58 4.64 60 BOTNET_IPINHOSTNAME 29555 6.13 14.38 4.63 61 MPART_ALT_DIFF 29482 5.14 8.01 4.62 62 XMNumbers 27385 4.43 5.21 4.29 63 RCVD_IN_IADB_SPF 26055 3.62 1.10 4.08 64 BAYES_80 25657 4.82 9.19 4.02 65 BAYES_05 25211 3.52 1.17 3.95 66 T_TooManySym_01 24405 3.54 2.01 3.82 67 XMSexyCombo_05 23654 4.57 9.35 3.71 68 HTML_IMAGE_RATIO_06 23582 3.49 2.38 3.69 69 RCVD_IN_IADB_SENDERID 23452 3.26 0.98 3.67 70 XM_PDF 23311 3.25 1.03 3.65 71 XMStrtUSub 22837 3.94 5.94 3.58 72 RCVD_IN_IADB_DK 22735 3.17 0.99 3.56 73 XMSubMetaSx_00 22325 3.85 5.77 3.50 74 TR_XM_DK_SendGrid 21897 3.17 1.72 3.43 75 TM2_M_URI_OPT_OUT 20791 3.26 3.27 3.26 76 TR_XM_PhishingBody 19905 3.51 5.64 3.12 77 T_REMOTE_IMAGE 19518 5.43 18.44 3.06 78 MIME_HTML_ONLY_MULTI 19354 2.80 1.53 3.03 79 RCVD_IN_IADB_VOUCHED 18324 2.55 0.80 2.87 80 DKIM_INVALID 17768 2.98 4.03 2.78 81 TR_Symld_Words 17753 2.57 1.38 2.78 82 XM_H_Trusted_IP 16866 2.24 0.00 2.64 83 XM_UncommonTLD01 16860 5.11 18.68 2.64 84 BAYES_95 15017 2.74 4.84 2.35 85 FROM_EXCESS_BASE64 14752 3.58 10.55 2.31 86 XM_B_Unsub2 14550 2.36 2.82 2.28 87 HTML_IMAGE_RATIO_08 14459 2.29 2.41 2.27 88 UNTRUSTED_Relay 13608 5.94 26.82 2.13 89 URI_NOVOWEL 13332 1.95 1.20 2.09 90 MIME_HTML_MOSTLY 12920 2.62 5.86 2.02 91 T_TooManySym_02 12328 1.73 0.61 1.93 92 XMDiploma_00 12290 2.19 3.67 1.93 93 HTML_MIME_NO_HTML_TAG 12154 4.05 15.84 1.90 94 MAILING_LIST_MULTI 12131 1.83 1.41 1.90 95 RCVD_IN_IADB_OPTIN 12072 1.68 0.55 1.89 96 XM_B_SpammyTLD 11982 2.12 3.47 1.88 97 BOTNET 11894 4.89 21.50 1.86 98 HTML_FONT_FACE_BAD 11568 1.64 0.68 1.81 99 XM_B_Phish66 11534 2.08 3.59 1.81 100 T_XMDrugObfuBody_08 11347 2.15 4.21 1.78 101 LH_URI_DOM_IN_PATH 11307 1.85 2.29 1.77 102 XM_CamelCaseFrm001 10989 1.90 2.87 1.72 103 TooManyTo_002 10919 1.55 0.68 1.71 104 RCVD_IN_MSPIKE_H5 10766 1.47 0.27 1.69 105 SUBJ_ALL_CAPS 10480 2.47 7.02 1.64 106 KHOP_HELO_FCRDNS 10300 2.32 6.21 1.61 107 TVD_RCVD_IP 9481 1.33 0.46 1.49 108 RELAYCOUNTRY_CA 9464 2.22 6.24 1.48 109 XM_DK_Undo_01 9425 1.38 0.86 1.48 110 XM_SPF_SoftFail 9236 2.05 5.38 1.45 111 T_XMDrugObfuBody_14 9128 1.51 1.95 1.43 112 URI_HEX 8811 1.47 1.96 1.38 113 HTTPS_HTTP_MISMATCH 8500 1.25 0.81 1.33 114 URI_TRY_3LD 8424 1.40 1.81 1.32 115 RCVD_IN_BL_SPAMCOP_NET 8186 2.29 7.85 1.28 116 HELO_MISC_IP 7819 1.28 1.58 1.23 117 CK_HELO_DYNAMIC_SPLIT_IP 7817 1.28 1.56 1.22 118 HELO_NODOT 7610 1.93 5.97 1.19 119 HELO_NO_DOMAIN 7609 1.92 5.95 1.19 120 XM_UB50 7451 2.91 12.45 1.17 121 IN_HORDE_ADDRESS_BOOK 7414 0.99 0.02 1.16 122 XM_H_Long_From02 7335 1.18 1.32 1.15 123 INVALID_MSGID 7327 1.04 0.45 1.15 124 XMGappySubj_01 7314 1.01 0.28 1.15 125 TM2_M_VERY_LONG_WORD 7166 1.22 1.75 1.12 126 XMBrknScrpt_02 7165 1.45 3.25 1.12 127 TooManyTo_003 7140 1.01 0.44 1.12 128 XM_B_COVIDMETA 7099 1.65 4.63 1.11 129 USER_IN_DEF_DKIM_WL 7068 0.94 0.00 1.11 130 XMGenDplmaNmb 6801 1.33 2.79 1.07 131 XM_OfRef6 6713 1.44 3.59 1.05 132 TO_MALFORMED 6381 0.85 0.02 1.00 133 DKIM_ADSP_CUSTOM_MED 6215 1.00 1.14 0.97 134 XM_ProductURIs 6046 0.88 0.54 0.95 135 XM_GoogleGroups 6036 0.85 0.33 0.95 136 XMSubNoVowel 5992 1.01 1.38 0.94 137 XMCapTrack 5898 0.84 0.35 0.92 138 RCVD_IN_MSPIKE_BL 5805 2.20 9.29 0.91 139 TR_MetaPhish_Combo_01 5181 0.80 0.73 0.81 140 TooManyTo_004 5037 0.72 0.37 0.79 141 RELAYCOUNTRY_GB 5025 0.93 1.74 0.79 142 XMBdyGiftCard01 4930 0.79 0.89 0.77 143 XMStockSpam_06 4881 0.87 1.43 0.76 144 T_FILL_THIS_FORM_SHORT 4780 0.84 1.32 0.75 145 T_TooManySym_03 4735 0.65 0.16 0.74 146 XMHTML_After_End 4690 0.85 1.45 0.73 147 XMBody_17 4589 2.04 9.29 0.72 148 XMSexyCombo_01 4543 0.88 1.78 0.71 149 SpammyFromTLD_01 4443 1.42 5.43 0.70 150 SPOOFED_URL 4396 0.79 1.36 0.69 151 XM_DIRTYINTL 4380 1.18 3.91 0.69 152 T_OBFU_PDF_ATTACH 4338 0.60 0.16 0.68 153 NML_ADSP_CUSTOM_MED 4293 0.73 1.05 0.67 154 TooManyTo_005 4130 0.60 0.32 0.65 155 TR_MSPIKEBAYES00 4110 0.55 0.01 0.64 156 FILL_THIS_FORM 3944 0.59 0.46 0.62 157 SPOOFED_URL_HOST 3937 0.71 1.23 0.62 158 XM_ShortIntro_01 3903 0.63 0.76 0.61 159 XMBody_95 3828 0.52 0.06 0.60 160 XM_B_SpammyWords4 3823 0.81 1.96 0.60 161 XM_SPF_Unknown 3772 0.63 0.88 0.59 162 RCVD_IN_MSPIKE_L3 3739 1.27 5.05 0.59 163 XMMoneyMeta_00 3549 0.61 0.91 0.56 164 TR_BOTNET_NEGATE 3444 0.58 0.82 0.54 165 XMSubMetaI_00 3367 0.56 0.73 0.53 166 T_XMHurry_00 3353 0.66 1.39 0.53 167 XMLngstWrd_00 3312 0.51 0.49 0.52 168 T_XMDrugObfuBody_00 3304 0.67 1.52 0.52 169 XMHTMLBadTable_001 3294 0.50 0.39 0.52 170 FROM_GOV_DKIM_AU 3209 0.46 0.23 0.50 171 XM_H_PHPMailer 3156 0.55 0.87 0.49 172 XMPhish14 3144 0.52 0.68 0.49 173 XMNoVowels 3120 0.48 0.45 0.49 174 FORGED_GMAIL_RCVD 3063 0.55 0.95 0.48 175 XMSubMetaSxObfu_03 3034 0.55 0.95 0.48 176 T_Symld_Words_02 2979 0.57 1.11 0.47 177 XM_B_REG_HTML 2975 0.40 0.06 0.47 178 DKIM_ADSP_NXDOMAIN 2917 0.85 2.98 0.46 179 XMLngstWrd_01 2874 0.45 0.43 0.45 180 HTML_IMAGE_ONLY_20 2771 0.40 0.20 0.43 181 TR_XM_COVIDMETA4 2751 0.71 2.25 0.43 182 TR_LOTS_OF_MONEY3 2726 1.69 8.65 0.43 183 T_PDS_OTHER_BAD_TLD 2708 0.59 1.51 0.42 184 HTML_IMAGE_ONLY_28 2654 0.40 0.28 0.42 185 MPART_ALT_DIFF_COUNT 2654 0.50 0.95 0.42 186 XMPhish08 2638 0.44 0.62 0.41 187 XMBody_78 2607 0.48 0.86 0.41 188 XMPhish30 2602 0.47 0.83 0.41 189 HTML_TAG_BALANCE_BODY 2580 0.52 1.12 0.40 190 RELAYCOUNTRY_DE 2522 0.48 0.94 0.40 191 T_TooManySym_04 2516 0.34 0.06 0.39 192 NO_DNS_FOR_FROM 2476 0.46 0.88 0.39 193 XMLngstWrd_02 2471 0.37 0.28 0.39 194 NUMERIC_HTTP_ADDR 2422 0.41 0.57 0.38 195 XM_B_COPY_HTML 2411 0.40 0.54 0.38 196 DIET_1 2410 0.58 1.70 0.38 197 MISSING_HEADERS 2403 1.22 5.88 0.38 198 PLING_QUERY 2383 0.36 0.29 0.37 199 HTML_IMAGE_ONLY_32 2343 0.35 0.26 0.37 200 RCVD_IN_SORBS_DUL 2319 0.33 0.12 0.36 ----------------------------------------------------------------------