Email: 315902 Autolearn: 0 AvgScore: 1.55 AvgScanTime: 1.39 sec Spam: 77839 Autolearn: 0 AvgScore: 13.69 AvgScanTime: 1.54 sec Ham: 238063 Autolearn: 0 AvgScore: -2.41 AvgScanTime: 1.35 sec Time Spent Running SA: 122.29 hours Time Spent Processing Spam: 33.21 hours Time Spent Processing Ham: 89.08 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 73467 81.59 94.38 77.40 2 DKIM_SIGNED 67120 79.84 86.23 77.75 3 XM_DK_Pass 65047 78.32 83.57 76.61 4 DKIM_VALID 63660 76.93 81.78 75.34 5 XM_B_Unicode 62621 68.64 80.45 64.78 6 DCC_CHECK 61257 57.93 78.70 51.13 7 RELAYCOUNTRY_US 60575 80.88 77.82 81.88 8 XMListUnsubscribeExists 53777 50.60 69.09 44.56 9 XM_B_SpammyWords 53610 55.85 68.87 51.59 10 DKIM_VALID_AU 48504 63.13 62.31 63.39 11 XM_DK_Undo_02 38257 19.37 49.15 9.63 12 XM_B_Unicode3 34601 42.12 44.45 41.35 13 BAYES_99 32345 16.71 41.55 8.59 14 XM_B_SpammyWords2 31348 23.75 40.27 18.35 15 TR_XM_DKIM_Undo 30113 15.26 38.69 7.60 16 LOC_TINY_FONT_1 26977 28.18 34.66 26.06 17 HTML_FONT_LOW_CONTRAST 26914 30.00 34.58 28.51 18 BAYES_999 25738 13.35 33.07 6.91 19 BAYES_50 25497 47.75 32.76 52.65 20 TR_DCC_Bayes_99 24918 11.76 32.01 5.14 21 DKIM_VALID_EF 24621 35.13 31.63 36.27 22 MIME_HTML_ONLY 24373 25.24 31.31 23.25 23 RCVD_IN_MSPIKE_H2 21148 23.78 27.17 22.67 24 T_KAM_HTML_FONT_INVALID 21104 17.10 27.11 13.82 25 FVGT_m_MULTI_ODD 19544 21.96 25.11 20.93 26 RCVD_IN_MSPIKE_WL 18261 34.97 23.46 38.73 27 T_TM2_M_HEADER_IN_MSG 16766 22.13 21.54 22.32 28 XM_Body_Dirty_Words 16671 13.64 21.42 11.10 29 XMSubLong 16359 19.93 21.02 19.58 30 RELAYCOUNTRY_META 15514 7.84 19.93 3.89 31 DCC_CHECK_NEGATIVE 15127 40.64 19.43 47.57 32 TR_XM_SpammyWords2 12159 5.45 15.62 2.12 33 XM_Multi_Part_URI 11981 13.09 15.39 12.34 34 BOTNET_IPINHOSTNAME 11692 7.48 15.02 5.02 35 FSL_BULK_SIG 11585 10.36 14.88 8.88 36 UNTRUSTED_Relay 11067 4.84 14.22 1.78 37 XM_B_Unsub 10717 11.51 13.77 10.77 38 BOTNET 10599 4.46 13.62 1.47 39 UNPARSEABLE_RELAY 10306 8.78 13.24 7.32 40 XM_B_SpammyWords3 10238 6.59 13.15 4.44 41 TR_XM_UnparsRelay 10198 7.98 13.10 6.30 42 XM_UncommonTLD01 9442 5.95 12.13 3.93 43 RCVD_IN_MSPIKE_H3 9101 15.27 11.69 16.44 44 LOTS_OF_MONEY 8804 7.55 11.31 6.32 45 XMSexyCombo_05 8650 6.45 11.11 4.93 46 RCVD_IN_MSPIKE_H4 8419 13.65 10.82 14.58 47 TR_XM_SpammyWords4 7624 5.42 9.79 3.99 48 XM_SendGrid 7369 7.16 9.47 6.41 49 BAYES_80 6953 7.36 8.93 6.85 50 HTML_IMAGE_RATIO_02 6952 7.13 8.93 6.54 51 BAYES_60 6281 10.54 8.07 11.35 52 MPART_ALT_DIFF 6196 6.03 7.96 5.40 53 XM_Evil_Numbers_Gen 6142 9.01 7.89 9.37 54 XM_B_Phish_Phrases 5618 12.38 7.22 14.06 55 XM_H_Long_From01 5596 5.34 7.19 4.73 56 RCVD_IN_BL_SPAMCOP_NET 5567 2.15 7.15 0.51 57 LotsOfNums_01 5122 7.29 6.58 7.52 58 RELAYCOUNTRY_CA 5077 2.43 6.52 1.09 59 XMSubMetaSx_00 4917 4.05 6.32 3.31 60 RCVD_IN_MSPIKE_BL 4895 1.85 6.29 0.40 61 XMStrtUSub 4882 12.06 6.27 13.96 62 RCVD_IN_RP_SAFE 4853 8.33 6.23 9.02 63 TooManyTo_001 4768 6.43 6.13 6.54 64 TR_XM_MSPIKECOMBO 4754 1.80 6.11 0.39 65 TR_XM_PhishingBody 4698 3.40 6.04 2.54 66 HTML_IMAGE_RATIO_04 4449 6.84 5.72 7.21 67 T_REMOTE_IMAGE 4355 3.46 5.59 2.76 68 BAYES_95 4200 4.84 5.40 4.65 69 MIME_HTML_MOSTLY 4076 3.25 5.24 2.60 70 SpammyFromTLD_02 3893 1.34 5.00 0.15 71 TR_XM_DK_SendGrid 3843 4.31 4.94 4.10 72 XM_B_SpammyTLD 3770 2.60 4.84 1.87 73 DKIM_INVALID 3460 2.91 4.45 2.40 74 RCVD_IN_RP_CERTIFIED 3422 7.20 4.40 8.12 75 KHOP_HELO_FCRDNS 3422 1.83 4.40 0.99 76 XMNumbers 3292 4.01 4.23 3.94 77 XM_SPF_SoftFail 3253 1.80 4.18 1.02 78 XM_UB50 3252 1.93 4.18 1.20 79 XM_OfRef6 3138 1.51 4.03 0.68 80 TM2_M_URI_OPT_OUT 3099 3.46 3.98 3.29 81 RCVD_IN_RP_RNBL 3038 1.01 3.90 0.07 82 RCVD_IN_MSPIKE_L5 3008 1.03 3.86 0.11 83 SpammyFromTLD_01 2937 1.23 3.77 0.40 84 MIME_HTML_ONLY_MULTI 2717 3.55 3.49 3.56 85 PDS_OTHER_BAD_TLD 2703 1.25 3.47 0.52 86 RCVD_IN_PSBL 2572 0.86 3.30 0.06 87 XM_UB99 2516 0.80 3.23 0.00 88 XM_DIRTYINTL 2470 1.02 3.17 0.31 89 TR_XM_SpammyWords3 2465 1.04 3.17 0.34 90 HTML_IMAGE_RATIO_08 2443 2.22 3.14 1.92 91 T_XMHurry_00 2405 1.48 3.09 0.96 92 HTML_IMAGE_RATIO_06 2322 3.24 2.98 3.33 93 TR_XM_SpammyWords5 2279 1.75 2.93 1.37 94 HTML_IMAGE_ONLY_12 2219 0.79 2.85 0.12 95 T_XMDrugObfuBody_14 2166 3.07 2.78 3.17 96 USER_IN_DEF_DKIM_WL 2150 12.08 2.76 15.12 97 XM_B_Phish66 2116 1.74 2.72 1.42 98 XMBdyGiftCard01 2098 2.11 2.70 1.93 99 HTML_SHORT_LINK_IMG_1 2060 0.66 2.65 0.01 100 T_TooManySym_01 2053 5.63 2.64 6.61 101 XM_CamelCaseFrm001 2020 1.95 2.60 1.74 102 BODY_URI_ONLY 2011 0.64 2.58 0.01 103 MIME_QP_LONG_LINE 2002 3.40 2.57 3.66 104 XM_UB80 1924 0.64 2.47 0.04 105 FROM_EXCESS_BASE64 1920 3.08 2.47 3.28 106 URIBL_SBL_A 1903 0.91 2.44 0.40 107 BOTNET_NORDNS 1893 0.61 2.43 0.01 108 TM2_M_VERY_LONG_WORD 1879 1.72 2.41 1.49 109 RELAYCOUNTRY_FR 1864 0.73 2.39 0.19 110 XM_UB60 1853 0.69 2.38 0.14 111 T_FILL_THIS_FORM_SHORT 1832 0.95 2.35 0.49 112 XM_UB999 1797 0.57 2.31 0.00 113 HTML_FONT_SIZE_LARGE 1794 0.68 2.30 0.15 114 MIXED_FONT_CASE 1781 0.56 2.29 0.00 115 XMStockSpam_06 1748 1.74 2.25 1.57 116 XM_B_SpammyWords4 1745 0.86 2.24 0.40 117 XMBody_17 1708 0.91 2.19 0.49 118 T_XMDrugObfuBody_08 1628 1.42 2.09 1.20 119 XM_B_Unsub2 1608 1.16 2.07 0.86 120 SUBJ_ALL_CAPS 1581 1.40 2.03 1.19 121 TR_XM_BayesRelay 1549 0.51 1.99 0.02 122 URI_TRY_3LD 1528 1.30 1.96 1.09 123 TR_LOTS_OF_MONEY3 1460 0.66 1.88 0.26 124 XMDiploma_00 1442 1.31 1.85 1.14 125 XMSexyCombo_01 1408 0.67 1.81 0.30 126 TR_Mismatch_TLD_02 1398 0.48 1.80 0.05 127 URIBL_BLACK 1397 0.46 1.79 0.02 128 URI_HEX 1357 1.64 1.74 1.61 129 TR_XM_COVIDMETA4 1345 0.57 1.73 0.20 130 HTML_MIME_NO_HTML_TAG 1342 2.00 1.72 2.09 131 DIET_1 1335 0.79 1.72 0.48 132 JH_SPAMMY_PATTERN01 1319 0.42 1.69 0.00 133 XM_URI_RBL 1310 0.55 1.68 0.18 134 MAILING_LIST_MULTI 1309 2.53 1.68 2.80 135 T_XMDrugObfuBody_00 1308 0.80 1.68 0.51 136 XM_UB95 1305 0.43 1.68 0.02 137 XM_B_COVIDMETA 1287 1.04 1.65 0.84 138 XMBrknScrpt_02 1271 1.19 1.63 1.05 139 MONEY_NOHTML 1262 0.45 1.62 0.06 140 XM_OfRef7 1252 0.45 1.61 0.07 141 RCVD_IN_IADB_LISTED 1252 2.84 1.61 3.24 142 XM_DK_Undo_01 1232 1.55 1.58 1.54 143 XM_B_SEO 1200 0.51 1.54 0.17 144 XMPhish08 1193 0.55 1.53 0.23 145 RCVD_IN_MSPIKE_L4 1190 0.55 1.53 0.23 146 TR_XM_SB_Phish 1188 1.57 1.53 1.58 147 FROM_SUSPICIOUS_NTLD 1173 0.40 1.51 0.04 148 XM_PDF 1161 2.60 1.49 2.97 149 TR_Symld_Words 1148 1.28 1.47 1.22 150 TR_XM_SEO4 1146 0.45 1.47 0.12 151 FROM_SUSPICIOUS_NTLD_FP 1143 0.39 1.47 0.04 152 RCVD_IN_IADB_SPF 1123 2.46 1.44 2.79 153 SHOPIFY_IMG_NOT_RCVD_SFY 1108 0.54 1.42 0.26 154 XMSubPhish11 1098 1.51 1.41 1.54 155 URIBL_DBL_SPAM 1096 0.35 1.41 0.01 156 HTTPS_HTTP_MISMATCH 1073 0.69 1.38 0.46 157 RCVD_IN_IADB_DK 1058 2.18 1.36 2.45 158 RCVD_IN_IADB_SENDERID 1051 2.22 1.35 2.51 159 XMSlimDrugH 1051 0.50 1.35 0.23 160 TR_XM_INV_DKIM 1035 0.40 1.33 0.09 161 BAYES_40 1027 3.00 1.32 3.55 162 XM_Body_Dirty_Words_01 993 0.44 1.28 0.17 163 ALL_TRUSTED 990 11.60 1.27 14.97 164 URI_NOVOWEL 971 1.69 1.25 1.84 165 SUBJ_DOLLARS 956 0.54 1.23 0.32 166 XM_H_Undi_Recip 947 0.45 1.22 0.20 167 XM_OfRef8 921 0.30 1.18 0.01 168 TR_XM_PHPDW 920 0.53 1.18 0.32 169 XMPhish30 906 0.73 1.16 0.58 170 TR_XM_COVIDMETA1 905 0.40 1.16 0.15 171 RELAYCOUNTRY_PL 904 0.31 1.16 0.03 172 XMSubNoVowel 884 1.51 1.14 1.63 173 HK_RANDOM_REPLYTO 878 0.39 1.13 0.15 174 HTML_FONT_FACE_BAD 870 1.50 1.12 1.62 175 XMSubMetaI_00 867 0.74 1.11 0.62 176 BAYES_20 846 2.90 1.09 3.49 177 TR_XM_MaxBayes 845 0.27 1.09 0.00 178 TR_XM_PHPForged 841 0.45 1.08 0.25 179 MONEY_FORM_SHORT 834 0.27 1.07 0.01 180 LongTLD 825 0.32 1.06 0.08 181 FSL_THIS_IS_ADV 822 0.33 1.06 0.09 182 HTML_FONT_SIZE_HUGE 820 0.38 1.05 0.16 183 DEAR_BENEFICIARY 819 0.26 1.05 0.00 184 TR_XM_FormFill2 819 0.44 1.05 0.24 185 XM_H_PHPOS 814 0.43 1.05 0.23 186 XMHTMLBadTable_001 799 0.71 1.03 0.61 187 XM_H_PHPMailer 788 0.68 1.01 0.57 188 RELAYCOUNTRY_NL 787 0.40 1.01 0.20 189 RELAYCOUNTRY_RU 786 0.26 1.01 0.01 190 NUMERIC_HTTP_ADDR 748 0.45 0.96 0.29 191 HK_SCAM 746 0.24 0.96 0.00 192 RCVD_IN_SORBS_DUL 746 0.47 0.96 0.31 193 LOADSA_MONEY_COMBO 742 0.26 0.95 0.03 194 RCVD_IN_MSPIKE_H5 741 6.05 0.95 7.72 195 SUBJ_YOUR_FAMILY 728 0.24 0.94 0.01 196 ADVANCE_FEE_2_NEW_MONEY 717 0.24 0.92 0.01 197 RELAYCOUNTRY_AU 714 0.41 0.92 0.25 198 XM_BadFromFormat 702 0.38 0.90 0.20 199 XMGenDplmaNmb 699 0.72 0.90 0.66 200 HTML_IMAGE_ONLY_20 697 1.10 0.90 1.17 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 194929 80.88 77.82 81.88 2 DKIM_SIGNED 185092 79.84 86.23 77.75 3 HTML_MESSAGE 184267 81.59 94.38 77.40 4 XM_DK_Pass 182383 78.32 83.57 76.61 5 DKIM_VALID 179368 76.93 81.78 75.34 6 XM_B_Unicode 154213 68.64 80.45 64.78 7 DKIM_VALID_AU 150920 63.13 62.31 63.39 8 BAYES_50 125337 47.75 32.76 52.65 9 XM_B_SpammyWords 122815 55.85 68.87 51.59 10 DCC_CHECK 121731 57.93 78.70 51.13 11 DCC_CHECK_NEGATIVE 113257 40.64 19.43 47.57 12 XMListUnsubscribeExists 106085 50.60 69.09 44.56 13 XM_B_Unicode3 98443 42.12 44.45 41.35 14 RCVD_IN_MSPIKE_WL 92200 34.97 23.46 38.73 15 DKIM_VALID_EF 86353 35.13 31.63 36.27 16 HTML_FONT_LOW_CONTRAST 67866 30.00 34.58 28.51 17 LOC_TINY_FONT_1 62030 28.18 34.66 26.06 18 MIME_HTML_ONLY 55345 25.24 31.31 23.25 19 RCVD_IN_MSPIKE_H2 53963 23.78 27.17 22.67 20 T_TM2_M_HEADER_IN_MSG 53144 22.13 21.54 22.32 21 FVGT_m_MULTI_ODD 49830 21.96 25.11 20.93 22 XM_DKIMWhitelistDomains 48231 15.28 0.07 20.26 23 XMSubLong 46614 19.93 21.02 19.58 24 XM_B_SpammyWords2 43677 23.75 40.27 18.35 25 RCVD_IN_MSPIKE_H3 39128 15.27 11.69 16.44 26 USER_IN_DEF_DKIM_WL 36007 12.08 2.76 15.12 27 ALL_TRUSTED 35649 11.60 1.27 14.97 28 RCVD_IN_MSPIKE_H4 34698 13.65 10.82 14.58 29 XM_B_Phish_Phrases 33481 12.38 7.22 14.06 30 XMStrtUSub 33231 12.06 6.27 13.96 31 T_KAM_HTML_FONT_INVALID 32911 17.10 27.11 13.82 32 XM_Multi_Part_URI 29370 13.09 15.39 12.34 33 BAYES_60 27028 10.54 8.07 11.35 34 XM_Body_Dirty_Words 26420 13.64 21.42 11.10 35 XM_B_Unsub 25632 11.51 13.77 10.77 36 XM_DK_Undo_02 22927 19.37 49.15 9.63 37 XM_Evil_Numbers_Gen 22314 9.01 7.89 9.37 38 RCVD_IN_RP_SAFE 21475 8.33 6.23 9.02 39 FSL_BULK_SIG 21147 10.36 14.88 8.88 40 BAYES_99 20455 16.71 41.55 8.59 41 RCVD_IN_RP_CERTIFIED 19337 7.20 4.40 8.12 42 RCVD_IN_MSPIKE_H5 18374 6.05 0.95 7.72 43 TR_XM_DKIM_Undo 18092 15.26 38.69 7.60 44 LotsOfNums_01 17910 7.29 6.58 7.52 45 UNPARSEABLE_RELAY 17422 8.78 13.24 7.32 46 HTML_IMAGE_RATIO_04 17164 6.84 5.72 7.21 47 BAYES_00 17060 5.49 0.38 7.17 48 BAYES_999 16450 13.35 33.07 6.91 49 BAYES_80 16298 7.36 8.93 6.85 50 T_TooManySym_01 15732 5.63 2.64 6.61 51 HTML_IMAGE_RATIO_02 15562 7.13 8.93 6.54 52 TooManyTo_001 15560 6.43 6.13 6.54 53 XM_SendGrid 15249 7.16 9.47 6.41 54 LOTS_OF_MONEY 15054 7.55 11.31 6.32 55 TR_XM_UnparsRelay 15004 7.98 13.10 6.30 56 MPART_ALT_DIFF 12852 6.03 7.96 5.40 57 TR_XM_DK_Bayes 12417 4.00 0.27 5.22 58 TR_DCC_Bayes_99 12245 11.76 32.01 5.14 59 TR_XM_DK_Bayes1 12143 3.91 0.26 5.10 60 BOTNET_IPINHOSTNAME 11949 7.48 15.02 5.02 61 XMSexyCombo_05 11736 6.45 11.11 4.93 62 XM_H_Long_From01 11270 5.34 7.19 4.73 63 TR_XM_DK_Bayes2 11128 3.58 0.24 4.67 64 BAYES_95 11076 4.84 5.40 4.65 65 XM_B_SpammyWords3 10571 6.59 13.15 4.44 66 XM_H_Trusted_IP 10080 3.19 0.00 4.23 67 TR_XM_DK_SendGrid 9761 4.31 4.94 4.10 68 TR_XM_SpammyWords4 9497 5.42 9.79 3.99 69 XMNumbers 9386 4.01 4.23 3.94 70 XM_UncommonTLD01 9358 5.95 12.13 3.93 71 RELAYCOUNTRY_META 9255 7.84 19.93 3.89 72 IN_ZIMBRA_NJ_WHITELIST 9168 2.91 0.03 3.85 73 MIME_QP_LONG_LINE 8724 3.40 2.57 3.66 74 MIME_HTML_ONLY_MULTI 8483 3.55 3.49 3.56 75 BAYES_40 8458 3.00 1.32 3.55 76 BAYES_20 8303 2.90 1.09 3.49 77 T_TooManySym_02 7955 2.70 0.74 3.34 78 HTML_IMAGE_RATIO_06 7925 3.24 2.98 3.33 79 XMSubMetaSx_00 7882 4.05 6.32 3.31 80 INVALID_MSGID 7875 2.62 0.51 3.31 81 TM2_M_URI_OPT_OUT 7828 3.46 3.98 3.29 82 FROM_EXCESS_BASE64 7800 3.08 2.47 3.28 83 RCVD_IN_IADB_LISTED 7720 2.84 1.61 3.24 84 T_XMDrugObfuBody_14 7541 3.07 2.78 3.17 85 XM_PDF 7067 2.60 1.49 2.97 86 MAILING_LIST_MULTI 6669 2.53 1.68 2.80 87 RCVD_IN_IADB_SPF 6653 2.46 1.44 2.79 88 T_REMOTE_IMAGE 6573 3.46 5.59 2.76 89 ANY_BOUNCE_MESSAGE 6490 2.18 0.51 2.73 90 BOUNCE_MESSAGE 6489 2.18 0.51 2.73 91 TO_MALFORMED 6267 1.99 0.03 2.63 92 MIME_HTML_MOSTLY 6199 3.25 5.24 2.60 93 TR_XM_PhishingBody 6039 3.40 6.04 2.54 94 RCVD_IN_IADB_SENDERID 5976 2.22 1.35 2.51 95 RCVD_IN_IADB_DK 5836 2.18 1.36 2.45 96 DKIM_INVALID 5724 2.91 4.45 2.40 97 TVD_RCVD_IP 5074 1.66 0.23 2.13 98 TR_XM_SpammyWords2 5043 5.45 15.62 2.12 99 HTML_MIME_NO_HTML_TAG 4971 2.00 1.72 2.09 100 RCVD_IN_IADB_VOUCHED 4787 1.68 0.66 2.01 101 IN_HORDE_ADDRESS_BOOK 4708 1.51 0.08 1.98 102 XM_GoogleGroups 4630 1.64 0.71 1.94 103 XMBdyGiftCard01 4583 2.11 2.70 1.93 104 HTML_IMAGE_RATIO_08 4564 2.22 3.14 1.92 105 XM_B_SpammyTLD 4449 2.60 4.84 1.87 106 URI_NOVOWEL 4380 1.69 1.25 1.84 107 UNTRUSTED_Relay 4231 4.84 14.22 1.78 108 XM_CamelCaseFrm001 4131 1.95 2.60 1.74 109 BAYES_05 4048 1.41 0.51 1.70 110 XMSubNoVowel 3881 1.51 1.14 1.63 111 HTML_FONT_FACE_BAD 3855 1.50 1.12 1.62 112 URI_HEX 3823 1.64 1.74 1.61 113 TR_XM_SB_Phish 3759 1.57 1.53 1.58 114 XMStockSpam_06 3733 1.74 2.25 1.57 115 XM_DK_Undo_01 3674 1.55 1.58 1.54 116 XMSubPhish11 3657 1.51 1.41 1.54 117 TM2_M_VERY_LONG_WORD 3553 1.72 2.41 1.49 118 BOTNET 3501 4.46 13.62 1.47 119 XM_B_Phish66 3390 1.74 2.72 1.42 120 TooManyTo_002 3359 1.22 0.62 1.41 121 TR_XM_SpammyWords5 3264 1.75 2.93 1.37 122 XMGappySubj_01 3239 1.08 0.22 1.36 123 XMBSHREFv2 3172 1.06 0.23 1.33 124 RCVD_IN_IADB_OPTIN 2979 1.09 0.60 1.25 125 TR_Symld_Words 2900 1.28 1.47 1.22 126 T_XMDrugObfuBody_08 2863 1.42 2.09 1.20 127 XM_UB50 2857 1.93 4.18 1.20 128 SUBJ_ALL_CAPS 2832 1.40 2.03 1.19 129 HTML_IMAGE_ONLY_20 2785 1.10 0.90 1.17 130 XMDiploma_00 2711 1.31 1.85 1.14 131 MSGID_NOFQDN1 2608 0.84 0.06 1.10 132 RELAYCOUNTRY_CA 2597 2.43 6.52 1.09 133 URI_TRY_3LD 2584 1.30 1.96 1.09 134 T_TooManySym_03 2577 0.86 0.20 1.08 135 XMBrknScrpt_02 2495 1.19 1.63 1.05 136 XM_SPF_SoftFail 2424 1.80 4.18 1.02 137 KHOP_HELO_FCRDNS 2362 1.83 4.40 0.99 138 XM_H_Long_From02 2313 0.94 0.83 0.97 139 T_XMHurry_00 2283 1.48 3.09 0.96 140 TVD_PH_BODY_ACCOUNTS_PRE 2249 0.75 0.14 0.94 141 TooManyTo_003 2243 0.84 0.53 0.94 142 DKIM_ADSP_CUSTOM_MED 2157 0.90 0.87 0.91 143 XM_B_Unsub2 2041 1.16 2.07 0.86 144 XMHTML_After_End 2033 0.83 0.75 0.85 145 XMBody_95 2030 0.69 0.20 0.85 146 XM_B_COVIDMETA 2006 1.04 1.65 0.84 147 TooManyTo_004 1785 0.68 0.46 0.75 148 XM_OfRef6 1626 1.51 4.03 0.68 149 XM_B_COPY_HTML 1598 0.70 0.80 0.67 150 XM_B_REG_HTML 1574 0.67 0.71 0.66 151 XMLngstWrd_00 1565 0.65 0.62 0.66 152 XMGenDplmaNmb 1563 0.72 0.90 0.66 153 TooManyTo_005 1543 0.59 0.40 0.65 154 TR_MetaPhish_Combo_01 1498 0.62 0.61 0.63 155 RELAYCOUNTRY_GB 1497 0.68 0.85 0.63 156 XMSubMetaI_00 1470 0.74 1.11 0.62 157 XMSubMetaSxObfu_02 1468 0.62 0.64 0.62 158 RDNS_DYNAMIC 1465 0.66 0.78 0.62 159 XMHTMLBadTable_001 1453 0.71 1.03 0.61 160 XMLngstWrd_01 1388 0.57 0.53 0.58 161 XMPhish30 1386 0.73 1.16 0.58 162 HELO_NO_DOMAIN 1376 0.55 0.48 0.58 163 HELO_NODOT 1376 0.55 0.48 0.58 164 XM_H_PHPMailer 1360 0.68 1.01 0.57 165 NML_ADSP_CUSTOM_MED 1329 0.59 0.70 0.56 166 TR_MSPIKEBAYES00 1327 0.42 0.01 0.56 167 XM_ProductURIs 1298 0.55 0.58 0.55 168 USER_IN_WELCOMELIST 1290 0.41 0.00 0.54 169 USER_IN_WHITELIST 1290 0.41 0.00 0.54 170 DATE_IN_PAST_03_06 1255 0.52 0.50 0.53 171 PDS_OTHER_BAD_TLD 1240 1.25 3.47 0.52 172 RCVD_IN_BL_SPAMCOP_NET 1225 2.15 7.15 0.51 173 T_XMDrugObfuBody_00 1206 0.80 1.68 0.51 174 XMCapTrack 1196 0.48 0.40 0.50 175 T_FILL_THIS_FORM_SHORT 1171 0.95 2.35 0.49 176 XMBody_17 1156 0.91 2.19 0.49 177 DIET_1 1146 0.79 1.72 0.48 178 TVD_SPACE_RATIO_MINFP 1141 0.53 0.67 0.48 179 XMLngstWrd_02 1116 0.48 0.50 0.47 180 HTTPS_HTTP_MISMATCH 1104 0.69 1.38 0.46 181 TVD_SPACE_RATIO 1091 0.40 0.22 0.46 182 T_TooManySym_04 1082 0.36 0.06 0.45 183 MPART_ALT_DIFF_COUNT 1081 0.44 0.38 0.45 184 FORGED_GMAIL_RCVD 1064 0.51 0.70 0.45 185 XMNoVowels 1058 0.46 0.50 0.44 186 RELAYCOUNTRY_DE 1014 0.52 0.79 0.43 187 XM_B_SpammyWords4 964 0.86 2.24 0.40 188 URIBL_SBL_A 960 0.91 2.44 0.40 189 SpammyFromTLD_01 947 1.23 3.77 0.40 190 RCVD_IN_MSPIKE_BL 944 1.85 6.29 0.40 191 T_OBFU_PDF_ATTACH 943 0.32 0.08 0.40 192 XMLngstWrd_03 937 0.41 0.45 0.39 193 TR_XM_MSPIKECOMBO 923 1.80 6.11 0.39 194 BASE64_LENGTH_79_INF 909 0.31 0.08 0.38 195 XMBody_78 859 0.44 0.67 0.36 196 XM_ShortIntro_01 829 0.42 0.63 0.35 197 NO_DNS_FOR_FROM 820 0.45 0.77 0.34 198 TR_XM_SpammyWords3 818 1.04 3.17 0.34 199 XM_D_tchamptons_WL 817 0.26 0.00 0.34 200 XMLngstWrd_04 811 0.35 0.38 0.34 ----------------------------------------------------------------------