Email: 322606 Autolearn: 0 AvgScore: 1.99 AvgScanTime: 1.43 sec Spam: 86192 Autolearn: 0 AvgScore: 14.35 AvgScanTime: 1.57 sec Ham: 236414 Autolearn: 0 AvgScore: -2.51 AvgScanTime: 1.38 sec Time Spent Running SA: 128.10 hours Time Spent Processing Spam: 37.48 hours Time Spent Processing Ham: 90.62 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 80029 82.08 92.85 78.15 2 DKIM_SIGNED 73929 79.82 85.77 77.65 3 XM_DK_Pass 71196 78.27 82.60 76.69 4 DKIM_VALID 69771 76.82 80.95 75.31 5 DCC_CHECK 67802 56.67 78.66 48.65 6 XM_B_Unicode 66921 68.26 77.64 64.84 7 RELAYCOUNTRY_US 62349 79.14 72.34 81.62 8 XMListUnsubscribeExists 60134 52.26 69.77 45.87 9 XM_B_SpammyWords 59058 55.11 68.52 50.22 10 DKIM_VALID_AU 52297 61.80 60.68 62.21 11 XM_DK_Undo_02 42648 21.04 49.48 10.67 12 XM_B_Unicode3 36577 40.29 42.44 39.51 13 BAYES_99 35679 17.70 41.39 9.06 14 XM_B_SpammyWords2 34784 23.92 40.36 17.93 15 TR_XM_DKIM_Undo 32465 15.47 37.67 7.37 16 LOC_TINY_FONT_1 32035 28.00 37.17 24.66 17 BAYES_50 29839 47.76 34.62 52.55 18 HTML_FONT_LOW_CONTRAST 28598 29.28 33.18 27.85 19 BAYES_999 28449 14.17 33.01 7.30 20 DKIM_VALID_EF 28112 34.44 32.62 35.11 21 TR_DCC_Bayes_99 27899 12.12 32.37 4.73 22 MIME_HTML_ONLY 26143 23.99 30.33 21.68 23 RELAYCOUNTRY_META 23248 9.93 26.97 3.72 24 T_KAM_HTML_FONT_INVALID 22513 17.96 26.12 14.98 25 FVGT_m_MULTI_ODD 21587 22.86 25.05 22.07 26 RCVD_IN_MSPIKE_H2 21241 23.02 24.64 22.43 27 T_TM2_M_HEADER_IN_MSG 19866 23.70 23.05 23.94 28 RCVD_IN_MSPIKE_WL 19809 33.96 22.98 37.97 29 XMSubLong 18586 20.01 21.56 19.44 30 DCC_CHECK_NEGATIVE 16555 41.74 19.21 49.95 31 XM_Body_Dirty_Words 15680 13.10 18.19 11.24 32 BOTNET 15178 5.83 17.61 1.54 33 UNTRUSTED_Relay 15153 6.00 17.58 1.78 34 XM_Multi_Part_URI 13770 13.28 15.98 12.29 35 LOTS_OF_MONEY 13245 9.67 15.37 7.60 36 TR_XM_SpammyWords2 13110 5.29 15.21 1.68 37 MPART_ALT_DIFF 13096 7.82 15.19 5.13 38 XM_UncommonTLD01 12381 6.79 14.36 4.03 39 BOTNET_IPINHOSTNAME 12061 7.69 13.99 5.40 40 XM_B_Unsub 11878 11.22 13.78 10.28 41 FSL_BULK_SIG 11673 9.96 13.54 8.66 42 XM_B_SpammyWords3 11516 7.03 13.36 4.72 43 TR_XM_SpammyWords4 10381 6.36 12.04 4.29 44 UNPARSEABLE_RELAY 9942 8.35 11.53 7.19 45 RCVD_IN_MSPIKE_H3 9865 15.00 11.45 16.29 46 TR_XM_UnparsRelay 9655 7.45 11.20 6.09 47 RCVD_IN_BL_SPAMCOP_NET 9565 3.51 11.10 0.74 48 MIME_HTML_MOSTLY 9332 4.55 10.83 2.26 49 RCVD_IN_MSPIKE_H4 9088 13.18 10.54 14.14 50 XMSexyCombo_05 8835 5.85 10.25 4.24 51 XM_SendGrid 7648 6.95 8.87 6.25 52 BAYES_80 7302 7.11 8.47 6.62 53 XM_Evil_Numbers_Gen 6994 8.78 8.11 9.02 54 SpammyFromTLD_01 6823 2.41 7.92 0.40 55 XMSubMetaSx_00 6775 4.65 7.86 3.48 56 RELAYCOUNTRY_CA 6515 2.80 7.56 1.07 57 XM_H_Long_From01 6486 5.47 7.53 4.72 58 HTML_IMAGE_RATIO_02 6431 6.35 7.46 5.95 59 BAYES_60 6041 10.25 7.01 11.43 60 LotsOfNums_01 6011 7.84 6.97 8.16 61 XM_B_Phish_Phrases 5959 10.62 6.91 11.97 62 XM_UB99 5957 1.85 6.91 0.00 63 HTML_IMAGE_RATIO_04 5132 6.19 5.95 6.28 64 RCVD_IN_MSPIKE_BL 5114 1.83 5.93 0.33 65 TR_XM_MSPIKECOMBO 5031 1.80 5.84 0.32 66 RELAYCOUNTRY_FR 4955 1.73 5.75 0.27 67 URIBL_DBL_SPAM 4889 1.52 5.67 0.01 68 TR_XM_PhishingBody 4717 3.47 5.47 2.74 69 XM_SPF_SoftFail 4694 2.43 5.45 1.33 70 XM_UB999 4638 1.44 5.38 0.00 71 TR_XM_DK_SendGrid 4503 4.41 5.22 4.12 72 BAYES_95 4226 4.82 4.90 4.79 73 MIME_HTML_ONLY_MULTI 4178 3.62 4.85 3.18 74 XM_OfRef6 4164 1.91 4.83 0.85 75 DKIM_INVALID 4158 3.00 4.82 2.34 76 XM_UB50 4137 2.15 4.80 1.18 77 TooManyTo_001 4107 6.02 4.76 6.47 78 RCVD_IN_RP_SAFE 4010 7.71 4.65 8.82 79 XMStrtUSub 3379 10.55 3.92 12.97 80 HTML_IMAGE_RATIO_06 3252 3.43 3.77 3.31 81 TR_XM_SpammyWords5 3180 2.05 3.69 1.46 82 RCVD_IN_RP_CERTIFIED 2916 6.47 3.38 7.60 83 T_FILL_THIS_FORM_SHORT 2809 1.37 3.26 0.68 84 TR_XM_SpammyWords3 2766 1.06 3.21 0.28 85 TM2_M_URI_OPT_OUT 2759 3.18 3.20 3.17 86 MONEY_NOHTML 2756 0.90 3.20 0.06 87 RCVD_IN_PSBL 2656 1.00 3.08 0.25 88 XM_B_SpammyTLD 2636 2.32 3.06 2.06 89 RCVD_IN_RP_RNBL 2561 0.87 2.97 0.11 90 SUBJ_ALL_CAPS 2560 1.76 2.97 1.32 91 FROM_EXCESS_BASE64 2481 2.95 2.88 2.97 92 XMNumbers 2440 3.34 2.83 3.53 93 MIME_QP_LONG_LINE 2423 3.72 2.81 4.05 94 URIBL_SBL_A 2405 0.96 2.79 0.29 95 DKIM_ADSP_CUSTOM_MED 2356 1.41 2.73 0.93 96 XM_B_Phish66 2356 1.84 2.73 1.52 97 XM_DIRTYINTL 2347 0.95 2.72 0.31 98 TM2_M_VERY_LONG_WORD 2303 1.58 2.67 1.18 99 T_XMDrugObfuBody_14 2265 2.25 2.63 2.11 100 T_TooManySym_01 2250 5.18 2.61 6.12 101 KHOP_HELO_FCRDNS 2227 1.65 2.58 1.30 102 FORGED_GMAIL_RCVD 2227 1.09 2.58 0.55 103 NML_ADSP_CUSTOM_MED 2223 1.07 2.58 0.52 104 XM_B_Unsub2 2204 1.53 2.56 1.15 105 XMBody_17 2189 1.20 2.54 0.71 106 TR_XM_INV_DKIM 2173 0.78 2.52 0.15 107 XM_B_SpammyWords4 2151 0.88 2.50 0.30 108 XM_CamelCaseFrm001 2128 1.94 2.47 1.75 109 TR_XM_BayesRelay 2100 0.66 2.44 0.02 110 RCVD_IN_MSPIKE_L4 2093 0.74 2.43 0.13 111 RCVD_IN_MSPIKE_L5 2093 0.67 2.43 0.03 112 URI_TRY_3LD 2039 1.53 2.37 1.23 113 USER_IN_DEF_DKIM_WL 2006 11.70 2.33 15.11 114 TR_XM_MaxBayes 2004 0.63 2.33 0.01 115 T_REMOTE_IMAGE 1995 3.07 2.31 3.35 116 XMStockSpam_06 1988 1.62 2.31 1.37 117 T_XMDrugObfuBody_08 1984 1.64 2.30 1.40 118 XMBdyGiftCard01 1918 1.97 2.23 1.87 119 T_XMHurry_00 1895 1.02 2.20 0.59 120 HTML_IMAGE_RATIO_08 1894 2.11 2.20 2.08 121 XM_DK_Undo_01 1890 1.55 2.19 1.32 122 ALL_TRUSTED 1850 11.72 2.15 15.22 123 XMSexyCombo_01 1840 0.81 2.13 0.32 124 HK_RANDOM_REPLYTO 1763 0.64 2.05 0.13 125 SpammyFromTLD_02 1759 0.83 2.04 0.39 126 XM_UB60 1719 0.65 1.99 0.16 127 XM_UB80 1712 0.56 1.99 0.04 128 RELAYCOUNTRY_PL 1691 0.60 1.96 0.10 129 TR_LOTS_OF_MONEY3 1654 0.71 1.92 0.27 130 LOADSA_MONEY_COMBO 1588 0.54 1.84 0.06 131 RCVD_IN_IADB_LISTED 1585 3.69 1.84 4.37 132 URI_HEX 1523 1.59 1.77 1.53 133 HTML_MIME_NO_HTML_TAG 1506 2.14 1.75 2.29 134 XMDiploma_00 1499 1.14 1.74 0.93 135 XM_B_COVIDMETA 1499 1.00 1.74 0.73 136 RELAYCOUNTRY_IN 1473 0.52 1.71 0.08 137 XM_H_Undi_Recip 1460 0.58 1.69 0.18 138 BOTNET_NORDNS 1441 0.46 1.67 0.02 139 RCVD_IN_IADB_SPF 1441 3.16 1.67 3.70 140 DIET_1 1437 1.03 1.67 0.79 141 HTML_IMAGE_ONLY_16 1379 0.54 1.60 0.15 142 RCVD_IN_IADB_DK 1373 2.72 1.59 3.12 143 RCVD_IN_IADB_SENDERID 1372 2.80 1.59 3.24 144 TR_Mismatch_TLD_02 1371 0.48 1.59 0.07 145 XMBrknScrpt_02 1365 1.21 1.58 1.07 146 MONEY_FORM_SHORT 1360 0.42 1.58 0.00 147 TR_XM_COVIDMETA4 1356 0.58 1.57 0.21 148 TR_Symld_Words 1351 1.58 1.57 1.58 149 URIBL_BLACK 1351 0.44 1.57 0.03 150 TR_XM_PHPDW 1342 0.67 1.56 0.34 151 PDS_OTHER_BAD_TLD 1334 0.73 1.55 0.43 152 XM_Body_Dirty_Words_01 1332 1.05 1.55 0.86 153 TR_XM_COVIDMETA1 1326 0.54 1.54 0.18 154 MAILING_LIST_MULTI 1298 2.01 1.51 2.20 155 TR_XM_SB_Phish 1294 1.66 1.50 1.72 156 XFER_LOTSA_MONEY 1292 0.41 1.50 0.01 157 FROM_SUSPICIOUS_NTLD 1271 0.44 1.47 0.06 158 FILL_THIS_FORM 1260 0.57 1.46 0.24 159 URI_NOVOWEL 1252 2.45 1.45 2.82 160 XM_URI_RBL 1247 0.48 1.45 0.12 161 MILLION_USD 1236 0.39 1.43 0.01 162 FILL_THIS_FORM_LONG 1228 0.41 1.42 0.04 163 XM_DrugUnitList 1225 0.38 1.42 0.00 164 XMSubPhish11 1219 1.62 1.41 1.69 165 FROM_SUSPICIOUS_NTLD_FP 1212 0.42 1.41 0.05 166 XM_UB95 1175 0.37 1.36 0.01 167 T_XMDrugObfuBody_00 1138 0.90 1.32 0.75 168 BAYES_40 1134 2.88 1.32 3.45 169 TR_XM_PHPForged 1133 0.56 1.31 0.28 170 TR_XM_FormFill2 1121 0.55 1.30 0.28 171 XM_H_PHPOS 1111 0.54 1.29 0.27 172 TR_XM_Undi_Recip5 1100 0.35 1.28 0.01 173 MONEY_FORM 1075 0.34 1.25 0.00 174 SHOPIFY_IMG_NOT_RCVD_SFY 1040 0.53 1.21 0.29 175 ORDER_TODAY 1021 0.32 1.18 0.00 176 XM_H_PHPMailer 999 0.75 1.16 0.60 177 TR_XM_Undi_Recip9 993 0.31 1.15 0.00 178 TR_Orig_Subnet 979 0.31 1.14 0.01 179 TR_Sbj_FN_Bdy 979 0.37 1.14 0.10 180 XM_OfRef7 974 0.39 1.13 0.13 181 MPART_ALT_DIFF_COUNT 973 0.63 1.13 0.45 182 HTML_FONT_SIZE_HUGE 948 0.47 1.10 0.24 183 BAYES_20 945 2.68 1.10 3.25 184 UNDISC_MONEY 944 0.30 1.10 0.01 185 DATE_IN_PAST_03_06 939 0.50 1.09 0.28 186 HTML_FONT_FACE_BAD 924 1.26 1.07 1.33 187 TR_Caps_n_Bayes_99 915 0.54 1.06 0.36 188 XMHTMLBadTable_001 895 0.76 1.04 0.66 189 HDRS_MISSP 866 0.40 1.00 0.18 190 RCVD_IN_MSPIKE_H5 856 5.78 0.99 7.53 191 LongTLD 854 0.34 0.99 0.10 192 RCVD_IN_MSPIKE_L3 845 0.38 0.98 0.16 193 T_FILL_THIS_FORM_FRAUD_PHISH 842 0.39 0.98 0.18 194 ADVANCE_FEE_3_NEW_FRM_MNY 832 0.26 0.97 0.00 195 XMPhish14 831 0.48 0.96 0.30 196 MONEY_FRAUD_3 809 0.25 0.94 0.00 197 T_HTML_TAG_BALANCE_CENTER 803 0.49 0.93 0.32 198 BODY_URI_ONLY 788 0.25 0.91 0.01 199 HTML_SHORT_LINK_IMG_1 781 0.25 0.91 0.01 200 XMSubMetaSSx_00 772 0.39 0.90 0.21 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 192969 79.14 72.34 81.62 2 HTML_MESSAGE 184750 82.08 92.85 78.15 3 DKIM_SIGNED 183579 79.82 85.77 77.65 4 XM_DK_Pass 181301 78.27 82.60 76.69 5 DKIM_VALID 178049 76.82 80.95 75.31 6 XM_B_Unicode 153282 68.26 77.64 64.84 7 DKIM_VALID_AU 147071 61.80 60.68 62.21 8 BAYES_50 124227 47.76 34.62 52.55 9 XM_B_SpammyWords 118718 55.11 68.52 50.22 10 DCC_CHECK_NEGATIVE 118095 41.74 19.21 49.95 11 DCC_CHECK 115021 56.67 78.66 48.65 12 XMListUnsubscribeExists 108444 52.26 69.77 45.87 13 XM_B_Unicode3 93413 40.29 42.44 39.51 14 RCVD_IN_MSPIKE_WL 89755 33.96 22.98 37.97 15 DKIM_VALID_EF 83001 34.44 32.62 35.11 16 HTML_FONT_LOW_CONTRAST 65850 29.28 33.18 27.85 17 LOC_TINY_FONT_1 58300 28.00 37.17 24.66 18 T_TM2_M_HEADER_IN_MSG 56589 23.70 23.05 23.94 19 RCVD_IN_MSPIKE_H2 53020 23.02 24.64 22.43 20 FVGT_m_MULTI_ODD 52166 22.86 25.05 22.07 21 MIME_HTML_ONLY 51245 23.99 30.33 21.68 22 XMSubLong 45959 20.01 21.56 19.44 23 XM_DKIMWhitelistDomains 45656 14.21 0.21 19.31 24 XM_B_SpammyWords2 42380 23.92 40.36 17.93 25 RCVD_IN_MSPIKE_H3 38522 15.00 11.45 16.29 26 ALL_TRUSTED 35971 11.72 2.15 15.22 27 USER_IN_DEF_DKIM_WL 35730 11.70 2.33 15.11 28 T_KAM_HTML_FONT_INVALID 35417 17.96 26.12 14.98 29 RCVD_IN_MSPIKE_H4 33429 13.18 10.54 14.14 30 XMStrtUSub 30654 10.55 3.92 12.97 31 XM_Multi_Part_URI 29061 13.28 15.98 12.29 32 XM_B_Phish_Phrases 28294 10.62 6.91 11.97 33 BAYES_60 27022 10.25 7.01 11.43 34 XM_Body_Dirty_Words 26579 13.10 18.19 11.24 35 XM_DK_Undo_02 25236 21.04 49.48 10.67 36 XM_B_Unsub 24312 11.22 13.78 10.28 37 BAYES_99 21415 17.70 41.39 9.06 38 XM_Evil_Numbers_Gen 21336 8.78 8.11 9.02 39 RCVD_IN_RP_SAFE 20860 7.71 4.65 8.82 40 FSL_BULK_SIG 20462 9.96 13.54 8.66 41 LotsOfNums_01 19297 7.84 6.97 8.16 42 LOTS_OF_MONEY 17967 9.67 15.37 7.60 43 RCVD_IN_RP_CERTIFIED 17961 6.47 3.38 7.60 44 RCVD_IN_MSPIKE_H5 17804 5.78 0.99 7.53 45 TR_XM_DKIM_Undo 17428 15.47 37.67 7.37 46 BAYES_00 17259 5.51 0.59 7.30 47 BAYES_999 17255 14.17 33.01 7.30 48 UNPARSEABLE_RELAY 16989 8.35 11.53 7.19 49 BAYES_80 15641 7.11 8.47 6.62 50 TooManyTo_001 15300 6.02 4.76 6.47 51 HTML_IMAGE_RATIO_04 14839 6.19 5.95 6.28 52 XM_SendGrid 14782 6.95 8.87 6.25 53 T_TooManySym_01 14474 5.18 2.61 6.12 54 TR_XM_UnparsRelay 14391 7.45 11.20 6.09 55 HTML_IMAGE_RATIO_02 14055 6.35 7.46 5.95 56 BOTNET_IPINHOSTNAME 12761 7.69 13.99 5.40 57 TR_XM_DK_Bayes 12569 4.03 0.50 5.32 58 TR_XM_DK_Bayes1 12315 3.95 0.49 5.21 59 MPART_ALT_DIFF 12129 7.82 15.19 5.13 60 BAYES_95 11318 4.82 4.90 4.79 61 TR_DCC_Bayes_99 11189 12.12 32.37 4.73 62 XM_H_Long_From01 11159 5.47 7.53 4.72 63 XM_B_SpammyWords3 11154 7.03 13.36 4.72 64 TR_XM_DK_Bayes2 11087 3.53 0.36 4.69 65 RCVD_IN_IADB_LISTED 10332 3.69 1.84 4.37 66 TR_XM_SpammyWords4 10137 6.36 12.04 4.29 67 XMSexyCombo_05 10030 5.85 10.25 4.24 68 IN_ZIMBRA_NJ_WHITELIST 9780 3.04 0.03 4.14 69 TR_XM_DK_SendGrid 9736 4.41 5.22 4.12 70 MIME_QP_LONG_LINE 9575 3.72 2.81 4.05 71 XM_UncommonTLD01 9521 6.79 14.36 4.03 72 RELAYCOUNTRY_META 8794 9.93 26.97 3.72 73 RCVD_IN_IADB_SPF 8745 3.16 1.67 3.70 74 XMNumbers 8344 3.34 2.83 3.53 75 XMSubMetaSx_00 8230 4.65 7.86 3.48 76 BAYES_40 8154 2.88 1.32 3.45 77 T_TooManySym_02 8116 2.67 0.58 3.43 78 INVALID_MSGID 8018 2.61 0.47 3.39 79 T_REMOTE_IMAGE 7920 3.07 2.31 3.35 80 XM_H_Trusted_IP 7879 2.44 0.00 3.33 81 HTML_IMAGE_RATIO_06 7829 3.43 3.77 3.31 82 BAYES_20 7685 2.68 1.10 3.25 83 RCVD_IN_IADB_SENDERID 7661 2.80 1.59 3.24 84 MIME_HTML_ONLY_MULTI 7516 3.62 4.85 3.18 85 TM2_M_URI_OPT_OUT 7498 3.18 3.20 3.17 86 RCVD_IN_IADB_DK 7386 2.72 1.59 3.12 87 FROM_EXCESS_BASE64 7023 2.95 2.88 2.97 88 RCVD_IN_IADB_VOUCHED 6855 2.29 0.61 2.90 89 URI_NOVOWEL 6665 2.45 1.45 2.82 90 TR_XM_PhishingBody 6489 3.47 5.47 2.74 91 XM_PDF 6484 2.11 0.38 2.74 92 ANY_BOUNCE_MESSAGE 6276 2.10 0.58 2.65 93 BOUNCE_MESSAGE 6269 2.10 0.58 2.65 94 TO_MALFORMED 6262 1.96 0.06 2.65 95 TVD_RCVD_IP 5768 1.86 0.28 2.44 96 DKIM_INVALID 5530 3.00 4.82 2.34 97 HTML_MIME_NO_HTML_TAG 5403 2.14 1.75 2.29 98 MIME_HTML_MOSTLY 5353 4.55 10.83 2.26 99 MAILING_LIST_MULTI 5198 2.01 1.51 2.20 100 T_XMDrugObfuBody_14 4980 2.25 2.63 2.11 101 HTML_IMAGE_RATIO_08 4909 2.11 2.20 2.08 102 IN_HORDE_ADDRESS_BOOK 4901 1.56 0.14 2.07 103 XM_B_SpammyTLD 4863 2.32 3.06 2.06 104 RCVD_IN_IADB_OPTIN 4483 1.54 0.56 1.90 105 XMBdyGiftCard01 4426 1.97 2.23 1.87 106 UNTRUSTED_Relay 4198 6.00 17.58 1.78 107 XM_CamelCaseFrm001 4143 1.94 2.47 1.75 108 TR_XM_SB_Phish 4058 1.66 1.50 1.72 109 XMSubPhish11 3994 1.62 1.41 1.69 110 TR_XM_SpammyWords2 3968 5.29 15.21 1.68 111 XMGappySubj_01 3790 1.20 0.09 1.60 112 TR_Symld_Words 3736 1.58 1.57 1.58 113 BAYES_05 3690 1.30 0.59 1.56 114 BOTNET 3633 5.83 17.61 1.54 115 URI_HEX 3612 1.59 1.77 1.53 116 XM_B_Phish66 3592 1.84 2.73 1.52 117 TR_XM_SpammyWords5 3440 2.05 3.69 1.46 118 TooManyTo_002 3419 1.23 0.62 1.45 119 XMBSHREFv2 3399 1.10 0.16 1.44 120 T_XMDrugObfuBody_08 3321 1.64 2.30 1.40 121 XMStockSpam_06 3248 1.62 2.31 1.37 122 XM_SPF_SoftFail 3151 2.43 5.45 1.33 123 HTML_FONT_FACE_BAD 3140 1.26 1.07 1.33 124 SUBJ_ALL_CAPS 3127 1.76 2.97 1.32 125 XM_DK_Undo_01 3123 1.55 2.19 1.32 126 KHOP_HELO_FCRDNS 3083 1.65 2.58 1.30 127 XMSubNoVowel 2914 1.14 0.88 1.23 128 URI_TRY_3LD 2900 1.53 2.37 1.23 129 TM2_M_VERY_LONG_WORD 2801 1.58 2.67 1.18 130 XM_UB50 2801 2.15 4.80 1.18 131 XM_GoogleGroups 2791 1.04 0.64 1.18 132 XM_B_Unsub2 2728 1.53 2.56 1.15 133 XMBody_95 2672 0.94 0.40 1.13 134 MSGID_NOFQDN1 2600 0.82 0.05 1.10 135 XMBrknScrpt_02 2541 1.21 1.58 1.07 136 HTML_IMAGE_ONLY_20 2532 0.85 0.24 1.07 137 RELAYCOUNTRY_CA 2530 2.80 7.56 1.07 138 XM_D_tchamptons_WL 2448 0.76 0.00 1.04 139 XM_H_Long_From02 2427 0.93 0.66 1.03 140 TooManyTo_003 2387 0.88 0.53 1.01 141 XM_RXBody 2382 0.87 0.49 1.01 142 XMLngstWrd_00 2373 0.91 0.63 1.00 143 T_TooManySym_03 2265 0.75 0.16 0.96 144 DKIM_ADSP_CUSTOM_MED 2193 1.41 2.73 0.93 145 XMDiploma_00 2187 1.14 1.74 0.93 146 XMLngstWrd_01 2143 0.81 0.56 0.91 147 XM_Body_Dirty_Words_01 2040 1.05 1.55 0.86 148 XM_OfRef6 2010 1.91 4.83 0.85 149 HTML_TAG_BALANCE_BODY 1882 0.80 0.81 0.80 150 DIET_1 1872 1.03 1.67 0.79 151 XM_ProductURIs 1867 0.78 0.77 0.79 152 XMLngstWrd_02 1812 0.67 0.42 0.77 153 TooManyTo_004 1778 0.68 0.48 0.75 154 T_XMDrugObfuBody_00 1772 0.90 1.32 0.75 155 TR_MetaPhish_Combo_01 1761 0.73 0.68 0.74 156 RCVD_IN_BL_SPAMCOP_NET 1753 3.51 11.10 0.74 157 XM_B_COVIDMETA 1727 1.00 1.74 0.73 158 XM_B_SexDrugs1 1690 0.61 0.31 0.71 159 XM_Body_Dirty_Words_02 1687 0.60 0.30 0.71 160 XMBody_17 1678 1.20 2.54 0.71 161 XMHTML_After_End 1666 0.70 0.70 0.70 162 T_FILL_THIS_FORM_SHORT 1615 1.37 3.26 0.68 163 XMPhish30 1599 0.71 0.81 0.68 164 XMHTMLBadTable_001 1572 0.76 1.04 0.66 165 HELO_NODOT 1564 0.61 0.47 0.66 166 HELO_NO_DOMAIN 1564 0.61 0.47 0.66 167 RDNS_DYNAMIC 1551 0.62 0.52 0.66 168 TooManyTo_005 1534 0.59 0.43 0.65 169 XM_B_REG_HTML 1521 0.61 0.53 0.64 170 USER_IN_WHITELIST 1486 0.46 0.00 0.63 171 USER_IN_WELCOMELIST 1486 0.46 0.00 0.63 172 XMLngstWrd_03 1483 0.56 0.36 0.63 173 XMSubMetaSxObfu_02 1466 0.60 0.55 0.62 174 XM_B_COPY_HTML 1442 0.64 0.73 0.61 175 RELAYCOUNTRY_GB 1433 0.64 0.75 0.61 176 XM_H_PHPMailer 1415 0.75 1.16 0.60 177 T_XMHurry_00 1393 1.02 2.20 0.59 178 FORGED_GMAIL_RCVD 1299 1.09 2.58 0.55 179 NML_ADSP_CUSTOM_MED 1226 1.07 2.58 0.52 180 XMNoVowels 1217 0.49 0.41 0.51 181 TR_MSPIKEBAYES00 1201 0.38 0.01 0.51 182 XM_Walgreens_Forge 1195 0.38 0.03 0.51 183 XMLngstWrd_04 1161 0.42 0.23 0.49 184 XMGenDplmaNmb 1158 0.56 0.75 0.49 185 XMSubMetaI_00 1144 0.59 0.88 0.48 186 XMCapTrack 1141 0.41 0.23 0.48 187 HTTPS_HTTP_MISMATCH 1117 0.58 0.87 0.47 188 XMSolicitRefs_0 1112 0.45 0.40 0.47 189 TVD_SPACE_RATIO 1095 0.37 0.12 0.46 190 MPART_ALT_DIFF_COUNT 1070 0.63 1.13 0.45 191 PLING_QUERY 1014 0.46 0.53 0.43 192 PDS_OTHER_BAD_TLD 1011 0.73 1.55 0.43 193 T_OBFU_PDF_ATTACH 1005 0.33 0.06 0.43 194 TM2_M_A_HREF_HREF 969 0.45 0.56 0.41 195 T_TooManySym_04 963 0.31 0.04 0.41 196 BASE64_LENGTH_79_INF 943 0.31 0.08 0.40 197 SpammyFromTLD_01 939 2.41 7.92 0.40 198 SpammyFromTLD_02 932 0.83 2.04 0.39 199 XM_Lotto 923 0.34 0.21 0.39 200 XMSlimDrugH 907 0.47 0.71 0.38 ----------------------------------------------------------------------