Email: 290111 Autolearn: 0 AvgScore: 2.91 AvgScanTime: 1.38 sec Spam: 82387 Autolearn: 0 AvgScore: 14.53 AvgScanTime: 1.53 sec Ham: 207724 Autolearn: 0 AvgScore: -1.70 AvgScanTime: 1.32 sec Time Spent Running SA: 111.47 hours Time Spent Processing Spam: 35.09 hours Time Spent Processing Ham: 76.37 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 76239 86.66 92.54 84.34 2 DKIM_SIGNED 67816 78.39 82.31 76.83 3 XM_DK_Pass 66546 77.07 80.77 75.60 4 DKIM_VALID 65045 75.50 78.95 74.13 5 DCC_CHECK 64988 56.37 78.88 47.44 6 RELAYCOUNTRY_US 62706 78.97 76.11 80.10 7 XM_B_Unicode 60733 71.64 73.72 70.82 8 XMListUnsubscribeExists 55346 57.39 67.18 53.51 9 XM_B_SpammyWords 51941 51.48 63.05 46.90 10 DKIM_VALID_AU 49131 58.89 59.63 58.59 11 XM_DK_Undo_02 39625 20.85 48.10 10.05 12 XM_B_Unicode3 34286 43.02 41.62 43.58 13 BAYES_99 30843 16.09 37.44 7.63 14 XM_B_SpammyWords2 30739 25.64 37.31 21.01 15 LOC_TINY_FONT_1 30043 29.93 36.47 27.34 16 TR_XM_DKIM_Undo 29379 15.14 35.66 7.00 17 BAYES_50 28093 48.32 34.10 53.96 18 HTML_FONT_LOW_CONTRAST 26948 30.71 32.71 29.92 19 DKIM_VALID_EF 26178 29.55 31.77 28.67 20 MIME_HTML_ONLY 25948 25.12 31.50 22.59 21 TR_DCC_Bayes_99 24535 11.47 29.78 4.20 22 BAYES_999 24010 12.71 29.14 6.19 23 T_KAM_HTML_FONT_INVALID 22203 20.39 26.95 17.79 24 RCVD_IN_MSPIKE_H2 21724 24.70 26.37 24.04 25 FVGT_m_MULTI_ODD 21620 25.08 26.24 24.62 26 RELAYCOUNTRY_META 18407 8.96 22.34 3.66 27 XMSubLong 17735 22.55 21.53 22.95 28 RCVD_IN_MSPIKE_WL 17677 29.79 21.46 33.09 29 DCC_CHECK_NEGATIVE 17363 43.60 21.07 52.53 30 XM_Body_Dirty_Words 17227 14.77 20.91 12.34 31 T_TM2_M_HEADER_IN_MSG 16869 23.75 20.48 25.05 32 BOTNET 14953 6.40 18.15 1.74 33 XM_UncommonTLD01 14220 8.06 17.26 4.42 34 UNTRUSTED_Relay 14032 5.87 17.03 1.44 35 XM_Multi_Part_URI 12840 13.85 15.58 13.15 36 BOTNET_IPINHOSTNAME 12278 8.26 14.90 5.62 37 FSL_BULK_SIG 12235 10.51 14.85 8.79 38 XM_B_Unsub 12059 11.70 14.64 10.54 39 TR_XM_SpammyWords2 11656 5.19 14.15 1.64 40 LOTS_OF_MONEY 10295 8.99 12.50 7.60 41 XMSexyCombo_05 10215 6.41 12.40 4.04 42 MPART_ALT_DIFF 10080 7.16 12.23 5.15 43 UNPARSEABLE_RELAY 9923 9.40 12.04 8.35 44 TR_XM_UnparsRelay 9653 8.19 11.72 6.79 45 XM_B_SpammyWords3 9538 6.67 11.58 4.72 46 RCVD_IN_MSPIKE_H3 8792 15.14 10.67 16.92 47 TR_XM_SpammyWords4 8777 6.38 10.65 4.69 48 BAYES_80 8226 6.54 9.98 5.18 49 XMSubMetaSx_00 8008 6.67 9.72 5.45 50 RCVD_IN_MSPIKE_H4 7760 12.12 9.42 13.19 51 HTML_IMAGE_RATIO_02 7373 7.59 8.95 7.06 52 XM_Evil_Numbers_Gen 7224 9.05 8.77 9.15 53 MIME_HTML_MOSTLY 7129 4.15 8.65 2.36 54 BAYES_60 6956 10.39 8.44 11.16 55 XM_SendGrid 6857 7.29 8.32 6.88 56 RCVD_IN_BL_SPAMCOP_NET 5958 2.80 7.23 1.04 57 SpammyFromTLD_01 5944 2.35 7.21 0.42 58 LotsOfNums_01 5790 8.90 7.03 9.64 59 RCVD_IN_RP_SAFE 5398 8.56 6.55 9.35 60 SpammyFromTLD_02 5084 1.92 6.17 0.24 61 XM_H_Long_From01 4925 5.55 5.98 5.38 62 T_REMOTE_IMAGE 4660 4.13 5.66 3.52 63 XMNumbers 4619 4.59 5.61 4.19 64 XM_UB50 4555 2.28 5.53 1.00 65 BAYES_95 4521 3.98 5.49 3.38 66 XM_B_Phish_Phrases 4447 4.62 5.40 4.31 67 TooManyTo_001 4393 6.35 5.33 6.75 68 TR_XM_PhishingBody 4346 3.80 5.28 3.21 69 RCVD_IN_RP_CERTIFIED 4314 7.25 5.24 8.05 70 RELAYCOUNTRY_FR 4284 1.64 5.20 0.23 71 RCVD_IN_MSPIKE_BL 4251 1.99 5.16 0.73 72 RELAYCOUNTRY_CA 4236 2.30 5.14 1.17 73 KHOP_HELO_FCRDNS 4187 2.49 5.08 1.47 74 HTML_IMAGE_RATIO_04 4157 5.53 5.05 5.73 75 XM_SPF_SoftFail 4151 2.64 5.04 1.68 76 XM_UB99 4040 1.39 4.90 0.00 77 JH_SPAMMY_HEADERS 3945 1.36 4.79 0.00 78 TR_XM_DK_SendGrid 3854 4.46 4.68 4.37 79 HTML_MIME_NO_HTML_TAG 3850 2.70 4.67 1.92 80 HTML_TAG_BALANCE_CENTER 3789 1.45 4.60 0.21 81 TR_XM_MSPIKECOMBO 3751 1.78 4.55 0.68 82 XMStrtUSub 3642 4.87 4.42 5.04 83 HTML_IMAGE_ONLY_08 3420 1.26 4.15 0.12 84 URI_NOVOWEL 3381 3.00 4.10 2.57 85 TR_XM_SpammyWords5 3350 2.25 4.07 1.53 86 MIME_HTML_ONLY_MULTI 2980 3.42 3.62 3.34 87 XM_UB999 2970 1.02 3.60 0.00 88 FROM_EXCESS_BASE64 2968 3.18 3.60 3.01 89 BODY_URI_ONLY 2906 1.01 3.53 0.01 90 GOOG_STO_IMG_HTML 2845 0.98 3.45 0.00 91 HTML_IMAGE_RATIO_06 2823 3.61 3.43 3.68 92 DKIM_INVALID 2771 2.89 3.36 2.70 93 XM_B_SpammyTLD 2764 2.32 3.35 1.91 94 MIXED_FONT_CASE 2689 0.93 3.26 0.00 95 XM_DIRTYINTL 2645 1.12 3.21 0.28 96 USER_IN_DEF_DKIM_WL 2629 12.86 3.19 16.69 97 TM2_M_URI_OPT_OUT 2613 3.44 3.17 3.55 98 SUBJ_ALL_CAPS 2550 1.83 3.10 1.33 99 T_TooManySym_01 2448 6.07 2.97 7.30 100 MIXED_CENTER_CASE 2415 0.83 2.93 0.00 101 MIXED_HREF_CASE 2412 0.83 2.93 0.00 102 HTML_FONT_SIZE_LARGE 2403 0.90 2.92 0.11 103 MIXED_IMG_CASE 2381 0.83 2.89 0.01 104 URIBL_DBL_SPAM 2381 0.83 2.89 0.01 105 MIXED_AREA_CASE 2376 0.82 2.88 0.00 106 URI_PHP_REDIR 2331 0.81 2.83 0.02 107 XM_OfRef6 2329 1.84 2.83 1.44 108 XMBody_17 2321 1.24 2.82 0.62 109 RCVD_IN_RP_RNBL 2287 0.83 2.78 0.06 110 HTML_FONT_SIZE_HUGE 2269 0.89 2.75 0.15 111 RCVD_IN_PSBL 2246 0.84 2.73 0.09 112 DKIM_ADSP_NXDOMAIN 2242 1.04 2.72 0.38 113 RCVD_IN_MSPIKE_L5 2192 0.89 2.66 0.19 114 TM2_M_VERY_LONG_WORD 2190 1.74 2.66 1.38 115 XMSexyCombo_01 2154 1.80 2.61 1.48 116 T_XMDrugObfuBody_14 2141 3.18 2.60 3.41 117 XM_B_Phish66 2037 1.88 2.47 1.65 118 XM_CamelCaseFrm001 2019 2.17 2.45 2.05 119 XM_UB60 1945 0.76 2.36 0.12 120 XM_UB80 1900 0.67 2.31 0.03 121 HTML_IMAGE_RATIO_08 1868 1.91 2.27 1.77 122 MIME_QP_LONG_LINE 1851 3.94 2.25 4.61 123 TR_XM_PHPDW 1818 0.89 2.21 0.36 124 XM_B_SpammyWords4 1744 0.97 2.12 0.51 125 TR_Symld_Words 1670 1.86 2.03 1.79 126 TR_XM_SpammyWords3 1668 1.03 2.02 0.64 127 T_Symld_Words_02 1668 0.93 2.02 0.50 128 XM_DK_Undo_01 1660 1.81 2.01 1.73 129 XMSubMetaI_00 1618 1.12 1.96 0.79 130 DKIM_ADSP_CUSTOM_MED 1597 1.25 1.94 0.98 131 XMDiploma_00 1585 1.35 1.92 1.12 132 XM_B_Unsub2 1574 1.44 1.91 1.26 133 TR_Mismatch_TLD_02 1561 0.58 1.89 0.06 134 RELAYCOUNTRY_DE 1559 0.83 1.89 0.41 135 TR_XM_PHPForged 1545 0.75 1.88 0.31 136 TR_LOTS_OF_MONEY3 1543 0.63 1.87 0.14 137 TR_XM_FormFill2 1532 0.75 1.86 0.30 138 T_XMDrugObfuBody_08 1530 1.63 1.86 1.54 139 BAYES_40 1524 4.10 1.85 4.99 140 XM_H_PHPOS 1517 0.73 1.84 0.29 141 T_XMHurry_00 1499 1.02 1.82 0.70 142 NML_ADSP_CUSTOM_MED 1484 0.92 1.80 0.58 143 FORGED_GMAIL_RCVD 1444 0.89 1.75 0.55 144 XM_RXBody 1432 0.93 1.74 0.61 145 TR_XM_SB_Phish 1422 2.04 1.73 2.16 146 RELAYCOUNTRY_IN 1419 0.57 1.72 0.11 147 T_FILL_THIS_FORM_SHORT 1419 0.90 1.72 0.58 148 XMBrknScrpt_02 1418 1.33 1.72 1.17 149 RCVD_IN_IADB_LISTED 1408 3.93 1.71 4.81 150 XMSubPhish11 1362 2.01 1.65 2.15 151 TR_XM_BayesRelay 1344 0.47 1.63 0.01 152 XM_URI_RBL 1331 0.56 1.62 0.14 153 XMBdyGiftCard01 1327 1.37 1.61 1.27 154 BOTNET_NORDNS 1320 0.47 1.60 0.02 155 URIBL_DBL_ABUSE_SPAM 1314 0.47 1.59 0.03 156 XMStockSpam_06 1313 1.03 1.59 0.80 157 FROM_SUSPICIOUS_NTLD 1283 0.48 1.56 0.05 158 PDS_OTHER_BAD_TLD 1279 0.72 1.55 0.39 159 URI_HEX 1270 1.46 1.54 1.43 160 THIS_AD 1266 0.75 1.54 0.44 161 FROM_SUSPICIOUS_NTLD_FP 1246 0.46 1.51 0.04 162 URI_NO_WWW_BIZ_CGI 1226 0.43 1.49 0.00 163 RCVD_IN_IADB_SPF 1189 3.39 1.44 4.16 164 ALL_TRUSTED 1188 12.59 1.44 17.01 165 DIET_1 1160 0.81 1.41 0.58 166 URIBL_BLACK 1134 0.41 1.38 0.02 167 RCVD_IN_MSPIKE_H5 1125 2.52 1.37 2.98 168 RCVD_IN_IADB_SENDERID 1108 3.03 1.34 3.70 169 RCVD_IN_IADB_DK 1106 2.96 1.34 3.60 170 MAILING_LIST_MULTI 1105 2.13 1.34 2.44 171 XM_H_PHPMailer 1086 1.14 1.32 1.08 172 XM_BadFromFormat 1077 0.52 1.31 0.20 173 XM_Body_Dirty_Words_01 1054 0.49 1.28 0.17 174 HDRS_MISSP 1052 0.46 1.28 0.13 175 XM_UB95 1047 0.37 1.27 0.01 176 TR_Sbj_FN_Bdy 1036 0.45 1.26 0.13 177 T_XMDrugObfuBody_00 1029 0.89 1.25 0.75 178 URI_GOOG_STO_SPAMMY 1006 0.35 1.22 0.00 179 MONEY_NOHTML 1002 0.41 1.22 0.09 180 BAYES_20 986 2.28 1.20 2.71 181 NO_DNS_FOR_FROM 980 0.58 1.19 0.34 182 TR_XM_MaxWHORU 964 0.57 1.17 0.33 183 XMPhish30 959 0.92 1.16 0.82 184 XM_JunkDunk 958 0.33 1.16 0.00 185 DATE_IN_PAST_03_06 957 0.63 1.16 0.42 186 SHOPIFY_IMG_NOT_RCVD_SFY 940 0.48 1.14 0.22 187 TR_XM_INV_DKIM 930 0.42 1.13 0.14 188 MPART_ALT_DIFF_COUNT 912 0.72 1.11 0.56 189 LongTLD 903 0.39 1.10 0.11 190 HTML_IMAGE_ONLY_16 891 0.42 1.08 0.16 191 XMPhish08 890 0.47 1.08 0.23 192 XMGenDplmaNmb 886 0.64 1.08 0.47 193 HK_RANDOM_REPLYTO 874 0.49 1.06 0.27 194 XMSexyCombo_04 873 0.38 1.06 0.11 195 RCVD_IN_MSPIKE_L3 868 0.44 1.05 0.20 196 XMMoneyMeta_00 852 0.56 1.03 0.37 197 XMSlimDrugH 851 0.61 1.03 0.44 198 XMLongAddy 847 0.33 1.03 0.05 199 RELAYCOUNTRY_NL 837 0.39 1.02 0.15 200 TR_Mismatch_TLD_01 835 0.58 1.01 0.41 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 175185 86.66 92.54 84.34 2 RELAYCOUNTRY_US 166396 78.97 76.11 80.10 3 DKIM_SIGNED 159592 78.39 82.31 76.83 4 XM_DK_Pass 157044 77.07 80.77 75.60 5 DKIM_VALID 153981 75.50 78.95 74.13 6 XM_B_Unicode 147108 71.64 73.72 70.82 7 DKIM_VALID_AU 121715 58.89 59.63 58.59 8 BAYES_50 112078 48.32 34.10 53.96 9 XMListUnsubscribeExists 111156 57.39 67.18 53.51 10 DCC_CHECK_NEGATIVE 109114 43.60 21.07 52.53 11 DCC_CHECK 98554 56.37 78.88 47.44 12 XM_B_SpammyWords 97418 51.48 63.05 46.90 13 XM_B_Unicode3 90530 43.02 41.62 43.58 14 RCVD_IN_MSPIKE_WL 68734 29.79 21.46 33.09 15 HTML_FONT_LOW_CONTRAST 62155 30.71 32.71 29.92 16 DKIM_VALID_EF 59559 29.55 31.77 28.67 17 LOC_TINY_FONT_1 56801 29.93 36.47 27.34 18 T_TM2_M_HEADER_IN_MSG 52041 23.75 20.48 25.05 19 FVGT_m_MULTI_ODD 51135 25.08 26.24 24.62 20 RCVD_IN_MSPIKE_H2 49934 24.70 26.37 24.04 21 XMSubLong 47671 22.55 21.53 22.95 22 MIME_HTML_ONLY 46918 25.12 31.50 22.59 23 XM_B_SpammyWords2 43652 25.64 37.31 21.01 24 T_KAM_HTML_FONT_INVALID 36958 20.39 26.95 17.79 25 ALL_TRUSTED 35337 12.59 1.44 17.01 26 RCVD_IN_MSPIKE_H3 35140 15.14 10.67 16.92 27 USER_IN_DEF_DKIM_WL 34665 12.86 3.19 16.69 28 RCVD_IN_MSPIKE_H4 27403 12.12 9.42 13.19 29 XM_Multi_Part_URI 27326 13.85 15.58 13.15 30 XM_Body_Dirty_Words 25625 14.77 20.91 12.34 31 BAYES_60 23190 10.39 8.44 11.16 32 XM_B_Unsub 21898 11.70 14.64 10.54 33 XM_DKIMWhitelistDomains 21496 7.43 0.07 10.35 34 XM_DK_Undo_02 20874 20.85 48.10 10.05 35 LotsOfNums_01 20021 8.90 7.03 9.64 36 RCVD_IN_RP_SAFE 19425 8.56 6.55 9.35 37 BAYES_00 19102 6.84 0.90 9.20 38 XM_Evil_Numbers_Gen 19017 9.05 8.77 9.15 39 FSL_BULK_SIG 18268 10.51 14.85 8.79 40 UNPARSEABLE_RELAY 17341 9.40 12.04 8.35 41 RCVD_IN_RP_CERTIFIED 16727 7.25 5.24 8.05 42 BAYES_99 15846 16.09 37.44 7.63 43 LOTS_OF_MONEY 15797 8.99 12.50 7.60 44 T_TooManySym_01 15162 6.07 2.97 7.30 45 HTML_IMAGE_RATIO_02 14659 7.59 8.95 7.06 46 TR_XM_DK_Bayes 14586 5.25 0.79 7.02 47 TR_XM_DKIM_Undo 14551 15.14 35.66 7.00 48 XM_SendGrid 14297 7.29 8.32 6.88 49 TR_XM_DK_Bayes1 14294 5.15 0.78 6.88 50 TR_XM_UnparsRelay 14095 8.19 11.72 6.79 51 TooManyTo_001 14025 6.35 5.33 6.75 52 BAYES_999 12854 12.71 29.14 6.19 53 TR_XM_DK_Bayes2 12739 4.54 0.53 6.13 54 HTML_IMAGE_RATIO_04 11898 5.53 5.05 5.73 55 BOTNET_IPINHOSTNAME 11684 8.26 14.90 5.62 56 XMSubMetaSx_00 11329 6.67 9.72 5.45 57 XM_H_Long_From01 11177 5.55 5.98 5.38 58 BAYES_80 10761 6.54 9.98 5.18 59 MPART_ALT_DIFF 10703 7.16 12.23 5.15 60 XMStrtUSub 10474 4.87 4.42 5.04 61 BAYES_40 10375 4.10 1.85 4.99 62 RCVD_IN_IADB_LISTED 9984 3.93 1.71 4.81 63 XM_B_SpammyWords3 9801 6.67 11.58 4.72 64 TR_XM_SpammyWords4 9745 6.38 10.65 4.69 65 IN_ZIMBRA_NJ_WHITELIST 9590 3.31 0.03 4.62 66 MIME_QP_LONG_LINE 9572 3.94 2.25 4.61 67 XM_UncommonTLD01 9172 8.06 17.26 4.42 68 TR_XM_DK_SendGrid 9073 4.46 4.68 4.37 69 XM_B_Phish_Phrases 8948 4.62 5.40 4.31 70 TR_DCC_Bayes_99 8730 11.47 29.78 4.20 71 XMNumbers 8700 4.59 5.61 4.19 72 RCVD_IN_IADB_SPF 8650 3.39 1.44 4.16 73 XMSexyCombo_05 8388 6.41 12.40 4.04 74 T_TooManySym_02 8338 3.15 0.99 4.01 75 INVALID_MSGID 8088 2.83 0.16 3.89 76 RCVD_IN_IADB_SENDERID 7681 3.03 1.34 3.70 77 HTML_IMAGE_RATIO_06 7637 3.61 3.43 3.68 78 RELAYCOUNTRY_META 7601 8.96 22.34 3.66 79 RCVD_IN_IADB_DK 7468 2.96 1.34 3.60 80 TM2_M_URI_OPT_OUT 7368 3.44 3.17 3.55 81 T_REMOTE_IMAGE 7313 4.13 5.66 3.52 82 T_XMDrugObfuBody_14 7075 3.18 2.60 3.41 83 BAYES_95 7028 3.98 5.49 3.38 84 MIME_HTML_ONLY_MULTI 6935 3.42 3.62 3.34 85 TR_XM_PhishingBody 6670 3.80 5.28 3.21 86 FROM_EXCESS_BASE64 6261 3.18 3.60 3.01 87 RCVD_IN_MSPIKE_H5 6191 2.52 1.37 2.98 88 RCVD_IN_IADB_VOUCHED 6142 2.35 0.81 2.96 89 TO_MALFORMED 6095 2.10 0.00 2.93 90 ANY_BOUNCE_MESSAGE 6067 2.23 0.50 2.92 91 BOUNCE_MESSAGE 6066 2.23 0.50 2.92 92 XM_PDF 5887 2.13 0.36 2.83 93 TVD_RCVD_IP 5863 2.17 0.52 2.82 94 BAYES_20 5621 2.28 1.20 2.71 95 DKIM_INVALID 5611 2.89 3.36 2.70 96 URI_NOVOWEL 5332 3.00 4.10 2.57 97 XM_H_Trusted_IP 5101 1.76 0.00 2.46 98 MAILING_LIST_MULTI 5077 2.13 1.34 2.44 99 IN_HORDE_ADDRESS_BOOK 4911 1.75 0.19 2.36 100 MIME_HTML_MOSTLY 4900 4.15 8.65 2.36 101 TR_XM_SB_Phish 4494 2.04 1.73 2.16 102 XMSubPhish11 4458 2.01 1.65 2.15 103 XM_CamelCaseFrm001 4266 2.17 2.45 2.05 104 HTML_MIME_NO_HTML_TAG 3992 2.70 4.67 1.92 105 XM_B_SpammyTLD 3962 2.32 3.35 1.91 106 RCVD_IN_IADB_OPTIN 3936 1.53 0.61 1.89 107 BAYES_05 3721 1.45 0.59 1.79 108 TR_Symld_Words 3717 1.86 2.03 1.79 109 HTML_IMAGE_RATIO_08 3670 1.91 2.27 1.77 110 BOTNET 3611 6.40 18.15 1.74 111 XM_DK_Undo_01 3587 1.81 2.01 1.73 112 XM_SPF_SoftFail 3496 2.64 5.04 1.68 113 XM_B_Phish66 3421 1.88 2.47 1.65 114 TR_XM_SpammyWords2 3404 5.19 14.15 1.64 115 XMGappySubj_01 3223 1.32 0.74 1.55 116 T_XMDrugObfuBody_08 3205 1.63 1.86 1.54 117 TR_XM_SpammyWords5 3176 2.25 4.07 1.53 118 XMBSHREFv2 3143 1.12 0.14 1.51 119 XMSexyCombo_01 3077 1.80 2.61 1.48 120 TooManyTo_002 3070 1.22 0.58 1.48 121 KHOP_HELO_FCRDNS 3048 2.49 5.08 1.47 122 XM_OfRef6 2999 1.84 2.83 1.44 123 UNTRUSTED_Relay 2999 5.87 17.03 1.44 124 URI_HEX 2965 1.46 1.54 1.43 125 TM2_M_VERY_LONG_WORD 2871 1.74 2.66 1.38 126 XM_GoogleGroups 2869 1.16 0.60 1.38 127 SUBJ_ALL_CAPS 2757 1.83 3.10 1.33 128 URI_TRY_3LD 2658 1.17 0.89 1.28 129 T_TooManySym_03 2648 0.97 0.19 1.27 130 XMBdyGiftCard01 2641 1.37 1.61 1.27 131 MSGID_NOFQDN1 2626 0.91 0.00 1.26 132 XM_B_Unsub2 2616 1.44 1.91 1.26 133 RELAYCOUNTRY_CA 2438 2.30 5.14 1.17 134 XMBrknScrpt_02 2434 1.33 1.72 1.17 135 XMDiploma_00 2331 1.35 1.92 1.12 136 XMBody_95 2321 0.85 0.18 1.12 137 XM_H_PHPMailer 2235 1.14 1.32 1.08 138 RCVD_IN_BL_SPAMCOP_NET 2153 2.80 7.23 1.04 139 TooManyTo_003 2109 0.86 0.48 1.02 140 XM_UB50 2069 2.28 5.53 1.00 141 HTML_FONT_FACE_BAD 2030 0.82 0.43 0.98 142 DKIM_ADSP_CUSTOM_MED 2027 1.25 1.94 0.98 143 XM_H_Long_From02 2015 0.94 0.88 0.97 144 XM_B_REG_HTML 1991 0.87 0.64 0.96 145 XM_B_COPY_HTML 1797 0.82 0.72 0.87 146 XMHTML_After_End 1773 0.84 0.82 0.85 147 XMPhish30 1698 0.92 1.16 0.82 148 XMStockSpam_06 1671 1.03 1.59 0.80 149 XM_ProductURIs 1662 0.79 0.78 0.80 150 XMSubMetaI_00 1642 1.12 1.96 0.79 151 TooManyTo_004 1628 0.69 0.44 0.78 152 TR_MetaPhish_Combo_01 1598 0.72 0.61 0.77 153 XM_B_COVIDMETA 1550 0.80 0.94 0.75 154 T_XMDrugObfuBody_00 1549 0.89 1.25 0.75 155 XMHTMLBadTable_001 1529 0.78 0.90 0.74 156 RCVD_IN_MSPIKE_BL 1522 1.99 5.16 0.73 157 HELO_NO_DOMAIN 1513 0.70 0.62 0.73 158 HELO_NODOT 1513 0.70 0.62 0.73 159 T_XMHurry_00 1463 1.02 1.82 0.70 160 RDNS_DYNAMIC 1450 0.64 0.51 0.70 161 TooManyTo_005 1412 0.59 0.38 0.68 162 TR_XM_MSPIKECOMBO 1410 1.78 4.55 0.68 163 TR_MSPIKEBAYES00 1407 0.49 0.00 0.68 164 USER_IN_WELCOMELIST 1398 0.48 0.00 0.67 165 USER_IN_WHITELIST 1398 0.48 0.00 0.67 166 XM_Walgreens_Forge 1370 0.47 0.00 0.66 167 TR_XM_SpammyWords3 1321 1.03 2.02 0.64 168 XMSubNoVowel 1304 0.59 0.50 0.63 169 XMBody_17 1286 1.24 2.82 0.62 170 XM_D_tchamptons_WL 1278 0.44 0.00 0.62 171 XM_RXBody 1272 0.93 1.74 0.61 172 TVD_SPACE_RATIO 1267 0.55 0.41 0.61 173 HTTPS_HTTP_MISMATCH 1252 0.64 0.72 0.60 174 HTML_IMAGE_ONLY_20 1228 0.70 0.97 0.59 175 T_FILL_THIS_FORM_SHORT 1202 0.90 1.72 0.58 176 DIET_1 1201 0.81 1.41 0.58 177 RELAYCOUNTRY_GB 1200 0.59 0.63 0.58 178 NML_ADSP_CUSTOM_MED 1196 0.92 1.80 0.58 179 XMCapTrack 1189 0.51 0.34 0.57 180 XMSubMetaSxObfu_02 1188 0.51 0.36 0.57 181 XM_shorewaves_Whitelist 1185 0.41 0.00 0.57 182 MPART_ALT_DIFF_COUNT 1170 0.72 1.11 0.56 183 FORGED_GMAIL_RCVD 1146 0.89 1.75 0.55 184 XMLngstWrd_00 1123 0.46 0.25 0.54 185 XM_B_SpammyWords4 1060 0.97 2.12 0.51 186 T_Symld_Words_02 1034 0.93 2.02 0.50 187 T_TooManySym_04 1012 0.38 0.10 0.49 188 XMGenDplmaNmb 978 0.64 1.08 0.47 189 PLING_QUERY 974 0.50 0.57 0.47 190 XMPhish14 956 0.47 0.51 0.46 191 XMLngstWrd_01 952 0.37 0.16 0.46 192 XMNoVowels 929 0.47 0.54 0.45 193 XMSlimDrugH 924 0.61 1.03 0.44 194 THIS_AD 911 0.75 1.54 0.44 195 BASE64_LENGTH_79_INF 896 0.35 0.13 0.43 196 HTML_TAG_BALANCE_BODY 890 0.55 0.84 0.43 197 SpammyFromTLD_01 882 2.35 7.21 0.42 198 DATE_IN_PAST_03_06 870 0.63 1.16 0.42 199 TR_Mismatch_TLD_01 856 0.58 1.01 0.41 200 RELAYCOUNTRY_DE 846 0.83 1.89 0.41 ----------------------------------------------------------------------