Email: 414281 Autolearn: 0 AvgScore: 3.58 AvgScanTime: 1.23 sec Spam: 135786 Autolearn: 0 AvgScore: 12.95 AvgScanTime: 1.26 sec Ham: 278495 Autolearn: 0 AvgScore: -0.99 AvgScanTime: 1.21 sec Time Spent Running SA: 141.00 hours Time Spent Processing Spam: 47.59 hours Time Spent Processing Ham: 93.41 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 128745 89.49 94.81 86.90 2 DKIM_SIGNED 113634 81.07 83.69 79.79 3 XM_DK_Pass 109397 79.32 80.57 78.71 4 DKIM_VALID 107721 77.91 79.33 77.21 5 XM_B_Unicode 105349 74.05 77.58 72.33 6 RELAYCOUNTRY_US 103419 81.43 76.16 84.00 7 DCC_CHECK 102229 54.74 75.29 44.71 8 XM_B_SpammyWords 97331 58.61 71.68 52.24 9 XMListUnsubscribeExists 94023 60.17 69.24 55.75 10 DKIM_VALID_AU 80812 60.62 59.51 61.16 11 XM_DK_Undo_02 61836 21.23 45.54 9.38 12 XM_B_SpammyWords2 57893 28.95 42.64 22.28 13 XM_B_Unicode3 52432 41.73 38.61 43.25 14 TR_XM_DKIM_Undo 51691 16.68 38.07 6.25 15 BAYES_99 51067 16.68 37.61 6.48 16 HTML_FONT_LOW_CONTRAST 49861 33.05 36.72 31.26 17 LOC_TINY_FONT_1 46339 30.75 34.13 29.10 18 MIME_HTML_ONLY 42312 26.70 31.16 24.53 19 BAYES_50 41816 45.61 30.80 52.83 20 BAYES_999 40306 13.22 29.68 5.19 21 DKIM_VALID_EF 36857 29.82 27.14 31.12 22 TR_DCC_Bayes_99 36274 10.97 26.71 3.30 23 RCVD_IN_MSPIKE_H2 35893 26.92 26.43 27.16 24 FVGT_m_MULTI_ODD 33733 23.41 24.84 22.71 25 DCC_CHECK_NEGATIVE 32280 44.16 23.77 54.10 26 RELAYCOUNTRY_META 31681 10.68 23.33 4.51 27 XMSubLong 29362 21.01 21.62 20.70 28 T_KAM_HTML_FONT_INVALID 28264 19.08 20.82 18.23 29 XM_Multi_Part_URI 28165 15.83 20.74 13.43 30 XM_Body_Dirty_Words 25780 15.58 18.99 13.92 31 T_TM2_M_HEADER_IN_MSG 24540 21.33 18.07 22.92 32 TR_XM_SpammyWords2 23309 6.33 17.17 1.04 33 LOTS_OF_MONEY 22980 12.03 16.92 9.64 34 RCVD_IN_MSPIKE_WL 22185 25.43 16.34 29.86 35 UNTRUSTED_Relay 20880 6.50 15.38 2.18 36 FSL_BULK_SIG 19957 8.88 14.70 6.04 37 XM_B_Unsub 17320 12.08 12.76 11.75 38 XM_B_SpammyWords3 16628 7.84 12.25 5.69 39 BOTNET 16260 5.16 11.97 1.84 40 BOTNET_IPINHOSTNAME 16164 7.80 11.90 5.79 41 LotsOfNums_01 15008 9.34 11.05 8.51 42 RCVD_IN_MSPIKE_BL 14460 4.13 10.65 0.95 43 BAYES_80 14288 6.90 10.52 5.14 44 XM_UncommonTLD01 12931 5.67 9.52 3.79 45 RCVD_IN_MSPIKE_H3 12502 14.33 9.21 16.83 46 XMSexyCombo_05 12333 6.52 9.08 5.28 47 HTML_IMAGE_RATIO_02 12064 8.42 8.88 8.20 48 T_REMOTE_IMAGE 12015 5.13 8.85 3.32 49 XM_B_Phish_Phrases 12007 8.07 8.84 7.70 50 BAYES_60 11678 8.32 8.60 8.19 51 TR_XM_SpammyWords3 11193 3.16 8.24 0.67 52 XM_Evil_Numbers_Gen 10612 8.67 7.82 9.09 53 RELAYCOUNTRY_CA 9862 3.60 7.26 1.81 54 XMSubMetaSx_00 9750 5.80 7.18 5.12 55 RCVD_IN_BL_SPAMCOP_NET 9622 3.28 7.09 1.42 56 MIME_HTML_MOSTLY 9351 3.95 6.89 2.51 57 UNPARSEABLE_RELAY 9345 8.40 6.88 9.13 58 MPART_ALT_DIFF 9322 6.15 6.87 5.80 59 BAYES_95 9179 4.68 6.76 3.67 60 KHOP_HELO_FCRDNS 9143 2.84 6.73 0.93 61 RCVD_IN_MSPIKE_L3 8939 2.62 6.58 0.69 62 RCVD_IN_MSPIKE_H4 8721 9.05 6.42 10.34 63 XMBrknScrpt_02 8683 2.78 6.39 1.01 64 HTML_SHORT_LINK_IMG_1 8572 2.09 6.31 0.03 65 BODY_URI_ONLY 8508 2.08 6.27 0.04 66 HTML_IMAGE_ONLY_12 8469 2.15 6.24 0.16 67 XM_H_Long_From01 8079 5.37 5.95 5.08 68 TooManyTo_001 7865 6.06 5.79 6.19 69 US_DOLLARS_3 7837 3.80 5.77 2.83 70 XM_UB50 7684 2.51 5.66 0.98 71 TR_XM_PhishingBody 7677 3.57 5.65 2.56 72 XMBody_17 6965 2.36 5.13 1.01 73 HTML_IMAGE_RATIO_04 6904 5.97 5.08 6.41 74 XM_SendGrid 6660 7.17 4.90 8.28 75 URIBL_SBL_A 6577 1.82 4.84 0.35 76 URI_HEX 6558 2.53 4.83 1.41 77 RCVD_IN_RP_SAFE 6432 8.05 4.74 9.67 78 HTML_IMAGE_RATIO_06 6160 4.74 4.54 4.84 79 XMStrtUSub 6009 5.46 4.43 5.96 80 DKIM_INVALID 5913 3.16 4.35 2.58 81 TR_LOTS_OF_MONEY3 5470 1.81 4.03 0.72 82 XMNumbers 5140 3.90 3.79 3.96 83 RCVD_IN_RP_CERTIFIED 5083 7.33 3.74 9.08 84 SpammyFromTLD_01 4835 1.59 3.56 0.63 85 RCVD_IN_MSPIKE_L5 4826 1.31 3.55 0.22 86 TR_XM_MaxSPIKE 4774 1.17 3.52 0.02 87 T_XMDrugObfuBody_08 4748 2.28 3.50 1.69 88 XM_OfRef6 4730 2.22 3.48 1.61 89 RCVD_IN_RP_RNBL 4716 1.18 3.47 0.07 90 XM_DIRTYINTL 4708 1.45 3.47 0.47 91 RELAYCOUNTRY_UA 4651 1.14 3.43 0.02 92 T_FONT_INVIS_NAKED_TO 4643 2.68 3.42 2.32 93 SUBJ_ALL_CAPS 4618 2.21 3.40 1.63 94 XM_SPF_SoftFail 4547 1.79 3.35 1.03 95 XM_UB60 4483 1.16 3.30 0.11 96 XM_B_SpammyTLD 4439 2.36 3.27 1.92 97 XMSexyCombo_01 4262 2.18 3.14 1.71 98 LH_URI_DOM_IN_PATH 4237 2.11 3.12 1.62 99 RELAYCOUNTRY_FR 4053 1.17 2.98 0.29 100 TM2_M_URI_OPT_OUT 3938 3.81 2.90 4.26 101 TR_XM_DK_SendGrid 3924 4.57 2.89 5.39 102 HTML_IMAGE_RATIO_08 3900 2.46 2.87 2.26 103 XMDiploma_00 3807 1.90 2.80 1.46 104 TR_XM_MaxBayes 3663 0.89 2.70 0.02 105 XM_UB80 3588 0.89 2.64 0.03 106 XM_CamelCaseFrm001 3351 2.06 2.47 1.86 107 SpammyFromTLD_02 3292 0.89 2.42 0.14 108 URI_TRY_3LD 3279 1.74 2.41 1.41 109 RCVD_IN_IADB_LISTED 3216 4.31 2.37 5.26 110 TM2_M_A_HREF_HREF 3153 1.55 2.32 1.17 111 FROM_EXCESS_BASE64 3106 3.30 2.29 3.79 112 XM_B_SpammyWords4 3071 1.16 2.26 0.62 113 BAYES_40 2832 3.59 2.09 4.32 114 MIME_HTML_ONLY_MULTI 2807 3.36 2.07 4.00 115 XMPhish14 2792 0.84 2.06 0.25 116 BOUNCE_MESSAGE 2743 2.69 2.02 3.01 117 ANY_BOUNCE_MESSAGE 2743 2.69 2.02 3.01 118 XM_B_Unsub2 2732 1.51 2.01 1.27 119 T_TooManySym_01 2729 4.63 2.01 5.90 120 XM_B_COVIDMETA 2662 1.38 1.96 1.10 121 XM_B_Phish66 2609 1.43 1.92 1.20 122 TR_XM_UnparsRelay 2600 1.07 1.91 0.66 123 T_XMHurry_00 2584 0.98 1.90 0.52 124 RCVD_IN_IADB_SPF 2581 3.68 1.90 4.55 125 RCVD_IN_PSBL 2568 0.67 1.89 0.08 126 HTML_MIME_NO_HTML_TAG 2533 1.62 1.87 1.50 127 XM_UB99 2529 0.61 1.86 0.00 128 RELAYCOUNTRY_IN 2507 0.66 1.85 0.08 129 TM2_M_VERY_LONG_WORD 2467 1.45 1.82 1.28 130 TR_Symld_Words 2360 2.54 1.74 2.93 131 XMSexyCombo_04 2349 1.47 1.73 1.34 132 XMSlimDrugH 2326 0.84 1.71 0.41 133 RCVD_IN_IADB_VOUCHED 2273 2.86 1.67 3.44 134 BAYES_20 2264 2.72 1.67 3.23 135 TVD_PH_BODY_META_ALL 2262 0.78 1.67 0.35 136 XMGenDplmaNmb 2251 0.99 1.66 0.67 137 XMBdyGiftCard01 2236 1.31 1.65 1.15 138 RCVD_IN_IADB_SENDERID 2216 3.25 1.63 4.04 139 BOTNET_NORDNS 2207 0.55 1.63 0.02 140 RCVD_IN_IADB_DK 2159 3.14 1.59 3.90 141 T_XMDrugObfuBody_00 2148 1.00 1.58 0.71 142 T_FILL_THIS_FORM_SHORT 2122 0.97 1.56 0.68 143 TR_XM_SB_Phish 2120 1.67 1.56 1.72 144 TR_XM_COVIDMETA4 2070 0.68 1.52 0.27 145 DIET_1 2047 0.88 1.51 0.57 146 XMSubMetaSxObfu_03 2016 1.43 1.48 1.40 147 XMStockSpam_06 2014 1.54 1.48 1.57 148 TVD_PH_BODY_ACCOUNTS_PRE 2006 0.58 1.48 0.15 149 TR_XM_PhishingBody2 2003 0.50 1.48 0.03 150 PDS_OTHER_BAD_TLD 1995 0.94 1.47 0.68 151 MIME_QP_LONG_LINE 1986 3.52 1.46 4.52 152 T_XMDrugObfuBody_14 1972 1.71 1.45 1.83 153 URI_PHISH 1957 0.48 1.44 0.01 154 TR_XM_PHPDW 1935 0.69 1.43 0.33 155 XMSubNoVowel 1890 1.04 1.39 0.87 156 TR_XM_PHPForged 1885 0.66 1.39 0.31 157 TR_XM_FormFill2 1867 0.66 1.37 0.31 158 XM_H_PHPOS 1865 0.65 1.37 0.30 159 PLING_QUERY 1853 0.89 1.36 0.66 160 XM_UB999 1836 0.44 1.35 0.00 161 XMSubPhish11 1793 1.55 1.32 1.67 162 TR_XM_RelayPhish 1793 0.52 1.32 0.13 163 REMOVE_BEFORE_LINK 1726 0.56 1.27 0.21 164 RCVD_IN_IADB_OPTIN 1701 1.90 1.25 2.22 165 TR_Caps_n_Bayes_99 1622 0.46 1.19 0.10 166 FROM_SUSPICIOUS_NTLD 1576 0.45 1.16 0.11 167 TR_XM_INV_DKIM 1511 0.52 1.11 0.24 168 XMClaimOffer 1495 0.49 1.10 0.20 169 DKIM_ADSP_CUSTOM_MED 1491 1.04 1.10 1.00 170 FROM_SUSPICIOUS_NTLD_FP 1489 0.43 1.10 0.10 171 T_Symld_Words_02 1459 0.78 1.07 0.64 172 TR_Mismatch_TLD_02 1447 0.38 1.07 0.05 173 BAYES_00 1440 9.79 1.06 14.04 174 XM_DK_Undo_01 1438 1.16 1.06 1.21 175 NML_ADSP_CUSTOM_MED 1436 0.78 1.06 0.64 176 RELAYCOUNTRY_RU 1434 0.36 1.06 0.02 177 RDNS_DYNAMIC 1419 0.86 1.05 0.77 178 RELAYCOUNTRY_GB 1387 0.77 1.02 0.64 179 RELAYCOUNTRY_JP 1380 0.38 1.02 0.07 180 XMBody_78 1377 0.61 1.01 0.41 181 HTML_TAG_BALANCE_BODY 1375 0.77 1.01 0.65 182 XM_UB95 1373 0.34 1.01 0.01 183 URI_NOVOWEL 1321 2.33 0.97 3.00 184 XMHTML_After_End 1309 0.63 0.96 0.47 185 FORGED_GMAIL_RCVD 1307 0.72 0.96 0.60 186 XM_URI_RBL 1277 0.42 0.94 0.17 187 URI_PHP_REDIR 1260 0.31 0.93 0.00 188 ALL_TRUSTED 1248 8.30 0.92 11.90 189 XMWghtMeta_00 1247 0.33 0.92 0.04 190 XMPhish30 1218 0.58 0.90 0.42 191 TR_XM_FormFill 1189 0.29 0.88 0.01 192 BAYES_05 1188 1.68 0.87 2.07 193 XM_ProductURIs 1180 0.92 0.87 0.94 194 XMSubEmpty 1179 0.41 0.87 0.19 195 TR_Sbj_FN_Bdy 1174 0.41 0.86 0.18 196 XM_TLDProd2 1166 0.41 0.86 0.19 197 RELAYCOUNTRY_SG 1151 0.31 0.85 0.04 198 INVESTMENT_ADVICE 1150 0.33 0.85 0.07 199 TR_MetaPhish_Combo_01 1134 0.95 0.84 1.01 200 HK_RANDOM_REPLYTO 1118 0.38 0.82 0.16 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 242011 89.49 94.81 86.90 2 RELAYCOUNTRY_US 233949 81.43 76.16 84.00 3 DKIM_SIGNED 222209 81.07 83.69 79.79 4 XM_DK_Pass 219210 79.32 80.57 78.71 5 DKIM_VALID 215037 77.91 79.33 77.21 6 XM_B_Unicode 201443 74.05 77.58 72.33 7 DKIM_VALID_AU 170314 60.62 59.51 61.16 8 XMListUnsubscribeExists 155258 60.17 69.24 55.75 9 DCC_CHECK_NEGATIVE 150674 44.16 23.77 54.10 10 BAYES_50 147124 45.61 30.80 52.83 11 XM_B_SpammyWords 145490 58.61 71.68 52.24 12 DCC_CHECK 124528 54.74 75.29 44.71 13 XM_B_Unicode3 120451 41.73 38.61 43.25 14 HTML_FONT_LOW_CONTRAST 87051 33.05 36.72 31.26 15 DKIM_VALID_EF 86670 29.82 27.14 31.12 16 RCVD_IN_MSPIKE_WL 83148 25.43 16.34 29.86 17 LOC_TINY_FONT_1 81044 30.75 34.13 29.10 18 RCVD_IN_MSPIKE_H2 75635 26.92 26.43 27.16 19 MIME_HTML_ONLY 68308 26.70 31.16 24.53 20 T_TM2_M_HEADER_IN_MSG 63830 21.33 18.07 22.92 21 FVGT_m_MULTI_ODD 63239 23.41 24.84 22.71 22 XM_B_SpammyWords2 62057 28.95 42.64 22.28 23 XMSubLong 57662 21.01 21.62 20.70 24 T_KAM_HTML_FONT_INVALID 50769 19.08 20.82 18.23 25 RCVD_IN_MSPIKE_H3 46857 14.33 9.21 16.83 26 BAYES_00 39105 9.79 1.06 14.04 27 XM_Body_Dirty_Words 38757 15.58 18.99 13.92 28 XM_Multi_Part_URI 37398 15.83 20.74 13.43 29 XM_DKIMWhitelistDomains 34232 8.28 0.05 12.29 30 ALL_TRUSTED 33144 8.30 0.92 11.90 31 XM_B_Unsub 32719 12.08 12.76 11.75 32 TR_XM_DK_Bayes 28866 7.19 0.67 10.36 33 RCVD_IN_MSPIKE_H4 28790 9.05 6.42 10.34 34 TR_XM_DK_Bayes1 28320 7.05 0.66 10.17 35 RCVD_IN_RP_SAFE 26932 8.05 4.74 9.67 36 LOTS_OF_MONEY 26840 12.03 16.92 9.64 37 TR_XM_DK_Bayes2 26638 6.62 0.59 9.56 38 XM_DK_Undo_02 26130 21.23 45.54 9.38 39 UNPARSEABLE_RELAY 25435 8.40 6.88 9.13 40 XM_Evil_Numbers_Gen 25316 8.67 7.82 9.09 41 RCVD_IN_RP_CERTIFIED 25276 7.33 3.74 9.08 42 LotsOfNums_01 23700 9.34 11.05 8.51 43 XM_SendGrid 23051 7.17 4.90 8.28 44 HTML_IMAGE_RATIO_02 22835 8.42 8.88 8.20 45 BAYES_60 22802 8.32 8.60 8.19 46 XM_B_Phish_Phrases 21433 8.07 8.84 7.70 47 BAYES_99 18050 16.68 37.61 6.48 48 HTML_IMAGE_RATIO_04 17848 5.97 5.08 6.41 49 TR_XM_DKIM_Undo 17413 16.68 38.07 6.25 50 TooManyTo_001 17227 6.06 5.79 6.19 51 FSL_BULK_SIG 16812 8.88 14.70 6.04 52 XMStrtUSub 16611 5.46 4.43 5.96 53 T_TooManySym_01 16435 4.63 2.01 5.90 54 MPART_ALT_DIFF 16154 6.15 6.87 5.80 55 BOTNET_IPINHOSTNAME 16133 7.80 11.90 5.79 56 XM_B_SpammyWords3 15835 7.84 12.25 5.69 57 TR_XM_DK_SendGrid 14998 4.57 2.89 5.39 58 XMSexyCombo_05 14698 6.52 9.08 5.28 59 RCVD_IN_IADB_LISTED 14635 4.31 2.37 5.26 60 BAYES_999 14449 13.22 29.68 5.19 61 BAYES_80 14304 6.90 10.52 5.14 62 XMSubMetaSx_00 14267 5.80 7.18 5.12 63 XM_H_Long_From01 14161 5.37 5.95 5.08 64 IN_ZIMBRA_NJ_WHITELIST 13613 3.30 0.04 4.89 65 HTML_IMAGE_RATIO_06 13469 4.74 4.54 4.84 66 RCVD_IN_IADB_SPF 12681 3.68 1.90 4.55 67 MIME_QP_LONG_LINE 12585 3.52 1.46 4.52 68 RELAYCOUNTRY_META 12547 10.68 23.33 4.51 69 BAYES_40 12026 3.59 2.09 4.32 70 TM2_M_URI_OPT_OUT 11852 3.81 2.90 4.26 71 RCVD_IN_IADB_SENDERID 11248 3.25 1.63 4.04 72 MIME_HTML_ONLY_MULTI 11128 3.36 2.07 4.00 73 XMNumbers 11016 3.90 3.79 3.96 74 RCVD_IN_IADB_DK 10858 3.14 1.59 3.90 75 XM_UncommonTLD01 10562 5.67 9.52 3.79 76 FROM_EXCESS_BASE64 10558 3.30 2.29 3.79 77 XM_H_Trusted_IP 10488 2.53 0.00 3.77 78 BAYES_95 10221 4.68 6.76 3.67 79 RCVD_IN_IADB_VOUCHED 9573 2.86 1.67 3.44 80 T_REMOTE_IMAGE 9243 5.13 8.85 3.32 81 TR_DCC_Bayes_99 9180 10.97 26.71 3.30 82 BAYES_20 9002 2.72 1.67 3.23 83 T_TooManySym_02 8725 2.29 0.57 3.13 84 ANY_BOUNCE_MESSAGE 8382 2.69 2.02 3.01 85 BOUNCE_MESSAGE 8381 2.69 2.02 3.01 86 URI_NOVOWEL 8348 2.33 0.97 3.00 87 INVALID_MSGID 8239 2.06 0.21 2.96 88 TR_Symld_Words 8172 2.54 1.74 2.93 89 US_DOLLARS_3 7886 3.80 5.77 2.83 90 HTML_FONT_FACE_BAD 7670 2.08 0.71 2.75 91 RCVD_IN_MSPIKE_H5 7501 2.04 0.71 2.69 92 DKIM_INVALID 7172 3.16 4.35 2.58 93 TR_XM_PhishingBody 7130 3.57 5.65 2.56 94 MIME_HTML_MOSTLY 6993 3.95 6.89 2.51 95 TVD_RCVD_IP 6891 1.75 0.28 2.47 96 TO_MALFORMED 6461 1.60 0.12 2.32 97 T_FONT_INVIS_NAKED_TO 6448 2.68 3.42 2.32 98 HTML_IMAGE_RATIO_08 6306 2.46 2.87 2.26 99 HELO_MISC_IP 6240 1.64 0.42 2.24 100 CK_HELO_DYNAMIC_SPLIT_IP 6234 1.66 0.48 2.24 101 RCVD_IN_IADB_OPTIN 6174 1.90 1.25 2.22 102 UNTRUSTED_Relay 6063 6.50 15.38 2.18 103 BAYES_05 5761 1.68 0.87 2.07 104 XM_PDF 5648 1.47 0.34 2.03 105 XM_B_SpammyTLD 5344 2.36 3.27 1.92 106 XM_CamelCaseFrm001 5184 2.06 2.47 1.86 107 BOTNET 5137 5.16 11.97 1.84 108 T_XMDrugObfuBody_14 5108 1.71 1.45 1.83 109 RELAYCOUNTRY_CA 5043 3.60 7.26 1.81 110 IN_HORDE_ADDRESS_BOOK 4984 1.24 0.11 1.79 111 MAILING_LIST_MULTI 4983 1.46 0.80 1.79 112 XMBSHREFv2 4887 1.24 0.20 1.75 113 TR_XM_SB_Phish 4779 1.67 1.56 1.72 114 XMSexyCombo_01 4752 2.18 3.14 1.71 115 XMGappySubj_01 4717 1.18 0.11 1.69 116 T_XMDrugObfuBody_08 4715 2.28 3.50 1.69 117 XMSubPhish11 4648 1.55 1.32 1.67 118 USER_IN_DEF_DKIM_WL 4549 1.10 0.01 1.63 119 SUBJ_ALL_CAPS 4533 2.21 3.40 1.63 120 LH_URI_DOM_IN_PATH 4519 2.11 3.12 1.62 121 XM_OfRef6 4483 2.22 3.48 1.61 122 XMStockSpam_06 4377 1.54 1.48 1.57 123 HTML_MIME_NO_HTML_TAG 4166 1.62 1.87 1.50 124 XMDiploma_00 4067 1.90 2.80 1.46 125 RCVD_IN_BL_SPAMCOP_NET 3962 3.28 7.09 1.42 126 URI_HEX 3938 2.53 4.83 1.41 127 URI_TRY_3LD 3925 1.74 2.41 1.41 128 XMSubMetaSxObfu_03 3899 1.43 1.48 1.40 129 T_TooManySym_03 3848 0.99 0.18 1.38 130 XMSexyCombo_04 3726 1.47 1.73 1.34 131 TM2_M_VERY_LONG_WORD 3554 1.45 1.82 1.28 132 XM_B_Unsub2 3539 1.51 2.01 1.27 133 XM_DK_Undo_01 3365 1.16 1.06 1.21 134 XM_B_Phish66 3334 1.43 1.92 1.20 135 TM2_M_A_HREF_HREF 3265 1.55 2.32 1.17 136 TooManyTo_002 3247 0.92 0.42 1.17 137 XMBdyGiftCard01 3204 1.31 1.65 1.15 138 XMBody_95 3153 0.79 0.10 1.13 139 XM_B_COVIDMETA 3054 1.38 1.96 1.10 140 XM_H_Long_From02 3027 0.93 0.61 1.09 141 TR_XM_SpammyWords2 2903 6.33 17.17 1.04 142 XM_SPF_SoftFail 2875 1.79 3.35 1.03 143 TR_MSPIKEBAYES00 2845 0.69 0.01 1.02 144 XMBrknScrpt_02 2821 2.78 6.39 1.01 145 TR_MetaPhish_Combo_01 2818 0.95 0.84 1.01 146 XMBody_17 2812 2.36 5.13 1.01 147 DKIM_ADSP_CUSTOM_MED 2797 1.04 1.10 1.00 148 XM_UB50 2728 2.51 5.66 0.98 149 XM_RXBody 2641 0.79 0.45 0.95 150 RCVD_IN_MSPIKE_BL 2639 4.13 10.65 0.95 151 XM_ProductURIs 2623 0.92 0.87 0.94 152 KHOP_HELO_FCRDNS 2602 2.84 6.73 0.93 153 XM_GoogleGroups 2578 0.74 0.35 0.93 154 XMSubNoVowel 2417 1.04 1.39 0.87 155 XM_D_tchamptons_WL 2379 0.58 0.02 0.85 156 T_TooManySym_04 2350 0.58 0.03 0.84 157 NO_DNS_FOR_FROM 2324 0.75 0.57 0.83 158 DKIM_ADSP_NXDOMAIN 2312 0.79 0.71 0.83 159 TooManyTo_003 2293 0.65 0.30 0.82 160 XM_S_SubURI 2254 0.57 0.08 0.81 161 XMSubMetaSx_01 2169 0.75 0.69 0.78 162 HELO_NODOT 2136 0.72 0.62 0.77 163 HELO_NO_DOMAIN 2135 0.72 0.62 0.77 164 RDNS_DYNAMIC 2132 0.86 1.05 0.77 165 NUMERIC_HTTP_ADDR 2095 0.66 0.47 0.75 166 XMSexyCombo_02 2020 0.67 0.55 0.73 167 TR_LOTS_OF_MONEY3 2008 1.81 4.03 0.72 168 T_XMDrugObfuBody_00 1980 1.00 1.58 0.71 169 XMSubMetaSxObfu_02 1920 0.55 0.26 0.69 170 RCVD_IN_MSPIKE_L3 1912 2.62 6.58 0.69 171 T_FILL_THIS_FORM_SHORT 1905 0.97 1.56 0.68 172 PDS_OTHER_BAD_TLD 1905 0.94 1.47 0.68 173 USER_IN_WHITELIST 1894 0.46 0.00 0.68 174 USER_IN_WELCOMELIST 1894 0.46 0.00 0.68 175 TR_XM_SpammyWords3 1879 3.16 8.24 0.67 176 XMGenDplmaNmb 1863 0.99 1.66 0.67 177 T_TooManySym_05 1850 0.45 0.00 0.66 178 PLING_QUERY 1849 0.89 1.36 0.66 179 TR_XM_UnparsRelay 1829 1.07 1.91 0.66 180 FILL_THIS_FORM 1808 0.52 0.26 0.65 181 HTML_TAG_BALANCE_BODY 1801 0.77 1.01 0.65 182 XMPhish08 1789 0.66 0.68 0.64 183 RELAYCOUNTRY_GB 1784 0.77 1.02 0.64 184 T_Symld_Words_02 1784 0.78 1.07 0.64 185 NML_ADSP_CUSTOM_MED 1784 0.78 1.06 0.64 186 SpammyFromTLD_01 1756 1.59 3.56 0.63 187 HTTPS_HTTP_MISMATCH 1747 0.58 0.48 0.63 188 XMHTMLBadTable_001 1745 0.68 0.78 0.63 189 XM_B_SpammyWords4 1723 1.16 2.26 0.62 190 TooManyTo_004 1712 0.49 0.25 0.61 191 FORGED_GMAIL_RCVD 1682 0.72 0.96 0.60 192 HTML_IMAGE_ONLY_20 1657 0.45 0.15 0.59 193 DIET_1 1595 0.88 1.51 0.57 194 XMLngstWrd_00 1585 0.57 0.56 0.57 195 XM_ShortIntro_01 1516 0.53 0.51 0.54 196 TooManyTo_005 1473 0.43 0.21 0.53 197 T_XMHurry_00 1458 0.98 1.90 0.52 198 XMLngstWrd_01 1431 0.49 0.43 0.51 199 MISSING_HEADERS 1389 0.58 0.75 0.50 200 XM_B_COPY_HTML 1371 0.47 0.42 0.49 ----------------------------------------------------------------------