Email: 275818 Autolearn: 0 AvgScore: -0.13 AvgScanTime: 1.43 sec Spam: 48629 Autolearn: 0 AvgScore: 12.30 AvgScanTime: 1.66 sec Ham: 227189 Autolearn: 0 AvgScore: -2.79 AvgScanTime: 1.37 sec Time Spent Running SA: 109.22 hours Time Spent Processing Spam: 22.49 hours Time Spent Processing Ham: 86.74 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 48616 99.98 99.97 99.98 2 HTML_MESSAGE 45442 85.75 93.45 84.11 3 DKIM_SIGNED 41043 75.38 84.40 73.45 4 XM_DK_Pass 39149 73.36 80.51 71.84 5 DKIM_VALID 38148 71.75 78.45 70.32 6 RELAYCOUNTRY_US 37591 78.21 77.30 78.41 7 XM_B_Unicode 35270 69.71 72.53 69.11 8 XMListUnsubscribeExists 35056 55.60 72.09 52.07 9 XM_B_SpammyWords 31947 49.60 65.70 46.16 10 DKIM_VALID_AU 29026 57.74 59.69 57.32 11 XM_DK_Undo_02 24189 17.06 49.74 10.07 12 BAYES_50 20790 50.82 42.75 52.55 13 XM_B_Unicode3 20196 43.40 41.53 43.79 14 TR_XM_DKIM_Undo 19824 13.31 40.77 7.43 15 XM_B_SpammyWords2 18298 23.01 37.63 19.88 16 BAYES_99 17777 13.34 36.56 8.37 17 FVGT_m_MULTI_ODD 17127 26.00 35.22 24.03 18 HTML_FONT_LOW_CONTRAST 15109 31.92 31.07 32.10 19 MIME_HTML_ONLY 15050 24.52 30.95 23.14 20 LOC_TINY_FONT_1 14734 28.33 30.30 27.91 21 BAYES_999 13919 10.70 28.62 6.87 22 RCVD_IN_MSPIKE_H2 13786 20.93 28.35 19.34 23 DKIM_VALID_EF 12933 26.66 26.60 26.67 24 XM_Body_Dirty_Words 12780 16.71 26.28 14.66 25 RELAYCOUNTRY_META 12250 7.55 25.19 3.78 26 RCVD_IN_MSPIKE_WL 11558 29.27 23.77 30.45 27 T_KAM_HTML_FONT_INVALID 11553 18.14 23.76 16.94 28 T_TM2_M_HEADER_IN_MSG 9483 22.32 19.50 22.93 29 XMSubLong 9298 21.44 19.12 21.94 30 RCVD_IN_MSPIKE_H3 8365 15.76 17.20 15.45 31 XM_Multi_Part_URI 8205 14.81 16.87 14.37 32 BOTNET_IPINHOSTNAME 7615 7.61 15.66 5.89 33 TR_XM_SpammyWords2 7444 4.55 15.31 2.24 34 BOTNET 7420 4.24 15.26 1.88 35 MPART_ALT_DIFF 6939 8.41 14.27 7.16 36 XM_UncommonTLD01 6658 5.70 13.69 3.99 37 XM_B_SpammyWords3 6557 7.09 13.48 5.72 38 TR_XM_SpammyRelay 6351 3.71 13.06 1.71 39 UNPARSEABLE_RELAY 6075 10.62 12.49 10.22 40 TR_XM_UnparsRelay 5894 9.12 12.12 8.48 41 XM_B_Unsub 5866 13.43 12.06 13.72 42 XMSexyCombo_05 5551 6.03 11.41 4.88 43 RCVD_IN_BL_SPAMCOP_NET 5524 2.82 11.36 1.00 44 LOTS_OF_MONEY 5240 8.17 10.78 7.62 45 MIME_HTML_ONLY_MULTI 5172 6.07 10.64 5.09 46 XM_GoogleGroups 5121 3.45 10.53 1.94 47 TM2_M_VERY_LONG_WORD 5115 3.58 10.52 2.10 48 UNTRUSTED_Relay 5104 3.06 10.50 1.47 49 HTML_MIME_NO_HTML_TAG 4723 3.33 9.71 1.96 50 XMSubMetaSx_00 4565 6.10 9.39 5.40 51 XMLngstWrd_00 4493 2.74 9.24 1.35 52 XMLngstWrd_01 4448 2.63 9.15 1.23 53 TR_XM_SpammyWords4 4423 5.18 9.10 4.34 54 XMLngstWrd_02 4407 2.54 9.06 1.14 55 XMLngstWrd_03 4370 2.43 8.99 1.02 56 XMLngstWrd_04 4329 2.36 8.90 0.96 57 HTML_TITLE_SUBJ_DIFF 4269 2.10 8.78 0.67 58 XM_SendGrid 4228 8.75 8.69 8.76 59 RELAYCOUNTRY_CA 4183 2.54 8.60 1.25 60 UPPERCASE_75_100 4062 2.05 8.35 0.70 61 TooManyTo_001 4020 8.17 8.27 8.15 62 HTML_IMAGE_RATIO_02 3575 7.43 7.35 7.45 63 TR_XM_SPAMCOP 3470 1.52 7.14 0.32 64 XM_Evil_Numbers_Gen 3415 8.05 7.02 8.27 65 RCVD_IN_MSPIKE_BL 3234 1.84 6.65 0.81 66 TR_XM_MSPIKECOMBO 3214 1.83 6.61 0.81 67 BAYES_80 3184 4.97 6.55 4.64 68 RCVD_IN_MSPIKE_H4 3060 11.53 6.29 12.66 69 TR_XM_PhishingBody 2996 3.42 6.16 2.83 70 BAYES_60 2926 9.22 6.02 9.90 71 DKIM_INVALID 2895 3.63 5.95 3.13 72 TR_XM_DK_SendGrid 2831 5.52 5.82 5.45 73 TM2_M_URI_OPT_OUT 2798 5.75 5.75 5.75 74 XM_B_Phish_Phrases 2594 4.23 5.33 4.00 75 SpammyFromTLD_01 2583 1.32 5.31 0.46 76 XM_UB50 2574 1.61 5.29 0.82 77 SpammyFromTLD_02 2542 1.09 5.23 0.21 78 TR_XM_MaxUnsub 2534 1.76 5.21 1.02 79 XM_H_Long_From01 2509 4.90 5.16 4.85 80 LotsOfNums_01 2357 7.28 4.85 7.80 81 HTML_IMAGE_RATIO_04 2337 6.58 4.81 6.96 82 ALL_TRUSTED 2331 16.15 4.79 18.59 83 MIME_HTML_MOSTLY 2315 2.90 4.76 2.50 84 XM_DIRTYINTL 2110 0.99 4.34 0.27 85 XMSexyCombo_01 1987 2.13 4.09 1.71 86 XM_B_Investor 1985 1.76 4.08 1.27 87 XM_B_SpammyTLD 1952 2.51 4.01 2.18 88 MIME_QP_LONG_LINE 1930 4.83 3.97 5.02 89 TR_XM_SpammyWords3 1893 0.99 3.89 0.37 90 RCVD_IN_VALIDITY_RPBL 1862 0.76 3.83 0.10 91 XM_SPF_SoftFail 1845 2.14 3.79 1.79 92 XMStrtUSub 1767 4.93 3.63 5.21 93 TR_XM_PHPDW 1747 0.90 3.59 0.32 94 XMNumbers 1732 4.27 3.56 4.42 95 XM_B_SpammyWords4 1712 1.34 3.52 0.88 96 TR_XM_SpammyWords5 1703 1.82 3.50 1.46 97 RCVD_IN_RP_RNBL 1670 0.68 3.43 0.09 98 XMBody_17 1656 0.99 3.41 0.47 99 BAYES_95 1647 3.09 3.39 3.03 100 MAILING_LIST_MULTI 1629 2.44 3.35 2.25 101 XM_B_Phish66 1608 1.53 3.31 1.15 102 T_FILL_THIS_FORM_SHORT 1601 1.02 3.29 0.53 103 XMDiploma_00 1570 1.57 3.23 1.21 104 KHOP_HELO_FCRDNS 1543 1.48 3.17 1.12 105 T_XMDrugObfuBody_08 1504 1.43 3.09 1.08 106 T_XMDrugObfuBody_14 1500 2.99 3.08 2.97 107 BOTNET_NORDNS 1494 0.56 3.07 0.02 108 TR_XM_PHPForged 1494 0.73 3.07 0.23 109 T_TooManySym_01 1482 6.62 3.05 7.39 110 TR_XM_FormFill2 1479 0.73 3.04 0.23 111 HTML_IMAGE_RATIO_06 1464 4.26 3.01 4.53 112 XM_H_PHPOS 1460 0.71 3.00 0.22 113 URI_NOVOWEL 1446 2.20 2.97 2.04 114 RCVD_IN_MSPIKE_L5 1437 0.63 2.96 0.14 115 SUBJ_ALL_CAPS 1255 2.09 2.58 1.99 116 XM_Body_Dirty_Words_01 1241 0.92 2.55 0.57 117 XMSexyCombo_02 1227 1.01 2.52 0.68 118 XM_OfRef6 1220 1.10 2.51 0.80 119 T_XMDrugObfuBody_00 1189 1.04 2.45 0.74 120 XMStockSpam_06 1171 1.91 2.41 1.80 121 XMSubMetaSx_01 1154 1.12 2.37 0.85 122 RCVD_IN_VALIDITY_SAFE 1136 6.49 2.34 7.37 123 SHORT_URI_2 1133 1.67 2.33 1.53 124 XM_UB99 1129 0.41 2.32 0.01 125 XM_DK_Undo_01 1128 1.57 2.32 1.41 126 RCVD_IN_MSPIKE_L3 1104 0.76 2.27 0.44 127 RELAYCOUNTRY_RU 1098 0.42 2.26 0.02 128 T_REMOTE_IMAGE 1018 2.63 2.09 2.74 129 XM_URI_RBL 1014 0.51 2.09 0.17 130 TR_XM_FormFill 1009 0.37 2.07 0.00 131 XM_H_PHPMailer 980 0.80 2.02 0.54 132 BAYES_40 976 4.24 2.01 4.72 133 PDS_OTHER_BAD_TLD 973 0.75 2.00 0.49 134 TR_XM_NoHeaderRelay 970 0.50 1.99 0.18 135 TR_Mismatch_TLD_02 957 0.41 1.97 0.08 136 RCVD_IN_PSBL 948 0.42 1.95 0.10 137 URIBL_DBL_SPAM 947 0.36 1.95 0.02 138 HTML_IMAGE_RATIO_08 919 2.42 1.89 2.53 139 TR_XM_BayesRelay 918 0.34 1.89 0.01 140 TM2_M_A_HREF_HREF 916 0.83 1.88 0.60 141 TR_XM_INV_DKIM 897 0.64 1.84 0.39 142 HK_RANDOM_REPLYTO 871 0.44 1.79 0.15 143 XM_UB999 859 0.31 1.77 0.00 144 XMCapTrack 828 0.65 1.70 0.43 145 TR_Mismatch_TLD_01 826 0.52 1.70 0.26 146 XM_CamelCaseFrm001 800 1.72 1.65 1.74 147 RELAYCOUNTRY_AU 799 0.50 1.64 0.25 148 RCVD_IN_RP_SAFE 796 5.81 1.64 6.70 149 RCVD_IN_VALIDITY_CERTIFIED 786 5.63 1.62 6.49 150 URIBL_BLACK 784 0.31 1.61 0.03 151 TR_Symld_Words 778 1.22 1.60 1.14 152 XM_B_COVIDMETA 764 0.81 1.57 0.65 153 RELAYCOUNTRY_FR 764 0.41 1.57 0.16 154 T_Symld_Words_02 762 0.64 1.57 0.45 155 FROM_EXCESS_BASE64 758 2.63 1.56 2.86 156 DIET_1 756 0.74 1.55 0.57 157 FROM_SUSPICIOUS_NTLD 752 0.32 1.55 0.06 158 T_XMHurry_00 749 0.91 1.54 0.78 159 BAYES_20 710 2.98 1.46 3.30 160 XMReplyNow 707 0.34 1.45 0.10 161 XMBrknScrpt_02 699 1.21 1.44 1.16 162 XMGenDplmaNmb 697 0.73 1.43 0.58 163 NORDNS_LOW_CONTRAST 682 0.25 1.40 0.01 164 XM_B_Unsub2 681 0.97 1.40 0.88 165 RELAYCOUNTRY_CN 678 0.34 1.39 0.12 166 XM_ShortIntro_01 675 0.57 1.39 0.39 167 FROM_SUSPICIOUS_NTLD_FP 675 0.29 1.39 0.06 168 GOOG_STO_IMG_HTML 675 0.25 1.39 0.01 169 RCVD_IN_MSPIKE_L4 673 0.44 1.38 0.23 170 URI_HEX 671 1.58 1.38 1.62 171 RCVD_IN_IADB_LISTED 665 2.88 1.37 3.21 172 HTTPS_HTTP_MISMATCH 662 0.63 1.36 0.48 173 XMSlimDrugH 660 0.50 1.36 0.32 174 XMBdyGiftCard01 648 1.62 1.33 1.68 175 SUBJ_DOLLARS 625 0.51 1.29 0.35 176 TR_XM_COVIDMETA4 600 0.39 1.23 0.20 177 XMPhish30 593 0.88 1.22 0.81 178 XMHTML_After_End 589 0.58 1.21 0.44 179 XM_H_PHPOS_M 583 0.26 1.20 0.06 180 XM_H_Undi_Recip 581 0.33 1.19 0.14 181 XMSubMetaI_00 569 0.71 1.17 0.61 182 XMSubNoVowel 553 1.24 1.14 1.26 183 JH_SPAMMY_HEADERS 543 0.20 1.12 0.00 184 XMPhish08 541 0.52 1.11 0.40 185 PLING_QUERY 528 0.80 1.09 0.74 186 LOADSA_MONEY_COMBO 527 0.22 1.08 0.03 187 TR_XM_COVIDMETA1 520 0.34 1.07 0.18 188 TR_BOTNET_NEGATE 517 0.44 1.06 0.31 189 XMCmmnCold 515 0.22 1.06 0.04 190 XM_B_COPY_HTML 507 0.95 1.04 0.93 191 DKIM_ADSP_CUSTOM_MED 505 0.98 1.04 0.97 192 TooManyTo_002 504 1.14 1.04 1.16 193 HELO_NODOT 503 0.61 1.03 0.52 194 HELO_NO_DOMAIN 502 0.61 1.03 0.52 195 TR_XM_SB_Phish 500 1.73 1.03 1.88 196 RCVD_IN_IADB_SPF 499 2.45 1.03 2.76 197 XM_B_DNDMA 485 0.69 1.00 0.62 198 XMSubPhish11 484 1.70 1.00 1.85 199 TR_MetaPhish_Combo_01 481 0.78 0.99 0.74 200 URI_PHP_REDIR 477 0.18 0.98 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 227146 99.98 99.97 99.98 2 HTML_MESSAGE 191081 85.75 93.45 84.11 3 RELAYCOUNTRY_US 178129 78.21 77.30 78.41 4 DKIM_SIGNED 166870 75.38 84.40 73.45 5 XM_DK_Pass 163203 73.36 80.51 71.84 6 DKIM_VALID 159763 71.75 78.45 70.32 7 XM_B_Unicode 157013 69.71 72.53 69.11 8 DKIM_VALID_AU 130221 57.74 59.69 57.32 9 BAYES_50 119382 50.82 42.75 52.55 10 XMListUnsubscribeExists 118293 55.60 72.09 52.07 11 XM_B_SpammyWords 104866 49.60 65.70 46.16 12 XM_B_Unicode3 99497 43.40 41.53 43.79 13 HTML_FONT_LOW_CONTRAST 72935 31.92 31.07 32.10 14 RCVD_IN_MSPIKE_WL 69174 29.27 23.77 30.45 15 LOC_TINY_FONT_1 63418 28.33 30.30 27.91 16 DKIM_VALID_EF 60592 26.66 26.60 26.67 17 FVGT_m_MULTI_ODD 54586 26.00 35.22 24.03 18 MIME_HTML_ONLY 52580 24.52 30.95 23.14 19 T_TM2_M_HEADER_IN_MSG 52093 22.32 19.50 22.93 20 XMSubLong 49835 21.44 19.12 21.94 21 XM_B_SpammyWords2 45173 23.01 37.63 19.88 22 RCVD_IN_MSPIKE_H2 43949 20.93 28.35 19.34 23 ALL_TRUSTED 42226 16.15 4.79 18.59 24 T_KAM_HTML_FONT_INVALID 38481 18.14 23.76 16.94 25 RCVD_IN_MSPIKE_H3 35095 15.76 17.20 15.45 26 USER_IN_DEF_DKIM_WL 33389 12.25 0.85 14.70 27 XM_Body_Dirty_Words 33308 16.71 26.28 14.66 28 XM_Multi_Part_URI 32649 14.81 16.87 14.37 29 XM_B_Unsub 31179 13.43 12.06 13.72 30 RCVD_IN_MSPIKE_H4 28752 11.53 6.29 12.66 31 BAYES_00 24098 8.85 0.63 10.61 32 UNPARSEABLE_RELAY 23208 10.62 12.49 10.22 33 XM_DK_Undo_02 22870 17.06 49.74 10.07 34 BAYES_60 22496 9.22 6.02 9.90 35 XM_DKIMWhitelistDomains 22288 8.08 0.00 9.81 36 XM_SendGrid 19907 8.75 8.69 8.76 37 TR_XM_UnparsRelay 19258 9.12 12.12 8.48 38 BAYES_99 19012 13.34 36.56 8.37 39 XM_Evil_Numbers_Gen 18796 8.05 7.02 8.27 40 TooManyTo_001 18523 8.17 8.27 8.15 41 LotsOfNums_01 17726 7.28 4.85 7.80 42 LOTS_OF_MONEY 17304 8.17 10.78 7.62 43 HTML_IMAGE_RATIO_02 16924 7.43 7.35 7.45 44 TR_XM_DKIM_Undo 16880 13.31 40.77 7.43 45 T_TooManySym_01 16785 6.62 3.05 7.39 46 RCVD_IN_VALIDITY_SAFE 16752 6.49 2.34 7.37 47 MPART_ALT_DIFF 16269 8.41 14.27 7.16 48 HTML_IMAGE_RATIO_04 15804 6.58 4.81 6.96 49 BAYES_999 15607 10.70 28.62 6.87 50 RCVD_IN_RP_SAFE 15223 5.81 1.64 6.70 51 RCVD_IN_VALIDITY_CERTIFIED 14749 5.63 1.62 6.49 52 TR_XM_DK_Bayes 13839 5.07 0.31 6.09 53 RCVD_IN_RP_CERTIFIED 13471 5.04 0.88 5.93 54 TR_XM_DK_Bayes1 13459 4.93 0.30 5.92 55 BOTNET_IPINHOSTNAME 13376 7.61 15.66 5.89 56 TM2_M_URI_OPT_OUT 13068 5.75 5.75 5.75 57 XM_B_SpammyWords3 13000 7.09 13.48 5.72 58 TR_XM_DK_SendGrid 12387 5.52 5.82 5.45 59 XMSubMetaSx_00 12266 6.10 9.39 5.40 60 TR_XM_DK_Bayes2 12126 4.43 0.16 5.34 61 XMStrtUSub 11844 4.93 3.63 5.21 62 MIME_HTML_ONLY_MULTI 11569 6.07 10.64 5.09 63 MIME_QP_LONG_LINE 11404 4.83 3.97 5.02 64 XM_H_Trusted_IP 11109 4.03 0.00 4.89 65 XMSexyCombo_05 11090 6.03 11.41 4.88 66 XM_H_Long_From01 11012 4.90 5.16 4.85 67 BAYES_40 10729 4.24 2.01 4.72 68 IN_ZIMBRA_NJ_WHITELIST 10553 3.83 0.04 4.65 69 BAYES_80 10537 4.97 6.55 4.64 70 HTML_IMAGE_RATIO_06 10285 4.26 3.01 4.53 71 XMNumbers 10042 4.27 3.56 4.42 72 T_TooManySym_02 9931 3.74 0.78 4.37 73 TR_XM_SpammyWords4 9865 5.18 9.10 4.34 74 XM_B_Phish_Phrases 9079 4.23 5.33 4.00 75 XM_UncommonTLD01 9076 5.70 13.69 3.99 76 RELAYCOUNTRY_META 8586 7.55 25.19 3.78 77 ANY_BOUNCE_MESSAGE 8332 3.17 0.84 3.67 78 BOUNCE_MESSAGE 8330 3.17 0.84 3.67 79 BAYES_20 7506 2.98 1.46 3.30 80 RCVD_IN_IADB_LISTED 7291 2.88 1.37 3.21 81 INVALID_MSGID 7275 2.69 0.30 3.20 82 DKIM_INVALID 7107 3.63 5.95 3.13 83 MSGID_NOFQDN1 6899 2.53 0.16 3.04 84 BAYES_95 6879 3.09 3.39 3.03 85 T_XMDrugObfuBody_14 6751 2.99 3.08 2.97 86 BAYES_05 6546 2.49 0.64 2.88 87 FROM_EXCESS_BASE64 6503 2.63 1.56 2.86 88 TR_XM_PhishingBody 6430 3.42 6.16 2.83 89 RCVD_IN_IADB_SPF 6266 2.45 1.03 2.76 90 T_REMOTE_IMAGE 6223 2.63 2.09 2.74 91 TO_MALFORMED 6015 2.18 0.01 2.65 92 HTML_IMAGE_RATIO_08 5752 2.42 1.89 2.53 93 MIME_HTML_MOSTLY 5685 2.90 4.76 2.50 94 TVD_RCVD_IP 5649 2.09 0.24 2.49 95 HTML_FONT_FACE_BAD 5646 2.17 0.70 2.49 96 RCVD_IN_IADB_SENDERID 5622 2.20 0.90 2.47 97 RCVD_IN_IADB_DK 5434 2.13 0.92 2.39 98 RCVD_IN_MSPIKE_H5 5327 1.98 0.27 2.34 99 MAILING_LIST_MULTI 5111 2.44 3.35 2.25 100 TR_XM_SpammyWords2 5098 4.55 15.31 2.24 101 XM_B_SpammyTLD 4961 2.51 4.01 2.18 102 TM2_M_VERY_LONG_WORD 4760 3.58 10.52 2.10 103 RCVD_IN_IADB_VOUCHED 4637 1.83 0.85 2.04 104 URI_NOVOWEL 4627 2.20 2.97 2.04 105 SUBJ_ALL_CAPS 4510 2.09 2.58 1.99 106 HTML_MIME_NO_HTML_TAG 4451 3.33 9.71 1.96 107 XM_GoogleGroups 4407 3.45 10.53 1.94 108 XM_PDF 4345 1.66 0.51 1.91 109 IN_HORDE_ADDRESS_BOOK 4343 1.59 0.06 1.91 110 TR_XM_SB_Phish 4268 1.73 1.03 1.88 111 BOTNET 4261 4.24 15.26 1.88 112 XMSubPhish11 4197 1.70 1.00 1.85 113 XMBSHREFv2 4186 1.56 0.25 1.84 114 XMStockSpam_06 4090 1.91 2.41 1.80 115 XM_SPF_SoftFail 4066 2.14 3.79 1.79 116 XM_CamelCaseFrm001 3956 1.72 1.65 1.74 117 TR_XM_SpammyRelay 3886 3.71 13.06 1.71 118 XMSexyCombo_01 3880 2.13 4.09 1.71 119 XMBdyGiftCard01 3815 1.62 1.33 1.68 120 URI_HEX 3690 1.58 1.38 1.62 121 SHORT_URI_2 3482 1.67 2.33 1.53 122 XMGappySubj_01 3450 1.28 0.16 1.52 123 UNTRUSTED_Relay 3341 3.06 10.50 1.47 124 TR_XM_SpammyWords5 3315 1.82 3.50 1.46 125 XM_DK_Undo_01 3203 1.57 2.32 1.41 126 TVD_SPACE_RATIO 3097 1.14 0.10 1.36 127 RCVD_IN_IADB_OPTIN 3094 1.23 0.64 1.36 128 XMLngstWrd_00 3073 2.74 9.24 1.35 129 XM_B_Investor 2874 1.76 4.08 1.27 130 XMSubNoVowel 2859 1.24 1.14 1.26 131 RELAYCOUNTRY_CA 2832 2.54 8.60 1.25 132 XMLngstWrd_01 2804 2.63 9.15 1.23 133 XMDiploma_00 2759 1.57 3.23 1.21 134 XMBrknScrpt_02 2646 1.21 1.44 1.16 135 TooManyTo_002 2644 1.14 1.04 1.16 136 XM_B_Phish66 2603 1.53 3.31 1.15 137 XMLngstWrd_02 2591 2.54 9.06 1.14 138 TR_Symld_Words 2586 1.22 1.60 1.14 139 KHOP_HELO_FCRDNS 2537 1.48 3.17 1.12 140 T_XMDrugObfuBody_08 2446 1.43 3.09 1.08 141 XMLngstWrd_03 2325 2.43 8.99 1.02 142 TR_XM_MaxUnsub 2316 1.76 5.21 1.02 143 XM_H_Long_From02 2296 0.94 0.64 1.01 144 RCVD_IN_BL_SPAMCOP_NET 2267 2.82 11.36 1.00 145 T_TooManySym_03 2256 0.84 0.12 0.99 146 DKIM_ADSP_CUSTOM_MED 2200 0.98 1.04 0.97 147 HTML_IMAGE_ONLY_20 2198 0.83 0.21 0.97 148 XMLngstWrd_04 2186 2.36 8.90 0.96 149 XM_B_COPY_HTML 2104 0.95 1.04 0.93 150 XM_B_Unsub2 2008 0.97 1.40 0.88 151 XM_B_SpammyWords4 1990 1.34 3.52 0.88 152 TooManyTo_003 1937 0.86 0.87 0.85 153 XMSubMetaSx_01 1931 1.12 2.37 0.85 154 XM_UB50 1864 1.61 5.29 0.82 155 RCVD_IN_MSPIKE_BL 1842 1.84 6.65 0.81 156 TR_XM_MSPIKECOMBO 1839 1.83 6.61 0.81 157 XMPhish30 1836 0.88 1.22 0.81 158 XM_OfRef6 1808 1.10 2.51 0.80 159 XMBody_95 1791 0.66 0.07 0.79 160 T_XMHurry_00 1767 0.91 1.54 0.78 161 T_MANY_PILL_PRICE 1756 0.64 0.00 0.77 162 PLING_QUERY 1683 0.80 1.09 0.74 163 TR_MetaPhish_Combo_01 1681 0.78 0.99 0.74 164 T_XMDrugObfuBody_00 1679 1.04 2.45 0.74 165 HTML_TAG_BALANCE_BODY 1675 0.74 0.74 0.74 166 MPART_ALT_DIFF_COUNT 1642 0.73 0.78 0.72 167 XM_B_REG_HTML 1601 0.64 0.35 0.70 168 UPPERCASE_75_100 1591 2.05 8.35 0.70 169 XMSexyCombo_02 1548 1.01 2.52 0.68 170 XM_ProductURIs 1525 0.68 0.70 0.67 171 HTML_TITLE_SUBJ_DIFF 1518 2.10 8.78 0.67 172 TooManyTo_004 1507 0.68 0.74 0.66 173 NML_ADSP_CUSTOM_MED 1478 0.70 0.90 0.65 174 XM_B_COVIDMETA 1471 0.81 1.57 0.65 175 RDNS_DYNAMIC 1470 0.68 0.85 0.65 176 NUMERIC_HTTP_ADDR 1440 0.66 0.76 0.63 177 XMHTMLBadTable_001 1423 0.60 0.47 0.63 178 XM_B_DNDMA 1409 0.69 1.00 0.62 179 XMSubMetaI_00 1392 0.71 1.17 0.61 180 URI_TRY_3LD 1364 0.63 0.75 0.60 181 TM2_M_A_HREF_HREF 1361 0.83 1.88 0.60 182 XMGenDplmaNmb 1328 0.73 1.43 0.58 183 TR_MSPIKEBAYES00 1326 0.48 0.00 0.58 184 HTML_TEXT_INVISIBLE_STYLE 1309 0.52 0.27 0.58 185 XMNoVowels 1302 0.59 0.70 0.57 186 XM_Body_Dirty_Words_01 1302 0.92 2.55 0.57 187 DIET_1 1286 0.74 1.55 0.57 188 TooManyTo_005 1280 0.58 0.68 0.56 189 DATE_IN_PAST_03_06 1235 0.51 0.36 0.54 190 FORGED_GMAIL_RCVD 1229 0.59 0.84 0.54 191 XM_H_PHPMailer 1229 0.80 2.02 0.54 192 T_FILL_THIS_FORM_SHORT 1214 1.02 3.29 0.53 193 USER_IN_WELCOMELIST 1208 0.44 0.00 0.53 194 USER_IN_WHITELIST 1208 0.44 0.00 0.53 195 RELAYCOUNTRY_GB 1200 0.58 0.85 0.53 196 HELO_NO_DOMAIN 1184 0.61 1.03 0.52 197 HELO_NODOT 1184 0.61 1.03 0.52 198 PDS_OTHER_BAD_TLD 1109 0.75 2.00 0.49 199 XMSubMetaSxObfu_02 1098 0.48 0.46 0.48 200 DKIM_ADSP_NXDOMAIN 1090 0.48 0.50 0.48 ----------------------------------------------------------------------