Email: 292523 Autolearn: 0 AvgScore: 2.71 AvgScanTime: 1.15 sec Spam: 92369 Autolearn: 0 AvgScore: 13.69 AvgScanTime: 1.28 sec Ham: 200154 Autolearn: 0 AvgScore: -2.35 AvgScanTime: 1.09 sec Time Spent Running SA: 93.20 hours Time Spent Processing Spam: 32.84 hours Time Spent Processing Ham: 60.36 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 87387 87.46 94.61 84.16 2 DKIM_SIGNED 79958 75.63 86.56 70.58 3 XM_DK_Pass 78532 74.46 85.02 69.59 4 DKIM_VALID 78152 74.00 84.61 69.10 5 RELAYCOUNTRY_US 72806 75.93 78.82 74.60 6 XM_B_Unicode 71134 69.90 77.01 66.62 7 XMListUnsubscribeExists 62604 54.52 67.78 48.40 8 DKIM_VALID_AU 61435 59.27 66.51 55.92 9 DCC_CHECK 60787 43.84 65.81 33.71 10 XM_B_SpammyWords 57918 52.27 62.70 47.46 11 XM_DK_Undo_02 41651 20.61 45.09 9.32 12 XM_B_Unicode3 39712 42.38 42.99 42.10 13 BAYES_99 37294 18.21 40.38 7.98 14 LOC_TINY_FONT_1 36819 29.29 39.86 24.41 15 TR_XM_DKIM_Undo 34113 15.61 36.93 5.78 16 BAYES_50 33394 46.54 36.15 51.33 17 XM_B_SpammyWords2 33068 28.21 35.80 24.71 18 DCC_CHECK_NEGATIVE 31552 56.13 34.16 66.27 19 HTML_FONT_LOW_CONTRAST 31195 30.92 33.77 29.60 20 FVGT_m_MULTI_ODD 31184 27.03 33.76 23.93 21 BAYES_999 30105 14.97 32.59 6.84 22 MIME_HTML_ONLY 28830 23.73 31.21 20.28 23 DKIM_VALID_EF 25529 27.93 27.64 28.06 24 TR_DCC_Bayes_99 25251 10.45 27.34 2.66 25 RCVD_IN_MSPIKE_H2 24261 21.48 26.27 19.28 26 T_KAM_HTML_FONT_INVALID 22603 19.62 24.47 17.38 27 RELAYCOUNTRY_META 21412 9.48 23.18 3.15 28 XM_Body_Dirty_Words 20252 14.71 21.93 11.38 29 XMSubLong 19626 21.15 21.25 21.10 30 T_TM2_M_HEADER_IN_MSG 18877 21.47 20.44 21.95 31 RCVD_IN_MSPIKE_WL 18836 25.65 20.39 28.07 32 XM_B_Unsub 17044 17.88 18.45 17.61 33 UNPARSEABLE_RELAY 16009 11.39 17.33 8.65 34 TR_XM_UnparsRelay 15641 10.08 16.93 6.92 35 XM_Multi_Part_URI 14515 14.38 15.71 13.77 36 RCVD_IN_MSPIKE_H3 13426 15.07 14.54 15.32 37 TR_XM_SpammyWords2 13220 5.66 14.31 1.67 38 LOTS_OF_MONEY 12061 8.99 13.06 7.12 39 XM_B_SpammyWords3 11804 8.38 12.78 6.35 40 FSL_BULK_SIG 11296 5.86 12.23 2.92 41 TR_XM_SpammyRelay 10623 4.70 11.50 1.56 42 TR_XM_SpammyWords4 9973 6.14 10.80 3.99 43 BOTNET_IPINHOSTNAME 9688 7.44 10.49 6.03 44 UNTRUSTED_Relay 9664 4.10 10.46 1.16 45 XMSexyCombo_05 9110 5.23 9.86 3.09 46 BOTNET 8962 4.14 9.70 1.57 47 RCVD_IN_BL_SPAMCOP_NET 8835 3.57 9.56 0.81 48 XM_UncommonTLD01 8416 5.73 9.11 4.17 49 TR_XM_MaxUnsub 8369 3.90 9.06 1.51 50 XM_SendGrid 7811 6.80 8.46 6.03 51 BAYES_80 7684 5.82 8.32 4.67 52 RELAYCOUNTRY_CA 7321 3.23 7.93 1.07 53 MPART_ALT_DIFF 7218 6.18 7.81 5.43 54 HTML_IMAGE_RATIO_02 6868 7.15 7.44 7.02 55 XM_Evil_Numbers_Gen 6290 7.84 6.81 8.31 56 XMSubMetaSx_00 6131 4.58 6.64 3.63 57 BAYES_60 5954 9.53 6.45 10.96 58 XM_H_Long_From01 5920 5.20 6.41 4.63 59 RCVD_IN_MSPIKE_BL 5857 2.75 6.34 1.10 60 TM2_M_VERY_LONG_WORD 5812 3.30 6.29 1.91 61 TR_XM_MSPIKECOMBO 5737 2.71 6.21 1.09 62 XM_UB50 5722 2.47 6.19 0.75 63 TR_XM_DK_SendGrid 5592 4.75 6.05 4.15 64 XM_B_SpammyTLD 5271 3.02 5.71 1.78 65 RCVD_IN_MSPIKE_H4 5067 9.20 5.49 10.92 66 MIME_HTML_ONLY_MULTI 5022 4.17 5.44 3.59 67 LotsOfNums_01 5012 7.93 5.43 9.09 68 TR_XM_PhishingBody 4881 3.27 5.28 2.34 69 TooManyTo_001 4627 9.57 5.01 11.68 70 BAYES_95 4618 3.68 5.00 3.07 71 TR_XM_SPAMCOP 4577 1.71 4.96 0.21 72 T_REMOTE_IMAGE 4354 3.74 4.71 3.29 73 TR_XM_NoHeaderRelay 4315 1.58 4.67 0.16 74 XM_B_Phish_Phrases 4278 3.83 4.63 3.47 75 RCVD_IN_VALIDITY_SAFE 4232 5.53 4.58 5.97 76 XM_GoogleGroups 4118 2.61 4.46 1.76 77 XM_H_Long_From02 4035 2.06 4.37 0.99 78 RELAYCOUNTRY_FR 3977 1.52 4.31 0.23 79 URIBL_DBL_SPAM 3853 1.33 4.17 0.02 80 XM_SPF_SoftFail 3848 2.71 4.17 2.04 81 T_FILL_THIS_FORM_SHORT 3744 1.77 4.05 0.72 82 RCVD_IN_VALIDITY_CERTIFIED 3730 4.89 4.04 5.29 83 T_XMDrugObfuBody_14 3649 2.76 3.95 2.21 84 HTML_MIME_NO_HTML_TAG 3597 2.32 3.89 1.59 85 RELAYCOUNTRY_DE 3584 1.44 3.88 0.32 86 HTML_IMAGE_RATIO_04 3583 4.55 3.88 4.87 87 XM_DK_Undo_01 3419 2.06 3.70 1.30 88 PDS_OTHER_BAD_TLD 3353 1.41 3.63 0.39 89 MISSING_HEADERS 3331 1.29 3.61 0.22 90 LONG_JUNK_URI3 3326 1.15 3.60 0.02 91 XMMoneyMeta_00 3313 1.27 3.59 0.19 92 XMStrtUSub 3218 5.01 3.48 5.72 93 XMLngstWrd_00 3195 1.94 3.46 1.24 94 ALL_TRUSTED 3193 16.85 3.46 23.04 95 XMLngstWrd_01 3122 1.85 3.38 1.14 96 XMLngstWrd_02 3089 1.78 3.34 1.06 97 T_TooManySym_01 3033 6.16 3.28 7.49 98 SpammyFromTLD_01 3030 1.34 3.28 0.44 99 USER_IN_DEF_DKIM_WL 3020 11.37 3.27 15.11 100 T_TVD_MIME_EPI 3019 1.04 3.27 0.00 101 RCVD_IN_VALIDITY_RPBL 2948 1.02 3.19 0.01 102 XM_B_Investor 2942 1.82 3.19 1.19 103 HTML_IMAGE_RATIO_06 2910 3.11 3.15 3.09 104 MIME_HTML_MOSTLY 2873 2.60 3.11 2.37 105 TM2_M_URI_OPT_OUT 2835 6.67 3.07 8.33 106 XM_OfRef6 2774 1.52 3.00 0.83 107 XMLngstWrd_03 2712 1.58 2.94 0.95 108 HTML_TITLE_SUBJ_DIFF 2691 1.45 2.91 0.78 109 XMNumbers 2691 4.06 2.91 4.58 110 XMLngstWrd_04 2679 1.51 2.90 0.87 111 TR_XM_SpammyWords3 2667 1.16 2.89 0.36 112 UPPERCASE_75_100 2616 1.30 2.83 0.60 113 RCVD_IN_MSPIKE_L3 2554 1.24 2.76 0.53 114 XM_CamelCaseFrm001 2552 2.00 2.76 1.65 115 TR_XM_SpammyWords5 2527 1.91 2.74 1.52 116 TR_XM_MSPIKECOMBO2 2498 1.11 2.70 0.37 117 HDRS_MISSP 2497 0.86 2.70 0.01 118 XM_B_Phish66 2466 1.55 2.67 1.04 119 XM_H_Undi_Recip 2431 0.93 2.63 0.14 120 BOTNET_NORDNS 2351 0.82 2.55 0.03 121 XMDiploma_00 2348 1.53 2.54 1.06 122 T_XMDrugObfuBody_08 2311 1.62 2.50 1.21 123 RCVD_IN_MSPIKE_L5 2245 0.78 2.43 0.02 124 T_XMHurry_00 2230 1.17 2.41 0.59 125 HTML_IMAGE_RATIO_08 2203 1.90 2.38 1.68 126 XM_DIRTYINTL 2198 0.90 2.38 0.22 127 MAILING_LIST_MULTI 2181 2.17 2.36 2.09 128 SpammyFromTLD_02 2156 0.85 2.33 0.17 129 URI_NOVOWEL 2095 2.27 2.27 2.28 130 MIME_QP_LONG_LINE 2091 7.51 2.26 9.93 131 TR_XM_BayesRelay 2056 0.71 2.23 0.01 132 XM_B_SpammyWords4 2049 1.19 2.22 0.72 133 FROM_EXCESS_BASE64 2022 2.75 2.19 3.01 134 XM_UB99 2001 0.69 2.17 0.00 135 XMBody_17 1965 1.02 2.13 0.51 136 TR_XM_FormFill 1939 0.67 2.10 0.01 137 TR_XM_PHPDW 1897 0.95 2.05 0.44 138 DIET_1 1843 0.97 2.00 0.49 139 XM_B_Unsub2 1832 1.91 1.98 1.88 140 TR_XM_PHPForged 1817 0.88 1.97 0.38 141 FROM_SUSPICIOUS_NTLD 1815 0.67 1.96 0.07 142 DKIM_INVALID 1806 1.63 1.96 1.49 143 TR_XM_FormFill2 1786 0.87 1.93 0.38 144 RCVD_IN_IADB_LISTED 1785 3.53 1.93 4.27 145 SUBJ_ALL_CAPS 1782 1.52 1.93 1.33 146 XM_H_PHPOS 1777 0.86 1.92 0.37 147 FROM_SUSPICIOUS_NTLD_FP 1766 0.65 1.91 0.07 148 XMSexyCombo_01 1712 0.81 1.85 0.32 149 GOOGLE_DOC_SUSP 1699 0.58 1.84 0.00 150 RCVD_IN_PSBL 1679 0.65 1.82 0.11 151 XM_Body_Dirty_Words_01 1674 0.77 1.81 0.28 152 XMBrknScrpt_02 1663 1.00 1.80 0.63 153 TR_Symld_Words 1656 1.79 1.79 1.78 154 XM_UB999 1649 0.57 1.79 0.00 155 XMBdyGiftCard01 1597 1.46 1.73 1.34 156 TR_Mismatch_TLD_02 1561 0.58 1.69 0.07 157 DKIM_ADSP_CUSTOM_MED 1534 1.07 1.66 0.79 158 T_XMDrugObfuBody_00 1522 1.11 1.65 0.86 159 URI_HEX 1508 1.27 1.63 1.10 160 XMStockSpam_06 1489 1.00 1.61 0.71 161 KHOP_HELO_FCRDNS 1408 1.60 1.52 1.63 162 RCVD_IN_IADB_SPF 1404 3.11 1.52 3.84 163 TR_XM_SB_Phish 1402 1.54 1.52 1.55 164 XMSubPhish11 1388 1.52 1.50 1.53 165 MY_SERVERS_FOUND 1330 1.51 1.44 1.54 166 XM_RXBody 1301 1.39 1.41 1.38 167 HTTPS_HTTP_MISMATCH 1299 0.81 1.41 0.54 168 XMSubNoVowel 1297 1.08 1.40 0.92 169 BAYES_40 1279 3.56 1.38 4.56 170 RCVD_IN_IADB_VOUCHED 1275 2.39 1.38 2.86 171 RCVD_IN_IADB_DK 1250 2.70 1.35 3.32 172 LongTLD 1248 0.50 1.35 0.10 173 RCVD_IN_IADB_SENDERID 1218 2.77 1.32 3.44 174 XMPhish30 1205 0.94 1.30 0.78 175 XMCapTrack 1162 0.64 1.26 0.35 176 XM_URI_RBL 1157 0.50 1.25 0.15 177 TR_XM_MaxSPIKE 1131 0.47 1.22 0.13 178 TR_LOTS_OF_MONEY2 1131 0.60 1.22 0.31 179 T_MONEY_PERCENT 1131 0.60 1.22 0.31 180 XM_ProductURIs 1129 0.76 1.22 0.54 181 BAYES_20 1120 3.26 1.21 4.20 182 TM2_M_A_HREF_HREF 1120 0.67 1.21 0.42 183 TR_Mismatch_TLD_01 1111 0.58 1.20 0.30 184 MIME_CHARSET_FARAWAY 1107 0.54 1.20 0.24 185 XM_B_REG_HTML 1074 0.62 1.16 0.37 186 RELAYCOUNTRY_RU 1069 0.38 1.16 0.02 187 XM_GoogleGroups2 1038 0.44 1.12 0.12 188 RELAYCOUNTRY_CN 1026 0.38 1.11 0.04 189 XMHTML_After_End 1025 0.69 1.11 0.49 190 XMHTMLBadTable_001 1011 0.69 1.09 0.50 191 MPART_ALT_DIFF_COUNT 1010 0.85 1.09 0.73 192 RELAYCOUNTRY_AU 1010 0.46 1.09 0.17 193 HK_RANDOM_REPLYTO 988 0.40 1.07 0.09 194 XM_GoogleGroups3 963 0.34 1.04 0.01 195 XM_GoogleGroups4 962 0.33 1.04 0.01 196 RELAYCOUNTRY_GB 959 0.65 1.04 0.47 197 MIME_BASE64_TEXT 948 0.39 1.03 0.10 198 RELAYCOUNTRY_NL 945 0.39 1.02 0.10 199 SHOPIFY_IMG_NOT_RCVD_SFY 940 0.50 1.02 0.26 200 XMReplyNow 939 0.47 1.02 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 168459 87.46 94.61 84.16 2 RELAYCOUNTRY_US 149306 75.93 78.82 74.60 3 DKIM_SIGNED 141277 75.63 86.56 70.58 4 XM_DK_Pass 139291 74.46 85.02 69.59 5 DKIM_VALID 138304 74.00 84.61 69.10 6 XM_B_Unicode 133343 69.90 77.01 66.62 7 DCC_CHECK_NEGATIVE 132637 56.13 34.16 66.27 8 DKIM_VALID_AU 111931 59.27 66.51 55.92 9 BAYES_50 102747 46.54 36.15 51.33 10 XMListUnsubscribeExists 96872 54.52 67.78 48.40 11 XM_B_SpammyWords 94990 52.27 62.70 47.46 12 XM_B_Unicode3 84269 42.38 42.99 42.10 13 DCC_CHECK 67464 43.84 65.81 33.71 14 HTML_FONT_LOW_CONTRAST 59239 30.92 33.77 29.60 15 RCVD_IN_MSPIKE_WL 56186 25.65 20.39 28.07 16 DKIM_VALID_EF 56167 27.93 27.64 28.06 17 XM_B_SpammyWords2 49464 28.21 35.80 24.71 18 LOC_TINY_FONT_1 48866 29.29 39.86 24.41 19 FVGT_m_MULTI_ODD 47898 27.03 33.76 23.93 20 ALL_TRUSTED 46106 16.85 3.46 23.04 21 T_TM2_M_HEADER_IN_MSG 43935 21.47 20.44 21.95 22 XMSubLong 42231 21.15 21.25 21.10 23 MIME_HTML_ONLY 40588 23.73 31.21 20.28 24 RCVD_IN_MSPIKE_H2 38585 21.48 26.27 19.28 25 XM_B_Unsub 35252 17.88 18.45 17.61 26 T_KAM_HTML_FONT_INVALID 34783 19.62 24.47 17.38 27 RCVD_IN_MSPIKE_H3 30668 15.07 14.54 15.32 28 USER_IN_DEF_DKIM_WL 30240 11.37 3.27 15.11 29 XM_Multi_Part_URI 27561 14.38 15.71 13.77 30 TooManyTo_001 23375 9.57 5.01 11.68 31 XM_Body_Dirty_Words 22786 14.71 21.93 11.38 32 BAYES_60 21927 9.53 6.45 10.96 33 RCVD_IN_MSPIKE_H4 21854 9.20 5.49 10.92 34 XM_DKIMWhitelistDomains 21759 7.46 0.06 10.87 35 BAYES_00 21664 7.59 0.59 10.82 36 MIME_QP_LONG_LINE 19878 7.51 2.26 9.93 37 XM_DK_Undo_02 18647 20.61 45.09 9.32 38 LotsOfNums_01 18187 7.93 5.43 9.09 39 UNPARSEABLE_RELAY 17315 11.39 17.33 8.65 40 TM2_M_URI_OPT_OUT 16671 6.67 3.07 8.33 41 XM_Evil_Numbers_Gen 16634 7.84 6.81 8.31 42 BAYES_99 15977 18.21 40.38 7.98 43 T_TooManySym_01 15001 6.16 3.28 7.49 44 LOTS_OF_MONEY 14241 8.99 13.06 7.12 45 HTML_IMAGE_RATIO_02 14058 7.15 7.44 7.02 46 TR_XM_UnparsRelay 13850 10.08 16.93 6.92 47 BAYES_999 13681 14.97 32.59 6.84 48 XM_B_SpammyWords3 12710 8.38 12.78 6.35 49 XM_SendGrid 12071 6.80 8.46 6.03 50 BOTNET_IPINHOSTNAME 12063 7.44 10.49 6.03 51 RCVD_IN_VALIDITY_SAFE 11941 5.53 4.58 5.97 52 TR_XM_DKIM_Undo 11559 15.61 36.93 5.78 53 TR_XM_DK_Bayes 11482 4.08 0.48 5.74 54 XMStrtUSub 11448 5.01 3.48 5.72 55 TR_XM_DK_Bayes1 11349 4.03 0.48 5.67 56 IN_ZIMBRA_NJ_WHITELIST 11040 3.79 0.06 5.52 57 MPART_ALT_DIFF 10871 6.18 7.81 5.43 58 RCVD_IN_VALIDITY_CERTIFIED 10588 4.89 4.04 5.29 59 SHORT_URI_2 10386 3.77 0.70 5.19 60 TR_XM_DK_Bayes2 10293 3.62 0.33 5.14 61 HTML_IMAGE_RATIO_04 9739 4.55 3.88 4.87 62 BAYES_80 9350 5.82 8.32 4.67 63 T_TooManySym_02 9297 3.37 0.62 4.64 64 XM_H_Long_From01 9277 5.20 6.41 4.63 65 XMNumbers 9177 4.06 2.91 4.58 66 BAYES_40 9127 3.56 1.38 4.56 67 RCVD_IN_IADB_LISTED 8545 3.53 1.93 4.27 68 BAYES_20 8416 3.26 1.21 4.20 69 XM_UncommonTLD01 8346 5.73 9.11 4.17 70 TR_XM_DK_SendGrid 8299 4.75 6.05 4.15 71 TR_XM_SpammyWords4 7996 6.14 10.80 3.99 72 RCVD_IN_IADB_SPF 7685 3.11 1.52 3.84 73 XMSubMetaSx_00 7266 4.58 6.64 3.63 74 MIME_HTML_ONLY_MULTI 7187 4.17 5.44 3.59 75 INVALID_MSGID 7140 2.50 0.20 3.57 76 XM_B_Phish_Phrases 6938 3.83 4.63 3.47 77 RCVD_IN_IADB_SENDERID 6887 2.77 1.32 3.44 78 MSGID_NOFQDN1 6787 2.34 0.07 3.39 79 TVD_RCVD_IP 6682 2.38 0.32 3.34 80 RCVD_IN_IADB_DK 6641 2.70 1.35 3.32 81 T_REMOTE_IMAGE 6582 3.74 4.71 3.29 82 RELAYCOUNTRY_META 6310 9.48 23.18 3.15 83 HTML_IMAGE_RATIO_06 6193 3.11 3.15 3.09 84 XMSexyCombo_05 6181 5.23 9.86 3.09 85 BAYES_95 6139 3.68 5.00 3.07 86 FROM_EXCESS_BASE64 6027 2.75 2.19 3.01 87 ANY_BOUNCE_MESSAGE 6009 2.23 0.57 3.00 88 BOUNCE_MESSAGE 6008 2.23 0.56 3.00 89 FSL_BULK_SIG 5854 5.86 12.23 2.92 90 TO_MALFORMED 5772 1.98 0.02 2.88 91 RCVD_IN_IADB_VOUCHED 5719 2.39 1.38 2.86 92 TR_DCC_Bayes_99 5315 10.45 27.34 2.66 93 XM_H_Trusted_IP 5088 1.74 0.00 2.54 94 BAYES_05 4805 1.80 0.51 2.40 95 MIME_HTML_MOSTLY 4737 2.60 3.11 2.37 96 TR_XM_PhishingBody 4680 3.27 5.28 2.34 97 URI_NOVOWEL 4558 2.27 2.27 2.28 98 T_XMDrugObfuBody_14 4426 2.76 3.95 2.21 99 MAILING_LIST_MULTI 4175 2.17 2.36 2.09 100 XM_SPF_SoftFail 4074 2.71 4.17 2.04 101 IN_HORDE_ADDRESS_BOOK 3998 1.39 0.08 2.00 102 TM2_M_VERY_LONG_WORD 3827 3.30 6.29 1.91 103 XM_B_Unsub2 3758 1.91 1.98 1.88 104 XM_PDF 3743 1.39 0.36 1.87 105 RCVD_IN_IADB_OPTIN 3724 1.53 0.81 1.86 106 RCVD_IN_MSPIKE_H5 3664 1.37 0.37 1.83 107 TR_Symld_Words 3566 1.79 1.79 1.78 108 XM_B_SpammyTLD 3558 3.02 5.71 1.78 109 XMBSHREFv2 3547 1.29 0.26 1.77 110 XM_GoogleGroups 3528 2.61 4.46 1.76 111 HTML_IMAGE_RATIO_08 3359 1.90 2.38 1.68 112 TR_XM_SpammyWords2 3334 5.66 14.31 1.67 113 XM_CamelCaseFrm001 3300 2.00 2.76 1.65 114 KHOP_HELO_FCRDNS 3267 1.60 1.52 1.63 115 XMGappySubj_01 3227 1.31 0.65 1.61 116 TVD_SPACE_RATIO 3224 1.12 0.06 1.61 117 HTML_MIME_NO_HTML_TAG 3175 2.32 3.89 1.59 118 BOTNET 3148 4.14 9.70 1.57 119 TR_XM_SpammyRelay 3124 4.70 11.50 1.56 120 TR_XM_SB_Phish 3104 1.54 1.52 1.55 121 MY_SERVERS_FOUND 3085 1.51 1.44 1.54 122 XMSubPhish11 3060 1.52 1.50 1.53 123 TR_XM_SpammyWords5 3050 1.91 2.74 1.52 124 TR_XM_MaxUnsub 3025 3.90 9.06 1.51 125 DKIM_INVALID 2973 1.63 1.96 1.49 126 XM_RXBody 2767 1.39 1.41 1.38 127 XMBdyGiftCard01 2677 1.46 1.73 1.34 128 SUBJ_ALL_CAPS 2660 1.52 1.93 1.33 129 XM_DK_Undo_01 2609 2.06 3.70 1.30 130 XMLngstWrd_00 2480 1.94 3.46 1.24 131 T_XMDrugObfuBody_08 2431 1.62 2.50 1.21 132 XM_B_Investor 2386 1.82 3.19 1.19 133 RCVD_IN_RP_SAFE 2325 1.09 0.94 1.16 134 UNTRUSTED_Relay 2325 4.10 10.46 1.16 135 TooManyTo_002 2321 0.97 0.56 1.16 136 XMLngstWrd_01 2289 1.85 3.38 1.14 137 XM_shorewaves_Whitelist 2212 0.76 0.00 1.11 138 URI_HEX 2202 1.27 1.63 1.10 139 RCVD_IN_MSPIKE_BL 2192 2.75 6.34 1.10 140 TR_XM_MSPIKECOMBO 2191 2.71 6.21 1.09 141 RELAYCOUNTRY_CA 2132 3.23 7.93 1.07 142 XMLngstWrd_02 2125 1.78 3.34 1.06 143 XMDiploma_00 2124 1.53 2.54 1.06 144 T_TooManySym_03 2079 0.80 0.29 1.04 145 XM_B_Phish66 2072 1.55 2.67 1.04 146 SHORTENED_URL_HREF 2053 0.80 0.30 1.03 147 RCVD_IN_RP_CERTIFIED 2051 0.96 0.83 1.02 148 XM_H_Long_From02 1980 2.06 4.37 0.99 149 XMLngstWrd_03 1897 1.58 2.94 0.95 150 XMSubNoVowel 1848 1.08 1.40 0.92 151 XMBody_95 1811 0.67 0.15 0.90 152 XM_D_tchamptons_WL 1754 0.60 0.00 0.88 153 HTML_FONT_FACE_BAD 1751 0.83 0.75 0.87 154 XMLngstWrd_04 1732 1.51 2.90 0.87 155 T_XMDrugObfuBody_00 1723 1.11 1.65 0.86 156 XM_OfRef6 1670 1.52 3.00 0.83 157 TooManyTo_003 1662 0.71 0.46 0.83 158 RCVD_IN_BL_SPAMCOP_NET 1612 3.57 9.56 0.81 159 DKIM_ADSP_CUSTOM_MED 1589 1.07 1.66 0.79 160 XM_B_COPY_HTML 1571 0.77 0.74 0.78 161 SHORT_URI_3 1560 0.58 0.15 0.78 162 HTML_TITLE_SUBJ_DIFF 1556 1.45 2.91 0.78 163 XMPhish30 1552 0.94 1.30 0.78 164 XM_B_COVIDMETA 1533 0.81 0.92 0.77 165 TR_MetaPhish_Combo_01 1528 0.80 0.87 0.76 166 XM_UB50 1497 2.47 6.19 0.75 167 HTML_IMAGE_ONLY_20 1475 0.63 0.39 0.74 168 MPART_ALT_DIFF_COUNT 1462 0.85 1.09 0.73 169 XM_B_SpammyWords4 1443 1.19 2.22 0.72 170 T_FILL_THIS_FORM_SHORT 1441 1.77 4.05 0.72 171 XMStockSpam_06 1429 1.00 1.61 0.71 172 HTML_TAG_BALANCE_BODY 1415 0.75 0.83 0.71 173 USER_IN_WHITELIST 1380 0.47 0.00 0.69 174 USER_IN_WELCOMELIST 1380 0.47 0.00 0.69 175 TooManyTo_004 1271 0.58 0.45 0.64 176 XMBrknScrpt_02 1264 1.00 1.80 0.63 177 XMSlimDrugH 1254 0.58 0.47 0.63 178 URI_TRY_3LD 1251 0.67 0.77 0.63 179 PRICES_ARE_AFFORDABLE 1223 0.48 0.20 0.61 180 UPPERCASE_75_100 1192 1.30 2.83 0.60 181 T_XMHurry_00 1188 1.17 2.41 0.59 182 XM_H_PHPMailer 1182 0.66 0.80 0.59 183 RDNS_DYNAMIC 1177 0.63 0.73 0.59 184 XMSubMetaSxObfu_03 1117 0.62 0.75 0.56 185 RCVD_IN_MSPIKE_L4 1087 0.69 1.02 0.54 186 XM_ProductURIs 1081 0.76 1.22 0.54 187 HTTPS_HTTP_MISMATCH 1079 0.81 1.41 0.54 188 RCVD_IN_MSPIKE_L3 1070 1.24 2.76 0.53 189 TooManyTo_005 1055 0.50 0.43 0.53 190 XMBody_17 1026 1.02 2.13 0.51 191 TVD_QUAL_MEDS 1022 0.39 0.12 0.51 192 XMHTMLBadTable_001 1003 0.69 1.09 0.50 193 XMSubMetaSxObfu_02 994 0.59 0.78 0.50 194 XMHTML_After_End 989 0.69 1.11 0.49 195 DIET_1 983 0.97 2.00 0.49 196 FORGED_GMAIL_RCVD 965 0.58 0.79 0.48 197 XMSubject_09 960 0.39 0.21 0.48 198 RELAYCOUNTRY_GB 939 0.65 1.04 0.47 199 TR_MSPIKEBAYES00 901 0.31 0.01 0.45 200 XMGenDplmaNmb 897 0.58 0.85 0.45 ----------------------------------------------------------------------