Email: 298427 Autolearn: 0 AvgScore: 3.12 AvgScanTime: 1.25 sec Spam: 74785 Autolearn: 0 AvgScore: 12.94 AvgScanTime: 1.48 sec Ham: 223642 Autolearn: 0 AvgScore: -0.16 AvgScanTime: 1.17 sec Time Spent Running SA: 103.23 hours Time Spent Processing Spam: 30.81 hours Time Spent Processing Ham: 72.42 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 65672 83.21 87.81 81.68 2 DKIM_SIGNED 60080 68.39 80.34 64.39 3 XM_DK_Pass 58397 66.99 78.09 63.28 4 XM_B_Unicode 58206 72.95 77.83 71.32 5 DKIM_VALID 56863 65.47 76.04 61.93 6 RELAYCOUNTRY_US 55359 69.51 74.02 68.00 7 DCC_CHECK 53500 48.07 71.54 40.22 8 XM_B_SpammyWords 51089 46.24 68.31 38.85 9 XMListUnsubscribeExists 49976 49.06 66.83 43.11 10 DKIM_VALID_AU 43246 52.17 57.83 50.28 11 XM_B_Unicode3 34657 46.37 46.34 46.37 12 BAYES_50 32940 50.41 44.05 52.54 13 XM_DK_Undo_02 29795 16.24 39.84 8.34 14 XM_B_SpammyWords2 29103 23.16 38.92 17.88 15 HTML_FONT_LOW_CONTRAST 26659 28.97 35.65 26.74 16 TR_XM_DKIM_Undo 25247 13.33 33.76 6.50 17 LOC_TINY_FONT_1 24865 27.00 33.25 24.91 18 BAYES_99 23941 13.42 32.01 7.20 19 DCC_CHECK_NEGATIVE 21265 51.90 28.43 59.74 20 MIME_HTML_ONLY 20185 21.69 26.99 19.92 21 FVGT_m_MULTI_ODD 19395 24.29 25.93 23.73 22 DKIM_VALID_EF 18931 24.77 25.31 24.58 23 XMSubLong 18894 25.65 25.26 25.78 24 TR_DCC_Bayes_99 18858 9.47 25.22 4.20 25 BAYES_999 18704 10.84 25.01 6.10 26 XM_Body_Dirty_Words 17802 13.57 23.80 10.14 27 RELAYCOUNTRY_META 17676 11.99 23.64 8.09 28 XM_Multi_Part_URI 16925 18.36 22.63 16.93 29 T_KAM_HTML_FONT_INVALID 16636 15.82 22.25 13.68 30 T_TM2_M_HEADER_IN_MSG 14184 19.74 18.97 20.00 31 BOTNET 12658 5.21 16.93 1.29 32 RCVD_IN_MSPIKE_WL 12567 23.15 16.80 25.28 33 UNTRUSTED_Relay 12147 8.69 16.24 6.17 34 RCVD_IN_MSPIKE_H2 11750 13.57 15.71 12.86 35 BOTNET_IPINHOSTNAME 10684 7.10 14.29 4.69 36 LOTS_OF_MONEY 10607 8.85 14.18 7.07 37 TR_XM_SpammyWords2 9546 4.65 12.76 1.94 38 XM_B_SpammyWords3 9543 6.10 12.76 3.87 39 TR_XM_SpammyWords4 9501 6.75 12.70 4.76 40 XMSexyCombo_05 9394 6.03 12.56 3.84 41 UNPARSEABLE_RELAY 9342 9.28 12.49 8.21 42 TR_XM_UnparsRelay 9172 8.08 12.26 6.69 43 TR_XM_SpammyRelay 8835 4.07 11.81 1.48 44 XM_UB50 8561 7.03 11.45 5.56 45 XM_B_Unsub 8472 10.61 11.33 10.38 46 FSL_BULK_SIG 8039 9.29 10.75 8.80 47 TM2_M_URI_OPT_OUT 7746 8.75 10.36 8.21 48 T_XMDrugObfuBody_00 7403 6.54 9.90 5.41 49 HTML_IMAGE_RATIO_02 7261 7.44 9.71 6.68 50 XM_SendGrid 6511 7.65 8.71 7.30 51 BAYES_80 6241 5.56 8.35 4.63 52 RCVD_IN_MSPIKE_H4 6219 12.61 8.32 14.05 53 RCVD_IN_MSPIKE_H3 6183 9.84 8.27 10.37 54 LotsOfNums_01 6134 15.59 8.20 18.06 55 XM_Evil_Numbers_Gen 6099 8.25 8.16 8.28 56 XM_UncommonTLD01 5698 4.81 7.62 3.88 57 MPART_ALT_DIFF 5678 5.64 7.59 4.99 58 RELAYCOUNTRY_FR 5522 5.58 7.38 4.98 59 XMSubMetaSx_00 5509 4.22 7.37 3.17 60 ANY_BOUNCE_MESSAGE 5469 7.40 7.31 7.42 61 BOUNCE_MESSAGE 5469 7.40 7.31 7.42 62 BAYES_60 5073 12.01 6.78 13.75 63 XMBounce_01 5025 5.34 6.72 4.88 64 RCVD_IN_RP_SAFE 4967 8.14 6.64 8.64 65 XM_B_Phish_Phrases 4922 4.63 6.58 3.98 66 TooManyTo_001 4734 6.20 6.33 6.16 67 TR_XM_PhishingBody 4646 3.17 6.21 2.16 68 XM_H_Long_From01 4249 4.66 5.68 4.32 69 RCVD_IN_BL_SPAMCOP_NET 4185 2.24 5.60 1.11 70 RELAYCOUNTRY_CA 3980 2.14 5.32 1.07 71 RCVD_IN_RP_CERTIFIED 3881 7.12 5.19 7.77 72 MIME_HTML_MOSTLY 3837 2.87 5.13 2.11 73 XMStrtUSub 3725 5.05 4.98 5.08 74 TR_XM_DK_SendGrid 3573 4.69 4.78 4.65 75 HTML_IMAGE_RATIO_04 3483 5.82 4.66 6.21 76 XMNoVowels 3347 9.37 4.48 11.00 77 TR_XM_SpammyWords5 3288 2.18 4.40 1.44 78 DKIM_INVALID 3217 2.92 4.30 2.46 79 XM_OfRef6 3211 1.68 4.29 0.80 80 XM_B_SpammyTLD 3160 2.97 4.23 2.55 81 BAYES_95 3090 3.19 4.13 2.88 82 XM_DIRTYINTL 3017 1.16 4.03 0.20 83 XMBrknScrpt_02 2923 1.85 3.91 1.16 84 XM_SPF_SoftFail 2906 1.72 3.89 0.99 85 ALL_TRUSTED 2873 19.30 3.84 24.47 86 XM_B_Investor 2744 1.68 3.67 1.01 87 MIME_HTML_ONLY_MULTI 2608 2.96 3.49 2.78 88 XMNumbers 2539 4.45 3.40 4.80 89 XMSexyCombo_01 2485 1.08 3.32 0.34 90 HTML_IMAGE_RATIO_06 2470 3.34 3.30 3.35 91 MPART_ALT_DIFF_COUNT 2439 6.95 3.26 8.19 92 XM_B_Phish66 2398 1.47 3.21 0.88 93 URIBL_DBL_SPAM 2361 0.79 3.16 0.00 94 T_TooManySym_01 2323 6.44 3.11 7.56 95 T_XMDrugObfuBody_08 2260 1.53 3.02 1.03 96 T_XMDrugObfuBody_14 2247 2.46 3.00 2.28 97 SUBJ_ALL_CAPS 2245 1.51 3.00 1.01 98 USER_IN_DEF_DKIM_WL 2236 12.00 2.99 15.02 99 SpammyFromTLD_01 2202 1.01 2.94 0.37 100 SpammyFromTLD_02 2195 0.85 2.94 0.15 101 TR_XM_SPAMCOP 2146 0.97 2.87 0.34 102 URI_NOVOWEL 2093 2.22 2.80 2.02 103 T_FILL_THIS_FORM_SHORT 2070 1.12 2.77 0.56 104 TR_XM_PHPDW 2032 0.89 2.72 0.28 105 XM_Body_Dirty_Words_01 1987 1.64 2.66 1.30 106 XM_URI_RBL 1925 0.74 2.57 0.13 107 TM2_M_VERY_LONG_WORD 1920 1.51 2.57 1.15 108 HTML_IMAGE_RATIO_08 1886 2.32 2.52 2.25 109 KHOP_HELO_FCRDNS 1812 1.21 2.42 0.80 110 TR_XM_PHPForged 1791 0.76 2.39 0.21 111 XM_CamelCaseFrm001 1699 1.97 2.27 1.87 112 XMBdyGiftCard01 1688 1.40 2.26 1.11 113 FROM_EXCESS_BASE64 1644 2.79 2.20 2.99 114 TR_XM_FormFill2 1632 0.70 2.18 0.21 115 XM_H_PHPOS 1619 0.69 2.16 0.20 116 XMBody_17 1605 0.84 2.15 0.41 117 T_XMHurry_00 1598 1.07 2.14 0.71 118 PDS_OTHER_BAD_TLD 1594 0.96 2.13 0.57 119 XMSubMetaSxObfu_03 1568 0.75 2.10 0.30 120 MIME_QP_LONG_LINE 1476 3.03 1.97 3.38 121 XMStockSpam_06 1472 1.76 1.97 1.69 122 T_REMOTE_IMAGE 1438 2.34 1.92 2.47 123 XM_B_SpammyWords4 1431 0.94 1.91 0.62 124 XMDiploma_00 1429 1.42 1.91 1.25 125 XMSexyCombo_04 1420 0.51 1.90 0.05 126 BAYES_40 1348 3.81 1.80 4.48 127 TR_Symld_Words 1297 1.37 1.73 1.24 128 XM_B_Unsub2 1290 0.99 1.72 0.75 129 BOTNET_NORDNS 1255 0.42 1.68 0.00 130 DKIM_ADSP_CUSTOM_MED 1233 1.05 1.65 0.85 131 RCVD_IN_IADB_LISTED 1213 2.66 1.62 3.01 132 URI_HEX 1200 1.47 1.60 1.42 133 XM_H_PHPMailer 1183 0.78 1.58 0.51 134 TR_XM_NoHeaderRelay 1172 0.50 1.57 0.14 135 TR_XM_INV_DKIM 1146 0.52 1.53 0.18 136 XM_DK_Undo_01 1121 1.35 1.50 1.29 137 MAILING_LIST_MULTI 1119 1.87 1.50 2.00 138 NML_ADSP_CUSTOM_MED 1119 0.77 1.50 0.52 139 RCVD_IN_IADB_SPF 1112 2.34 1.49 2.63 140 JH_SPAMMY_HEADERS 1111 0.37 1.49 0.00 141 XM_B_COVIDMETA 1107 0.99 1.48 0.82 142 FORGED_GMAIL_RCVD 1102 0.69 1.47 0.43 143 TR_XM_SB_Phish 1087 1.66 1.45 1.73 144 XMSubMetaI_00 1083 0.75 1.45 0.52 145 TR_XM_FormFill 1070 0.36 1.43 0.01 146 RCVD_IN_IADB_DK 1062 2.09 1.42 2.32 147 RCVD_IN_IADB_SENDERID 1054 2.14 1.41 2.38 148 HTML_MIME_NO_HTML_TAG 1038 1.56 1.39 1.62 149 XM_UB99 1030 0.35 1.38 0.00 150 XMSubNoVowel 1018 1.46 1.36 1.49 151 XMPhish30 1009 0.79 1.35 0.60 152 URIBL_BLACK 990 0.34 1.32 0.01 153 XM_UB60 986 0.39 1.32 0.08 154 MIME_CHARSET_FARAWAY 985 0.52 1.32 0.25 155 RCVD_IN_PSBL 971 0.44 1.30 0.15 156 XMHTMLBadTable_001 967 0.64 1.29 0.42 157 TR_LOTS_OF_MONEY3 956 0.47 1.28 0.20 158 DIET_1 950 0.58 1.27 0.35 159 BAYES_20 945 2.77 1.26 3.28 160 HTML_FONT_FACE_BAD 933 1.10 1.25 1.05 161 XMSubPhish11 916 1.59 1.22 1.71 162 RELAYCOUNTRY_AU 911 0.46 1.22 0.21 163 SUBJ_DOLLARS 905 0.47 1.21 0.22 164 XMPhish08 870 0.44 1.16 0.20 165 RELAYCOUNTRY_PL 856 0.30 1.14 0.02 166 FROM_SUSPICIOUS_NTLD 854 0.34 1.14 0.07 167 XM_H_Undi_Recip 832 0.42 1.11 0.19 168 FROM_SUSPICIOUS_NTLD_FP 814 0.32 1.09 0.06 169 TR_Mismatch_TLD_01 810 0.47 1.08 0.26 170 RELAYCOUNTRY_GB 806 0.68 1.08 0.54 171 XM_B_DNDMA 804 0.97 1.08 0.93 172 RELAYCOUNTRY_CN 797 0.35 1.07 0.11 173 XMGenDplmaNmb 796 0.79 1.06 0.70 174 TR_XM_BayesRelay 789 0.27 1.06 0.00 175 CHARSET_FARAWAY_HEADER 784 0.35 1.05 0.12 176 XM_B_SEO 773 0.35 1.03 0.12 177 URI_TRY_3LD 770 0.88 1.03 0.84 178 TR_XM_SEO4 756 0.30 1.01 0.06 179 HK_RANDOM_REPLYTO 754 0.41 1.01 0.21 180 XM_UB80 749 0.26 1.00 0.01 181 XM_UB999 727 0.24 0.97 0.00 182 XMLngstWrd_00 726 0.75 0.97 0.68 183 BAYES_00 716 7.30 0.96 9.43 184 RELAYCOUNTRY_NL 715 0.37 0.96 0.17 185 TR_Sbj_FN_Bdy 713 0.31 0.95 0.10 186 XM_B_REG_HTML 695 0.67 0.93 0.59 187 XM_XX_Yahoo 693 0.30 0.93 0.10 188 TR_Mismatch_TLD_02 688 0.28 0.92 0.06 189 SHOPIFY_IMG_NOT_RCVD_SFY 681 0.36 0.91 0.17 190 TR_XM_COVIDMETA4 669 0.34 0.89 0.15 191 XMReplyNow 663 0.29 0.89 0.09 192 XMLngstWrd_01 656 0.62 0.88 0.53 193 NUMERIC_HTTP_ADDR 654 0.49 0.87 0.36 194 XM_H_Long_From02 652 0.90 0.87 0.91 195 HELO_NODOT 647 0.52 0.87 0.41 196 HELO_NO_DOMAIN 647 0.52 0.87 0.41 197 T_TooManySym_02 642 3.16 0.86 3.93 198 RCVD_IN_MSPIKE_BL 633 0.25 0.85 0.05 199 TR_XM_MSPIKECOMBO 628 0.24 0.84 0.04 200 TR_BOTNET_NEGATE 610 0.32 0.82 0.16 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 182664 83.21 87.81 81.68 2 XM_B_Unicode 159495 72.95 77.83 71.32 3 RELAYCOUNTRY_US 152085 69.51 74.02 68.00 4 DKIM_SIGNED 144010 68.39 80.34 64.39 5 XM_DK_Pass 141527 66.99 78.09 63.28 6 DKIM_VALID 138504 65.47 76.04 61.93 7 DCC_CHECK_NEGATIVE 133609 51.90 28.43 59.74 8 BAYES_50 117509 50.41 44.05 52.54 9 DKIM_VALID_AU 112458 52.17 57.83 50.28 10 XM_B_Unicode3 103713 46.37 46.34 46.37 11 XMListUnsubscribeExists 96421 49.06 66.83 43.11 12 DCC_CHECK 89955 48.07 71.54 40.22 13 XM_B_SpammyWords 86894 46.24 68.31 38.85 14 HTML_FONT_LOW_CONTRAST 59802 28.97 35.65 26.74 15 XMSubLong 57657 25.65 25.26 25.78 16 RCVD_IN_MSPIKE_WL 56532 23.15 16.80 25.28 17 LOC_TINY_FONT_1 55705 27.00 33.25 24.91 18 DKIM_VALID_EF 54982 24.77 25.31 24.58 19 ALL_TRUSTED 54733 19.30 3.84 24.47 20 FVGT_m_MULTI_ODD 53078 24.29 25.93 23.73 21 T_TM2_M_HEADER_IN_MSG 44722 19.74 18.97 20.00 22 MIME_HTML_ONLY 44556 21.69 26.99 19.92 23 LotsOfNums_01 40383 15.59 8.20 18.06 24 XM_B_SpammyWords2 39998 23.16 38.92 17.88 25 XM_Multi_Part_URI 37871 18.36 22.63 16.93 26 USER_IN_DEF_DKIM_WL 33581 12.00 2.99 15.02 27 RCVD_IN_MSPIKE_H4 31423 12.61 8.32 14.05 28 BAYES_60 30755 12.01 6.78 13.75 29 T_KAM_HTML_FONT_INVALID 30590 15.82 22.25 13.68 30 RCVD_IN_MSPIKE_H2 28753 13.57 15.71 12.86 31 XMNoVowels 24608 9.37 4.48 11.00 32 XM_B_Unsub 23205 10.61 11.33 10.38 33 RCVD_IN_MSPIKE_H3 23187 9.84 8.27 10.37 34 XM_Body_Dirty_Words 22687 13.57 23.80 10.14 35 XM_DKIMWhitelistDomains 21947 7.36 0.01 9.81 36 BAYES_00 21082 7.30 0.96 9.43 37 FSL_BULK_SIG 19681 9.29 10.75 8.80 38 RCVD_IN_RP_SAFE 19320 8.14 6.64 8.64 39 XM_DK_Undo_02 18655 16.24 39.84 8.34 40 XM_Evil_Numbers_Gen 18510 8.25 8.16 8.28 41 UNPARSEABLE_RELAY 18359 9.28 12.49 8.21 42 TM2_M_URI_OPT_OUT 18356 8.75 10.36 8.21 43 MPART_ALT_DIFF_COUNT 18307 6.95 3.26 8.19 44 RELAYCOUNTRY_META 18091 11.99 23.64 8.09 45 RCVD_IN_RP_CERTIFIED 17369 7.12 5.19 7.77 46 T_TooManySym_01 16902 6.44 3.11 7.56 47 ANY_BOUNCE_MESSAGE 16605 7.40 7.31 7.42 48 BOUNCE_MESSAGE 16604 7.40 7.31 7.42 49 XM_SendGrid 16317 7.65 8.71 7.30 50 BAYES_99 16108 13.42 32.01 7.20 51 LOTS_OF_MONEY 15811 8.85 14.18 7.07 52 TR_XM_UnparsRelay 14954 8.08 12.26 6.69 53 HTML_IMAGE_RATIO_02 14941 7.44 9.71 6.68 54 TR_XM_DK_Bayes 14606 5.07 0.69 6.53 55 TR_XM_DKIM_Undo 14534 13.33 33.76 6.50 56 TR_XM_DK_Bayes1 14251 4.95 0.68 6.37 57 HTML_IMAGE_RATIO_04 13890 5.82 4.66 6.21 58 UNTRUSTED_Relay 13799 8.69 16.24 6.17 59 TooManyTo_001 13767 6.20 6.33 6.16 60 BAYES_999 13646 10.84 25.01 6.10 61 TR_XM_DK_Bayes2 12824 4.44 0.56 5.73 62 XM_UB50 12426 7.03 11.45 5.56 63 T_XMDrugObfuBody_00 12105 6.54 9.90 5.41 64 XMStrtUSub 11354 5.05 4.98 5.08 65 MPART_ALT_DIFF 11164 5.64 7.59 4.99 66 RELAYCOUNTRY_FR 11137 5.58 7.38 4.98 67 XMBounce_01 10916 5.34 6.72 4.88 68 XMNumbers 10730 4.45 3.40 4.80 69 TR_XM_SpammyWords4 10649 6.75 12.70 4.76 70 BOTNET_IPINHOSTNAME 10495 7.10 14.29 4.69 71 TR_XM_DK_SendGrid 10410 4.69 4.78 4.65 72 BAYES_80 10356 5.56 8.35 4.63 73 BAYES_40 10015 3.81 1.80 4.48 74 XM_H_Long_From01 9668 4.66 5.68 4.32 75 TR_DCC_Bayes_99 9394 9.47 25.22 4.20 76 XM_B_Phish_Phrases 8902 4.63 6.58 3.98 77 T_TooManySym_02 8791 3.16 0.86 3.93 78 XM_UncommonTLD01 8669 4.81 7.62 3.88 79 XM_B_SpammyWords3 8659 6.10 12.76 3.87 80 XMSexyCombo_05 8589 6.03 12.56 3.84 81 XM_H_Trusted_IP 8109 2.72 0.00 3.63 82 MIME_QP_LONG_LINE 7555 3.03 1.97 3.38 83 HTML_IMAGE_RATIO_06 7501 3.34 3.30 3.35 84 BAYES_20 7327 2.77 1.26 3.28 85 XMSubMetaSx_00 7089 4.22 7.37 3.17 86 INVALID_MSGID 7029 2.40 0.16 3.14 87 RCVD_IN_IADB_LISTED 6738 2.66 1.62 3.01 88 MSGID_NOFQDN1 6706 2.26 0.05 3.00 89 FROM_EXCESS_BASE64 6686 2.79 2.20 2.99 90 BAYES_95 6435 3.19 4.13 2.88 91 MIME_HTML_ONLY_MULTI 6218 2.96 3.49 2.78 92 TO_MALFORMED 6078 2.04 0.02 2.72 93 RCVD_IN_IADB_SPF 5884 2.34 1.49 2.63 94 XM_B_SpammyTLD 5711 2.97 4.23 2.55 95 T_REMOTE_IMAGE 5535 2.34 1.92 2.47 96 DKIM_INVALID 5506 2.92 4.30 2.46 97 RCVD_IN_IADB_SENDERID 5320 2.14 1.41 2.38 98 RCVD_IN_IADB_DK 5178 2.09 1.42 2.32 99 T_XMDrugObfuBody_14 5102 2.46 3.00 2.28 100 HTML_IMAGE_RATIO_08 5032 2.32 2.52 2.25 101 XM_PDF 4836 1.74 0.48 2.16 102 TR_XM_PhishingBody 4820 3.17 6.21 2.16 103 TVD_RCVD_IP 4726 1.65 0.25 2.11 104 MIME_HTML_MOSTLY 4722 2.87 5.13 2.11 105 URI_NOVOWEL 4525 2.22 2.80 2.02 106 MAILING_LIST_MULTI 4468 1.87 1.50 2.00 107 IN_HORDE_ADDRESS_BOOK 4449 1.52 0.10 1.99 108 TR_XM_SpammyWords2 4343 4.65 12.76 1.94 109 XM_CamelCaseFrm001 4176 1.97 2.27 1.87 110 BAYES_05 4048 1.52 0.66 1.81 111 RCVD_IN_IADB_VOUCHED 3939 1.47 0.59 1.76 112 XMBSHREFv2 3879 1.39 0.36 1.73 113 TR_XM_SB_Phish 3876 1.66 1.45 1.73 114 XMSubPhish11 3835 1.59 1.22 1.71 115 XMStockSpam_06 3776 1.76 1.97 1.69 116 HTML_MIME_NO_HTML_TAG 3614 1.56 1.39 1.62 117 HELO_MISC_IP 3392 1.15 0.05 1.52 118 XMSubNoVowel 3330 1.46 1.36 1.49 119 TR_XM_SpammyRelay 3318 4.07 11.81 1.48 120 TR_XM_SpammyWords5 3211 2.18 4.40 1.44 121 URI_HEX 3184 1.47 1.60 1.42 122 TooManyTo_002 3052 1.18 0.63 1.36 123 XMGappySubj_01 3033 1.05 0.13 1.36 124 T_TooManySym_03 2997 1.08 0.32 1.34 125 XM_Body_Dirty_Words_01 2911 1.64 2.66 1.30 126 BOTNET 2894 5.21 16.93 1.29 127 XM_DK_Undo_01 2893 1.35 1.50 1.29 128 XMDiploma_00 2800 1.42 1.91 1.25 129 TR_Symld_Words 2781 1.37 1.73 1.24 130 XM_GoogleGroups 2756 1.12 0.79 1.23 131 XMBrknScrpt_02 2600 1.85 3.91 1.16 132 TM2_M_VERY_LONG_WORD 2580 1.51 2.57 1.15 133 RCVD_IN_BL_SPAMCOP_NET 2492 2.24 5.60 1.11 134 XMBdyGiftCard01 2480 1.40 2.26 1.11 135 RCVD_IN_IADB_OPTIN 2430 0.97 0.60 1.09 136 RELAYCOUNTRY_CA 2399 2.14 5.32 1.07 137 HTML_FONT_FACE_BAD 2351 1.10 1.25 1.05 138 HTML_IMAGE_ONLY_20 2299 0.86 0.36 1.03 139 T_XMDrugObfuBody_08 2297 1.53 3.02 1.03 140 SUBJ_ALL_CAPS 2267 1.51 3.00 1.01 141 XM_B_Investor 2266 1.68 3.67 1.01 142 XM_SPF_SoftFail 2218 1.72 3.89 0.99 143 TooManyTo_003 2214 0.88 0.53 0.99 144 XM_B_DNDMA 2089 0.97 1.08 0.93 145 XM_H_Long_From02 2033 0.90 0.87 0.91 146 XMGppyBdWords 2014 0.78 0.43 0.90 147 XM_B_Phish66 1975 1.47 3.21 0.88 148 RCVD_IN_MSPIKE_H5 1922 0.70 0.22 0.86 149 DKIM_ADSP_CUSTOM_MED 1891 1.05 1.65 0.85 150 URI_TRY_3LD 1870 0.88 1.03 0.84 151 XM_B_COVIDMETA 1836 0.99 1.48 0.82 152 KHOP_HELO_FCRDNS 1795 1.21 2.42 0.80 153 XM_OfRef6 1788 1.68 4.29 0.80 154 XM_B_Unsub2 1668 0.99 1.72 0.75 155 XM_B_COPY_HTML 1603 0.72 0.75 0.72 156 TooManyTo_004 1603 0.66 0.48 0.72 157 T_XMHurry_00 1587 1.07 2.14 0.71 158 XMBody_95 1575 0.60 0.27 0.70 159 XMGenDplmaNmb 1557 0.79 1.06 0.70 160 XMLngstWrd_00 1512 0.75 0.97 0.68 161 TR_MetaPhish_Combo_01 1481 0.69 0.76 0.66 162 XM_B_SpammyWords4 1387 0.94 1.91 0.62 163 TooManyTo_005 1378 0.57 0.42 0.62 164 USER_IN_WELCOMELIST 1354 0.45 0.00 0.61 165 USER_IN_WHITELIST 1354 0.45 0.00 0.61 166 XMPhish30 1336 0.79 1.35 0.60 167 XM_B_REG_HTML 1309 0.67 0.93 0.59 168 PLING_QUERY 1301 0.61 0.68 0.58 169 XM_ProductURIs 1295 0.62 0.73 0.58 170 XM_S_SpammyWords 1295 0.57 0.55 0.58 171 TR_XM_Spammywords 1295 0.57 0.55 0.58 172 IN_ZIMBRA_NJ_WHITELIST 1292 0.43 0.01 0.58 173 RDNS_DYNAMIC 1291 0.64 0.81 0.58 174 TVD_SPACE_RATIO_MINFP 1286 0.52 0.35 0.58 175 TR_MSPIKEBAYES00 1281 0.43 0.01 0.57 176 PDS_OTHER_BAD_TLD 1271 0.96 2.13 0.57 177 T_FILL_THIS_FORM_SHORT 1262 1.12 2.77 0.56 178 RELAYCOUNTRY_GB 1213 0.68 1.08 0.54 179 TVD_SPACE_RATIO 1196 0.45 0.18 0.53 180 XMLngstWrd_01 1186 0.62 0.88 0.53 181 NML_ADSP_CUSTOM_MED 1171 0.77 1.50 0.52 182 XMSubMetaI_00 1155 0.75 1.45 0.52 183 XM_H_PHPMailer 1148 0.78 1.58 0.51 184 XMSubMetaSxObfu_02 1143 0.52 0.55 0.51 185 XMHTML_After_End 1118 0.53 0.63 0.50 186 T_TooManySym_04 1111 0.39 0.07 0.50 187 XM_D_tchamptons_WL 1010 0.34 0.00 0.45 188 XMCapTrack 990 0.40 0.26 0.44 189 XMLngstWrd_02 983 0.52 0.77 0.44 190 FORGED_GMAIL_RCVD 964 0.69 1.47 0.43 191 XMPhish14 954 0.43 0.45 0.43 192 HTTPS_HTTP_MISMATCH 946 0.50 0.72 0.42 193 XMHTMLBadTable_001 943 0.64 1.29 0.42 194 XMBody_17 914 0.84 2.15 0.41 195 HELO_NODOT 906 0.52 0.87 0.41 196 HELO_NO_DOMAIN 906 0.52 0.87 0.41 197 HTML_TAG_BALANCE_BODY 902 0.51 0.81 0.40 198 DKIM_ADSP_NXDOMAIN 896 0.44 0.55 0.40 199 SpammyFromTLD_01 826 1.01 2.94 0.37 200 XMLngstWrd_03 810 0.45 0.70 0.36 ----------------------------------------------------------------------