Email: 265805 Autolearn: 0 AvgScore: 1.78 AvgScanTime: 2.57 sec Spam: 63392 Autolearn: 0 AvgScore: 13.36 AvgScanTime: 2.92 sec Ham: 202413 Autolearn: 0 AvgScore: -1.84 AvgScanTime: 2.46 sec Time Spent Running SA: 189.47 hours Time Spent Processing Spam: 51.37 hours Time Spent Processing Ham: 138.10 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 59766 85.95 94.28 83.34 2 DKIM_SIGNED 55082 75.08 86.89 71.38 3 XM_DK_Pass 52724 73.36 83.17 70.29 4 DKIM_VALID 51356 71.68 81.01 68.76 5 RELAYCOUNTRY_US 50345 77.98 79.42 77.53 6 XM_B_Unicode 48518 71.06 76.54 69.35 7 XMListUnsubscribeExists 47458 54.86 74.86 48.59 8 DCC_CHECK 46114 51.82 72.74 45.27 9 XM_B_SpammyWords 41661 49.43 65.72 44.32 10 DKIM_VALID_AU 40099 58.12 63.26 56.51 11 BAYES_50 28435 50.53 44.86 52.30 12 XM_B_Unicode3 28190 44.50 44.47 44.51 13 XM_DK_Undo_02 27272 17.00 43.02 8.85 14 LOC_TINY_FONT_1 22478 28.85 35.46 26.78 15 TR_XM_DKIM_Undo 22402 13.68 35.34 6.90 16 XM_B_SpammyWords2 22218 23.84 35.05 20.33 17 FVGT_m_MULTI_ODD 21076 25.80 33.25 23.47 18 HTML_FONT_LOW_CONTRAST 21026 31.40 33.17 30.84 19 BAYES_99 19713 14.53 31.10 9.34 20 MIME_HTML_ONLY 18496 24.97 29.18 23.65 21 DKIM_VALID_EF 18274 27.64 28.83 27.26 22 DCC_CHECK_NEGATIVE 17258 48.14 27.22 54.69 23 RCVD_IN_MSPIKE_WL 16505 29.56 26.04 30.67 24 T_KAM_HTML_FONT_INVALID 15847 18.41 25.00 16.35 25 BAYES_999 15403 12.08 24.30 8.25 26 TR_DCC_Bayes_99 15275 8.86 24.10 4.08 27 XM_Body_Dirty_Words 15113 15.90 23.84 13.41 28 RCVD_IN_MSPIKE_H2 14865 19.80 23.45 18.66 29 T_TM2_M_HEADER_IN_MSG 14049 23.29 22.16 23.65 30 RELAYCOUNTRY_META 13879 7.86 21.89 3.46 31 XMSubLong 13375 22.39 21.10 22.80 32 XM_Multi_Part_URI 12082 14.48 19.06 13.04 33 BOTNET_IPINHOSTNAME 10002 7.88 15.78 5.41 34 RCVD_IN_MSPIKE_H3 9969 15.35 15.73 15.24 35 MPART_ALT_DIFF 9497 8.41 14.98 6.36 36 UNPARSEABLE_RELAY 8539 10.15 13.47 9.10 37 BOTNET 8502 4.42 13.41 1.60 38 TR_XM_UnparsRelay 8379 8.72 13.22 7.31 39 TR_XM_SpammyRelay 8057 4.09 12.71 1.39 40 XM_UncommonTLD01 7555 6.08 11.92 4.25 41 XM_B_Unsub 7430 12.29 11.72 12.47 42 TR_XM_SpammyWords2 7285 4.30 11.49 2.05 43 XM_B_SpammyWords3 7229 6.24 11.40 4.62 44 UNTRUSTED_Relay 7212 3.78 11.38 1.39 45 XMSexyCombo_05 7117 6.20 11.23 4.63 46 FSL_BULK_SIG 6895 9.88 10.88 9.57 47 HTML_IMAGE_RATIO_02 6442 7.78 10.16 7.03 48 XM_SendGrid 6399 8.64 10.09 8.19 49 RCVD_IN_MSPIKE_H4 6284 12.24 9.91 12.96 50 RCVD_IN_BL_SPAMCOP_NET 6204 3.20 9.79 1.14 51 LOTS_OF_MONEY 5844 7.68 9.22 7.19 52 XMSubMetaSx_00 5756 6.01 9.08 5.05 53 MIME_HTML_ONLY_MULTI 5253 5.27 8.29 4.32 54 TooManyTo_001 5113 8.07 8.07 8.07 55 XM_Evil_Numbers_Gen 5072 8.32 8.00 8.42 56 MIME_HTML_MOSTLY 4905 3.87 7.74 2.66 57 BAYES_80 4692 4.91 7.40 4.14 58 TR_XM_SpammyWords4 4648 5.41 7.33 4.80 59 TM2_M_VERY_LONG_WORD 4644 3.16 7.33 1.86 60 BAYES_60 4397 9.37 6.94 10.13 61 RELAYCOUNTRY_CA 4236 2.32 6.68 0.95 62 HTML_MIME_NO_HTML_TAG 4011 3.43 6.33 2.53 63 XM_GoogleGroups 3976 3.04 6.27 2.02 64 XM_UB50 3891 2.09 6.14 0.82 65 RCVD_IN_MSPIKE_BL 3813 1.82 6.01 0.50 66 TR_XM_MSPIKECOMBO 3808 1.82 6.01 0.50 67 XMLngstWrd_00 3748 2.48 5.91 1.41 68 DKIM_INVALID 3726 3.40 5.88 2.62 69 LotsOfNums_01 3715 7.54 5.86 8.06 70 TR_XM_PhishingBody 3655 3.48 5.77 2.77 71 HTML_TITLE_SUBJ_DIFF 3623 2.01 5.72 0.85 72 XMLngstWrd_01 3565 2.36 5.62 1.33 73 XMLngstWrd_02 3525 2.28 5.56 1.25 74 XMLngstWrd_03 3507 2.21 5.53 1.16 75 TR_XM_DK_SendGrid 3498 5.31 5.52 5.24 76 XMLngstWrd_04 3483 2.15 5.49 1.11 77 HTML_IMAGE_RATIO_04 3383 7.02 5.34 7.55 78 SpammyFromTLD_02 3304 1.43 5.21 0.25 79 UPPERCASE_75_100 3204 1.79 5.05 0.77 80 XM_H_Long_From01 3185 4.84 5.02 4.78 81 TR_XM_SPAMCOP 3109 1.44 4.90 0.36 82 XM_SPF_SoftFail 2974 2.07 4.69 1.25 83 XM_B_Phish_Phrases 2945 4.39 4.65 4.32 84 MIME_QP_LONG_LINE 2875 4.87 4.54 4.97 85 XMStrtUSub 2872 5.47 4.53 5.76 86 TM2_M_URI_OPT_OUT 2869 5.32 4.53 5.56 87 URI_NOVOWEL 2784 2.52 4.39 1.94 88 SpammyFromTLD_01 2720 1.31 4.29 0.38 89 HTML_IMAGE_RATIO_06 2712 3.70 4.28 3.52 90 XMSexyCombo_01 2558 2.25 4.04 1.69 91 BAYES_95 2555 2.98 4.03 2.66 92 TR_XM_MaxUnsub 2498 1.64 3.94 0.92 93 URIBL_DBL_SPAM 2411 0.93 3.80 0.03 94 XM_B_Investor 2304 1.65 3.63 1.03 95 XMNumbers 2250 4.47 3.55 4.76 96 XM_DIRTYINTL 2177 1.03 3.43 0.28 97 TR_XM_SpammyWords3 2174 1.02 3.43 0.26 98 XM_B_SpammyTLD 2174 2.50 3.43 2.21 99 TR_XM_SpammyWords5 2133 2.07 3.36 1.66 100 RCVD_IN_VALIDITY_SAFE 2113 7.00 3.33 8.15 101 T_TooManySym_01 1962 6.43 3.10 7.48 102 T_FILL_THIS_FORM_SHORT 1956 1.12 3.09 0.50 103 T_XMDrugObfuBody_14 1924 2.52 3.04 2.35 104 XM_OfRef6 1906 1.37 3.01 0.85 105 HTML_IMAGE_ONLY_32 1904 1.23 3.00 0.67 106 RELAYCOUNTRY_IN 1835 0.72 2.89 0.04 107 RCVD_IN_RP_SAFE 1817 6.35 2.87 7.45 108 ALL_TRUSTED 1780 15.76 2.81 19.82 109 XM_B_Phish66 1771 1.48 2.79 1.07 110 HTML_IMAGE_RATIO_08 1760 2.58 2.78 2.51 111 TR_XM_PHPDW 1746 0.90 2.75 0.32 112 RCVD_IN_MSPIKE_L3 1624 0.92 2.56 0.41 113 T_XMHurry_00 1600 1.03 2.52 0.57 114 TR_XM_PHPForged 1586 0.81 2.50 0.27 115 TR_XM_FormFill2 1576 0.80 2.49 0.28 116 XM_H_PHPOS 1571 0.79 2.48 0.26 117 JH_SPAMMY_HEADERS 1516 0.57 2.39 0.00 118 XM_CamelCaseFrm001 1493 1.74 2.36 1.55 119 RCVD_IN_VALIDITY_CERTIFIED 1451 6.08 2.29 7.27 120 RCVD_IN_PSBL 1410 0.60 2.22 0.09 121 URI_HEX 1403 1.59 2.21 1.39 122 T_XMDrugObfuBody_08 1389 1.26 2.19 0.97 123 USER_IN_DEF_DKIM_WL 1368 12.35 2.16 15.55 124 URI_PHP_REDIR 1362 0.53 2.15 0.02 125 XMBody_17 1347 0.81 2.12 0.39 126 KHOP_HELO_FCRDNS 1342 1.36 2.12 1.13 127 RCVD_IN_MSPIKE_L5 1322 0.52 2.09 0.02 128 TR_XM_FormFill 1316 0.50 2.08 0.01 129 BAYES_40 1290 4.03 2.03 4.66 130 MAILING_LIST_MULTI 1285 1.90 2.03 1.86 131 XM_B_SpammyWords4 1285 0.86 2.03 0.49 132 BOTNET_NORDNS 1281 0.50 2.02 0.02 133 XMStockSpam_06 1256 1.75 1.98 1.67 134 XM_URI_RBL 1246 0.60 1.97 0.17 135 HTML_IMAGE_ONLY_16 1243 0.66 1.96 0.25 136 T_REMOTE_IMAGE 1242 2.74 1.96 2.99 137 MPART_ALT_DIFF_COUNT 1207 0.98 1.90 0.69 138 RCVD_IN_RP_CERTIFIED 1204 5.51 1.90 6.64 139 TR_XM_SB_Phish 1173 1.65 1.85 1.59 140 RCVD_IN_IADB_LISTED 1140 2.78 1.80 3.09 141 XMSubPhish11 1137 1.62 1.79 1.57 142 PDS_OTHER_BAD_TLD 1122 0.92 1.77 0.65 143 XM_DK_Undo_01 1108 1.42 1.75 1.32 144 T_XMDrugObfuBody_00 1104 0.87 1.74 0.60 145 XM_B_Unsub2 1099 1.06 1.73 0.85 146 XM_UB99 1042 0.39 1.64 0.00 147 XMDiploma_00 1033 1.14 1.63 0.99 148 XMBdyGiftCard01 1023 1.50 1.61 1.46 149 BAYES_20 999 2.76 1.58 3.13 150 RCVD_IN_IADB_SPF 989 2.41 1.56 2.68 151 SUBJ_ALL_CAPS 986 1.23 1.56 1.13 152 RELAYCOUNTRY_AU 983 0.56 1.55 0.25 153 TR_LOTS_OF_MONEY3 979 0.53 1.54 0.21 154 XMPhish30 962 1.11 1.52 0.98 155 LongTLD 955 0.43 1.51 0.09 156 XMBrknScrpt_02 954 1.16 1.50 1.05 157 TR_XM_INV_DKIM 951 0.46 1.50 0.13 158 TR_XM_NoHeaderRelay 948 0.47 1.50 0.14 159 FROM_EXCESS_BASE64 947 2.75 1.49 3.15 160 XM_H_PHPMailer 945 0.74 1.49 0.51 161 TR_XM_BayesRelay 940 0.36 1.48 0.01 162 XMSubNoVowel 909 2.70 1.43 3.10 163 HK_RANDOM_REPLYTO 906 0.47 1.43 0.17 164 XM_Body_Dirty_Words_01 905 0.50 1.43 0.21 165 RCVD_IN_IADB_DK 904 2.11 1.43 2.33 166 URIBL_BLACK 895 0.36 1.41 0.03 167 RCVD_IN_IADB_SENDERID 886 2.18 1.40 2.43 168 FROM_SUSPICIOUS_NTLD 886 0.38 1.40 0.06 169 FROM_SUSPICIOUS_NTLD_FP 864 0.37 1.36 0.06 170 RCVD_IN_MSPIKE_L4 862 0.38 1.36 0.07 171 XM_UB60 835 0.38 1.32 0.08 172 XM_UB999 824 0.31 1.30 0.00 173 HTML_TAG_BALANCE_BODY 822 0.82 1.30 0.67 174 TR_Mismatch_TLD_01 818 0.73 1.29 0.56 175 TR_Symld_Words 778 1.49 1.23 1.57 176 RELAYCOUNTRY_RU 761 0.30 1.20 0.02 177 XMSubMetaSSx_00 758 0.71 1.20 0.55 178 TR_Mismatch_TLD_02 748 0.34 1.18 0.07 179 MIME_CHARSET_FARAWAY 725 0.42 1.14 0.19 180 SHORT_URI_2 722 1.43 1.14 1.53 181 XM_ShortIntro_01 715 0.52 1.13 0.33 182 BAYES_00 710 9.08 1.12 11.57 183 XM_ProductURIs 707 0.92 1.12 0.87 184 RELAYCOUNTRY_FR 706 0.38 1.11 0.15 185 XM_B_COPY_HTML 701 1.00 1.11 0.97 186 RELAYCOUNTRY_CN 699 0.31 1.10 0.07 187 DIET_1 696 0.56 1.10 0.40 188 XM_B_COVIDMETA 682 0.76 1.08 0.66 189 XMReplyNow 664 0.30 1.05 0.06 190 XMSexyCombo_02 660 0.38 1.04 0.17 191 TR_BOTNET_NEGATE 640 0.42 1.01 0.23 192 XMSubMetaI_00 615 0.56 0.97 0.43 193 XMGenDplmaNmb 611 0.54 0.96 0.40 194 SHOPIFY_IMG_NOT_RCVD_SFY 607 0.39 0.96 0.21 195 XM_UB80 604 0.25 0.95 0.04 196 RCVD_IN_IADB_VOUCHED 603 1.70 0.95 1.93 197 CHARSET_FARAWAY_HEADER 592 0.27 0.93 0.06 198 RELAYCOUNTRY_IE 586 0.32 0.92 0.13 199 DKIM_ADSP_CUSTOM_MED 586 0.97 0.92 0.99 200 TR_XM_COVIDMETA4 575 0.38 0.91 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 168686 85.95 94.28 83.34 2 RELAYCOUNTRY_US 156940 77.98 79.42 77.53 3 DKIM_SIGNED 144488 75.08 86.89 71.38 4 XM_DK_Pass 142281 73.36 83.17 70.29 5 XM_B_Unicode 140372 71.06 76.54 69.35 6 DKIM_VALID 139181 71.68 81.01 68.76 7 DKIM_VALID_AU 114383 58.12 63.26 56.51 8 DCC_CHECK_NEGATIVE 110698 48.14 27.22 54.69 9 BAYES_50 105866 50.53 44.86 52.30 10 XMListUnsubscribeExists 98356 54.86 74.86 48.59 11 DCC_CHECK 91625 51.82 72.74 45.27 12 XM_B_Unicode3 90092 44.50 44.47 44.51 13 XM_B_SpammyWords 89714 49.43 65.72 44.32 14 HTML_FONT_LOW_CONTRAST 62431 31.40 33.17 30.84 15 RCVD_IN_MSPIKE_WL 62075 29.56 26.04 30.67 16 DKIM_VALID_EF 55185 27.64 28.83 27.26 17 LOC_TINY_FONT_1 54208 28.85 35.46 26.78 18 MIME_HTML_ONLY 47866 24.97 29.18 23.65 19 T_TM2_M_HEADER_IN_MSG 47862 23.29 22.16 23.65 20 FVGT_m_MULTI_ODD 47513 25.80 33.25 23.47 21 XMSubLong 46143 22.39 21.10 22.80 22 XM_B_SpammyWords2 41153 23.84 35.05 20.33 23 ALL_TRUSTED 40111 15.76 2.81 19.82 24 RCVD_IN_MSPIKE_H2 37764 19.80 23.45 18.66 25 T_KAM_HTML_FONT_INVALID 33088 18.41 25.00 16.35 26 USER_IN_DEF_DKIM_WL 31471 12.35 2.16 15.55 27 RCVD_IN_MSPIKE_H3 30839 15.35 15.73 15.24 28 XM_Body_Dirty_Words 27153 15.90 23.84 13.41 29 XM_Multi_Part_URI 26399 14.48 19.06 13.04 30 RCVD_IN_MSPIKE_H4 26240 12.24 9.91 12.96 31 XM_B_Unsub 25243 12.29 11.72 12.47 32 BAYES_00 23425 9.08 1.12 11.57 33 XM_DKIMWhitelistDomains 21798 8.21 0.02 10.77 34 BAYES_60 20509 9.37 6.94 10.13 35 FSL_BULK_SIG 19368 9.88 10.88 9.57 36 BAYES_99 18913 14.53 31.10 9.34 37 UNPARSEABLE_RELAY 18429 10.15 13.47 9.10 38 XM_DK_Undo_02 17904 17.00 43.02 8.85 39 XM_Evil_Numbers_Gen 17046 8.32 8.00 8.42 40 BAYES_999 16705 12.08 24.30 8.25 41 XM_SendGrid 16576 8.64 10.09 8.19 42 RCVD_IN_VALIDITY_SAFE 16493 7.00 3.33 8.15 43 TooManyTo_001 16331 8.07 8.07 8.07 44 LotsOfNums_01 16317 7.54 5.86 8.06 45 HTML_IMAGE_RATIO_04 15287 7.02 5.34 7.55 46 T_TooManySym_01 15135 6.43 3.10 7.48 47 TR_XM_DK_Bayes 15081 5.84 0.71 7.45 48 RCVD_IN_RP_SAFE 15072 6.35 2.87 7.45 49 TR_XM_UnparsRelay 14805 8.72 13.22 7.31 50 TR_XM_DK_Bayes1 14743 5.71 0.68 7.28 51 RCVD_IN_VALIDITY_CERTIFIED 14714 6.08 2.29 7.27 52 LOTS_OF_MONEY 14563 7.68 9.22 7.19 53 HTML_IMAGE_RATIO_02 14225 7.78 10.16 7.03 54 TR_XM_DKIM_Undo 13972 13.68 35.34 6.90 55 TR_XM_DK_Bayes2 13466 5.21 0.61 6.65 56 RCVD_IN_RP_CERTIFIED 13447 5.51 1.90 6.64 57 MPART_ALT_DIFF 12868 8.41 14.98 6.36 58 XMStrtUSub 11657 5.47 4.53 5.76 59 XM_H_Trusted_IP 11270 4.24 0.00 5.57 60 TM2_M_URI_OPT_OUT 11264 5.32 4.53 5.56 61 BOTNET_IPINHOSTNAME 10949 7.88 15.78 5.41 62 TR_XM_DK_SendGrid 10611 5.31 5.52 5.24 63 XMSubMetaSx_00 10222 6.01 9.08 5.05 64 IN_ZIMBRA_NJ_WHITELIST 10127 3.83 0.07 5.00 65 MIME_QP_LONG_LINE 10064 4.87 4.54 4.97 66 TR_XM_SpammyWords4 9725 5.41 7.33 4.80 67 XM_H_Long_From01 9671 4.84 5.02 4.78 68 XMNumbers 9638 4.47 3.55 4.76 69 ANY_BOUNCE_MESSAGE 9615 3.74 0.52 4.75 70 BOUNCE_MESSAGE 9611 3.74 0.52 4.75 71 T_TooManySym_02 9526 3.71 0.52 4.71 72 BAYES_40 9424 4.03 2.03 4.66 73 XMSexyCombo_05 9371 6.20 11.23 4.63 74 XM_B_SpammyWords3 9355 6.24 11.40 4.62 75 MIME_HTML_ONLY_MULTI 8744 5.27 8.29 4.32 76 XM_B_Phish_Phrases 8735 4.39 4.65 4.32 77 XM_UncommonTLD01 8598 6.08 11.92 4.25 78 BAYES_80 8371 4.91 7.40 4.14 79 TR_DCC_Bayes_99 8263 8.86 24.10 4.08 80 INVALID_MSGID 7184 2.77 0.30 3.55 81 HTML_IMAGE_RATIO_06 7121 3.70 4.28 3.52 82 RELAYCOUNTRY_META 7006 7.86 21.89 3.46 83 MSGID_NOFQDN1 6890 2.62 0.13 3.40 84 FROM_EXCESS_BASE64 6366 2.75 1.49 3.15 85 BAYES_20 6341 2.76 1.58 3.13 86 XMSubNoVowel 6277 2.70 1.43 3.10 87 RCVD_IN_IADB_LISTED 6252 2.78 1.80 3.09 88 T_REMOTE_IMAGE 6044 2.74 1.96 2.99 89 TO_MALFORMED 6027 2.27 0.01 2.98 90 TR_XM_PhishingBody 5605 3.48 5.77 2.77 91 RCVD_IN_IADB_SPF 5424 2.41 1.56 2.68 92 MIME_HTML_MOSTLY 5387 3.87 7.74 2.66 93 BAYES_95 5375 2.98 4.03 2.66 94 DKIM_INVALID 5307 3.40 5.88 2.62 95 HTML_MIME_NO_HTML_TAG 5119 3.43 6.33 2.53 96 HTML_IMAGE_RATIO_08 5087 2.58 2.78 2.51 97 RCVD_IN_MSPIKE_H5 4996 1.97 0.40 2.47 98 RCVD_IN_IADB_SENDERID 4915 2.18 1.40 2.43 99 T_XMDrugObfuBody_14 4764 2.52 3.04 2.35 100 TVD_RCVD_IP 4730 1.80 0.09 2.34 101 RCVD_IN_IADB_DK 4708 2.11 1.43 2.33 102 XM_B_SpammyTLD 4475 2.50 3.43 2.21 103 XM_PDF 4343 1.72 0.37 2.15 104 IN_HORDE_ADDRESS_BOOK 4220 1.62 0.14 2.08 105 BAYES_05 4184 1.78 0.86 2.07 106 TR_XM_SpammyWords2 4157 4.30 11.49 2.05 107 XM_GoogleGroups 4093 3.04 6.27 2.02 108 TVD_SPACE_RATIO_MINFP 4074 1.60 0.26 2.01 109 XMBSHREFv2 3934 1.57 0.38 1.94 110 URI_NOVOWEL 3918 2.52 4.39 1.94 111 RCVD_IN_IADB_VOUCHED 3914 1.70 0.95 1.93 112 MAILING_LIST_MULTI 3768 1.90 2.03 1.86 113 TM2_M_VERY_LONG_WORD 3766 3.16 7.33 1.86 114 XMSexyCombo_01 3413 2.25 4.04 1.69 115 XMStockSpam_06 3383 1.75 1.98 1.67 116 TR_XM_SpammyWords5 3369 2.07 3.36 1.66 117 BOTNET 3235 4.42 13.41 1.60 118 TR_XM_SB_Phish 3223 1.65 1.85 1.59 119 TR_Symld_Words 3184 1.49 1.23 1.57 120 XMSubPhish11 3181 1.62 1.79 1.57 121 XM_CamelCaseFrm001 3140 1.74 2.36 1.55 122 TVD_SPACE_RATIO 3124 1.21 0.14 1.54 123 XMGappySubj_01 3116 1.36 0.77 1.54 124 SHORT_URI_2 3087 1.43 1.14 1.53 125 XM_H_Long_From02 3083 1.36 0.82 1.52 126 XMBdyGiftCard01 2956 1.50 1.61 1.46 127 XMLngstWrd_00 2857 2.48 5.91 1.41 128 TooManyTo_002 2842 1.26 0.80 1.40 129 UNTRUSTED_Relay 2823 3.78 11.38 1.39 130 TR_XM_SpammyRelay 2823 4.09 12.71 1.39 131 URI_HEX 2822 1.59 2.21 1.39 132 XMLngstWrd_01 2702 2.36 5.62 1.33 133 HTML_FONT_FACE_BAD 2665 1.14 0.58 1.32 134 XM_DK_Undo_01 2665 1.42 1.75 1.32 135 XMLngstWrd_02 2533 2.28 5.56 1.25 136 XM_SPF_SoftFail 2532 2.07 4.69 1.25 137 RCVD_IN_IADB_OPTIN 2489 1.13 0.80 1.23 138 XM_RXBody 2450 1.09 0.69 1.21 139 XMLngstWrd_03 2357 2.21 5.53 1.16 140 RCVD_IN_BL_SPAMCOP_NET 2309 3.20 9.79 1.14 141 T_TooManySym_03 2281 0.89 0.15 1.13 142 KHOP_HELO_FCRDNS 2281 1.36 2.12 1.13 143 SUBJ_ALL_CAPS 2280 1.23 1.56 1.13 144 XMLngstWrd_04 2237 2.15 5.49 1.11 145 XM_B_Phish66 2162 1.48 2.79 1.07 146 HTML_IMAGE_ONLY_20 2144 0.87 0.25 1.06 147 XMBrknScrpt_02 2130 1.16 1.50 1.05 148 XM_B_Investor 2091 1.65 3.63 1.03 149 TooManyTo_003 2021 0.92 0.69 1.00 150 DKIM_ADSP_CUSTOM_MED 2005 0.97 0.92 0.99 151 XMDiploma_00 1995 1.14 1.63 0.99 152 XMPhish30 1980 1.11 1.52 0.98 153 T_XMDrugObfuBody_08 1964 1.26 2.19 0.97 154 XM_B_COPY_HTML 1954 1.00 1.11 0.97 155 RELAYCOUNTRY_CA 1926 2.32 6.68 0.95 156 TR_XM_MaxUnsub 1867 1.64 3.94 0.92 157 XM_ProductURIs 1751 0.92 1.12 0.87 158 T_MANY_PILL_PRICE 1748 0.66 0.02 0.86 159 XM_B_Unsub2 1725 1.06 1.73 0.85 160 XM_OfRef6 1724 1.37 3.01 0.85 161 HTML_TITLE_SUBJ_DIFF 1722 2.01 5.72 0.85 162 XM_UB50 1657 2.09 6.14 0.82 163 TR_MSPIKEBAYES00 1596 0.61 0.02 0.79 164 XMBody_95 1590 0.65 0.21 0.79 165 TooManyTo_004 1567 0.74 0.62 0.77 166 UPPERCASE_75_100 1550 1.79 5.05 0.77 167 TR_MetaPhish_Combo_01 1500 0.75 0.78 0.74 168 PLING_QUERY 1465 0.69 0.59 0.72 169 XM_B_REG_HTML 1437 0.69 0.63 0.71 170 MPART_ALT_DIFF_COUNT 1402 0.98 1.90 0.69 171 XMHTMLBadTable_001 1378 0.69 0.71 0.68 172 NML_ADSP_CUSTOM_MED 1368 0.71 0.83 0.68 173 HTML_IMAGE_ONLY_32 1359 1.23 3.00 0.67 174 HTML_TAG_BALANCE_BODY 1348 0.82 1.30 0.67 175 TooManyTo_005 1344 0.64 0.55 0.66 176 RDNS_DYNAMIC 1344 0.64 0.56 0.66 177 XM_B_COVIDMETA 1328 0.76 1.08 0.66 178 PDS_OTHER_BAD_TLD 1313 0.92 1.77 0.65 179 XM_B_DNDMA 1261 0.59 0.47 0.62 180 USER_IN_WHITELIST 1244 0.47 0.00 0.61 181 USER_IN_WELCOMELIST 1244 0.47 0.00 0.61 182 NUMERIC_HTTP_ADDR 1228 0.61 0.62 0.61 183 T_XMDrugObfuBody_00 1216 0.87 1.74 0.60 184 XMSubMetaSxObfu_02 1209 0.61 0.66 0.60 185 T_XMHurry_00 1146 1.03 2.52 0.57 186 DATE_IN_PAST_03_06 1133 0.59 0.67 0.56 187 TR_Mismatch_TLD_01 1126 0.73 1.29 0.56 188 HTTPS_HTTP_MISMATCH 1125 0.62 0.83 0.56 189 XMSubMetaSSx_00 1117 0.71 1.20 0.55 190 XMSubMetaSxObfu_03 1063 0.58 0.76 0.53 191 FORGED_GMAIL_RCVD 1057 0.56 0.70 0.52 192 RELAYCOUNTRY_GB 1041 0.56 0.71 0.51 193 XM_H_PHPMailer 1035 0.74 1.49 0.51 194 T_TooManySym_04 1026 0.40 0.08 0.51 195 RCVD_IN_MSPIKE_BL 1022 1.82 6.01 0.50 196 HELO_NODOT 1020 0.58 0.80 0.50 197 HELO_NO_DOMAIN 1020 0.57 0.79 0.50 198 TR_XM_MSPIKECOMBO 1018 1.82 6.01 0.50 199 DKIM_ADSP_NXDOMAIN 1015 0.45 0.27 0.50 200 T_FILL_THIS_FORM_SHORT 1010 1.12 3.09 0.50 ----------------------------------------------------------------------