Email: 368777 Autolearn: 0 AvgScore: 3.85 AvgScanTime: 1.74 sec Spam: 117205 Autolearn: 0 AvgScore: 14.28 AvgScanTime: 2.66 sec Ham: 251572 Autolearn: 0 AvgScore: -1.02 AvgScanTime: 1.31 sec Time Spent Running SA: 178.23 hours Time Spent Processing Spam: 86.64 hours Time Spent Processing Ham: 91.58 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 110972 86.80 94.68 83.13 2 DKIM_SIGNED 103148 81.33 88.01 78.22 3 XM_DK_Pass 96740 78.46 82.54 76.56 4 DKIM_VALID 95026 77.12 81.08 75.28 5 XM_B_Unicode 94167 73.99 80.34 71.03 6 RELAYCOUNTRY_US 91368 80.36 77.96 81.48 7 DCC_CHECK 89107 53.41 76.03 42.87 8 XMListUnsubscribeExists 83729 58.07 71.44 51.85 9 XM_B_SpammyWords 81030 53.36 69.14 46.00 10 DKIM_VALID_AU 75940 62.42 64.79 61.31 11 XM_DK_Undo_02 59628 22.60 50.87 9.43 12 XM_B_Unicode3 57264 46.09 48.86 44.80 13 BAYES_99 52562 19.65 44.85 7.91 14 LOC_TINY_FONT_1 49754 31.77 42.45 26.79 15 XM_B_SpammyWords2 46261 25.48 39.47 18.96 16 TR_XM_DKIM_Undo 45930 16.69 39.19 6.21 17 BAYES_999 42625 15.92 36.37 6.40 18 HTML_FONT_LOW_CONTRAST 41702 31.50 35.58 29.60 19 TR_DCC_Bayes_99 40342 13.31 34.42 3.47 20 MIME_HTML_ONLY 36493 24.76 31.14 21.79 21 BAYES_50 36068 47.65 30.77 55.51 22 DKIM_VALID_EF 31812 31.64 27.14 33.73 23 FVGT_m_MULTI_ODD 31668 25.16 27.02 24.29 24 XM_Body_Dirty_Words 28119 15.80 23.99 11.98 25 RCVD_IN_MSPIKE_WL 27572 33.52 23.52 38.17 26 T_KAM_HTML_FONT_INVALID 27284 18.53 23.28 16.31 27 XMSubLong 27015 21.65 23.05 20.99 28 DCC_CHECK_NEGATIVE 26540 45.35 22.64 55.92 29 RCVD_IN_MSPIKE_H2 26429 20.77 22.55 19.94 30 RELAYCOUNTRY_META 23725 9.58 20.24 4.62 31 BOTNET 22033 7.44 18.80 2.15 32 T_TM2_M_HEADER_IN_MSG 21274 21.34 18.15 22.82 33 TR_XM_SpammyWords2 19572 6.43 16.70 1.65 34 XM_Multi_Part_URI 18921 14.66 16.14 13.97 35 XM_B_Unsub 16732 11.53 14.28 10.25 36 XM_UncommonTLD01 16385 7.10 13.98 3.89 37 XM_B_SpammyWords3 15375 7.01 13.12 4.17 38 XMSexyCombo_05 15268 7.02 13.03 4.23 39 UNTRUSTED_Relay 14979 5.44 12.78 2.02 40 UNPARSEABLE_RELAY 14824 9.51 12.65 8.05 41 BOTNET_IPINHOSTNAME 14633 8.51 12.48 6.66 42 TR_XM_UnparsRelay 14356 8.54 12.25 6.82 43 FSL_BULK_SIG 13491 7.40 11.51 5.48 44 RCVD_IN_MSPIKE_H4 13165 14.06 11.23 15.38 45 RCVD_IN_MSPIKE_H3 13092 15.67 11.17 17.77 46 XM_Evil_Numbers_Gen 12457 9.18 10.63 8.51 47 HTML_IMAGE_RATIO_02 12321 8.90 10.51 8.15 48 MPART_ALT_DIFF 11125 6.59 9.49 5.24 49 LOTS_OF_MONEY 10977 8.44 9.37 8.01 50 LotsOfNums_01 10272 8.68 8.76 8.64 51 XM_SendGrid 10246 7.73 8.74 7.26 52 BAYES_80 10154 7.10 8.66 6.36 53 XM_B_Phish_Phrases 9947 7.73 8.49 7.38 54 RCVD_IN_RP_SAFE 8918 9.41 7.61 10.25 55 TR_XM_SpammyWords4 8912 4.98 7.60 3.75 56 RCVD_IN_BL_SPAMCOP_NET 8772 2.78 7.48 0.58 57 RELAYCOUNTRY_CA 8679 3.43 7.40 1.58 58 TooManyTo_001 8662 7.12 7.39 6.99 59 DKIM_INVALID 8122 4.21 6.93 2.94 60 MIME_HTML_MOSTLY 8073 3.87 6.89 2.46 61 XM_H_Long_From01 7685 5.69 6.56 5.28 62 XM_B_SpammyTLD 7550 3.54 6.44 2.19 63 XMSubMetaSx_00 7400 4.66 6.31 3.89 64 BAYES_60 7383 9.63 6.30 11.17 65 BOTNET_NORDNS 7321 2.20 6.25 0.31 66 HTML_IMAGE_RATIO_04 7307 5.73 6.23 5.50 67 TR_XM_PhishingBody 6986 3.54 5.96 2.41 68 RCVD_IN_RP_CERTIFIED 6958 8.20 5.94 9.25 69 BAYES_95 6291 4.35 5.37 3.87 70 SpammyFromTLD_02 5777 1.68 4.93 0.17 71 RCVD_IN_MSPIKE_BL 5565 1.59 4.75 0.12 72 XM_UB99 5514 1.50 4.70 0.00 73 TR_XM_MSPIKECOMBO 5344 1.53 4.56 0.11 74 XM_DIRTYINTL 5174 1.70 4.41 0.44 75 TR_XM_DK_SendGrid 5137 4.66 4.38 4.80 76 SpammyFromTLD_01 5046 1.67 4.31 0.44 77 XMDiploma_00 4882 2.32 4.17 1.46 78 TM2_M_URI_OPT_OUT 4856 3.06 4.14 2.56 79 XM_UB50 4724 2.20 4.03 1.35 80 XMBdyGiftCard01 4627 1.68 3.95 0.62 81 URIBL_SBL_A 4349 1.94 3.71 1.11 82 XM_UB999 4176 1.13 3.56 0.00 83 XMStrtUSub 4138 6.90 3.53 8.47 84 XM_OfRef6 4071 1.79 3.47 1.00 85 MIME_HTML_ONLY_MULTI 4045 3.37 3.45 3.34 86 TR_XM_SpammyWords5 4005 2.37 3.42 1.89 87 RCVD_IN_RP_RNBL 3884 1.07 3.31 0.03 88 HTML_MIME_NO_HTML_TAG 3864 2.29 3.30 1.82 89 TR_XM_SpammyWords3 3855 1.09 3.29 0.06 90 XMNumbers 3750 3.76 3.20 4.02 91 HTML_IMAGE_RATIO_06 3737 3.40 3.19 3.50 92 URI_HEX 3644 1.85 3.11 1.26 93 T_TooManySym_01 3473 5.23 2.96 6.28 94 RELAYCOUNTRY_FR 3363 1.12 2.87 0.31 95 FROM_EXCESS_BASE64 3315 3.46 2.83 3.76 96 RCVD_IN_PSBL 3287 1.00 2.80 0.16 97 XM_DK_Undo_01 3277 1.92 2.80 1.51 98 XM_SPF_SoftFail 3247 1.61 2.77 1.07 99 XMBrknScrpt_02 3213 1.33 2.74 0.67 100 RCVD_IN_MSPIKE_L5 3203 0.90 2.73 0.05 101 XM_B_Phish66 3142 1.60 2.68 1.10 102 HTML_IMAGE_RATIO_08 3056 2.36 2.61 2.25 103 XM_CamelCaseFrm001 3022 2.20 2.58 2.02 104 T_XMDrugObfuBody_08 2982 1.60 2.54 1.16 105 KHOP_HELO_FCRDNS 2944 1.76 2.51 1.41 106 TR_XM_INV_DKIM 2922 0.93 2.49 0.20 107 T_XMDrugObfuBody_14 2847 2.23 2.43 2.13 108 XMGenDplmaNmb 2773 1.22 2.37 0.69 109 SUBJ_ALL_CAPS 2636 1.97 2.25 1.84 110 TR_XM_RelayPhish 2629 0.78 2.24 0.09 111 TR_XM_MaxBayes 2603 0.72 2.22 0.02 112 URIBL_DBL_SPAM 2546 0.70 2.17 0.01 113 TR_XM_BayesRelay 2480 0.69 2.12 0.03 114 TR_Sbj_FN_Bdy 2455 0.75 2.09 0.13 115 PDS_OTHER_BAD_TLD 2453 1.18 2.09 0.76 116 TM2_M_VERY_LONG_WORD 2413 1.60 2.06 1.39 117 XMStockSpam_06 2336 1.29 1.99 0.96 118 XMSubEmpty 2293 0.73 1.96 0.16 119 XM_B_SpammyWords4 2234 0.91 1.91 0.45 120 MIME_QP_LONG_LINE 2224 3.58 1.90 4.36 121 T_REMOTE_IMAGE 2214 2.88 1.89 3.34 122 URI_PHP_REDIR 2189 0.60 1.87 0.00 123 TR_Symld_Words 2131 1.85 1.82 1.87 124 T_FILL_THIS_FORM_SHORT 2123 0.94 1.81 0.54 125 BODY_EMPTY 2090 0.58 1.78 0.03 126 TR_XM_PHPDW 2085 0.85 1.78 0.42 127 MISSING_SUBJECT 2067 0.59 1.76 0.04 128 XMNoSubject 2067 0.59 1.76 0.04 129 TR_XM_SB_Phish 2050 1.74 1.75 1.74 130 XMSubMetaI_00 2039 0.91 1.74 0.53 131 XMSubPhish11 2027 1.73 1.73 1.73 132 XMPhish08 2025 0.69 1.73 0.21 133 NORDNS_LOW_CONTRAST 1958 0.59 1.67 0.09 134 MAILING_LIST_MULTI 1951 1.96 1.66 2.09 135 DATE_IN_PAST_12_24 1916 0.54 1.63 0.03 136 T_XMDrugObfuBody_00 1904 1.10 1.62 0.85 137 XM_B_Unsub2 1873 1.37 1.60 1.27 138 XMSlimDrugH 1846 0.78 1.58 0.41 139 FROM_SUSPICIOUS_NTLD 1842 0.58 1.57 0.11 140 XM_Body_Dirty_Words_01 1839 0.66 1.57 0.24 141 DIET_1 1802 1.05 1.54 0.82 142 RCVD_IN_IADB_LISTED 1799 3.29 1.53 4.11 143 FROM_SUSPICIOUS_NTLD_FP 1798 0.56 1.53 0.11 144 TR_XM_PHPForged 1780 0.68 1.52 0.29 145 NUMERIC_HTTP_ADDR 1763 0.65 1.50 0.26 146 TR_XM_FormFill2 1761 0.68 1.50 0.29 147 XM_H_PHPOS 1753 0.67 1.50 0.28 148 NO_DNS_FOR_FROM 1741 0.69 1.49 0.31 149 HTTPS_HTTP_MISMATCH 1729 0.92 1.48 0.66 150 XMBody_17 1713 0.87 1.46 0.59 151 T_XMHurry_00 1670 0.76 1.42 0.45 152 BAYES_40 1662 2.78 1.42 3.41 153 URI_NOVOWEL 1646 2.04 1.40 2.34 154 XMSexyCombo_01 1640 0.76 1.40 0.46 155 TR_XM_MaxWHORU 1639 0.65 1.40 0.30 156 TR_XM_COVIDMETA4 1628 0.60 1.39 0.23 157 XM_UB60 1620 0.53 1.38 0.14 158 XM_UB80 1596 0.47 1.36 0.05 159 XM_B_COVIDMETA 1566 0.87 1.34 0.65 160 TR_Mismatch_TLD_02 1560 0.47 1.33 0.07 161 RCVD_IN_IADB_SPF 1514 2.84 1.29 3.57 162 URIBL_BLACK 1512 0.44 1.29 0.04 163 XM_URI_RBL 1508 0.50 1.29 0.14 164 TR_Caps_n_Bayes_99 1465 0.54 1.25 0.21 165 XMHTML_After_End 1444 0.61 1.23 0.33 166 HTML_FONT_SIZE_LARGE 1441 0.50 1.23 0.16 167 DKIM_ADSP_NXDOMAIN 1439 0.62 1.23 0.34 168 RELAYCOUNTRY_NL 1427 0.56 1.22 0.25 169 RCVD_IN_IADB_DK 1425 2.44 1.22 3.02 170 RELAYCOUNTRY_GB 1411 0.95 1.20 0.83 171 RCVD_IN_IADB_SENDERID 1397 2.53 1.19 3.15 172 TR_XM_FormFill 1385 0.38 1.18 0.01 173 XM_BadFromFormat 1372 0.58 1.17 0.31 174 RCVD_IN_MSPIKE_H5 1315 3.79 1.12 5.03 175 HTML_IMAGE_ONLY_16 1304 0.48 1.11 0.18 176 ALL_TRUSTED 1278 10.35 1.09 14.66 177 BAYES_20 1233 1.98 1.05 2.41 178 TR_MetaPhish_Combo_01 1216 0.73 1.04 0.59 179 T_HTML_TAG_BALANCE_CENTER 1211 0.57 1.03 0.36 180 XM_UB95 1179 0.34 1.01 0.03 181 XM_H_PHPMailer 1167 0.71 1.00 0.58 182 RDNS_DYNAMIC 1141 0.85 0.97 0.79 183 XMClaimOffer 1128 0.37 0.96 0.09 184 RELAYCOUNTRY_DE 1123 0.57 0.96 0.38 185 XMPhish30 1123 0.84 0.96 0.78 186 XMSubNoVowel 1121 1.12 0.96 1.19 187 RCVD_IN_MSPIKE_L3 1103 0.32 0.94 0.03 188 XMHTMLBadTable_001 1099 0.90 0.94 0.88 189 XMGppyBdWords 1093 0.35 0.93 0.07 190 HTML_TITLE_SUBJ_DIFF 1083 0.31 0.92 0.03 191 URI_TRY_3LD 1075 1.35 0.92 1.55 192 MIME_CHARSET_FARAWAY 1066 0.37 0.91 0.12 193 XMSolicitRefs_0 1062 0.48 0.91 0.28 194 XM_H_Undi_Recip 1053 0.43 0.90 0.22 195 BAYES_00 1041 5.68 0.89 7.91 196 RCVD_IN_MSPIKE_L4 1038 0.30 0.89 0.03 197 TR_BOTNET_NEGATE 1034 0.54 0.88 0.39 198 HK_RANDOM_REPLYTO 1030 0.38 0.88 0.15 199 XMBody_78 1020 0.44 0.87 0.23 200 XM_ProductURIs 1011 1.00 0.86 1.06 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 209125 86.80 94.68 83.13 2 RELAYCOUNTRY_US 204988 80.36 77.96 81.48 3 DKIM_SIGNED 196770 81.33 88.01 78.22 4 XM_DK_Pass 192615 78.46 82.54 76.56 5 DKIM_VALID 189375 77.12 81.08 75.28 6 XM_B_Unicode 178680 73.99 80.34 71.03 7 DKIM_VALID_AU 154234 62.42 64.79 61.31 8 DCC_CHECK_NEGATIVE 140689 45.35 22.64 55.92 9 BAYES_50 139656 47.65 30.77 55.51 10 XMListUnsubscribeExists 130430 58.07 71.44 51.85 11 XM_B_SpammyWords 115731 53.36 69.14 46.00 12 XM_B_Unicode3 112699 46.09 48.86 44.80 13 DCC_CHECK 107854 53.41 76.03 42.87 14 RCVD_IN_MSPIKE_WL 96029 33.52 23.52 38.17 15 DKIM_VALID_EF 84854 31.64 27.14 33.73 16 HTML_FONT_LOW_CONTRAST 74467 31.50 35.58 29.60 17 LOC_TINY_FONT_1 67393 31.77 42.45 26.79 18 FVGT_m_MULTI_ODD 61098 25.16 27.02 24.29 19 T_TM2_M_HEADER_IN_MSG 57409 21.34 18.15 22.82 20 MIME_HTML_ONLY 54820 24.76 31.14 21.79 21 XMSubLong 52817 21.65 23.05 20.99 22 RCVD_IN_MSPIKE_H2 50161 20.77 22.55 19.94 23 XM_B_SpammyWords2 47708 25.48 39.47 18.96 24 RCVD_IN_MSPIKE_H3 44694 15.67 11.17 17.77 25 T_KAM_HTML_FONT_INVALID 41037 18.53 23.28 16.31 26 RCVD_IN_MSPIKE_H4 38683 14.06 11.23 15.38 27 XM_DKIMWhitelistDomains 37260 10.11 0.02 14.81 28 ALL_TRUSTED 36881 10.35 1.09 14.66 29 XM_Multi_Part_URI 35154 14.66 16.14 13.97 30 XM_Body_Dirty_Words 30146 15.80 23.99 11.98 31 BAYES_60 28112 9.63 6.30 11.17 32 XM_B_Unsub 25777 11.53 14.28 10.25 33 RCVD_IN_RP_SAFE 25776 9.41 7.61 10.25 34 XM_DK_Undo_02 23718 22.60 50.87 9.43 35 RCVD_IN_RP_CERTIFIED 23276 8.20 5.94 9.25 36 LotsOfNums_01 21727 8.68 8.76 8.64 37 XM_Evil_Numbers_Gen 21397 9.18 10.63 8.51 38 XMStrtUSub 21319 6.90 3.53 8.47 39 HTML_IMAGE_RATIO_02 20493 8.90 10.51 8.15 40 UNPARSEABLE_RELAY 20243 9.51 12.65 8.05 41 LOTS_OF_MONEY 20160 8.44 9.37 8.01 42 BAYES_00 19911 5.68 0.89 7.91 43 BAYES_99 19905 19.65 44.85 7.91 44 XM_B_Phish_Phrases 18564 7.73 8.49 7.38 45 XM_SendGrid 18266 7.73 8.74 7.26 46 TooManyTo_001 17588 7.12 7.39 6.99 47 TR_XM_UnparsRelay 17147 8.54 12.25 6.82 48 BOTNET_IPINHOSTNAME 16761 8.51 12.48 6.66 49 BAYES_999 16098 15.92 36.37 6.40 50 BAYES_80 16012 7.10 8.66 6.36 51 T_TooManySym_01 15807 5.23 2.96 6.28 52 TR_XM_DK_Bayes 15755 4.47 0.62 6.26 53 TR_XM_DKIM_Undo 15614 16.69 39.19 6.21 54 TR_XM_DK_Bayes1 15519 4.40 0.62 6.17 55 HTML_IMAGE_RATIO_04 13834 5.73 6.23 5.50 56 FSL_BULK_SIG 13797 7.40 11.51 5.48 57 TR_XM_DK_Bayes2 13643 3.88 0.58 5.42 58 XM_H_Long_From01 13294 5.69 6.56 5.28 59 MPART_ALT_DIFF 13181 6.59 9.49 5.24 60 RCVD_IN_MSPIKE_H5 12653 3.79 1.12 5.03 61 TR_XM_DK_SendGrid 12063 4.66 4.38 4.80 62 IN_ZIMBRA_NJ_WHITELIST 11760 3.20 0.05 4.67 63 RELAYCOUNTRY_META 11617 9.58 20.24 4.62 64 MIME_QP_LONG_LINE 10962 3.58 1.90 4.36 65 XMSexyCombo_05 10632 7.02 13.03 4.23 66 XM_B_SpammyWords3 10493 7.01 13.12 4.17 67 RCVD_IN_IADB_LISTED 10341 3.29 1.53 4.11 68 XM_PDF 10205 2.92 0.49 4.06 69 XMNumbers 10108 3.76 3.20 4.02 70 XMSubMetaSx_00 9791 4.66 6.31 3.89 71 XM_UncommonTLD01 9791 7.10 13.98 3.89 72 BAYES_95 9744 4.35 5.37 3.87 73 FROM_EXCESS_BASE64 9458 3.46 2.83 3.76 74 TR_XM_SpammyWords4 9437 4.98 7.60 3.75 75 T_TooManySym_02 9118 2.72 0.77 3.62 76 RCVD_IN_IADB_SPF 8977 2.84 1.29 3.57 77 HTML_IMAGE_RATIO_06 8810 3.40 3.19 3.50 78 TR_DCC_Bayes_99 8725 13.31 34.42 3.47 79 BAYES_40 8582 2.78 1.42 3.41 80 T_REMOTE_IMAGE 8414 2.88 1.89 3.34 81 MIME_HTML_ONLY_MULTI 8391 3.37 3.45 3.34 82 INVALID_MSGID 8307 2.45 0.63 3.30 83 RCVD_IN_IADB_SENDERID 7933 2.53 1.19 3.15 84 MSGID_NOFQDN1 7761 2.12 0.06 3.09 85 TVD_RCVD_IP 7716 2.15 0.19 3.07 86 RCVD_IN_IADB_DK 7586 2.44 1.22 3.02 87 XM_H_Trusted_IP 7559 2.05 0.00 3.00 88 DKIM_INVALID 7395 4.21 6.93 2.94 89 RCVD_IN_IADB_VOUCHED 6738 2.06 0.72 2.68 90 TM2_M_URI_OPT_OUT 6432 3.06 4.14 2.56 91 TO_MALFORMED 6263 1.71 0.03 2.49 92 MIME_HTML_MOSTLY 6181 3.87 6.89 2.46 93 TR_XM_PhishingBody 6061 3.54 5.96 2.41 94 BAYES_20 6053 1.98 1.05 2.41 95 ANY_BOUNCE_MESSAGE 5971 1.73 0.34 2.37 96 BOUNCE_MESSAGE 5970 1.73 0.34 2.37 97 URI_NOVOWEL 5877 2.04 1.40 2.34 98 HELO_MISC_IP 5838 1.62 0.12 2.32 99 HTML_IMAGE_RATIO_08 5653 2.36 2.61 2.25 100 XM_B_SpammyTLD 5518 3.54 6.44 2.19 101 BOTNET 5417 7.44 18.80 2.15 102 T_XMDrugObfuBody_14 5371 2.23 2.43 2.13 103 MAILING_LIST_MULTI 5267 1.96 1.66 2.09 104 XM_CamelCaseFrm001 5085 2.20 2.58 2.02 105 UNTRUSTED_Relay 5082 5.44 12.78 2.02 106 XMBSHREFv2 4756 1.33 0.12 1.89 107 TR_XM_SpammyWords5 4745 2.37 3.42 1.89 108 IN_HORDE_ADDRESS_BOOK 4744 1.32 0.11 1.89 109 TR_Symld_Words 4692 1.85 1.82 1.87 110 SUBJ_ALL_CAPS 4640 1.97 2.25 1.84 111 HTML_MIME_NO_HTML_TAG 4582 2.29 3.30 1.82 112 RCVD_IN_IADB_OPTIN 4554 1.41 0.55 1.81 113 USER_IN_DEF_DKIM_WL 4430 1.21 0.02 1.76 114 TR_XM_SB_Phish 4376 1.74 1.75 1.74 115 XMSubPhish11 4345 1.73 1.73 1.73 116 TR_XM_SpammyWords2 4149 6.43 16.70 1.65 117 RELAYCOUNTRY_CA 3983 3.43 7.40 1.58 118 URI_TRY_3LD 3907 1.35 0.92 1.55 119 XM_DK_Undo_01 3810 1.92 2.80 1.51 120 TooManyTo_002 3702 1.18 0.54 1.47 121 XMDiploma_00 3678 2.32 4.17 1.46 122 BAYES_05 3595 1.19 0.69 1.43 123 TR_Mismatch_TLD_01 3560 1.23 0.82 1.42 124 KHOP_HELO_FCRDNS 3537 1.76 2.51 1.41 125 TM2_M_VERY_LONG_WORD 3498 1.60 2.06 1.39 126 XM_UB50 3398 2.20 4.03 1.35 127 XMBody_95 3306 0.94 0.15 1.31 128 XM_B_Unsub2 3197 1.37 1.60 1.27 129 URI_HEX 3170 1.85 3.11 1.26 130 XMGappySubj_01 3127 0.87 0.08 1.24 131 XM_H_Long_From02 3064 1.09 0.83 1.22 132 XMSubNoVowel 2998 1.12 0.96 1.19 133 HTML_FONT_FACE_BAD 2983 1.01 0.63 1.19 134 T_XMDrugObfuBody_08 2927 1.60 2.54 1.16 135 XM_GoogleGroups 2915 0.96 0.52 1.16 136 URIBL_SBL_A 2804 1.94 3.71 1.11 137 XM_B_Phish66 2768 1.60 2.68 1.10 138 TVD_SPACE_RATIO 2729 0.78 0.12 1.08 139 XM_SPF_SoftFail 2703 1.61 2.77 1.07 140 XM_ProductURIs 2677 1.00 0.86 1.06 141 XMLngstWrd_00 2553 0.84 0.46 1.01 142 XM_OfRef6 2517 1.79 3.47 1.00 143 TooManyTo_003 2485 0.81 0.43 0.99 144 HTML_IMAGE_ONLY_20 2449 0.92 0.81 0.97 145 XMStockSpam_06 2422 1.29 1.99 0.96 146 DKIM_ADSP_CUSTOM_MED 2285 0.88 0.81 0.91 147 T_TooManySym_03 2253 0.73 0.38 0.90 148 XMHTMLBadTable_001 2210 0.90 0.94 0.88 149 T_XMDrugObfuBody_00 2142 1.10 1.62 0.85 150 RELAYCOUNTRY_GB 2095 0.95 1.20 0.83 151 DIET_1 2069 1.05 1.54 0.82 152 XMLngstWrd_01 1997 0.68 0.44 0.79 153 RDNS_DYNAMIC 1996 0.85 0.97 0.79 154 XMPhish30 1964 0.84 0.96 0.78 155 TooManyTo_004 1964 0.66 0.39 0.78 156 PDS_OTHER_BAD_TLD 1914 1.18 2.09 0.76 157 HELO_NODOT 1896 0.71 0.62 0.75 158 HELO_NO_DOMAIN 1895 0.71 0.61 0.75 159 XMGenDplmaNmb 1742 1.22 2.37 0.69 160 TooManyTo_005 1723 0.58 0.36 0.68 161 XMBrknScrpt_02 1694 1.33 2.74 0.67 162 HTTPS_HTTP_MISMATCH 1652 0.92 1.48 0.66 163 HTML_TAG_BALANCE_BODY 1633 0.67 0.70 0.65 164 XM_B_COVIDMETA 1626 0.87 1.34 0.65 165 XM_B_REG_HTML 1583 0.55 0.38 0.63 166 XMBdyGiftCard01 1553 1.68 3.95 0.62 167 USER_IN_WHITELIST 1552 0.42 0.00 0.62 168 USER_IN_WELCOMELIST 1552 0.42 0.00 0.62 169 NML_ADSP_CUSTOM_MED 1548 0.64 0.69 0.62 170 XMLngstWrd_02 1494 0.50 0.30 0.59 171 TR_MetaPhish_Combo_01 1489 0.73 1.04 0.59 172 XMBody_17 1482 0.87 1.46 0.59 173 RCVD_IN_BL_SPAMCOP_NET 1471 2.78 7.48 0.58 174 XM_H_PHPMailer 1468 0.71 1.00 0.58 175 TR_MSPIKEBAYES00 1421 0.39 0.01 0.56 176 XMSubMetaSxObfu_02 1405 0.51 0.41 0.56 177 T_FILL_THIS_FORM_SHORT 1353 0.94 1.81 0.54 178 FORGED_GMAIL_RCVD 1349 0.56 0.63 0.54 179 XMSubMetaI_00 1325 0.91 1.74 0.53 180 XM_B_COPY_HTML 1276 0.55 0.65 0.51 181 XMLngstWrd_03 1192 0.40 0.24 0.47 182 DATE_IN_PAST_03_06 1189 0.51 0.60 0.47 183 XMSexyCombo_01 1165 0.76 1.40 0.46 184 XMNoVowels 1161 0.44 0.40 0.46 185 XM_B_SpammyWords4 1139 0.91 1.91 0.45 186 T_XMHurry_00 1126 0.76 1.42 0.45 187 XMCapTrack 1123 0.41 0.34 0.45 188 SpammyFromTLD_01 1116 1.67 4.31 0.44 189 XM_S_SpammyWords 1105 0.49 0.60 0.44 190 TR_XM_Spammywords 1105 0.49 0.60 0.44 191 SUBJ_DOLLARS 1104 0.56 0.80 0.44 192 XM_DIRTYINTL 1103 1.70 4.41 0.44 193 SHOPIFY_IMG_NOT_RCVD_SFY 1095 0.56 0.83 0.44 194 XMSubMetaSxObfu_03 1084 0.54 0.76 0.43 195 PLING_QUERY 1067 0.48 0.60 0.42 196 TR_XM_PHPDW 1054 0.85 1.78 0.42 197 XMSlimDrugH 1031 0.78 1.58 0.41 198 TR_BOTNET_NEGATE 973 0.54 0.88 0.39 199 TVD_SPACE_RATIO_MINFP 969 0.40 0.44 0.39 200 RELAYCOUNTRY_DE 963 0.57 0.96 0.38 ----------------------------------------------------------------------