Email: 269323 Autolearn: 0 AvgScore: 2.83 AvgScanTime: 1.47 sec Spam: 77129 Autolearn: 0 AvgScore: 14.96 AvgScanTime: 1.90 sec Ham: 192194 Autolearn: 0 AvgScore: -2.04 AvgScanTime: 1.30 sec Time Spent Running SA: 110.09 hours Time Spent Processing Spam: 40.65 hours Time Spent Processing Ham: 69.44 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 72968 85.98 94.61 82.52 2 DKIM_SIGNED 62969 75.47 81.64 72.99 3 DCC_CHECK 62865 55.40 81.51 44.92 4 XM_DK_Pass 60024 73.52 77.82 71.79 5 DKIM_VALID 58569 71.87 75.94 70.24 6 XM_B_Unicode 57906 71.50 75.08 70.07 7 RELAYCOUNTRY_US 56547 76.35 73.31 77.57 8 XMListUnsubscribeExists 52790 54.10 68.44 48.34 9 XM_B_SpammyWords 52555 50.21 68.14 43.02 10 DKIM_VALID_AU 44762 57.40 58.04 57.14 11 XM_DK_Undo_02 35321 19.55 45.79 9.02 12 XM_B_Unicode3 32867 43.58 42.61 43.97 13 XM_B_SpammyWords2 28637 24.70 37.13 19.71 14 BAYES_99 28603 16.25 37.08 7.89 15 MIME_HTML_ONLY 28014 26.40 36.32 22.42 16 TR_XM_DKIM_Undo 27834 15.09 36.09 6.67 17 BAYES_50 27348 49.72 35.46 55.45 18 LOC_TINY_FONT_1 26265 28.86 34.05 26.77 19 HTML_FONT_LOW_CONTRAST 25411 30.75 32.95 29.87 20 TR_DCC_Bayes_99 23243 11.89 30.14 4.57 21 BAYES_999 22455 13.04 29.11 6.59 22 DKIM_VALID_EF 22455 28.95 29.11 28.89 23 T_KAM_HTML_FONT_INVALID 22048 19.48 28.59 15.82 24 RCVD_IN_MSPIKE_H2 21653 25.14 28.07 23.96 25 RELAYCOUNTRY_META 19614 10.51 25.43 4.52 26 FVGT_m_MULTI_ODD 19008 23.52 24.64 23.06 27 XM_Body_Dirty_Words 17837 15.31 23.13 12.18 28 XMSubLong 17428 22.79 22.60 22.87 29 RCVD_IN_MSPIKE_WL 17249 29.18 22.36 31.92 30 T_TM2_M_HEADER_IN_MSG 15649 23.89 20.29 25.34 31 DCC_CHECK_NEGATIVE 14211 44.56 18.42 55.05 32 UNTRUSTED_Relay 13417 6.51 17.40 2.14 33 BOTNET 13061 5.95 16.93 1.55 34 FSL_BULK_SIG 12439 11.40 16.13 9.51 35 XM_UncommonTLD01 12369 7.99 16.04 4.76 36 XM_Multi_Part_URI 10609 14.38 13.75 14.63 37 TR_XM_SpammyWords2 10544 5.41 13.67 2.09 38 BOTNET_IPINHOSTNAME 10524 7.95 13.64 5.67 39 XMSexyCombo_05 10284 7.55 13.33 5.23 40 XM_B_SpammyWords3 9827 7.72 12.74 5.70 41 XM_B_Unsub 9818 11.84 12.73 11.49 42 UNPARSEABLE_RELAY 9548 10.00 12.38 9.04 43 TR_XM_UnparsRelay 9320 8.85 12.08 7.55 44 RCVD_IN_MSPIKE_H3 8898 14.93 11.54 16.30 45 LOTS_OF_MONEY 8379 8.49 10.86 7.53 46 RCVD_IN_MSPIKE_H4 7681 12.23 9.96 13.14 47 BAYES_80 7355 6.47 9.54 5.24 48 TR_XM_SpammyWords4 7277 6.18 9.43 4.88 49 RCVD_IN_BL_SPAMCOP_NET 7175 2.97 9.30 0.42 50 MPART_ALT_DIFF 6929 6.14 8.98 5.00 51 HTML_IMAGE_RATIO_02 6894 7.86 8.94 7.43 52 BAYES_60 6751 10.82 8.75 11.64 53 T_REMOTE_IMAGE 6747 4.75 8.75 3.15 54 TooManyTo_001 6716 7.43 8.71 6.92 55 XM_SendGrid 6709 8.25 8.70 8.06 56 SpammyFromTLD_02 6666 2.60 8.64 0.17 57 XM_Evil_Numbers_Gen 5758 8.60 7.47 9.05 58 RCVD_IN_MSPIKE_BL 5587 2.44 7.24 0.51 59 TR_XM_MSPIKECOMBO 5543 2.41 7.19 0.50 60 KHOP_HELO_FCRDNS 5388 3.10 6.99 1.54 61 HTML_MIME_NO_HTML_TAG 5217 3.43 6.76 2.10 62 RCVD_IN_RP_SAFE 5112 8.36 6.63 9.06 63 XMSubMetaSx_00 5086 4.76 6.59 4.03 64 XM_H_Long_From01 4837 5.41 6.27 5.07 65 XM_B_SpammyTLD 4748 3.58 6.16 2.54 66 MIME_HTML_MOSTLY 4736 3.79 6.14 2.84 67 RELAYCOUNTRY_CA 4718 2.64 6.12 1.25 68 HTML_IMAGE_ONLY_08 4697 1.82 6.09 0.10 69 T_HTML_TAG_BALANCE_CENTER 4687 1.88 6.08 0.20 70 TR_XM_PhishingBody 4486 3.66 5.82 2.79 71 RCVD_IN_MSPIKE_L5 4441 1.68 5.76 0.05 72 DKIM_INVALID 4400 3.60 5.70 2.75 73 XM_B_Phish_Phrases 4395 4.04 5.70 3.38 74 LotsOfNums_01 4351 7.73 5.64 8.57 75 XM_UB50 4227 2.50 5.48 1.30 76 TR_XM_SpammyWords3 4223 1.89 5.48 0.45 77 BAYES_95 4196 3.89 5.44 3.27 78 SpammyFromTLD_01 4092 1.88 5.31 0.50 79 XMStrtUSub 4091 5.50 5.30 5.57 80 HTML_IMAGE_RATIO_04 3985 6.68 5.17 7.28 81 RCVD_IN_RP_CERTIFIED 3851 7.27 4.99 8.19 82 XMNumbers 3825 4.30 4.96 4.03 83 TR_XM_DK_SendGrid 3575 4.80 4.64 4.86 84 MIXED_CENTER_CASE 3415 1.27 4.43 0.00 85 MIXED_HREF_CASE 3414 1.27 4.43 0.00 86 PDS_OTHER_BAD_TLD 3284 1.66 4.26 0.62 87 MIXED_IMG_CASE 3267 1.22 4.24 0.00 88 MIXED_FONT_CASE 3263 1.21 4.23 0.00 89 MIXED_AREA_CASE 3256 1.21 4.22 0.00 90 HTML_FONT_SIZE_LARGE 3102 1.27 4.02 0.17 91 BODY_URI_ONLY 3040 1.13 3.94 0.00 92 URI_NOVOWEL 2979 2.33 3.86 1.71 93 XM_DIRTYINTL 2882 1.68 3.74 0.86 94 RCVD_IN_PSBL 2875 1.12 3.73 0.07 95 TR_XM_SpammyWords5 2824 2.00 3.66 1.33 96 XM_SPF_SoftFail 2804 2.29 3.64 1.75 97 XM_UB60 2788 1.31 3.61 0.39 98 HTML_IMAGE_RATIO_08 2771 2.42 3.59 1.95 99 URI_GOOG_STO_SPAMMY 2680 1.00 3.47 0.00 100 MIME_HTML_ONLY_MULTI 2671 3.26 3.46 3.18 101 BOTNET_NORDNS 2542 0.95 3.30 0.01 102 HTML_IMAGE_RATIO_06 2478 3.86 3.21 4.12 103 T_TooManySym_01 2470 6.43 3.20 7.72 104 URIBL_DBL_SPAM 2450 0.92 3.18 0.01 105 TR_XM_SPAMCOP 2448 1.12 3.17 0.29 106 XM_UB99 2412 0.90 3.13 0.01 107 XM_UB80 2398 0.92 3.11 0.04 108 JH_SPAMMY_HEADERS 2351 0.88 3.05 0.01 109 T_XMDrugObfuBody_08 2343 2.14 3.04 1.78 110 TM2_M_URI_OPT_OUT 2331 4.03 3.02 4.43 111 RELAYCOUNTRY_RU 2278 0.86 2.95 0.02 112 DIET_1 2262 1.16 2.93 0.44 113 XM_OfRef6 2145 1.38 2.78 0.82 114 RCVD_IN_RP_RNBL 2126 0.81 2.76 0.03 115 TR_XM_PHPDW 2084 1.04 2.70 0.37 116 HTML_FONT_SIZE_HUGE 1989 0.87 2.58 0.18 117 T_XMDrugObfuBody_14 1982 2.29 2.57 2.18 118 XM_B_Phish66 1946 1.75 2.52 1.44 119 URIBL_DBL_ABUSE_SPAM 1943 0.73 2.52 0.01 120 T_FILL_THIS_FORM_SHORT 1936 1.12 2.51 0.56 121 TR_XM_BayesRelay 1883 0.71 2.44 0.01 122 MIME_QP_LONG_LINE 1847 3.35 2.39 3.74 123 TR_XM_PHPForged 1832 0.90 2.38 0.31 124 TR_XM_FormFill2 1818 0.90 2.36 0.31 125 XM_H_PHPOS 1801 0.88 2.34 0.30 126 XMBody_17 1760 1.09 2.28 0.61 127 XM_CamelCaseFrm001 1720 1.98 2.23 1.88 128 GOOG_STO_IMG_HTML 1675 0.62 2.17 0.00 129 XMBrknScrpt_02 1666 1.64 2.16 1.43 130 TM2_M_VERY_LONG_WORD 1652 1.55 2.14 1.32 131 XMSubMetaI_00 1638 1.32 2.12 1.00 132 URIBL_SBL_A 1633 0.66 2.12 0.07 133 SUBJ_ALL_CAPS 1624 1.32 2.11 1.00 134 RELAYCOUNTRY_FR 1621 1.09 2.10 0.68 135 URI_PHP_REDIR 1612 0.60 2.09 0.00 136 XM_UB999 1609 0.60 2.09 0.00 137 TR_Mismatch_TLD_02 1606 0.63 2.08 0.05 138 T_XMHurry_00 1598 0.95 2.07 0.50 139 XMBdyGiftCard01 1577 1.39 2.04 1.12 140 USER_IN_DEF_DKIM_WL 1551 12.07 2.01 16.11 141 XMSlimDrugH 1532 0.89 1.99 0.44 142 ALL_TRUSTED 1508 13.87 1.96 18.66 143 XM_B_SpammyWords4 1476 0.91 1.91 0.51 144 URI_HEX 1464 1.55 1.90 1.41 145 FROM_EXCESS_BASE64 1457 3.00 1.89 3.44 146 MAILING_LIST_MULTI 1434 2.14 1.86 2.25 147 XM_H_PHPMailer 1419 1.11 1.84 0.81 148 RELAYCOUNTRY_DE 1417 0.82 1.84 0.42 149 XM_Combo_Sbj 1313 0.63 1.70 0.21 150 XMSexyCombo_01 1295 0.91 1.68 0.60 151 TR_XM_MaxBayes 1271 0.47 1.65 0.00 152 IMPOTENCE 1260 0.47 1.63 0.01 153 RCVD_IN_IADB_LISTED 1260 2.82 1.63 3.30 154 XM_UB95 1255 0.48 1.63 0.02 155 TR_LOTS_OF_MONEY3 1238 0.57 1.61 0.16 156 XMDiploma_00 1221 1.45 1.58 1.39 157 MPART_ALT_DIFF_COUNT 1201 0.81 1.56 0.50 158 RELAYCOUNTRY_IN 1176 0.48 1.52 0.07 159 RCVD_IN_IADB_SPF 1169 2.51 1.52 2.91 160 XM_B_Unsub2 1156 1.40 1.50 1.36 161 BAYES_40 1154 3.78 1.50 4.70 162 TR_XM_FormFill 1140 0.43 1.48 0.01 163 RCVD_IN_IADB_SENDERID 1133 2.30 1.47 2.64 164 US_DOLLARS_3 1131 1.16 1.47 1.04 165 XMWghtMeta_00 1130 0.48 1.47 0.09 166 RCVD_IN_IADB_DK 1127 2.26 1.46 2.59 167 TR_XM_SB_Phish 1119 1.75 1.45 1.86 168 FROM_SUSPICIOUS_NTLD 1091 0.46 1.41 0.07 169 XM_URI_RBL 1087 0.52 1.41 0.16 170 XMStockSpam_06 1087 1.72 1.41 1.84 171 RELAYCOUNTRY_NL 1084 0.55 1.41 0.21 172 URI_TRY_3LD 1081 1.04 1.40 0.90 173 XM_B_COVIDMETA 1075 0.92 1.39 0.73 174 FROM_SUSPICIOUS_NTLD_FP 1050 0.44 1.36 0.06 175 TR_XM_INV_DKIM 1041 0.46 1.35 0.10 176 XM_Body_Dirty_Words_01 1039 0.58 1.35 0.28 177 XMPhish30 1034 0.93 1.34 0.76 178 XM_DK_Undo_01 1030 1.42 1.34 1.45 179 NO_DNS_FOR_FROM 1027 0.66 1.33 0.39 180 TR_Mismatch_TLD_01 1022 0.62 1.33 0.34 181 XM_ProductURIs 1019 0.87 1.32 0.68 182 URIBL_BLACK 1016 0.39 1.32 0.02 183 XMSubPhish11 1009 1.69 1.31 1.85 184 TR_XM_MaxWHORU 1003 0.64 1.30 0.37 185 HOSTED_IMG_MULTI_PUB_01 1000 0.38 1.30 0.01 186 RELAYCOUNTRY_GB 971 0.84 1.26 0.67 187 XM_H_Long_From02 969 1.12 1.26 1.06 188 HTTPS_HTTP_MISMATCH 943 0.71 1.22 0.50 189 XMPhish08 943 0.48 1.22 0.19 190 BAYES_20 933 2.45 1.21 2.95 191 RELAYCOUNTRY_AU 931 0.54 1.21 0.28 192 T_XMDrugObfuBody_00 927 0.75 1.20 0.56 193 XM_B_REG_HTML 926 0.84 1.20 0.70 194 SHOPIFY_IMG_NOT_RCVD_SFY 871 0.48 1.13 0.22 195 XM_H_Undi_Recip 871 0.46 1.13 0.19 196 TR_XM_COVIDMETA1 863 0.45 1.12 0.18 197 XM_BadFromFormat 831 0.47 1.08 0.23 198 XM_H_PHPOS_M 814 0.41 1.06 0.15 199 XMGenDplmaNmb 808 0.74 1.05 0.62 200 XM_JunkDunk 801 0.30 1.04 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 158604 85.98 94.61 82.52 2 RELAYCOUNTRY_US 149085 76.35 73.31 77.57 3 DKIM_SIGNED 140287 75.47 81.64 72.99 4 XM_DK_Pass 137982 73.52 77.82 71.79 5 DKIM_VALID 135002 71.87 75.94 70.24 6 XM_B_Unicode 134672 71.50 75.08 70.07 7 DKIM_VALID_AU 109826 57.40 58.04 57.14 8 BAYES_50 106564 49.72 35.46 55.45 9 DCC_CHECK_NEGATIVE 105807 44.56 18.42 55.05 10 XMListUnsubscribeExists 92914 54.10 68.44 48.34 11 DCC_CHECK 86328 55.40 81.51 44.92 12 XM_B_Unicode3 84509 43.58 42.61 43.97 13 XM_B_SpammyWords 82682 50.21 68.14 43.02 14 RCVD_IN_MSPIKE_WL 61345 29.18 22.36 31.92 15 HTML_FONT_LOW_CONTRAST 57402 30.75 32.95 29.87 16 DKIM_VALID_EF 55527 28.95 29.11 28.89 17 LOC_TINY_FONT_1 51459 28.86 34.05 26.77 18 T_TM2_M_HEADER_IN_MSG 48703 23.89 20.29 25.34 19 RCVD_IN_MSPIKE_H2 46058 25.14 28.07 23.96 20 FVGT_m_MULTI_ODD 44329 23.52 24.64 23.06 21 XMSubLong 43956 22.79 22.60 22.87 22 MIME_HTML_ONLY 43085 26.40 36.32 22.42 23 XM_B_SpammyWords2 37878 24.70 37.13 19.71 24 ALL_TRUSTED 35858 13.87 1.96 18.66 25 RCVD_IN_MSPIKE_H3 31325 14.93 11.54 16.30 26 USER_IN_DEF_DKIM_WL 30965 12.07 2.01 16.11 27 T_KAM_HTML_FONT_INVALID 30410 19.48 28.59 15.82 28 XM_Multi_Part_URI 28126 14.38 13.75 14.63 29 RCVD_IN_MSPIKE_H4 25263 12.23 9.96 13.14 30 XM_Body_Dirty_Words 23403 15.31 23.13 12.18 31 BAYES_60 22379 10.82 8.75 11.64 32 XM_B_Unsub 22075 11.84 12.73 11.49 33 XM_DKIMWhitelistDomains 21783 8.09 0.01 11.33 34 FSL_BULK_SIG 18270 11.40 16.13 9.51 35 RCVD_IN_RP_SAFE 17411 8.36 6.63 9.06 36 XM_Evil_Numbers_Gen 17392 8.60 7.47 9.05 37 UNPARSEABLE_RELAY 17382 10.00 12.38 9.04 38 XM_DK_Undo_02 17340 19.55 45.79 9.02 39 LotsOfNums_01 16478 7.73 5.64 8.57 40 RCVD_IN_RP_CERTIFIED 15740 7.27 4.99 8.19 41 XM_SendGrid 15500 8.25 8.70 8.06 42 BAYES_99 15157 16.25 37.08 7.89 43 T_TooManySym_01 14840 6.43 3.20 7.72 44 TR_XM_UnparsRelay 14506 8.85 12.08 7.55 45 LOTS_OF_MONEY 14477 8.49 10.86 7.53 46 HTML_IMAGE_RATIO_02 14286 7.86 8.94 7.43 47 HTML_IMAGE_RATIO_04 13996 6.68 5.17 7.28 48 BAYES_00 13735 5.25 0.53 7.15 49 TooManyTo_001 13301 7.43 8.71 6.92 50 TR_XM_DKIM_Undo 12816 15.09 36.09 6.67 51 BAYES_999 12658 13.04 29.11 6.59 52 XM_B_SpammyWords3 10962 7.72 12.74 5.70 53 BOTNET_IPINHOSTNAME 10889 7.95 13.64 5.67 54 XMStrtUSub 10714 5.50 5.30 5.57 55 BAYES_80 10065 6.47 9.54 5.24 56 XMSexyCombo_05 10055 7.55 13.33 5.23 57 TR_XM_DK_Bayes 9999 3.83 0.42 5.20 58 TR_XM_DK_Bayes1 9819 3.76 0.41 5.11 59 XM_H_Long_From01 9737 5.41 6.27 5.07 60 MPART_ALT_DIFF 9605 6.14 8.98 5.00 61 TR_XM_SpammyWords4 9377 6.18 9.43 4.88 62 TR_XM_DK_SendGrid 9341 4.80 4.64 4.86 63 XM_UncommonTLD01 9154 7.99 16.04 4.76 64 BAYES_40 9036 3.78 1.50 4.70 65 TR_XM_DK_Bayes2 8951 3.42 0.32 4.66 66 TR_DCC_Bayes_99 8786 11.89 30.14 4.57 67 RELAYCOUNTRY_META 8692 10.51 25.43 4.52 68 TM2_M_URI_OPT_OUT 8518 4.03 3.02 4.43 69 IN_ZIMBRA_NJ_WHITELIST 8493 3.17 0.06 4.42 70 XM_H_Trusted_IP 8235 3.06 0.00 4.28 71 T_TooManySym_02 8046 3.26 0.96 4.19 72 HTML_IMAGE_RATIO_06 7916 3.86 3.21 4.12 73 XMNumbers 7754 4.30 4.96 4.03 74 XMSubMetaSx_00 7747 4.76 6.59 4.03 75 ANY_BOUNCE_MESSAGE 7583 3.00 0.63 3.95 76 BOUNCE_MESSAGE 7574 2.99 0.62 3.94 77 INVALID_MSGID 7573 2.92 0.36 3.94 78 MSGID_NOFQDN1 7294 2.72 0.05 3.80 79 MIME_QP_LONG_LINE 7188 3.35 2.39 3.74 80 FROM_EXCESS_BASE64 6615 3.00 1.89 3.44 81 XM_B_Phish_Phrases 6490 4.04 5.70 3.38 82 RCVD_IN_IADB_LISTED 6335 2.82 1.63 3.30 83 TO_MALFORMED 6314 2.35 0.03 3.29 84 BAYES_95 6292 3.89 5.44 3.27 85 MIME_HTML_ONLY_MULTI 6121 3.26 3.46 3.18 86 T_REMOTE_IMAGE 6059 4.75 8.75 3.15 87 TVD_RCVD_IP 6023 2.27 0.12 3.13 88 BAYES_20 5663 2.45 1.21 2.95 89 RCVD_IN_IADB_SPF 5595 2.51 1.52 2.91 90 XM_PDF 5485 2.17 0.46 2.85 91 MIME_HTML_MOSTLY 5466 3.79 6.14 2.84 92 TR_XM_PhishingBody 5365 3.66 5.82 2.79 93 DKIM_INVALID 5285 3.60 5.70 2.75 94 RCVD_IN_IADB_SENDERID 5071 2.30 1.47 2.64 95 RCVD_IN_IADB_DK 4969 2.26 1.46 2.59 96 XM_B_SpammyTLD 4885 3.58 6.16 2.54 97 RCVD_IN_MSPIKE_H5 4757 2.02 0.87 2.48 98 IN_HORDE_ADDRESS_BOOK 4507 1.70 0.09 2.35 99 MAILING_LIST_MULTI 4325 2.14 1.86 2.25 100 T_XMDrugObfuBody_14 4186 2.29 2.57 2.18 101 UNTRUSTED_Relay 4110 6.51 17.40 2.14 102 HTML_MIME_NO_HTML_TAG 4033 3.43 6.76 2.10 103 TR_XM_SpammyWords2 4019 5.41 13.67 2.09 104 HTML_IMAGE_RATIO_08 3755 2.42 3.59 1.95 105 XM_CamelCaseFrm001 3609 1.98 2.23 1.88 106 TR_XM_SB_Phish 3583 1.75 1.45 1.86 107 XMSubNoVowel 3565 1.49 0.58 1.85 108 XMSubPhish11 3555 1.69 1.31 1.85 109 XMStockSpam_06 3537 1.72 1.41 1.84 110 RCVD_IN_IADB_VOUCHED 3513 1.43 0.45 1.83 111 T_XMDrugObfuBody_08 3428 2.14 3.04 1.78 112 XM_SPF_SoftFail 3372 2.29 3.64 1.75 113 BAYES_05 3303 1.37 0.49 1.72 114 URI_NOVOWEL 3292 2.33 3.86 1.71 115 XMBSHREFv2 3222 1.27 0.27 1.68 116 TooManyTo_002 3160 1.46 1.00 1.64 117 XMGappySubj_01 3045 1.16 0.12 1.58 118 BOTNET 2970 5.95 16.93 1.55 119 KHOP_HELO_FCRDNS 2953 3.10 6.99 1.54 120 TR_Symld_Words 2945 1.33 0.84 1.53 121 HTML_IMAGE_ONLY_20 2819 1.33 1.00 1.47 122 XM_DK_Undo_01 2792 1.42 1.34 1.45 123 XM_B_Phish66 2772 1.75 2.52 1.44 124 XMBrknScrpt_02 2755 1.64 2.16 1.43 125 XM_GoogleGroups 2705 1.21 0.71 1.41 126 URI_HEX 2702 1.55 1.90 1.41 127 XMDiploma_00 2675 1.45 1.58 1.39 128 XM_B_Unsub2 2613 1.40 1.50 1.36 129 TR_XM_SpammyWords5 2549 2.00 3.66 1.33 130 TM2_M_VERY_LONG_WORD 2531 1.55 2.14 1.32 131 XM_UB50 2498 2.50 5.48 1.30 132 RELAYCOUNTRY_CA 2404 2.64 6.12 1.25 133 T_TooManySym_03 2384 0.97 0.28 1.24 134 HTML_FONT_FACE_BAD 2266 1.02 0.62 1.18 135 RCVD_IN_IADB_OPTIN 2250 0.95 0.40 1.17 136 TooManyTo_003 2179 1.07 0.91 1.13 137 XMBdyGiftCard01 2156 1.39 2.04 1.12 138 XM_H_Long_From02 2044 1.12 1.26 1.06 139 US_DOLLARS_3 1997 1.16 1.47 1.04 140 DKIM_ADSP_CUSTOM_MED 1963 0.89 0.58 1.02 141 SUBJ_ALL_CAPS 1920 1.32 2.11 1.00 142 XMSubMetaI_00 1914 1.32 2.12 1.00 143 TooManyTo_004 1769 0.90 0.85 0.92 144 URI_TRY_3LD 1722 1.04 1.40 0.90 145 XM_DIRTYINTL 1655 1.68 3.74 0.86 146 XM_B_COPY_HTML 1640 0.85 0.85 0.85 147 XMHTML_After_End 1601 0.82 0.80 0.83 148 XM_OfRef6 1582 1.38 2.78 0.82 149 XMBody_95 1566 0.63 0.19 0.81 150 XM_H_PHPMailer 1562 1.11 1.84 0.81 151 TooManyTo_005 1532 0.79 0.78 0.80 152 XMPhish30 1463 0.93 1.34 0.76 153 XMHTMLBadTable_001 1427 0.80 0.96 0.74 154 XM_B_COVIDMETA 1397 0.92 1.39 0.73 155 TR_MetaPhish_Combo_01 1387 0.69 0.62 0.72 156 XM_B_REG_HTML 1338 0.84 1.20 0.70 157 XM_ProductURIs 1314 0.87 1.32 0.68 158 RELAYCOUNTRY_FR 1313 1.09 2.10 0.68 159 USER_IN_WHITELIST 1312 0.49 0.00 0.68 160 USER_IN_WELCOMELIST 1312 0.49 0.00 0.68 161 XM_shorewaves_Whitelist 1297 0.48 0.00 0.67 162 RDNS_DYNAMIC 1294 0.65 0.60 0.67 163 RELAYCOUNTRY_GB 1290 0.84 1.26 0.67 164 TR_MSPIKEBAYES00 1235 0.46 0.01 0.64 165 HELO_NODOT 1214 0.62 0.58 0.63 166 HELO_NO_DOMAIN 1214 0.62 0.58 0.63 167 NML_ADSP_CUSTOM_MED 1202 0.59 0.49 0.63 168 PDS_OTHER_BAD_TLD 1197 1.66 4.26 0.62 169 XMLngstWrd_00 1185 0.66 0.77 0.62 170 XMGenDplmaNmb 1182 0.74 1.05 0.62 171 XMBody_17 1171 1.09 2.28 0.61 172 XMNoVowels 1156 0.60 0.58 0.60 173 XMSexyCombo_01 1148 0.91 1.68 0.60 174 MISSING_HEADERS 1147 0.60 0.59 0.60 175 TVD_SPACE_RATIO 1144 0.68 0.88 0.60 176 XMSubMetaSxObfu_02 1120 0.51 0.32 0.58 177 T_XMDrugObfuBody_00 1080 0.75 1.20 0.56 178 T_FILL_THIS_FORM_SHORT 1073 1.12 2.51 0.56 179 XMLngstWrd_01 1059 0.60 0.71 0.55 180 XMBounce_01 1048 0.41 0.09 0.55 181 T_TooManySym_04 1031 0.41 0.09 0.54 182 DKIM_ADSP_NXDOMAIN 990 0.60 0.80 0.52 183 XM_B_SpammyWords4 987 0.91 1.91 0.51 184 XMCapTrack 983 0.45 0.29 0.51 185 RCVD_IN_MSPIKE_BL 980 2.44 7.24 0.51 186 MPART_ALT_DIFF_COUNT 969 0.81 1.56 0.50 187 HTTPS_HTTP_MISMATCH 966 0.71 1.22 0.50 188 SpammyFromTLD_01 964 1.88 5.31 0.50 189 TR_XM_MSPIKECOMBO 960 2.41 7.19 0.50 190 T_XMHurry_00 955 0.95 2.07 0.50 191 TVD_SPACE_RATIO_MINFP 910 0.61 0.95 0.47 192 FORGED_GMAIL_RCVD 890 0.47 0.47 0.46 193 TR_XM_SpammyWords3 872 1.89 5.48 0.45 194 XMLngstWrd_02 857 0.50 0.63 0.45 195 DIET_1 854 1.16 2.93 0.44 196 XMSlimDrugH 854 0.89 1.99 0.44 197 PLING_QUERY 850 0.53 0.75 0.44 198 T_MONEY_PERCENT 849 0.45 0.47 0.44 199 TR_LOTS_OF_MONEY2 849 0.45 0.47 0.44 200 MY_SERVERS_FOUND 833 0.38 0.23 0.43 ----------------------------------------------------------------------