Email: 312299 Autolearn: 0 AvgScore: 5.25 AvgScanTime: 1.22 sec Spam: 123806 Autolearn: 0 AvgScore: 15.34 AvgScanTime: 1.27 sec Ham: 188493 Autolearn: 0 AvgScore: -1.37 AvgScanTime: 1.19 sec Time Spent Running SA: 106.18 hours Time Spent Processing Spam: 43.81 hours Time Spent Processing Ham: 62.37 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 116765 87.85 94.31 83.60 2 DKIM_SIGNED 106143 80.93 85.73 77.77 3 XM_DK_Pass 104854 79.25 84.69 75.67 4 DKIM_VALID 103965 78.67 83.97 75.18 5 XM_B_Unicode 103315 75.97 83.45 71.06 6 RELAYCOUNTRY_US 94640 78.85 76.44 80.44 7 DCC_CHECK 93656 52.31 75.65 36.98 8 XMListUnsubscribeExists 83690 59.55 67.60 54.27 9 DKIM_VALID_AU 78915 62.80 63.74 62.19 10 XM_B_SpammyWords 76880 52.20 62.10 45.70 11 XM_DK_Undo_02 56421 23.76 45.57 9.43 12 XM_B_Unicode3 53013 43.83 42.82 44.49 13 RCVD_IN_MSPIKE_H2 52293 41.46 42.24 40.96 14 BAYES_99 49313 20.79 39.83 8.28 15 MIME_HTML_ONLY 49145 28.59 39.70 21.30 16 TR_XM_DKIM_Undo 45573 18.49 36.81 6.46 17 BAYES_50 44098 47.83 35.62 55.86 18 DKIM_VALID_EF 43606 32.34 35.22 30.46 19 XM_B_SpammyWords2 43320 25.88 34.99 19.89 20 FVGT_m_MULTI_ODD 39591 28.68 31.98 26.51 21 BAYES_999 38639 16.49 31.21 6.82 22 RELAYCOUNTRY_META 38313 14.22 30.95 3.24 23 HTML_FONT_LOW_CONTRAST 38262 31.08 30.90 31.20 24 LOC_TINY_FONT_1 37680 28.60 30.43 27.39 25 TR_DCC_Bayes_99 35794 13.06 28.91 2.64 26 T_KAM_HTML_FONT_INVALID 33939 22.14 27.41 18.68 27 DCC_CHECK_NEGATIVE 30133 47.67 24.34 62.99 28 XM_Body_Dirty_Words 28054 16.49 22.66 12.43 29 XMSubLong 24504 21.52 19.79 22.65 30 RCVD_IN_MSPIKE_WL 24201 19.34 19.55 19.21 31 T_TM2_M_HEADER_IN_MSG 22756 20.57 18.38 22.00 32 RCVD_IN_MSPIKE_H3 20942 14.02 16.92 12.13 33 TR_XM_SpammyRelay 20109 7.45 16.24 1.68 34 FSL_BULK_SIG 19360 8.32 15.64 3.51 35 XM_Multi_Part_URI 18571 15.45 15.00 15.74 36 UNPARSEABLE_RELAY 18525 11.27 14.96 8.84 37 TR_XM_UnparsRelay 18164 10.11 14.67 7.12 38 BOTNET 18131 6.79 14.64 1.63 39 XM_B_Unsub 18080 11.65 14.60 9.71 40 TR_XM_BayesUnsub 17820 10.43 14.39 7.83 41 RCVD_IN_BL_SPAMCOP_NET 16418 5.62 13.26 0.61 42 RELAYCOUNTRY_CA 16376 6.11 13.23 1.43 43 TR_XM_SpammyWords2 15968 6.24 12.90 1.86 44 BOTNET_IPINHOSTNAME 14628 8.91 11.82 7.00 45 LOTS_OF_MONEY 14491 9.47 11.70 8.00 46 XM_UncommonTLD01 14085 7.38 11.38 4.75 47 XM_H_Long_From01 13693 7.31 11.06 4.84 48 XMSexyCombo_05 13612 6.41 10.99 3.39 49 XM_B_SpammyWords3 12818 7.03 10.35 4.86 50 MPART_ALT_DIFF 12084 6.91 9.76 5.03 51 TR_XM_SpammyWords4 11912 6.27 9.62 4.06 52 XM_CamelCaseFrm001 11398 4.96 9.21 2.18 53 TR_XM_SPAMCOP 11013 3.64 8.90 0.20 54 T_REMOTE_IMAGE 10935 5.96 8.83 4.07 55 UNTRUSTED_Relay 10838 4.14 8.75 1.12 56 BAYES_80 10834 6.49 8.75 5.00 57 RCVD_IN_VALIDITY_RPBL 9741 3.17 7.87 0.09 58 MIME_HTML_ONLY_MULTI 9259 4.64 7.48 2.78 59 HTML_IMAGE_ONLY_24 8918 2.99 7.20 0.22 60 HTTP_EXCESSIVE_ESCAPES 8848 2.85 7.15 0.02 61 BAYES_60 8598 9.74 6.94 11.58 62 TM2_M_VERY_LONG_WORD 8526 3.50 6.89 1.27 63 HTML_IMAGE_RATIO_02 8345 7.12 6.74 7.38 64 XM_SendGrid 7854 5.96 6.34 5.71 65 XM_Evil_Numbers_Gen 7761 7.63 6.27 8.53 66 T_FILL_THIS_FORM_SHORT 7678 2.88 6.20 0.70 67 XMSubMetaSx_00 7626 4.70 6.16 3.74 68 XMBody_17 7537 2.88 6.09 0.78 69 HTML_MIME_NO_HTML_TAG 7457 3.66 6.02 2.11 70 XM_SPF_SoftFail 7349 3.36 5.94 1.66 71 BAYES_95 7049 4.21 5.69 3.23 72 BOTNET_NORDNS 6871 2.21 5.55 0.02 73 XM_GoogleGroups 6761 2.90 5.46 1.23 74 XM_DIRTYINTL 6666 2.32 5.38 0.30 75 RCVD_IN_MSPIKE_BL 6579 2.31 5.31 0.34 76 XMLngstWrd_00 6496 2.67 5.25 0.98 77 XMLngstWrd_01 6452 2.57 5.21 0.84 78 XMLngstWrd_02 6399 2.46 5.17 0.67 79 TR_XM_PhishingBody 6385 3.50 5.16 2.41 80 T_XMDrugObfuBody_08 6289 2.90 5.08 1.47 81 HTML_TITLE_SUBJ_DIFF 6207 2.01 5.01 0.03 82 XMLngstWrd_03 6199 2.25 5.01 0.45 83 XMLngstWrd_04 6156 2.17 4.97 0.32 84 UPPERCASE_75_100 6083 1.96 4.91 0.02 85 TR_XM_MSPIKECOMBO 5972 2.12 4.82 0.34 86 LotsOfNums_01 5685 7.12 4.59 8.78 87 XM_B_Phish_Phrases 5410 3.55 4.37 3.02 88 HTML_IMAGE_RATIO_06 5063 3.59 4.09 3.26 89 TR_XM_DK_SendGrid 5048 3.92 4.08 3.81 90 TR_XM_FormFill 5038 1.66 4.07 0.07 91 XMStrtUSub 4933 5.10 3.98 5.84 92 XM_B_SpammyTLD 4732 2.78 3.82 2.09 93 MIME_BASE64_TEXT 4686 1.58 3.78 0.13 94 TR_XM_SpammyWords5 4621 2.40 3.73 1.53 95 TooManyTo_001 4548 5.88 3.67 7.33 96 T_XMDrugObfuBody_14 4493 2.43 3.63 1.64 97 SpammyFromTLD_02 4478 1.56 3.62 0.21 98 HTML_IMAGE_RATIO_04 4361 4.15 3.52 4.56 99 TM2_M_URI_OPT_OUT 4315 2.81 3.49 2.36 100 RCVD_IN_MSPIKE_L3 4279 1.56 3.46 0.32 101 RCVD_IN_PSBL 4260 1.66 3.44 0.49 102 MIME_HTML_MOSTLY 4172 3.01 3.37 2.78 103 XM_UB50 4080 1.74 3.30 0.72 104 XMNumbers 4055 4.18 3.28 4.77 105 XM_OfRef6 3911 1.87 3.16 1.02 106 RCVD_IN_VALIDITY_SAFE 3903 5.05 3.15 6.30 107 TVD_RCVD_SPACE_BRACKET 3726 1.19 3.01 0.00 108 XM_B_Investor 3683 1.95 2.97 1.28 109 SpammyFromTLD_01 3681 1.43 2.97 0.42 110 TR_XM_SpammyWords3 3654 1.25 2.95 0.13 111 FONT_INVIS_LONG_LINE 3640 1.21 2.94 0.07 112 XM_B_Phish66 3495 1.72 2.82 1.00 113 XM_UB99 3286 1.05 2.65 0.00 114 TR_XM_NoHeaderRelay 3268 1.11 2.64 0.10 115 RELAYCOUNTRY_RU 3253 1.06 2.63 0.02 116 HK_RANDOM_REPLYTO 3209 1.08 2.59 0.09 117 URI_NOVOWEL 3192 2.68 2.58 2.75 118 RCVD_IN_VALIDITY_CERTIFIED 3113 4.37 2.51 5.60 119 RCVD_IN_MSPIKE_H4 3017 4.30 2.44 5.52 120 MPART_ALT_DIFF_COUNT 2999 1.55 2.42 0.98 121 XM_DK_Undo_01 2972 2.02 2.40 1.76 122 SUBJ_ALL_CAPS 2970 2.00 2.40 1.73 123 HTML_IMAGE_RATIO_08 2947 2.11 2.38 1.93 124 XM_H_Undi_Recip 2807 1.03 2.27 0.22 125 XMDiploma_00 2756 1.56 2.23 1.13 126 XM_B_Unsub2 2751 1.53 2.22 1.07 127 XM_UB999 2750 0.88 2.22 0.00 128 PDS_OTHER_BAD_TLD 2643 0.96 2.13 0.20 129 TR_XM_BayesRelay 2531 0.81 2.04 0.00 130 XM_B_SpammyWords4 2485 1.22 2.01 0.70 131 RELAYCOUNTRY_CN 2456 0.81 1.98 0.04 132 USER_IN_DEF_DKIM_WL 2454 11.20 1.98 17.25 133 SHOPIFY_IMG_NOT_RCVD_SFY 2437 0.94 1.97 0.27 134 TR_XM_MSPIKECOMBO2 2423 0.83 1.96 0.10 135 TR_XM_InvalidRelay 2419 0.79 1.95 0.02 136 T_TooManySym_01 2413 5.97 1.95 8.61 137 TR_LOTS_OF_MONEY3 2375 0.89 1.92 0.21 138 T_XMHurry_00 2262 1.01 1.83 0.48 139 MultiRelay_CC 2210 0.71 1.79 0.01 140 FROM_EXCESS_BASE64 2197 2.94 1.77 3.70 141 DKIM_INVALID 2178 2.26 1.76 2.59 142 XMBdyGiftCard01 1981 1.46 1.60 1.37 143 LongTLD 1960 0.82 1.58 0.32 144 RCVD_IN_IADB_LISTED 1938 3.35 1.57 4.52 145 RCVD_IN_RP_RNBL 1920 0.63 1.55 0.02 146 TR_XM_PHPDW 1917 0.84 1.55 0.37 147 XMSexyCombo_01 1906 0.92 1.54 0.51 148 XMStockSpam_06 1889 1.04 1.53 0.72 149 XMReplyNow 1814 0.72 1.47 0.23 150 TR_XM_PHPForged 1788 0.76 1.44 0.31 151 XM_H_Long_From02 1783 1.15 1.44 0.96 152 TR_XM_FormFill2 1757 0.74 1.42 0.30 153 MIME_QP_LONG_LINE 1754 3.02 1.42 4.08 154 XMHTML_After_End 1752 0.85 1.42 0.48 155 XM_H_PHPOS 1752 0.73 1.42 0.28 156 URIBL_DBL_SPAM 1747 0.56 1.41 0.01 157 T_XMDrugObfuBody_00 1723 0.91 1.39 0.59 158 RELAYCOUNTRY_BR 1709 0.55 1.38 0.01 159 TR_XM_MaxSPIKE 1690 0.60 1.37 0.09 160 XMBrknScrpt_02 1643 1.00 1.33 0.79 161 TR_XM_SB_Phish 1637 1.48 1.32 1.59 162 XMSubPhish11 1617 1.47 1.31 1.58 163 RCVD_IN_IADB_SPF 1610 2.94 1.30 4.02 164 RELAYCOUNTRY_IN 1608 0.55 1.30 0.06 165 URI_HEX 1601 1.31 1.29 1.32 166 TR_Symld_Words 1561 1.72 1.26 2.02 167 MultiRelay 1557 0.50 1.26 0.00 168 XM_Combo_Sbj 1554 0.60 1.26 0.17 169 XMSlimDrugH 1546 0.92 1.25 0.70 170 ALL_TRUSTED 1542 10.59 1.25 16.72 171 BAYES_40 1526 2.64 1.23 3.57 172 RCVD_IN_IADB_SENDERID 1467 2.64 1.18 3.60 173 RCVD_IN_IADB_DK 1467 2.56 1.18 3.47 174 DIET_1 1421 0.64 1.15 0.31 175 KHOP_HELO_FCRDNS 1419 1.03 1.15 0.95 176 MAILING_LIST_MULTI 1386 1.73 1.12 2.13 177 TR_Caps_n_Bayes_99 1385 0.64 1.12 0.32 178 XM_URI_RBL 1377 0.52 1.11 0.13 179 XM_B_COVIDMETA 1354 0.75 1.09 0.52 180 FROM_SUSPICIOUS_NTLD 1353 0.45 1.09 0.03 181 RELAYCOUNTRY_GB 1347 0.65 1.09 0.36 182 TR_XM_Base64_M1 1345 1.51 1.09 1.79 183 XM_Body_Dirty_Words_01 1340 0.49 1.08 0.10 184 HTML_TAG_BALANCE_BODY 1334 0.96 1.08 0.88 185 LONGLN_LOW_CONTRAST 1324 0.77 1.07 0.58 186 REMOVE_BEFORE_LINK 1322 0.51 1.07 0.14 187 XMRcvdHeader_05 1317 0.42 1.06 0.00 188 RCVD_IN_IADB_VOUCHED 1281 2.20 1.03 2.96 189 TR_Mismatch_TLD_02 1277 0.46 1.03 0.08 190 RCVD_IN_SORBS_WEB 1264 0.41 1.02 0.00 191 XMEmptySub 1263 0.42 1.02 0.03 192 TR_Mismatch_TLD_01 1260 0.59 1.02 0.31 193 RELAYCOUNTRY_AU 1247 0.51 1.01 0.18 194 RELAYCOUNTRY_DE 1231 0.51 0.99 0.19 195 NORDNS_LOW_CONTRAST 1210 0.40 0.98 0.02 196 XMPhish30 1204 0.92 0.97 0.89 197 XM_UB60 1184 0.41 0.96 0.05 198 XMGenDplmaNmb 1183 0.68 0.96 0.50 199 RCVD_IN_MSPIKE_L5 1134 0.37 0.92 0.02 200 XM_RXBody 1132 0.53 0.91 0.27 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 157586 87.85 94.31 83.60 2 RELAYCOUNTRY_US 151618 78.85 76.44 80.44 3 DKIM_SIGNED 146591 80.93 85.73 77.77 4 XM_DK_Pass 142641 79.25 84.69 75.67 5 DKIM_VALID 141714 78.67 83.97 75.18 6 XM_B_Unicode 133944 75.97 83.45 71.06 7 DCC_CHECK_NEGATIVE 118733 47.67 24.34 62.99 8 DKIM_VALID_AU 117224 62.80 63.74 62.19 9 BAYES_50 105284 47.83 35.62 55.86 10 XMListUnsubscribeExists 102299 59.55 67.60 54.27 11 XM_B_SpammyWords 86146 52.20 62.10 45.70 12 XM_B_Unicode3 83863 43.83 42.82 44.49 13 RCVD_IN_MSPIKE_H2 77199 41.46 42.24 40.96 14 DCC_CHECK 69713 52.31 75.65 36.98 15 HTML_FONT_LOW_CONTRAST 58809 31.08 30.90 31.20 16 DKIM_VALID_EF 57406 32.34 35.22 30.46 17 LOC_TINY_FONT_1 51635 28.60 30.43 27.39 18 FVGT_m_MULTI_ODD 49970 28.68 31.98 26.51 19 XMSubLong 42689 21.52 19.79 22.65 20 T_TM2_M_HEADER_IN_MSG 41473 20.57 18.38 22.00 21 MIME_HTML_ONLY 40155 28.59 39.70 21.30 22 XM_B_SpammyWords2 37497 25.88 34.99 19.89 23 RCVD_IN_MSPIKE_WL 36204 19.34 19.55 19.21 24 T_KAM_HTML_FONT_INVALID 35202 22.14 27.41 18.68 25 USER_IN_DEF_DKIM_WL 32508 11.20 1.98 17.25 26 ALL_TRUSTED 31517 10.59 1.25 16.72 27 XM_Multi_Part_URI 29674 15.45 15.00 15.74 28 XM_DKIMWhitelistDomains 24820 8.01 0.16 13.17 29 XM_Body_Dirty_Words 23434 16.49 22.66 12.43 30 RCVD_IN_MSPIKE_H3 22857 14.02 16.92 12.13 31 BAYES_60 21830 9.74 6.94 11.58 32 XM_B_Unsub 18300 11.65 14.60 9.71 33 XM_DK_Undo_02 17783 23.76 45.57 9.43 34 UNPARSEABLE_RELAY 16663 11.27 14.96 8.84 35 LotsOfNums_01 16544 7.12 4.59 8.78 36 T_TooManySym_01 16230 5.97 1.95 8.61 37 XM_Evil_Numbers_Gen 16076 7.63 6.27 8.53 38 BAYES_99 15613 20.79 39.83 8.28 39 BAYES_00 15486 5.21 0.62 8.22 40 LOTS_OF_MONEY 15076 9.47 11.70 8.00 41 TR_XM_BayesUnsub 14762 10.43 14.39 7.83 42 HTML_IMAGE_RATIO_02 13906 7.12 6.74 7.38 43 TooManyTo_001 13822 5.88 3.67 7.33 44 TR_XM_UnparsRelay 13415 10.11 14.67 7.12 45 BOTNET_IPINHOSTNAME 13199 8.91 11.82 7.00 46 BAYES_999 12849 16.49 31.21 6.82 47 TR_XM_DKIM_Undo 12181 18.49 36.81 6.46 48 RCVD_IN_VALIDITY_SAFE 11880 5.05 3.15 6.30 49 TR_XM_DK_Bayes 11227 3.82 0.56 5.96 50 TR_XM_DK_Bayes1 11135 3.79 0.56 5.91 51 XMStrtUSub 11005 5.10 3.98 5.84 52 XM_SendGrid 10769 5.96 6.34 5.71 53 RCVD_IN_VALIDITY_CERTIFIED 10548 4.37 2.51 5.60 54 RCVD_IN_MSPIKE_H4 10405 4.30 2.44 5.52 55 IN_ZIMBRA_NJ_WHITELIST 10396 3.35 0.05 5.52 56 T_TooManySym_02 10394 3.53 0.50 5.51 57 TR_XM_DK_Bayes2 10108 3.42 0.46 5.36 58 MPART_ALT_DIFF 9489 6.91 9.76 5.03 59 BAYES_80 9430 6.49 8.75 5.00 60 XM_B_SpammyWords3 9152 7.03 10.35 4.86 61 XM_H_Long_From01 9126 7.31 11.06 4.84 62 XMNumbers 8994 4.18 3.28 4.77 63 XM_UncommonTLD01 8954 7.38 11.38 4.75 64 HTML_IMAGE_RATIO_04 8603 4.15 3.52 4.56 65 RCVD_IN_IADB_LISTED 8516 3.35 1.57 4.52 66 MIME_QP_LONG_LINE 7688 3.02 1.42 4.08 67 T_REMOTE_IMAGE 7666 5.96 8.83 4.07 68 TR_XM_SpammyWords4 7662 6.27 9.62 4.06 69 RCVD_IN_IADB_SPF 7585 2.94 1.30 4.02 70 INVALID_MSGID 7376 2.42 0.15 3.91 71 TR_XM_DK_SendGrid 7185 3.92 4.08 3.81 72 XMSubMetaSx_00 7054 4.70 6.16 3.74 73 FROM_EXCESS_BASE64 6981 2.94 1.77 3.70 74 MSGID_NOFQDN1 6883 2.22 0.03 3.65 75 RCVD_IN_IADB_SENDERID 6789 2.64 1.18 3.60 76 BAYES_40 6732 2.64 1.23 3.57 77 FSL_BULK_SIG 6624 8.32 15.64 3.51 78 RCVD_IN_IADB_DK 6537 2.56 1.18 3.47 79 XMSexyCombo_05 6399 6.41 10.99 3.39 80 HTML_IMAGE_RATIO_06 6137 3.59 4.09 3.26 81 RELAYCOUNTRY_META 6106 14.22 30.95 3.24 82 BAYES_95 6088 4.21 5.69 3.23 83 TO_MALFORMED 6037 1.93 0.00 3.20 84 XM_PDF 5831 1.95 0.21 3.09 85 XM_B_Phish_Phrases 5692 3.55 4.37 3.02 86 TVD_RCVD_IP 5600 1.97 0.45 2.97 87 RCVD_IN_IADB_VOUCHED 5576 2.20 1.03 2.96 88 MIME_HTML_ONLY_MULTI 5247 4.64 7.48 2.78 89 MIME_HTML_MOSTLY 5242 3.01 3.37 2.78 90 URI_NOVOWEL 5189 2.68 2.58 2.75 91 TR_DCC_Bayes_99 4984 13.06 28.91 2.64 92 BAYES_20 4982 1.94 0.88 2.64 93 DKIM_INVALID 4877 2.26 1.76 2.59 94 TR_XM_PhishingBody 4545 3.50 5.16 2.41 95 TM2_M_URI_OPT_OUT 4447 2.81 3.49 2.36 96 XM_CamelCaseFrm001 4107 4.96 9.21 2.18 97 XMBSHREFv2 4091 1.41 0.26 2.17 98 MAILING_LIST_MULTI 4018 1.73 1.12 2.13 99 IN_HORDE_ADDRESS_BOOK 3986 1.30 0.06 2.11 100 HTML_MIME_NO_HTML_TAG 3985 3.66 6.02 2.11 101 XM_B_SpammyTLD 3935 2.78 3.82 2.09 102 XM_H_Trusted_IP 3896 1.25 0.00 2.07 103 TR_Symld_Words 3809 1.72 1.26 2.02 104 RCVD_IN_IADB_OPTIN 3747 1.48 0.70 1.99 105 BOUNCE_MESSAGE 3712 1.36 0.44 1.97 106 ANY_BOUNCE_MESSAGE 3712 1.36 0.44 1.97 107 HTML_IMAGE_RATIO_08 3632 2.11 2.38 1.93 108 TVD_SPACE_RATIO 3549 1.16 0.05 1.88 109 TR_XM_SpammyWords2 3506 6.24 12.90 1.86 110 T_TooManySym_03 3434 1.18 0.20 1.82 111 TR_XM_Base64_M1 3381 1.51 1.09 1.79 112 XM_DK_Undo_01 3324 2.02 2.40 1.76 113 SUBJ_ALL_CAPS 3262 2.00 2.40 1.73 114 XMBody_95 3209 1.09 0.15 1.70 115 TR_XM_SpammyRelay 3158 7.45 16.24 1.68 116 XM_SPF_SoftFail 3131 3.36 5.94 1.66 117 T_XMDrugObfuBody_14 3087 2.43 3.63 1.64 118 BOTNET 3080 6.79 14.64 1.63 119 BAYES_05 3046 1.14 0.42 1.62 120 TR_XM_SB_Phish 2988 1.48 1.32 1.59 121 XMSubPhish11 2974 1.47 1.31 1.58 122 RCVD_IN_MSPIKE_H5 2942 1.02 0.20 1.56 123 TR_XM_SpammyWords5 2879 2.40 3.73 1.53 124 T_XMDrugObfuBody_08 2766 2.90 5.08 1.47 125 RELAYCOUNTRY_CA 2698 6.11 13.23 1.43 126 XMGappySubj_01 2626 0.86 0.05 1.39 127 XMBdyGiftCard01 2578 1.46 1.60 1.37 128 TooManyTo_002 2525 0.92 0.29 1.34 129 URI_HEX 2489 1.31 1.29 1.32 130 XM_B_Investor 2421 1.95 2.97 1.28 131 TM2_M_VERY_LONG_WORD 2401 3.50 6.89 1.27 132 RCVD_IN_RP_SAFE 2370 1.03 0.69 1.26 133 XM_GoogleGroups 2311 2.90 5.46 1.23 134 XM_D_tchamptons_WL 2158 0.70 0.02 1.14 135 XMDiploma_00 2130 1.56 2.23 1.13 136 RCVD_IN_RP_CERTIFIED 2120 0.88 0.52 1.12 137 UNTRUSTED_Relay 2104 4.14 8.75 1.12 138 XM_B_Unsub2 2016 1.53 2.22 1.07 139 XM_OfRef6 1930 1.87 3.16 1.02 140 XM_B_COPY_HTML 1924 0.84 0.56 1.02 141 XM_B_Phish66 1882 1.72 2.82 1.00 142 XMSubNoVowel 1867 0.91 0.80 0.99 143 MPART_ALT_DIFF_COUNT 1844 1.55 2.42 0.98 144 XMLngstWrd_00 1839 2.67 5.25 0.98 145 XM_H_Long_From02 1810 1.15 1.44 0.96 146 KHOP_HELO_FCRDNS 1796 1.03 1.15 0.95 147 TooManyTo_003 1772 0.66 0.23 0.94 148 TR_MetaPhish_Combo_01 1694 0.89 0.87 0.90 149 HTTPS_HTTP_MISMATCH 1685 0.86 0.80 0.89 150 XMPhish30 1675 0.92 0.97 0.89 151 HTML_TAG_BALANCE_BODY 1664 0.96 1.08 0.88 152 HTML_FONT_FACE_BAD 1648 0.74 0.53 0.87 153 XMLngstWrd_01 1582 2.57 5.21 0.84 154 DKIM_ADSP_CUSTOM_MED 1572 0.76 0.65 0.83 155 FVGT_m_MULTI_ODD_EMAIL 1545 0.57 0.18 0.82 156 XMBrknScrpt_02 1487 1.00 1.33 0.79 157 XMBody_17 1471 2.88 6.09 0.78 158 XMSubMetaSxObfu_02 1384 0.58 0.34 0.73 159 USER_IN_WELCOMELIST 1367 0.44 0.00 0.73 160 USER_IN_WHITELIST 1367 0.44 0.00 0.73 161 XM_H_PHPMailer 1362 0.74 0.76 0.72 162 XM_ProductURIs 1358 0.78 0.88 0.72 163 XM_UB50 1353 1.74 3.30 0.72 164 XMStockSpam_06 1352 1.04 1.53 0.72 165 TooManyTo_004 1349 0.52 0.22 0.72 166 XMNoVowels 1332 0.61 0.47 0.71 167 XM_B_SpammyWords4 1328 1.22 2.01 0.70 168 XMSlimDrugH 1328 0.92 1.25 0.70 169 T_FILL_THIS_FORM_SHORT 1320 2.88 6.20 0.70 170 XMLngstWrd_02 1269 2.46 5.17 0.67 171 HTML_IMAGE_ONLY_20 1266 0.56 0.38 0.67 172 RCVD_IN_BL_SPAMCOP_NET 1141 5.62 13.26 0.61 173 TooManyTo_005 1117 0.44 0.20 0.59 174 T_XMDrugObfuBody_00 1116 0.91 1.39 0.59 175 XMHTMLBadTable_001 1108 0.72 0.91 0.59 176 LONGLN_LOW_CONTRAST 1093 0.77 1.07 0.58 177 XM_S_SubURI 1064 0.35 0.01 0.56 178 URI_TRY_3LD 1050 0.60 0.66 0.56 179 BODY_ENHANCEMENT2 994 0.34 0.05 0.53 180 XM_B_COVIDMETA 976 0.75 1.09 0.52 181 XM_B_REG_HTML 966 0.55 0.60 0.51 182 XMSexyCombo_01 957 0.92 1.54 0.51 183 HELO_NODOT 942 0.49 0.49 0.50 184 HELO_NO_DOMAIN 941 0.49 0.48 0.50 185 XMGenDplmaNmb 934 0.68 0.96 0.50 186 NML_ADSP_CUSTOM_MED 934 0.48 0.47 0.50 187 FORGED_GMAIL_RCVD 933 0.48 0.47 0.49 188 RCVD_IN_PSBL 927 1.66 3.44 0.49 189 XMHTML_After_End 907 0.85 1.42 0.48 190 T_XMHurry_00 901 1.01 1.83 0.48 191 LOW_PRICE 858 0.52 0.61 0.46 192 XM_ShortIntro_01 849 0.53 0.65 0.45 193 XMLngstWrd_03 842 2.25 5.01 0.45 194 XMSubMetaI_00 823 0.53 0.67 0.44 195 TR_XM_Base64_L1 822 0.47 0.52 0.44 196 FROM_GOV_SPOOF 789 0.26 0.02 0.42 197 SpammyFromTLD_01 783 1.43 2.97 0.42 198 T_Symld_Words_02 775 0.44 0.47 0.41 199 T_TooManySym_04 771 0.31 0.15 0.41 200 TR_XM_INV_DKIM 770 0.43 0.46 0.41 ----------------------------------------------------------------------