Email: 329368 Autolearn: 0 AvgScore: 2.07 AvgScanTime: 2.72 sec Spam: 84367 Autolearn: 0 AvgScore: 14.03 AvgScanTime: 3.02 sec Ham: 245001 Autolearn: 0 AvgScore: -2.05 AvgScanTime: 2.61 sec Time Spent Running SA: 248.59 hours Time Spent Processing Spam: 70.88 hours Time Spent Processing Ham: 177.71 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 76851 78.88 91.09 74.68 2 DKIM_SIGNED 71384 77.39 84.61 74.91 3 XM_DK_Pass 69625 76.13 82.53 73.93 4 DKIM_VALID 67850 74.54 80.42 72.51 5 DCC_CHECK 63464 55.58 75.22 48.81 6 XM_B_Unicode 60476 64.67 71.68 62.26 7 RELAYCOUNTRY_US 58612 78.97 69.47 82.24 8 XM_B_SpammyWords 55469 53.54 65.75 49.34 9 XMListUnsubscribeExists 52445 49.07 62.16 44.56 10 DKIM_VALID_AU 51965 60.45 61.59 60.06 11 XM_DK_Undo_02 41636 20.87 49.35 11.06 12 XM_B_Unicode3 33857 39.81 40.13 39.70 13 TR_XM_DKIM_Undo 31437 15.81 37.26 8.42 14 BAYES_99 31328 16.44 37.13 9.31 15 LOC_TINY_FONT_1 31297 27.33 37.10 23.97 16 XM_B_SpammyWords2 30777 22.29 36.48 17.40 17 DKIM_VALID_EF 30398 34.60 36.03 34.10 18 BAYES_50 28272 47.52 33.51 52.34 19 HTML_FONT_LOW_CONTRAST 25196 26.93 29.86 25.92 20 MIME_HTML_ONLY 24594 22.50 29.15 20.21 21 RELAYCOUNTRY_META 24165 9.92 28.64 3.48 22 BAYES_999 24157 12.55 28.63 7.02 23 T_KAM_HTML_FONT_INVALID 23938 18.24 28.37 14.75 24 RCVD_IN_MSPIKE_H2 22636 22.58 26.83 21.11 25 TR_DCC_Bayes_99 22279 10.85 26.41 5.50 26 FVGT_m_MULTI_ODD 19279 21.22 22.85 20.66 27 DCC_CHECK_NEGATIVE 18826 42.85 22.31 49.93 28 XMSubLong 17606 19.13 20.87 18.53 29 BOTNET 17399 6.44 20.62 1.56 30 RCVD_IN_MSPIKE_WL 17253 32.81 20.45 37.06 31 XM_Body_Dirty_Words 16499 13.49 19.56 11.40 32 UNTRUSTED_Relay 15866 6.35 18.81 2.06 33 XM_B_Unsub 15827 12.39 18.76 10.19 34 T_TM2_M_HEADER_IN_MSG 15764 23.63 18.69 25.33 35 XM_UncommonTLD01 15133 7.47 17.94 3.87 36 MPART_ALT_DIFF 13302 7.29 15.77 4.37 37 XM_Multi_Part_URI 12509 12.63 14.83 11.87 38 TR_XM_SpammyWords2 11368 4.85 13.47 1.88 39 FSL_BULK_SIG 11212 9.99 13.29 8.86 40 BOTNET_IPINHOSTNAME 11074 7.00 13.13 4.89 41 MIME_HTML_MOSTLY 11066 4.95 13.12 2.14 42 XM_B_SpammyWords3 9984 6.23 11.83 4.30 43 UNPARSEABLE_RELAY 9835 7.97 11.66 6.70 44 TR_XM_UnparsRelay 9543 7.07 11.31 5.61 45 LOTS_OF_MONEY 9338 8.07 11.07 7.03 46 XMSexyCombo_05 8928 6.19 10.58 4.67 47 RCVD_IN_MSPIKE_H3 8885 14.13 10.53 15.37 48 BAYES_80 8435 7.29 10.00 6.36 49 SpammyFromTLD_01 7993 2.72 9.47 0.40 50 RCVD_IN_MSPIKE_H4 7604 12.65 9.01 13.91 51 TR_XM_SpammyWords4 7582 5.56 8.99 4.38 52 HTML_IMAGE_RATIO_02 7218 7.13 8.56 6.63 53 RCVD_IN_BL_SPAMCOP_NET 7163 2.80 8.49 0.85 54 BAYES_60 7111 10.10 8.43 10.68 55 XM_SendGrid 6660 6.21 7.89 5.63 56 XM_Evil_Numbers_Gen 6011 8.87 7.12 9.47 57 URIBL_SBL_A 5816 2.05 6.89 0.38 58 LotsOfNums_01 5658 7.55 6.71 7.84 59 XMSubMetaSx_00 5453 4.88 6.46 4.34 60 RELAYCOUNTRY_CA 5277 2.37 6.25 1.03 61 BAYES_95 5198 5.31 6.16 5.02 62 XM_H_Long_From01 5159 4.97 6.11 4.58 63 XM_B_Phish_Phrases 4745 10.67 5.62 12.40 64 SpammyFromTLD_02 4719 1.59 5.59 0.22 65 TooManyTo_001 4610 5.85 5.46 5.98 66 TR_XM_PhishingBody 4564 3.05 5.41 2.23 67 XM_UB50 4558 2.12 5.40 0.99 68 RELAYCOUNTRY_FR 4470 1.55 5.30 0.26 69 RCVD_IN_RP_SAFE 4463 7.96 5.29 8.88 70 RCVD_IN_MSPIKE_BL 4048 2.10 4.80 1.16 71 TR_XM_DK_SendGrid 3834 3.98 4.54 3.78 72 RCVD_IN_RP_RNBL 3779 1.19 4.48 0.06 73 XM_UB99 3752 1.14 4.45 0.00 74 XM_SPF_SoftFail 3712 1.90 4.40 1.04 75 TR_XM_MSPIKECOMBO 3656 1.54 4.33 0.57 76 HTML_MIME_NO_HTML_TAG 3593 2.35 4.26 1.70 77 DKIM_INVALID 3534 2.86 4.19 2.40 78 RELAYCOUNTRY_IN 3427 1.07 4.06 0.05 79 XMNumbers 3380 3.57 4.01 3.42 80 HTML_IMAGE_RATIO_04 3335 5.33 3.95 5.80 81 XM_B_SpammyTLD 3296 2.33 3.91 1.79 82 XMStrtUSub 3190 10.96 3.78 13.43 83 RCVD_IN_RP_CERTIFIED 3161 6.81 3.75 7.87 84 KHOP_HELO_FCRDNS 3124 1.65 3.70 0.95 85 TR_XM_SpammyWords5 3103 1.88 3.68 1.26 86 ALL_TRUSTED 2805 11.64 3.32 14.50 87 XM_DIRTYINTL 2767 1.04 3.28 0.28 88 XM_UB60 2710 0.95 3.21 0.17 89 XM_UB999 2633 0.80 3.12 0.00 90 RCVD_IN_PSBL 2587 0.86 3.07 0.10 91 T_XMDrugObfuBody_08 2571 1.75 3.05 1.31 92 XM_OfRef6 2557 1.42 3.03 0.87 93 XM_UB80 2540 0.81 3.01 0.05 94 XM_B_Phish66 2480 1.58 2.94 1.11 95 PDS_OTHER_BAD_TLD 2425 0.99 2.87 0.34 96 T_REMOTE_IMAGE 2421 2.97 2.87 3.01 97 TM2_M_URI_OPT_OUT 2407 2.98 2.85 3.02 98 MIME_HTML_ONLY_MULTI 2380 2.78 2.82 2.77 99 RCVD_IN_MSPIKE_L5 2336 0.72 2.77 0.02 100 T_XMDrugObfuBody_14 2319 2.57 2.75 2.50 101 HTML_IMAGE_RATIO_06 2300 3.05 2.73 3.17 102 TR_XM_SpammyWords3 2292 1.08 2.72 0.52 103 RELAYCOUNTRY_GB 2236 1.15 2.65 0.63 104 XMBody_17 2230 1.06 2.64 0.51 105 TR_XM_MaxBayes 2215 0.67 2.63 0.00 106 URIBL_DBL_SPAM 2164 0.66 2.56 0.01 107 T_TooManySym_01 2156 4.81 2.56 5.59 108 TR_Symld_Words 2109 1.59 2.50 1.28 109 XM_CamelCaseFrm001 2092 1.91 2.48 1.72 110 T_FILL_THIS_FORM_SHORT 2075 1.00 2.46 0.50 111 XMSubMetaSSxObfu_00 1958 0.61 2.32 0.03 112 TR_Sbj_FN_Bdy 1956 0.67 2.32 0.10 113 MIME_QP_LONG_LINE 1949 3.32 2.31 3.66 114 TR_XM_PHPDW 1891 3.63 2.24 4.11 115 SUBJ_ALL_CAPS 1891 1.27 2.24 0.94 116 FROM_EXCESS_BASE64 1828 3.03 2.17 3.33 117 BOTNET_NORDNS 1828 0.57 2.17 0.01 118 TM2_M_BODY_EMPTY 1799 0.77 2.13 0.31 119 XM_B_Unsub2 1777 1.45 2.11 1.22 120 XMEmptyBody_01 1770 0.61 2.10 0.10 121 HTML_IMAGE_RATIO_08 1767 1.86 2.09 1.77 122 XM_UB95 1766 0.55 2.09 0.02 123 TM2_M_VERY_LONG_WORD 1754 1.40 2.08 1.17 124 TR_XM_PHPForged 1708 3.53 2.02 4.05 125 TR_XM_BayesRelay 1698 0.52 2.01 0.01 126 TR_XM_FormFill2 1692 3.52 2.01 4.05 127 XM_H_PHPOS 1684 3.52 2.00 4.04 128 T_XMDrugObfuBody_00 1644 1.10 1.95 0.81 129 FROM_SUSPICIOUS_NTLD 1631 0.53 1.93 0.05 130 BAYES_40 1624 3.08 1.92 3.47 131 XM_B_SpammyWords4 1619 0.75 1.92 0.35 132 FROM_SUSPICIOUS_NTLD_FP 1601 0.52 1.90 0.04 133 MAILING_LIST_MULTI 1546 1.98 1.83 2.03 134 USER_IN_DEF_DKIM_WL 1533 12.22 1.82 15.80 135 XMSexyCombo_01 1530 0.78 1.81 0.42 136 XM_DK_Undo_01 1506 1.45 1.79 1.33 137 RCVD_IN_IADB_LISTED 1506 3.33 1.79 3.86 138 BODY_EMPTY 1495 0.47 1.77 0.03 139 T_HTML_TAG_BALANCE_CENTER 1487 0.67 1.76 0.30 140 TR_XM_SB_Phish 1482 1.67 1.76 1.63 141 HTML_FONT_SIZE_HUGE 1438 0.57 1.70 0.17 142 BODY_URI_ONLY 1436 0.45 1.70 0.01 143 XMSubPhish11 1430 1.64 1.69 1.62 144 XMDiploma_00 1407 1.22 1.67 1.06 145 URI_NO_WWW_BIZ_CGI 1384 0.42 1.64 0.00 146 T_XMHurry_00 1366 0.75 1.62 0.45 147 XMSubEmpty 1352 0.53 1.60 0.16 148 URI_HEX 1350 1.36 1.60 1.28 149 RCVD_IN_IADB_SPF 1340 2.91 1.59 3.37 150 TR_Mismatch_TLD_02 1322 0.46 1.57 0.08 151 XMBdyGiftCard01 1287 1.31 1.53 1.23 152 RCVD_IN_IADB_DK 1276 2.55 1.51 2.91 153 RCVD_IN_IADB_SENDERID 1270 2.62 1.51 3.01 154 XM_H_Undi_Recip 1264 0.52 1.50 0.18 155 XM_URI_RBL 1233 0.47 1.46 0.13 156 URIBL_BLACK 1208 0.39 1.43 0.03 157 XMNoSubject 1191 0.40 1.41 0.05 158 MISSING_SUBJECT 1191 0.40 1.41 0.05 159 URI_NOVOWEL 1168 1.88 1.38 2.05 160 BAYES_20 1157 2.65 1.37 3.09 161 LongTLD 1151 0.42 1.36 0.09 162 SHOPIFY_IMG_NOT_RCVD_SFY 1127 0.47 1.34 0.17 163 XMStockSpam_06 1109 1.40 1.31 1.44 164 TR_Mismatch_TLD_01 1100 0.60 1.30 0.35 165 XM_BadFromFormat 1079 0.48 1.28 0.21 166 XMBrknScrpt_02 1074 1.13 1.27 1.08 167 DIET_1 1071 0.66 1.27 0.45 168 XM_Body_Dirty_Words_01 1057 0.50 1.25 0.24 169 XM_B_COVIDMETA 1048 0.99 1.24 0.90 170 XM_H_PHPMailer 1033 0.73 1.22 0.56 171 RELAYCOUNTRY_DE 1018 0.49 1.21 0.25 172 TR_XM_INV_DKIM 996 0.40 1.18 0.13 173 T_Symld_Words_02 957 0.69 1.13 0.54 174 TR_XM_COVIDMETA4 952 0.49 1.13 0.27 175 XMSubMetaI_00 921 0.59 1.09 0.42 176 TR_XM_Undi_Recip11 920 0.31 1.09 0.04 177 INVALID_MSGID 915 2.73 1.08 3.29 178 HK_RANDOM_REPLYTO 912 0.42 1.08 0.20 179 XMPhish08 894 0.42 1.06 0.20 180 URI_NO_WWW_INFO_CGI 894 0.29 1.06 0.02 181 RELAYCOUNTRY_NL 881 0.41 1.04 0.19 182 ANY_BOUNCE_MESSAGE 875 2.29 1.04 2.72 183 XMSexyCombo_04 872 0.34 1.03 0.10 184 BOUNCE_MESSAGE 872 2.29 1.03 2.72 185 XMHTMLBadTable_001 870 0.69 1.03 0.58 186 URI_TRY_3LD 868 0.99 1.03 0.98 187 HDRS_MISSP 863 0.36 1.02 0.13 188 XMGenDplmaNmb 850 0.68 1.01 0.57 189 DKIM_ADSP_NXDOMAIN 840 0.52 1.00 0.35 190 HTML_IMAGE_ONLY_08 838 0.33 0.99 0.10 191 DATE_IN_PAST_03_06 826 0.59 0.98 0.46 192 MONEY_NOHTML 825 0.30 0.98 0.06 193 SUBJ_DOLLARS 813 0.41 0.96 0.22 194 RELAYCOUNTRY_AU 810 0.38 0.96 0.18 195 TR_XM_COVIDMETA1 793 0.34 0.94 0.14 196 DKIM_ADSP_CUSTOM_MED 790 0.83 0.94 0.79 197 XM_B_REG_HTML 787 0.77 0.93 0.72 198 XM_H_Long_From02 787 0.96 0.93 0.97 199 XM_SPF_Unknown 786 0.49 0.93 0.34 200 TR_LOTS_OF_MONEY3 782 0.38 0.93 0.20 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 201498 78.97 69.47 82.24 2 DKIM_SIGNED 183528 77.39 84.61 74.91 3 HTML_MESSAGE 182958 78.88 91.09 74.68 4 XM_DK_Pass 181128 76.13 82.53 73.93 5 DKIM_VALID 177645 74.54 80.42 72.51 6 XM_B_Unicode 152541 64.67 71.68 62.26 7 DKIM_VALID_AU 147140 60.45 61.59 60.06 8 BAYES_50 128228 47.52 33.51 52.34 9 DCC_CHECK_NEGATIVE 122323 42.85 22.31 49.93 10 XM_B_SpammyWords 120888 53.54 65.75 49.34 11 DCC_CHECK 119596 55.58 75.22 48.81 12 XMListUnsubscribeExists 109175 49.07 62.16 44.56 13 XM_B_Unicode3 97271 39.81 40.13 39.70 14 RCVD_IN_MSPIKE_WL 90798 32.81 20.45 37.06 15 DKIM_VALID_EF 83552 34.60 36.03 34.10 16 HTML_FONT_LOW_CONTRAST 63504 26.93 29.86 25.92 17 T_TM2_M_HEADER_IN_MSG 62064 23.63 18.69 25.33 18 LOC_TINY_FONT_1 58717 27.33 37.10 23.97 19 RCVD_IN_MSPIKE_H2 51720 22.58 26.83 21.11 20 FVGT_m_MULTI_ODD 50628 21.22 22.85 20.66 21 MIME_HTML_ONLY 49513 22.50 29.15 20.21 22 XMSubLong 45408 19.13 20.87 18.53 23 XM_DKIMWhitelistDomains 45294 13.75 0.00 18.49 24 XM_B_SpammyWords2 42627 22.29 36.48 17.40 25 USER_IN_DEF_DKIM_WL 38714 12.22 1.82 15.80 26 RCVD_IN_MSPIKE_H3 37649 14.13 10.53 15.37 27 T_KAM_HTML_FONT_INVALID 36144 18.24 28.37 14.75 28 ALL_TRUSTED 35522 11.64 3.32 14.50 29 RCVD_IN_MSPIKE_H4 34071 12.65 9.01 13.91 30 XMStrtUSub 32915 10.96 3.78 13.43 31 XM_B_Phish_Phrases 30391 10.67 5.62 12.40 32 XM_Multi_Part_URI 29087 12.63 14.83 11.87 33 XM_Body_Dirty_Words 27925 13.49 19.56 11.40 34 XM_DK_Undo_02 27093 20.87 49.35 11.06 35 BAYES_60 26160 10.10 8.43 10.68 36 XM_B_Unsub 24976 12.39 18.76 10.19 37 XM_Evil_Numbers_Gen 23209 8.87 7.12 9.47 38 BAYES_99 22810 16.44 37.13 9.31 39 RCVD_IN_RP_SAFE 21754 7.96 5.29 8.88 40 FSL_BULK_SIG 21703 9.99 13.29 8.86 41 TR_XM_DKIM_Undo 20623 15.81 37.26 8.42 42 BAYES_00 20296 6.38 0.87 8.28 43 RCVD_IN_RP_CERTIFIED 19273 6.81 3.75 7.87 44 LotsOfNums_01 19207 7.55 6.71 7.84 45 RCVD_IN_MSPIKE_H5 19078 6.02 0.91 7.79 46 LOTS_OF_MONEY 17228 8.07 11.07 7.03 47 BAYES_999 17190 12.55 28.63 7.02 48 UNPARSEABLE_RELAY 16406 7.97 11.66 6.70 49 HTML_IMAGE_RATIO_02 16250 7.13 8.56 6.63 50 BAYES_80 15591 7.29 10.00 6.36 51 TooManyTo_001 14647 5.85 5.46 5.98 52 TR_XM_DK_Bayes 14356 4.53 0.68 5.86 53 HTML_IMAGE_RATIO_04 14204 5.33 3.95 5.80 54 TR_XM_DK_Bayes1 14149 4.46 0.65 5.78 55 XM_SendGrid 13802 6.21 7.89 5.63 56 TR_XM_UnparsRelay 13754 7.07 11.31 5.61 57 T_TooManySym_01 13685 4.81 2.56 5.59 58 TR_DCC_Bayes_99 13468 10.85 26.41 5.50 59 TR_XM_DK_Bayes2 12697 3.98 0.50 5.18 60 BAYES_95 12291 5.31 6.16 5.02 61 BOTNET_IPINHOSTNAME 11979 7.00 13.13 4.89 62 XMSexyCombo_05 11452 6.19 10.58 4.67 63 XM_H_Long_From01 11218 4.97 6.11 4.58 64 TR_XM_SpammyWords4 10732 5.56 8.99 4.38 65 MPART_ALT_DIFF 10698 7.29 15.77 4.37 66 XMSubMetaSx_00 10630 4.88 6.46 4.34 67 XM_B_SpammyWords3 10525 6.23 11.83 4.30 68 TR_XM_PHPDW 10070 3.63 2.24 4.11 69 TR_XM_FormFill2 9915 3.52 2.01 4.05 70 TR_XM_PHPForged 9914 3.53 2.02 4.05 71 XM_H_PHPOS 9900 3.52 2.00 4.04 72 XM_UncommonTLD01 9484 7.47 17.94 3.87 73 RCVD_IN_IADB_LISTED 9459 3.33 1.79 3.86 74 XM_B_FormFill 9416 2.87 0.03 3.84 75 TR_XM_DK_SendGrid 9273 3.98 4.54 3.78 76 IN_ZIMBRA_NJ_WHITELIST 9110 2.77 0.02 3.72 77 MIME_QP_LONG_LINE 8976 3.32 2.31 3.66 78 RELAYCOUNTRY_META 8520 9.92 28.64 3.48 79 BAYES_40 8508 3.08 1.92 3.47 80 XMNumbers 8370 3.57 4.01 3.42 81 RCVD_IN_IADB_SPF 8257 2.91 1.59 3.37 82 FROM_EXCESS_BASE64 8157 3.03 2.17 3.33 83 INVALID_MSGID 8062 2.73 1.08 3.29 84 HTML_IMAGE_RATIO_06 7757 3.05 2.73 3.17 85 T_TooManySym_02 7734 2.51 0.64 3.16 86 BAYES_20 7574 2.65 1.37 3.09 87 TM2_M_URI_OPT_OUT 7395 2.98 2.85 3.02 88 RCVD_IN_IADB_SENDERID 7373 2.62 1.51 3.01 89 T_REMOTE_IMAGE 7363 2.97 2.87 3.01 90 RCVD_IN_IADB_DK 7133 2.55 1.51 2.91 91 XM_H_Trusted_IP 7050 2.14 0.00 2.88 92 MIME_HTML_ONLY_MULTI 6778 2.78 2.82 2.77 93 ANY_BOUNCE_MESSAGE 6660 2.29 1.04 2.72 94 BOUNCE_MESSAGE 6659 2.29 1.03 2.72 95 XM_PDF 6334 2.05 0.51 2.59 96 TO_MALFORMED 6279 1.92 0.04 2.56 97 T_XMDrugObfuBody_14 6132 2.57 2.75 2.50 98 DKIM_INVALID 5883 2.86 4.19 2.40 99 RCVD_IN_IADB_VOUCHED 5784 1.92 0.63 2.36 100 TR_XM_PhishingBody 5473 3.05 5.41 2.23 101 MIME_HTML_MOSTLY 5250 4.95 13.12 2.14 102 TVD_RCVD_IP 5136 1.63 0.27 2.10 103 UNTRUSTED_Relay 5043 6.35 18.81 2.06 104 URI_NOVOWEL 5025 1.88 1.38 2.05 105 MAILING_LIST_MULTI 4985 1.98 1.83 2.03 106 IN_HORDE_ADDRESS_BOOK 4829 1.49 0.08 1.97 107 TR_XM_SpammyWords2 4604 4.85 13.47 1.88 108 XM_B_SpammyTLD 4391 2.33 3.91 1.79 109 HTML_IMAGE_RATIO_08 4344 1.86 2.09 1.77 110 XM_CamelCaseFrm001 4206 1.91 2.48 1.72 111 HTML_MIME_NO_HTML_TAG 4153 2.35 4.26 1.70 112 TR_XM_SB_Phish 4005 1.67 1.76 1.63 113 XMSubPhish11 3979 1.64 1.69 1.62 114 BOTNET 3816 6.44 20.62 1.56 115 RCVD_IN_IADB_OPTIN 3733 1.27 0.54 1.52 116 BAYES_05 3542 1.23 0.60 1.45 117 XMStockSpam_06 3517 1.40 1.31 1.44 118 XM_DK_Undo_01 3263 1.45 1.79 1.33 119 XMGappySubj_01 3236 1.02 0.14 1.32 120 T_XMDrugObfuBody_08 3207 1.75 3.05 1.31 121 XMBSHREFv2 3155 1.01 0.19 1.29 122 URI_HEX 3137 1.36 1.60 1.28 123 TR_Symld_Words 3126 1.59 2.50 1.28 124 TooManyTo_002 3122 1.10 0.59 1.27 125 TR_XM_SpammyWords5 3080 1.88 3.68 1.26 126 XMSubNoVowel 3056 1.15 0.85 1.25 127 XMBdyGiftCard01 3025 1.31 1.53 1.23 128 XM_B_Unsub2 2987 1.45 2.11 1.22 129 TM2_M_VERY_LONG_WORD 2871 1.40 2.08 1.17 130 HELO_NODOT 2854 1.03 0.62 1.16 131 HELO_NO_DOMAIN 2854 1.03 0.62 1.16 132 RCVD_IN_MSPIKE_BL 2853 2.10 4.80 1.16 133 HTML_IMAGE_ONLY_20 2781 0.96 0.45 1.14 134 XM_B_Phish66 2726 1.58 2.94 1.11 135 XM_GoogleGroups 2700 0.98 0.61 1.10 136 XMBrknScrpt_02 2639 1.13 1.27 1.08 137 XMDiploma_00 2601 1.22 1.67 1.06 138 MSGID_NOFQDN1 2592 0.80 0.04 1.06 139 XMBody_95 2578 0.82 0.16 1.05 140 XM_SPF_SoftFail 2549 1.90 4.40 1.04 141 RELAYCOUNTRY_CA 2532 2.37 6.25 1.03 142 XM_UB50 2422 2.12 5.40 0.99 143 URI_TRY_3LD 2402 0.99 1.03 0.98 144 XM_H_Long_From02 2370 0.96 0.93 0.97 145 KHOP_HELO_FCRDNS 2316 1.65 3.70 0.95 146 SUBJ_ALL_CAPS 2301 1.27 2.24 0.94 147 T_TooManySym_03 2275 0.73 0.14 0.93 148 XM_B_COVIDMETA 2216 0.99 1.24 0.90 149 HTML_FONT_FACE_BAD 2179 0.83 0.67 0.89 150 XM_OfRef6 2131 1.42 3.03 0.87 151 RCVD_IN_BL_SPAMCOP_NET 2075 2.80 8.49 0.85 152 TooManyTo_003 2070 0.75 0.48 0.84 153 XMHTML_After_End 2050 0.78 0.63 0.84 154 MISSING_HEADERS 2027 0.78 0.65 0.83 155 XMLngstWrd_00 2022 0.84 0.88 0.83 156 T_XMDrugObfuBody_00 1973 1.10 1.95 0.81 157 DKIM_ADSP_CUSTOM_MED 1937 0.83 0.94 0.79 158 T_MANY_PILL_PRICE 1766 0.54 0.00 0.72 159 XM_B_REG_HTML 1760 0.77 0.93 0.72 160 XMLngstWrd_01 1730 0.72 0.78 0.71 161 HTML_TAG_BALANCE_BODY 1635 0.70 0.79 0.67 162 TooManyTo_004 1626 0.61 0.44 0.66 163 TR_MetaPhish_Combo_01 1573 0.67 0.76 0.64 164 RELAYCOUNTRY_GB 1541 1.15 2.65 0.63 165 RDNS_DYNAMIC 1510 0.63 0.67 0.62 166 USER_IN_WHITELIST 1504 0.46 0.00 0.61 167 USER_IN_WELCOMELIST 1504 0.46 0.00 0.61 168 REPLYTO_WITHOUT_TO_CC 1457 0.54 0.39 0.59 169 XM_B_COPY_HTML 1453 0.66 0.84 0.59 170 RCVD_IN_MSPIKE_ZBI 1453 0.56 0.46 0.59 171 XMLngstWrd_02 1446 0.55 0.43 0.59 172 XMHTMLBadTable_001 1419 0.69 1.03 0.58 173 HTTPS_HTTP_MISMATCH 1419 0.63 0.76 0.58 174 TR_MSPIKEBAYES00 1417 0.43 0.00 0.58 175 RELAYCOUNTRY_NG_I 1408 0.44 0.05 0.57 176 TR_XM_MSPIKECOMBO 1400 1.54 4.33 0.57 177 TooManyTo_005 1398 0.53 0.40 0.57 178 XMGenDplmaNmb 1397 0.68 1.01 0.57 179 XMPhish30 1394 0.65 0.88 0.57 180 XM_H_PHPMailer 1381 0.73 1.22 0.56 181 T_Symld_Words_02 1315 0.69 1.13 0.54 182 TR_XM_SpammyWords3 1264 1.08 2.72 0.52 183 XMBody_17 1251 1.06 2.64 0.51 184 T_FILL_THIS_FORM_SHORT 1228 1.00 2.46 0.50 185 XM_ProductURIs 1215 0.52 0.60 0.50 186 TVD_SPACE_RATIO 1207 0.39 0.09 0.49 187 XMNoVowels 1178 0.50 0.57 0.48 188 XMCapTrack 1164 0.41 0.23 0.48 189 XMLngstWrd_03 1146 0.44 0.36 0.47 190 NML_ADSP_CUSTOM_MED 1146 0.54 0.75 0.47 191 XM_D_tchamptons_WL 1128 0.34 0.00 0.46 192 DATE_IN_PAST_03_06 1115 0.59 0.98 0.46 193 DIET_1 1103 0.66 1.27 0.45 194 T_XMHurry_00 1103 0.75 1.62 0.45 195 FORGED_GMAIL_RCVD 1035 0.50 0.74 0.42 196 XMSubMetaI_00 1033 0.59 1.09 0.42 197 XMSexyCombo_01 1032 0.78 1.81 0.42 198 SpammyFromTLD_01 973 2.72 9.47 0.40 199 XMLngstWrd_04 937 0.35 0.25 0.38 200 T_TooManySym_04 927 0.30 0.06 0.38 ----------------------------------------------------------------------