Email: 373822 Autolearn: 0 AvgScore: 4.08 AvgScanTime: 1.25 sec Spam: 124189 Autolearn: 0 AvgScore: 14.38 AvgScanTime: 1.41 sec Ham: 249633 Autolearn: 0 AvgScore: -1.04 AvgScanTime: 1.16 sec Time Spent Running SA: 129.35 hours Time Spent Processing Spam: 48.74 hours Time Spent Processing Ham: 80.61 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 116159 87.67 93.53 84.75 2 DKIM_SIGNED 106858 80.97 86.04 78.45 3 XM_DK_Pass 103535 79.38 83.37 77.39 4 DKIM_VALID 101231 77.73 81.51 75.84 5 DCC_CHECK 98677 56.93 79.46 45.73 6 XM_B_Unicode 95807 73.13 77.15 71.14 7 RELAYCOUNTRY_US 93429 79.48 75.23 81.59 8 XMListUnsubscribeExists 90240 59.97 72.66 53.65 9 XM_B_SpammyWords 84879 54.60 68.35 47.76 10 DKIM_VALID_AU 77881 61.65 62.71 61.12 11 XM_DK_Undo_02 62424 22.85 50.27 9.22 12 XM_B_Unicode3 56628 44.55 45.60 44.03 13 XM_B_SpammyWords2 51610 27.26 41.56 20.14 14 TR_XM_DKIM_Undo 49784 17.23 40.09 5.85 15 BAYES_99 49384 18.28 39.77 7.59 16 LOC_TINY_FONT_1 47308 30.57 38.09 26.83 17 HTML_FONT_LOW_CONTRAST 45217 31.77 36.41 29.47 18 BAYES_50 41925 47.33 33.76 54.09 19 MIME_HTML_ONLY 41910 26.01 33.75 22.17 20 BAYES_999 39603 14.72 31.89 6.18 21 TR_DCC_Bayes_99 38335 12.38 30.87 3.19 22 DKIM_VALID_EF 36563 31.51 29.44 32.54 23 FVGT_m_MULTI_ODD 31957 26.05 25.73 26.20 24 RELAYCOUNTRY_META 29372 10.84 23.65 4.47 25 RCVD_IN_MSPIKE_WL 29326 33.25 23.61 38.04 26 XMSubLong 29018 21.44 23.37 20.49 27 XM_Body_Dirty_Words 28615 15.63 23.04 11.95 28 T_KAM_HTML_FONT_INVALID 28392 19.23 22.86 17.42 29 RCVD_IN_MSPIKE_H2 27112 21.40 21.83 21.19 30 DCC_CHECK_NEGATIVE 23750 41.77 19.12 53.03 31 BOTNET 22745 7.26 18.31 1.77 32 T_TM2_M_HEADER_IN_MSG 21314 21.34 17.16 23.42 33 XM_Multi_Part_URI 20019 14.34 16.12 13.45 34 TR_XM_SpammyWords2 19888 6.12 16.01 1.20 35 XM_UncommonTLD01 19634 7.94 15.81 4.03 36 LOTS_OF_MONEY 19009 9.81 15.31 7.07 37 XM_B_SpammyWords3 18186 8.06 14.64 4.78 38 XM_B_Unsub 17682 11.80 14.24 10.59 39 XMSexyCombo_05 17020 7.27 13.70 4.07 40 UNTRUSTED_Relay 16596 5.72 13.36 1.91 41 BOTNET_IPINHOSTNAME 15950 8.56 12.84 6.42 42 RCVD_IN_MSPIKE_H3 14142 16.00 11.39 18.30 43 RCVD_IN_MSPIKE_H4 14005 14.00 11.28 15.35 44 FSL_BULK_SIG 13879 8.95 11.18 7.84 45 UNPARSEABLE_RELAY 13066 8.95 10.52 8.17 46 TR_XM_SpammyWords4 12752 6.08 10.27 3.99 47 XM_Evil_Numbers_Gen 12749 9.64 10.27 9.33 48 TR_XM_UnparsRelay 12729 8.21 10.25 7.19 49 RELAYCOUNTRY_CA 12274 4.32 9.88 1.55 50 RCVD_IN_BL_SPAMCOP_NET 12091 3.65 9.74 0.62 51 HTML_IMAGE_RATIO_02 12010 9.05 9.67 8.74 52 MPART_ALT_DIFF 11794 6.51 9.50 5.03 53 BAYES_80 11429 7.10 9.20 6.06 54 XMSubMetaSx_00 10020 5.45 8.07 4.15 55 BAYES_60 10006 10.07 8.06 11.07 56 MIME_HTML_MOSTLY 9738 4.12 7.84 2.27 57 XM_SendGrid 9274 7.38 7.47 7.34 58 LotsOfNums_01 9253 7.98 7.45 8.24 59 XMStrtUSub 8878 7.37 7.15 7.47 60 XM_B_Phish_Phrases 8560 6.66 6.89 6.55 61 RCVD_IN_MSPIKE_BL 8321 2.39 6.70 0.24 62 TR_XM_MSPIKECOMBO 8289 2.38 6.67 0.24 63 RCVD_IN_RP_SAFE 8190 9.13 6.59 10.39 64 XM_H_Long_From01 8140 5.70 6.55 5.27 65 TooManyTo_001 7296 6.51 5.87 6.82 66 XM_B_SpammyTLD 7199 3.35 5.80 2.14 67 TR_XM_PhishingBody 6810 3.33 5.48 2.25 68 RCVD_IN_RP_CERTIFIED 6644 7.78 5.35 8.99 69 SpammyFromTLD_01 6635 2.06 5.34 0.43 70 SpammyFromTLD_02 6619 1.91 5.33 0.20 71 BAYES_95 6565 4.53 5.29 4.16 72 RCVD_IN_PSBL 6317 1.83 5.09 0.21 73 BOTNET_NORDNS 6155 1.66 4.96 0.01 74 XM_UB99 6041 1.62 4.86 0.00 75 HTML_IMAGE_RATIO_04 6035 5.12 4.86 5.25 76 RCVD_IN_RP_RNBL 5926 1.61 4.77 0.04 77 TR_XM_DK_SendGrid 5798 4.66 4.67 4.66 78 XM_SPF_SoftFail 5694 2.35 4.58 1.23 79 DKIM_INVALID 5627 3.25 4.53 2.61 80 XM_UB50 5276 2.24 4.25 1.25 81 XM_DIRTYINTL 5253 1.77 4.23 0.54 82 TR_XM_SpammyWords3 5068 1.48 4.08 0.18 83 HTML_IMAGE_RATIO_06 4914 3.99 3.96 4.01 84 XM_UB999 4808 1.29 3.87 0.00 85 FROM_EXCESS_BASE64 4780 4.05 3.85 4.15 86 RELAYCOUNTRY_FR 4681 1.41 3.77 0.23 87 XMNumbers 4671 3.52 3.76 3.39 88 TM2_M_URI_OPT_OUT 4566 3.47 3.68 3.36 89 RCVD_IN_MSPIKE_L5 4565 1.25 3.68 0.04 90 URIBL_SBL_A 4423 1.29 3.56 0.16 91 TR_XM_SpammyWords5 4236 2.21 3.41 1.62 92 FROM_SUSPICIOUS_NTLD 4189 1.19 3.37 0.10 93 XMBdyGiftCard01 4111 1.64 3.31 0.81 94 XM_OfRef6 3845 1.75 3.10 1.07 95 MIME_QP_LONG_LINE 3770 4.19 3.04 4.77 96 MIME_HTML_ONLY_MULTI 3710 3.08 2.99 3.13 97 URIBL_DBL_SPAM 3709 1.00 2.99 0.01 98 T_XMDrugObfuBody_14 3554 2.66 2.86 2.56 99 TR_XM_BayesRelay 3553 0.97 2.86 0.03 100 GOOG_STO_IMG_NOHTML 3524 1.02 2.84 0.12 101 URI_HEX 3510 1.67 2.83 1.09 102 XM_B_Phish66 3473 1.71 2.80 1.17 103 T_TooManySym_01 3403 4.90 2.74 5.98 104 XM_B_SpammyWords4 3337 1.39 2.69 0.75 105 PDS_OTHER_BAD_TLD 3312 1.31 2.67 0.64 106 KHOP_HELO_FCRDNS 3306 1.68 2.66 1.19 107 XM_CamelCaseFrm001 3286 2.29 2.65 2.12 108 NO_DNS_FOR_FROM 3167 1.05 2.55 0.30 109 TR_XM_MaxWHORU 3147 1.03 2.53 0.29 110 XMBrknScrpt_02 3113 1.25 2.51 0.62 111 XM_DK_Undo_01 2991 1.63 2.41 1.25 112 XMSubNoVowel 2951 1.54 2.38 1.13 113 T_FILL_THIS_FORM_SHORT 2951 1.10 2.38 0.47 114 HTML_MIME_NO_HTML_TAG 2810 2.18 2.26 2.14 115 TM2_M_VERY_LONG_WORD 2809 1.72 2.26 1.46 116 T_REMOTE_IMAGE 2547 2.97 2.05 3.42 117 T_XMHurry_00 2517 1.06 2.03 0.58 118 URI_PHP_REDIR 2463 0.66 1.98 0.00 119 XMBody_17 2454 1.16 1.98 0.76 120 TR_XM_MaxBayes 2453 0.66 1.98 0.00 121 TR_Mismatch_TLD_02 2400 0.69 1.93 0.08 122 NUMERIC_HTTP_ADDR 2395 0.85 1.93 0.31 123 FROM_SUSPICIOUS_NTLD_FP 2390 0.71 1.92 0.10 124 XMDiploma_00 2364 1.38 1.90 1.12 125 HK_RANDOM_REPLYTO 2357 0.78 1.90 0.23 126 XMSexyCombo_01 2314 1.23 1.86 0.92 127 XM_B_Unsub2 2243 1.47 1.81 1.30 128 HTML_IMAGE_RATIO_08 2190 2.06 1.76 2.21 129 DKIM_ADSP_NXDOMAIN 2100 0.79 1.69 0.35 130 MONEY_NOHTML 2075 0.61 1.67 0.08 131 TR_XM_COVIDMETA4 2071 0.70 1.67 0.21 132 SUBJ_ALL_CAPS 2063 1.56 1.66 1.51 133 MISSING_HEADERS 2046 0.75 1.65 0.30 134 XMSubMetaSSx_00 2046 0.71 1.65 0.24 135 URI_NOVOWEL 2033 2.36 1.64 2.72 136 T_XMDrugObfuBody_08 1982 1.36 1.60 1.24 137 RCVD_IN_IADB_LISTED 1981 3.58 1.60 4.57 138 DKIM_ADSP_CUSTOM_MED 1935 1.16 1.56 0.96 139 RCVD_IN_MSPIKE_L3 1904 0.61 1.53 0.14 140 DATE_IN_PAST_12_24 1878 0.53 1.51 0.03 141 XM_Body_Dirty_Words_01 1865 0.69 1.50 0.29 142 TR_XM_INV_DKIM 1861 0.63 1.50 0.20 143 XM_UB80 1850 0.53 1.49 0.06 144 TR_LOTS_OF_MONEY3 1839 0.67 1.48 0.27 145 FORGED_GMAIL_RCVD 1832 0.85 1.48 0.54 146 RCVD_IN_MSPIKE_L4 1820 0.52 1.47 0.05 147 XMStockSpam_06 1819 1.14 1.46 0.98 148 XM_B_COVIDMETA 1815 0.98 1.46 0.74 149 XMSubMetaI_00 1809 0.97 1.46 0.72 150 NML_ADSP_CUSTOM_MED 1786 0.87 1.44 0.59 151 T_XMDrugObfuBody_00 1771 1.00 1.43 0.78 152 XM_UB60 1721 0.57 1.39 0.17 153 URIBL_BLACK 1713 0.48 1.38 0.03 154 RCVD_IN_IADB_SPF 1701 3.12 1.37 3.98 155 REPLYTO_WITHOUT_TO_CC 1693 0.49 1.36 0.05 156 TR_XM_SB_Phish 1682 1.65 1.35 1.80 157 BAYES_40 1657 2.88 1.33 3.65 158 XMSubPhish11 1640 1.64 1.32 1.79 159 TR_XM_PHPDW 1639 0.73 1.32 0.44 160 XMSubEmpty 1625 0.55 1.31 0.17 161 XMPhish08 1613 0.55 1.30 0.18 162 RCVD_IN_IADB_DK 1611 2.74 1.30 3.46 163 RCVD_IN_IADB_SENDERID 1589 2.82 1.28 3.59 164 TR_XM_PHPForged 1556 0.62 1.25 0.30 165 HTML_FONT_SIZE_LARGE 1550 0.52 1.25 0.16 166 ALL_TRUSTED 1548 10.24 1.25 14.71 167 RELAYCOUNTRY_DE 1543 0.78 1.24 0.55 168 TR_XM_FormFill2 1543 0.62 1.24 0.30 169 XM_H_PHPOS 1536 0.61 1.24 0.29 170 MAILING_LIST_MULTI 1525 1.68 1.23 1.90 171 DIET_1 1500 0.88 1.21 0.72 172 URI_TRY_3LD 1488 1.39 1.20 1.49 173 TR_XM_RelayPhish 1475 0.45 1.19 0.09 174 BAYES_20 1463 2.58 1.18 3.28 175 XM_H_Undi_Recip 1439 0.52 1.16 0.20 176 NORMAL_HTTP_TO_IP 1403 0.39 1.13 0.03 177 RELAYCOUNTRY_IN 1385 0.46 1.12 0.13 178 SUBJ_DOLLARS 1360 0.67 1.10 0.46 179 DATE_IN_PAST_03_06 1352 0.68 1.09 0.47 180 XM_URI_RBL 1345 0.46 1.08 0.16 181 XMHTMLBadTable_001 1338 0.82 1.08 0.69 182 XMGenDplmaNmb 1332 0.75 1.07 0.59 183 MONEY_FORM_SHORT 1326 0.36 1.07 0.01 184 TR_Symld_Words 1326 1.34 1.07 1.47 185 XM_UB95 1299 0.36 1.05 0.02 186 MIME_CHARSET_FARAWAY 1249 0.40 1.01 0.10 187 THIS_AD 1225 0.85 0.99 0.79 188 FROM_LOCAL_NOVOWEL 1209 0.35 0.97 0.05 189 HTML_SHORT_LINK_IMG_1 1205 0.33 0.97 0.02 190 INVALID_MSGID 1202 2.47 0.97 3.22 191 XMHTML_After_End 1193 0.84 0.96 0.78 192 URI_NO_WWW_BIZ_CGI 1184 0.32 0.95 0.00 193 XMSlimDrugH 1181 0.49 0.95 0.26 194 T_HTML_TAG_BALANCE_CENTER 1180 0.57 0.95 0.37 195 RCVD_IN_MSPIKE_H5 1179 3.25 0.95 4.39 196 RELAYCOUNTRY_NL 1117 0.45 0.90 0.22 197 HTML_FONT_FACE_BAD 1073 1.07 0.86 1.18 198 HTTPS_HTTP_MISMATCH 1068 0.65 0.86 0.55 199 XM_BadFromFormat 1063 0.50 0.86 0.33 200 RDNS_DYNAMIC 1034 0.78 0.83 0.76 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 211562 87.67 93.53 84.75 2 RELAYCOUNTRY_US 203684 79.48 75.23 81.59 3 DKIM_SIGNED 195836 80.97 86.04 78.45 4 XM_DK_Pass 193200 79.38 83.37 77.39 5 DKIM_VALID 189326 77.73 81.51 75.84 6 XM_B_Unicode 177577 73.13 77.15 71.14 7 DKIM_VALID_AU 152578 61.65 62.71 61.12 8 BAYES_50 135016 47.33 33.76 54.09 9 XMListUnsubscribeExists 133928 59.97 72.66 53.65 10 DCC_CHECK_NEGATIVE 132385 41.77 19.12 53.03 11 XM_B_SpammyWords 119224 54.60 68.35 47.76 12 DCC_CHECK 114146 56.93 79.46 45.73 13 XM_B_Unicode3 109908 44.55 45.60 44.03 14 RCVD_IN_MSPIKE_WL 94960 33.25 23.61 38.04 15 DKIM_VALID_EF 81225 31.51 29.44 32.54 16 HTML_FONT_LOW_CONTRAST 73556 31.77 36.41 29.47 17 LOC_TINY_FONT_1 66968 30.57 38.09 26.83 18 FVGT_m_MULTI_ODD 65414 26.05 25.73 26.20 19 T_TM2_M_HEADER_IN_MSG 58454 21.34 17.16 23.42 20 MIME_HTML_ONLY 55332 26.01 33.75 22.17 21 RCVD_IN_MSPIKE_H2 52890 21.40 21.83 21.19 22 XMSubLong 51142 21.44 23.37 20.49 23 XM_B_SpammyWords2 50282 27.26 41.56 20.14 24 RCVD_IN_MSPIKE_H3 45677 16.00 11.39 18.30 25 T_KAM_HTML_FONT_INVALID 43481 19.23 22.86 17.42 26 RCVD_IN_MSPIKE_H4 38326 14.00 11.28 15.35 27 ALL_TRUSTED 36713 10.24 1.25 14.71 28 XM_DKIMWhitelistDomains 34143 9.16 0.07 13.68 29 XM_Multi_Part_URI 33588 14.34 16.12 13.45 30 XM_Body_Dirty_Words 29831 15.63 23.04 11.95 31 BAYES_60 27636 10.07 8.06 11.07 32 XM_B_Unsub 26428 11.80 14.24 10.59 33 RCVD_IN_RP_SAFE 25926 9.13 6.59 10.39 34 XM_Evil_Numbers_Gen 23284 9.64 10.27 9.33 35 XM_DK_Undo_02 23006 22.85 50.27 9.22 36 RCVD_IN_RP_CERTIFIED 22433 7.78 5.35 8.99 37 HTML_IMAGE_RATIO_02 21822 9.05 9.67 8.74 38 BAYES_00 21395 5.98 0.77 8.57 39 LotsOfNums_01 20562 7.98 7.45 8.24 40 UNPARSEABLE_RELAY 20396 8.95 10.52 8.17 41 FSL_BULK_SIG 19572 8.95 11.18 7.84 42 BAYES_99 18940 18.28 39.77 7.59 43 XMStrtUSub 18658 7.37 7.15 7.47 44 XM_SendGrid 18328 7.38 7.47 7.34 45 TR_XM_UnparsRelay 17951 8.21 10.25 7.19 46 LOTS_OF_MONEY 17645 9.81 15.31 7.07 47 TooManyTo_001 17033 6.51 5.87 6.82 48 TR_XM_DK_Bayes 16871 4.72 0.63 6.76 49 TR_XM_DK_Bayes1 16580 4.64 0.63 6.64 50 XM_B_Phish_Phrases 16343 6.66 6.89 6.55 51 BOTNET_IPINHOSTNAME 16037 8.56 12.84 6.42 52 BAYES_999 15418 14.72 31.89 6.18 53 BAYES_80 15131 7.10 9.20 6.06 54 TR_XM_DK_Bayes2 14945 4.20 0.60 5.99 55 T_TooManySym_01 14916 4.90 2.74 5.98 56 TR_XM_DKIM_Undo 14607 17.23 40.09 5.85 57 XM_H_Long_From01 13159 5.70 6.55 5.27 58 HTML_IMAGE_RATIO_04 13104 5.12 4.86 5.25 59 MPART_ALT_DIFF 12558 6.51 9.50 5.03 60 XM_B_SpammyWords3 11939 8.06 14.64 4.78 61 MIME_QP_LONG_LINE 11904 4.19 3.04 4.77 62 IN_ZIMBRA_NJ_WHITELIST 11818 3.17 0.02 4.73 63 TR_XM_DK_SendGrid 11631 4.66 4.67 4.66 64 RCVD_IN_IADB_LISTED 11399 3.58 1.60 4.57 65 RELAYCOUNTRY_META 11163 10.84 23.65 4.47 66 RCVD_IN_MSPIKE_H5 10957 3.25 0.95 4.39 67 BAYES_95 10373 4.53 5.29 4.16 68 XMSubMetaSx_00 10361 5.45 8.07 4.15 69 FROM_EXCESS_BASE64 10350 4.05 3.85 4.15 70 XMSexyCombo_05 10159 7.27 13.70 4.07 71 XM_UncommonTLD01 10058 7.94 15.81 4.03 72 HTML_IMAGE_RATIO_06 10017 3.99 3.96 4.01 73 TR_XM_SpammyWords4 9961 6.08 10.27 3.99 74 RCVD_IN_IADB_SPF 9947 3.12 1.37 3.98 75 BAYES_40 9114 2.88 1.33 3.65 76 RCVD_IN_IADB_SENDERID 8963 2.82 1.28 3.59 77 RCVD_IN_IADB_DK 8638 2.74 1.30 3.46 78 T_REMOTE_IMAGE 8544 2.97 2.05 3.42 79 T_TooManySym_02 8488 2.50 0.70 3.40 80 XMNumbers 8471 3.52 3.76 3.39 81 TM2_M_URI_OPT_OUT 8388 3.47 3.68 3.36 82 BAYES_20 8179 2.58 1.18 3.28 83 INVALID_MSGID 8040 2.47 0.97 3.22 84 TR_DCC_Bayes_99 7952 12.38 30.87 3.19 85 MIME_HTML_ONLY_MULTI 7820 3.08 2.99 3.13 86 BOUNCE_MESSAGE 7816 2.21 0.37 3.13 87 ANY_BOUNCE_MESSAGE 7816 2.21 0.37 3.13 88 TVD_RCVD_IP 7678 2.16 0.31 3.08 89 MSGID_NOFQDN1 7580 2.05 0.06 3.04 90 XM_H_Trusted_IP 7479 2.00 0.00 3.00 91 RCVD_IN_IADB_VOUCHED 7206 2.15 0.68 2.89 92 URI_NOVOWEL 6789 2.36 1.64 2.72 93 DKIM_INVALID 6510 3.25 4.53 2.61 94 T_XMDrugObfuBody_14 6381 2.66 2.86 2.56 95 XM_PDF 6346 1.82 0.37 2.54 96 TO_MALFORMED 6269 1.68 0.01 2.51 97 MIME_HTML_MOSTLY 5666 4.12 7.84 2.27 98 TR_XM_PhishingBody 5624 3.33 5.48 2.25 99 HELO_MISC_IP 5584 1.52 0.08 2.24 100 HTML_IMAGE_RATIO_08 5525 2.06 1.76 2.21 101 HTML_MIME_NO_HTML_TAG 5344 2.18 2.26 2.14 102 XM_B_SpammyTLD 5341 3.35 5.80 2.14 103 XM_CamelCaseFrm001 5293 2.29 2.65 2.12 104 UNTRUSTED_Relay 4779 5.72 13.36 1.91 105 XMBSHREFv2 4748 1.31 0.11 1.90 106 MAILING_LIST_MULTI 4748 1.68 1.23 1.90 107 IN_HORDE_ADDRESS_BOOK 4644 1.26 0.06 1.86 108 TR_XM_SB_Phish 4495 1.65 1.35 1.80 109 XMSubPhish11 4474 1.64 1.32 1.79 110 RCVD_IN_IADB_OPTIN 4472 1.37 0.52 1.79 111 BOTNET 4412 7.26 18.31 1.77 112 USER_IN_DEF_DKIM_WL 4205 1.13 0.01 1.68 113 TR_XM_SpammyWords5 4043 2.21 3.41 1.62 114 RELAYCOUNTRY_CA 3878 4.32 9.88 1.55 115 BAYES_05 3848 1.24 0.64 1.54 116 SUBJ_ALL_CAPS 3768 1.56 1.66 1.51 117 URI_TRY_3LD 3721 1.39 1.20 1.49 118 TR_Symld_Words 3673 1.34 1.07 1.47 119 TM2_M_VERY_LONG_WORD 3638 1.72 2.26 1.46 120 XMBody_95 3636 1.03 0.17 1.46 121 XM_H_Long_From02 3315 1.15 0.81 1.33 122 TooManyTo_002 3270 1.03 0.46 1.31 123 XM_B_Unsub2 3240 1.47 1.81 1.30 124 XM_DK_Undo_01 3109 1.63 2.41 1.25 125 XM_UB50 3109 2.24 4.25 1.25 126 T_XMDrugObfuBody_08 3087 1.36 1.60 1.24 127 XMGappySubj_01 3086 0.88 0.15 1.24 128 XM_SPF_SoftFail 3076 2.35 4.58 1.23 129 TR_XM_SpammyWords2 2987 6.12 16.01 1.20 130 KHOP_HELO_FCRDNS 2960 1.68 2.66 1.19 131 HTML_FONT_FACE_BAD 2937 1.07 0.86 1.18 132 XM_B_Phish66 2911 1.71 2.80 1.17 133 XMSubNoVowel 2810 1.54 2.38 1.13 134 XMDiploma_00 2798 1.38 1.90 1.12 135 URI_HEX 2721 1.67 2.83 1.09 136 XM_OfRef6 2679 1.75 3.10 1.07 137 TVD_SPACE_RATIO 2626 0.73 0.09 1.05 138 XM_GoogleGroups 2481 0.83 0.51 0.99 139 XMStockSpam_06 2449 1.14 1.46 0.98 140 DKIM_ADSP_CUSTOM_MED 2391 1.16 1.56 0.96 141 XMSexyCombo_01 2289 1.23 1.86 0.92 142 TooManyTo_003 2206 0.71 0.36 0.88 143 T_TooManySym_03 2120 0.62 0.16 0.85 144 HTML_IMAGE_ONLY_20 2089 0.69 0.40 0.84 145 XMBdyGiftCard01 2014 1.64 3.31 0.81 146 XM_D_tchamptons_WL 2003 0.54 0.00 0.80 147 TR_MetaPhish_Combo_01 1967 0.75 0.67 0.79 148 THIS_AD 1963 0.85 0.99 0.79 149 T_XMDrugObfuBody_00 1953 1.00 1.43 0.78 150 XMHTML_After_End 1946 0.84 0.96 0.78 151 HELO_NO_DOMAIN 1940 0.62 0.29 0.78 152 HELO_NODOT 1940 0.62 0.30 0.78 153 XMLngstWrd_00 1923 0.66 0.43 0.77 154 RELAYCOUNTRY_GB 1915 0.78 0.80 0.77 155 XMBody_17 1892 1.16 1.98 0.76 156 RDNS_DYNAMIC 1889 0.78 0.83 0.76 157 XM_B_SpammyWords4 1865 1.39 2.69 0.75 158 XM_B_COVIDMETA 1848 0.98 1.46 0.74 159 XM_ProductURIs 1817 0.71 0.68 0.73 160 XMSubMetaI_00 1804 0.97 1.46 0.72 161 DIET_1 1791 0.88 1.21 0.72 162 XMHTMLBadTable_001 1718 0.82 1.08 0.69 163 TR_MSPIKEBAYES00 1711 0.47 0.04 0.69 164 TooManyTo_004 1704 0.56 0.33 0.68 165 XMLngstWrd_01 1703 0.58 0.37 0.68 166 XM_H_PHPMailer 1616 0.63 0.58 0.65 167 PDS_OTHER_BAD_TLD 1603 1.31 2.67 0.64 168 XMBrknScrpt_02 1557 1.25 2.51 0.62 169 USER_IN_WELCOMELIST 1553 0.42 0.00 0.62 170 USER_IN_WHITELIST 1553 0.42 0.00 0.62 171 RCVD_IN_BL_SPAMCOP_NET 1544 3.65 9.74 0.62 172 HTML_TAG_BALANCE_BODY 1528 0.68 0.81 0.61 173 XMSubMetaSxObfu_02 1508 0.51 0.32 0.60 174 NML_ADSP_CUSTOM_MED 1484 0.87 1.44 0.59 175 XMGenDplmaNmb 1478 0.75 1.07 0.59 176 XM_Walgreens_Forge 1475 0.40 0.00 0.59 177 XMLngstWrd_02 1463 0.50 0.32 0.59 178 TooManyTo_005 1457 0.49 0.30 0.58 179 T_XMHurry_00 1443 1.06 2.03 0.58 180 XM_B_REG_HTML 1402 0.55 0.52 0.56 181 XMPhish30 1398 0.64 0.79 0.56 182 HTTPS_HTTP_MISMATCH 1378 0.65 0.86 0.55 183 RELAYCOUNTRY_DE 1366 0.78 1.24 0.55 184 SHOPIFY_IMG_NOT_RCVD_SFY 1363 0.57 0.63 0.55 185 XM_DIRTYINTL 1351 1.77 4.23 0.54 186 FORGED_GMAIL_RCVD 1339 0.85 1.48 0.54 187 XM_B_COPY_HTML 1248 0.49 0.47 0.50 188 XMNoVowels 1244 0.52 0.57 0.50 189 DATE_IN_PAST_03_06 1172 0.68 1.09 0.47 190 T_FILL_THIS_FORM_SHORT 1168 1.10 2.38 0.47 191 XMLngstWrd_03 1166 0.39 0.24 0.47 192 SUBJ_DOLLARS 1156 0.67 1.10 0.46 193 XMCapTrack 1120 0.35 0.17 0.45 194 TR_XM_PHPDW 1105 0.73 1.32 0.44 195 SpammyFromTLD_01 1080 2.06 5.34 0.43 196 TVD_SPACE_RATIO_MINFP 1063 0.45 0.48 0.43 197 XMSubMetaSxObfu_03 1054 0.53 0.74 0.42 198 PLING_QUERY 1043 0.49 0.64 0.42 199 XM_SPF_Unknown 1015 0.47 0.60 0.41 200 XM_ShortIntro_01 1007 0.43 0.48 0.40 ----------------------------------------------------------------------