Email: 317566 Autolearn: 0 AvgScore: 2.67 AvgScanTime: 1.22 sec Spam: 74644 Autolearn: 0 AvgScore: 13.35 AvgScanTime: 1.54 sec Ham: 242922 Autolearn: 0 AvgScore: -0.61 AvgScanTime: 1.12 sec Time Spent Running SA: 107.38 hours Time Spent Processing Spam: 31.88 hours Time Spent Processing Ham: 75.50 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 70372 78.41 94.28 73.53 2 DKIM_SIGNED 64683 75.70 86.66 72.33 3 XM_DK_Pass 62784 72.53 84.11 68.98 4 XM_B_Unicode 61489 70.94 82.38 67.42 5 DKIM_VALID 61244 70.17 82.05 66.52 6 RELAYCOUNTRY_US 60578 72.26 81.16 69.53 7 DCC_CHECK 57356 48.47 76.84 39.75 8 XMListUnsubscribeExists 52999 49.96 71.00 43.49 9 XM_B_SpammyWords 52705 46.63 70.61 39.26 10 DKIM_VALID_AU 44424 54.91 59.51 53.50 11 XM_B_Unicode3 35416 40.32 47.45 38.13 12 XM_DK_Undo_02 34142 16.97 45.74 8.12 13 XM_B_SpammyWords2 30158 22.61 40.40 17.14 14 BAYES_50 29068 48.26 38.94 51.13 15 TR_XM_DKIM_Undo 27874 13.22 37.34 5.81 16 HTML_FONT_LOW_CONTRAST 26605 28.33 35.64 26.08 17 LOC_TINY_FONT_1 25671 26.65 34.39 24.27 18 BAYES_99 25500 13.55 34.16 7.22 19 MIME_HTML_ONLY 25376 23.85 34.00 20.74 20 DKIM_VALID_EF 24455 26.67 32.76 24.80 21 RCVD_IN_MSPIKE_H2 22382 23.80 29.98 21.89 22 BAYES_999 19747 10.90 26.45 6.13 23 TR_DCC_Bayes_99 19265 8.81 25.81 3.59 24 FVGT_m_MULTI_ODD 18852 21.36 25.26 20.16 25 T_KAM_HTML_FONT_INVALID 18790 17.44 25.17 15.07 26 T_TM2_M_HEADER_IN_MSG 17618 26.97 23.60 28.01 27 XM_Body_Dirty_Words 17509 18.88 23.46 17.47 28 DCC_CHECK_NEGATIVE 17265 51.51 23.13 60.23 29 XMSubLong 16619 19.60 22.26 18.79 30 RCVD_IN_MSPIKE_WL 16564 25.72 22.19 26.81 31 RELAYCOUNTRY_META 14903 11.89 19.97 9.41 32 XM_Multi_Part_URI 12506 12.43 16.75 11.10 33 LOTS_OF_MONEY 11415 9.50 15.29 7.72 34 BOTNET_IPINHOSTNAME 10618 7.08 14.22 4.88 35 UNPARSEABLE_RELAY 10426 9.52 13.97 8.15 36 TR_XM_SpammyWords2 10394 4.54 13.92 1.66 37 HTML_IMAGE_RATIO_02 10197 8.73 13.66 7.22 38 TR_XM_SpammyRelay 10124 4.36 13.56 1.53 39 XM_B_Unsub 10054 11.68 13.47 11.14 40 TR_XM_UnparsRelay 9972 8.04 13.36 6.40 41 BOTNET 9852 4.11 13.20 1.32 42 TR_XM_SpammyWords4 9573 6.64 12.82 4.74 43 FSL_BULK_SIG 9329 9.89 12.50 9.08 44 XM_B_SpammyWords3 9182 5.87 12.30 3.89 45 XMSexyCombo_05 8877 11.01 11.89 10.74 46 RCVD_IN_MSPIKE_H3 8607 13.24 11.53 13.77 47 UNTRUSTED_Relay 7411 7.99 9.93 7.39 48 XM_SendGrid 7339 7.78 9.83 7.15 49 RCVD_IN_MSPIKE_H4 7197 10.32 9.64 10.52 50 XM_UncommonTLD01 7044 5.14 9.44 3.82 51 RCVD_IN_BL_SPAMCOP_NET 6929 2.83 9.28 0.84 52 XM_Evil_Numbers_Gen 6235 8.58 8.35 8.64 53 BAYES_80 6200 5.02 8.31 4.01 54 TooManyTo_001 5370 6.52 7.19 6.31 55 RELAYCOUNTRY_CA 5343 2.53 7.16 1.11 56 BAYES_60 5008 9.90 6.71 10.88 57 RCVD_IN_MSPIKE_BL 4954 1.90 6.64 0.44 58 TR_XM_MSPIKECOMBO 4918 1.88 6.59 0.43 59 XMSubMetaSx_00 4848 5.06 6.49 4.61 60 LotsOfNums_01 4741 7.82 6.35 8.28 61 MPART_ALT_DIFF 4575 4.50 6.13 4.00 62 RCVD_IN_RP_SAFE 4546 7.66 6.09 8.15 63 XM_B_SpammyTLD 4472 2.67 5.99 1.64 64 XM_B_Phish_Phrases 4415 4.29 5.91 3.79 65 XM_H_Long_From01 4297 4.61 5.76 4.26 66 TR_XM_PhishingBody 4154 3.02 5.57 2.24 67 TR_XM_DK_SendGrid 4125 4.90 5.53 4.71 68 XM_UB50 3961 5.73 5.31 5.86 69 TR_XM_SPAMCOP 3941 1.43 5.28 0.25 70 T_REMOTE_IMAGE 3790 3.51 5.08 3.03 71 RCVD_IN_RP_CERTIFIED 3745 6.60 5.02 7.08 72 XM_OfRef6 3654 1.89 4.90 0.97 73 XMNumbers 3577 3.75 4.79 3.43 74 HTML_IMAGE_RATIO_04 3536 4.98 4.74 5.06 75 DKIM_INVALID 3439 5.53 4.61 5.81 76 BAYES_95 3340 3.02 4.47 2.57 77 TR_XM_SpammyWords5 3245 1.97 4.35 1.24 78 RCVD_IN_PSBL 3195 1.01 4.28 0.01 79 TR_XM_SpammyWords3 3042 1.22 4.08 0.34 80 SpammyFromTLD_02 3020 1.12 4.05 0.22 81 SUBJ_ALL_CAPS 3012 1.87 4.04 1.20 82 T_XMDrugObfuBody_14 2923 2.81 3.92 2.47 83 XM_SPF_SoftFail 2853 1.74 3.82 1.10 84 TM2_M_URI_OPT_OUT 2827 7.84 3.79 9.09 85 PDS_OTHER_BAD_TLD 2746 1.20 3.68 0.44 86 MIME_HTML_MOSTLY 2722 2.28 3.65 1.86 87 XM_B_Investor 2667 1.62 3.57 1.02 88 MIME_HTML_ONLY_MULTI 2653 2.78 3.55 2.54 89 XMStrtUSub 2542 4.67 3.41 5.06 90 T_TooManySym_01 2509 5.26 3.36 5.84 91 URIBL_DBL_SPAM 2408 0.76 3.23 0.00 92 HTML_IMAGE_RATIO_06 2395 2.99 3.21 2.92 93 FROM_SUSPICIOUS_NTLD 2204 0.80 2.95 0.14 94 T_XMDrugObfuBody_08 2197 1.64 2.94 1.24 95 FROM_SUSPICIOUS_NTLD_FP 2158 0.78 2.89 0.14 96 FROM_EXCESS_BASE64 2150 3.15 2.88 3.23 97 XM_DIRTYINTL 2042 5.57 2.74 6.44 98 RCVD_IN_MSPIKE_L4 2017 0.79 2.70 0.20 99 HTML_IMAGE_ONLY_28 1966 0.80 2.63 0.24 100 HTML_IMAGE_RATIO_08 1958 2.23 2.62 2.12 101 BAYES_00 1955 8.10 2.62 9.79 102 XM_B_Phish66 1950 1.45 2.61 1.09 103 USER_IN_DEF_DKIM_WL 1901 12.08 2.55 15.01 104 XMBody_17 1891 1.00 2.53 0.52 105 XMSexyCombo_01 1885 1.38 2.53 1.03 106 SpammyFromTLD_01 1861 0.88 2.49 0.38 107 T_XMDrugObfuBody_00 1861 1.32 2.49 0.95 108 XM_CamelCaseFrm001 1839 1.92 2.46 1.75 109 TR_XM_PHPDW 1836 0.78 2.46 0.27 110 XMNoVowels 1829 1.85 2.45 1.66 111 MIME_QP_LONG_LINE 1773 3.67 2.38 4.07 112 RCVD_IN_MSPIKE_L5 1755 0.58 2.35 0.04 113 XMDiploma_00 1739 1.42 2.33 1.14 114 TR_XM_PHPForged 1733 0.71 2.32 0.22 115 KHOP_HELO_FCRDNS 1721 1.27 2.31 0.95 116 TR_XM_FormFill2 1714 0.71 2.30 0.22 117 HTML_IMAGE_ONLY_20 1708 1.51 2.29 1.27 118 XM_H_PHPOS 1703 0.69 2.28 0.21 119 TR_XM_DK_Bayes 1699 5.83 2.28 6.92 120 TR_XM_DK_Bayes1 1688 5.72 2.26 6.78 121 XM_DrugUnitList 1672 0.53 2.24 0.00 122 EBAY_IMG_NOT_RCVD_EBAY 1664 0.52 2.23 0.00 123 HOSTED_IMG_DIRECT_MX 1653 0.52 2.21 0.00 124 RCVD_IN_IADB_LISTED 1647 3.55 2.21 3.96 125 MAILING_LIST_MULTI 1632 2.02 2.19 1.97 126 XM_B_Unsub2 1595 1.45 2.14 1.24 127 TR_XM_DK_Bayes2 1591 5.16 2.13 6.09 128 TR_XM_NoHeaderRelay 1587 0.60 2.13 0.14 129 URI_NOVOWEL 1579 2.21 2.12 2.24 130 TR_XM_BayesRelay 1544 0.49 2.07 0.00 131 BAYES_40 1529 3.85 2.05 4.41 132 T_FILL_THIS_FORM_SHORT 1506 1.15 2.02 0.88 133 TM2_M_VERY_LONG_WORD 1495 1.37 2.00 1.17 134 BOTNET_NORDNS 1464 0.47 1.96 0.01 135 XMBrknScrpt_02 1456 1.03 1.95 0.75 136 TR_XM_SB_Phish 1427 1.78 1.91 1.74 137 RELAYCOUNTRY_CH 1407 0.47 1.88 0.04 138 URI_HEX 1398 1.33 1.87 1.16 139 RCVD_IN_IADB_SPF 1390 3.06 1.86 3.43 140 XM_B_SpammyWords4 1385 0.76 1.86 0.42 141 XMSubPhish11 1363 1.75 1.83 1.72 142 XM_DK_Undo_01 1353 1.52 1.81 1.43 143 HTML_SHORT_LINK_IMG_3 1331 0.53 1.78 0.14 144 XM_H_TOP 1327 0.48 1.78 0.08 145 DATE_IN_PAST_03_06 1305 0.80 1.75 0.51 146 BAYES_20 1294 6.64 1.73 8.15 147 RCVD_IN_IADB_SENDERID 1269 2.75 1.70 3.07 148 RCVD_IN_IADB_DK 1267 2.68 1.70 2.99 149 XMBdyGiftCard01 1210 1.10 1.62 0.93 150 XM_Body_Dirty_Words_01 1166 0.61 1.56 0.31 151 TR_Mismatch_TLD_02 1154 0.42 1.55 0.07 152 ALL_TRUSTED 1148 16.97 1.54 21.71 153 XM_UB99 1147 0.36 1.54 0.00 154 RCVD_IN_MSPIKE_L3 1146 0.51 1.54 0.19 155 TR_XM_INV_DKIM 1139 0.70 1.53 0.44 156 DATE_IN_PAST_06_12 1135 0.42 1.52 0.09 157 T_XMHurry_00 1121 0.67 1.50 0.42 158 XMStockSpam_06 1092 1.35 1.46 1.31 159 XM_URI_RBL 1080 0.44 1.45 0.13 160 HTML_MIME_NO_HTML_TAG 1073 1.76 1.44 1.86 161 URIBL_BLACK 1058 0.34 1.42 0.01 162 TR_LOTS_OF_MONEY3 1043 0.47 1.40 0.19 163 XM_OfRef7 1037 0.42 1.39 0.12 164 DIET_1 1023 0.67 1.37 0.46 165 XM_B_COVIDMETA 1012 1.11 1.36 1.03 166 XMHTMLBadTable_001 976 0.90 1.31 0.78 167 HK_RANDOM_REPLYTO 976 0.84 1.31 0.70 168 TR_Symld_Words 966 1.61 1.29 1.71 169 XM_ProductURIs 961 0.73 1.29 0.56 170 TR_Caps_n_Bayes_99 912 0.42 1.22 0.18 171 XM_H_PHPMailer 901 0.64 1.21 0.46 172 TR_Mismatch_TLD_01 899 0.50 1.20 0.29 173 XMPhish30 895 0.81 1.20 0.69 174 XMSexyCombo_04 892 0.87 1.20 0.77 175 URIBL_SBL_A 871 0.33 1.17 0.07 176 DKIM_ADSP_CUSTOM_MED 863 0.85 1.16 0.76 177 XMPhish08 860 0.39 1.15 0.16 178 XM_UB999 859 0.27 1.15 0.00 179 RCVD_IN_IADB_VOUCHED 852 2.13 1.14 2.43 180 XMGenDplmaNmb 834 0.66 1.12 0.52 181 TR_XM_FormFill 829 0.38 1.11 0.16 182 URI_TRY_3LD 828 0.98 1.11 0.94 183 TR_XM_COVIDMETA1 823 0.35 1.10 0.12 184 RELAYCOUNTRY_NL 811 0.34 1.09 0.11 185 XM_H_Undi_Recip 793 0.38 1.06 0.16 186 TM2_M_A_HREF_HREF 778 0.55 1.04 0.40 187 HTML_TAG_BALANCE_BODY 767 0.89 1.03 0.85 188 XM_B_REG_HTML 763 0.73 1.02 0.64 189 FORGED_GMAIL_RCVD 763 0.56 1.02 0.42 190 RCVD_IN_MSPIKE_H5 760 2.16 1.02 2.52 191 SHOPIFY_IMG_NOT_RCVD_SFY 755 0.35 1.01 0.14 192 XM_UB60 753 1.16 1.01 1.20 193 HELO_NODOT 753 0.64 1.01 0.53 194 HELO_NO_DOMAIN 753 0.64 1.01 0.53 195 TR_XM_MaxBayes 747 0.24 1.00 0.00 196 TR_XM_COVIDMETA4 740 0.52 0.99 0.38 197 BAYES_05 739 1.64 0.99 1.84 198 NML_ADSP_CUSTOM_MED 735 0.58 0.98 0.45 199 XM_GoogleGroups 729 1.10 0.98 1.14 200 NUMERIC_HTTP_ADDR 720 0.39 0.96 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 178618 78.41 94.28 73.53 2 DKIM_SIGNED 175699 75.70 86.66 72.33 3 RELAYCOUNTRY_US 168907 72.26 81.16 69.53 4 XM_DK_Pass 167562 72.53 84.11 68.98 5 XM_B_Unicode 163778 70.94 82.38 67.42 6 DKIM_VALID 161580 70.17 82.05 66.52 7 DCC_CHECK_NEGATIVE 146315 51.51 23.13 60.23 8 DKIM_VALID_AU 129961 54.91 59.51 53.50 9 BAYES_50 124200 48.26 38.94 51.13 10 XMListUnsubscribeExists 105654 49.96 71.00 43.49 11 DCC_CHECK 96563 48.47 76.84 39.75 12 XM_B_SpammyWords 95365 46.63 70.61 39.26 13 XM_B_Unicode3 92632 40.32 47.45 38.13 14 T_TM2_M_HEADER_IN_MSG 68038 26.97 23.60 28.01 15 RCVD_IN_MSPIKE_WL 65126 25.72 22.19 26.81 16 HTML_FONT_LOW_CONTRAST 63347 28.33 35.64 26.08 17 DKIM_VALID_EF 60235 26.67 32.76 24.80 18 LOC_TINY_FONT_1 58963 26.65 34.39 24.27 19 RCVD_IN_MSPIKE_H2 53184 23.80 29.98 21.89 20 ALL_TRUSTED 52738 16.97 1.54 21.71 21 MIME_HTML_ONLY 50375 23.85 34.00 20.74 22 FVGT_m_MULTI_ODD 48975 21.36 25.26 20.16 23 XMSubLong 45635 19.60 22.26 18.79 24 XM_Body_Dirty_Words 42450 18.88 23.46 17.47 25 XM_B_SpammyWords2 41629 22.61 40.40 17.14 26 T_KAM_HTML_FONT_INVALID 36605 17.44 25.17 15.07 27 USER_IN_DEF_DKIM_WL 36451 12.08 2.55 15.01 28 ANY_BOUNCE_MESSAGE 35490 11.30 0.54 14.61 29 BOUNCE_MESSAGE 35482 11.30 0.54 14.61 30 RCVD_IN_MSPIKE_H3 33451 13.24 11.53 13.77 31 XM_B_Unsub 27052 11.68 13.47 11.14 32 XM_Multi_Part_URI 26956 12.43 16.75 11.10 33 BAYES_60 26428 9.90 6.71 10.88 34 XMSexyCombo_05 26091 11.01 11.89 10.74 35 RCVD_IN_MSPIKE_H4 25562 10.32 9.64 10.52 36 XM_DKIMWhitelistDomains 24639 7.78 0.08 10.14 37 BAYES_00 23780 8.10 2.62 9.79 38 RELAYCOUNTRY_META 22868 11.89 19.97 9.41 39 TM2_M_URI_OPT_OUT 22070 7.84 3.79 9.09 40 FSL_BULK_SIG 22067 9.89 12.50 9.08 41 XM_Evil_Numbers_Gen 20999 8.58 8.35 8.64 42 LotsOfNums_01 20107 7.82 6.35 8.28 43 BAYES_20 19804 6.64 1.73 8.15 44 UNPARSEABLE_RELAY 19798 9.52 13.97 8.15 45 RCVD_IN_RP_SAFE 19786 7.66 6.09 8.15 46 XM_DK_Undo_02 19736 16.97 45.74 8.12 47 LOTS_OF_MONEY 18762 9.50 15.29 7.72 48 UNTRUSTED_Relay 17947 7.99 9.93 7.39 49 HTML_IMAGE_RATIO_02 17541 8.73 13.66 7.22 50 BAYES_99 17536 13.55 34.16 7.22 51 XM_SendGrid 17376 7.78 9.83 7.15 52 RCVD_IN_RP_CERTIFIED 17206 6.60 5.02 7.08 53 TR_XM_DK_Bayes 16807 5.83 2.28 6.92 54 TR_XM_DK_Bayes1 16461 5.72 2.26 6.78 55 XM_DIRTYINTL 15653 5.57 2.74 6.44 56 TR_XM_UnparsRelay 15559 8.04 13.36 6.40 57 TooManyTo_001 15329 6.52 7.19 6.31 58 RELAYCOUNTRY_FR 15152 4.98 0.88 6.24 59 BAYES_999 14879 10.90 26.45 6.13 60 XMBounce_01 14803 4.68 0.07 6.09 61 TR_XM_DK_Bayes2 14793 5.16 2.13 6.09 62 XM_UB50 14232 5.73 5.31 5.86 63 T_TooManySym_01 14189 5.26 3.36 5.84 64 TR_XM_DKIM_Undo 14120 13.22 37.34 5.81 65 DKIM_INVALID 14119 5.53 4.61 5.81 66 XMStrtUSub 12289 4.67 3.41 5.06 67 HTML_IMAGE_RATIO_04 12281 4.98 4.74 5.06 68 BOTNET_IPINHOSTNAME 11860 7.08 14.22 4.88 69 TR_XM_SpammyWords4 11515 6.64 12.82 4.74 70 TR_XM_DK_SendGrid 11433 4.90 5.53 4.71 71 XMSubMetaSx_00 11207 5.06 6.49 4.61 72 BAYES_40 10703 3.85 2.05 4.41 73 XM_H_Long_From01 10348 4.61 5.76 4.26 74 MIME_QP_LONG_LINE 9880 3.67 2.38 4.07 75 BAYES_80 9751 5.02 8.31 4.01 76 MPART_ALT_DIFF 9712 4.50 6.13 4.00 77 RCVD_IN_IADB_LISTED 9612 3.55 2.21 3.96 78 XM_B_SpammyWords3 9457 5.87 12.30 3.89 79 XM_UncommonTLD01 9276 5.14 9.44 3.82 80 XM_B_Phish_Phrases 9198 4.29 5.91 3.79 81 TR_DCC_Bayes_99 8712 8.81 25.81 3.59 82 INVALID_MSGID 8465 2.72 0.24 3.48 83 RCVD_IN_IADB_SPF 8334 3.06 1.86 3.43 84 XMNumbers 8331 3.75 4.79 3.43 85 XM_H_Trusted_IP 7991 2.52 0.00 3.29 86 T_TooManySym_02 7858 2.60 0.55 3.23 87 FROM_EXCESS_BASE64 7850 3.15 2.88 3.23 88 MSGID_NOFQDN1 7692 2.44 0.06 3.17 89 RCVD_IN_IADB_SENDERID 7468 2.75 1.70 3.07 90 T_REMOTE_IMAGE 7360 3.51 5.08 3.03 91 RCVD_IN_IADB_DK 7254 2.68 1.70 2.99 92 HTML_IMAGE_RATIO_06 7101 2.99 3.21 2.92 93 TO_MALFORMED 6316 2.00 0.03 2.60 94 BAYES_95 6246 3.02 4.47 2.57 95 MIME_HTML_ONLY_MULTI 6160 2.78 3.55 2.54 96 RCVD_IN_MSPIKE_H5 6113 2.16 1.02 2.52 97 T_XMDrugObfuBody_14 5996 2.81 3.92 2.47 98 RCVD_IN_IADB_VOUCHED 5897 2.13 1.14 2.43 99 XM_PDF 5821 1.94 0.44 2.40 100 URI_NOVOWEL 5442 2.21 2.12 2.24 101 TR_XM_PhishingBody 5438 3.02 5.57 2.24 102 HTML_IMAGE_RATIO_08 5138 2.23 2.62 2.12 103 TVD_RCVD_IP 4864 1.56 0.11 2.00 104 MAILING_LIST_MULTI 4789 2.02 2.19 1.97 105 IN_HORDE_ADDRESS_BOOK 4710 1.51 0.12 1.94 106 HTML_MIME_NO_HTML_TAG 4516 1.76 1.44 1.86 107 MIME_HTML_MOSTLY 4510 2.28 3.65 1.86 108 BAYES_05 4463 1.64 0.99 1.84 109 XM_CamelCaseFrm001 4245 1.92 2.46 1.75 110 TR_XM_SB_Phish 4226 1.78 1.91 1.74 111 XMSubPhish11 4181 1.75 1.83 1.72 112 TR_Symld_Words 4155 1.61 1.29 1.71 113 XMNoVowels 4041 1.85 2.45 1.66 114 TR_XM_SpammyWords2 4032 4.54 13.92 1.66 115 XM_B_SpammyTLD 3992 2.67 5.99 1.64 116 TR_XM_SpammyRelay 3714 4.36 13.56 1.53 117 RCVD_IN_IADB_OPTIN 3704 1.37 0.85 1.52 118 HELO_MISC_IP 3462 1.15 0.27 1.43 119 XM_DK_Undo_01 3462 1.52 1.81 1.43 120 XMSubNoVowel 3447 1.29 0.88 1.42 121 BOTNET 3210 4.11 13.20 1.32 122 XMStockSpam_06 3194 1.35 1.46 1.31 123 TooManyTo_002 3180 1.20 0.84 1.31 124 XMGappySubj_01 3111 1.03 0.20 1.28 125 HTML_IMAGE_ONLY_20 3081 1.51 2.29 1.27 126 XMBSHREFv2 3056 1.03 0.27 1.26 127 XM_B_Unsub2 3021 1.45 2.14 1.24 128 TR_XM_SpammyWords5 3015 1.97 4.35 1.24 129 T_XMDrugObfuBody_08 3008 1.64 2.94 1.24 130 XM_UB60 2917 1.16 1.01 1.20 131 SUBJ_ALL_CAPS 2917 1.87 4.04 1.20 132 TM2_M_VERY_LONG_WORD 2852 1.37 2.00 1.17 133 URI_HEX 2824 1.33 1.87 1.16 134 XMDiploma_00 2776 1.42 2.33 1.14 135 XM_GoogleGroups 2768 1.10 0.98 1.14 136 RELAYCOUNTRY_CA 2702 2.53 7.16 1.11 137 XM_SPF_SoftFail 2660 1.74 3.82 1.10 138 XM_B_Phish66 2643 1.45 2.61 1.09 139 XM_B_COVIDMETA 2498 1.11 1.36 1.03 140 XMSexyCombo_01 2495 1.38 2.53 1.03 141 XM_B_Investor 2471 1.62 3.57 1.02 142 XM_OfRef6 2356 1.89 4.90 0.97 143 T_XMDrugObfuBody_00 2317 1.32 2.49 0.95 144 KHOP_HELO_FCRDNS 2307 1.27 2.31 0.95 145 URI_TRY_3LD 2294 0.98 1.11 0.94 146 XMBdyGiftCard01 2270 1.10 1.62 0.93 147 T_TooManySym_03 2233 0.76 0.23 0.92 148 TR_MetaPhish_Combo_01 2221 0.89 0.82 0.91 149 TooManyTo_003 2204 0.85 0.65 0.91 150 T_FILL_THIS_FORM_SHORT 2144 1.15 2.02 0.88 151 HTML_FONT_FACE_BAD 2138 0.86 0.79 0.88 152 XM_D_tchamptons_WL 2110 0.67 0.01 0.87 153 XM_RXBody 2078 0.87 0.90 0.86 154 XMBody_95 2074 0.70 0.20 0.85 155 HTML_TAG_BALANCE_BODY 2060 0.89 1.03 0.85 156 RCVD_IN_BL_SPAMCOP_NET 2046 2.83 9.28 0.84 157 XMSubMetaSxObfu_03 1993 0.83 0.87 0.82 158 XM_H_Long_From02 1947 0.83 0.91 0.80 159 XMHTMLBadTable_001 1889 0.90 1.31 0.78 160 XMSexyCombo_04 1866 0.87 1.20 0.77 161 DKIM_ADSP_CUSTOM_MED 1842 0.85 1.16 0.76 162 XMBrknScrpt_02 1822 1.03 1.95 0.75 163 PLING_QUERY 1710 0.76 0.94 0.70 164 HK_RANDOM_REPLYTO 1699 0.84 1.31 0.70 165 XM_B_COPY_HTML 1689 0.71 0.75 0.70 166 XMLngstWrd_00 1689 0.61 0.32 0.70 167 XMPhish30 1682 0.81 1.20 0.69 168 XM_B_REG_HTML 1565 0.73 1.02 0.64 169 TooManyTo_004 1562 0.62 0.53 0.64 170 IN_ZIMBRA_NJ_WHITELIST 1523 0.48 0.01 0.63 171 TR_MSPIKEBAYES00 1523 0.49 0.03 0.63 172 XMLngstWrd_01 1513 0.54 0.27 0.62 173 USER_IN_WHITELIST 1494 0.47 0.00 0.62 174 USER_IN_WELCOMELIST 1494 0.47 0.00 0.62 175 RELAYCOUNTRY_DE 1361 0.61 0.79 0.56 176 RDNS_DYNAMIC 1360 0.59 0.70 0.56 177 XM_ProductURIs 1350 0.73 1.29 0.56 178 TooManyTo_005 1346 0.54 0.48 0.55 179 MPART_ALT_DIFF_COUNT 1330 0.62 0.84 0.55 180 XMHTML_After_End 1294 0.62 0.89 0.53 181 HELO_NO_DOMAIN 1288 0.64 1.01 0.53 182 HELO_NODOT 1288 0.64 1.01 0.53 183 XMBody_17 1272 1.00 2.53 0.52 184 XMGenDplmaNmb 1267 0.66 1.12 0.52 185 XMLngstWrd_02 1266 0.45 0.23 0.52 186 DATE_IN_PAST_03_06 1247 0.80 1.75 0.51 187 RELAYCOUNTRY_GB 1231 0.57 0.79 0.51 188 HTTPS_HTTP_MISMATCH 1165 0.58 0.89 0.48 189 XMCapTrack 1152 0.55 0.80 0.47 190 XM_H_PHPMailer 1119 0.64 1.21 0.46 191 TVD_SPACE_RATIO 1117 0.39 0.15 0.46 192 DIET_1 1107 0.67 1.37 0.46 193 NML_ADSP_CUSTOM_MED 1099 0.58 0.98 0.45 194 TVD_SPACE_RATIO_MINFP 1089 0.37 0.10 0.45 195 XMSubMetaSSx_00 1080 0.44 0.43 0.44 196 RCVD_IN_MSPIKE_BL 1077 1.90 6.64 0.44 197 TR_XM_INV_DKIM 1074 0.70 1.53 0.44 198 PDS_OTHER_BAD_TLD 1072 1.20 3.68 0.44 199 TR_XM_MSPIKECOMBO 1050 1.88 6.59 0.43 200 XMSubMetaSxObfu_02 1043 0.40 0.29 0.43 ----------------------------------------------------------------------