Email: 300067 Autolearn: 0 AvgScore: 4.09 AvgScanTime: 1.20 sec Spam: 104418 Autolearn: 0 AvgScore: 13.88 AvgScanTime: 1.44 sec Ham: 195649 Autolearn: 0 AvgScore: -1.14 AvgScanTime: 1.07 sec Time Spent Running SA: 100.23 hours Time Spent Processing Spam: 41.82 hours Time Spent Processing Ham: 58.40 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 98900 88.28 94.72 84.84 2 XM_B_Unicode 87458 76.19 83.76 72.15 3 XM_B_SpammyWords 77226 59.16 73.96 51.26 4 DKIM_SIGNED 75630 71.82 72.43 71.49 5 XM_DK_Pass 73583 70.52 70.47 70.55 6 DKIM_VALID 73119 70.09 70.03 70.12 7 DCC_CHECK 68083 45.23 65.20 34.57 8 RELAYCOUNTRY_US 67407 70.07 64.55 73.01 9 DKIM_VALID_AU 58454 57.82 55.98 58.79 10 XMListUnsubscribeExists 57729 49.89 55.29 47.01 11 BAYES_50 48936 50.79 46.87 52.89 12 XM_B_Unicode3 47533 44.51 45.52 43.98 13 XM_DK_Undo_02 42311 18.92 40.52 7.39 14 RELAYCOUNTRY_META 36732 15.70 35.18 5.30 15 DCC_CHECK_NEGATIVE 36309 54.75 34.77 65.41 16 XM_B_SpammyWords2 35878 25.11 34.36 20.18 17 BAYES_99 35342 15.89 33.85 6.31 18 TR_XM_DKIM_Undo 34453 15.13 33.00 5.59 19 LOC_TINY_FONT_1 31928 26.61 30.58 24.49 20 HTML_FONT_LOW_CONTRAST 30511 28.24 29.22 27.71 21 FVGT_m_MULTI_ODD 29141 24.34 27.91 22.43 22 TR_XM_SpammyRelay 28937 11.98 27.71 3.59 23 UNTRUSTED_Relay 28687 10.56 27.47 1.53 24 BAYES_999 28054 12.59 26.87 4.98 25 DKIM_VALID_EF 25785 25.29 24.69 25.61 26 TR_DCC_Bayes_99 25285 10.06 24.22 2.50 27 RCVD_IN_MSPIKE_H2 25208 21.64 24.14 20.31 28 MIME_HTML_ONLY 25165 21.40 24.10 19.96 29 T_KAM_HTML_FONT_INVALID 24473 19.31 23.44 17.10 30 XM_UB50 22640 8.20 21.68 1.01 31 TM2_M_URI_OPT_OUT 21783 16.14 20.86 13.62 32 MIME_QP_LONG_LINE 21143 16.76 20.25 14.90 33 XMSubLong 20352 20.47 19.49 20.99 34 XM_Body_Dirty_Words 20319 14.63 19.46 12.06 35 RCVD_IN_MSPIKE_WL 19687 25.91 18.85 29.68 36 T_TM2_M_HEADER_IN_MSG 18651 22.64 17.86 25.19 37 FSL_BULK_SIG 18376 8.31 17.60 3.35 38 TR_XM_NoHeaderRelay 17629 5.97 16.88 0.14 39 HELO_NODOT 17011 5.94 16.29 0.42 40 HELO_NO_DOMAIN 17008 5.94 16.29 0.42 41 MISSING_HEADERS 16800 5.73 16.09 0.20 42 XM_B_Unsub 16733 11.98 16.03 9.82 43 REPLYTO_WITHOUT_TO_CC 16681 5.57 15.98 0.02 44 UReplyToMismatch 16597 5.53 15.89 0.00 45 UNPARSEABLE_RELAY 15607 10.98 14.95 8.86 46 TR_XM_UnparsRelay 15407 9.86 14.76 7.25 47 RELAYCOUNTRY_ZA 15142 5.05 14.50 0.01 48 XMEmptySub 15103 5.06 14.46 0.05 49 XM_Multi_Part_URI 14529 13.99 13.91 14.03 50 XM_B_SpammyWords3 13981 7.98 13.39 5.09 51 RCVD_IN_MSPIKE_H3 12717 14.32 12.18 15.46 52 TR_XM_SpammyWords2 11922 4.98 11.42 1.54 53 XM_UncommonTLD01 10365 6.37 9.93 4.47 54 XMSexyCombo_05 10056 6.02 9.63 4.09 55 BOTNET_IPINHOSTNAME 9991 7.07 9.57 5.74 56 RCVD_IN_BL_SPAMCOP_NET 9979 3.81 9.56 0.75 57 BOTNET 9159 4.03 8.77 1.49 58 TR_XM_PhishingBody 8598 4.27 8.23 2.16 59 LOTS_OF_MONEY 8317 6.87 7.97 6.28 60 MPART_ALT_DIFF 7998 6.04 7.66 5.18 61 XM_SendGrid 7949 6.59 7.61 6.04 62 HTML_IMAGE_RATIO_02 7543 6.90 7.22 6.72 63 TR_XM_MaxUnsub 7401 2.95 7.09 0.74 64 LotsOfNums_01 7286 8.22 6.98 8.88 65 RELAYCOUNTRY_CA 7229 3.10 6.92 1.06 66 TR_XM_SpammyWords4 6973 5.07 6.68 4.22 67 BAYES_60 6854 12.03 6.56 14.95 68 XM_B_Phish_Phrases 6737 4.35 6.45 3.23 69 RCVD_IN_MSPIKE_H4 6673 10.39 6.39 12.52 70 BAYES_80 6590 7.06 6.31 7.47 71 XM_Evil_Numbers_Gen 6278 7.21 6.01 7.85 72 SpammyFromTLD_01 6038 2.33 5.78 0.48 73 XM_H_Long_From01 5864 5.04 5.62 4.73 74 XM_B_Phish66 5790 2.57 5.55 0.98 75 RCVD_IN_MSPIKE_BL 5746 2.48 5.50 0.86 76 TR_XM_DK_SendGrid 5746 4.50 5.50 3.96 77 TR_XM_MSPIKECOMBO 5720 2.46 5.48 0.86 78 MIME_HTML_MOSTLY 5686 3.78 5.45 2.89 79 XM_B_SpammyTLD 5575 3.20 5.34 2.07 80 TR_XM_SPAMCOP 5365 1.87 5.14 0.13 81 XMSubMetaSx_00 5252 4.37 5.03 4.02 82 TooManyTo_001 4856 5.38 4.65 5.77 83 RCVD_IN_VALIDITY_SAFE 4678 5.68 4.48 6.32 84 HTML_IMAGE_RATIO_04 4525 5.21 4.33 5.68 85 XM_B_Unsub2 4425 2.10 4.24 0.96 86 BOUNCE_MESSAGE 4393 9.17 4.21 11.82 87 ANY_BOUNCE_MESSAGE 4393 9.17 4.21 11.82 88 URI_NOVOWEL 4346 2.38 4.16 1.42 89 RELAYCOUNTRY_FR 4231 1.62 4.05 0.32 90 XM_DIRTYINTL 4172 1.56 4.00 0.27 91 RCVD_IN_VALIDITY_CERTIFIED 4132 5.11 3.96 5.73 92 XMStrtUSub 4069 4.84 3.90 5.35 93 BAYES_95 4028 3.91 3.86 3.94 94 T_REMOTE_IMAGE 3940 3.22 3.77 2.92 95 XMLngstWrd_00 3832 1.88 3.67 0.93 96 XM_SPF_SoftFail 3689 1.96 3.53 1.12 97 XM_DK_Undo_01 3606 1.99 3.45 1.21 98 XMDiploma_00 3584 1.84 3.43 0.99 99 XMLngstWrd_01 3483 1.73 3.34 0.87 100 PDS_OTHER_BAD_TLD 3412 1.30 3.27 0.25 101 T_XMDrugObfuBody_14 3411 2.66 3.27 2.34 102 TM2_M_VERY_LONG_WORD 3252 1.95 3.11 1.33 103 URI_OPTOUT_3LD 3192 1.12 3.06 0.08 104 KHOP_HELO_FCRDNS 3139 1.49 3.01 0.68 105 XM_B_Investor 2962 1.83 2.84 1.29 106 USER_IN_DEF_DKIM_WL 2957 11.21 2.83 15.68 107 HTML_IMAGE_RATIO_08 2952 2.36 2.83 2.11 108 TR_XM_PhishingBody2 2887 0.97 2.76 0.02 109 RCVD_IN_MSPIKE_L3 2882 1.40 2.76 0.67 110 RCVD_IN_VALIDITY_RPBL 2800 1.02 2.68 0.13 111 BOTNET_NORDNS 2637 0.90 2.53 0.03 112 TR_XM_SpammyWords3 2587 1.12 2.48 0.40 113 T_TooManySym_01 2565 6.00 2.46 7.89 114 HTML_IMAGE_RATIO_06 2544 3.20 2.44 3.61 115 URI_NO_WWW_BIZ_CGI 2532 0.85 2.42 0.01 116 DKIM_INVALID 2511 1.73 2.40 1.37 117 TR_XM_SpammyWords5 2459 1.76 2.35 1.44 118 T_XMDrugObfuBody_08 2453 1.64 2.35 1.26 119 XMLngstWrd_02 2352 1.30 2.25 0.79 120 RCVD_IN_MSPIKE_L5 2342 0.81 2.24 0.04 121 MIME_HTML_ONLY_MULTI 2275 2.61 2.18 2.83 122 T_FILL_THIS_FORM_SHORT 2261 1.04 2.17 0.44 123 HTML_FONT_FACE_BAD 2257 1.50 2.16 1.15 124 XM_CamelCaseFrm001 2219 1.70 2.13 1.47 125 XM_H_Undi_Recip 2216 0.82 2.12 0.13 126 XM_ShortIntro_01 2191 2.70 2.10 3.03 127 XM_UB99 2190 0.73 2.10 0.00 128 TR_XM_MSPIKECOMBO2 2188 0.79 2.10 0.09 129 XMNumbers 2187 3.81 2.09 4.73 130 XM_OfRef6 2177 1.20 2.08 0.72 131 URIBL_DBL_SPAM 2128 0.72 2.04 0.02 132 XM_UB60 2026 0.76 1.94 0.13 133 XM_B_SpammyWords4 1992 1.11 1.91 0.68 134 HTTPS_HTTP_MISMATCH 1985 0.94 1.90 0.43 135 XMBounce_01 1938 0.83 1.86 0.29 136 XMBody_17 1924 1.11 1.84 0.72 137 XM_UB999 1921 0.64 1.84 0.00 138 SpammyFromTLD_02 1889 0.76 1.81 0.20 139 TR_XM_Undi_Recip11 1889 0.65 1.81 0.03 140 XMBdyGiftCard01 1872 1.57 1.79 1.46 141 ALL_TRUSTED 1867 15.06 1.79 22.15 142 XM_B_Illumintati 1864 2.37 1.79 2.68 143 TR_XM_PHPDW 1825 0.99 1.75 0.58 144 TR_XM_BayesRelay 1792 0.60 1.72 0.00 145 TR_XM_PHPForged 1764 0.92 1.69 0.51 146 FROM_EXCESS_BASE64 1741 2.51 1.67 2.95 147 TR_XM_FormFill2 1740 0.92 1.67 0.53 148 XM_H_PHPOS 1723 0.90 1.65 0.50 149 SUBJ_ALL_CAPS 1678 1.24 1.61 1.04 150 XMHTML_After_End 1646 0.88 1.58 0.51 151 HTML_TAG_BALANCE_BODY 1645 0.90 1.58 0.55 152 RCVD_IN_PSBL 1643 0.57 1.57 0.04 153 HK_RANDOM_REPLYTO 1550 0.55 1.48 0.06 154 GOOGLE_DOC_SUSP 1547 0.52 1.48 0.00 155 MAILING_LIST_MULTI 1515 1.64 1.45 1.74 156 XMGenDplmaNmb 1506 0.90 1.44 0.62 157 RELAYCOUNTRY_DE 1502 0.77 1.44 0.41 158 T_XMDrugObfuBody_00 1490 0.96 1.43 0.72 159 T_XMHurry_00 1489 0.90 1.43 0.62 160 XM_URI_RBL 1477 0.56 1.41 0.11 161 XM_B_COVIDMETA 1466 0.96 1.40 0.73 162 XMSexyCombo_01 1404 0.80 1.34 0.51 163 MPART_ALT_DIFF_COUNT 1399 1.14 1.34 1.04 164 XMBrknScrpt_02 1388 0.90 1.33 0.67 165 TR_LOTS_OF_MONEY3 1387 0.61 1.33 0.23 166 XMSubNoVowel 1366 1.20 1.31 1.14 167 HTML_FONT_TINY_NORDNS 1346 0.50 1.29 0.08 168 TR_XM_COVIDMETA1 1338 0.54 1.28 0.14 169 TR_XM_FormFill 1334 0.45 1.28 0.01 170 URI_LONG_REPEAT 1303 0.44 1.25 0.01 171 XM_Body_Dirty_Words_01 1284 0.58 1.23 0.23 172 TR_XM_RelayPhish 1255 0.45 1.20 0.04 173 TR_XM_MaxSPIKE 1253 0.46 1.20 0.06 174 XMPhish30 1248 0.85 1.20 0.67 175 HTML_MIME_NO_HTML_TAG 1230 1.36 1.18 1.46 176 DIET_1 1141 0.66 1.09 0.43 177 XM_B_REG_HTML 1141 0.72 1.09 0.51 178 RCVD_IN_IADB_LISTED 1136 2.62 1.09 3.44 179 XMPhish08 1133 0.49 1.09 0.18 180 XM_H_Long_From02 1104 0.98 1.06 0.93 181 XMStockSpam_06 1101 1.43 1.05 1.63 182 LONG_JUNK_URI3 1093 0.40 1.05 0.05 183 TR_Symld_Words 1070 0.99 1.02 0.97 184 TR_XM_SB_Phish 1059 1.38 1.01 1.58 185 BAYES_40 1050 2.49 1.01 3.28 186 LONG_JUNK_URI2 1047 0.37 1.00 0.04 187 RELAYCOUNTRY_RU 1036 0.36 0.99 0.03 188 TooManyTo_002 1016 1.11 0.97 1.19 189 TR_Mismatch_TLD_01 996 0.53 0.95 0.30 190 XMMailDelErr 986 0.36 0.94 0.04 191 URI_HEX 983 1.11 0.94 1.19 192 TR_Mismatch_TLD_02 978 0.37 0.94 0.07 193 RCVD_IN_RP_SAFE 975 1.16 0.93 1.28 194 TM2_M_A_HREF_HREF 969 0.53 0.93 0.32 195 RCVD_IN_IADB_SPF 955 2.37 0.91 3.15 196 TooManyTo_003 948 0.86 0.91 0.84 197 XM_ProductURIs 945 0.74 0.91 0.65 198 MIME_CHARSET_FARAWAY 932 0.46 0.89 0.22 199 XM_TLDProd2 923 0.42 0.88 0.17 200 SHOPIFY_IMG_NOT_RCVD_SFY 923 0.47 0.88 0.24 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 165992 88.28 94.72 84.84 2 RELAYCOUNTRY_US 142845 70.07 64.55 73.01 3 XM_B_Unicode 141166 76.19 83.76 72.15 4 DKIM_SIGNED 139877 71.82 72.43 71.49 5 XM_DK_Pass 138034 70.52 70.47 70.55 6 DKIM_VALID 137188 70.09 70.03 70.12 7 DCC_CHECK_NEGATIVE 127970 54.75 34.77 65.41 8 DKIM_VALID_AU 115031 57.82 55.98 58.79 9 BAYES_50 103472 50.79 46.87 52.89 10 XM_B_SpammyWords 100281 59.16 73.96 51.26 11 XMListUnsubscribeExists 91969 49.89 55.29 47.01 12 XM_B_Unicode3 86039 44.51 45.52 43.98 13 DCC_CHECK 67635 45.23 65.20 34.57 14 RCVD_IN_MSPIKE_WL 58063 25.91 18.85 29.68 15 HTML_FONT_LOW_CONTRAST 54216 28.24 29.22 27.71 16 DKIM_VALID_EF 50102 25.29 24.69 25.61 17 T_TM2_M_HEADER_IN_MSG 49282 22.64 17.86 25.19 18 LOC_TINY_FONT_1 47921 26.61 30.58 24.49 19 FVGT_m_MULTI_ODD 43884 24.34 27.91 22.43 20 ALL_TRUSTED 43331 15.06 1.79 22.15 21 XMSubLong 41070 20.47 19.49 20.99 22 RCVD_IN_MSPIKE_H2 39729 21.64 24.14 20.31 23 XM_B_SpammyWords2 39473 25.11 34.36 20.18 24 MIME_HTML_ONLY 39051 21.40 24.10 19.96 25 T_KAM_HTML_FONT_INVALID 33461 19.31 23.44 17.10 26 USER_IN_DEF_DKIM_WL 30672 11.21 2.83 15.68 27 RCVD_IN_MSPIKE_H3 30240 14.32 12.18 15.46 28 BAYES_60 29248 12.03 6.56 14.95 29 MIME_QP_LONG_LINE 29151 16.76 20.25 14.90 30 XM_Multi_Part_URI 27441 13.99 13.91 14.03 31 TM2_M_URI_OPT_OUT 26650 16.14 20.86 13.62 32 RCVD_IN_MSPIKE_H4 24490 10.39 6.39 12.52 33 XM_Body_Dirty_Words 23593 14.63 19.46 12.06 34 ANY_BOUNCE_MESSAGE 23121 9.17 4.21 11.82 35 BOUNCE_MESSAGE 23121 9.17 4.21 11.82 36 XM_DKIMWhitelistDomains 21417 7.19 0.14 10.95 37 XM_B_Unsub 19218 11.98 16.03 9.82 38 LotsOfNums_01 17377 8.22 6.98 8.88 39 UNPARSEABLE_RELAY 17338 10.98 14.95 8.86 40 T_TooManySym_01 15429 6.00 2.46 7.89 41 XM_Evil_Numbers_Gen 15361 7.21 6.01 7.85 42 BAYES_80 14609 7.06 6.31 7.47 43 XM_DK_Undo_02 14458 18.92 40.52 7.39 44 TR_XM_UnparsRelay 14191 9.86 14.76 7.25 45 BAYES_00 13710 4.74 0.50 7.01 46 HTML_IMAGE_RATIO_02 13148 6.90 7.22 6.72 47 RCVD_IN_VALIDITY_SAFE 12369 5.68 4.48 6.32 48 BAYES_99 12343 15.89 33.85 6.31 49 LOTS_OF_MONEY 12288 6.87 7.97 6.28 50 XM_SendGrid 11812 6.59 7.61 6.04 51 TooManyTo_001 11281 5.38 4.65 5.77 52 BOTNET_IPINHOSTNAME 11223 7.07 9.57 5.74 53 RCVD_IN_VALIDITY_CERTIFIED 11208 5.11 3.96 5.73 54 HTML_IMAGE_RATIO_04 11112 5.21 4.33 5.68 55 TR_XM_DKIM_Undo 10935 15.13 33.00 5.59 56 T_TooManySym_02 10668 3.75 0.55 5.45 57 XMStrtUSub 10463 4.84 3.90 5.35 58 RELAYCOUNTRY_META 10375 15.70 35.18 5.30 59 MPART_ALT_DIFF 10133 6.04 7.66 5.18 60 XM_B_SpammyWords3 9968 7.98 13.39 5.09 61 TR_XM_DK_Bayes 9787 3.38 0.33 5.00 62 BAYES_999 9735 12.59 26.87 4.98 63 TR_XM_DK_Bayes1 9713 3.35 0.33 4.96 64 IN_ZIMBRA_NJ_WHITELIST 9625 3.23 0.06 4.92 65 XMNumbers 9253 3.81 2.09 4.73 66 XM_H_Long_From01 9249 5.04 5.62 4.73 67 TR_XM_DK_Bayes2 8917 3.06 0.24 4.56 68 XM_UncommonTLD01 8737 6.37 9.93 4.47 69 TR_XM_SpammyWords4 8249 5.07 6.68 4.22 70 MIME_HEADER_CTYPE_ONLY 8083 2.72 0.07 4.13 71 XMSexyCombo_05 7996 6.02 9.63 4.09 72 XMSubMetaSx_00 7860 4.37 5.03 4.02 73 TR_XM_DK_SendGrid 7750 4.50 5.50 3.96 74 BAYES_95 7710 3.91 3.86 3.94 75 HTML_IMAGE_RATIO_06 7061 3.20 2.44 3.61 76 TR_XM_SpammyRelay 7023 11.98 27.71 3.59 77 INVALID_MSGID 6785 2.36 0.27 3.47 78 RCVD_IN_IADB_LISTED 6738 2.62 1.09 3.44 79 FSL_BULK_SIG 6556 8.31 17.60 3.35 80 BAYES_40 6416 2.49 1.01 3.28 81 XM_B_Phish_Phrases 6328 4.35 6.45 3.23 82 RCVD_IN_IADB_SPF 6156 2.37 0.91 3.15 83 XM_H_Trusted_IP 5973 1.99 0.00 3.05 84 XM_ShortIntro_01 5923 2.70 2.10 3.03 85 FROM_EXCESS_BASE64 5776 2.51 1.67 2.95 86 TO_MALFORMED 5776 1.93 0.01 2.95 87 RCVD_IN_IADB_SENDERID 5762 2.20 0.81 2.95 88 T_REMOTE_IMAGE 5715 3.22 3.77 2.92 89 MIME_HTML_MOSTLY 5656 3.78 5.45 2.89 90 RCVD_IN_IADB_DK 5645 2.17 0.84 2.89 91 MIME_HTML_ONLY_MULTI 5544 2.61 2.18 2.83 92 XM_B_Illumintati 5251 2.37 1.79 2.68 93 TVD_RCVD_IP 5162 1.78 0.17 2.64 94 TR_DCC_Bayes_99 4890 10.06 24.22 2.50 95 MY_SERVERS_FOUND 4850 1.65 0.10 2.48 96 RELAYCOUNTRY_GB 4815 1.80 0.57 2.46 97 BAYES_20 4762 1.83 0.71 2.43 98 T_XMDrugObfuBody_14 4570 2.66 3.27 2.34 99 TR_XM_PhishingBody 4225 4.27 8.23 2.16 100 RCVD_IN_IADB_VOUCHED 4157 1.63 0.71 2.12 101 HTML_IMAGE_RATIO_08 4121 2.36 2.83 2.11 102 XM_B_SpammyTLD 4041 3.20 5.34 2.07 103 XM_PDF 3964 1.42 0.29 2.03 104 XMBSHREFv2 3815 1.32 0.15 1.95 105 IN_HORDE_ADDRESS_BOOK 3714 1.27 0.10 1.90 106 MAILING_LIST_MULTI 3408 1.64 1.45 1.74 107 BAYES_05 3377 1.24 0.34 1.73 108 RCVD_IN_MSPIKE_H5 3333 1.21 0.28 1.70 109 XMStockSpam_06 3196 1.43 1.05 1.63 110 XMGappySubj_01 3180 1.11 0.13 1.63 111 TR_XM_SB_Phish 3087 1.38 1.01 1.58 112 TVD_SPACE_RATIO 3066 1.12 0.28 1.57 113 XMSubPhish11 3054 1.32 0.87 1.56 114 TR_XM_SpammyWords2 3011 4.98 11.42 1.54 115 UNTRUSTED_Relay 3000 10.56 27.47 1.53 116 BOTNET 2923 4.03 8.77 1.49 117 XM_CamelCaseFrm001 2875 1.70 2.13 1.47 118 HTML_MIME_NO_HTML_TAG 2853 1.36 1.18 1.46 119 XMBdyGiftCard01 2851 1.57 1.79 1.46 120 TR_XM_SpammyWords5 2815 1.76 2.35 1.44 121 URI_NOVOWEL 2782 2.38 4.16 1.42 122 DKIM_INVALID 2689 1.73 2.40 1.37 123 RCVD_IN_IADB_OPTIN 2677 1.04 0.43 1.37 124 TM2_M_VERY_LONG_WORD 2593 1.95 3.11 1.33 125 XM_B_Investor 2527 1.83 2.84 1.29 126 RCVD_IN_RP_SAFE 2506 1.16 0.93 1.28 127 T_XMDrugObfuBody_08 2462 1.64 2.35 1.26 128 XM_DK_Undo_01 2372 1.99 3.45 1.21 129 MSGID_NOFQDN1 2352 0.79 0.03 1.20 130 URI_HEX 2336 1.11 0.94 1.19 131 TooManyTo_002 2323 1.11 0.97 1.19 132 RCVD_IN_RP_CERTIFIED 2320 1.05 0.79 1.19 133 XM_GoogleGroups 2310 1.02 0.73 1.18 134 HTML_FONT_FACE_BAD 2255 1.50 2.16 1.15 135 XMSubNoVowel 2232 1.20 1.31 1.14 136 XM_SPF_SoftFail 2187 1.96 3.53 1.12 137 RELAYCOUNTRY_CA 2075 3.10 6.92 1.06 138 SUBJ_ALL_CAPS 2031 1.24 1.61 1.04 139 MPART_ALT_DIFF_COUNT 2025 1.14 1.34 1.04 140 T_TooManySym_03 2023 0.75 0.22 1.03 141 XM_UB50 1973 8.20 21.68 1.01 142 XMDiploma_00 1932 1.84 3.43 0.99 143 XM_B_Phish66 1923 2.57 5.55 0.98 144 TR_Symld_Words 1907 0.99 1.02 0.97 145 XM_B_COPY_HTML 1899 0.90 0.76 0.97 146 XM_B_Unsub2 1888 2.10 4.24 0.96 147 XM_H_Long_From02 1825 0.98 1.06 0.93 148 T_MANY_PILL_PRICE 1822 0.61 0.00 0.93 149 XMLngstWrd_00 1820 1.88 3.67 0.93 150 XMSubMetaI_00 1710 0.86 0.82 0.87 151 XMLngstWrd_01 1698 1.73 3.34 0.87 152 RCVD_IN_MSPIKE_BL 1681 2.48 5.50 0.86 153 TR_XM_MSPIKECOMBO 1676 2.46 5.48 0.86 154 TooManyTo_003 1638 0.86 0.91 0.84 155 XM_H_PHPMailer 1600 0.80 0.77 0.82 156 XMBody_95 1569 0.55 0.08 0.80 157 TR_MetaPhish_Combo_01 1564 0.74 0.62 0.80 158 XMLngstWrd_02 1547 1.30 2.25 0.79 159 XMHTMLBadTable_001 1511 0.79 0.83 0.77 160 DKIM_ADSP_CUSTOM_MED 1504 0.76 0.75 0.77 161 RCVD_IN_BL_SPAMCOP_NET 1467 3.81 9.56 0.75 162 TR_XM_MaxUnsub 1451 2.95 7.09 0.74 163 XM_B_COVIDMETA 1425 0.96 1.40 0.73 164 HTML_IMAGE_ONLY_20 1421 0.56 0.24 0.73 165 XMBody_17 1418 1.11 1.84 0.72 166 XM_OfRef6 1416 1.20 2.08 0.72 167 T_XMDrugObfuBody_00 1399 0.96 1.43 0.72 168 URI_TRY_3LD 1396 0.69 0.65 0.71 169 XM_B_SpammyWords4 1339 1.11 1.91 0.68 170 KHOP_HELO_FCRDNS 1330 1.49 3.01 0.68 171 XMBrknScrpt_02 1318 0.90 1.33 0.67 172 XMPhish30 1317 0.85 1.20 0.67 173 RCVD_IN_MSPIKE_L3 1306 1.40 2.76 0.67 174 SUBJ_YOUR_FAMILY 1285 0.47 0.12 0.66 175 TooManyTo_004 1267 0.72 0.85 0.65 176 XM_ProductURIs 1262 0.74 0.91 0.65 177 T_XMHurry_00 1221 0.90 1.43 0.62 178 XMGenDplmaNmb 1209 0.90 1.44 0.62 179 TR_XM_PHPDW 1137 0.99 1.75 0.58 180 TR_MSPIKEBAYES00 1100 0.37 0.01 0.56 181 RDNS_DYNAMIC 1091 0.55 0.54 0.56 182 HTML_TAG_BALANCE_BODY 1069 0.90 1.58 0.55 183 USER_IN_WHITELIST 1065 0.35 0.00 0.54 184 USER_IN_WELCOMELIST 1065 0.35 0.00 0.54 185 XMSubMetaSxObfu_02 1063 0.40 0.12 0.54 186 TooManyTo_005 1049 0.50 0.44 0.54 187 TR_XM_FormFill2 1031 0.92 1.67 0.53 188 XMSexyCombo_01 1007 0.80 1.34 0.51 189 XM_B_REG_HTML 1007 0.72 1.09 0.51 190 TR_XM_PHPForged 1005 0.92 1.69 0.51 191 XMHTML_After_End 999 0.88 1.58 0.51 192 XM_B_DNDMA 997 0.47 0.39 0.51 193 XM_H_PHPOS 986 0.90 1.65 0.50 194 PLING_QUERY 965 0.51 0.54 0.49 195 SpammyFromTLD_01 946 2.33 5.78 0.48 196 XMLngstWrd_03 927 0.51 0.58 0.47 197 NML_ADSP_CUSTOM_MED 893 0.53 0.68 0.46 198 XMSubMetaD_03 878 0.32 0.08 0.45 199 T_TooManySym_04 858 0.35 0.17 0.44 200 T_FILL_THIS_FORM_SHORT 855 1.04 2.17 0.44 ----------------------------------------------------------------------