Email: 275619 Autolearn: 0 AvgScore: 2.07 AvgScanTime: 2.66 sec Spam: 66712 Autolearn: 0 AvgScore: 13.15 AvgScanTime: 3.03 sec Ham: 208907 Autolearn: 0 AvgScore: -1.46 AvgScanTime: 2.54 sec Time Spent Running SA: 203.51 hours Time Spent Processing Spam: 56.07 hours Time Spent Processing Ham: 147.45 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 62647 86.09 93.91 83.59 2 DKIM_SIGNED 57906 77.06 86.80 73.96 3 XM_DK_Pass 56282 75.17 84.37 72.23 4 DKIM_VALID 54769 73.49 82.10 70.74 5 RELAYCOUNTRY_US 53197 78.74 79.74 78.42 6 XM_B_Unicode 53043 71.57 79.51 69.03 7 DCC_CHECK 50142 51.43 75.16 43.85 8 XMListUnsubscribeExists 49303 56.44 73.90 50.86 9 XM_B_SpammyWords 46504 50.80 69.71 44.77 10 DKIM_VALID_AU 41322 57.55 61.94 56.15 11 XM_B_Unicode3 29734 43.45 44.57 43.10 12 XM_DK_Undo_02 29489 17.52 44.20 9.00 13 BAYES_50 28374 49.88 42.53 52.23 14 XM_B_SpammyWords2 26263 24.72 39.37 20.04 15 TR_XM_DKIM_Undo 24562 13.91 36.82 6.59 16 LOC_TINY_FONT_1 23912 28.62 35.84 26.31 17 BAYES_99 21658 14.81 32.46 9.17 18 HTML_FONT_LOW_CONTRAST 21635 29.91 32.43 29.11 19 MIME_HTML_ONLY 20794 24.93 31.17 22.93 20 FVGT_m_MULTI_ODD 20627 24.76 30.92 22.80 21 DKIM_VALID_EF 19627 27.78 29.42 27.26 22 RCVD_IN_MSPIKE_WL 17796 28.83 26.68 29.52 23 T_KAM_HTML_FONT_INVALID 17526 18.74 26.27 16.34 24 BAYES_999 16847 12.11 25.25 7.92 25 TR_DCC_Bayes_99 16682 8.48 25.01 3.20 26 DCC_CHECK_NEGATIVE 16556 48.55 24.82 56.13 27 XM_Body_Dirty_Words 15971 15.97 23.94 13.42 28 RCVD_IN_MSPIKE_H2 14598 19.28 21.88 18.44 29 XMSubLong 14381 20.84 21.56 20.61 30 RELAYCOUNTRY_META 14150 7.56 21.21 3.20 31 T_TM2_M_HEADER_IN_MSG 13588 22.64 20.37 23.36 32 XM_Multi_Part_URI 12184 14.78 18.26 13.66 33 RCVD_IN_MSPIKE_H3 10835 15.21 16.24 14.88 34 UNPARSEABLE_RELAY 10349 10.54 15.51 8.95 35 TR_XM_UnparsRelay 9906 8.86 14.85 6.94 36 BOTNET_IPINHOSTNAME 9312 7.51 13.96 5.45 37 TR_XM_SpammyRelay 8926 4.36 13.38 1.48 38 XM_B_SpammyWords3 8862 6.39 13.28 4.18 39 TR_XM_SpammyWords2 8840 4.51 13.25 1.72 40 LOTS_OF_MONEY 8175 9.74 12.25 8.94 41 BOTNET 8167 4.18 12.24 1.60 42 XM_B_Unsub 7881 12.39 11.81 12.57 43 FSL_BULK_SIG 7802 9.52 11.70 8.83 44 XMSexyCombo_05 7433 5.58 11.14 3.80 45 XM_SendGrid 7289 8.61 10.93 7.87 46 MPART_ALT_DIFF 7240 7.47 10.85 6.39 47 TR_XM_SpammyWords4 6826 6.22 10.23 4.94 48 UNTRUSTED_Relay 6817 3.30 10.22 1.09 49 RCVD_IN_BL_SPAMCOP_NET 6800 3.21 10.19 0.99 50 RCVD_IN_MSPIKE_H4 6750 11.65 10.12 12.14 51 XM_UncommonTLD01 6672 5.64 10.00 4.25 52 HTML_IMAGE_RATIO_02 6650 7.82 9.97 7.13 53 XM_Evil_Numbers_Gen 5303 8.32 7.95 8.44 54 BAYES_80 5264 5.26 7.89 4.43 55 RELAYCOUNTRY_CA 5191 2.69 7.78 1.06 56 XMSubMetaSx_00 4767 5.08 7.15 4.41 57 MIME_HTML_ONLY_MULTI 4619 4.78 6.92 4.09 58 TooManyTo_001 4479 7.43 6.71 7.66 59 BAYES_60 4406 9.42 6.60 10.32 60 XM_H_Long_From01 4258 5.26 6.38 4.90 61 TR_XM_DK_SendGrid 4112 5.47 6.16 5.24 62 LotsOfNums_01 4083 8.42 6.12 9.15 63 TR_XM_SPAMCOP 3960 1.61 5.94 0.23 64 TR_XM_PhishingBody 3714 3.38 5.57 2.68 65 TM2_M_VERY_LONG_WORD 3667 2.44 5.50 1.47 66 XMStrtUSub 3655 4.94 5.48 4.77 67 MIME_HTML_MOSTLY 3588 3.72 5.38 3.20 68 RCVD_IN_MSPIKE_BL 3405 1.69 5.10 0.59 69 TR_XM_MSPIKECOMBO 3393 1.68 5.09 0.59 70 XM_UB50 3384 1.76 5.07 0.70 71 XM_B_Phish_Phrases 3307 4.06 4.96 3.77 72 DKIM_INVALID 3137 3.58 4.70 3.22 73 XM_SPF_SoftFail 3135 2.05 4.70 1.21 74 HTML_MIME_NO_HTML_TAG 3093 2.82 4.64 2.24 75 TM2_M_URI_OPT_OUT 3079 5.07 4.62 5.22 76 TR_XM_SpammyWords5 3046 2.19 4.57 1.43 77 BAYES_95 3020 3.11 4.53 2.66 78 HTML_IMAGE_RATIO_04 3019 4.94 4.53 5.07 79 XM_B_Investor 2623 1.77 3.93 1.08 80 XM_GoogleGroups 2588 2.14 3.88 1.58 81 SpammyFromTLD_01 2508 1.29 3.76 0.50 82 XMLngstWrd_00 2478 1.79 3.71 1.18 83 MIME_QP_LONG_LINE 2476 5.15 3.71 5.60 84 TR_XM_MaxUnsub 2437 1.88 3.65 1.31 85 HTML_TITLE_SUBJ_DIFF 2392 1.25 3.59 0.50 86 SpammyFromTLD_02 2387 1.00 3.58 0.18 87 HTML_IMAGE_RATIO_06 2375 3.20 3.56 3.08 88 XMLngstWrd_01 2362 1.68 3.54 1.09 89 XMLngstWrd_02 2314 1.60 3.47 1.00 90 KHOP_HELO_FCRDNS 2312 1.43 3.47 0.78 91 HTML_IMAGE_ONLY_32 2297 1.37 3.44 0.70 92 XMLngstWrd_03 2293 1.51 3.44 0.90 93 T_XMDrugObfuBody_14 2268 2.87 3.40 2.70 94 XMNumbers 2266 4.15 3.40 4.39 95 XMLngstWrd_04 2261 1.44 3.39 0.82 96 XM_B_SpammyTLD 2255 2.18 3.38 1.80 97 UPPERCASE_75_100 2243 1.16 3.36 0.45 98 TR_XM_SpammyWords3 2233 1.03 3.35 0.29 99 T_FILL_THIS_FORM_SHORT 2220 1.27 3.33 0.61 100 XM_OfRef6 2201 1.44 3.30 0.84 101 T_REMOTE_IMAGE 2102 3.34 3.15 3.40 102 XM_DIRTYINTL 2027 0.91 3.04 0.23 103 URI_NOVOWEL 1969 2.67 2.95 2.58 104 TR_XM_PHPDW 1947 1.06 2.92 0.46 105 XMBody_17 1931 1.00 2.89 0.40 106 XMSexyCombo_01 1891 1.63 2.83 1.24 107 XMDiploma_00 1887 1.41 2.83 0.96 108 TR_XM_PHPForged 1832 0.96 2.75 0.39 109 XM_B_SpammyWords4 1815 1.02 2.72 0.47 110 TR_XM_FormFill2 1815 0.95 2.72 0.39 111 XM_H_PHPOS 1800 0.94 2.70 0.38 112 TR_XM_BayesRelay 1786 0.66 2.68 0.01 113 XM_CamelCaseFrm001 1760 1.88 2.64 1.63 114 XM_B_Phish66 1755 1.44 2.63 1.06 115 T_TooManySym_01 1750 6.36 2.62 7.56 116 SUBJ_ALL_CAPS 1739 1.92 2.61 1.70 117 RCVD_IN_VALIDITY_SAFE 1656 6.68 2.48 8.03 118 ALL_TRUSTED 1597 15.05 2.39 19.09 119 T_XMDrugObfuBody_08 1559 1.46 2.34 1.18 120 RCVD_IN_MSPIKE_L3 1548 0.91 2.32 0.46 121 URIBL_DBL_SPAM 1517 0.56 2.27 0.02 122 URI_HEX 1479 1.63 2.22 1.44 123 BAYES_40 1472 4.17 2.21 4.80 124 RCVD_IN_RP_SAFE 1470 6.02 2.20 7.24 125 TR_XM_FormFill 1462 0.54 2.19 0.01 126 RCVD_IN_MSPIKE_L5 1461 0.54 2.19 0.01 127 T_XMHurry_00 1415 0.97 2.12 0.60 128 XM_DK_Undo_01 1391 1.55 2.09 1.38 129 BOTNET_NORDNS 1342 0.50 2.01 0.01 130 TR_XM_NoHeaderRelay 1299 0.57 1.95 0.13 131 USER_IN_DEF_DKIM_WL 1298 12.07 1.95 15.30 132 RCVD_IN_IADB_LISTED 1276 3.98 1.91 4.64 133 XM_UB99 1241 0.45 1.86 0.00 134 PDS_OTHER_BAD_TLD 1240 0.77 1.86 0.43 135 MAILING_LIST_MULTI 1230 1.87 1.84 1.88 136 FROM_EXCESS_BASE64 1217 2.98 1.82 3.35 137 XMBrknScrpt_02 1196 1.05 1.79 0.81 138 DIET_1 1181 0.83 1.77 0.53 139 HTML_IMAGE_RATIO_08 1159 1.97 1.74 2.04 140 XM_URI_RBL 1148 0.57 1.72 0.20 141 RCVD_IN_VALIDITY_CERTIFIED 1147 5.86 1.72 7.18 142 MPART_ALT_DIFF_COUNT 1145 0.80 1.72 0.50 143 XM_B_Unsub2 1119 1.33 1.68 1.22 144 XMStockSpam_06 1097 1.04 1.64 0.84 145 BAYES_20 1092 2.76 1.64 3.12 146 TR_XM_INV_DKIM 1084 0.93 1.62 0.71 147 NO_DNS_FOR_FROM 1075 0.72 1.61 0.44 148 DKIM_ADSP_NXDOMAIN 1068 0.80 1.60 0.54 149 RCVD_IN_IADB_SPF 1060 3.43 1.59 4.02 150 XM_Body_Dirty_Words_01 1053 0.52 1.58 0.19 151 RELAYCOUNTRY_IN 1052 0.41 1.58 0.04 152 TR_XM_MaxWHORU 1050 0.62 1.57 0.32 153 XM_B_COVIDMETA 1036 1.06 1.55 0.90 154 URIBL_BLACK 1025 0.39 1.54 0.02 155 XM_H_PHPMailer 980 0.80 1.47 0.59 156 RCVD_IN_IADB_DK 972 2.96 1.46 3.44 157 RCVD_IN_IADB_SENDERID 969 3.06 1.45 3.57 158 T_XMDrugObfuBody_00 968 0.91 1.45 0.74 159 RCVD_IN_RP_CERTIFIED 960 5.27 1.44 6.49 160 XM_UB999 935 0.34 1.40 0.00 161 XMPhish30 928 0.96 1.39 0.82 162 BAYES_00 902 8.96 1.35 11.39 163 TR_XM_SB_Phish 895 1.73 1.34 1.85 164 XMSubPhish11 886 1.70 1.33 1.82 165 TR_Mismatch_TLD_02 881 0.40 1.32 0.10 166 SUBJ_DOLLARS 871 0.54 1.31 0.29 167 FROM_SUSPICIOUS_NTLD 869 0.38 1.30 0.09 168 HK_RANDOM_REPLYTO 865 0.40 1.30 0.12 169 XM_H_Undi_Recip 854 0.41 1.28 0.13 170 FROM_SUSPICIOUS_NTLD_FP 854 0.37 1.28 0.08 171 RCVD_IN_PSBL 823 0.43 1.23 0.17 172 JH_SPAMMY_HEADERS 818 0.30 1.23 0.00 173 HTML_TAG_BALANCE_BODY 817 0.70 1.22 0.53 174 MIME_CHARSET_FARAWAY 815 0.39 1.22 0.13 175 XMBdyGiftCard01 813 1.15 1.22 1.13 176 TR_Mismatch_TLD_01 811 0.52 1.22 0.29 177 SHOPIFY_IMG_NOT_RCVD_SFY 801 0.47 1.20 0.23 178 RELAYCOUNTRY_AU 795 0.44 1.19 0.20 179 RELAYCOUNTRY_CN 793 0.34 1.19 0.07 180 TR_LOTS_OF_MONEY3 774 0.46 1.16 0.23 181 XMSubNoVowel 774 1.84 1.16 2.06 182 HTML_IMAGE_ONLY_20 772 1.04 1.16 1.00 183 RELAYCOUNTRY_FR 744 0.39 1.12 0.16 184 TR_Symld_Words 743 1.92 1.11 2.18 185 XM_UB60 726 0.31 1.09 0.06 186 XMSubMetaI_00 709 0.56 1.06 0.40 187 TR_BOTNET_NEGATE 709 0.44 1.06 0.24 188 XM_ProductURIs 700 0.78 1.05 0.69 189 DKIM_ADSP_CUSTOM_MED 689 0.93 1.03 0.90 190 HTTPS_HTTP_MISMATCH 684 0.70 1.03 0.59 191 XMReplyNow 680 0.32 1.02 0.09 192 RCVD_IN_IADB_VOUCHED 657 2.52 0.98 3.00 193 MONEY_NOHTML 656 0.29 0.98 0.07 194 XMGenDplmaNmb 655 0.52 0.98 0.37 195 HTML_FONT_FACE_BAD 648 1.01 0.97 1.03 196 LongTLD 648 0.37 0.97 0.18 197 XM_H_PHPOS_M 645 0.33 0.97 0.12 198 NML_ADSP_CUSTOM_MED 634 0.68 0.95 0.60 199 SHORT_URI_2 623 1.25 0.93 1.35 200 TR_XM_COVIDMETA4 621 0.36 0.93 0.17 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 174635 86.09 93.91 83.59 2 RELAYCOUNTRY_US 163829 78.74 79.74 78.42 3 DKIM_SIGNED 154499 77.06 86.80 73.96 4 XM_DK_Pass 150899 75.17 84.37 72.23 5 DKIM_VALID 147776 73.49 82.10 70.74 6 XM_B_Unicode 144218 71.57 79.51 69.03 7 DKIM_VALID_AU 117307 57.55 61.94 56.15 8 DCC_CHECK_NEGATIVE 117261 48.55 24.82 56.13 9 BAYES_50 109104 49.88 42.53 52.23 10 XMListUnsubscribeExists 106250 56.44 73.90 50.86 11 XM_B_SpammyWords 93520 50.80 69.71 44.77 12 DCC_CHECK 91600 51.43 75.16 43.85 13 XM_B_Unicode3 90035 43.45 44.57 43.10 14 RCVD_IN_MSPIKE_WL 61677 28.83 26.68 29.52 15 HTML_FONT_LOW_CONTRAST 60812 29.91 32.43 29.11 16 DKIM_VALID_EF 56944 27.78 29.42 27.26 17 LOC_TINY_FONT_1 54957 28.62 35.84 26.31 18 T_TM2_M_HEADER_IN_MSG 48800 22.64 20.37 23.36 19 MIME_HTML_ONLY 47911 24.93 31.17 22.93 20 FVGT_m_MULTI_ODD 47628 24.76 30.92 22.80 21 XMSubLong 43047 20.84 21.56 20.61 22 XM_B_SpammyWords2 41867 24.72 39.37 20.04 23 ALL_TRUSTED 39890 15.05 2.39 19.09 24 RCVD_IN_MSPIKE_H2 38531 19.28 21.88 18.44 25 T_KAM_HTML_FONT_INVALID 34133 18.74 26.27 16.34 26 USER_IN_DEF_DKIM_WL 31963 12.07 1.95 15.30 27 RCVD_IN_MSPIKE_H3 31086 15.21 16.24 14.88 28 XM_Multi_Part_URI 28545 14.78 18.26 13.66 29 XM_Body_Dirty_Words 28032 15.97 23.94 13.42 30 XM_B_Unsub 26270 12.39 11.81 12.57 31 RCVD_IN_MSPIKE_H4 25368 11.65 10.12 12.14 32 BAYES_00 23803 8.96 1.35 11.39 33 BAYES_60 21549 9.42 6.60 10.32 34 XM_DKIMWhitelistDomains 19767 7.18 0.03 9.46 35 BAYES_99 19149 14.81 32.46 9.17 36 LotsOfNums_01 19115 8.42 6.12 9.15 37 XM_DK_Undo_02 18807 17.52 44.20 9.00 38 UNPARSEABLE_RELAY 18689 10.54 15.51 8.95 39 LOTS_OF_MONEY 18683 9.74 12.25 8.94 40 FSL_BULK_SIG 18448 9.52 11.70 8.83 41 XM_Evil_Numbers_Gen 17634 8.32 7.95 8.44 42 RCVD_IN_VALIDITY_SAFE 16769 6.68 2.48 8.03 43 BAYES_999 16538 12.11 25.25 7.92 44 XM_SendGrid 16434 8.61 10.93 7.87 45 TooManyTo_001 15993 7.43 6.71 7.66 46 TR_XM_DK_Bayes 15838 5.96 0.87 7.58 47 T_TooManySym_01 15786 6.36 2.62 7.56 48 TR_XM_DK_Bayes1 15497 5.83 0.85 7.42 49 RCVD_IN_RP_SAFE 15116 6.02 2.20 7.24 50 RCVD_IN_VALIDITY_CERTIFIED 15003 5.86 1.72 7.18 51 HTML_IMAGE_RATIO_02 14890 7.82 9.97 7.13 52 TR_XM_UnparsRelay 14507 8.86 14.85 6.94 53 TR_XM_DK_Bayes2 13837 5.19 0.71 6.62 54 TR_XM_DKIM_Undo 13766 13.91 36.82 6.59 55 RCVD_IN_RP_CERTIFIED 13557 5.27 1.44 6.49 56 MPART_ALT_DIFF 13343 7.47 10.85 6.39 57 MIME_QP_LONG_LINE 11705 5.15 3.71 5.60 58 BOTNET_IPINHOSTNAME 11395 7.51 13.96 5.45 59 TR_XM_DK_SendGrid 10955 5.47 6.16 5.24 60 IN_ZIMBRA_NJ_WHITELIST 10909 3.97 0.05 5.22 61 TM2_M_URI_OPT_OUT 10899 5.07 4.62 5.22 62 HTML_IMAGE_RATIO_04 10584 4.94 4.53 5.07 63 TR_XM_SpammyWords4 10313 6.22 10.23 4.94 64 XM_H_Long_From01 10226 5.26 6.38 4.90 65 BAYES_40 10027 4.17 2.21 4.80 66 XMStrtUSub 9966 4.94 5.48 4.77 67 RCVD_IN_IADB_LISTED 9701 3.98 1.91 4.64 68 T_TooManySym_02 9444 3.56 0.56 4.52 69 BAYES_80 9245 5.26 7.89 4.43 70 XMSubMetaSx_00 9222 5.08 7.15 4.41 71 XMNumbers 9164 4.15 3.40 4.39 72 XM_UncommonTLD01 8878 5.64 10.00 4.25 73 XM_B_SpammyWords3 8742 6.39 13.28 4.18 74 ANY_BOUNCE_MESSAGE 8571 3.26 0.63 4.10 75 BOUNCE_MESSAGE 8570 3.26 0.63 4.10 76 MIME_HTML_ONLY_MULTI 8550 4.78 6.92 4.09 77 RCVD_IN_IADB_SPF 8394 3.43 1.59 4.02 78 XM_H_Trusted_IP 8082 2.93 0.00 3.87 79 XMSexyCombo_05 7938 5.58 11.14 3.80 80 XM_B_Phish_Phrases 7885 4.06 4.96 3.77 81 INVALID_MSGID 7489 2.76 0.17 3.58 82 RCVD_IN_IADB_SENDERID 7452 3.06 1.45 3.57 83 RCVD_IN_IADB_DK 7196 2.96 1.46 3.44 84 T_REMOTE_IMAGE 7107 3.34 3.15 3.40 85 MSGID_NOFQDN1 7062 2.57 0.04 3.38 86 FROM_EXCESS_BASE64 7005 2.98 1.82 3.35 87 DKIM_INVALID 6723 3.58 4.70 3.22 88 RELAYCOUNTRY_META 6687 7.56 21.21 3.20 89 TR_DCC_Bayes_99 6685 8.48 25.01 3.20 90 MIME_HTML_MOSTLY 6677 3.72 5.38 3.20 91 BAYES_20 6520 2.76 1.64 3.12 92 HTML_IMAGE_RATIO_06 6438 3.20 3.56 3.08 93 RCVD_IN_IADB_VOUCHED 6275 2.52 0.98 3.00 94 TO_MALFORMED 6021 2.19 0.02 2.88 95 T_XMDrugObfuBody_14 5645 2.87 3.40 2.70 96 TR_XM_PhishingBody 5591 3.38 5.57 2.68 97 BAYES_95 5547 3.11 4.53 2.66 98 XM_PDF 5483 2.07 0.35 2.62 99 URI_NOVOWEL 5381 2.67 2.95 2.58 100 RCVD_IN_MSPIKE_H5 5223 1.97 0.32 2.50 101 HTML_MIME_NO_HTML_TAG 4683 2.82 4.64 2.24 102 TR_Symld_Words 4546 1.92 1.11 2.18 103 TVD_RCVD_IP 4517 1.68 0.15 2.16 104 IN_HORDE_ADDRESS_BOOK 4350 1.60 0.09 2.08 105 XMSubNoVowel 4303 1.84 1.16 2.06 106 HTML_IMAGE_RATIO_08 4270 1.97 1.74 2.04 107 RCVD_IN_IADB_OPTIN 3983 1.64 0.81 1.91 108 BAYES_05 3953 1.62 0.77 1.89 109 MAILING_LIST_MULTI 3933 1.87 1.84 1.88 110 TR_XM_SB_Phish 3861 1.73 1.34 1.85 111 XMSubPhish11 3800 1.70 1.33 1.82 112 XM_B_SpammyTLD 3766 2.18 3.38 1.80 113 TR_XM_SpammyWords2 3587 4.51 13.25 1.72 114 SUBJ_ALL_CAPS 3544 1.92 2.61 1.70 115 XMBSHREFv2 3497 1.31 0.18 1.67 116 XM_CamelCaseFrm001 3413 1.88 2.64 1.63 117 BOTNET 3352 4.18 12.24 1.60 118 XM_GoogleGroups 3297 2.14 3.88 1.58 119 TVD_SPACE_RATIO 3181 1.19 0.16 1.52 120 TR_XM_SpammyRelay 3088 4.36 13.38 1.48 121 TM2_M_VERY_LONG_WORD 3069 2.44 5.50 1.47 122 URI_HEX 3003 1.63 2.22 1.44 123 XMGappySubj_01 2996 1.13 0.18 1.43 124 TR_XM_SpammyWords5 2991 2.19 4.57 1.43 125 XM_DK_Undo_01 2881 1.55 2.09 1.38 126 SHORT_URI_2 2816 1.25 0.93 1.35 127 TooManyTo_002 2752 1.16 0.67 1.32 128 TR_XM_MaxUnsub 2741 1.88 3.65 1.31 129 TVD_SPACE_RATIO_MINFP 2712 1.05 0.27 1.30 130 XMSexyCombo_01 2591 1.63 2.83 1.24 131 XM_B_Unsub2 2545 1.33 1.68 1.22 132 TR_MetaPhish_Combo_01 2537 1.11 0.79 1.21 133 XM_SPF_SoftFail 2525 2.05 4.70 1.21 134 XMLngstWrd_00 2466 1.79 3.71 1.18 135 T_XMDrugObfuBody_08 2455 1.46 2.34 1.18 136 XMBdyGiftCard01 2353 1.15 1.22 1.13 137 XM_D_tchamptons_WL 2287 0.86 0.12 1.09 138 UNTRUSTED_Relay 2283 3.30 10.22 1.09 139 XMLngstWrd_01 2275 1.68 3.54 1.09 140 XM_B_Investor 2265 1.77 3.93 1.08 141 RELAYCOUNTRY_CA 2222 2.69 7.78 1.06 142 XM_B_Phish66 2205 1.44 2.63 1.06 143 XMBody_95 2173 0.83 0.19 1.04 144 XM_H_Long_From02 2172 0.99 0.82 1.04 145 T_TooManySym_03 2165 0.83 0.19 1.04 146 HTML_FONT_FACE_BAD 2142 1.01 0.97 1.03 147 HTML_IMAGE_ONLY_20 2094 1.04 1.16 1.00 148 XMLngstWrd_02 2088 1.60 3.47 1.00 149 RCVD_IN_BL_SPAMCOP_NET 2058 3.21 10.19 0.99 150 XMDiploma_00 2000 1.41 2.83 0.96 151 XMNoVowels 1958 0.82 0.44 0.94 152 XM_B_COVIDMETA 1888 1.06 1.55 0.90 153 XMLngstWrd_03 1875 1.51 3.44 0.90 154 DKIM_ADSP_CUSTOM_MED 1874 0.93 1.03 0.90 155 TooManyTo_003 1848 0.80 0.53 0.88 156 XM_OfRef6 1759 1.44 3.30 0.84 157 XMStockSpam_06 1759 1.04 1.64 0.84 158 XMLngstWrd_04 1718 1.44 3.39 0.82 159 XMPhish30 1710 0.96 1.39 0.82 160 XMBrknScrpt_02 1698 1.05 1.79 0.81 161 XM_B_COPY_HTML 1644 0.80 0.84 0.79 162 KHOP_HELO_FCRDNS 1628 1.43 3.47 0.78 163 T_XMDrugObfuBody_00 1541 0.91 1.45 0.74 164 TM2_M_A_HREF_HREF 1512 0.74 0.80 0.72 165 TR_XM_INV_DKIM 1488 0.93 1.62 0.71 166 HTML_IMAGE_ONLY_32 1470 1.37 3.44 0.70 167 XM_UB50 1466 1.76 5.07 0.70 168 XM_ProductURIs 1445 0.78 1.05 0.69 169 RDNS_DYNAMIC 1402 0.66 0.61 0.67 170 XMHTMLBadTable_001 1361 0.65 0.66 0.65 171 TooManyTo_004 1349 0.60 0.48 0.65 172 HELO_NODOT 1301 0.66 0.80 0.62 173 HELO_NO_DOMAIN 1301 0.66 0.78 0.62 174 T_FILL_THIS_FORM_SHORT 1271 1.27 3.33 0.61 175 USER_IN_WELCOMELIST 1255 0.46 0.00 0.60 176 USER_IN_WHITELIST 1255 0.46 0.00 0.60 177 NML_ADSP_CUSTOM_MED 1253 0.68 0.95 0.60 178 T_XMHurry_00 1247 0.97 2.12 0.60 179 XM_B_REG_HTML 1245 0.55 0.39 0.60 180 RCVD_IN_MSPIKE_BL 1240 1.69 5.10 0.59 181 HTTPS_HTTP_MISMATCH 1238 0.70 1.03 0.59 182 TR_XM_MSPIKECOMBO 1232 1.68 5.09 0.59 183 XM_H_PHPMailer 1227 0.80 1.47 0.59 184 URI_TRY_3LD 1191 0.60 0.70 0.57 185 TooManyTo_005 1160 0.52 0.42 0.56 186 RELAYCOUNTRY_GB 1155 0.62 0.81 0.55 187 TR_MSPIKEBAYES00 1151 0.42 0.02 0.55 188 FORGED_GMAIL_RCVD 1150 0.64 0.90 0.55 189 DKIM_ADSP_NXDOMAIN 1130 0.80 1.60 0.54 190 DIET_1 1115 0.83 1.77 0.53 191 HTML_TAG_BALANCE_BODY 1107 0.70 1.22 0.53 192 NUMERIC_HTTP_ADDR 1100 0.55 0.63 0.53 193 XMSubMetaSxObfu_02 1078 0.48 0.38 0.52 194 T_Symld_Words_02 1067 0.53 0.59 0.51 195 SpammyFromTLD_01 1052 1.29 3.76 0.50 196 MPART_ALT_DIFF_COUNT 1051 0.80 1.72 0.50 197 HTML_TITLE_SUBJ_DIFF 1043 1.25 3.59 0.50 198 DATE_IN_PAST_03_06 993 0.55 0.80 0.48 199 XM_B_SpammyWords4 991 1.02 2.72 0.47 200 XM_B_DNDMA 976 0.46 0.43 0.47 ----------------------------------------------------------------------