Email: 366724 Autolearn: 0 AvgScore: 3.44 AvgScanTime: 1.21 sec Spam: 113049 Autolearn: 0 AvgScore: 14.07 AvgScanTime: 1.39 sec Ham: 253675 Autolearn: 0 AvgScore: -1.30 AvgScanTime: 1.13 sec Time Spent Running SA: 122.96 hours Time Spent Processing Spam: 43.55 hours Time Spent Processing Ham: 79.42 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 106303 86.41 94.03 83.02 2 DKIM_SIGNED 91353 77.31 80.81 75.76 3 DCC_CHECK 90537 57.89 80.09 47.99 4 XM_DK_Pass 87905 75.70 77.76 74.79 5 DKIM_VALID 86285 74.05 76.33 73.03 6 XM_B_Unicode 86017 73.71 76.09 72.65 7 RELAYCOUNTRY_US 82082 78.04 72.61 80.46 8 XMListUnsubscribeExists 79811 57.25 70.60 51.30 9 XM_B_SpammyWords 75702 53.77 66.96 47.89 10 DKIM_VALID_AU 68494 60.70 60.59 60.75 11 XM_DK_Undo_02 54448 21.57 48.16 9.71 12 XM_B_Unicode3 54169 46.91 47.92 46.47 13 BAYES_99 47087 18.92 41.65 8.79 14 XM_B_SpammyWords2 45375 25.74 40.14 19.32 15 TR_XM_DKIM_Undo 44122 16.73 39.03 6.80 16 MIME_HTML_ONLY 41135 27.10 36.39 22.96 17 LOC_TINY_FONT_1 40958 30.85 36.23 28.45 18 HTML_FONT_LOW_CONTRAST 38166 31.83 33.76 30.97 19 BAYES_999 37635 15.35 33.29 7.36 20 TR_DCC_Bayes_99 37618 13.58 33.28 4.80 21 BAYES_50 33323 46.76 29.48 54.46 22 DKIM_VALID_EF 28831 29.30 25.50 30.99 23 RCVD_IN_MSPIKE_WL 28515 33.59 25.22 37.32 24 T_KAM_HTML_FONT_INVALID 27505 18.05 24.33 15.25 25 RELAYCOUNTRY_META 27038 10.85 23.92 5.03 26 FVGT_m_MULTI_ODD 26942 24.63 23.83 24.99 27 XMSubLong 25851 21.91 22.87 21.48 28 RCVD_IN_MSPIKE_H2 25473 21.98 22.53 21.73 29 XM_Body_Dirty_Words 23111 14.50 20.44 11.84 30 T_TM2_M_HEADER_IN_MSG 21747 21.40 19.24 22.37 31 DCC_CHECK_NEGATIVE 20994 40.92 18.57 50.88 32 XM_UncommonTLD01 20051 8.23 17.74 3.99 33 XM_Multi_Part_URI 20021 15.06 17.71 13.88 34 TR_XM_SpammyWords2 19627 6.45 17.36 1.58 35 UNTRUSTED_Relay 19129 6.63 16.92 2.04 36 FSL_BULK_SIG 17729 10.85 15.68 8.70 37 BOTNET 17324 5.88 15.32 1.67 38 RCVD_IN_MSPIKE_H3 14558 16.49 12.88 18.10 39 XMSexyCombo_05 14291 7.52 12.64 5.24 40 XM_Evil_Numbers_Gen 14284 9.94 12.64 8.74 41 LOTS_OF_MONEY 13974 7.88 12.36 5.89 42 XM_B_Unsub 13071 11.08 11.56 10.87 43 BOTNET_IPINHOSTNAME 12970 7.87 11.47 6.27 44 RCVD_IN_MSPIKE_H4 12942 14.11 11.45 15.29 45 XM_B_SpammyWords3 12880 6.27 11.39 3.99 46 UNPARSEABLE_RELAY 12207 9.19 10.80 8.47 47 HTML_IMAGE_RATIO_02 12192 9.45 10.78 8.86 48 TR_XM_UnparsRelay 12060 8.44 10.67 7.45 49 BAYES_80 11918 7.25 10.54 5.78 50 LotsOfNums_01 11134 8.31 9.85 7.62 51 RCVD_IN_RP_SAFE 10204 10.16 9.03 10.67 52 KHOP_HELO_FCRDNS 9894 4.39 8.75 2.45 53 TR_XM_SpammyWords4 9437 5.13 8.35 3.70 54 XMSubMetaSx_00 9417 5.56 8.33 4.32 55 SpammyFromTLD_02 9257 2.65 8.19 0.18 56 RCVD_IN_BL_SPAMCOP_NET 9238 3.04 8.17 0.75 57 RELAYCOUNTRY_CA 8972 3.53 7.94 1.57 58 BAYES_60 8726 9.90 7.72 10.87 59 XM_B_Phish_Phrases 8565 6.09 7.58 5.43 60 XM_SendGrid 8520 7.54 7.54 7.54 61 MPART_ALT_DIFF 8404 5.96 7.43 5.30 62 T_REMOTE_IMAGE 7900 4.06 6.99 2.76 63 RCVD_IN_RP_CERTIFIED 7877 8.73 6.97 9.52 64 XMStrtUSub 7630 7.90 6.75 8.42 65 BAYES_95 7519 4.58 6.65 3.66 66 HTML_IMAGE_RATIO_04 6841 6.65 6.05 6.92 67 XM_H_Long_From01 6805 5.49 6.02 5.26 68 MIME_HTML_MOSTLY 6630 3.99 5.86 3.16 69 TooManyTo_001 6610 6.38 5.85 6.61 70 HTML_SHORT_LINK_IMG_1 6553 1.80 5.80 0.02 71 TR_XM_PhishingBody 6378 3.38 5.64 2.37 72 HTML_FONT_SIZE_LARGE 6210 1.80 5.49 0.16 73 HTML_IMAGE_ONLY_12 6149 1.77 5.44 0.13 74 SpammyFromTLD_01 6001 1.89 5.31 0.36 75 BODY_URI_ONLY 5345 1.46 4.73 0.01 76 RCVD_IN_MSPIKE_BL 5229 1.55 4.63 0.18 77 TR_XM_MSPIKECOMBO 5170 1.53 4.57 0.17 78 XM_UB50 5135 2.36 4.54 1.39 79 DKIM_INVALID 5068 3.27 4.48 2.73 80 TR_XM_DK_SendGrid 5038 4.70 4.46 4.80 81 XM_UB99 4851 1.33 4.29 0.00 82 XM_B_SpammyTLD 4823 2.76 4.27 2.09 83 XM_SPF_SoftFail 4452 2.08 3.94 1.25 84 XMBdyGiftCard01 4204 1.64 3.72 0.72 85 TR_XM_SpammyWords5 4038 2.10 3.57 1.44 86 MIME_QP_LONG_LINE 3881 3.55 3.43 3.60 87 XMNumbers 3711 3.26 3.28 3.25 88 XM_UB80 3640 1.02 3.22 0.04 89 T_TooManySym_01 3621 5.33 3.20 6.28 90 RELAYCOUNTRY_FR 3553 1.21 3.14 0.34 91 TR_XM_BayesRelay 3508 0.98 3.10 0.03 92 TM2_M_URI_OPT_OUT 3411 3.46 3.02 3.66 93 HK_RANDOM_REPLYTO 3408 1.03 3.01 0.14 94 XM_DIRTYINTL 3395 1.23 3.00 0.44 95 HTML_IMAGE_RATIO_06 3376 3.45 2.99 3.66 96 XM_B_Phish66 3353 1.82 2.97 1.31 97 XM_OfRef6 3326 1.58 2.94 0.97 98 NO_DNS_FOR_FROM 3229 1.09 2.86 0.31 99 XM_UB999 3224 0.88 2.85 0.00 100 FROM_EXCESS_BASE64 3213 3.62 2.84 3.97 101 FROM_SUSPICIOUS_NTLD 3199 0.95 2.83 0.11 102 TR_XM_MaxWHORU 3171 1.07 2.80 0.29 103 RCVD_IN_RP_RNBL 3164 0.89 2.80 0.04 104 RCVD_IN_PSBL 3132 0.99 2.77 0.20 105 XM_UB95 3040 0.84 2.69 0.01 106 URIBL_DBL_SPAM 3035 0.83 2.68 0.01 107 BOTNET_NORDNS 3018 0.83 2.67 0.01 108 MIME_HTML_ONLY_MULTI 2980 3.14 2.64 3.36 109 DKIM_ADSP_NXDOMAIN 2897 1.04 2.56 0.36 110 TM2_M_VERY_LONG_WORD 2876 1.90 2.54 1.62 111 T_XMDrugObfuBody_14 2778 2.91 2.46 3.11 112 XM_CamelCaseFrm001 2775 1.93 2.45 1.69 113 T_XMHurry_00 2693 1.41 2.38 0.97 114 XMBrknScrpt_02 2685 1.20 2.38 0.68 115 XMSexyCombo_01 2598 1.10 2.30 0.56 116 URI_HEX 2576 1.66 2.28 1.39 117 GOOG_STO_IMG_NOHTML 2455 0.70 2.17 0.05 118 XM_B_SpammyWords4 2425 0.92 2.15 0.38 119 T_FILL_THIS_FORM_SHORT 2379 1.00 2.10 0.51 120 XMDiploma_00 2361 1.52 2.09 1.27 121 NUMERIC_HTTP_ADDR 2353 0.87 2.08 0.33 122 SUBJ_ALL_CAPS 2336 1.54 2.07 1.30 123 TR_XM_SpammyWords3 2318 0.72 2.05 0.12 124 RCVD_IN_MSPIKE_L5 2303 0.66 2.04 0.05 125 XM_DK_Undo_01 2265 1.50 2.00 1.28 126 XMSubMetaSxObfu_03 2152 0.90 1.90 0.45 127 RELAYCOUNTRY_DE 2137 0.91 1.89 0.47 128 RELAYCOUNTRY_GB 2117 1.24 1.87 0.96 129 XM_UB60 2109 0.66 1.87 0.13 130 XMBody_17 2069 0.91 1.83 0.51 131 FROM_SUSPICIOUS_NTLD_FP 2066 0.64 1.83 0.11 132 T_XMDrugObfuBody_08 2051 1.34 1.81 1.12 133 PDS_OTHER_BAD_TLD 2042 1.01 1.81 0.66 134 XMSubMetaI_00 2019 1.15 1.79 0.86 135 XM_B_Unsub2 2009 1.12 1.78 0.83 136 HTML_IMAGE_RATIO_08 2002 2.17 1.77 2.35 137 XMStockSpam_06 1995 1.74 1.76 1.74 138 URIBL_SBL_A 1931 0.68 1.71 0.22 139 HTML_MIME_NO_HTML_TAG 1868 1.69 1.65 1.71 140 RCVD_IN_MSPIKE_L4 1824 0.55 1.61 0.08 141 TR_Symld_Words 1790 1.36 1.58 1.27 142 FROM_LOCAL_NOVOWEL 1760 0.50 1.56 0.03 143 TR_XM_PHPDW 1739 0.72 1.54 0.35 144 HTML_FONT_SIZE_HUGE 1623 0.56 1.44 0.17 145 MONEY_NOHTML 1602 0.49 1.42 0.07 146 MAILING_LIST_MULTI 1601 1.87 1.42 2.08 147 XMLngstWrd_00 1576 1.40 1.39 1.40 148 XMSubNoVowel 1574 1.66 1.39 1.78 149 DKIM_ADSP_CUSTOM_MED 1574 1.16 1.39 1.06 150 XMLngstWrd_01 1540 1.35 1.36 1.35 151 BAYES_40 1506 2.80 1.33 3.46 152 XM_Body_Dirty_Words_01 1505 0.50 1.33 0.12 153 TR_Mismatch_TLD_02 1467 0.44 1.30 0.06 154 NML_ADSP_CUSTOM_MED 1459 0.87 1.29 0.68 155 FORGED_GMAIL_RCVD 1455 0.79 1.29 0.57 156 TR_XM_PHPForged 1451 0.57 1.28 0.24 157 XM_URI_RBL 1448 0.54 1.28 0.21 158 TR_XM_FormFill2 1448 0.56 1.28 0.24 159 URIBL_BLACK 1446 0.41 1.28 0.03 160 XM_H_PHPOS 1439 0.55 1.27 0.23 161 XMPhish08 1411 0.50 1.25 0.16 162 TR_XM_INV_DKIM 1404 0.47 1.24 0.13 163 TR_XM_RelayPhish 1400 0.45 1.24 0.09 164 XMSlimDrugH 1389 0.58 1.23 0.28 165 DIET_1 1385 0.76 1.23 0.56 166 THIS_AD 1369 1.10 1.21 1.05 167 TR_XM_Spammywords 1368 0.59 1.21 0.31 168 XM_S_SpammyWords 1368 0.59 1.21 0.31 169 RCVD_IN_IADB_LISTED 1346 2.71 1.19 3.39 170 T_TooManySym_02 1342 2.88 1.19 3.63 171 T_XMDrugObfuBody_00 1318 0.68 1.17 0.47 172 RELAYCOUNTRY_NL 1314 0.51 1.16 0.22 173 NORMAL_HTTP_TO_IP 1295 0.38 1.15 0.04 174 TR_XM_SB_Phish 1255 1.36 1.11 1.47 175 T_Symld_Words_02 1221 0.54 1.08 0.30 176 MIME_CHARSET_FARAWAY 1221 0.46 1.08 0.18 177 BAYES_20 1217 2.56 1.08 3.22 178 RCVD_IN_IADB_SPF 1207 2.34 1.07 2.91 179 XMSubPhish11 1191 1.33 1.05 1.45 180 SUBJ_DOLLARS 1177 0.55 1.04 0.33 181 TR_LOTS_OF_MONEY3 1166 0.41 1.03 0.13 182 SUBJ_YOUR_FAMILY 1165 0.34 1.03 0.03 183 RCVD_IN_IADB_DK 1142 2.04 1.01 2.50 184 TR_XM_MaxBayes 1122 0.31 0.99 0.00 185 RCVD_IN_IADB_SENDERID 1121 2.10 0.99 2.59 186 XM_B_COVIDMETA 1113 0.74 0.98 0.63 187 HTML_FONT_FACE_BAD 1099 1.29 0.97 1.43 188 INVALID_MSGID 1093 2.37 0.97 2.99 189 XMLngstWrd_02 1083 0.68 0.96 0.56 190 T_TooManySym_03 1066 0.94 0.94 0.94 191 XM_H_PHPMailer 1055 0.63 0.93 0.50 192 XMGenDplmaNmb 1045 0.74 0.92 0.66 193 ALL_TRUSTED 1044 11.18 0.92 15.75 194 XMPhish30 1044 0.66 0.92 0.54 195 LOADSA_MONEY_COMBO 1043 0.31 0.92 0.03 196 RCVD_IN_MSPIKE_L3 1043 0.31 0.92 0.04 197 RDNS_DYNAMIC 1040 0.77 0.92 0.70 198 RCVD_IN_MSPIKE_H5 1015 2.99 0.90 3.93 199 XMLngstWrd_03 1010 0.61 0.89 0.48 200 TM2_M_A_HREF_HREF 981 0.41 0.87 0.21 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 210590 86.41 94.03 83.02 2 RELAYCOUNTRY_US 204105 78.04 72.61 80.46 3 DKIM_SIGNED 192172 77.31 80.81 75.76 4 XM_DK_Pass 189719 75.70 77.76 74.79 5 DKIM_VALID 185256 74.05 76.33 73.03 6 XM_B_Unicode 184291 73.71 76.09 72.65 7 DKIM_VALID_AU 154099 60.70 60.59 60.75 8 BAYES_50 138159 46.76 29.48 54.46 9 XMListUnsubscribeExists 130131 57.25 70.60 51.30 10 DCC_CHECK_NEGATIVE 129069 40.92 18.57 50.88 11 DCC_CHECK 121747 57.89 80.09 47.99 12 XM_B_SpammyWords 121490 53.77 66.96 47.89 13 XM_B_Unicode3 117871 46.91 47.92 46.47 14 RCVD_IN_MSPIKE_WL 94666 33.59 25.22 37.32 15 DKIM_VALID_EF 78621 29.30 25.50 30.99 16 HTML_FONT_LOW_CONTRAST 78557 31.83 33.76 30.97 17 LOC_TINY_FONT_1 72181 30.85 36.23 28.45 18 FVGT_m_MULTI_ODD 63385 24.63 23.83 24.99 19 MIME_HTML_ONLY 58245 27.10 36.39 22.96 20 T_TM2_M_HEADER_IN_MSG 56745 21.40 19.24 22.37 21 RCVD_IN_MSPIKE_H2 55127 21.98 22.53 21.73 22 XMSubLong 54492 21.91 22.87 21.48 23 XM_B_SpammyWords2 49009 25.74 40.14 19.32 24 RCVD_IN_MSPIKE_H3 45906 16.49 12.88 18.10 25 ALL_TRUSTED 39943 11.18 0.92 15.75 26 RCVD_IN_MSPIKE_H4 38793 14.11 11.45 15.29 27 T_KAM_HTML_FONT_INVALID 38686 18.05 24.33 15.25 28 XM_DKIMWhitelistDomains 35973 9.85 0.13 14.18 29 XM_Multi_Part_URI 35199 15.06 17.71 13.88 30 XM_Body_Dirty_Words 30046 14.50 20.44 11.84 31 BAYES_60 27570 9.90 7.72 10.87 32 XM_B_Unsub 27563 11.08 11.56 10.87 33 RCVD_IN_RP_SAFE 27066 10.16 9.03 10.67 34 XM_DK_Undo_02 24637 21.57 48.16 9.71 35 RCVD_IN_RP_CERTIFIED 24152 8.73 6.97 9.52 36 HTML_IMAGE_RATIO_02 22479 9.45 10.78 8.86 37 BAYES_99 22291 18.92 41.65 8.79 38 XM_Evil_Numbers_Gen 22176 9.94 12.64 8.74 39 FSL_BULK_SIG 22078 10.85 15.68 8.70 40 UNPARSEABLE_RELAY 21486 9.19 10.80 8.47 41 XMStrtUSub 21359 7.90 6.75 8.42 42 BAYES_00 21001 5.99 0.84 8.28 43 LotsOfNums_01 19331 8.31 9.85 7.62 44 XM_SendGrid 19139 7.54 7.54 7.54 45 TR_XM_UnparsRelay 18898 8.44 10.67 7.45 46 BAYES_999 18660 15.35 33.29 7.36 47 HTML_IMAGE_RATIO_04 17558 6.65 6.05 6.92 48 TR_XM_DKIM_Undo 17241 16.73 39.03 6.80 49 TooManyTo_001 16775 6.38 5.85 6.61 50 TR_XM_DK_Bayes 16655 4.73 0.62 6.57 51 TR_XM_DK_Bayes1 16349 4.65 0.62 6.44 52 T_TooManySym_01 15936 5.33 3.20 6.28 53 BOTNET_IPINHOSTNAME 15899 7.87 11.47 6.27 54 TR_XM_DK_Bayes2 15256 4.35 0.61 6.01 55 LOTS_OF_MONEY 14929 7.88 12.36 5.89 56 BAYES_80 14664 7.25 10.54 5.78 57 XM_B_Phish_Phrases 13777 6.09 7.58 5.43 58 MPART_ALT_DIFF 13438 5.96 7.43 5.30 59 XM_H_Long_From01 13346 5.49 6.02 5.26 60 XMSexyCombo_05 13291 7.52 12.64 5.24 61 RELAYCOUNTRY_META 12767 10.85 23.92 5.03 62 TR_XM_DK_SendGrid 12188 4.70 4.46 4.80 63 TR_DCC_Bayes_99 12173 13.58 33.28 4.80 64 IN_ZIMBRA_NJ_WHITELIST 11209 3.07 0.03 4.42 65 XMSubMetaSx_00 10965 5.56 8.33 4.32 66 XM_H_Trusted_IP 10244 2.79 0.00 4.04 67 XM_UncommonTLD01 10131 8.23 17.74 3.99 68 XM_B_SpammyWords3 10128 6.27 11.39 3.99 69 FROM_EXCESS_BASE64 10066 3.62 2.84 3.97 70 RCVD_IN_MSPIKE_H5 9967 2.99 0.90 3.93 71 TR_XM_SpammyWords4 9381 5.13 8.35 3.70 72 BAYES_95 9290 4.58 6.65 3.66 73 TM2_M_URI_OPT_OUT 9276 3.46 3.02 3.66 74 HTML_IMAGE_RATIO_06 9273 3.45 2.99 3.66 75 T_TooManySym_02 9207 2.88 1.19 3.63 76 MIME_QP_LONG_LINE 9130 3.55 3.43 3.60 77 BAYES_40 8777 2.80 1.33 3.46 78 RCVD_IN_IADB_LISTED 8596 2.71 1.19 3.39 79 MIME_HTML_ONLY_MULTI 8523 3.14 2.64 3.36 80 XMNumbers 8237 3.26 3.28 3.25 81 ANY_BOUNCE_MESSAGE 8208 2.49 0.80 3.24 82 BOUNCE_MESSAGE 8207 2.48 0.80 3.24 83 BAYES_20 8177 2.56 1.08 3.22 84 TVD_RCVD_IP 8028 2.26 0.22 3.16 85 MIME_HTML_MOSTLY 8010 3.99 5.86 3.16 86 T_XMDrugObfuBody_14 7888 2.91 2.46 3.11 87 INVALID_MSGID 7585 2.37 0.97 2.99 88 RCVD_IN_IADB_SPF 7384 2.34 1.07 2.91 89 MSGID_NOFQDN1 7197 1.99 0.08 2.84 90 T_REMOTE_IMAGE 6998 4.06 6.99 2.76 91 DKIM_INVALID 6916 3.27 4.48 2.73 92 RCVD_IN_IADB_SENDERID 6567 2.10 0.99 2.59 93 RCVD_IN_IADB_DK 6348 2.04 1.01 2.50 94 TO_MALFORMED 6279 1.71 0.00 2.48 95 KHOP_HELO_FCRDNS 6217 4.39 8.75 2.45 96 TR_XM_PhishingBody 6015 3.38 5.64 2.37 97 HTML_IMAGE_RATIO_08 5949 2.17 1.77 2.35 98 HELO_MISC_IP 5422 1.51 0.09 2.14 99 RCVD_IN_IADB_VOUCHED 5403 1.61 0.45 2.13 100 XM_B_SpammyTLD 5298 2.76 4.27 2.09 101 MAILING_LIST_MULTI 5269 1.87 1.42 2.08 102 URI_NOVOWEL 5210 1.67 0.80 2.05 103 UNTRUSTED_Relay 5183 6.63 16.92 2.04 104 XMBSHREFv2 4647 1.31 0.13 1.83 105 XMSubNoVowel 4512 1.66 1.39 1.78 106 XM_PDF 4485 1.34 0.37 1.77 107 IN_HORDE_ADDRESS_BOOK 4450 1.23 0.06 1.75 108 USER_IN_DEF_DKIM_WL 4426 1.21 0.02 1.74 109 XMStockSpam_06 4402 1.74 1.76 1.74 110 HTML_MIME_NO_HTML_TAG 4345 1.69 1.65 1.71 111 XM_CamelCaseFrm001 4295 1.93 2.45 1.69 112 BOTNET 4227 5.88 15.32 1.67 113 TM2_M_VERY_LONG_WORD 4101 1.90 2.54 1.62 114 TR_XM_SpammyWords2 4018 6.45 17.36 1.58 115 RELAYCOUNTRY_CA 3974 3.53 7.94 1.57 116 BAYES_05 3743 1.24 0.71 1.48 117 TR_XM_SB_Phish 3734 1.36 1.11 1.47 118 XMSubPhish11 3680 1.33 1.05 1.45 119 TR_XM_SpammyWords5 3665 2.10 3.57 1.44 120 HTML_FONT_FACE_BAD 3640 1.29 0.97 1.43 121 TooManyTo_002 3569 1.13 0.49 1.41 122 RCVD_IN_IADB_OPTIN 3569 1.08 0.36 1.41 123 XMLngstWrd_00 3541 1.40 1.39 1.40 124 URI_HEX 3529 1.66 2.28 1.39 125 XM_UB50 3528 2.36 4.54 1.39 126 XMLngstWrd_01 3416 1.35 1.36 1.35 127 XM_H_Long_From02 3357 1.12 0.68 1.32 128 XM_B_Phish66 3319 1.82 2.97 1.31 129 SUBJ_ALL_CAPS 3310 1.54 2.07 1.30 130 XMBody_95 3276 0.95 0.19 1.29 131 XM_DK_Undo_01 3250 1.50 2.00 1.28 132 URI_TRY_3LD 3219 1.11 0.76 1.27 133 TR_Symld_Words 3211 1.36 1.58 1.27 134 XMDiploma_00 3211 1.52 2.09 1.27 135 XM_SPF_SoftFail 3160 2.08 3.94 1.25 136 XMGappySubj_01 3117 0.91 0.21 1.23 137 MY_SERVERS_FOUND 3019 0.96 0.44 1.19 138 T_XMDrugObfuBody_08 2852 1.34 1.81 1.12 139 XM_GoogleGroups 2720 0.91 0.54 1.07 140 DKIM_ADSP_CUSTOM_MED 2686 1.16 1.39 1.06 141 THIS_AD 2673 1.10 1.21 1.05 142 TR_MSPIKEBAYES00 2657 0.73 0.03 1.05 143 XMSolicitRefs_0 2645 0.81 0.30 1.04 144 TVD_SPACE_RATIO 2524 0.72 0.11 0.99 145 TooManyTo_003 2484 0.80 0.41 0.98 146 T_XMHurry_00 2464 1.41 2.38 0.97 147 XM_OfRef6 2454 1.58 2.94 0.97 148 RELAYCOUNTRY_GB 2435 1.24 1.87 0.96 149 T_TooManySym_03 2372 0.94 0.94 0.94 150 HTML_IMAGE_ONLY_20 2215 0.86 0.85 0.87 151 XMSubMetaI_00 2186 1.15 1.79 0.86 152 XM_B_Unsub2 2116 1.12 1.78 0.83 153 T_MANY_PILL_PRICE 2066 0.56 0.00 0.81 154 URI_OPTOUT_3LD 2045 0.64 0.28 0.81 155 TooManyTo_004 2032 0.66 0.36 0.80 156 XMSubMetaSxObfu_02 1974 0.64 0.34 0.78 157 HTML_TAG_BALANCE_BODY 1932 0.74 0.70 0.76 158 RCVD_IN_BL_SPAMCOP_NET 1915 3.04 8.17 0.75 159 XM_B_REG_HTML 1912 0.69 0.54 0.75 160 TVD_SPACE_RATIO_MINFP 1899 0.70 0.60 0.75 161 XMHTML_After_End 1881 0.77 0.82 0.74 162 XMBdyGiftCard01 1826 1.64 3.72 0.72 163 TooManyTo_005 1788 0.59 0.32 0.70 164 RDNS_DYNAMIC 1767 0.77 0.92 0.70 165 NML_ADSP_CUSTOM_MED 1732 0.87 1.29 0.68 166 XMBrknScrpt_02 1721 1.20 2.38 0.68 167 PDS_OTHER_BAD_TLD 1672 1.01 1.81 0.66 168 XMGenDplmaNmb 1668 0.74 0.92 0.66 169 USER_IN_WHITELIST 1662 0.45 0.00 0.66 170 USER_IN_WELCOMELIST 1662 0.45 0.00 0.66 171 XM_B_COVIDMETA 1602 0.74 0.98 0.63 172 TR_MetaPhish_Combo_01 1572 0.69 0.84 0.62 173 XM_ProductURIs 1527 0.59 0.55 0.60 174 XMHTMLBadTable_001 1511 0.67 0.82 0.60 175 HELO_NODOT 1497 0.56 0.50 0.59 176 HELO_NO_DOMAIN 1497 0.56 0.50 0.59 177 FORGED_GMAIL_RCVD 1442 0.79 1.29 0.57 178 XM_B_COPY_HTML 1442 0.59 0.65 0.57 179 XMSexyCombo_01 1429 1.10 2.30 0.56 180 XMLngstWrd_02 1429 0.68 0.96 0.56 181 DIET_1 1414 0.76 1.23 0.56 182 XMPhish30 1368 0.66 0.92 0.54 183 SHOPIFY_IMG_NOT_RCVD_SFY 1321 0.58 0.72 0.52 184 XMBody_17 1284 0.91 1.83 0.51 185 T_FILL_THIS_FORM_SHORT 1282 1.00 2.10 0.51 186 XM_H_PHPMailer 1257 0.63 0.93 0.50 187 XMLngstWrd_03 1216 0.61 0.89 0.48 188 T_XMDrugObfuBody_00 1191 0.68 1.17 0.47 189 RELAYCOUNTRY_DE 1191 0.91 1.89 0.47 190 HTTPS_HTTP_MISMATCH 1182 0.51 0.61 0.47 191 XMNoVowels 1170 0.43 0.35 0.46 192 XMSubMetaSxObfu_03 1132 0.90 1.90 0.45 193 XM_DIRTYINTL 1104 1.23 3.00 0.44 194 XMCapTrack 1060 0.36 0.22 0.42 195 T_TooManySym_04 1059 0.55 0.85 0.42 196 XMLngstWrd_04 1023 0.52 0.77 0.40 197 XM_Akamai 1016 0.29 0.05 0.40 198 XM_D_tchamptons_WL 1004 0.27 0.00 0.40 199 XM_shorewaves_Whitelist 989 0.27 0.00 0.39 200 XM_B_SpammyWords4 965 0.92 2.15 0.38 ----------------------------------------------------------------------