Email: 579373 Autolearn: 0 AvgScore: 0.63 AvgScanTime: 1.58 sec Spam: 129630 Autolearn: 0 AvgScore: 14.72 AvgScanTime: 1.90 sec Ham: 449743 Autolearn: 0 AvgScore: -3.43 AvgScanTime: 1.49 sec Time Spent Running SA: 254.13 hours Time Spent Processing Spam: 68.46 hours Time Spent Processing Ham: 185.67 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 123010 89.60 94.89 88.08 2 DKIM_SIGNED 103569 63.26 79.90 58.47 3 DCC_CHECK 101513 41.70 78.31 31.15 4 XM_DK_Pass 98340 61.35 75.86 57.17 5 RELAYCOUNTRY_US 98159 77.22 75.72 77.65 6 XM_B_Unicode 95555 73.59 73.71 73.55 7 DKIM_VALID 94619 59.19 72.99 55.22 8 XMListUnsubscribeExists 84521 42.07 65.20 35.41 9 XM_B_SpammyWords 83494 48.14 64.41 43.45 10 DKIM_VALID_AU 68144 43.88 52.57 41.38 11 BAYES_50 56434 48.77 43.53 50.28 12 XM_DK_Undo_02 50628 12.93 39.06 5.41 13 XM_B_Unicode3 49810 40.96 38.42 41.69 14 XM_B_SpammyWords2 46163 22.06 35.61 18.15 15 LOC_TINY_FONT_1 43778 21.38 33.77 17.80 16 MIME_HTML_ONLY 43273 24.74 33.38 22.24 17 HTML_FONT_LOW_CONTRAST 40092 22.98 30.93 20.68 18 TR_XM_DKIM_Undo 39102 9.98 30.16 4.17 19 RCVD_IN_MSPIKE_H2 38726 22.93 29.87 20.92 20 T_KAM_HTML_FONT_INVALID 38411 17.43 29.63 13.91 21 DKIM_VALID_EF 37476 24.13 28.91 22.75 22 BAYES_99 36421 9.62 28.10 4.29 23 XMSubLong 34556 21.09 26.66 19.49 24 FVGT_m_MULTI_ODD 34084 19.96 26.29 18.14 25 T_TM2_M_HEADER_IN_MSG 29925 28.70 23.08 30.31 26 TR_DCC_Bayes_99 28313 6.40 21.84 1.95 27 DCC_CHECK_NEGATIVE 28059 58.25 21.65 68.80 28 RELAYCOUNTRY_META 27857 8.28 21.49 4.47 29 BAYES_999 27765 7.52 21.42 3.51 30 XM_Body_Dirty_Words 26990 12.17 20.82 9.68 31 FSL_BULK_SIG 24943 9.88 19.24 7.18 32 RCVD_IN_MSPIKE_WL 24423 22.29 18.84 23.29 33 UNTRUSTED_Relay 22310 5.33 17.21 1.90 34 XM_UncommonTLD01 20740 5.81 16.00 2.88 35 XM_Multi_Part_URI 20259 10.67 15.63 9.24 36 LOTS_OF_MONEY 18383 9.53 14.18 8.19 37 BOTNET_IPINHOSTNAME 17828 5.65 13.75 3.31 38 BOTNET 17751 3.98 13.69 1.18 39 XM_B_SpammyWords3 16146 5.14 12.46 3.03 40 TR_XM_SpammyWords4 15346 7.22 11.84 5.89 41 SpammyFromTLD_02 15108 2.88 11.65 0.35 42 XM_B_Unsub 14517 9.02 11.20 8.39 43 UNPARSEABLE_RELAY 13569 7.45 10.47 6.58 44 XMSexyCombo_05 13341 4.98 10.29 3.45 45 RCVD_IN_MSPIKE_H3 13269 12.06 10.24 12.59 46 T_REMOTE_IMAGE 13183 4.78 10.17 3.23 47 TR_XM_UnparsRelay 13134 6.14 10.13 4.99 48 TR_XM_SpammyWords2 12573 2.76 9.70 0.76 49 HTML_MIME_NO_HTML_TAG 12272 3.61 9.47 1.92 50 XM_SendGrid 11788 6.42 9.09 5.65 51 MPART_ALT_DIFF 11631 10.05 8.97 10.36 52 KHOP_HELO_FCRDNS 11280 3.21 8.70 1.62 53 RCVD_IN_BL_SPAMCOP_NET 11245 2.31 8.67 0.48 54 XM_Evil_Numbers_Gen 10932 8.55 8.43 8.59 55 T_HTML_TAG_BALANCE_CENTER 10515 1.86 8.11 0.05 56 BAYES_80 10452 4.34 8.06 3.27 57 HTML_IMAGE_ONLY_08 10251 1.84 7.91 0.09 58 RCVD_IN_MSPIKE_H4 10020 8.49 7.73 8.71 59 BAYES_60 9795 7.11 7.56 6.98 60 XM_B_Phish_Phrases 9599 4.05 7.40 3.08 61 LotsOfNums_01 9517 7.36 7.34 7.36 62 XMSubMetaSx_00 9128 3.90 7.04 3.00 63 TR_XM_PhishingBody 9019 3.83 6.96 2.93 64 HTML_IMAGE_RATIO_02 8977 5.43 6.93 5.00 65 DKIM_INVALID 8950 4.07 6.90 3.25 66 XM_UB50 8950 2.68 6.90 1.46 67 MIXED_CTYPE_CASE 8594 1.49 6.63 0.00 68 BODY_URI_ONLY 8463 1.47 6.53 0.01 69 MIXED_CENTER_CASE 8421 1.45 6.50 0.00 70 MIXED_HREF_CASE 8415 1.45 6.49 0.00 71 MIXED_FONT_CASE 8401 1.45 6.48 0.00 72 MIXED_AREA_CASE 8397 1.45 6.48 0.00 73 MIXED_IMG_CASE 8148 1.41 6.29 0.00 74 MIME_HTML_MOSTLY 7855 2.93 6.06 2.03 75 XM_H_Long_From01 7537 4.60 5.81 4.24 76 TooManyTo_001 7326 7.12 5.65 7.54 77 RCVD_IN_MSPIKE_BL 6806 1.42 5.25 0.32 78 URI_NOVOWEL 6740 2.67 5.20 1.94 79 TR_XM_SPAMCOP 6715 1.32 5.18 0.21 80 URI_GOOG_STO_SPAMMY 6651 1.15 5.13 0.00 81 XM_B_SpammyTLD 6574 2.31 5.07 1.51 82 HTML_FONT_SIZE_LARGE 6410 1.17 4.94 0.09 83 HTML_IMAGE_RATIO_04 6181 14.35 4.77 17.11 84 RELAYCOUNTRY_CA 5998 1.77 4.63 0.94 85 XM_B_Phish66 5800 2.43 4.47 1.85 86 XMNumbers 5497 3.01 4.24 2.66 87 TR_XM_DK_SendGrid 5476 3.46 4.22 3.24 88 BAYES_95 5464 2.51 4.22 2.01 89 TR_XM_MSPIKECOMBO 5354 1.16 4.13 0.30 90 XM_SPF_SoftFail 5275 2.22 4.07 1.68 91 URIBL_DBL_SPAM 4980 0.87 3.84 0.01 92 TM2_M_URI_OPT_OUT 4848 3.25 3.74 3.11 93 MIME_QP_LONG_LINE 4648 4.27 3.59 4.46 94 RCVD_IN_RP_SAFE 4607 5.14 3.55 5.60 95 SpammyFromTLD_01 4542 1.30 3.50 0.67 96 BOTNET_NORDNS 4452 0.79 3.43 0.03 97 TR_XM_SpammyWords5 4406 1.70 3.40 1.21 98 T_XMDrugObfuBody_08 4350 1.69 3.36 1.21 99 MIME_HTML_ONLY_MULTI 4280 7.42 3.30 8.60 100 HTML_FONT_SIZE_HUGE 4190 0.75 3.23 0.04 101 HTML_IMAGE_RATIO_06 4175 4.77 3.22 5.21 102 PDS_OTHER_BAD_TLD 3995 0.81 3.08 0.16 103 XM_DIRTYINTL 3909 1.34 3.02 0.85 104 XMNoVowels 3867 2.12 2.98 1.87 105 T_XMDrugObfuBody_14 3850 2.05 2.97 1.79 106 TR_XM_SpammyWords3 3771 0.84 2.91 0.24 107 XMStrtUSub 3738 9.48 2.88 11.38 108 GOOG_STO_IMG_HTML 3734 0.64 2.88 0.00 109 XM_OfRef6 3703 1.16 2.86 0.68 110 RCVD_IN_RP_CERTIFIED 3678 4.47 2.84 4.94 111 RCVD_IN_MSPIKE_L5 3658 0.65 2.82 0.03 112 XMDiploma_00 3579 1.71 2.76 1.41 113 BAYES_20 3560 5.24 2.75 5.96 114 XM_B_COVIDMETA 3558 1.33 2.74 0.92 115 JH_SPAMMY_HEADERS 3548 0.62 2.74 0.00 116 XM_UB99 3454 0.60 2.66 0.00 117 RCVD_IN_IADB_LISTED 3406 3.66 2.63 3.96 118 T_TooManySym_01 3386 4.18 2.61 4.63 119 TR_XM_SB_Phish 3380 2.06 2.61 1.90 120 XM_B_Unsub2 3336 1.79 2.57 1.56 121 URI_HEX 3293 1.57 2.54 1.29 122 XMSubPhish11 3197 2.01 2.47 1.87 123 BAYES_40 3185 4.95 2.46 5.67 124 XM_UB60 3077 0.58 2.37 0.06 125 XM_CamelCaseFrm001 3056 1.62 2.36 1.41 126 BAYES_00 3010 14.31 2.32 17.76 127 TM2_M_VERY_LONG_WORD 2988 1.20 2.31 0.88 128 RCVD_IN_IADB_SPF 2963 3.20 2.29 3.47 129 TR_XM_COVIDMETA4 2961 0.77 2.28 0.33 130 HELO_NODOT 2905 1.62 2.24 1.45 131 HELO_NO_DOMAIN 2898 1.62 2.24 1.45 132 XM_DK_Undo_01 2886 1.56 2.23 1.37 133 TR_XM_PHPDW 2814 0.69 2.17 0.26 134 DIET_1 2757 0.73 2.13 0.32 135 RCVD_IN_IADB_DK 2737 2.83 2.11 3.03 136 RCVD_IN_IADB_SENDERID 2720 2.90 2.10 3.13 137 TR_Mismatch_TLD_01 2700 0.62 2.08 0.20 138 MAILING_LIST_MULTI 2691 2.28 2.08 2.34 139 HTML_IMAGE_RATIO_08 2608 1.79 2.01 1.73 140 URI_PHP_REDIR 2567 0.44 1.98 0.00 141 XM_B_SpammyWords4 2561 0.66 1.98 0.28 142 RELAYCOUNTRY_IR 2519 0.44 1.94 0.00 143 TR_XM_PHPForged 2517 0.61 1.94 0.23 144 XM_URI_RBL 2500 0.52 1.93 0.12 145 TR_XM_COVIDMETA1 2490 0.71 1.92 0.36 146 TR_XM_FormFill2 2466 0.61 1.90 0.23 147 XM_H_PHPOS 2453 0.59 1.89 0.22 148 XMSlimDrugH 2331 0.69 1.80 0.37 149 XMStockSpam_06 2288 1.10 1.77 0.91 150 XMBody_17 2285 0.67 1.76 0.35 151 XMSexyCombo_01 2279 0.67 1.76 0.36 152 URIBL_BLACK 2233 0.41 1.72 0.04 153 XMBrknScrpt_02 2196 1.01 1.69 0.81 154 XM_UB999 2181 0.38 1.68 0.00 155 SUBJ_ALL_CAPS 2180 1.31 1.68 1.21 156 XMMoneyMeta_00 2171 0.74 1.67 0.47 157 ALL_TRUSTED 2141 15.09 1.65 18.97 158 XMHTML_After_End 2113 1.00 1.63 0.82 159 RCVD_IN_RP_RNBL 2096 0.37 1.62 0.01 160 TR_Symld_Words 2094 1.57 1.62 1.55 161 XM_Body_Dirty_Words_01 2059 0.51 1.59 0.19 162 HTTPS_HTTP_MISMATCH 2022 0.87 1.56 0.67 163 T_XMDrugObfuBody_00 2008 1.11 1.55 0.99 164 XM_UB80 1996 0.36 1.54 0.01 165 TR_XM_INV_DKIM 1963 0.40 1.51 0.08 166 XMGenDplmaNmb 1926 0.96 1.49 0.81 167 FROM_EXCESS_BASE64 1896 1.92 1.46 2.05 168 MISSING_HEADERS 1878 0.69 1.45 0.47 169 TR_XM_BayesRelay 1810 0.32 1.40 0.00 170 DATE_IN_PAST_24_48 1783 0.31 1.38 0.00 171 RCVD_IN_PSBL 1739 0.37 1.34 0.09 172 RELAYCOUNTRY_FR 1734 0.88 1.34 0.75 173 RELAYCOUNTRY_NL 1732 0.40 1.34 0.13 174 XM_H_Long_From02 1730 0.93 1.33 0.81 175 XM_ShortIntro_01 1699 0.93 1.31 0.82 176 T_XMHurry_00 1666 3.53 1.29 4.17 177 RCVD_IN_IADB_VOUCHED 1659 2.14 1.28 2.38 178 RELAYCOUNTRY_IN 1656 0.37 1.28 0.11 179 XM_PDF 1635 3.67 1.26 4.36 180 RELAYCOUNTRY_DE 1600 0.68 1.23 0.52 181 URI_TRY_3LD 1541 0.85 1.19 0.76 182 XM_H_PHPMailer 1510 0.66 1.16 0.52 183 RELAYCOUNTRY_AU 1492 0.50 1.15 0.32 184 URIBL_SBL_A 1470 0.35 1.13 0.12 185 XMWghtMeta_00 1467 0.27 1.13 0.02 186 RCVD_IN_MSPIKE_ZBI 1452 0.26 1.12 0.02 187 DKIM_ADSP_CUSTOM_MED 1426 0.84 1.10 0.77 188 XMPhish30 1415 0.65 1.09 0.52 189 XMSubMetaI_00 1409 0.61 1.09 0.48 190 TR_Mismatch_TLD_02 1386 0.28 1.07 0.06 191 XM_UB95 1381 0.24 1.07 0.01 192 PLING_QUERY 1380 0.47 1.06 0.30 193 RELAYCOUNTRY_GB 1375 0.91 1.06 0.86 194 TooManyTo_002 1348 1.87 1.04 2.11 195 BAYES_05 1304 3.16 1.01 3.78 196 T_Symld_Words_02 1271 0.52 0.98 0.39 197 USER_IN_DEF_DKIM_WL 1247 7.23 0.96 9.03 198 T_MONEY_PERCENT 1234 0.41 0.95 0.25 199 TR_LOTS_OF_MONEY2 1234 0.41 0.95 0.25 200 RDNS_DYNAMIC 1230 0.48 0.95 0.35 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 396129 89.60 94.89 88.08 2 RELAYCOUNTRY_US 349219 77.22 75.72 77.65 3 XM_B_Unicode 330793 73.59 73.71 73.55 4 DCC_CHECK_NEGATIVE 309438 58.25 21.65 68.80 5 DKIM_SIGNED 262967 63.26 79.90 58.47 6 XM_DK_Pass 257125 61.35 75.86 57.17 7 DKIM_VALID 248329 59.19 72.99 55.22 8 BAYES_50 226151 48.77 43.53 50.28 9 XM_B_SpammyWords 195425 48.14 64.41 43.45 10 XM_B_Unicode3 187489 40.96 38.42 41.69 11 DKIM_VALID_AU 186111 43.88 52.57 41.38 12 XMListUnsubscribeExists 159235 42.07 65.20 35.41 13 DCC_CHECK 140105 41.70 78.31 31.15 14 T_TM2_M_HEADER_IN_MSG 136336 28.70 23.08 30.31 15 RCVD_IN_MSPIKE_WL 104730 22.29 18.84 23.29 16 DKIM_VALID_EF 102306 24.13 28.91 22.75 17 MIME_HTML_ONLY 100036 24.74 33.38 22.24 18 RCVD_IN_MSPIKE_H2 94098 22.93 29.87 20.92 19 HTML_FONT_LOW_CONTRAST 93029 22.98 30.93 20.68 20 XMSubLong 87642 21.09 26.66 19.49 21 ALL_TRUSTED 85313 15.09 1.65 18.97 22 XM_B_SpammyWords2 81637 22.06 35.61 18.15 23 FVGT_m_MULTI_ODD 81572 19.96 26.29 18.14 24 LOC_TINY_FONT_1 80069 21.38 33.77 17.80 25 BAYES_00 79874 14.31 2.32 17.76 26 HTML_IMAGE_RATIO_04 76951 14.35 4.77 17.11 27 XM_H_Trusted_IP 74940 12.93 0.00 16.66 28 HTML_FONT_FACE_BAD 70916 12.41 0.76 15.77 29 T_KAM_HTML_FONT_INVALID 62561 17.43 29.63 13.91 30 RCVD_IN_MSPIKE_H3 56619 12.06 10.24 12.59 31 XMStrtUSub 51169 9.48 2.88 11.38 32 MPART_ALT_DIFF 46602 10.05 8.97 10.36 33 XM_Body_Dirty_Words 43518 12.17 20.82 9.68 34 XM_Multi_Part_URI 41552 10.67 15.63 9.24 35 USER_IN_DEF_DKIM_WL 40628 7.23 0.96 9.03 36 RCVD_IN_MSPIKE_H4 39169 8.49 7.73 8.71 37 MIME_HTML_ONLY_MULTI 38684 7.42 3.30 8.60 38 XM_Evil_Numbers_Gen 38625 8.55 8.43 8.59 39 XM_B_Unsub 37727 9.02 11.20 8.39 40 LOTS_OF_MONEY 36831 9.53 14.18 8.19 41 TooManyTo_001 33927 7.12 5.65 7.54 42 LotsOfNums_01 33109 7.36 7.34 7.36 43 FSL_BULK_SIG 32271 9.88 19.24 7.18 44 BAYES_60 31377 7.11 7.56 6.98 45 UNPARSEABLE_RELAY 29588 7.45 10.47 6.58 46 XM_DKIMWhitelistDomains 28450 4.92 0.04 6.33 47 TR_XM_DK_Bayes 28441 5.06 0.70 6.32 48 TR_XM_DK_Bayes1 27483 4.89 0.67 6.11 49 BAYES_20 26789 5.24 2.75 5.96 50 TR_XM_SpammyWords4 26499 7.22 11.84 5.89 51 BAYES_40 25499 4.95 2.46 5.67 52 XM_SendGrid 25413 6.42 9.09 5.65 53 RCVD_IN_RP_SAFE 25194 5.14 3.55 5.60 54 XM_DK_Undo_02 24309 12.93 39.06 5.41 55 XMSubNoVowel 23762 4.27 0.77 5.28 56 HTML_IMAGE_RATIO_06 23436 4.77 3.22 5.21 57 TR_XM_DK_Bayes2 23287 4.15 0.60 5.18 58 HTML_IMAGE_RATIO_02 22480 5.43 6.93 5.00 59 TR_XM_UnparsRelay 22438 6.14 10.13 4.99 60 RCVD_IN_RP_CERTIFIED 22216 4.47 2.84 4.94 61 T_TooManySym_01 20808 4.18 2.61 4.63 62 RELAYCOUNTRY_META 20125 8.28 21.49 4.47 63 MIME_QP_LONG_LINE 20067 4.27 3.59 4.46 64 IN_ZIMBRA_NJ_WHITELIST 20033 3.47 0.05 4.45 65 XM_PDF 19607 3.67 1.26 4.36 66 BAYES_99 19299 9.62 28.10 4.29 67 ANY_BOUNCE_MESSAGE 19126 3.51 0.93 4.25 68 BOUNCE_MESSAGE 19119 3.51 0.93 4.25 69 XM_H_Long_From01 19090 4.60 5.81 4.24 70 T_XMHurry_00 18768 3.53 1.29 4.17 71 TR_XM_DKIM_Undo 18742 9.98 30.16 4.17 72 RCVD_IN_IADB_LISTED 17798 3.66 2.63 3.96 73 BAYES_05 16986 3.16 1.01 3.78 74 BAYES_999 15784 7.52 21.42 3.51 75 RCVD_IN_IADB_SPF 15603 3.20 2.29 3.47 76 XMSexyCombo_05 15497 4.98 10.29 3.45 77 BOTNET_IPINHOSTNAME 14894 5.65 13.75 3.31 78 BAYES_80 14699 4.34 8.06 3.27 79 DKIM_INVALID 14638 4.07 6.90 3.25 80 TR_XM_DK_SendGrid 14571 3.46 4.22 3.24 81 T_REMOTE_IMAGE 14527 4.78 10.17 3.23 82 RCVD_IN_IADB_SENDERID 14074 2.90 2.10 3.13 83 TM2_M_URI_OPT_OUT 14002 3.25 3.74 3.11 84 XM_B_Phish_Phrases 13872 4.05 7.40 3.08 85 RCVD_IN_IADB_DK 13648 2.83 2.11 3.03 86 XM_B_SpammyWords3 13615 5.14 12.46 3.03 87 XMSubMetaSx_00 13471 3.90 7.04 3.00 88 TR_XM_PhishingBody 13190 3.83 6.96 2.93 89 XM_UncommonTLD01 12938 5.81 16.00 2.88 90 XMNumbers 11952 3.01 4.24 2.66 91 RCVD_IN_IADB_VOUCHED 10715 2.14 1.28 2.38 92 MAILING_LIST_MULTI 10510 2.28 2.08 2.34 93 T_TooManySym_02 10032 1.89 0.71 2.23 94 TooManyTo_002 9496 1.87 1.04 2.11 95 FROM_EXCESS_BASE64 9208 1.92 1.46 2.05 96 MIME_HTML_MOSTLY 9111 2.93 6.06 2.03 97 BAYES_95 9058 2.51 4.22 2.01 98 XMSubGarbage 9047 1.59 0.12 2.01 99 RCVD_IN_MSPIKE_H5 8942 1.74 0.87 1.99 100 XMSubLongNoVowel 8928 1.60 0.27 1.99 101 TR_DCC_Bayes_99 8752 6.40 21.84 1.95 102 URI_NOVOWEL 8731 2.67 5.20 1.94 103 HTML_MIME_NO_HTML_TAG 8657 3.61 9.47 1.92 104 UNTRUSTED_Relay 8561 5.33 17.21 1.90 105 TR_XM_SB_Phish 8554 2.06 2.61 1.90 106 XMSubPhish11 8425 2.01 2.47 1.87 107 XMNoVowels 8389 2.12 2.98 1.87 108 XM_B_Phish66 8302 2.43 4.47 1.85 109 T_XMDrugObfuBody_14 8056 2.05 2.97 1.79 110 HTML_IMAGE_RATIO_08 7767 1.79 2.01 1.73 111 XM_SPF_SoftFail 7570 2.22 4.07 1.68 112 IN_HORDE_ADDRESS_BOOK 7390 1.29 0.08 1.64 113 KHOP_HELO_FCRDNS 7295 3.21 8.70 1.62 114 XM_B_Unsub2 7017 1.79 2.57 1.56 115 TR_Symld_Words 6983 1.57 1.62 1.55 116 INVALID_MSGID 6882 1.24 0.25 1.53 117 XM_B_SpammyTLD 6802 2.31 5.07 1.51 118 RCVD_IN_IADB_OPTIN 6766 1.34 0.77 1.50 119 XM_UB50 6585 2.68 6.90 1.46 120 HELO_NODOT 6506 1.62 2.24 1.45 121 HELO_NO_DOMAIN 6505 1.62 2.24 1.45 122 XM_CamelCaseFrm001 6358 1.62 2.36 1.41 123 XMDiploma_00 6331 1.71 2.76 1.41 124 MSGID_NOFQDN1 6305 1.11 0.11 1.40 125 TO_MALFORMED 6227 1.08 0.01 1.38 126 TooManyTo_003 6225 1.26 0.83 1.38 127 XM_DK_Undo_01 6181 1.56 2.23 1.37 128 URI_HEX 5821 1.57 2.54 1.29 129 TVD_RCVD_IP 5801 1.05 0.22 1.29 130 XM_E_Blogspot 5572 0.98 0.07 1.24 131 T_XMDrugObfuBody_08 5438 1.69 3.36 1.21 132 SUBJ_ALL_CAPS 5437 1.31 1.68 1.21 133 TR_XM_SpammyWords5 5437 1.70 3.40 1.21 134 XMGappySubj_01 5309 0.97 0.23 1.18 135 BOTNET 5285 3.98 13.69 1.18 136 XMCapTrack 5259 1.09 0.82 1.17 137 XM_GoogleGroups 4932 1.02 0.76 1.10 138 TooManyTo_004 4477 0.92 0.66 1.00 139 T_XMDrugObfuBody_00 4433 1.11 1.55 0.99 140 RELAYCOUNTRY_CA 4246 1.77 4.63 0.94 141 XM_B_COVIDMETA 4137 1.33 2.74 0.92 142 XMStockSpam_06 4109 1.10 1.77 0.91 143 TM2_M_VERY_LONG_WORD 3954 1.20 2.31 0.88 144 RELAYCOUNTRY_GB 3872 0.91 1.06 0.86 145 XM_DIRTYINTL 3830 1.34 3.02 0.85 146 XMBSHREFv2 3700 0.71 0.32 0.82 147 XMHTML_After_End 3691 1.00 1.63 0.82 148 XM_ShortIntro_01 3682 0.93 1.31 0.82 149 XMGenDplmaNmb 3663 0.96 1.49 0.81 150 XMBrknScrpt_02 3641 1.01 1.69 0.81 151 XM_H_Long_From02 3637 0.93 1.33 0.81 152 TooManyTo_005 3591 0.75 0.59 0.80 153 DKIM_ADSP_CUSTOM_MED 3453 0.84 1.10 0.77 154 TR_XM_SpammyWords2 3434 2.76 9.70 0.76 155 URI_TRY_3LD 3398 0.85 1.19 0.76 156 RELAYCOUNTRY_FR 3392 0.88 1.34 0.75 157 HTML_IMAGE_ONLY_20 3143 0.69 0.64 0.70 158 T_FILL_THIS_FORM_SHORT 3100 0.74 0.90 0.69 159 T_TooManySym_03 3081 0.61 0.34 0.69 160 XM_OfRef6 3044 1.16 2.86 0.68 161 HTTPS_HTTP_MISMATCH 3011 0.87 1.56 0.67 162 T_OBFU_PDF_ATTACH 3004 0.56 0.21 0.67 163 SpammyFromTLD_01 2996 1.30 3.50 0.67 164 XMBody_95 2759 0.52 0.17 0.61 165 TR_MetaPhish_Combo_01 2748 0.65 0.80 0.61 166 XMBounce_01 2663 0.50 0.17 0.59 167 XM_SPF_Unknown 2605 0.62 0.78 0.58 168 XM_RXBody 2550 0.53 0.40 0.57 169 XMBdyGiftCard01 2484 0.64 0.93 0.55 170 XM_ProductURIs 2470 0.61 0.81 0.55 171 XM_B_COPY_HTML 2414 0.55 0.61 0.54 172 TR_MSPIKEBAYES00 2389 0.42 0.03 0.53 173 XMPhish30 2348 0.65 1.09 0.52 174 RELAYCOUNTRY_DE 2338 0.68 1.23 0.52 175 XM_H_PHPMailer 2320 0.66 1.16 0.52 176 FROM_GOV_DKIM_AU 2311 0.51 0.51 0.51 177 NML_ADSP_CUSTOM_MED 2287 0.59 0.87 0.51 178 TM2_M_BODY_EMPTY 2222 0.41 0.10 0.49 179 RCVD_IN_SORBS_DUL 2196 0.51 0.57 0.49 180 RCVD_IN_BL_SPAMCOP_NET 2162 2.31 8.67 0.48 181 XMSubMetaI_00 2143 0.61 1.09 0.48 182 MISSING_HEADERS 2132 0.69 1.45 0.47 183 XMMoneyMeta_00 2119 0.74 1.67 0.47 184 FROM_GOV_SPOOF 2118 0.39 0.13 0.47 185 XMLngstWrd_00 2113 0.50 0.60 0.47 186 TVD_SPACE_RATIO 2074 0.42 0.27 0.46 187 XMHTMLBadTable_001 1908 0.50 0.75 0.42 188 XMLngstWrd_01 1866 0.45 0.56 0.41 189 DKIM_ADSP_NXDOMAIN 1808 0.44 0.59 0.40 190 MY_SERVERS_FOUND 1802 0.35 0.20 0.40 191 HTML_TAG_BALANCE_BODY 1775 0.52 0.93 0.39 192 XMOemUri 1753 0.36 0.25 0.39 193 T_Symld_Words_02 1738 0.52 0.98 0.39 194 SHORT_HELO_AND_INLINE_IMAGE 1735 0.37 0.34 0.39 195 FORGED_GMAIL_RCVD 1722 0.51 0.93 0.38 196 HTML_IMAGE_ONLY_28 1677 0.38 0.39 0.37 197 XMSlimDrugH 1668 0.69 1.80 0.37 198 TVD_SPACE_RATIO_MINFP 1626 0.34 0.27 0.36 199 MPART_ALT_DIFF_COUNT 1625 0.40 0.51 0.36 200 XMPhish14 1624 0.43 0.65 0.36 ----------------------------------------------------------------------