Email: 306483 Autolearn: 0 AvgScore: 3.26 AvgScanTime: 1.20 sec Spam: 101084 Autolearn: 0 AvgScore: 14.20 AvgScanTime: 1.34 sec Ham: 205399 Autolearn: 0 AvgScore: -2.13 AvgScanTime: 1.13 sec Time Spent Running SA: 102.22 hours Time Spent Processing Spam: 37.67 hours Time Spent Processing Ham: 64.55 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 94075 78.50 93.07 71.34 2 DKIM_SIGNED 91067 83.14 90.09 79.72 3 XM_DK_Pass 89731 82.11 88.77 78.84 4 DKIM_VALID 89153 81.44 88.20 78.11 5 RELAYCOUNTRY_US 84007 83.27 83.11 83.36 6 XM_B_Unicode 80782 67.55 79.92 61.47 7 DCC_CHECK 74895 47.71 74.09 34.73 8 XMListUnsubscribeExists 69853 53.73 69.10 46.16 9 DKIM_VALID_AU 68564 58.14 67.83 53.38 10 XM_B_SpammyWords 67580 47.59 66.86 38.11 11 RCVD_IN_MSPIKE_H2 50849 48.32 50.30 47.34 12 XM_DK_Undo_02 46941 20.29 46.44 7.42 13 XM_B_Unicode3 43850 40.56 43.38 39.18 14 BAYES_50 38900 46.52 38.48 50.47 15 XM_B_SpammyWords2 38091 23.91 37.68 17.13 16 BAYES_99 37316 16.61 36.92 6.62 17 TR_XM_DKIM_Undo 37285 15.46 36.89 4.91 18 LOC_TINY_FONT_1 35038 27.76 34.66 24.36 19 MIME_HTML_ONLY 34979 23.51 34.60 18.05 20 FVGT_m_MULTI_ODD 34814 26.77 34.44 22.99 21 HTML_FONT_LOW_CONTRAST 34434 29.82 34.06 27.73 22 DKIM_VALID_EF 32886 27.64 32.53 25.24 23 BAYES_999 29740 13.38 29.42 5.48 24 T_KAM_HTML_FONT_INVALID 27382 20.69 27.09 17.54 25 TR_DCC_Bayes_99 26486 10.46 26.20 2.71 26 DCC_CHECK_NEGATIVE 26164 52.27 25.88 65.25 27 XM_Body_Dirty_Words 23704 14.59 23.45 10.23 28 RELAYCOUNTRY_META 21083 9.00 20.86 3.17 29 T_TM2_M_HEADER_IN_MSG 19753 19.56 19.54 19.57 30 XMSubLong 19104 19.80 18.90 20.24 31 XM_Multi_Part_URI 18042 14.41 17.85 12.72 32 XM_B_Unsub 16278 11.02 16.10 8.51 33 RCVD_IN_MSPIKE_WL 16134 16.41 15.96 16.63 34 TR_XM_BayesUnsub 16065 9.94 15.89 7.01 35 TR_XM_SpammyWords2 13896 5.58 13.75 1.56 36 UNPARSEABLE_RELAY 13410 9.01 13.27 6.92 37 RCVD_IN_MSPIKE_H3 13312 11.92 13.17 11.30 38 TR_XM_UnparsRelay 13132 8.05 12.99 5.62 39 LOTS_OF_MONEY 12971 8.42 12.83 6.25 40 TR_XM_SpammyRelay 12852 5.33 12.71 1.70 41 RCVD_IN_BL_SPAMCOP_NET 12777 4.44 12.64 0.40 42 BOTNET_IPINHOSTNAME 12581 8.13 12.45 6.01 43 FSL_BULK_SIG 12268 6.35 12.14 3.51 44 XM_B_SpammyWords3 11700 7.25 11.57 5.12 45 XMSexyCombo_05 11085 6.24 10.97 3.91 46 BOTNET 10372 4.33 10.26 1.41 47 TR_XM_SpammyWords4 10231 5.81 10.12 3.69 48 RELAYCOUNTRY_CA 10204 4.27 10.09 1.40 49 MPART_ALT_DIFF 9948 6.60 9.84 5.01 50 TR_XM_SPAMCOP 8983 3.07 8.89 0.21 51 BAYES_80 8444 5.62 8.35 4.27 52 XM_UncommonTLD01 8097 5.35 8.01 4.04 53 BAYES_60 8056 9.26 7.97 9.90 54 TM2_M_VERY_LONG_WORD 7917 3.51 7.83 1.38 55 MIME_HTML_ONLY_MULTI 7709 4.52 7.63 2.98 56 HTML_IMAGE_RATIO_02 7656 6.80 7.57 6.42 57 XM_Evil_Numbers_Gen 7462 7.27 7.38 7.22 58 UNTRUSTED_Relay 6485 2.98 6.42 1.30 59 XM_H_Long_From01 6429 4.78 6.36 4.00 60 HTML_MIME_NO_HTML_TAG 6334 2.85 6.27 1.18 61 XMSubMetaSx_00 5986 4.35 5.92 3.57 62 XMLngstWrd_00 5882 2.47 5.82 0.83 63 XM_SendGrid 5854 4.42 5.79 3.74 64 XM_GoogleGroups 5816 2.71 5.75 1.20 65 XMLngstWrd_01 5811 2.39 5.75 0.74 66 LotsOfNums_01 5799 6.82 5.74 7.36 67 XMLngstWrd_02 5735 2.27 5.67 0.59 68 XMLngstWrd_03 5658 2.07 5.60 0.34 69 XMLngstWrd_04 5615 1.99 5.55 0.24 70 BAYES_95 5503 3.62 5.44 2.72 71 HTML_TITLE_SUBJ_DIFF 5359 1.78 5.30 0.04 72 TR_XM_PhishingBody 5252 3.61 5.20 2.83 73 UPPERCASE_75_100 5227 1.72 5.17 0.02 74 TooManyTo_001 5124 5.32 5.07 5.45 75 RCVD_IN_VALIDITY_SAFE 4930 5.73 4.88 6.15 76 RCVD_IN_MSPIKE_BL 4704 2.02 4.65 0.72 77 XM_B_Phish_Phrases 4674 2.99 4.62 2.19 78 TR_XM_MSPIKECOMBO 4582 1.98 4.53 0.72 79 HTML_IMAGE_RATIO_04 4548 5.04 4.50 5.30 80 XM_DIRTYINTL 4432 1.64 4.38 0.29 81 XM_SPF_SoftFail 4403 2.65 4.36 1.80 82 T_FILL_THIS_FORM_SHORT 4338 1.70 4.29 0.42 83 XM_B_Investor 4320 2.20 4.27 1.18 84 T_REMOTE_IMAGE 4246 3.40 4.20 3.01 85 T_XMDrugObfuBody_14 4233 2.48 4.19 1.64 86 XMStrtUSub 4186 4.75 4.14 5.05 87 XMBody_17 3786 1.59 3.75 0.52 88 TR_XM_SpammyWords5 3772 2.02 3.73 1.18 89 TR_XM_DK_SendGrid 3755 2.92 3.71 2.52 90 XM_B_SpammyTLD 3711 2.33 3.67 1.67 91 RCVD_IN_VALIDITY_CERTIFIED 3707 4.86 3.67 5.45 92 T_XMDrugObfuBody_08 3635 2.01 3.60 1.23 93 MIME_HTML_MOSTLY 3474 3.03 3.44 2.83 94 XM_CamelCaseFrm001 3360 2.22 3.32 1.68 95 SpammyFromTLD_02 3165 1.13 3.13 0.14 96 RCVD_IN_VALIDITY_RPBL 3094 1.08 3.06 0.10 97 XMNumbers 3065 3.57 3.03 3.84 98 XM_OfRef6 2961 1.53 2.93 0.83 99 XM_UB50 2865 1.40 2.83 0.70 100 T_TooManySym_01 2814 5.89 2.78 7.41 101 HTML_IMAGE_RATIO_08 2799 2.39 2.77 2.21 102 HTML_IMAGE_RATIO_06 2794 3.39 2.76 3.70 103 MONEY_NOHTML 2757 0.93 2.73 0.05 104 XM_H_Undi_Recip 2693 0.99 2.66 0.17 105 XMDiploma_00 2668 1.89 2.64 1.52 106 SpammyFromTLD_01 2629 1.09 2.60 0.35 107 RCVD_IN_MSPIKE_H4 2595 3.79 2.57 4.40 108 TR_XM_MSPIKECOMBO2 2483 0.97 2.46 0.23 109 BOTNET_NORDNS 2457 0.81 2.43 0.01 110 XM_B_Phish66 2452 1.87 2.43 1.59 111 USER_IN_DEF_DKIM_WL 2343 11.46 2.32 15.96 112 TR_XM_Undi_Recip5 2291 0.75 2.27 0.01 113 TR_XM_SpammyWords3 2287 0.91 2.26 0.24 114 HK_RANDOM_REPLYTO 2284 0.82 2.26 0.12 115 SUBJ_ALL_CAPS 2215 1.41 2.19 1.03 116 TM2_M_URI_OPT_OUT 2111 2.27 2.09 2.37 117 PDS_OTHER_BAD_TLD 2100 0.79 2.08 0.16 118 XM_B_SpammyWords4 2079 1.57 2.06 1.33 119 MIME_QP_LONG_LINE 2073 2.72 2.05 3.04 120 KHOP_HELO_FCRDNS 2055 1.58 2.03 1.36 121 RCVD_IN_MSPIKE_L3 2039 0.92 2.02 0.38 122 T_XMHurry_00 2032 1.00 2.01 0.50 123 UNDISC_MONEY 1983 0.65 1.96 0.01 124 TR_LOTS_OF_MONEY3 1955 0.78 1.93 0.22 125 DKIM_INVALID 1914 1.70 1.89 1.61 126 TR_XM_BayesRelay 1882 0.62 1.86 0.00 127 HTML_TAG_BALANCE_BODY 1882 0.98 1.86 0.55 128 TR_XM_FormFill 1873 0.62 1.85 0.01 129 URI_NOVOWEL 1821 1.76 1.80 1.74 130 XMBdyGiftCard01 1819 1.37 1.80 1.16 131 TR_XM_Undi_Recip2 1818 0.60 1.80 0.02 132 RCVD_IN_PSBL 1787 0.85 1.77 0.39 133 TR_XM_PHPDW 1746 0.76 1.73 0.28 134 RCVD_IN_IADB_LISTED 1746 2.74 1.73 3.24 135 XM_B_Unsub2 1745 1.16 1.73 0.88 136 TR_XM_PHPForged 1724 0.71 1.71 0.22 137 FONT_INVIS_LONG_LINE 1708 0.58 1.69 0.03 138 FROM_EXCESS_BASE64 1707 2.37 1.69 2.71 139 RCVD_IN_MSPIKE_L5 1700 0.56 1.68 0.01 140 TR_XM_FormFill2 1699 0.71 1.68 0.23 141 XM_H_PHPOS 1695 0.69 1.68 0.21 142 MPART_ALT_DIFF_COUNT 1691 1.12 1.67 0.85 143 URI_HEX 1678 1.30 1.66 1.13 144 TR_Symld_Words 1675 1.68 1.66 1.69 145 XMBrknScrpt_02 1642 0.90 1.62 0.54 146 XMSexyCombo_01 1641 0.79 1.62 0.38 147 XM_B_DynamicLink 1633 0.59 1.62 0.09 148 XM_DK_Undo_01 1534 1.27 1.52 1.15 149 TR_XM_MaxSPIKE 1473 0.56 1.46 0.12 150 HK_SCAM 1454 0.48 1.44 0.01 151 RCVD_IN_IADB_SPF 1450 2.42 1.43 2.90 152 XMStockSpam_06 1449 1.49 1.43 1.52 153 RELAYCOUNTRY_RU 1432 0.50 1.42 0.04 154 ALL_TRUSTED 1424 9.82 1.41 13.95 155 TR_Sbj_FN_Bdy 1403 0.53 1.39 0.10 156 MONEY_FORM_SHORT 1400 0.46 1.38 0.00 157 XM_UB99 1386 0.45 1.37 0.00 158 HK_RANDOM_ENVFROM 1373 0.51 1.36 0.09 159 URIBL_DBL_SPAM 1369 0.45 1.35 0.01 160 TR_XM_NoHeaderRelay 1336 0.49 1.32 0.08 161 URI_TRY_3LD 1332 0.67 1.32 0.34 162 SHOPIFY_IMG_NOT_RCVD_SFY 1313 0.55 1.30 0.18 163 RCVD_IN_IADB_DK 1304 2.11 1.29 2.51 164 RCVD_IN_IADB_SENDERID 1300 2.17 1.29 2.60 165 FROM_SUSPICIOUS_NTLD 1278 0.44 1.26 0.03 166 HK_RANDOM_FROM 1276 0.48 1.26 0.10 167 XMPhish30 1270 0.87 1.26 0.68 168 TR_XM_SB_Phish 1257 1.39 1.24 1.46 169 T_XMDrugObfuBody_00 1254 0.77 1.24 0.54 170 TR_Mismatch_TLD_01 1242 0.58 1.23 0.26 171 XM_URI_RBL 1222 0.47 1.21 0.11 172 RELAYCOUNTRY_AU 1204 0.53 1.19 0.20 173 XMSubPhish11 1186 1.36 1.17 1.45 174 HTTPS_HTTP_MISMATCH 1183 0.73 1.17 0.51 175 MAILING_LIST_MULTI 1179 1.67 1.17 1.92 176 DIET_1 1176 0.59 1.16 0.30 177 XMReplyNow 1173 0.58 1.16 0.30 178 TR_Caps_n_Bayes_99 1169 0.50 1.16 0.18 179 FROM_SUSPICIOUS_NTLD_FP 1169 0.40 1.16 0.03 180 RCVD_IN_RP_SAFE 1150 1.16 1.14 1.18 181 XMHTMLBadTable_001 1118 0.85 1.11 0.73 182 TR_Mismatch_TLD_02 1111 0.43 1.10 0.10 183 RCVD_IN_IADB_VOUCHED 1091 1.70 1.08 2.01 184 XM_UB999 1073 0.35 1.06 0.00 185 BAYES_40 1056 6.20 1.04 8.73 186 RDNS_DYNAMIC 1033 0.71 1.02 0.56 187 T_TooManySym_02 1002 3.42 0.99 4.61 188 XMSubNoVowel 998 0.91 0.99 0.87 189 XMGenDplmaNmb 997 0.94 0.99 0.92 190 TR_XM_Base64_M1 995 0.96 0.98 0.95 191 HTML_IMAGE_ONLY_20 992 0.76 0.98 0.65 192 XM_H_Long_From02 982 1.10 0.97 1.17 193 XMSubMetaSxObfu_03 976 0.57 0.97 0.38 194 URIBL_BLACK 970 0.33 0.96 0.03 195 HTML_SHORT_LINK_IMG_3 957 0.34 0.95 0.04 196 XM_B_COVIDMETA 951 0.57 0.94 0.38 197 TR_XM_Undi_RecipCombo2 946 0.31 0.94 0.00 198 XM_H_PHPMailer 924 0.64 0.91 0.51 199 HTML_FONT_TINY_NORDNS 913 0.34 0.90 0.06 200 XMSubMetaI_00 887 0.54 0.88 0.37 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 171214 83.27 83.11 83.36 2 DKIM_SIGNED 163735 83.14 90.09 79.72 3 XM_DK_Pass 161935 82.11 88.77 78.84 4 DKIM_VALID 160438 81.44 88.20 78.11 5 HTML_MESSAGE 146525 78.50 93.07 71.34 6 DCC_CHECK_NEGATIVE 134021 52.27 25.88 65.25 7 XM_B_Unicode 126255 67.55 79.92 61.47 8 DKIM_VALID_AU 109638 58.14 67.83 53.38 9 BAYES_50 103669 46.52 38.48 50.47 10 RCVD_IN_MSPIKE_H2 97232 48.32 50.30 47.34 11 XMListUnsubscribeExists 94814 53.73 69.10 46.16 12 XM_B_Unicode3 80473 40.56 43.38 39.18 13 XM_B_SpammyWords 78271 47.59 66.86 38.11 14 DCC_CHECK 71337 47.71 74.09 34.73 15 HTML_FONT_LOW_CONTRAST 56952 29.82 34.06 27.73 16 DKIM_VALID_EF 51838 27.64 32.53 25.24 17 LOC_TINY_FONT_1 50040 27.76 34.66 24.36 18 FVGT_m_MULTI_ODD 47231 26.77 34.44 22.99 19 XMSubLong 41582 19.80 18.90 20.24 20 T_TM2_M_HEADER_IN_MSG 40193 19.56 19.54 19.57 21 MIME_HTML_ONLY 37075 23.51 34.60 18.05 22 T_KAM_HTML_FONT_INVALID 36037 20.69 27.09 17.54 23 XM_B_SpammyWords2 35192 23.91 37.68 17.13 24 RCVD_IN_MSPIKE_WL 34155 16.41 15.96 16.63 25 USER_IN_DEF_DKIM_WL 32790 11.46 2.32 15.96 26 T_HTML_ATTACH 29369 9.62 0.12 14.30 27 ALL_TRUSTED 28658 9.82 1.41 13.95 28 XM_Multi_Part_URI 26124 14.41 17.85 12.72 29 XM_DKIMWhitelistDomains 23460 7.69 0.10 11.42 30 RCVD_IN_MSPIKE_H3 23210 11.92 13.17 11.30 31 XM_Body_Dirty_Words 21005 14.59 23.45 10.23 32 BAYES_60 20335 9.26 7.97 9.90 33 BAYES_40 17931 6.20 1.04 8.73 34 XM_B_Unsub 17483 11.02 16.10 8.51 35 BAYES_00 16690 5.63 0.55 8.13 36 XM_DK_Undo_02 15236 20.29 46.44 7.42 37 T_TooManySym_01 15226 5.89 2.78 7.41 38 LotsOfNums_01 15110 6.82 5.74 7.36 39 XM_Evil_Numbers_Gen 14828 7.27 7.38 7.22 40 TR_XM_BayesUnsub 14402 9.94 15.89 7.01 41 UNPARSEABLE_RELAY 14212 9.01 13.27 6.92 42 BAYES_99 13592 16.61 36.92 6.62 43 BAYES_20 13447 4.64 0.75 6.55 44 HTML_IMAGE_RATIO_02 13191 6.80 7.57 6.42 45 LOTS_OF_MONEY 12836 8.42 12.83 6.25 46 RCVD_IN_VALIDITY_SAFE 12634 5.73 4.88 6.15 47 BOTNET_IPINHOSTNAME 12346 8.13 12.45 6.01 48 TR_XM_UnparsRelay 11536 8.05 12.99 5.62 49 BAYES_999 11256 13.38 29.42 5.48 50 RCVD_IN_VALIDITY_CERTIFIED 11196 4.86 3.67 5.45 51 TooManyTo_001 11190 5.32 5.07 5.45 52 TR_XM_DK_Bayes 11097 3.77 0.44 5.40 53 HTML_IMAGE_RATIO_04 10890 5.04 4.50 5.30 54 IN_ZIMBRA_NJ_WHITELIST 10647 3.50 0.08 5.18 55 XM_B_SpammyWords3 10521 7.25 11.57 5.12 56 XMStrtUSub 10370 4.75 4.14 5.05 57 TR_XM_DK_Bayes1 10353 3.52 0.44 5.04 58 MPART_ALT_DIFF 10289 6.60 9.84 5.01 59 TR_XM_DKIM_Undo 10093 15.46 36.89 4.91 60 T_TooManySym_02 9465 3.42 0.99 4.61 61 TR_XM_DK_Bayes2 9186 3.10 0.31 4.47 62 RCVD_IN_MSPIKE_H4 9031 3.79 2.57 4.40 63 BAYES_80 8775 5.62 8.35 4.27 64 XM_UncommonTLD01 8294 5.35 8.01 4.04 65 XM_H_Long_From01 8225 4.78 6.36 4.00 66 XMSexyCombo_05 8035 6.24 10.97 3.91 67 XMNumbers 7880 3.57 3.03 3.84 68 XM_SendGrid 7689 4.42 5.79 3.74 69 HTML_IMAGE_RATIO_06 7595 3.39 2.76 3.70 70 TR_XM_SpammyWords4 7575 5.81 10.12 3.69 71 XMSubMetaSx_00 7332 4.35 5.92 3.57 72 FSL_BULK_SIG 7206 6.35 12.14 3.51 73 TVD_RCVD_IP 7020 2.42 0.39 3.42 74 INVALID_MSGID 6951 2.33 0.18 3.38 75 RCVD_IN_IADB_LISTED 6645 2.74 1.73 3.24 76 RELAYCOUNTRY_META 6501 9.00 20.86 3.17 77 MIME_QP_LONG_LINE 6252 2.72 2.05 3.04 78 T_REMOTE_IMAGE 6176 3.40 4.20 3.01 79 MIME_HTML_ONLY_MULTI 6130 4.52 7.63 2.98 80 RCVD_IN_IADB_SPF 5958 2.42 1.43 2.90 81 TO_MALFORMED 5926 1.94 0.01 2.89 82 XM_H_Trusted_IP 5878 1.92 0.00 2.86 83 MIME_HTML_MOSTLY 5809 3.03 3.44 2.83 84 TR_XM_PhishingBody 5804 3.61 5.20 2.83 85 BAYES_95 5578 3.62 5.44 2.72 86 TR_DCC_Bayes_99 5567 10.46 26.20 2.71 87 FROM_EXCESS_BASE64 5566 2.37 1.69 2.71 88 BAYES_05 5382 1.91 0.47 2.62 89 RCVD_IN_IADB_SENDERID 5339 2.17 1.29 2.60 90 TR_XM_DK_SendGrid 5183 2.92 3.71 2.52 91 RCVD_IN_IADB_DK 5163 2.11 1.29 2.51 92 TM2_M_URI_OPT_OUT 4860 2.27 2.09 2.37 93 HTML_IMAGE_RATIO_08 4537 2.39 2.77 2.21 94 XM_B_Phish_Phrases 4499 2.99 4.62 2.19 95 XMBSHREFv2 4465 1.58 0.37 2.17 96 ANY_BOUNCE_MESSAGE 4437 1.69 0.74 2.16 97 BOUNCE_MESSAGE 4436 1.69 0.73 2.16 98 RCVD_IN_IADB_VOUCHED 4120 1.70 1.08 2.01 99 MAILING_LIST_MULTI 3937 1.67 1.17 1.92 100 IN_HORDE_ADDRESS_BOOK 3896 1.31 0.12 1.90 101 XM_SPF_SoftFail 3704 2.65 4.36 1.80 102 URI_NOVOWEL 3568 1.76 1.80 1.74 103 TR_XM_SpammyRelay 3495 5.33 12.71 1.70 104 TR_Symld_Words 3464 1.68 1.66 1.69 105 XM_CamelCaseFrm001 3442 2.22 3.32 1.68 106 XM_B_SpammyTLD 3422 2.33 3.67 1.67 107 TVD_SPACE_RATIO 3389 1.14 0.09 1.65 108 T_XMDrugObfuBody_14 3375 2.48 4.19 1.64 109 XM_PDF 3373 1.24 0.42 1.64 110 DKIM_INVALID 3297 1.70 1.89 1.61 111 XM_B_Phish66 3271 1.87 2.43 1.59 112 TR_XM_SpammyWords2 3194 5.58 13.75 1.56 113 XMStockSpam_06 3130 1.49 1.43 1.52 114 XMDiploma_00 3113 1.89 2.64 1.52 115 TR_XM_SB_Phish 2999 1.39 1.24 1.46 116 XMSubPhish11 2980 1.36 1.17 1.45 117 XMGappySubj_01 2935 1.21 0.78 1.43 118 BOTNET 2894 4.33 10.26 1.41 119 RELAYCOUNTRY_CA 2884 4.27 10.09 1.40 120 RCVD_IN_IADB_OPTIN 2869 1.17 0.70 1.40 121 TM2_M_VERY_LONG_WORD 2839 3.51 7.83 1.38 122 KHOP_HELO_FCRDNS 2802 1.58 2.03 1.36 123 XM_B_SpammyWords4 2724 1.57 2.06 1.33 124 UNTRUSTED_Relay 2663 2.98 6.42 1.30 125 HTML_FONT_FACE_BAD 2613 1.07 0.66 1.27 126 T_XMDrugObfuBody_08 2535 2.01 3.60 1.23 127 XM_GoogleGroups 2475 2.71 5.75 1.20 128 TR_XM_SpammyWords5 2426 2.02 3.73 1.18 129 RCVD_IN_RP_SAFE 2420 1.16 1.14 1.18 130 XM_B_Investor 2420 2.20 4.27 1.18 131 HTML_MIME_NO_HTML_TAG 2416 2.85 6.27 1.18 132 XM_H_Long_From02 2395 1.10 0.97 1.17 133 XMBdyGiftCard01 2387 1.37 1.80 1.16 134 XM_DK_Undo_01 2360 1.27 1.52 1.15 135 MSGID_NOFQDN1 2341 0.77 0.03 1.14 136 TooManyTo_002 2323 0.93 0.51 1.13 137 URI_HEX 2311 1.30 1.66 1.13 138 RCVD_IN_RP_CERTIFIED 2175 0.99 0.86 1.06 139 SUBJ_ALL_CAPS 2106 1.41 2.19 1.03 140 T_TooManySym_03 2032 0.78 0.34 0.99 141 TR_XM_Base64_M1 1958 0.96 0.98 0.95 142 RCVD_IN_MSPIKE_H5 1914 0.70 0.22 0.93 143 XMGenDplmaNmb 1898 0.94 0.99 0.92 144 XM_shorewaves_Whitelist 1891 0.62 0.00 0.92 145 XM_B_Unsub2 1813 1.16 1.73 0.88 146 XM_Superlative01 1813 0.62 0.08 0.88 147 XM_B_COPY_HTML 1797 0.83 0.75 0.87 148 XMSubNoVowel 1782 0.91 0.99 0.87 149 XMBody_95 1777 0.60 0.06 0.87 150 MPART_ALT_DIFF_COUNT 1748 1.12 1.67 0.85 151 T_MANY_PILL_PRICE 1739 0.57 0.01 0.85 152 TooManyTo_003 1715 0.71 0.46 0.83 153 XM_OfRef6 1713 1.53 2.93 0.83 154 XMLngstWrd_00 1700 2.47 5.82 0.83 155 DKIM_ADSP_CUSTOM_MED 1535 0.76 0.80 0.75 156 XMLngstWrd_01 1528 2.39 5.75 0.74 157 XMHTMLBadTable_001 1492 0.85 1.11 0.73 158 RCVD_IN_MSPIKE_BL 1474 2.02 4.65 0.72 159 TR_XM_MSPIKECOMBO 1472 1.98 4.53 0.72 160 XM_B_REG_HTML 1464 0.69 0.65 0.71 161 XM_UB50 1438 1.40 2.83 0.70 162 TR_MetaPhish_Combo_01 1408 0.64 0.54 0.69 163 XMPhish30 1392 0.87 1.26 0.68 164 TooManyTo_004 1353 0.58 0.43 0.66 165 XMSubMetaSxObfu_02 1331 0.54 0.31 0.65 166 HTML_IMAGE_ONLY_20 1330 0.76 0.98 0.65 167 USER_IN_WELCOMELIST 1300 0.42 0.00 0.63 168 USER_IN_WHITELIST 1300 0.42 0.00 0.63 169 XM_D_tchamptons_WL 1245 0.41 0.00 0.61 170 XMLngstWrd_02 1207 2.27 5.67 0.59 171 TooManyTo_005 1158 0.51 0.41 0.56 172 RDNS_DYNAMIC 1154 0.71 1.02 0.56 173 HTML_TAG_BALANCE_BODY 1120 0.98 1.86 0.55 174 T_XMDrugObfuBody_00 1116 0.77 1.24 0.54 175 XMBrknScrpt_02 1106 0.90 1.62 0.54 176 XMBody_17 1078 1.59 3.75 0.52 177 XM_ProductURIs 1067 0.57 0.68 0.52 178 HTTPS_HTTP_MISMATCH 1054 0.73 1.17 0.51 179 XM_H_PHPMailer 1040 0.64 0.91 0.51 180 T_XMHurry_00 1027 1.00 2.01 0.50 181 XMHTML_After_End 989 0.51 0.58 0.48 182 HTML_TEXT_INVISIBLE_STYLE 952 0.41 0.31 0.46 183 TR_XM_COVIDMETA4 933 0.51 0.64 0.45 184 XMNoVowels 933 0.42 0.36 0.45 185 DATE_IN_PAST_03_06 922 0.42 0.37 0.45 186 T_TooManySym_04 880 0.34 0.17 0.43 187 TR_XM_Base64_L1 874 0.49 0.63 0.43 188 T_FILL_THIS_FORM_SHORT 860 1.70 4.29 0.42 189 NML_ADSP_CUSTOM_MED 857 0.51 0.71 0.42 190 RCVD_IN_BL_SPAMCOP_NET 830 4.44 12.64 0.40 191 RCVD_IN_PSBL 809 0.85 1.77 0.39 192 FORGED_GMAIL_RCVD 803 0.49 0.69 0.39 193 PLING_QUERY 791 0.47 0.65 0.39 194 XM_B_COVIDMETA 784 0.57 0.94 0.38 195 XMSubMetaSxObfu_03 780 0.57 0.97 0.38 196 XM_ShortIntro_01 773 0.37 0.35 0.38 197 RCVD_IN_MSPIKE_L3 772 0.92 2.02 0.38 198 XMSexyCombo_01 772 0.79 1.62 0.38 199 XMSubMetaI_00 769 0.54 0.88 0.37 200 XMCapTrack 765 0.30 0.16 0.37 ----------------------------------------------------------------------