Email: 449681 Autolearn: 0 AvgScore: 2.49 AvgScanTime: 1.25 sec Spam: 132856 Autolearn: 0 AvgScore: 13.29 AvgScanTime: 1.39 sec Ham: 316825 Autolearn: 0 AvgScore: -2.05 AvgScanTime: 1.19 sec Time Spent Running SA: 156.06 hours Time Spent Processing Spam: 51.24 hours Time Spent Processing Ham: 104.82 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 125626 84.58 94.56 80.39 2 DKIM_SIGNED 119341 85.90 89.83 84.25 3 XM_DK_Pass 117267 84.88 88.27 83.46 4 DKIM_VALID 115596 83.55 87.01 82.10 5 XM_B_Unicode 108822 72.58 81.91 68.67 6 DCC_CHECK 105664 61.76 79.53 54.30 7 RELAYCOUNTRY_US 104892 84.23 78.95 86.45 8 XMListUnsubscribeExists 101634 60.36 76.50 53.59 9 XM_B_SpammyWords 99201 60.44 74.67 54.47 10 DKIM_VALID_AU 90510 68.79 68.13 69.07 11 XM_DK_Undo_02 68921 21.97 51.88 9.44 12 XM_B_SpammyWords2 59808 28.19 45.02 21.14 13 TR_XM_DKIM_Undo 59546 18.22 44.82 7.06 14 XM_B_Unicode3 56537 43.28 42.56 43.59 15 BAYES_99 53912 16.31 40.58 6.14 16 LOC_TINY_FONT_1 50810 31.99 38.24 29.36 17 RCVD_IN_MSPIKE_H2 46257 29.17 34.82 26.81 18 BAYES_50 45507 47.45 34.25 52.98 19 HTML_FONT_LOW_CONTRAST 44196 31.24 33.27 30.39 20 BAYES_999 43678 12.87 32.88 4.49 21 TR_DCC_Bayes_99 43053 12.49 32.41 4.14 22 MIME_HTML_ONLY 41192 24.45 31.00 21.70 23 DKIM_VALID_EF 38419 34.62 28.92 37.01 24 T_KAM_HTML_FONT_INVALID 35637 19.15 26.82 15.93 25 FVGT_m_MULTI_ODD 34860 23.55 26.24 22.42 26 RCVD_IN_MSPIKE_WL 32854 34.56 24.73 38.68 27 XM_Body_Dirty_Words 30969 15.85 23.31 12.73 28 XMSubLong 30694 20.73 23.10 19.73 29 T_TM2_M_HEADER_IN_MSG 27073 20.28 20.38 20.25 30 RELAYCOUNTRY_META 26753 8.76 20.14 3.99 31 DCC_CHECK_NEGATIVE 25612 37.01 19.28 44.45 32 TR_XM_SpammyWords2 23414 6.07 17.62 1.22 33 RCVD_IN_MSPIKE_H3 18819 15.95 14.16 16.69 34 BOTNET 18468 5.67 13.90 2.22 35 XM_Multi_Part_URI 18430 13.95 13.87 13.98 36 XMSexyCombo_05 18107 7.31 13.63 4.67 37 XM_B_SpammyWords3 18035 7.29 13.57 4.65 38 BOTNET_IPINHOSTNAME 16107 7.59 12.12 5.69 39 LOTS_OF_MONEY 15419 7.99 11.61 6.48 40 XM_B_Unsub 14522 10.08 10.93 9.73 41 HTML_IMAGE_RATIO_02 14216 9.56 10.70 9.09 42 XM_Evil_Numbers_Gen 14121 10.15 10.63 9.94 43 UNTRUSTED_Relay 13814 4.24 10.40 1.66 44 XM_UncommonTLD01 13734 5.74 10.34 3.81 45 RCVD_IN_BL_SPAMCOP_NET 13607 3.83 10.24 1.15 46 TR_XM_SpammyWords4 13543 5.88 10.19 4.08 47 RCVD_IN_MSPIKE_H4 12745 12.82 9.59 14.18 48 MPART_ALT_DIFF 12292 5.97 9.25 4.59 49 RELAYCOUNTRY_CA 12212 3.82 9.19 1.57 50 UNPARSEABLE_RELAY 11818 8.40 8.90 8.19 51 TR_XM_UnparsRelay 11566 7.19 8.71 6.55 52 XMSubMetaSx_00 11473 4.98 8.64 3.45 53 MIME_HTML_MOSTLY 10702 4.56 8.06 3.09 54 BAYES_80 10450 7.40 7.87 7.20 55 LotsOfNums_01 10310 8.08 7.76 8.22 56 XM_B_Phish_Phrases 10056 11.73 7.57 13.48 57 FSL_BULK_SIG 10023 6.14 7.54 5.56 58 RCVD_IN_RP_SAFE 9579 10.86 7.21 12.39 59 BAYES_60 9363 8.94 7.05 9.73 60 TR_XM_PhishingBody 8856 3.50 6.67 2.18 61 XM_H_Long_From01 8842 5.31 6.66 4.75 62 XM_SendGrid 8661 7.04 6.52 7.26 63 TooManyTo_001 7598 5.82 5.72 5.87 64 SpammyFromTLD_01 7541 2.34 5.68 0.94 65 RCVD_IN_RP_CERTIFIED 7408 9.93 5.58 11.75 66 HTML_IMAGE_RATIO_04 6791 5.89 5.11 6.21 67 XMStrtUSub 6782 12.29 5.10 15.30 68 URIBL_SBL_A 6425 2.43 4.84 1.43 69 BAYES_95 6073 3.55 4.57 3.12 70 XM_OfRef6 5933 1.83 4.47 0.73 71 XM_SPF_SoftFail 5439 2.18 4.09 1.38 72 XM_DK_Undo_01 5307 2.23 3.99 1.49 73 XMBdyGiftCard01 5256 2.14 3.96 1.38 74 XM_DIRTYINTL 5141 1.35 3.87 0.29 75 TM2_M_URI_OPT_OUT 5074 2.80 3.82 2.37 76 TR_XM_SpammyWords5 5047 2.05 3.80 1.31 77 T_REMOTE_IMAGE 5019 3.14 3.78 2.88 78 FROM_EXCESS_BASE64 4857 3.95 3.66 4.07 79 URI_HEX 4803 2.07 3.62 1.42 80 TR_XM_DK_SendGrid 4596 4.27 3.46 4.61 81 T_FILL_THIS_FORM_SHORT 4594 1.38 3.46 0.51 82 RELAYCOUNTRY_FR 4508 1.16 3.39 0.22 83 HTML_IMAGE_RATIO_08 4390 2.78 3.30 2.55 84 XM_UB50 4288 1.61 3.23 0.93 85 RCVD_IN_MSPIKE_BL 4262 1.10 3.21 0.21 86 TR_XM_MSPIKECOMBO 4240 1.09 3.19 0.21 87 XMNumbers 4220 2.94 3.18 2.84 88 XM_B_Phish66 4119 1.63 3.10 1.01 89 HTML_MIME_NO_HTML_TAG 4101 1.75 3.09 1.19 90 XMSexyCombo_01 4026 1.16 3.03 0.38 91 XMBrknScrpt_02 4012 1.35 3.02 0.66 92 XM_UB99 3989 0.89 3.00 0.01 93 HTML_IMAGE_RATIO_06 3979 3.60 2.99 3.86 94 TR_XM_MaxBayes 3919 0.90 2.95 0.04 95 XM_B_SpammyTLD 3914 2.26 2.95 1.97 96 XMDiploma_00 3823 1.80 2.88 1.35 97 DKIM_INVALID 3745 2.35 2.82 2.15 98 XMBody_17 3743 1.27 2.82 0.62 99 TR_XM_PHPDW 3732 1.36 2.81 0.75 100 BOTNET_NORDNS 3696 0.83 2.78 0.01 101 TR_XM_PHPForged 3668 1.30 2.76 0.69 102 TR_XM_FormFill2 3656 1.30 2.75 0.69 103 XM_H_PHPOS 3654 1.29 2.75 0.68 104 MIME_HTML_ONLY_MULTI 3532 2.63 2.66 2.62 105 XM_CamelCaseFrm001 3528 1.97 2.66 1.69 106 URI_NOVOWEL 3500 2.44 2.63 2.36 107 TR_XM_BayesRelay 3355 0.77 2.53 0.03 108 TR_LOTS_OF_MONEY3 3350 0.99 2.52 0.34 109 XMSexyCombo_04 3240 0.84 2.44 0.16 110 HDRS_MISSP 3212 0.85 2.42 0.19 111 T_TooManySym_01 3175 4.58 2.39 5.50 112 XM_UB999 3156 0.70 2.38 0.00 113 T_XMDrugObfuBody_08 3020 1.68 2.27 1.43 114 TR_XM_FormFill 3018 0.68 2.27 0.01 115 T_XMDrugObfuBody_14 3013 2.45 2.27 2.52 116 SUBJ_ALL_CAPS 2963 1.54 2.23 1.25 117 SpammyFromTLD_02 2856 0.73 2.15 0.14 118 XM_B_SpammyWords4 2839 1.02 2.14 0.55 119 XMSubMetaI_00 2831 1.30 2.13 0.95 120 TR_XM_SpammyWords3 2815 0.72 2.12 0.14 121 URI_TRY_3LD 2784 1.43 2.10 1.15 122 KHOP_HELO_FCRDNS 2770 1.55 2.08 1.33 123 RCVD_IN_MSPIKE_L5 2675 0.68 2.01 0.12 124 TR_XM_SB_Phish 2656 1.65 2.00 1.51 125 XMSubMetaSSx_00 2604 0.76 1.96 0.26 126 T_XMHurry_00 2562 1.11 1.93 0.77 127 XMSubPhish11 2541 1.62 1.91 1.50 128 XMHTML_After_End 2535 1.19 1.91 0.89 129 XMPhish08 2523 0.67 1.90 0.15 130 FORGED_GMAIL_RCVD 2480 0.90 1.87 0.49 131 BAYES_40 2446 3.77 1.84 4.58 132 TR_XM_COVIDMETA1 2437 0.70 1.83 0.23 133 TM2_M_VERY_LONG_WORD 2436 1.41 1.83 1.23 134 MIME_QP_LONG_LINE 2435 3.11 1.83 3.65 135 XM_B_COVIDMETA 2399 1.13 1.81 0.85 136 RCVD_IN_PSBL 2356 0.60 1.77 0.11 137 XM_B_Unsub2 2353 1.07 1.77 0.78 138 NUMERIC_HTTP_ADDR 2326 0.71 1.75 0.27 139 PDS_OTHER_BAD_TLD 2326 1.14 1.75 0.89 140 DKIM_ADSP_NXDOMAIN 2321 0.76 1.75 0.34 141 XMStockSpam_06 2246 1.55 1.69 1.49 142 XMGenDplmaNmb 2209 0.91 1.66 0.60 143 XMSexyCombo_02 2159 0.49 1.63 0.01 144 XMSubMetaSx_01 2123 0.53 1.60 0.08 145 HTML_IMAGE_ONLY_08 2033 0.51 1.53 0.09 146 HTML_SHORT_LINK_IMG_1 2013 0.46 1.52 0.02 147 RCVD_IN_RP_RNBL 2000 0.47 1.51 0.03 148 FROM_SUSPICIOUS_NTLD 1995 0.51 1.50 0.10 149 RCVD_IN_IADB_LISTED 1956 3.05 1.47 3.72 150 HDRS_LCASE_IMGONLY 1949 0.45 1.47 0.02 151 MALE_ENHANCE 1919 0.43 1.44 0.00 152 FROM_SUSPICIOUS_NTLD_FP 1905 0.49 1.43 0.09 153 HK_RANDOM_REPLYTO 1870 0.50 1.41 0.13 154 BAYES_20 1866 2.50 1.40 2.96 155 ALL_TRUSTED 1862 7.62 1.40 10.23 156 TR_Symld_Words 1737 1.13 1.31 1.05 157 XM_URI_RBL 1731 0.52 1.30 0.19 158 HTML_FONT_SIZE_HUGE 1691 0.55 1.27 0.25 159 XM_UB60 1668 0.45 1.26 0.11 160 BAYES_05 1664 1.55 1.25 1.67 161 T_Symld_Words_02 1657 0.63 1.25 0.37 162 RCVD_IN_IADB_SPF 1611 2.63 1.21 3.22 163 XM_UB80 1588 0.37 1.20 0.03 164 BAYES_00 1569 8.53 1.18 11.61 165 XM_Body_Obfu01 1529 0.46 1.15 0.17 166 PLING_QUERY 1527 0.66 1.15 0.46 167 TR_XM_RelayPhish 1503 0.38 1.13 0.06 168 GOOGLE_DOC_SUSP 1490 0.35 1.12 0.02 169 URIBL_BLACK 1477 0.34 1.11 0.02 170 RCVD_IN_IADB_DK 1443 2.26 1.09 2.76 171 RCVD_IN_IADB_SENDERID 1428 2.35 1.07 2.88 172 XM_H_Long_From02 1416 1.00 1.07 0.97 173 T_HTML_TAG_BALANCE_CENTER 1384 0.47 1.04 0.23 174 XM_ProductURIs 1383 0.96 1.04 0.93 175 T_XMDrugObfuBody_00 1356 0.82 1.02 0.74 176 XMPhish30 1344 0.64 1.01 0.48 177 MAILING_LIST_MULTI 1340 1.65 1.01 1.92 178 URI_NO_WWW_BIZ_CGI 1339 0.30 1.01 0.00 179 XM_Body_Dirty_Words_01 1321 0.49 0.99 0.28 180 XMReplyNow 1314 0.34 0.99 0.06 181 RCVD_IN_MSPIKE_H5 1290 5.79 0.97 7.81 182 TR_Mismatch_TLD_02 1288 0.32 0.97 0.04 183 LongTLD 1269 0.35 0.96 0.09 184 XM_UB95 1248 0.29 0.94 0.01 185 RELAYCOUNTRY_NL 1237 0.41 0.93 0.19 186 XMSlimDrugH 1227 0.42 0.92 0.21 187 TR_Mismatch_TLD_01 1219 0.45 0.92 0.25 188 TR_XM_INV_DKIM 1213 0.30 0.91 0.04 189 TM2_M_A_HREF_HREF 1190 0.45 0.90 0.26 190 RDNS_DYNAMIC 1182 0.75 0.89 0.69 191 XM_OfRef7 1149 0.30 0.86 0.07 192 HTTPS_HTTP_MISMATCH 1131 0.67 0.85 0.60 193 URI_NO_WWW_INFO_CGI 1126 0.26 0.85 0.01 194 INVESTMENT_ADVICE 1124 0.30 0.85 0.07 195 RCVD_IN_MSPIKE_L4 1119 0.27 0.84 0.03 196 XM_B_SEO 1112 0.33 0.84 0.11 197 DATE_IN_PAST_03_06 1056 0.47 0.79 0.34 198 XMSubNoVowel 1052 0.81 0.79 0.82 199 TR_XM_SEO4 1049 0.28 0.79 0.07 200 DKIM_ADSP_CUSTOM_MED 1038 0.82 0.78 0.84 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 273888 84.23 78.95 86.45 2 DKIM_SIGNED 266915 85.90 89.83 84.25 3 XM_DK_Pass 264416 84.88 88.27 83.46 4 DKIM_VALID 260099 83.55 87.01 82.10 5 HTML_MESSAGE 254706 84.58 94.56 80.39 6 DKIM_VALID_AU 218828 68.79 68.13 69.07 7 XM_B_Unicode 217551 72.58 81.91 68.67 8 XM_B_SpammyWords 172586 60.44 74.67 54.47 9 DCC_CHECK 172043 61.76 79.53 54.30 10 XMListUnsubscribeExists 169794 60.36 76.50 53.59 11 BAYES_50 167864 47.45 34.25 52.98 12 DCC_CHECK_NEGATIVE 140836 37.01 19.28 44.45 13 XM_B_Unicode3 138104 43.28 42.56 43.59 14 RCVD_IN_MSPIKE_WL 122552 34.56 24.73 38.68 15 DKIM_VALID_EF 117264 34.62 28.92 37.01 16 HTML_FONT_LOW_CONTRAST 96275 31.24 33.27 30.39 17 LOC_TINY_FONT_1 93025 31.99 38.24 29.36 18 RCVD_IN_MSPIKE_H2 84929 29.17 34.82 26.81 19 FVGT_m_MULTI_ODD 71039 23.55 26.24 22.42 20 MIME_HTML_ONLY 68746 24.45 31.00 21.70 21 XM_B_SpammyWords2 66976 28.19 45.02 21.14 22 XM_DKIMWhitelistDomains 65367 14.56 0.09 20.63 23 T_TM2_M_HEADER_IN_MSG 64144 20.28 20.38 20.25 24 XMSubLong 62525 20.73 23.10 19.73 25 RCVD_IN_MSPIKE_H3 52890 15.95 14.16 16.69 26 T_KAM_HTML_FONT_INVALID 50474 19.15 26.82 15.93 27 XMStrtUSub 48483 12.29 5.10 15.30 28 RCVD_IN_MSPIKE_H4 44926 12.82 9.59 14.18 29 XM_Multi_Part_URI 44305 13.95 13.87 13.98 30 XM_B_Phish_Phrases 42705 11.73 7.57 13.48 31 XM_Body_Dirty_Words 40326 15.85 23.31 12.73 32 RCVD_IN_RP_SAFE 39270 10.86 7.21 12.39 33 RCVD_IN_RP_CERTIFIED 37241 9.93 5.58 11.75 34 BAYES_00 36768 8.53 1.18 11.61 35 ALL_TRUSTED 32423 7.62 1.40 10.23 36 XM_Evil_Numbers_Gen 31506 10.15 10.63 9.94 37 BAYES_60 30842 8.94 7.05 9.73 38 XM_B_Unsub 30816 10.08 10.93 9.73 39 XM_DK_Undo_02 29895 21.97 51.88 9.44 40 TR_XM_DK_Bayes 29350 6.69 0.57 9.26 41 HTML_IMAGE_RATIO_02 28789 9.56 10.70 9.09 42 TR_XM_DK_Bayes1 28555 6.51 0.55 9.01 43 TR_XM_DK_Bayes2 26318 6.00 0.51 8.31 44 LotsOfNums_01 26042 8.08 7.76 8.22 45 UNPARSEABLE_RELAY 25959 8.40 8.90 8.19 46 RCVD_IN_MSPIKE_H5 24736 5.79 0.97 7.81 47 XM_SendGrid 22999 7.04 6.52 7.26 48 BAYES_80 22813 7.40 7.87 7.20 49 TR_XM_DKIM_Undo 22364 18.22 44.82 7.06 50 TR_XM_UnparsRelay 20750 7.19 8.71 6.55 51 LOTS_OF_MONEY 20523 7.99 11.61 6.48 52 HTML_IMAGE_RATIO_04 19677 5.89 5.11 6.21 53 BAYES_99 19440 16.31 40.58 6.14 54 TooManyTo_001 18593 5.82 5.72 5.87 55 BOTNET_IPINHOSTNAME 18034 7.59 12.12 5.69 56 FSL_BULK_SIG 17601 6.14 7.54 5.56 57 T_TooManySym_01 17435 4.58 2.39 5.50 58 XM_H_Long_From01 15046 5.31 6.66 4.75 59 XMSexyCombo_05 14786 7.31 13.63 4.67 60 XM_B_SpammyWords3 14728 7.29 13.57 4.65 61 TR_XM_DK_SendGrid 14605 4.27 3.46 4.61 62 MPART_ALT_DIFF 14535 5.97 9.25 4.59 63 BAYES_40 14521 3.77 1.84 4.58 64 IN_ZIMBRA_NJ_WHITELIST 14259 3.18 0.03 4.50 65 BAYES_999 14214 12.87 32.88 4.49 66 TR_DCC_Bayes_99 13117 12.49 32.41 4.14 67 TR_XM_SpammyWords4 12918 5.88 10.19 4.08 68 FROM_EXCESS_BASE64 12886 3.95 3.66 4.07 69 RELAYCOUNTRY_META 12657 8.76 20.14 3.99 70 HTML_IMAGE_RATIO_06 12214 3.60 2.99 3.86 71 XM_UncommonTLD01 12060 5.74 10.34 3.81 72 RCVD_IN_IADB_LISTED 11773 3.05 1.47 3.72 73 MIME_QP_LONG_LINE 11570 3.11 1.83 3.65 74 XMSubMetaSx_00 10932 4.98 8.64 3.45 75 RCVD_IN_IADB_SPF 10198 2.63 1.21 3.22 76 BAYES_95 9896 3.55 4.57 3.12 77 MIME_HTML_MOSTLY 9794 4.56 8.06 3.09 78 T_TooManySym_02 9394 2.25 0.54 2.97 79 BAYES_20 9384 2.50 1.40 2.96 80 RCVD_IN_IADB_SENDERID 9133 2.35 1.07 2.88 81 T_REMOTE_IMAGE 9119 3.14 3.78 2.88 82 XMNumbers 9013 2.94 3.18 2.84 83 RCVD_IN_IADB_DK 8739 2.26 1.09 2.76 84 TVD_RCVD_IP 8328 1.87 0.08 2.63 85 MIME_HTML_ONLY_MULTI 8300 2.63 2.66 2.62 86 HTML_IMAGE_RATIO_08 8094 2.78 3.30 2.55 87 T_XMDrugObfuBody_14 7999 2.45 2.27 2.52 88 INVALID_MSGID 7854 1.89 0.50 2.48 89 TM2_M_URI_OPT_OUT 7520 2.80 3.82 2.37 90 RCVD_IN_IADB_VOUCHED 7511 1.90 0.78 2.37 91 URI_NOVOWEL 7491 2.44 2.63 2.36 92 MSGID_NOFQDN1 7379 1.66 0.05 2.33 93 BOTNET 7026 5.67 13.90 2.22 94 TR_XM_PhishingBody 6897 3.50 6.67 2.18 95 DKIM_INVALID 6816 2.35 2.82 2.15 96 TO_MALFORMED 6413 1.43 0.01 2.02 97 XM_H_Trusted_IP 6316 1.40 0.00 1.99 98 XM_B_SpammyTLD 6238 2.26 2.95 1.97 99 HELO_MISC_IP 6119 1.41 0.16 1.93 100 MAILING_LIST_MULTI 6073 1.65 1.01 1.92 101 USER_IN_DEF_DKIM_WL 5851 1.32 0.05 1.85 102 XM_CamelCaseFrm001 5342 1.97 2.66 1.69 103 BAYES_05 5292 1.55 1.25 1.67 104 UNTRUSTED_Relay 5256 4.24 10.40 1.66 105 XM_RXBody 5239 1.32 0.52 1.65 106 ANY_BOUNCE_MESSAGE 5063 1.20 0.25 1.60 107 BOUNCE_MESSAGE 5063 1.20 0.25 1.60 108 RELAYCOUNTRY_CA 4985 3.82 9.19 1.57 109 IN_HORDE_ADDRESS_BOOK 4966 1.12 0.04 1.57 110 RCVD_IN_IADB_OPTIN 4899 1.24 0.53 1.55 111 XMBSHREFv2 4895 1.15 0.20 1.55 112 TR_XM_SB_Phish 4772 1.65 2.00 1.51 113 XMSubPhish11 4748 1.62 1.91 1.50 114 XM_PDF 4727 1.14 0.30 1.49 115 XMStockSpam_06 4714 1.55 1.69 1.49 116 XM_DK_Undo_01 4711 2.23 3.99 1.49 117 URIBL_SBL_A 4520 2.43 4.84 1.43 118 T_XMDrugObfuBody_08 4515 1.68 2.27 1.43 119 URI_HEX 4507 2.07 3.62 1.42 120 XM_SPF_SoftFail 4382 2.18 4.09 1.38 121 XMBdyGiftCard01 4367 2.14 3.96 1.38 122 XMDiploma_00 4269 1.80 2.88 1.35 123 KHOP_HELO_FCRDNS 4220 1.55 2.08 1.33 124 TR_XM_SpammyWords5 4155 2.05 3.80 1.31 125 TooManyTo_002 4043 1.02 0.41 1.28 126 SUBJ_ALL_CAPS 3959 1.54 2.23 1.25 127 TM2_M_VERY_LONG_WORD 3908 1.41 1.83 1.23 128 TR_XM_SpammyWords2 3880 6.07 17.62 1.22 129 HTML_MIME_NO_HTML_TAG 3766 1.75 3.09 1.19 130 TR_MSPIKEBAYES00 3760 0.84 0.02 1.19 131 URI_TRY_3LD 3641 1.43 2.10 1.15 132 RCVD_IN_BL_SPAMCOP_NET 3629 3.83 10.24 1.15 133 TR_Symld_Words 3336 1.13 1.31 1.05 134 HTML_FONT_FACE_BAD 3277 0.92 0.65 1.03 135 XMBody_95 3250 0.76 0.14 1.03 136 XM_B_Phish66 3213 1.63 3.10 1.01 137 XMGappySubj_01 3164 0.73 0.09 1.00 138 XM_GoogleGroups 3102 0.83 0.46 0.98 139 XM_H_Long_From02 3065 1.00 1.07 0.97 140 XMSubMetaI_00 3003 1.30 2.13 0.95 141 SpammyFromTLD_01 2984 2.34 5.68 0.94 142 XM_UB50 2959 1.61 3.23 0.93 143 XM_ProductURIs 2937 0.96 1.04 0.93 144 TooManyTo_003 2877 0.74 0.35 0.91 145 XMHTML_After_End 2820 1.19 1.91 0.89 146 PDS_OTHER_BAD_TLD 2812 1.14 1.75 0.89 147 XM_B_COVIDMETA 2682 1.13 1.81 0.85 148 DKIM_ADSP_CUSTOM_MED 2660 0.82 0.78 0.84 149 XMSubNoVowel 2600 0.81 0.79 0.82 150 XM_B_Unsub2 2480 1.07 1.77 0.78 151 T_TooManySym_03 2452 0.59 0.14 0.77 152 T_XMHurry_00 2443 1.11 1.93 0.77 153 TVD_SPACE_RATIO 2397 0.55 0.04 0.76 154 TR_XM_PHPDW 2380 1.36 2.81 0.75 155 TooManyTo_004 2355 0.62 0.33 0.74 156 T_XMDrugObfuBody_00 2336 0.82 1.02 0.74 157 XM_OfRef6 2308 1.83 4.47 0.73 158 TR_XM_FormFill2 2196 1.30 2.75 0.69 159 RDNS_DYNAMIC 2186 0.75 0.89 0.69 160 TR_XM_PHPForged 2179 1.30 2.76 0.69 161 XM_H_PHPOS 2160 1.29 2.75 0.68 162 XMHTMLBadTable_001 2122 0.60 0.42 0.67 163 XMBrknScrpt_02 2081 1.35 3.02 0.66 164 TooManyTo_005 2044 0.54 0.28 0.65 165 XM_Lotto 1977 0.64 0.67 0.62 166 XMBody_17 1966 1.27 2.82 0.62 167 XMGenDplmaNmb 1897 0.91 1.66 0.60 168 HTTPS_HTTP_MISMATCH 1891 0.67 0.85 0.60 169 RELAYCOUNTRY_GB 1791 0.59 0.65 0.57 170 XM_B_SpammyWords4 1731 1.02 2.14 0.55 171 XMSubMetaSxObfu_02 1711 0.48 0.33 0.54 172 XM_B_REG_HTML 1707 0.52 0.48 0.54 173 USER_IN_WHITELIST 1704 0.38 0.00 0.54 174 USER_IN_WELCOMELIST 1704 0.38 0.00 0.54 175 NML_ADSP_CUSTOM_MED 1697 0.55 0.58 0.54 176 TR_MetaPhish_Combo_01 1661 0.57 0.67 0.52 177 T_FILL_THIS_FORM_SHORT 1614 1.38 3.46 0.51 178 FROM_GOV_DKIM_AU 1606 0.37 0.05 0.51 179 XM_shorewaves_Whitelist 1586 0.35 0.00 0.50 180 XM_B_COPY_HTML 1584 0.50 0.49 0.50 181 XM_H_PHPMailer 1583 0.51 0.54 0.50 182 FORGED_GMAIL_RCVD 1555 0.90 1.87 0.49 183 XMPhish30 1534 0.64 1.01 0.48 184 DIET_1 1515 0.56 0.76 0.48 185 XMPhish14 1473 0.49 0.56 0.46 186 PLING_QUERY 1463 0.66 1.15 0.46 187 HELO_NO_DOMAIN 1452 0.45 0.42 0.46 188 HELO_NODOT 1452 0.45 0.42 0.46 189 HTML_IMAGE_ONLY_20 1444 0.35 0.11 0.46 190 XMBody_78 1425 0.48 0.55 0.45 191 SHOPIFY_IMG_NOT_RCVD_SFY 1393 0.41 0.34 0.44 192 XM_Ancestry_Forge 1352 0.30 0.00 0.43 193 XM_S_SpammyWords 1346 0.50 0.68 0.42 194 TR_XM_Spammywords 1346 0.50 0.68 0.42 195 XMNoVowels 1265 0.35 0.23 0.40 196 XMCapTrack 1203 0.32 0.18 0.38 197 XMSexyCombo_01 1192 1.16 3.03 0.38 198 XM_SPF_Unknown 1175 0.38 0.41 0.37 199 T_Symld_Words_02 1173 0.63 1.25 0.37 200 XMLngstWrd_00 1166 0.43 0.57 0.37 ----------------------------------------------------------------------