Email: 283722 Autolearn: 0 AvgScore: 6.35 AvgScanTime: 10.88 sec Spam: 133651 Autolearn: 0 AvgScore: 16.14 AvgScanTime: 15.17 sec Ham: 150071 Autolearn: 0 AvgScore: -2.38 AvgScanTime: 7.06 sec Time Spent Running SA: 857.50 hours Time Spent Processing Spam: 563.34 hours Time Spent Processing Ham: 294.16 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 126318 85.21 94.51 76.93 2 DKIM_SIGNED 112345 76.45 84.06 69.67 3 XM_DK_Pass 110568 75.21 82.73 68.51 4 RELAYCOUNTRY_US 109644 78.39 82.04 75.13 5 XM_B_Unicode 98042 68.04 73.36 63.31 6 XM_DK_Undo_02 91713 42.35 68.62 18.96 7 BOTNET 91132 40.48 68.19 15.81 8 XMListUnsubscribeExists 89164 54.65 66.71 43.90 9 XM_B_SpammyWords 78830 47.31 58.98 36.91 10 DKIM_INVALID 78326 39.26 58.60 22.03 11 DCC_CHECK 77460 42.20 57.96 28.16 12 TR_XM_DKIM_Undo 62628 26.47 46.86 8.31 13 BAYES_50 60907 49.02 45.57 52.09 14 XM_B_Unicode3 57386 40.61 42.94 38.53 15 DCC_CHECK_NEGATIVE 56160 57.78 42.02 71.82 16 MIME_HTML_ONLY 49455 29.09 37.00 22.04 17 LOC_TINY_FONT_1 43512 27.91 32.56 23.78 18 HTML_FONT_LOW_CONTRAST 41670 28.29 31.18 25.72 19 FVGT_m_MULTI_ODD 41466 27.44 31.03 24.25 20 XM_B_SpammyWords2 41022 22.70 30.69 15.58 21 BAYES_99 36597 16.88 27.38 7.53 22 DKIM_VALID 34019 37.19 25.45 47.64 23 BAYES_999 30144 13.94 22.55 6.27 24 XMSubLong 29079 22.22 21.76 22.62 25 T_KAM_HTML_FONT_INVALID 28504 18.43 21.33 15.85 26 RELAYCOUNTRY_META 28325 11.66 21.19 3.18 27 XM_Body_Dirty_Words 27650 15.66 20.69 11.18 28 DKIM_VALID_AU 25567 29.46 19.13 38.67 29 T_TM2_M_HEADER_IN_MSG 24101 21.30 18.03 24.21 30 TR_DCC_Bayes_99 22983 9.43 17.20 2.52 31 XM_Multi_Part_URI 19978 13.78 14.95 12.74 32 UNTRUSTED_Relay 17788 6.93 13.31 1.24 33 UNPARSEABLE_RELAY 17332 10.38 12.97 8.07 34 XM_B_Unsub 17291 12.08 12.94 11.31 35 HTML_MIME_NO_HTML_TAG 16764 7.45 12.54 2.91 36 TR_XM_UnparsRelay 16299 8.88 12.20 5.93 37 TR_XM_INV_DKIM 15966 6.61 11.95 1.86 38 LOTS_OF_MONEY 14654 9.15 10.96 7.54 39 MPART_ALT_DIFF 14608 8.15 10.93 5.68 40 XM_UncommonTLD01 14256 7.80 10.67 5.25 41 BOTNET_IPINHOSTNAME 14107 8.10 10.56 5.92 42 DKIM_VALID_EF 13456 14.59 10.07 18.62 43 XMSexyCombo_05 13205 6.38 9.88 3.26 44 TR_XM_SpammyWords2 12128 4.74 9.07 0.89 45 FSL_BULK_SIG 12061 5.80 9.02 2.93 46 HTML_IMAGE_RATIO_02 11749 7.71 8.79 6.76 47 TR_XM_SpammyRelay 11597 4.67 8.68 1.10 48 TR_XM_SpammyWords4 11477 6.16 8.59 4.00 49 MIME_HTML_ONLY_MULTI 11278 6.05 8.44 3.93 50 XM_B_SpammyWords3 11228 5.87 8.40 3.61 51 BAYES_60 11159 10.30 8.35 12.04 52 XM_SendGrid 10897 7.11 8.15 6.18 53 TM2_M_VERY_LONG_WORD 10877 4.89 8.14 2.00 54 RCVD_IN_MSPIKE_H2 10557 10.07 7.90 11.99 55 LotsOfNums_01 10139 7.22 7.59 6.89 56 BAYES_80 10081 5.88 7.54 4.41 57 XM_Evil_Numbers_Gen 10004 7.31 7.49 7.16 58 BODY_URI_ONLY 9800 3.46 7.33 0.02 59 RCVD_IN_MSPIKE_WL 9087 14.28 6.80 20.94 60 BOTNET_NORDNS 9050 3.23 6.77 0.07 61 XM_UB50 8973 3.55 6.71 0.73 62 XM_GoogleGroups 8171 4.08 6.11 2.26 63 TR_XM_MaxUnsub 7941 3.89 5.94 2.06 64 GOOG_STO_IMG_HTML 7829 2.76 5.86 0.00 65 MIME_HEADER_CTYPE_ONLY 7670 2.75 5.74 0.09 66 HTML_SHORT_LINK_IMG_1 7451 2.64 5.57 0.02 67 TooManyTo_001 7393 6.17 5.53 6.73 68 XMLngstWrd_00 7268 3.47 5.44 1.71 69 XMLngstWrd_01 7225 3.39 5.41 1.60 70 XM_H_Long_From01 7158 4.84 5.36 4.38 71 XMLngstWrd_02 7139 3.29 5.34 1.46 72 XMLngstWrd_03 6949 3.15 5.20 1.32 73 XMLngstWrd_04 6854 3.06 5.13 1.23 74 XMStrtUSub 6704 5.45 5.02 5.84 75 HTML_TITLE_SUBJ_DIFF 6682 2.85 5.00 0.94 76 UPPERCASE_75_100 6637 2.83 4.97 0.92 77 XMSubMetaSx_00 6615 4.19 4.95 3.51 78 XM_B_Phish_Phrases 6276 4.14 4.70 3.64 79 RCVD_IN_MSPIKE_H3 6108 7.94 4.57 10.94 80 BAYES_95 6086 3.56 4.55 2.67 81 TR_XM_PhishingBody 5777 3.30 4.32 2.40 82 SpammyFromTLD_02 5740 2.12 4.29 0.18 83 XM_SPF_SoftFail 5697 3.10 4.26 2.06 84 RELAYCOUNTRY_CA 5609 2.38 4.20 0.77 85 XMNumbers 5536 4.91 4.14 5.59 86 T_TooManySym_01 5469 7.09 4.09 9.76 87 TR_XM_COVIDMETA4 5353 2.38 4.01 0.94 88 XM_B_SpammyTLD 5309 2.99 3.97 2.11 89 URI_NOVOWEL 5243 3.38 3.92 2.89 90 HTML_IMAGE_RATIO_04 5216 4.43 3.90 4.89 91 T_REMOTE_IMAGE 4989 3.78 3.73 3.83 92 HTML_TAG_BALANCE_CENTER 4904 1.79 3.67 0.12 93 HTML_IMAGE_ONLY_04 4825 1.72 3.61 0.03 94 HTML_SHORT_CENTER 4807 1.70 3.60 0.01 95 KHOP_HELO_FCRDNS 4788 2.97 3.58 2.43 96 MIME_HTML_MOSTLY 4736 2.80 3.54 2.13 97 FROM_EXCESS_BASE64 4551 3.22 3.41 3.06 98 MIME_QP_LONG_LINE 4399 3.47 3.29 3.63 99 RCVD_IN_BL_SPAMCOP_NET 4330 1.95 3.24 0.81 100 RELAYCOUNTRY_PL 4281 1.52 3.20 0.02 101 SpammyFromTLD_01 4276 1.70 3.20 0.37 102 HTML_IMAGE_RATIO_06 4185 3.19 3.13 3.25 103 FROM_SUSPICIOUS_NTLD 4183 1.52 3.13 0.08 104 FROM_SUSPICIOUS_NTLD_FP 4044 1.47 3.03 0.08 105 DKIM_ADSP_NXDOMAIN 3932 1.56 2.94 0.33 106 XM_DIRTYINTL 3901 1.51 2.92 0.26 107 XM_H_MailChimp 3865 1.59 2.89 0.43 108 T_XMDrugObfuBody_14 3846 2.34 2.88 1.85 109 PDS_OTHER_BAD_TLD 3705 1.43 2.77 0.24 110 BAYES_00 3473 7.65 2.60 12.15 111 TM2_M_URI_OPT_OUT 3436 3.23 2.57 3.81 112 XM_B_Investor 3418 1.85 2.56 1.21 113 HTML_IMAGE_ONLY_08 3418 1.25 2.56 0.09 114 T_XMDrugObfuBody_08 3299 1.80 2.47 1.20 115 TR_XM_SpammyWords5 3274 1.69 2.45 1.02 116 T_FILL_THIS_FORM_SHORT 3222 1.37 2.41 0.44 117 TR_XM_DK_Bayes 3196 5.19 2.39 7.68 118 XM_OfRef6 3122 1.53 2.34 0.81 119 XM_CamelCaseFrm001 3118 1.87 2.33 1.46 120 RCVD_IN_VALIDITY_RPBL 3118 1.11 2.33 0.01 121 HTML_IMAGE_RATIO_08 3000 2.11 2.24 1.99 122 T_Symld_Words_02 2893 1.31 2.16 0.54 123 XM_UB60 2874 1.10 2.15 0.16 124 XM_B_Phish66 2837 1.69 2.12 1.30 125 XM_H_ConstantContact 2827 1.27 2.12 0.52 126 RCVD_IN_MSPIKE_H4 2814 5.45 2.11 8.42 127 LONG_IMG_URI 2755 1.01 2.06 0.08 128 TVD_SPACE_RATIO 2737 2.07 2.05 2.09 129 RCVD_IN_MSPIKE_BL 2693 1.41 2.01 0.87 130 MAILING_LIST_MULTI 2666 2.08 1.99 2.15 131 URI_HEX 2659 1.46 1.99 0.98 132 TR_XM_MSPIKECOMBO 2653 1.40 1.99 0.87 133 XMSlimDrugH 2627 1.06 1.97 0.25 134 XM_DK_Undo_01 2600 1.66 1.95 1.41 135 XM_Body_Dirty_Words_01 2558 1.16 1.91 0.49 136 XMSexyCombo_01 2553 1.20 1.91 0.57 137 BAYES_40 2522 3.15 1.89 4.28 138 XMGappySubj_01 2516 1.93 1.88 1.97 139 XMSubMetaD_03 2414 0.96 1.81 0.20 140 XMSubMetaD_00 2401 0.87 1.80 0.05 141 DRUGS_ERECTILE 2381 0.85 1.78 0.02 142 TR_Symld_Words 2363 1.85 1.77 1.92 143 XM_UB99 2301 0.81 1.72 0.00 144 TR_XM_DK_SendGrid 2296 2.33 1.72 2.87 145 XMDiploma_00 2236 1.25 1.67 0.88 146 BOUNCE_MESSAGE 2229 3.52 1.67 5.17 147 ANY_BOUNCE_MESSAGE 2229 3.52 1.67 5.17 148 UPGRADE_MAILBOX 2221 1.10 1.66 0.60 149 T_XMDrugObfuBody_00 2165 1.17 1.62 0.77 150 RCVD_IN_VALIDITY_SAFE 2146 3.12 1.61 4.48 151 RDNS_DYNAMIC 2114 1.03 1.58 0.53 152 TR_XM_SB_Phish 2104 1.76 1.57 1.93 153 XMSubMetaD_01 2100 0.74 1.57 0.00 154 TR_XM_PHPDW 2093 0.94 1.57 0.38 155 SUBJECT_DRUG_GAP_C 2092 0.74 1.57 0.00 156 XMSubMetaD_02 2091 0.74 1.56 0.00 157 SERGIO_SUBJECT_VIAGRA01 2090 0.74 1.56 0.00 158 XMSubMetaD_04 2088 0.74 1.56 0.00 159 SUBJECT_DRUG_GAP_L 2088 0.74 1.56 0.00 160 XMSubMetaD_05 2087 0.74 1.56 0.00 161 PDS_FROM_2_EMAILS 2045 0.72 1.53 0.00 162 FROM_2_EMAILS_SHORT 2041 0.72 1.53 0.00 163 DATE_IN_PAST_03_06 2039 0.80 1.53 0.15 164 XM_ShortIntro_01 2006 0.97 1.50 0.50 165 XMSubPhish11 1998 1.72 1.49 1.92 166 LONG_JUNK_URI 1978 0.71 1.48 0.03 167 RELAYCOUNTRY_RU 1960 0.70 1.47 0.02 168 XM_UB80 1927 0.69 1.44 0.02 169 RCVD_IN_PSBL 1914 0.85 1.43 0.32 170 TR_XM_NoHeaderRelay 1908 0.75 1.43 0.14 171 XM_B_SpammyWords4 1891 0.87 1.41 0.38 172 NO_FM_NAME_IP_HOSTN 1839 0.65 1.38 0.01 173 RCVD_IN_VALIDITY_CERTIFIED 1818 2.71 1.36 3.91 174 T_XMHurry_00 1816 0.93 1.36 0.54 175 XMBdyGiftCard01 1803 1.11 1.35 0.90 176 XMBounce_01 1803 0.70 1.35 0.13 177 XM_UB999 1794 0.63 1.34 0.00 178 BAYES_20 1792 2.19 1.34 2.95 179 XM_B_Unsub2 1781 1.46 1.33 1.57 180 TR_XM_FormFill 1780 0.63 1.33 0.01 181 RELAYCOUNTRY_FR 1744 0.72 1.30 0.19 182 XMStockSpam_06 1731 0.99 1.30 0.71 183 SUBJ_ALL_CAPS 1728 1.16 1.29 1.05 184 TR_XM_PHPForged 1695 0.78 1.27 0.35 185 TR_XM_SPAMCOP 1675 0.68 1.25 0.16 186 TR_XM_FormFill2 1671 0.77 1.25 0.34 187 RELAYCOUNTRY_RO 1668 0.62 1.25 0.06 188 XM_H_PHPOS 1662 0.76 1.24 0.33 189 SHORT_IMG_SUSP_NTLD 1645 0.58 1.23 0.00 190 FROM_NTLD_LINKBAIT 1645 0.58 1.23 0.00 191 T_PDS_TO_EQ_FROM_NAME 1620 0.57 1.21 0.00 192 XM_H_TOP 1591 0.56 1.19 0.00 193 TM2_M_A_HREF_HREF 1560 0.74 1.17 0.36 194 XMPhish30 1547 0.85 1.16 0.58 195 SHOPIFY_IMG_NOT_RCVD_SFY 1546 0.62 1.16 0.14 196 XM_B_COVIDMETA 1542 0.83 1.15 0.55 197 TR_M_TOP_BAYES 1530 0.54 1.14 0.00 198 XMBrknScrpt_02 1530 0.77 1.14 0.43 199 TR_MetaPhish_Combo_01 1488 0.99 1.11 0.87 200 TR_XM_SpammyWords3 1487 0.76 1.11 0.44 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 115446 85.21 94.51 76.93 2 RELAYCOUNTRY_US 112753 78.39 82.04 75.13 3 DCC_CHECK_NEGATIVE 107779 57.78 42.02 71.82 4 DKIM_SIGNED 104554 76.45 84.06 69.67 5 XM_DK_Pass 102817 75.21 82.73 68.51 6 XM_B_Unicode 95006 68.04 73.36 63.31 7 BAYES_50 78172 49.02 45.57 52.09 8 DKIM_VALID 71493 37.19 25.45 47.64 9 XMListUnsubscribeExists 65878 54.65 66.71 43.90 10 DKIM_VALID_AU 58029 29.46 19.13 38.67 11 XM_B_Unicode3 57821 40.61 42.94 38.53 12 XM_B_SpammyWords 55393 47.31 58.98 36.91 13 DCC_CHECK 42259 42.20 57.96 28.16 14 HTML_FONT_LOW_CONTRAST 38603 28.29 31.18 25.72 15 FVGT_m_MULTI_ODD 36391 27.44 31.03 24.25 16 T_TM2_M_HEADER_IN_MSG 36336 21.30 18.03 24.21 17 LOC_TINY_FONT_1 35684 27.91 32.56 23.78 18 ALL_TRUSTED 34165 12.40 0.76 22.77 19 XMSubLong 33950 22.22 21.76 22.62 20 MIME_HTML_ONLY 33079 29.09 37.00 22.04 21 DKIM_INVALID 33061 39.26 58.60 22.03 22 RCVD_IN_MSPIKE_WL 31425 14.28 6.80 20.94 23 XM_DK_Undo_02 28455 42.35 68.62 18.96 24 DKIM_VALID_EF 27949 14.59 10.07 18.62 25 T_KAM_HTML_FONT_INVALID 23790 18.43 21.33 15.85 26 BOTNET 23720 40.48 68.19 15.81 27 XM_B_SpammyWords2 23382 22.70 30.69 15.58 28 XM_DKIMWhitelistDomains 20518 7.36 0.28 13.67 29 XM_Multi_Part_URI 19125 13.78 14.95 12.74 30 BAYES_00 18235 7.65 2.60 12.15 31 BAYES_60 18071 10.30 8.35 12.04 32 RCVD_IN_MSPIKE_H2 18000 10.07 7.90 11.99 33 USER_IN_DEF_DKIM_WL 17971 6.77 0.92 11.97 34 XM_B_Unsub 16971 12.08 12.94 11.31 35 XM_Body_Dirty_Words 16773 15.66 20.69 11.18 36 RCVD_IN_MSPIKE_H3 16423 7.94 4.57 10.94 37 T_TooManySym_01 14649 7.09 4.09 9.76 38 RCVD_IN_MSPIKE_H4 12637 5.45 2.11 8.42 39 TR_XM_DKIM_Undo 12469 26.47 46.86 8.31 40 UNPARSEABLE_RELAY 12111 10.38 12.97 8.07 41 TR_XM_DK_Bayes 11528 5.19 2.39 7.68 42 LOTS_OF_MONEY 11308 9.15 10.96 7.54 43 BAYES_99 11293 16.88 27.38 7.53 44 IN_ZIMBRA_NJ_WHITELIST 11172 4.05 0.24 7.44 45 XM_Evil_Numbers_Gen 10746 7.31 7.49 7.16 46 LotsOfNums_01 10342 7.22 7.59 6.89 47 HTML_IMAGE_RATIO_02 10139 7.71 8.79 6.76 48 TooManyTo_001 10099 6.17 5.53 6.73 49 T_TooManySym_02 9456 3.63 0.63 6.30 50 BAYES_999 9410 13.94 22.55 6.27 51 XM_SendGrid 9275 7.11 8.15 6.18 52 TR_XM_UnparsRelay 8906 8.88 12.20 5.93 53 BOTNET_IPINHOSTNAME 8881 8.10 10.56 5.92 54 XMStrtUSub 8770 5.45 5.02 5.84 55 MPART_ALT_DIFF 8522 8.15 10.93 5.68 56 XMNumbers 8393 4.91 4.14 5.59 57 XM_UncommonTLD01 7878 7.80 10.67 5.25 58 ANY_BOUNCE_MESSAGE 7760 3.52 1.67 5.17 59 BOUNCE_MESSAGE 7760 3.52 1.67 5.17 60 HTML_IMAGE_RATIO_04 7342 4.43 3.90 4.89 61 INVALID_MSGID 6939 2.66 0.46 4.62 62 TR_XM_DK_Bayes1 6781 2.52 0.28 4.52 63 RCVD_IN_VALIDITY_SAFE 6718 3.12 1.61 4.48 64 MSGID_NOFQDN1 6649 2.50 0.32 4.43 65 BAYES_80 6613 5.88 7.54 4.41 66 XM_H_Long_From01 6580 4.84 5.36 4.38 67 BAYES_40 6418 3.15 1.89 4.28 68 TR_XM_DK_Bayes2 6117 2.21 0.12 4.08 69 TR_XM_SpammyWords4 6008 6.16 8.59 4.00 70 TO_MALFORMED 6004 2.12 0.01 4.00 71 MIME_HTML_ONLY_MULTI 5894 6.05 8.44 3.93 72 TVD_RCVD_IP 5892 2.56 1.04 3.93 73 RCVD_IN_VALIDITY_CERTIFIED 5861 2.71 1.36 3.91 74 T_REMOTE_IMAGE 5744 3.78 3.73 3.83 75 TM2_M_URI_OPT_OUT 5718 3.23 2.57 3.81 76 XM_B_Phish_Phrases 5460 4.14 4.70 3.64 77 MIME_QP_LONG_LINE 5455 3.47 3.29 3.63 78 XM_B_SpammyWords3 5421 5.87 8.40 3.61 79 XMSubMetaSx_00 5273 4.19 4.95 3.51 80 XM_H_Trusted_IP 5191 1.83 0.00 3.46 81 XM_PDF 4977 1.99 0.51 3.32 82 XMSexyCombo_05 4897 6.38 9.88 3.26 83 HTML_IMAGE_RATIO_06 4878 3.19 3.13 3.25 84 RCVD_IN_IADB_LISTED 4830 2.04 0.71 3.22 85 RELAYCOUNTRY_META 4765 11.66 21.19 3.18 86 FROM_EXCESS_BASE64 4587 3.22 3.41 3.06 87 BAYES_20 4424 2.19 1.34 2.95 88 FSL_BULK_SIG 4404 5.80 9.02 2.93 89 HTML_MIME_NO_HTML_TAG 4360 7.45 12.54 2.91 90 URI_NOVOWEL 4342 3.38 3.92 2.89 91 TR_XM_DK_SendGrid 4314 2.33 1.72 2.87 92 RCVD_IN_IADB_SPF 4276 1.77 0.56 2.85 93 IN_HORDE_ADDRESS_BOOK 4036 1.62 0.43 2.69 94 BAYES_95 4001 3.56 4.55 2.67 95 RCVD_IN_IADB_SENDERID 3842 1.58 0.48 2.56 96 TR_DCC_Bayes_99 3782 9.43 17.20 2.52 97 RCVD_IN_IADB_DK 3715 1.53 0.48 2.48 98 KHOP_HELO_FCRDNS 3649 2.97 3.58 2.43 99 TR_XM_PhishingBody 3599 3.30 4.32 2.40 100 XMBSHREFv2 3458 1.31 0.20 2.30 101 XM_GoogleGroups 3393 4.08 6.11 2.26 102 MAILING_LIST_MULTI 3233 2.08 1.99 2.15 103 MIME_HTML_MOSTLY 3202 2.80 3.54 2.13 104 XM_B_SpammyTLD 3161 2.99 3.97 2.11 105 TVD_SPACE_RATIO 3137 2.07 2.05 2.09 106 XM_SPF_SoftFail 3093 3.10 4.26 2.06 107 TR_XM_MaxUnsub 3091 3.89 5.94 2.06 108 RCVD_IN_IADB_VOUCHED 3086 1.34 0.55 2.06 109 TM2_M_VERY_LONG_WORD 2995 4.89 8.14 2.00 110 HTML_IMAGE_RATIO_08 2981 2.11 2.24 1.99 111 XMGappySubj_01 2962 1.93 1.88 1.97 112 TR_XM_SB_Phish 2896 1.76 1.57 1.93 113 TR_Symld_Words 2886 1.85 1.77 1.92 114 XMSubPhish11 2879 1.72 1.49 1.92 115 BAYES_05 2838 1.36 0.76 1.89 116 TR_XM_INV_DKIM 2789 6.61 11.95 1.86 117 T_XMDrugObfuBody_14 2781 2.34 2.88 1.85 118 XMLngstWrd_00 2566 3.47 5.44 1.71 119 XMLngstWrd_01 2394 3.39 5.41 1.60 120 RCVD_IN_MSPIKE_H5 2365 0.89 0.12 1.58 121 XM_B_Unsub2 2349 1.46 1.33 1.57 122 XM_CamelCaseFrm001 2187 1.87 2.33 1.46 123 XMLngstWrd_02 2186 3.29 5.34 1.46 124 TooManyTo_002 2146 1.06 0.64 1.43 125 XM_DK_Undo_01 2117 1.66 1.95 1.41 126 RCVD_IN_IADB_OPTIN 2082 0.90 0.35 1.39 127 T_TooManySym_03 2073 0.82 0.19 1.38 128 XMLngstWrd_03 1977 3.15 5.20 1.32 129 XM_B_Phish66 1954 1.69 2.12 1.30 130 UNTRUSTED_Relay 1867 6.93 13.31 1.24 131 XMSubNoVowel 1861 0.97 0.67 1.24 132 XMLngstWrd_04 1841 3.06 5.13 1.23 133 XM_B_Investor 1821 1.85 2.56 1.21 134 T_XMDrugObfuBody_08 1806 1.80 2.47 1.20 135 XMBody_95 1732 0.72 0.22 1.15 136 HTML_FONT_FACE_BAD 1726 1.01 0.85 1.15 137 TR_XM_SpammyRelay 1647 4.67 8.68 1.10 138 XM_D_tchamptons_WL 1637 0.62 0.09 1.09 139 SUBJ_ALL_CAPS 1575 1.16 1.29 1.05 140 XM_H_Long_From02 1532 1.00 0.97 1.02 141 TooManyTo_003 1530 0.79 0.54 1.02 142 TR_XM_SpammyWords5 1525 1.69 2.45 1.02 143 URI_HEX 1473 1.46 1.99 0.98 144 USER_IN_WHITELIST 1413 0.50 0.00 0.94 145 TR_XM_COVIDMETA4 1413 2.38 4.01 0.94 146 USER_IN_WELCOMELIST 1413 0.50 0.00 0.94 147 HTML_TITLE_SUBJ_DIFF 1407 2.85 5.00 0.94 148 UPPERCASE_75_100 1382 2.83 4.97 0.92 149 XM_shorewaves_Whitelist 1351 0.48 0.00 0.90 150 XMBdyGiftCard01 1346 1.11 1.35 0.90 151 TR_XM_SpammyWords2 1334 4.74 9.07 0.89 152 HTML_IMAGE_ONLY_20 1328 0.64 0.37 0.88 153 XMDiploma_00 1319 1.25 1.67 0.88 154 RCVD_IN_MSPIKE_BL 1313 1.41 2.01 0.87 155 TR_XM_MSPIKECOMBO 1312 1.40 1.99 0.87 156 TR_MetaPhish_Combo_01 1308 0.99 1.11 0.87 157 XM_B_COPY_HTML 1294 0.85 0.85 0.86 158 DKIM_ADSP_CUSTOM_MED 1258 0.94 1.05 0.84 159 HTML_TAG_BALANCE_BODY 1220 0.90 1.00 0.81 160 RCVD_IN_BL_SPAMCOP_NET 1214 1.95 3.24 0.81 161 XM_OfRef6 1212 1.53 2.34 0.81 162 RELAYCOUNTRY_CA 1156 2.38 4.20 0.77 163 T_XMDrugObfuBody_00 1156 1.17 1.62 0.77 164 TooManyTo_004 1141 0.64 0.50 0.76 165 XM_UB50 1094 3.55 6.71 0.73 166 XMStockSpam_06 1071 0.99 1.30 0.71 167 TooManyTo_005 955 0.55 0.45 0.64 168 XM_ProductURIs 934 0.84 1.08 0.62 169 RELAYCOUNTRY_GB 915 0.60 0.59 0.61 170 T_TooManySym_04 911 0.35 0.06 0.61 171 HELO_NODOT 900 0.48 0.36 0.60 172 HELO_NO_DOMAIN 898 0.48 0.35 0.60 173 UPGRADE_MAILBOX 894 1.10 1.66 0.60 174 XM_H_PHPMailer 887 0.74 0.91 0.59 175 XMNoVowels 876 0.51 0.42 0.58 176 XMSubMetaSxObfu_02 865 0.42 0.25 0.58 177 XMPhish30 865 0.85 1.16 0.58 178 XMSexyCombo_01 858 1.20 1.91 0.57 179 KHOP_FAKE_EBAY 825 0.29 0.00 0.55 180 XM_B_COVIDMETA 824 0.83 1.15 0.55 181 URI_TRY_3LD 818 0.66 0.78 0.55 182 T_XMHurry_00 815 0.93 1.36 0.54 183 XMCapTrack 813 0.57 0.59 0.54 184 T_Symld_Words_02 810 1.31 2.16 0.54 185 RDNS_DYNAMIC 797 1.03 1.58 0.53 186 XMSubMetaI_00 787 0.78 1.07 0.52 187 T_OBFU_PDF_ATTACH 787 0.33 0.10 0.52 188 MPART_ALT_DIFF_COUNT 786 0.61 0.72 0.52 189 XM_H_ConstantContact 783 1.27 2.12 0.52 190 XM_S_SubURI 777 0.28 0.02 0.52 191 XM_ShortIntro_01 745 0.97 1.50 0.50 192 XM_Body_Dirty_Words_01 734 1.16 1.91 0.49 193 CTE_8BIT_MISMATCH 729 0.26 0.00 0.49 194 RCVD_IN_MSPIKE_L3 724 0.55 0.63 0.48 195 XMHTML_After_End 706 0.65 0.85 0.47 196 XMHTMLBadTable_001 687 0.73 1.04 0.46 197 T_FILL_THIS_FORM_SHORT 662 1.37 2.41 0.44 198 TR_XM_SpammyWords3 657 0.76 1.11 0.44 199 NML_ADSP_CUSTOM_MED 654 0.46 0.49 0.44 200 XMBrknScrpt_02 652 0.77 1.14 0.43 ----------------------------------------------------------------------