Email: 257028 Autolearn: 0 AvgScore: 2.66 AvgScanTime: 1.24 sec Spam: 77366 Autolearn: 0 AvgScore: 14.14 AvgScanTime: 1.26 sec Ham: 179662 Autolearn: 0 AvgScore: -2.28 AvgScanTime: 1.23 sec Time Spent Running SA: 88.38 hours Time Spent Processing Spam: 27.04 hours Time Spent Processing Ham: 61.33 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 73477 86.29 94.97 82.56 2 DKIM_SIGNED 64507 78.66 83.38 76.63 3 XM_DK_Pass 62890 77.34 81.29 75.64 4 DKIM_VALID 62837 77.06 81.22 75.26 5 RELAYCOUNTRY_US 61797 80.57 79.88 80.87 6 XM_B_Unicode 58126 72.28 75.13 71.05 7 XMListUnsubscribeExists 51998 57.10 67.21 52.74 8 DCC_CHECK 51624 48.33 66.73 40.41 9 DKIM_VALID_AU 47658 62.14 61.60 62.37 10 XM_B_SpammyWords 47320 49.96 61.16 45.14 11 XM_DK_Undo_02 34172 19.84 44.17 9.36 12 XM_B_Unicode3 32801 44.97 42.40 46.08 13 MIME_HTML_ONLY 29870 28.14 38.61 23.63 14 BAYES_99 29271 16.78 37.83 7.72 15 BAYES_50 29165 49.31 37.70 54.31 16 XM_B_SpammyWords2 27060 24.98 34.98 20.68 17 LOC_TINY_FONT_1 27055 30.60 34.97 28.72 18 HTML_FONT_LOW_CONTRAST 26548 32.33 34.31 31.47 19 TR_XM_DKIM_Undo 26201 15.20 33.87 7.16 20 DCC_CHECK_NEGATIVE 25723 51.65 33.25 59.57 21 FVGT_m_MULTI_ODD 23816 26.75 30.78 25.01 22 BAYES_999 23112 13.57 29.87 6.55 23 DKIM_VALID_EF 21059 28.96 27.22 29.71 24 TR_DCC_Bayes_99 20646 10.47 26.69 3.48 25 RCVD_IN_MSPIKE_H2 19921 20.94 25.75 18.87 26 RELAYCOUNTRY_META 18939 9.79 24.48 3.46 27 RCVD_IN_MSPIKE_WL 18406 32.22 23.79 35.85 28 XM_Body_Dirty_Words 17770 16.10 22.97 13.14 29 T_KAM_HTML_FONT_INVALID 17531 18.57 22.66 16.81 30 T_TM2_M_HEADER_IN_MSG 14715 21.69 19.02 22.84 31 XMSubLong 14060 21.88 18.17 23.47 32 XM_Multi_Part_URI 12980 15.18 16.78 14.50 33 UNPARSEABLE_RELAY 12439 11.26 16.08 9.19 34 RCVD_IN_MSPIKE_H3 12338 17.34 15.95 17.94 35 TR_XM_UnparsRelay 12199 9.95 15.77 7.44 36 BOTNET_IPINHOSTNAME 11479 8.82 14.84 6.23 37 BOTNET 10978 5.32 14.19 1.51 38 XM_B_Unsub 10196 12.56 13.18 12.30 39 UNTRUSTED_Relay 10055 4.80 13.00 1.27 40 XMSexyCombo_05 10051 7.28 12.99 4.83 41 TR_XM_SpammyWords2 9456 5.04 12.22 1.95 42 XM_B_SpammyWords3 8997 7.63 11.63 5.90 43 XM_UncommonTLD01 8674 6.64 11.21 4.67 44 FSL_BULK_SIG 8518 6.44 11.01 4.47 45 LOTS_OF_MONEY 8006 8.42 10.35 7.59 46 MPART_ALT_DIFF 7917 7.49 10.23 6.31 47 TR_XM_SpammyRelay 7846 4.01 10.14 1.38 48 XM_SendGrid 7636 7.74 9.87 6.83 49 RCVD_IN_BL_SPAMCOP_NET 7550 3.51 9.76 0.82 50 HTML_IMAGE_RATIO_02 7268 7.88 9.39 7.23 51 HTML_MIME_NO_HTML_TAG 7244 4.28 9.36 2.09 52 TR_XM_SpammyWords4 6784 6.06 8.77 4.90 53 BAYES_80 6653 6.07 8.60 4.98 54 XM_Evil_Numbers_Gen 6233 8.73 8.06 9.02 55 MIME_HTML_ONLY_MULTI 6177 5.55 7.98 4.50 56 BAYES_60 6049 10.66 7.82 11.88 57 XM_SPF_SoftFail 5877 3.44 7.60 1.65 58 RCVD_IN_MSPIKE_H4 5762 13.03 7.45 15.43 59 TM2_M_VERY_LONG_WORD 5569 3.89 7.20 2.46 60 TR_XM_MaxUnsub 5190 2.99 6.71 1.39 61 TR_XM_PhishingBody 5172 3.98 6.69 2.82 62 RELAYCOUNTRY_CA 4751 2.55 6.14 1.01 63 XM_GoogleGroups 4641 3.53 6.00 2.47 64 XMSubMetaSx_00 4467 4.41 5.77 3.82 65 XM_H_Long_From01 4440 5.68 5.74 5.66 66 XMLngstWrd_00 4434 3.00 5.73 1.82 67 RCVD_IN_VALIDITY_SAFE 4378 7.25 5.66 7.93 68 XMLngstWrd_01 4342 2.91 5.61 1.75 69 XM_UB50 4320 2.23 5.58 0.78 70 TR_XM_DK_SendGrid 4307 4.86 5.57 4.55 71 LotsOfNums_01 4306 7.41 5.57 8.20 72 XMLngstWrd_02 4284 2.80 5.54 1.62 73 XMLngstWrd_03 4242 2.70 5.48 1.50 74 XMLngstWrd_04 4207 2.63 5.44 1.43 75 RCVD_IN_MSPIKE_BL 4188 2.29 5.41 0.94 76 TR_XM_MSPIKECOMBO 4101 2.26 5.30 0.94 77 TooManyTo_001 3998 6.26 5.17 6.73 78 HTML_IMAGE_RATIO_04 3937 6.04 5.09 6.45 79 XM_B_Phish_Phrases 3889 4.70 5.03 4.55 80 UPPERCASE_75_100 3798 2.22 4.91 1.06 81 HTML_TITLE_SUBJ_DIFF 3798 2.24 4.91 1.09 82 RCVD_IN_VALIDITY_CERTIFIED 3473 6.44 4.49 7.27 83 XMStrtUSub 3422 5.74 4.42 6.31 84 TR_XM_SPAMCOP 3322 1.42 4.29 0.18 85 TR_XM_SpammyWords5 3266 2.53 4.22 1.80 86 T_REMOTE_IMAGE 3258 3.55 4.21 3.26 87 BAYES_95 3247 3.34 4.20 2.98 88 T_XMDrugObfuBody_14 3022 2.91 3.91 2.49 89 XM_BadFromFormat 2896 1.22 3.74 0.13 90 XM_DIRTYINTL 2849 1.32 3.68 0.30 91 XMNumbers 2807 5.10 3.63 5.73 92 SpammyFromTLD_01 2782 1.34 3.60 0.36 93 HTML_IMAGE_ONLY_08 2729 1.14 3.53 0.11 94 RELAYCOUNTRY_CZ 2673 1.05 3.46 0.02 95 HDRS_MISSP 2672 1.05 3.45 0.01 96 BOTNET_NORDNS 2646 1.04 3.42 0.02 97 GOOG_STO_IMG_HTML 2637 1.03 3.41 0.00 98 HTML_IMAGE_RATIO_06 2634 4.11 3.40 4.41 99 HTML_SHORT_LINK_IMG_1 2624 1.03 3.39 0.01 100 T_TooManySym_01 2527 6.97 3.27 8.56 101 RCVD_IN_VALIDITY_RPBL 2488 0.98 3.22 0.01 102 USER_IN_DEF_DKIM_WL 2450 13.74 3.17 18.29 103 T_FILL_THIS_FORM_SHORT 2447 1.29 3.16 0.48 104 MIME_HTML_MOSTLY 2424 2.86 3.13 2.74 105 HTML_IMAGE_RATIO_08 2422 3.06 3.13 3.03 106 XM_B_Phish66 2408 1.82 3.11 1.26 107 SpammyFromTLD_02 2320 1.05 3.00 0.21 108 TM2_M_URI_OPT_OUT 2286 2.86 2.95 2.82 109 XM_CamelCaseFrm001 2284 2.05 2.95 1.66 110 XM_B_Investor 2272 1.86 2.94 1.40 111 XM_B_SpammyTLD 2261 2.57 2.92 2.41 112 XM_OfRef6 2155 1.55 2.79 1.02 113 TR_XM_SpammyWords3 2133 1.19 2.76 0.52 114 SUBJ_ALL_CAPS 2052 1.85 2.65 1.50 115 XMBody_17 1987 1.26 2.57 0.70 116 TR_XM_PHPDW 1948 1.00 2.52 0.34 117 TR_XM_MSPIKECOMBO2 1934 0.89 2.50 0.20 118 XM_UB60 1894 0.78 2.45 0.06 119 RCVD_IN_MSPIKE_L3 1870 1.07 2.42 0.49 120 XMReplyNow 1831 0.89 2.37 0.26 121 TR_XM_PHPForged 1822 0.90 2.36 0.27 122 TR_XM_FormFill2 1805 0.89 2.33 0.27 123 XM_H_PHPOS 1799 0.88 2.33 0.26 124 T_XMDrugObfuBody_08 1779 1.71 2.30 1.46 125 KHOP_HELO_FCRDNS 1777 1.51 2.30 1.17 126 XM_B_Unsub2 1723 1.58 2.23 1.31 127 XM_DK_Undo_01 1695 1.75 2.19 1.56 128 T_XMHurry_00 1685 1.05 2.18 0.56 129 DKIM_INVALID 1670 1.60 2.16 1.36 130 TR_XM_FormFill 1559 0.61 2.02 0.01 131 RCVD_IN_MSPIKE_L5 1552 0.70 2.01 0.13 132 MIME_QP_LONG_LINE 1547 3.15 2.00 3.64 133 RCVD_IN_PSBL 1502 0.76 1.94 0.25 134 XMSexyCombo_01 1499 0.94 1.94 0.51 135 PDS_OTHER_BAD_TLD 1468 1.02 1.90 0.64 136 XM_B_SpammyWords4 1465 1.75 1.89 1.68 137 DIET_1 1457 0.93 1.88 0.52 138 TR_Mismatch_TLD_02 1438 0.60 1.86 0.06 139 XM_UB80 1423 0.57 1.84 0.02 140 XM_UB99 1418 0.55 1.83 0.00 141 XMBdyGiftCard01 1369 1.51 1.77 1.40 142 HTML_FONT_TINY_NORDNS 1352 0.57 1.75 0.07 143 MAILING_LIST_MULTI 1346 1.99 1.74 2.10 144 FROM_EXCESS_BASE64 1312 2.92 1.70 3.45 145 XMStockSpam_06 1299 1.91 1.68 2.00 146 URI_NOVOWEL 1291 2.04 1.67 2.20 147 RCVD_IN_IADB_LISTED 1283 3.30 1.66 4.01 148 BAYES_40 1278 3.52 1.65 4.33 149 TR_XM_SB_Phish 1256 1.56 1.62 1.53 150 T_XMDrugObfuBody_00 1245 0.93 1.61 0.64 151 URI_HEX 1244 1.53 1.61 1.50 152 XMSubPhish11 1213 1.53 1.57 1.52 153 XM_Body_Dirty_Words_01 1212 1.24 1.57 1.10 154 XMPhish30 1203 1.16 1.55 0.98 155 TR_XM_NoHeaderRelay 1188 0.59 1.54 0.18 156 TR_XM_BayesRelay 1187 0.46 1.53 0.00 157 LOADSA_MONEY_COMBO 1164 0.48 1.50 0.03 158 TR_XM_MaxSPIKE 1143 0.49 1.48 0.06 159 TR_Symld_Words 1130 1.52 1.46 1.55 160 RELAYCOUNTRY_RU 1112 0.45 1.44 0.02 161 XFER_LOTSA_MONEY 1106 0.44 1.43 0.01 162 DKIM_ADSP_CUSTOM_MED 1105 1.07 1.43 0.91 163 XM_B_REG_HTML 1102 0.82 1.42 0.56 164 HTML_TAG_BALANCE_BODY 1077 0.87 1.39 0.65 165 XMDiploma_00 1064 1.20 1.38 1.13 166 RCVD_IN_IADB_SPF 1062 2.91 1.37 3.57 167 URIBL_DBL_SPAM 1058 0.42 1.37 0.01 168 XM_URI_RBL 1008 0.47 1.30 0.12 169 XMSubMetaI_00 1007 0.94 1.30 0.78 170 XMHTML_After_End 993 0.68 1.28 0.42 171 RCVD_IN_RP_SAFE 984 1.45 1.27 1.53 172 SHOPIFY_IMG_NOT_RCVD_SFY 983 0.55 1.27 0.24 173 XM_H_Long_From02 978 1.17 1.26 1.14 174 XM_UB999 976 0.38 1.26 0.00 175 RCVD_IN_IADB_DK 969 2.57 1.25 3.14 176 RCVD_IN_IADB_SENDERID 945 2.63 1.22 3.23 177 FROM_SUSPICIOUS_NTLD 936 0.41 1.21 0.07 178 XM_H_PHPMailer 930 0.74 1.20 0.54 179 TM2_M_A_HREF_HREF 927 0.50 1.20 0.20 180 FROM_SUSPICIOUS_NTLD_FP 921 0.41 1.19 0.07 181 XMSubMetaSxObfu_03 913 0.71 1.18 0.50 182 RELAYCOUNTRY_BR 912 0.36 1.18 0.00 183 ALL_TRUSTED 911 12.08 1.18 16.77 184 TR_XM_Spammywords 911 0.47 1.18 0.17 185 XM_S_SpammyWords 911 0.47 1.18 0.17 186 RELAYCOUNTRY_AU 909 0.52 1.17 0.23 187 MONEY_FRAUD_5 902 0.35 1.17 0.00 188 XMSubject_63 894 0.35 1.16 0.00 189 XMSlimDrugH 888 0.53 1.15 0.26 190 RELAYCOUNTRY_FR 866 0.44 1.12 0.15 191 URI_TRY_3LD 859 0.80 1.11 0.67 192 ADVANCE_FEE_4_NEW_MONEY 854 0.33 1.10 0.00 193 TR_Caps_n_Bayes_99 854 0.50 1.10 0.24 194 XMHTMLBadTable_001 850 0.68 1.10 0.50 195 BAYES_20 837 2.25 1.08 2.75 196 XMBrknScrpt_02 836 0.85 1.08 0.74 197 DEAR_BENEFICIARY 823 0.32 1.06 0.00 198 TR_Mismatch_TLD_01 818 0.50 1.06 0.26 199 XMSexyCombo_04 810 0.42 1.05 0.14 200 RCVD_IN_IADB_VOUCHED 810 2.08 1.05 2.52 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 148323 86.29 94.97 82.56 2 RELAYCOUNTRY_US 145290 80.57 79.88 80.87 3 DKIM_SIGNED 137667 78.66 83.38 76.63 4 XM_DK_Pass 135901 77.34 81.29 75.64 5 DKIM_VALID 135221 77.06 81.22 75.26 6 XM_B_Unicode 127654 72.28 75.13 71.05 7 DKIM_VALID_AU 112047 62.14 61.60 62.37 8 DCC_CHECK_NEGATIVE 107024 51.65 33.25 59.57 9 BAYES_50 97571 49.31 37.70 54.31 10 XMListUnsubscribeExists 94755 57.10 67.21 52.74 11 XM_B_Unicode3 82793 44.97 42.40 46.08 12 XM_B_SpammyWords 81097 49.96 61.16 45.14 13 DCC_CHECK 72594 48.33 66.73 40.41 14 RCVD_IN_MSPIKE_WL 64406 32.22 23.79 35.85 15 HTML_FONT_LOW_CONTRAST 56547 32.33 34.31 31.47 16 DKIM_VALID_EF 53369 28.96 27.22 29.71 17 LOC_TINY_FONT_1 51606 30.60 34.97 28.72 18 FVGT_m_MULTI_ODD 44928 26.75 30.78 25.01 19 MIME_HTML_ONLY 42462 28.14 38.61 23.63 20 XMSubLong 42170 21.88 18.17 23.47 21 T_TM2_M_HEADER_IN_MSG 41043 21.69 19.02 22.84 22 XM_B_SpammyWords2 37157 24.98 34.98 20.68 23 RCVD_IN_MSPIKE_H2 33906 20.94 25.75 18.87 24 USER_IN_DEF_DKIM_WL 32869 13.74 3.17 18.29 25 RCVD_IN_MSPIKE_H3 32240 17.34 15.95 17.94 26 T_KAM_HTML_FONT_INVALID 30194 18.57 22.66 16.81 27 ALL_TRUSTED 30133 12.08 1.18 16.77 28 RCVD_IN_MSPIKE_H4 27729 13.03 7.45 15.43 29 XM_Multi_Part_URI 26049 15.18 16.78 14.50 30 XM_Body_Dirty_Words 23602 16.10 22.97 13.14 31 XM_B_Unsub 22096 12.56 13.18 12.30 32 XM_DKIMWhitelistDomains 22035 8.59 0.05 12.26 33 BAYES_60 21340 10.66 7.82 11.88 34 XM_DK_Undo_02 16811 19.84 44.17 9.36 35 UNPARSEABLE_RELAY 16515 11.26 16.08 9.19 36 BAYES_00 16496 6.57 0.52 9.18 37 XM_Evil_Numbers_Gen 16201 8.73 8.06 9.02 38 T_TooManySym_01 15379 6.97 3.27 8.56 39 LotsOfNums_01 14731 7.41 5.57 8.20 40 RCVD_IN_VALIDITY_SAFE 14251 7.25 5.66 7.93 41 BAYES_99 13867 16.78 37.83 7.72 42 LOTS_OF_MONEY 13634 8.42 10.35 7.59 43 TR_XM_UnparsRelay 13365 9.95 15.77 7.44 44 RCVD_IN_VALIDITY_CERTIFIED 13068 6.44 4.49 7.27 45 HTML_IMAGE_RATIO_02 12996 7.88 9.39 7.23 46 TR_XM_DKIM_Undo 12861 15.20 33.87 7.16 47 XM_SendGrid 12265 7.74 9.87 6.83 48 TooManyTo_001 12096 6.26 5.17 6.73 49 BAYES_999 11771 13.57 29.87 6.55 50 HTML_IMAGE_RATIO_04 11593 6.04 5.09 6.45 51 TR_XM_DK_Bayes 11422 4.56 0.37 6.36 52 MPART_ALT_DIFF 11333 7.49 10.23 6.31 53 XMStrtUSub 11329 5.74 4.42 6.31 54 TR_XM_DK_Bayes1 11263 4.49 0.37 6.27 55 BOTNET_IPINHOSTNAME 11196 8.82 14.84 6.23 56 XM_B_SpammyWords3 10608 7.63 11.63 5.90 57 IN_ZIMBRA_NJ_WHITELIST 10447 4.08 0.07 5.81 58 XMNumbers 10292 5.10 3.63 5.73 59 TR_XM_DK_Bayes2 10224 4.04 0.21 5.69 60 XM_H_Long_From01 10171 5.68 5.74 5.66 61 T_TooManySym_02 9449 3.94 0.88 5.26 62 BAYES_80 8941 6.07 8.60 4.98 63 TR_XM_SpammyWords4 8795 6.06 8.77 4.90 64 XMSexyCombo_05 8672 7.28 12.99 4.83 65 XM_UncommonTLD01 8384 6.64 11.21 4.67 66 XM_B_Phish_Phrases 8180 4.70 5.03 4.55 67 TR_XM_DK_SendGrid 8177 4.86 5.57 4.55 68 MIME_HTML_ONLY_MULTI 8085 5.55 7.98 4.50 69 FSL_BULK_SIG 8035 6.44 11.01 4.47 70 HTML_IMAGE_RATIO_06 7921 4.11 3.40 4.41 71 BAYES_40 7773 3.52 1.65 4.33 72 RCVD_IN_IADB_LISTED 7201 3.30 1.66 4.01 73 INVALID_MSGID 6977 2.80 0.30 3.88 74 XMSubMetaSx_00 6867 4.41 5.77 3.82 75 MSGID_NOFQDN1 6618 2.63 0.19 3.68 76 MIME_QP_LONG_LINE 6538 3.15 2.00 3.64 77 RCVD_IN_IADB_SPF 6414 2.91 1.37 3.57 78 TR_DCC_Bayes_99 6259 10.47 26.69 3.48 79 RELAYCOUNTRY_META 6215 9.79 24.48 3.46 80 FROM_EXCESS_BASE64 6195 2.92 1.70 3.45 81 TO_MALFORMED 6011 2.34 0.01 3.35 82 TVD_RCVD_IP 5982 2.39 0.21 3.33 83 XM_H_Trusted_IP 5881 2.29 0.00 3.27 84 ANY_BOUNCE_MESSAGE 5867 2.45 0.54 3.27 85 BOUNCE_MESSAGE 5866 2.45 0.54 3.27 86 T_REMOTE_IMAGE 5864 3.55 4.21 3.26 87 RCVD_IN_IADB_SENDERID 5804 2.63 1.22 3.23 88 RCVD_IN_IADB_DK 5635 2.57 1.25 3.14 89 HTML_IMAGE_RATIO_08 5441 3.06 3.13 3.03 90 BAYES_95 5349 3.34 4.20 2.98 91 TR_XM_PhishingBody 5069 3.98 6.69 2.82 92 TM2_M_URI_OPT_OUT 5063 2.86 2.95 2.82 93 BAYES_20 4934 2.25 1.08 2.75 94 MIME_HTML_MOSTLY 4928 2.86 3.13 2.74 95 RCVD_IN_IADB_VOUCHED 4531 2.08 1.05 2.52 96 T_XMDrugObfuBody_14 4468 2.91 3.91 2.49 97 XM_GoogleGroups 4441 3.53 6.00 2.47 98 RCVD_IN_MSPIKE_H5 4437 1.85 0.40 2.47 99 TM2_M_VERY_LONG_WORD 4424 3.89 7.20 2.46 100 XM_B_SpammyTLD 4335 2.57 2.92 2.41 101 IN_HORDE_ADDRESS_BOOK 4108 1.63 0.11 2.29 102 URI_NOVOWEL 3944 2.04 1.67 2.20 103 XMBSHREFv2 3901 1.59 0.24 2.17 104 MAILING_LIST_MULTI 3771 1.99 1.74 2.10 105 HTML_MIME_NO_HTML_TAG 3750 4.28 9.36 2.09 106 XMStockSpam_06 3598 1.91 1.68 2.00 107 XMGappySubj_01 3566 1.41 0.09 1.98 108 TR_XM_SpammyWords2 3497 5.04 12.22 1.95 109 BAYES_05 3386 1.50 0.60 1.88 110 XM_PDF 3288 1.42 0.46 1.83 111 XMLngstWrd_00 3278 3.00 5.73 1.82 112 TR_XM_SpammyWords5 3234 2.53 4.22 1.80 113 XMLngstWrd_01 3141 2.91 5.61 1.75 114 TVD_SPACE_RATIO 3078 1.23 0.10 1.71 115 RCVD_IN_IADB_OPTIN 3028 1.38 0.66 1.69 116 XM_B_SpammyWords4 3027 1.75 1.89 1.68 117 XM_CamelCaseFrm001 2976 2.05 2.95 1.66 118 XM_SPF_SoftFail 2971 3.44 7.60 1.65 119 XMLngstWrd_02 2918 2.80 5.54 1.62 120 XM_DK_Undo_01 2802 1.75 2.19 1.56 121 TR_Symld_Words 2788 1.52 1.46 1.55 122 HTML_FONT_FACE_BAD 2751 1.29 0.74 1.53 123 TR_XM_SB_Phish 2749 1.56 1.62 1.53 124 RCVD_IN_RP_SAFE 2743 1.45 1.27 1.53 125 XMSubPhish11 2731 1.53 1.57 1.52 126 BOTNET 2706 5.32 14.19 1.51 127 XMLngstWrd_03 2699 2.70 5.48 1.50 128 URI_HEX 2699 1.53 1.61 1.50 129 SUBJ_ALL_CAPS 2695 1.85 2.65 1.50 130 T_XMDrugObfuBody_08 2627 1.71 2.30 1.46 131 RCVD_IN_RP_CERTIFIED 2579 1.29 0.95 1.44 132 XMLngstWrd_04 2564 2.63 5.44 1.43 133 XM_B_Investor 2520 1.86 2.94 1.40 134 XMBdyGiftCard01 2511 1.51 1.77 1.40 135 TR_XM_MaxUnsub 2491 2.99 6.71 1.39 136 TR_XM_SpammyRelay 2472 4.01 10.14 1.38 137 DKIM_INVALID 2446 1.60 2.16 1.36 138 TooManyTo_002 2441 1.16 0.71 1.36 139 XM_B_Unsub2 2348 1.58 2.23 1.31 140 T_TooManySym_03 2295 1.02 0.41 1.28 141 UNTRUSTED_Relay 2286 4.80 13.00 1.27 142 XM_B_Phish66 2268 1.82 3.11 1.26 143 KHOP_HELO_FCRDNS 2100 1.51 2.30 1.17 144 XM_H_Long_From02 2042 1.17 1.26 1.14 145 XMDiploma_00 2033 1.20 1.38 1.13 146 XM_Body_Dirty_Words_01 1970 1.24 1.57 1.10 147 HTML_TITLE_SUBJ_DIFF 1956 2.24 4.91 1.09 148 UPPERCASE_75_100 1910 2.22 4.91 1.06 149 XM_B_COPY_HTML 1902 1.00 0.87 1.06 150 XM_OfRef6 1830 1.55 2.79 1.02 151 XMSubNoVowel 1812 1.01 1.00 1.01 152 RELAYCOUNTRY_CA 1807 2.55 6.14 1.01 153 XMPhish30 1766 1.16 1.55 0.98 154 XMBody_106 1755 0.70 0.05 0.98 155 TooManyTo_003 1729 0.87 0.67 0.96 156 RCVD_IN_MSPIKE_BL 1696 2.29 5.41 0.94 157 TR_XM_MSPIKECOMBO 1695 2.26 5.30 0.94 158 DKIM_ADSP_CUSTOM_MED 1635 1.07 1.43 0.91 159 RCVD_IN_BL_SPAMCOP_NET 1481 3.51 9.76 0.82 160 XMBody_95 1432 0.64 0.26 0.80 161 XM_UB50 1403 2.23 5.58 0.78 162 XMSubMetaI_00 1401 0.94 1.30 0.78 163 USER_IN_WHITELIST 1342 0.52 0.00 0.75 164 USER_IN_WELCOMELIST 1342 0.52 0.00 0.75 165 TR_MetaPhish_Combo_01 1339 0.82 0.98 0.75 166 MPART_ALT_DIFF_COUNT 1339 0.77 0.83 0.75 167 XMBrknScrpt_02 1337 0.85 1.08 0.74 168 TooManyTo_004 1271 0.69 0.64 0.71 169 XMBody_17 1263 1.26 2.57 0.70 170 URI_TRY_3LD 1197 0.80 1.11 0.67 171 XM_ProductURIs 1192 0.67 0.68 0.66 172 TR_MSPIKEBAYES00 1187 0.46 0.01 0.66 173 HTML_TAG_BALANCE_BODY 1159 0.87 1.39 0.65 174 XM_shorewaves_Whitelist 1155 0.45 0.00 0.64 175 RDNS_DYNAMIC 1151 0.64 0.64 0.64 176 PDS_OTHER_BAD_TLD 1144 1.02 1.90 0.64 177 T_XMDrugObfuBody_00 1141 0.93 1.61 0.64 178 XM_B_COVIDMETA 1137 0.73 0.94 0.63 179 XMSubMetaSxObfu_02 1105 0.54 0.38 0.62 180 TooManyTo_005 1072 0.60 0.60 0.60 181 HTML_IMAGE_ONLY_20 1063 0.67 0.85 0.59 182 RELAYCOUNTRY_GB 1028 0.64 0.80 0.57 183 T_TooManySym_04 1025 0.42 0.08 0.57 184 XM_B_REG_HTML 1014 0.82 1.42 0.56 185 T_XMHurry_00 1007 1.05 2.18 0.56 186 XMGenDplmaNmb 995 0.55 0.55 0.55 187 XM_H_PHPMailer 965 0.74 1.20 0.54 188 TR_XM_SpammyWords3 931 1.19 2.76 0.52 189 DIET_1 926 0.93 1.88 0.52 190 XM_Ancestry_Forge 926 0.36 0.00 0.52 191 XMSexyCombo_01 921 0.94 1.94 0.51 192 XMSubMetaSxObfu_03 900 0.71 1.18 0.50 193 HTTPS_HTTP_MISMATCH 899 0.64 0.97 0.50 194 XMHTMLBadTable_001 892 0.68 1.10 0.50 195 DKIM_ADSP_NXDOMAIN 886 0.51 0.55 0.49 196 RCVD_IN_MSPIKE_L3 885 1.07 2.42 0.49 197 T_FILL_THIS_FORM_SHORT 866 1.29 3.16 0.48 198 XMGappySubj_02 860 0.34 0.02 0.48 199 NML_ADSP_CUSTOM_MED 851 0.60 0.90 0.47 200 FORGED_GMAIL_RCVD 844 0.58 0.82 0.47 ----------------------------------------------------------------------