Email: 268435 Autolearn: 0 AvgScore: 1.43 AvgScanTime: 1.40 sec Spam: 61305 Autolearn: 0 AvgScore: 13.19 AvgScanTime: 1.65 sec Ham: 207130 Autolearn: 0 AvgScore: -2.04 AvgScanTime: 1.32 sec Time Spent Running SA: 104.07 hours Time Spent Processing Spam: 28.06 hours Time Spent Processing Ham: 76.01 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 57167 86.97 93.25 85.11 2 DKIM_SIGNED 53525 75.01 87.31 71.37 3 XM_DK_Pass 51901 73.33 84.66 69.97 4 DKIM_VALID 50499 71.66 82.37 68.49 5 XM_B_Unicode 50454 73.18 82.30 70.49 6 RELAYCOUNTRY_US 48608 77.88 79.29 77.47 7 DCC_CHECK 46407 51.83 75.70 44.76 8 XMListUnsubscribeExists 44940 54.02 73.31 48.31 9 XM_B_SpammyWords 41771 51.29 68.14 46.31 10 DKIM_VALID_AU 37975 57.72 61.94 56.48 11 XM_B_Unicode3 29545 44.73 48.19 43.71 12 XM_DK_Undo_02 28908 18.36 47.15 9.83 13 BAYES_50 25106 48.10 40.95 50.21 14 XM_B_SpammyWords2 23299 23.91 38.01 19.74 15 TR_XM_DKIM_Undo 22775 14.73 37.15 8.09 16 HTML_FONT_LOW_CONTRAST 21271 31.24 34.70 30.22 17 LOC_TINY_FONT_1 21243 29.45 34.65 27.90 18 BAYES_99 20331 15.41 33.16 10.15 19 DKIM_VALID_EF 18551 27.29 30.26 26.42 20 FVGT_m_MULTI_ODD 17851 23.80 29.12 22.23 21 MIME_HTML_ONLY 16884 24.09 27.54 23.07 22 RCVD_IN_MSPIKE_WL 16294 30.48 26.58 31.64 23 BAYES_999 16008 12.79 26.11 8.84 24 T_KAM_HTML_FONT_INVALID 15737 17.57 25.67 15.17 25 TR_DCC_Bayes_99 14912 9.24 24.32 4.78 26 DCC_CHECK_NEGATIVE 14887 48.14 24.28 55.21 27 XM_Body_Dirty_Words 14621 15.89 23.85 13.53 28 RCVD_IN_MSPIKE_H2 13724 18.17 22.39 16.93 29 XMSubLong 13700 22.27 22.35 22.24 30 T_TM2_M_HEADER_IN_MSG 13253 21.04 21.62 20.87 31 RELAYCOUNTRY_META 12276 7.19 20.02 3.39 32 XM_Multi_Part_URI 12214 15.20 19.92 13.81 33 BOTNET_IPINHOSTNAME 9663 7.97 15.76 5.66 34 RCVD_IN_MSPIKE_H3 9315 14.93 15.19 14.86 35 UNPARSEABLE_RELAY 9143 10.10 14.91 8.68 36 TR_XM_UnparsRelay 8927 8.59 14.56 6.82 37 BOTNET 8238 4.39 13.44 1.71 38 TR_XM_SpammyRelay 8164 4.25 13.32 1.57 39 XM_B_SpammyWords3 7852 6.80 12.81 5.02 40 RCVD_IN_BL_SPAMCOP_NET 7792 3.89 12.71 1.27 41 XM_B_Unsub 7429 13.85 12.12 14.36 42 LOTS_OF_MONEY 7258 7.54 11.84 6.26 43 XM_SendGrid 7148 8.47 11.66 7.52 44 TR_XM_SpammyWords2 6978 4.23 11.38 2.11 45 UNTRUSTED_Relay 6761 3.60 11.03 1.40 46 FSL_BULK_SIG 6645 9.65 10.84 9.30 47 RCVD_IN_MSPIKE_H4 6593 13.49 10.75 14.30 48 XMSexyCombo_05 6034 6.09 9.84 4.98 49 HTML_IMAGE_RATIO_02 5999 8.92 9.79 8.66 50 XM_UncommonTLD01 5980 5.50 9.75 4.24 51 MPART_ALT_DIFF 5563 6.31 9.07 5.50 52 TR_XM_SpammyWords4 5335 5.03 8.70 3.94 53 XM_Evil_Numbers_Gen 5056 8.97 8.25 9.18 54 BAYES_80 4977 5.18 8.12 4.31 55 TooManyTo_001 4545 7.99 7.41 8.16 56 TR_XM_SPAMCOP 4536 2.01 7.40 0.42 57 MIME_HTML_MOSTLY 4464 3.48 7.28 2.35 58 BAYES_60 4455 9.14 7.27 9.70 59 RELAYCOUNTRY_CA 4306 2.40 7.02 1.03 60 TR_XM_DK_SendGrid 4091 5.19 6.67 4.76 61 XMSubMetaSx_00 4066 5.86 6.63 5.64 62 LotsOfNums_01 4016 7.21 6.55 7.40 63 TR_XM_PhishingBody 3857 3.82 6.29 3.09 64 HTML_IMAGE_RATIO_04 3706 6.17 6.05 6.21 65 XM_UB50 3351 1.91 5.47 0.86 66 XM_H_Long_From01 3046 4.80 4.97 4.75 67 DKIM_INVALID 3026 3.35 4.94 2.87 68 XM_B_Phish_Phrases 3022 4.34 4.93 4.16 69 RCVD_IN_MSPIKE_BL 2929 1.34 4.78 0.32 70 XMNumbers 2908 4.18 4.74 4.02 71 BAYES_95 2891 3.08 4.72 2.60 72 TR_XM_MSPIKECOMBO 2841 1.30 4.63 0.32 73 TR_XM_MaxUnsub 2804 2.05 4.57 1.30 74 TM2_M_URI_OPT_OUT 2701 5.15 4.41 5.37 75 XM_SPF_SoftFail 2647 1.82 4.32 1.09 76 TR_XM_SpammyWords5 2633 2.23 4.29 1.62 77 XM_B_Investor 2575 1.74 4.20 1.02 78 HTML_IMAGE_RATIO_06 2486 4.28 4.06 4.35 79 XM_GoogleGroups 2446 2.18 3.99 1.65 80 MIME_HTML_ONLY_MULTI 2439 3.71 3.98 3.63 81 XMStrtUSub 2431 5.42 3.97 5.85 82 SpammyFromTLD_01 2379 1.22 3.88 0.43 83 XM_B_SpammyTLD 2236 2.41 3.65 2.04 84 URI_NOVOWEL 2233 2.41 3.64 2.04 85 XM_OfRef6 2227 1.40 3.63 0.74 86 T_TooManySym_01 2217 7.11 3.62 8.15 87 T_XMDrugObfuBody_08 2170 1.81 3.54 1.29 88 MIME_QP_LONG_LINE 2157 4.30 3.52 4.53 89 SpammyFromTLD_02 2142 0.94 3.49 0.18 90 XM_DIRTYINTL 2090 0.99 3.41 0.28 91 RCVD_IN_RP_SAFE 2041 8.44 3.33 9.95 92 HTML_MIME_NO_HTML_TAG 1929 2.35 3.15 2.11 93 MAILING_LIST_MULTI 1895 2.39 3.09 2.18 94 TR_XM_PHPDW 1889 0.95 3.08 0.32 95 XM_CamelCaseFrm001 1870 1.99 3.05 1.68 96 XM_B_Phish66 1794 1.45 2.93 1.01 97 XM_B_SpammyWords4 1794 1.18 2.93 0.66 98 T_XMDrugObfuBody_14 1791 2.52 2.92 2.41 99 T_FILL_THIS_FORM_SHORT 1760 1.01 2.87 0.47 100 TR_XM_PHPForged 1752 0.85 2.86 0.26 101 TR_XM_FormFill2 1723 0.84 2.81 0.26 102 XM_H_PHPOS 1710 0.83 2.79 0.25 103 HTML_IMAGE_ONLY_20 1609 1.83 2.62 1.60 104 SUBJ_ALL_CAPS 1533 1.48 2.50 1.18 105 ALL_TRUSTED 1523 15.79 2.48 19.73 106 HTML_SHORT_LINK_IMG_3 1481 0.83 2.42 0.36 107 RCVD_IN_MSPIKE_L3 1479 0.77 2.41 0.28 108 TR_XM_SpammyWords3 1448 0.66 2.36 0.15 109 TM2_M_VERY_LONG_WORD 1441 1.40 2.35 1.12 110 XM_DK_Undo_01 1382 1.72 2.25 1.56 111 KHOP_HELO_FCRDNS 1364 1.15 2.22 0.84 112 HTML_IMAGE_RATIO_08 1356 2.24 2.21 2.25 113 RCVD_IN_RP_CERTIFIED 1353 7.39 2.21 8.93 114 URIBL_DBL_SPAM 1342 0.51 2.19 0.01 115 T_XMDrugObfuBody_00 1339 0.99 2.18 0.64 116 XMSexyCombo_01 1336 2.07 2.18 2.04 117 XMBrknScrpt_02 1336 1.32 2.18 1.06 118 RCVD_IN_RP_RNBL 1334 0.55 2.18 0.07 119 BOTNET_NORDNS 1303 0.50 2.13 0.01 120 FROM_EXCESS_BASE64 1300 3.68 2.12 4.14 121 TR_LOTS_OF_MONEY3 1289 0.60 2.10 0.16 122 T_REMOTE_IMAGE 1288 3.15 2.10 3.46 123 BAYES_40 1286 4.12 2.10 4.71 124 RCVD_IN_IADB_LISTED 1273 2.80 2.08 3.01 125 HTML_TITLE_SUBJ_DIFF 1271 0.74 2.07 0.34 126 TR_XM_BayesRelay 1233 0.46 2.01 0.01 127 XMBody_17 1226 0.76 2.00 0.39 128 XM_UB99 1215 0.45 1.98 0.00 129 DIET_1 1199 1.55 1.96 1.43 130 XM_Body_Dirty_Words_01 1154 0.67 1.88 0.32 131 XMDiploma_00 1147 1.26 1.87 1.07 132 XM_URI_RBL 1142 0.56 1.86 0.17 133 TR_Symld_Words 1131 1.46 1.84 1.34 134 JH_SPAMMY_HEADERS 1126 0.42 1.84 0.00 135 XM_B_Unsub2 1123 1.08 1.83 0.86 136 RELAYCOUNTRY_CN 1109 0.47 1.81 0.08 137 MIME_CHARSET_FARAWAY 1104 0.56 1.80 0.20 138 RCVD_IN_VALIDITY_RPBL 1103 0.46 1.80 0.06 139 RCVD_IN_IADB_SPF 1103 2.41 1.80 2.60 140 RCVD_IN_VALIDITY_SAFE 1086 7.05 1.77 8.61 141 XMSubNoVowel 1084 2.74 1.77 3.02 142 XM_H_PHPMailer 1083 0.78 1.77 0.49 143 T_XMHurry_00 1060 1.05 1.73 0.85 144 TR_XM_FormFill 1051 0.40 1.71 0.01 145 USER_IN_DEF_DKIM_WL 1046 13.10 1.71 16.48 146 URI_HEX 1043 1.45 1.70 1.37 147 RCVD_IN_IADB_DK 1016 2.11 1.66 2.24 148 RCVD_IN_IADB_SENDERID 1014 2.16 1.65 2.32 149 RCVD_IN_MSPIKE_L5 995 0.38 1.62 0.01 150 RELAYCOUNTRY_IN 978 0.41 1.60 0.05 151 BAYES_20 951 3.70 1.55 4.33 152 TR_XM_INV_DKIM 946 0.61 1.54 0.34 153 XMStockSpam_06 940 1.70 1.53 1.74 154 TR_XM_COVIDMETA1 938 0.61 1.53 0.34 155 XM_UB999 932 0.35 1.52 0.00 156 XMPhish30 911 1.05 1.49 0.92 157 FROM_SUSPICIOUS_NTLD 901 0.39 1.47 0.07 158 XMCapTrack 892 0.79 1.46 0.59 159 TR_XM_NoHeaderRelay 882 0.45 1.44 0.15 160 FROM_SUSPICIOUS_NTLD_FP 871 0.37 1.42 0.06 161 XM_B_COVIDMETA 870 1.01 1.42 0.89 162 CHARSET_FARAWAY_HEADER 867 0.36 1.41 0.05 163 URIBL_BLACK 862 0.34 1.41 0.02 164 TR_Mismatch_TLD_02 851 0.40 1.39 0.11 165 BAYES_00 851 9.63 1.39 12.07 166 XM_UB60 794 0.35 1.30 0.07 167 XMBdyGiftCard01 789 1.34 1.29 1.36 168 TR_Mismatch_TLD_01 783 0.49 1.28 0.26 169 RCVD_IN_PSBL 767 0.42 1.25 0.17 170 RELAYCOUNTRY_RU 764 0.31 1.25 0.03 171 LongTLD 758 0.38 1.24 0.13 172 HK_RANDOM_REPLYTO 752 0.37 1.23 0.11 173 PDS_OTHER_BAD_TLD 748 0.70 1.22 0.54 174 TR_XM_COVIDMETA4 744 0.42 1.21 0.18 175 TR_XM_SB_Phish 736 1.79 1.20 1.96 176 SHOPIFY_IMG_NOT_RCVD_SFY 726 0.44 1.18 0.22 177 XM_H_PHPOS_M 706 0.33 1.15 0.09 178 URI_NO_WWW_BIZ_CGI 705 0.27 1.15 0.00 179 XM_S_SpammyWords 703 0.38 1.15 0.16 180 TR_XM_Spammywords 702 0.38 1.15 0.16 181 GOOG_STO_IMG_HTML 694 0.28 1.13 0.03 182 XMReplyNow 694 0.32 1.13 0.08 183 XMSubPhish11 678 1.75 1.11 1.94 184 RELAYCOUNTRY_FR 676 0.36 1.10 0.14 185 XMSubMetaI_00 674 0.69 1.10 0.56 186 MONEY_NOHTML 674 0.30 1.10 0.07 187 RCVD_IN_IADB_VOUCHED 671 1.70 1.09 1.88 188 HTTPS_HTTP_MISMATCH 662 0.66 1.08 0.53 189 TR_Caps_n_Bayes_99 659 0.46 1.07 0.27 190 TR_BOTNET_NEGATE 648 0.45 1.06 0.27 191 XMPhish14 634 0.78 1.03 0.70 192 T_TooManySym_02 630 3.58 1.03 4.34 193 XMHTML_After_End 627 0.59 1.02 0.47 194 RELAYCOUNTRY_AU 622 0.40 1.01 0.22 195 RCVD_IN_VALIDITY_CERTIFIED 616 6.17 1.00 7.70 196 XM_B_COPY_HTML 612 0.86 1.00 0.82 197 XM_UB80 579 0.23 0.94 0.02 198 HTML_TAG_BALANCE_BODY 563 0.54 0.92 0.43 199 HELO_NODOT 562 0.59 0.92 0.50 200 HELO_NO_DOMAIN 560 0.59 0.91 0.50 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 176287 86.97 93.25 85.11 2 RELAYCOUNTRY_US 160457 77.88 79.29 77.47 3 DKIM_SIGNED 147821 75.01 87.31 71.37 4 XM_B_Unicode 145999 73.18 82.30 70.49 5 XM_DK_Pass 144933 73.33 84.66 69.97 6 DKIM_VALID 141867 71.66 82.37 68.49 7 DKIM_VALID_AU 116977 57.72 61.94 56.48 8 DCC_CHECK_NEGATIVE 114351 48.14 24.28 55.21 9 BAYES_50 104002 48.10 40.95 50.21 10 XMListUnsubscribeExists 100071 54.02 73.31 48.31 11 XM_B_SpammyWords 95912 51.29 68.14 46.31 12 DCC_CHECK 92717 51.83 75.70 44.76 13 XM_B_Unicode3 90531 44.73 48.19 43.71 14 RCVD_IN_MSPIKE_WL 65527 30.48 26.58 31.64 15 HTML_FONT_LOW_CONTRAST 62597 31.24 34.70 30.22 16 LOC_TINY_FONT_1 57799 29.45 34.65 27.90 17 DKIM_VALID_EF 54718 27.29 30.26 26.42 18 MIME_HTML_ONLY 47793 24.09 27.54 23.07 19 XMSubLong 46069 22.27 22.35 22.24 20 FVGT_m_MULTI_ODD 46046 23.80 29.12 22.23 21 T_TM2_M_HEADER_IN_MSG 43237 21.04 21.62 20.87 22 XM_B_SpammyWords2 40889 23.91 38.01 19.74 23 ALL_TRUSTED 40861 15.79 2.48 19.73 24 RCVD_IN_MSPIKE_H2 35058 18.17 22.39 16.93 25 USER_IN_DEF_DKIM_WL 34132 13.10 1.71 16.48 26 T_KAM_HTML_FONT_INVALID 31426 17.57 25.67 15.17 27 RCVD_IN_MSPIKE_H3 30772 14.93 15.19 14.86 28 XM_B_Unsub 29754 13.85 12.12 14.36 29 RCVD_IN_MSPIKE_H4 29616 13.49 10.75 14.30 30 XM_Multi_Part_URI 28601 15.20 19.92 13.81 31 XM_Body_Dirty_Words 28020 15.89 23.85 13.53 32 BAYES_00 25000 9.63 1.39 12.07 33 XM_DKIMWhitelistDomains 22175 8.28 0.10 10.71 34 BAYES_99 21033 15.41 33.16 10.15 35 RCVD_IN_RP_SAFE 20605 8.44 3.33 9.95 36 XM_DK_Undo_02 20367 18.36 47.15 9.83 37 BAYES_60 20093 9.14 7.27 9.70 38 FSL_BULK_SIG 19260 9.65 10.84 9.30 39 XM_Evil_Numbers_Gen 19018 8.97 8.25 9.18 40 RCVD_IN_RP_CERTIFIED 18488 7.39 2.21 8.93 41 BAYES_999 18313 12.79 26.11 8.84 42 UNPARSEABLE_RELAY 17980 10.10 14.91 8.68 43 HTML_IMAGE_RATIO_02 17941 8.92 9.79 8.66 44 RCVD_IN_VALIDITY_SAFE 17836 7.05 1.77 8.61 45 TooManyTo_001 16912 7.99 7.41 8.16 46 T_TooManySym_01 16881 7.11 3.62 8.15 47 TR_XM_DKIM_Undo 16761 14.73 37.15 8.09 48 RCVD_IN_VALIDITY_CERTIFIED 15958 6.17 1.00 7.70 49 TR_XM_DK_Bayes 15774 5.98 0.45 7.62 50 XM_SendGrid 15581 8.47 11.66 7.52 51 TR_XM_DK_Bayes1 15472 5.86 0.43 7.47 52 LotsOfNums_01 15326 7.21 6.55 7.40 53 TR_XM_DK_Bayes2 14162 5.35 0.34 6.84 54 TR_XM_UnparsRelay 14136 8.59 14.56 6.82 55 LOTS_OF_MONEY 12976 7.54 11.84 6.26 56 HTML_IMAGE_RATIO_04 12868 6.17 6.05 6.21 57 XM_H_Trusted_IP 12176 4.54 0.00 5.88 58 XMStrtUSub 12118 5.42 3.97 5.85 59 BOTNET_IPINHOSTNAME 11731 7.97 15.76 5.66 60 XMSubMetaSx_00 11676 5.86 6.63 5.64 61 MPART_ALT_DIFF 11383 6.31 9.07 5.50 62 TM2_M_URI_OPT_OUT 11116 5.15 4.41 5.37 63 XM_B_SpammyWords3 10391 6.80 12.81 5.02 64 XMSexyCombo_05 10316 6.09 9.84 4.98 65 IN_ZIMBRA_NJ_WHITELIST 10263 3.83 0.05 4.95 66 TR_DCC_Bayes_99 9895 9.24 24.32 4.78 67 TR_XM_DK_SendGrid 9852 5.19 6.67 4.76 68 XM_H_Long_From01 9831 4.80 4.97 4.75 69 BAYES_40 9761 4.12 2.10 4.71 70 MIME_QP_LONG_LINE 9375 4.30 3.52 4.53 71 HTML_IMAGE_RATIO_06 9007 4.28 4.06 4.35 72 T_TooManySym_02 8993 3.58 1.03 4.34 73 BAYES_20 8975 3.70 1.55 4.33 74 BAYES_80 8926 5.18 8.12 4.31 75 XM_UncommonTLD01 8787 5.50 9.75 4.24 76 XM_B_Phish_Phrases 8620 4.34 4.93 4.16 77 FROM_EXCESS_BASE64 8572 3.68 2.12 4.14 78 XMNumbers 8320 4.18 4.74 4.02 79 BOUNCE_MESSAGE 8272 3.22 0.60 3.99 80 ANY_BOUNCE_MESSAGE 8272 3.22 0.60 3.99 81 TR_XM_SpammyWords4 8155 5.03 8.70 3.94 82 MIME_HTML_ONLY_MULTI 7514 3.71 3.98 3.63 83 INVALID_MSGID 7239 2.75 0.25 3.49 84 T_REMOTE_IMAGE 7165 3.15 2.10 3.46 85 RELAYCOUNTRY_META 7021 7.19 20.02 3.39 86 MSGID_NOFQDN1 6923 2.60 0.11 3.34 87 TR_XM_PhishingBody 6400 3.82 6.29 3.09 88 XMSubNoVowel 6261 2.74 1.77 3.02 89 RCVD_IN_IADB_LISTED 6237 2.80 2.08 3.01 90 TO_MALFORMED 5973 2.23 0.01 2.88 91 DKIM_INVALID 5954 3.35 4.94 2.87 92 BAYES_95 5386 3.08 4.72 2.60 93 RCVD_IN_IADB_SPF 5379 2.41 1.80 2.60 94 RCVD_IN_MSPIKE_H5 5139 2.06 0.63 2.48 95 T_XMDrugObfuBody_14 4982 2.52 2.92 2.41 96 MIME_HTML_MOSTLY 4867 3.48 7.28 2.35 97 RCVD_IN_IADB_SENDERID 4797 2.16 1.65 2.32 98 XM_PDF 4797 1.88 0.39 2.32 99 TVD_RCVD_IP 4747 1.84 0.31 2.29 100 HTML_IMAGE_RATIO_08 4664 2.24 2.21 2.25 101 RCVD_IN_IADB_DK 4639 2.11 1.66 2.24 102 MAILING_LIST_MULTI 4519 2.39 3.09 2.18 103 IN_HORDE_ADDRESS_BOOK 4423 1.66 0.08 2.14 104 HTML_MIME_NO_HTML_TAG 4375 2.35 3.15 2.11 105 TR_XM_SpammyWords2 4372 4.23 11.38 2.11 106 URI_NOVOWEL 4230 2.41 3.64 2.04 107 XM_B_SpammyTLD 4221 2.41 3.65 2.04 108 XMSexyCombo_01 4219 2.07 2.18 2.04 109 TR_XM_SB_Phish 4058 1.79 1.20 1.96 110 XMSubPhish11 4015 1.75 1.11 1.94 111 BAYES_05 3949 1.64 0.75 1.91 112 XMBSHREFv2 3898 1.49 0.16 1.88 113 RCVD_IN_IADB_VOUCHED 3893 1.70 1.09 1.88 114 TVD_SPACE_RATIO_MINFP 3623 1.44 0.40 1.75 115 XMStockSpam_06 3610 1.70 1.53 1.74 116 BOTNET 3540 4.39 13.44 1.71 117 XM_CamelCaseFrm001 3474 1.99 3.05 1.68 118 XM_GoogleGroups 3413 2.18 3.99 1.65 119 TR_XM_SpammyWords5 3348 2.23 4.29 1.62 120 HTML_IMAGE_ONLY_20 3311 1.83 2.62 1.60 121 TR_XM_SpammyRelay 3249 4.25 13.32 1.57 122 XM_DK_Undo_01 3241 1.72 2.25 1.56 123 TooManyTo_002 3130 1.31 0.63 1.51 124 XMGappySubj_01 3017 1.18 0.24 1.46 125 DIET_1 2966 1.55 1.96 1.43 126 UNTRUSTED_Relay 2899 3.60 11.03 1.40 127 URI_HEX 2842 1.45 1.70 1.37 128 XMBdyGiftCard01 2820 1.34 1.29 1.36 129 TR_Symld_Words 2777 1.46 1.84 1.34 130 HTML_FONT_FACE_BAD 2733 1.20 0.78 1.32 131 TR_XM_MaxUnsub 2701 2.05 4.57 1.30 132 T_XMDrugObfuBody_08 2678 1.81 3.54 1.29 133 RCVD_IN_BL_SPAMCOP_NET 2639 3.89 12.71 1.27 134 TVD_SPACE_RATIO 2577 0.98 0.10 1.24 135 SUBJ_ALL_CAPS 2448 1.48 2.50 1.18 136 RCVD_IN_IADB_OPTIN 2440 1.09 0.80 1.18 137 T_TooManySym_03 2397 0.96 0.27 1.16 138 TM2_M_VERY_LONG_WORD 2329 1.40 2.35 1.12 139 XMSolicitRefs_0 2266 0.95 0.45 1.09 140 XM_SPF_SoftFail 2250 1.82 4.32 1.09 141 XMDiploma_00 2222 1.26 1.87 1.07 142 XMBrknScrpt_02 2205 1.32 2.18 1.06 143 TooManyTo_003 2199 0.94 0.54 1.06 144 RELAYCOUNTRY_CA 2132 2.40 7.02 1.03 145 SHORT_URI_3 2126 0.89 0.43 1.03 146 XM_B_Investor 2104 1.74 4.20 1.02 147 XM_B_Phish66 2094 1.45 2.93 1.01 148 TR_MetaPhish_Combo_01 2063 0.92 0.65 1.00 149 XM_H_Long_From02 2036 0.93 0.77 0.98 150 DKIM_ADSP_CUSTOM_MED 1992 0.95 0.90 0.96 151 XMSexyCombo_04 1988 0.90 0.68 0.96 152 XMBody_95 1927 0.78 0.25 0.93 153 XMPhish30 1906 1.05 1.49 0.92 154 XM_B_COVIDMETA 1852 1.01 1.42 0.89 155 XM_UB50 1776 1.91 5.47 0.86 156 XM_B_Unsub2 1773 1.08 1.83 0.86 157 T_XMHurry_00 1755 1.05 1.73 0.85 158 KHOP_HELO_FCRDNS 1730 1.15 2.22 0.84 159 XM_ProductURIs 1715 0.82 0.80 0.83 160 XM_B_COPY_HTML 1698 0.86 1.00 0.82 161 HTML_IMAGE_ONLY_24 1694 0.77 0.62 0.82 162 LOW_PRICE 1672 0.75 0.55 0.81 163 XMLngstWrd_00 1671 0.76 0.59 0.81 164 TooManyTo_004 1668 0.73 0.49 0.81 165 XM_B_REG_HTML 1576 0.68 0.40 0.76 166 XM_OfRef6 1531 1.40 3.63 0.74 167 XMPhish14 1447 0.78 1.03 0.70 168 XMLngstWrd_01 1446 0.66 0.53 0.70 169 TooManyTo_005 1385 0.61 0.41 0.67 170 XMHTMLBadTable_001 1377 0.66 0.66 0.66 171 XM_B_SpammyWords4 1373 1.18 2.93 0.66 172 NUMERIC_HTTP_ADDR 1337 0.59 0.41 0.65 173 T_XMDrugObfuBody_00 1323 0.99 2.18 0.64 174 THIS_AD 1318 0.58 0.40 0.64 175 XMSubMetaSxObfu_02 1312 0.60 0.50 0.63 176 TR_MSPIKEBAYES00 1303 0.49 0.03 0.63 177 RDNS_DYNAMIC 1287 0.63 0.66 0.62 178 SHORT_URI_2 1238 0.55 0.39 0.60 179 XMCapTrack 1222 0.79 1.46 0.59 180 USER_IN_WELCOMELIST 1222 0.46 0.00 0.59 181 USER_IN_WHITELIST 1222 0.46 0.00 0.59 182 XMLngstWrd_02 1218 0.56 0.47 0.59 183 NML_ADSP_CUSTOM_MED 1200 0.62 0.77 0.58 184 XMSubMetaI_00 1170 0.69 1.10 0.56 185 XMGenDplmaNmb 1166 0.64 0.89 0.56 186 DATE_IN_PAST_03_06 1159 0.55 0.54 0.56 187 RELAYCOUNTRY_GB 1122 0.59 0.73 0.54 188 PDS_OTHER_BAD_TLD 1118 0.70 1.22 0.54 189 HTTPS_HTTP_MISMATCH 1098 0.66 1.08 0.53 190 T_TooManySym_04 1077 0.44 0.15 0.52 191 DKIM_ADSP_NXDOMAIN 1056 0.46 0.30 0.51 192 FORGED_GMAIL_RCVD 1056 0.58 0.80 0.51 193 HELO_NO_DOMAIN 1028 0.59 0.91 0.50 194 HELO_NODOT 1028 0.59 0.92 0.50 195 XM_H_PHPMailer 1022 0.78 1.77 0.49 196 NO_DNS_FOR_FROM 976 0.48 0.51 0.47 197 XMHTML_After_End 970 0.59 1.02 0.47 198 T_FILL_THIS_FORM_SHORT 964 1.01 2.87 0.47 199 XM_B_DNDMA 922 0.48 0.59 0.45 200 XMLngstWrd_03 919 0.44 0.43 0.44 ----------------------------------------------------------------------