Email: 285166 Autolearn: 0 AvgScore: 3.53 AvgScanTime: 1.46 sec Spam: 84663 Autolearn: 0 AvgScore: 15.78 AvgScanTime: 1.82 sec Ham: 200503 Autolearn: 0 AvgScore: -1.64 AvgScanTime: 1.30 sec Time Spent Running SA: 115.42 hours Time Spent Processing Spam: 42.76 hours Time Spent Processing Ham: 72.65 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 80874 86.85 95.52 83.19 2 DKIM_SIGNED 70090 76.75 82.79 74.21 3 DCC_CHECK 68818 54.60 81.28 43.33 4 XM_DK_Pass 68307 75.15 80.68 72.82 5 DKIM_VALID 66405 73.37 78.43 71.23 6 XM_B_Unicode 61283 70.24 72.38 69.34 7 RELAYCOUNTRY_US 59711 75.95 70.53 78.24 8 XMListUnsubscribeExists 55369 54.57 65.40 50.00 9 XM_B_SpammyWords 55218 49.86 65.22 43.37 10 DKIM_VALID_AU 51250 57.54 60.53 56.27 11 XM_DK_Undo_02 41345 21.27 48.83 9.63 12 XM_B_Unicode3 33770 41.59 39.89 42.32 13 LOC_TINY_FONT_1 32845 29.45 38.79 25.51 14 BAYES_99 31211 16.69 36.86 8.17 15 TR_XM_DKIM_Undo 30940 15.40 36.54 6.47 16 XM_B_SpammyWords2 30064 23.89 35.51 18.98 17 BAYES_50 29288 48.34 34.59 54.14 18 MIME_HTML_ONLY 29110 25.90 34.38 22.31 19 DKIM_VALID_EF 27885 30.32 32.94 29.21 20 HTML_FONT_LOW_CONTRAST 27477 29.90 32.45 28.82 21 T_KAM_HTML_FONT_INVALID 25781 21.11 30.45 17.17 22 TR_DCC_Bayes_99 24952 11.56 29.47 4.00 23 RELAYCOUNTRY_META 24857 11.59 29.36 4.08 24 BAYES_999 24287 13.23 28.69 6.70 25 RCVD_IN_MSPIKE_H2 21641 24.97 25.56 24.73 26 XM_Body_Dirty_Words 19621 14.82 23.18 11.29 27 FVGT_m_MULTI_ODD 18987 23.71 22.43 24.25 28 XMSubLong 18400 21.68 21.73 21.66 29 UNTRUSTED_Relay 18087 7.58 21.36 1.77 30 XM_UncommonTLD01 18069 9.52 21.34 4.53 31 BOTNET 17728 7.40 20.94 1.68 32 RCVD_IN_MSPIKE_WL 17646 28.39 20.84 31.58 33 DCC_CHECK_NEGATIVE 15785 45.36 18.64 56.65 34 T_TM2_M_HEADER_IN_MSG 15762 23.26 18.62 25.22 35 XM_B_Unsub 14381 12.60 16.99 10.75 36 XMSexyCombo_05 13692 7.59 16.17 3.97 37 FSL_BULK_SIG 13135 10.79 15.51 8.79 38 MPART_ALT_DIFF 12563 7.79 14.84 4.81 39 BOTNET_IPINHOSTNAME 11887 8.25 14.04 5.81 40 XM_Multi_Part_URI 11826 13.17 13.97 12.83 41 LOTS_OF_MONEY 11332 10.14 13.38 8.78 42 TR_XM_SpammyWords2 10439 4.69 12.33 1.47 43 MIME_HTML_MOSTLY 10423 5.24 12.31 2.26 44 UNPARSEABLE_RELAY 10006 9.56 11.82 8.61 45 TR_XM_SpammyWords4 9708 7.16 11.47 5.34 46 XM_B_SpammyWords3 9702 6.37 11.46 4.22 47 TR_XM_UnparsRelay 9634 8.32 11.38 7.03 48 RCVD_IN_MSPIKE_H3 9294 14.47 10.98 15.94 49 BAYES_80 8309 6.85 9.81 5.60 50 URI_NOVOWEL 8165 4.84 9.64 2.82 51 URIBL_DBL_SPAM 7855 2.77 9.28 0.01 52 T_REMOTE_IMAGE 7720 5.31 9.12 3.70 53 BAYES_60 7665 10.66 9.05 11.34 54 RCVD_IN_MSPIKE_H4 7637 11.46 9.02 12.50 55 SpammyFromTLD_01 7591 3.01 8.97 0.50 56 TooManyTo_001 7581 7.57 8.95 6.98 57 XMSubMetaSx_00 7294 5.45 8.62 4.12 58 XM_SendGrid 7186 7.83 8.49 7.55 59 SpammyFromTLD_02 7023 2.60 8.30 0.20 60 HTML_IMAGE_RATIO_02 7017 7.00 8.29 6.46 61 RCVD_IN_BL_SPAMCOP_NET 6706 2.72 7.92 0.53 62 JH_SPAMMY_HEADERS 6680 2.36 7.89 0.03 63 XM_Evil_Numbers_Gen 6525 8.77 7.71 9.22 64 XM_UB50 6369 3.01 7.52 1.11 65 KHOP_HELO_FCRDNS 5443 2.87 6.43 1.37 66 XM_DIRTYINTL 5384 2.33 6.36 0.63 67 RCVD_IN_MSPIKE_BL 5045 2.08 5.96 0.44 68 XM_B_SpammyTLD 5017 3.27 5.93 2.16 69 HTML_MIME_NO_HTML_TAG 4876 3.31 5.76 2.28 70 XMNumbers 4871 4.63 5.75 4.16 71 BAYES_95 4773 4.08 5.64 3.42 72 RELAYCOUNTRY_CA 4706 2.51 5.56 1.22 73 XM_H_Long_From01 4642 5.17 5.48 5.03 74 T_HTML_TAG_BALANCE_CENTER 4598 1.79 5.43 0.25 75 LotsOfNums_01 4567 8.05 5.39 9.17 76 RCVD_IN_RP_SAFE 4557 7.92 5.38 8.99 77 HTML_IMAGE_ONLY_08 4404 1.61 5.20 0.10 78 TR_XM_MSPIKECOMBO 4376 1.84 5.17 0.44 79 BODY_URI_ONLY 4354 1.54 5.14 0.02 80 TR_XM_DK_SendGrid 4316 5.04 5.10 5.02 81 TR_XM_PhishingBody 4173 3.42 4.93 2.78 82 RELAYCOUNTRY_FR 4126 1.82 4.87 0.54 83 XM_B_Phish_Phrases 3849 4.04 4.55 3.83 84 XM_UB60 3807 1.52 4.50 0.26 85 RCVD_IN_RP_CERTIFIED 3766 6.89 4.45 7.92 86 TR_XM_SpammyWords5 3710 2.54 4.38 1.76 87 DKIM_INVALID 3685 3.38 4.35 2.98 88 XM_UB99 3506 1.23 4.14 0.01 89 TR_XM_SpammyWords3 3387 1.43 4.00 0.35 90 RCVD_IN_MSPIKE_L5 3371 1.22 3.98 0.06 91 HTML_IMAGE_RATIO_06 3320 3.64 3.92 3.52 92 MIXED_CENTER_CASE 3110 1.09 3.67 0.00 93 MIXED_HREF_CASE 3109 1.09 3.67 0.00 94 MIXED_IMG_CASE 3100 1.09 3.66 0.00 95 MIXED_AREA_CASE 3089 1.08 3.65 0.00 96 MIXED_FONT_CASE 3087 1.08 3.65 0.00 97 HTML_IMAGE_RATIO_04 3057 5.51 3.61 6.31 98 XM_OfRef6 2965 1.86 3.50 1.17 99 MIME_HTML_ONLY_MULTI 2831 3.19 3.34 3.13 100 XMStrtUSub 2813 4.72 3.32 5.31 101 XM_SPF_SoftFail 2799 2.04 3.31 1.51 102 HTML_FONT_SIZE_LARGE 2798 1.04 3.30 0.09 103 RELAYCOUNTRY_RU 2793 0.99 3.30 0.02 104 XM_UB80 2768 1.00 3.27 0.04 105 HTML_IMAGE_RATIO_08 2724 2.47 3.22 2.15 106 XM_UB999 2664 0.93 3.15 0.00 107 XMSexyCombo_01 2589 1.46 3.06 0.79 108 T_XMDrugObfuBody_14 2515 2.99 2.97 3.00 109 URI_GOOG_STO_SPAMMY 2494 0.87 2.95 0.00 110 DIET_1 2464 1.23 2.91 0.52 111 TM2_M_URI_OPT_OUT 2444 3.70 2.89 4.04 112 TR_XM_SPAMCOP 2436 1.01 2.88 0.22 113 T_XMDrugObfuBody_08 2359 1.74 2.79 1.31 114 RCVD_IN_PSBL 2345 0.82 2.77 0.00 115 RCVD_IN_RP_RNBL 2332 0.86 2.75 0.06 116 T_TooManySym_01 2233 5.55 2.64 6.77 117 XMSlimDrugH 2227 1.09 2.63 0.44 118 HTML_FONT_SIZE_HUGE 2187 0.85 2.58 0.12 119 PDS_OTHER_BAD_TLD 2107 1.03 2.49 0.41 120 US_DOLLARS_3 2095 2.00 2.47 1.80 121 T_XMHurry_00 2089 1.18 2.47 0.63 122 XMBody_17 2074 1.07 2.45 0.49 123 XM_B_Phish66 2061 1.75 2.43 1.46 124 SUBJ_ALL_CAPS 1987 1.90 2.35 1.71 125 RELAYCOUNTRY_DE 1981 0.98 2.34 0.40 126 BOTNET_NORDNS 1980 0.70 2.34 0.01 127 XMSexyCombo_04 1863 0.72 2.20 0.09 128 XM_CamelCaseFrm001 1783 1.89 2.11 1.80 129 TR_LOTS_OF_MONEY3 1782 0.82 2.10 0.28 130 MIME_QP_LONG_LINE 1769 3.95 2.09 4.74 131 TR_XM_BayesRelay 1750 0.62 2.07 0.01 132 URI_HEX 1683 1.75 1.99 1.64 133 RCVD_IN_IADB_LISTED 1671 4.07 1.97 4.95 134 RELAYCOUNTRY_IN 1657 0.64 1.96 0.09 135 TM2_M_VERY_LONG_WORD 1635 1.56 1.93 1.40 136 URIBL_SBL_A 1624 0.61 1.92 0.05 137 TR_Mismatch_TLD_02 1596 0.61 1.89 0.07 138 TR_XM_MaxBayes 1551 0.55 1.83 0.00 139 FROM_EXCESS_BASE64 1528 2.98 1.80 3.48 140 XM_B_SpammyWords4 1527 0.75 1.80 0.31 141 GOOG_STO_IMG_HTML 1507 0.53 1.78 0.00 142 XMDiploma_00 1495 1.19 1.77 0.94 143 RCVD_IN_IADB_SPF 1465 3.53 1.73 4.29 144 XM_DK_Undo_01 1394 1.46 1.65 1.38 145 TR_XM_PHPDW 1382 0.73 1.63 0.34 146 BAYES_40 1370 3.92 1.62 4.89 147 RCVD_IN_IADB_SENDERID 1366 3.18 1.61 3.84 148 XMBrknScrpt_02 1336 1.34 1.58 1.24 149 RCVD_IN_IADB_DK 1329 3.09 1.57 3.74 150 MPART_ALT_DIFF_COUNT 1322 0.81 1.56 0.49 151 MAILING_LIST_MULTI 1295 2.10 1.53 2.34 152 TR_XM_PHPForged 1294 0.65 1.53 0.28 153 XM_UB95 1281 0.46 1.51 0.02 154 XM_B_Unsub2 1279 1.37 1.51 1.32 155 TR_XM_FormFill2 1259 0.64 1.49 0.28 156 XM_H_PHPOS 1254 0.63 1.48 0.27 157 DATE_IN_PAST_24_48 1254 0.45 1.48 0.01 158 XM_ProductURIs 1253 0.94 1.48 0.71 159 T_FILL_THIS_FORM_SHORT 1223 0.81 1.44 0.54 160 XMStockSpam_06 1221 0.95 1.44 0.75 161 RELAYCOUNTRY_AU 1206 0.60 1.42 0.25 162 TR_XM_INV_DKIM 1201 0.66 1.42 0.34 163 XMWghtMeta_00 1195 0.48 1.41 0.09 164 TR_XM_SB_Phish 1187 1.86 1.40 2.05 165 XMBdyGiftCard01 1149 1.26 1.36 1.22 166 SHOPIFY_IMG_NOT_RCVD_SFY 1138 0.52 1.34 0.18 167 HDRS_MISSP 1127 0.47 1.33 0.10 168 T_XMDrugObfuBody_00 1118 0.89 1.32 0.71 169 XM_BadFromFormat 1106 0.52 1.31 0.19 170 XM_B_REG_HTML 1097 0.84 1.30 0.65 171 XMSubPhish11 1080 1.81 1.28 2.03 172 XM_JunkDunk 1077 0.38 1.27 0.00 173 USER_IN_DEF_DKIM_WL 1065 11.24 1.26 15.46 174 FROM_SUSPICIOUS_NTLD 1043 0.41 1.23 0.06 175 RELAYCOUNTRY_NL 1020 0.50 1.20 0.20 176 FROM_SUSPICIOUS_NTLD_FP 1020 0.39 1.20 0.05 177 RELAYCOUNTRY_GB 1015 0.81 1.20 0.65 178 SUBJECT_DIET 1011 0.37 1.19 0.02 179 ALL_TRUSTED 1011 13.25 1.19 18.34 180 TR_Mismatch_TLD_01 1005 0.66 1.19 0.44 181 XM_Body_Dirty_Words_01 986 0.49 1.16 0.21 182 XM_B_COVIDMETA 978 0.83 1.16 0.69 183 XMHTMLBadTable_001 964 0.84 1.14 0.71 184 RELAYCOUNTRY_PL 964 0.37 1.14 0.04 185 NO_DNS_FOR_FROM 946 0.57 1.12 0.34 186 XMMoneyMeta_00 945 0.49 1.12 0.23 187 TR_XM_MaxWHORU 933 0.55 1.10 0.32 188 BAYES_20 905 2.12 1.07 2.57 189 FROM_MISSP_REPLYTO 904 0.32 1.07 0.01 190 XM_SPF_Unknown 902 0.59 1.07 0.39 191 XM_URI_RBL 893 0.39 1.05 0.11 192 XMBody_78 869 0.54 1.03 0.34 193 URIBL_BLACK 866 0.32 1.02 0.02 194 TR_Symld_Words 864 1.48 1.02 1.67 195 XMPhish30 864 0.83 1.02 0.75 196 XM_H_Long_From02 851 1.06 1.01 1.09 197 TR_XM_COVIDMETA4 837 0.44 0.99 0.21 198 HTTPS_HTTP_MISMATCH 836 0.76 0.99 0.66 199 TooManyTo_002 818 1.43 0.97 1.63 200 HTML_SHORT_LINK_IMG_1 792 0.29 0.94 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 166798 86.85 95.52 83.19 2 RELAYCOUNTRY_US 156872 75.95 70.53 78.24 3 DKIM_SIGNED 148786 76.75 82.79 74.21 4 XM_DK_Pass 146000 75.15 80.68 72.82 5 DKIM_VALID 142820 73.37 78.43 71.23 6 XM_B_Unicode 139026 70.24 72.38 69.34 7 DCC_CHECK_NEGATIVE 113577 45.36 18.64 56.65 8 DKIM_VALID_AU 112829 57.54 60.53 56.27 9 BAYES_50 108550 48.34 34.59 54.14 10 XMListUnsubscribeExists 100249 54.57 65.40 50.00 11 XM_B_SpammyWords 86965 49.86 65.22 43.37 12 DCC_CHECK 86873 54.60 81.28 43.33 13 XM_B_Unicode3 84843 41.59 39.89 42.32 14 RCVD_IN_MSPIKE_WL 63311 28.39 20.84 31.58 15 DKIM_VALID_EF 58575 30.32 32.94 29.21 16 HTML_FONT_LOW_CONTRAST 57782 29.90 32.45 28.82 17 LOC_TINY_FONT_1 51147 29.45 38.79 25.51 18 T_TM2_M_HEADER_IN_MSG 50560 23.26 18.62 25.22 19 RCVD_IN_MSPIKE_H2 49575 24.97 25.56 24.73 20 FVGT_m_MULTI_ODD 48628 23.71 22.43 24.25 21 MIME_HTML_ONLY 44741 25.90 34.38 22.31 22 XMSubLong 43430 21.68 21.73 21.66 23 XM_B_SpammyWords2 38059 23.89 35.51 18.98 24 ALL_TRUSTED 36773 13.25 1.19 18.34 25 T_KAM_HTML_FONT_INVALID 34427 21.11 30.45 17.17 26 RCVD_IN_MSPIKE_H3 31962 14.47 10.98 15.94 27 USER_IN_DEF_DKIM_WL 30996 11.24 1.26 15.46 28 XM_Multi_Part_URI 25718 13.17 13.97 12.83 29 RCVD_IN_MSPIKE_H4 25054 11.46 9.02 12.50 30 BAYES_60 22742 10.66 9.05 11.34 31 XM_Body_Dirty_Words 22635 14.82 23.18 11.29 32 XM_B_Unsub 21561 12.60 16.99 10.75 33 XM_DKIMWhitelistDomains 20387 7.16 0.03 10.17 34 XM_DK_Undo_02 19302 21.27 48.83 9.63 35 XM_Evil_Numbers_Gen 18495 8.77 7.71 9.22 36 LotsOfNums_01 18393 8.05 5.39 9.17 37 RCVD_IN_RP_SAFE 18029 7.92 5.38 8.99 38 FSL_BULK_SIG 17633 10.79 15.51 8.79 39 LOTS_OF_MONEY 17598 10.14 13.38 8.78 40 UNPARSEABLE_RELAY 17259 9.56 11.82 8.61 41 BAYES_00 16473 6.00 0.76 8.22 42 BAYES_99 16375 16.69 36.86 8.17 43 RCVD_IN_RP_CERTIFIED 15885 6.89 4.45 7.92 44 XM_SendGrid 15144 7.83 8.49 7.55 45 TR_XM_UnparsRelay 14089 8.32 11.38 7.03 46 TooManyTo_001 13994 7.57 8.95 6.98 47 T_TooManySym_01 13580 5.55 2.64 6.77 48 BAYES_999 13429 13.23 28.69 6.70 49 TR_XM_DKIM_Undo 12977 15.40 36.54 6.47 50 HTML_IMAGE_RATIO_02 12944 7.00 8.29 6.46 51 HTML_IMAGE_RATIO_04 12655 5.51 3.61 6.31 52 TR_XM_DK_Bayes 12244 4.49 0.65 6.11 53 TR_XM_DK_Bayes1 12038 4.41 0.63 6.00 54 BOTNET_IPINHOSTNAME 11641 8.25 14.04 5.81 55 BAYES_80 11231 6.85 9.81 5.60 56 TR_XM_DK_Bayes2 10855 3.91 0.34 5.41 57 TR_XM_SpammyWords4 10706 7.16 11.47 5.34 58 XMStrtUSub 10646 4.72 3.32 5.31 59 XM_H_Long_From01 10092 5.17 5.48 5.03 60 TR_XM_DK_SendGrid 10065 5.04 5.10 5.02 61 RCVD_IN_IADB_LISTED 9926 4.07 1.97 4.95 62 BAYES_40 9812 3.92 1.62 4.89 63 MPART_ALT_DIFF 9648 7.79 14.84 4.81 64 MIME_QP_LONG_LINE 9497 3.95 2.09 4.74 65 XM_UncommonTLD01 9083 9.52 21.34 4.53 66 IN_ZIMBRA_NJ_WHITELIST 8832 3.11 0.03 4.40 67 RCVD_IN_IADB_SPF 8608 3.53 1.73 4.29 68 XM_B_SpammyWords3 8462 6.37 11.46 4.22 69 XMNumbers 8333 4.63 5.75 4.16 70 XMSubMetaSx_00 8258 5.45 8.62 4.12 71 RELAYCOUNTRY_META 8183 11.59 29.36 4.08 72 TM2_M_URI_OPT_OUT 8099 3.70 2.89 4.04 73 TR_DCC_Bayes_99 8023 11.56 29.47 4.00 74 XMSexyCombo_05 7963 7.59 16.17 3.97 75 INVALID_MSGID 7938 2.90 0.38 3.96 76 RCVD_IN_IADB_SENDERID 7697 3.18 1.61 3.84 77 XM_B_Phish_Phrases 7684 4.04 4.55 3.83 78 MSGID_NOFQDN1 7594 2.71 0.15 3.79 79 RCVD_IN_IADB_DK 7493 3.09 1.57 3.74 80 T_TooManySym_02 7476 2.74 0.39 3.73 81 T_REMOTE_IMAGE 7423 5.31 9.12 3.70 82 HTML_IMAGE_RATIO_06 7055 3.64 3.92 3.52 83 ANY_BOUNCE_MESSAGE 7034 2.59 0.42 3.51 84 BOUNCE_MESSAGE 7032 2.59 0.41 3.51 85 FROM_EXCESS_BASE64 6978 2.98 1.80 3.48 86 BAYES_95 6859 4.08 5.64 3.42 87 XM_H_Trusted_IP 6841 2.40 0.00 3.41 88 XM_PDF 6708 2.49 0.47 3.35 89 TO_MALFORMED 6316 2.31 0.30 3.15 90 RCVD_IN_MSPIKE_H5 6295 2.46 0.84 3.14 91 MIME_HTML_ONLY_MULTI 6272 3.19 3.34 3.13 92 T_XMDrugObfuBody_14 6019 2.99 2.97 3.00 93 RCVD_IN_IADB_VOUCHED 6015 2.36 0.83 3.00 94 DKIM_INVALID 5966 3.38 4.35 2.98 95 URI_NOVOWEL 5650 4.84 9.64 2.82 96 TR_XM_PhishingBody 5580 3.42 4.93 2.78 97 TVD_RCVD_IP 5461 1.96 0.16 2.72 98 BAYES_20 5154 2.12 1.07 2.57 99 IN_HORDE_ADDRESS_BOOK 4905 1.75 0.10 2.45 100 MAILING_LIST_MULTI 4691 2.10 1.53 2.34 101 HTML_MIME_NO_HTML_TAG 4567 3.31 5.76 2.28 102 MIME_HTML_MOSTLY 4525 5.24 12.31 2.26 103 XM_B_SpammyTLD 4321 3.27 5.93 2.16 104 HTML_IMAGE_RATIO_08 4306 2.47 3.22 2.15 105 TR_XM_SB_Phish 4105 1.86 1.40 2.05 106 XMSubPhish11 4077 1.81 1.28 2.03 107 RCVD_IN_IADB_OPTIN 3915 1.57 0.67 1.95 108 US_DOLLARS_3 3612 2.00 2.47 1.80 109 XM_CamelCaseFrm001 3605 1.89 2.11 1.80 110 UNTRUSTED_Relay 3541 7.58 21.36 1.77 111 TR_XM_SpammyWords5 3520 2.54 4.38 1.76 112 SUBJ_ALL_CAPS 3422 1.90 2.35 1.71 113 BOTNET 3373 7.40 20.94 1.68 114 TR_Symld_Words 3345 1.48 1.02 1.67 115 BAYES_05 3306 1.33 0.58 1.65 116 URI_HEX 3294 1.75 1.99 1.64 117 TooManyTo_002 3271 1.43 0.97 1.63 118 XMGappySubj_01 3146 1.14 0.13 1.57 119 XMBSHREFv2 3078 1.13 0.16 1.54 120 XM_SPF_SoftFail 3023 2.04 3.31 1.51 121 TR_XM_SpammyWords2 2939 4.69 12.33 1.47 122 XM_B_Phish66 2936 1.75 2.43 1.46 123 TM2_M_VERY_LONG_WORD 2800 1.56 1.93 1.40 124 XM_DK_Undo_01 2762 1.46 1.65 1.38 125 KHOP_HELO_FCRDNS 2750 2.87 6.43 1.37 126 XMSubNoVowel 2747 1.19 0.77 1.37 127 HTML_IMAGE_ONLY_20 2679 1.20 0.87 1.34 128 XM_B_Unsub2 2640 1.37 1.51 1.32 129 T_XMDrugObfuBody_08 2617 1.74 2.79 1.31 130 XM_GoogleGroups 2584 1.10 0.64 1.29 131 URI_TRY_3LD 2553 1.16 0.89 1.27 132 XMBrknScrpt_02 2482 1.34 1.58 1.24 133 RELAYCOUNTRY_CA 2442 2.51 5.56 1.22 134 XMBdyGiftCard01 2440 1.26 1.36 1.22 135 XM_OfRef6 2350 1.86 3.50 1.17 136 T_TooManySym_03 2256 0.84 0.18 1.13 137 XM_UB50 2218 3.01 7.52 1.11 138 TooManyTo_003 2187 1.02 0.84 1.09 139 XM_H_Long_From02 2181 1.06 1.01 1.09 140 XMBody_95 1890 0.70 0.13 0.94 141 XMDiploma_00 1886 1.19 1.77 0.94 142 HTML_FONT_FACE_BAD 1829 0.81 0.58 0.91 143 DKIM_ADSP_CUSTOM_MED 1816 0.85 0.72 0.91 144 T_Symld_Words_02 1648 0.82 0.81 0.82 145 XMLngstWrd_00 1641 0.64 0.21 0.82 146 TooManyTo_004 1632 0.81 0.79 0.81 147 TR_MetaPhish_Combo_01 1607 0.73 0.56 0.80 148 XMSexyCombo_01 1584 1.46 3.06 0.79 149 XM_H_PHPMailer 1583 0.78 0.77 0.79 150 XM_B_COPY_HTML 1574 0.75 0.66 0.79 151 HELO_NODOT 1540 0.63 0.32 0.77 152 HELO_NO_DOMAIN 1540 0.63 0.31 0.77 153 XMStockSpam_06 1502 0.95 1.44 0.75 154 XMPhish30 1499 0.83 1.02 0.75 155 XMHTML_After_End 1495 0.75 0.74 0.75 156 HTML_TAG_BALANCE_BODY 1459 0.73 0.75 0.73 157 XMLngstWrd_01 1457 0.57 0.19 0.73 158 PLING_QUERY 1448 0.73 0.76 0.72 159 XMHTMLBadTable_001 1433 0.84 1.14 0.71 160 XM_ProductURIs 1422 0.94 1.48 0.71 161 T_XMDrugObfuBody_00 1416 0.89 1.32 0.71 162 TooManyTo_005 1406 0.72 0.75 0.70 163 USER_IN_WELCOMELIST 1397 0.49 0.00 0.70 164 USER_IN_WHITELIST 1397 0.49 0.00 0.70 165 XM_B_COVIDMETA 1385 0.83 1.16 0.69 166 HTTPS_HTTP_MISMATCH 1321 0.76 0.99 0.66 167 RDNS_DYNAMIC 1299 0.63 0.58 0.65 168 RELAYCOUNTRY_GB 1297 0.81 1.20 0.65 169 XM_B_REG_HTML 1296 0.84 1.30 0.65 170 XM_D_tchamptons_WL 1282 0.45 0.00 0.64 171 T_XMHurry_00 1267 1.18 2.47 0.63 172 XM_DIRTYINTL 1264 2.33 6.36 0.63 173 DATE_IN_PAST_03_06 1244 0.64 0.69 0.62 174 XMLngstWrd_02 1227 0.47 0.15 0.61 175 TVD_SPACE_RATIO 1200 0.62 0.69 0.60 176 XMNoVowels 1117 0.54 0.52 0.56 177 XMGenDplmaNmb 1080 0.64 0.88 0.54 178 NML_ADSP_CUSTOM_MED 1080 0.57 0.63 0.54 179 RELAYCOUNTRY_FR 1075 1.82 4.87 0.54 180 T_FILL_THIS_FORM_SHORT 1073 0.81 1.44 0.54 181 XMCapTrack 1069 0.48 0.34 0.53 182 RCVD_IN_BL_SPAMCOP_NET 1060 2.72 7.92 0.53 183 DIET_1 1044 1.23 2.91 0.52 184 TR_MSPIKEBAYES00 1012 0.36 0.01 0.50 185 XMLngstWrd_03 1012 0.39 0.12 0.50 186 SpammyFromTLD_01 995 3.01 8.97 0.50 187 MPART_ALT_DIFF_COUNT 977 0.81 1.56 0.49 188 XMBody_17 975 1.07 2.45 0.49 189 FORGED_GMAIL_RCVD 959 0.48 0.50 0.48 190 T_TooManySym_04 918 0.35 0.08 0.46 191 RCVD_IN_MSPIKE_BL 890 2.08 5.96 0.44 192 T_OBFU_PDF_ATTACH 888 0.32 0.04 0.44 193 XMSlimDrugH 887 1.09 2.63 0.44 194 TR_XM_MSPIKECOMBO 877 1.84 5.17 0.44 195 TR_Mismatch_TLD_01 873 0.66 1.19 0.44 196 XM_ShortIntro_01 856 0.50 0.66 0.43 197 XMLngstWrd_04 832 0.32 0.09 0.41 198 PDS_OTHER_BAD_TLD 831 1.03 2.49 0.41 199 BASE64_LENGTH_79_INF 809 0.33 0.15 0.40 200 TVD_PH_BODY_META_ALL 809 0.33 0.14 0.40 ----------------------------------------------------------------------