Email: 464143 Autolearn: 0 AvgScore: 3.90 AvgScanTime: 1.21 sec Spam: 154650 Autolearn: 0 AvgScore: 14.07 AvgScanTime: 1.36 sec Ham: 309493 Autolearn: 0 AvgScore: -1.18 AvgScanTime: 1.14 sec Time Spent Running SA: 156.14 hours Time Spent Processing Spam: 58.50 hours Time Spent Processing Ham: 97.64 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 146915 88.37 95.00 85.06 2 DKIM_SIGNED 132595 76.37 85.74 71.69 3 XM_DK_Pass 129903 74.30 84.00 69.46 4 RELAYCOUNTRY_US 129335 81.00 83.63 79.68 5 DKIM_VALID 128542 73.25 83.12 68.32 6 XM_B_Unicode 119826 70.65 77.48 67.23 7 DCC_CHECK 109553 42.37 70.84 28.14 8 XMListUnsubscribeExists 102820 51.79 66.49 44.45 9 XM_B_SpammyWords 98897 48.30 63.95 40.48 10 DKIM_VALID_AU 97727 55.84 63.19 52.16 11 BAYES_50 68896 51.95 44.55 55.64 12 XM_B_Unicode3 66403 39.82 42.94 38.27 13 RCVD_IN_MSPIKE_H2 66332 38.17 42.89 35.81 14 XM_DK_Undo_02 61197 17.64 39.57 6.68 15 XM_B_SpammyWords2 56104 23.67 36.28 17.37 16 FVGT_m_MULTI_ODD 54526 27.44 35.26 23.53 17 MIME_HTML_ONLY 53468 24.14 34.57 18.93 18 LOC_TINY_FONT_1 53262 25.38 34.44 20.86 19 BAYES_99 49549 14.52 32.04 5.77 20 TR_XM_DKIM_Undo 49427 13.69 31.96 4.56 21 HTML_FONT_LOW_CONTRAST 46049 26.79 29.78 25.30 22 DCC_CHECK_NEGATIVE 45042 57.59 29.13 71.81 23 DKIM_VALID_EF 44433 28.53 28.73 28.43 24 T_KAM_HTML_FONT_INVALID 43508 21.50 28.13 18.18 25 BAYES_999 39350 11.53 25.44 4.58 26 T_TM2_M_HEADER_IN_MSG 36855 28.73 23.83 31.18 27 TR_DCC_Bayes_99 34193 8.57 22.11 1.81 28 XMSubLong 33923 22.60 21.94 22.93 29 XM_Body_Dirty_Words 32665 14.15 21.12 10.66 30 RELAYCOUNTRY_META 29997 9.05 19.40 3.89 31 XM_Multi_Part_URI 26933 13.03 17.42 10.83 32 BOTNET_IPINHOSTNAME 23372 7.92 15.11 4.32 33 XM_B_Unsub 22646 10.28 14.64 8.10 34 TR_XM_BayesUnsub 22005 8.95 14.23 6.30 35 FSL_BULK_SIG 21307 6.53 13.78 2.91 36 LOTS_OF_MONEY 21244 9.28 13.74 7.05 37 UNPARSEABLE_RELAY 19661 9.43 12.71 7.79 38 BOTNET 19299 5.07 12.48 1.36 39 TR_XM_UnparsRelay 19286 8.12 12.47 5.94 40 TR_XM_SpammyWords4 18244 7.00 11.80 4.61 41 XM_B_SpammyWords3 17782 6.40 11.50 3.86 42 TR_XM_SpammyWords2 16184 4.10 10.46 0.91 43 RCVD_IN_MSPIKE_WL 15583 10.78 10.08 11.13 44 MPART_ALT_DIFF 15577 6.29 10.07 4.40 45 TR_XM_SpammyRelay 14937 4.34 9.66 1.68 46 RCVD_IN_MSPIKE_H3 14423 9.27 9.33 9.24 47 XM_Evil_Numbers_Gen 14306 8.35 9.25 7.90 48 XMSexyCombo_05 14234 5.23 9.20 3.25 49 XM_UncommonTLD01 14117 5.57 9.13 3.79 50 HTML_IMAGE_RATIO_02 13790 6.80 8.92 5.73 51 UNTRUSTED_Relay 13381 3.80 8.65 1.37 52 RCVD_IN_BL_SPAMCOP_NET 12681 3.13 8.20 0.59 53 BAYES_80 12112 5.44 7.83 4.24 54 LotsOfNums_01 11824 8.20 7.65 8.48 55 HTML_MIME_NO_HTML_TAG 11756 3.82 7.60 1.93 56 TM2_M_VERY_LONG_WORD 11593 3.43 7.50 1.40 57 MIME_HTML_ONLY_MULTI 11115 4.34 7.19 2.92 58 BAYES_60 10971 8.31 7.09 8.91 59 XM_SendGrid 10549 5.66 6.82 5.09 60 TR_XM_PhishingBody 10165 4.40 6.57 3.32 61 XM_H_Long_From01 9765 5.52 6.31 5.12 62 RELAYCOUNTRY_CA 9542 2.75 6.17 1.04 63 XM_B_Phish_Phrases 9302 4.14 6.01 3.20 64 T_REMOTE_IMAGE 8555 4.68 5.53 4.25 65 XM_B_SpammyTLD 8400 3.87 5.43 3.09 66 XMSubMetaSx_00 8339 4.43 5.39 3.95 67 XM_B_Investor 8178 2.76 5.29 1.50 68 XMLngstWrd_00 7982 1.96 5.16 0.36 69 XMLngstWrd_01 7928 1.92 5.13 0.32 70 XMLngstWrd_02 7863 1.86 5.08 0.24 71 XM_GoogleGroups 7793 2.62 5.04 1.41 72 KHOP_HELO_FCRDNS 7741 2.76 5.01 1.63 73 TR_XM_SPAMCOP 7703 1.86 4.98 0.30 74 XMLngstWrd_03 7357 1.71 4.76 0.18 75 HTML_TITLE_SUBJ_DIFF 7228 1.59 4.67 0.04 76 XMLngstWrd_04 7142 1.62 4.62 0.12 77 UPPERCASE_75_100 7067 1.54 4.57 0.02 78 BAYES_95 7038 3.28 4.55 2.65 79 XM_SPF_SoftFail 7018 3.07 4.54 2.34 80 TR_XM_DK_SendGrid 6774 3.61 4.38 3.23 81 TooManyTo_001 6585 7.45 4.26 9.05 82 RCVD_IN_PSBL 6582 1.46 4.26 0.07 83 XM_B_Phish66 6393 2.75 4.13 2.05 84 T_XMDrugObfuBody_14 6265 2.48 4.05 1.70 85 HTML_IMAGE_RATIO_04 6128 4.73 3.96 5.12 86 RCVD_IN_VALIDITY_SAFE 6096 4.51 3.94 4.79 87 SpammyFromTLD_01 6002 1.82 3.88 0.79 88 TR_XM_SpammyWords5 5826 2.17 3.77 1.37 89 XMNumbers 5773 4.49 3.73 4.86 90 XM_UB50 5600 1.77 3.62 0.85 91 XMStrtUSub 5516 4.22 3.57 4.54 92 MIME_QP_LONG_LINE 5511 4.53 3.56 5.01 93 XMDiploma_00 5505 2.35 3.56 1.74 94 MIME_HTML_MOSTLY 5494 2.52 3.55 2.00 95 XM_OfRef6 5447 1.85 3.52 1.02 96 RCVD_IN_VALIDITY_CERTIFIED 5361 3.99 3.47 4.25 97 T_XMDrugObfuBody_08 5221 1.94 3.38 1.22 98 HTML_IMAGE_RATIO_06 5208 3.24 3.37 3.18 99 URIBL_DBL_SPAM 5094 1.11 3.29 0.01 100 RCVD_IN_VALIDITY_RPBL 5073 1.16 3.28 0.10 101 XM_DK_Undo_01 4887 2.11 3.16 1.58 102 XM_DIRTYINTL 4852 1.30 3.14 0.39 103 PDS_OTHER_BAD_TLD 4807 1.13 3.11 0.14 104 XM_CamelCaseFrm001 4317 2.13 2.79 1.81 105 T_TooManySym_01 4223 6.08 2.73 7.75 106 TM2_M_URI_OPT_OUT 4105 2.35 2.65 2.20 107 USER_IN_DEF_DKIM_WL 4062 8.76 2.63 11.82 108 DKIM_INVALID 4053 3.12 2.62 3.37 109 HTML_IMAGE_RATIO_08 3958 2.08 2.56 1.83 110 SUBJ_ALL_CAPS 3904 1.99 2.52 1.72 111 BOTNET_NORDNS 3902 0.86 2.52 0.02 112 XM_H_Undi_Recip 3705 0.99 2.40 0.29 113 XM_B_Unsub2 3593 1.54 2.32 1.14 114 T_FILL_THIS_FORM_SHORT 3560 1.38 2.30 0.92 115 RCVD_IN_IADB_LISTED 3546 4.40 2.29 5.45 116 SpammyFromTLD_02 3534 0.91 2.29 0.23 117 URI_PHP_REDIR 3496 0.76 2.26 0.00 118 XM_B_COVIDMETA 3389 1.21 2.19 0.72 119 TR_Mismatch_TLD_01 3354 0.89 2.17 0.25 120 RCVD_IN_IADB_SPF 3126 3.83 2.02 4.74 121 XM_UB99 3068 0.66 1.98 0.00 122 RCVD_IN_IADB_DK 2986 3.34 1.93 4.04 123 URI_HEX 2947 1.46 1.91 1.23 124 RCVD_IN_IADB_SENDERID 2946 3.42 1.90 4.18 125 XM_B_SpammyWords4 2925 0.98 1.89 0.52 126 TR_XM_SB_Phish 2899 2.08 1.87 2.18 127 XMSexyCombo_01 2832 1.36 1.83 1.12 128 FROM_EXCESS_BASE64 2831 2.14 1.83 2.29 129 ALL_TRUSTED 2796 12.47 1.81 17.79 130 XMSubPhish11 2727 2.02 1.76 2.15 131 HTTPS_HTTP_MISMATCH 2700 1.07 1.75 0.73 132 URI_NOVOWEL 2619 2.53 1.69 2.94 133 XM_URI_RBL 2619 0.63 1.69 0.10 134 T_XMDrugObfuBody_00 2606 0.99 1.69 0.65 135 TR_XM_PHPDW 2550 0.81 1.65 0.40 136 XMBody_17 2536 0.83 1.64 0.42 137 XMStockSpam_06 2525 1.35 1.63 1.21 138 XMGenDplmaNmb 2523 1.21 1.63 1.01 139 XM_H_Long_From02 2521 1.24 1.63 1.04 140 MAILING_LIST_MULTI 2465 2.35 1.59 2.72 141 BAYES_40 2445 4.07 1.58 5.31 142 TR_XM_PHPForged 2429 0.77 1.57 0.37 143 T_XMHurry_00 2416 0.85 1.56 0.49 144 HTML_IMAGE_ONLY_08 2377 0.61 1.54 0.15 145 XM_UB999 2371 0.51 1.53 0.00 146 TR_XM_FormFill2 2368 0.75 1.53 0.36 147 XM_H_PHPOS 2354 0.74 1.52 0.35 148 TR_LOTS_OF_MONEY3 2346 0.64 1.52 0.21 149 XMHTML_After_End 2250 0.99 1.45 0.76 150 RELAYCOUNTRY_RU 2201 0.54 1.42 0.10 151 XMSubNoVowel 2163 1.29 1.40 1.24 152 TR_XM_COVIDMETA1 2127 0.61 1.38 0.22 153 XM_B_SEO 2120 1.18 1.37 1.08 154 DKIM_ADSP_CUSTOM_MED 2112 1.13 1.37 1.01 155 HTML_TAG_BALANCE_CENTER 2103 0.54 1.36 0.13 156 RELAYCOUNTRY_DE 2101 0.66 1.36 0.32 157 MONEY_NOHTML 2078 0.51 1.34 0.09 158 XMSubMetaI_00 2047 0.70 1.32 0.39 159 TR_XM_NoHeaderRelay 2004 0.51 1.30 0.11 160 TR_XM_SEO4 1976 0.49 1.28 0.09 161 XMReplyNow 1975 0.59 1.28 0.25 162 TR_XM_Undi_Recip5 1969 0.45 1.27 0.03 163 T_MONEY_PERCENT 1966 0.57 1.27 0.21 164 TR_LOTS_OF_MONEY2 1966 0.57 1.27 0.21 165 MIXED_CENTER_CASE 1960 0.43 1.27 0.00 166 MIXED_HREF_CASE 1941 0.42 1.26 0.00 167 MIXED_IMG_CASE 1925 0.42 1.24 0.01 168 MIXED_AREA_CASE 1908 0.41 1.23 0.00 169 FORGED_GMAIL_RCVD 1904 0.77 1.23 0.54 170 XMBdyGiftCard01 1872 0.91 1.21 0.76 171 MIXED_FONT_CASE 1871 0.40 1.21 0.00 172 UNDISC_MONEY 1868 0.41 1.21 0.01 173 XMBrknScrpt_02 1864 0.80 1.21 0.60 174 URIBL_BLACK 1848 0.43 1.19 0.05 175 HK_RANDOM_REPLYTO 1846 0.47 1.19 0.11 176 DIET_1 1834 0.59 1.19 0.30 177 HTML_TAG_BALANCE_BODY 1813 0.81 1.17 0.63 178 TR_Symld_Words 1765 1.56 1.14 1.77 179 URI_GOOG_STO_SPAMMY 1752 0.38 1.13 0.00 180 TR_Sbj_FN_Bdy 1732 0.48 1.12 0.15 181 RELAYCOUNTRY_AU 1731 0.55 1.12 0.26 182 XMMoneyMeta_00 1707 0.72 1.10 0.53 183 XM_B_DNDMA 1689 0.63 1.09 0.39 184 HTML_FONT_SIZE_HUGE 1673 0.40 1.08 0.06 185 RELAYCOUNTRY_GB 1656 0.82 1.07 0.70 186 RCVD_IN_MSPIKE_BL 1655 0.37 1.07 0.02 187 XM_Body_Dirty_Words_01 1645 0.57 1.06 0.32 188 BAYES_20 1632 2.93 1.06 3.86 189 XM_PDF 1629 3.78 1.05 5.14 190 TR_XM_Undi_Recip2 1611 0.38 1.04 0.05 191 TR_XM_Undi_Recip11 1605 0.39 1.04 0.07 192 RCVD_IN_IADB_VOUCHED 1591 2.85 1.03 3.76 193 NML_ADSP_CUSTOM_MED 1577 0.77 1.02 0.64 194 URI_TRY_3LD 1557 0.71 1.01 0.56 195 XM_UB80 1548 0.35 1.00 0.03 196 TR_XM_FormFill 1544 0.34 1.00 0.01 197 DATE_IN_PAST_03_06 1538 0.48 0.99 0.22 198 TR_MetaPhish_Combo_01 1495 0.85 0.97 0.80 199 RELAYCOUNTRY_FR 1482 0.48 0.96 0.24 200 XMPhish30 1482 0.72 0.96 0.60 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 263265 88.37 95.00 85.06 2 RELAYCOUNTRY_US 246607 81.00 83.63 79.68 3 DCC_CHECK_NEGATIVE 222247 57.59 29.13 71.81 4 DKIM_SIGNED 221865 76.37 85.74 71.69 5 XM_DK_Pass 214972 74.30 84.00 69.46 6 DKIM_VALID 211443 73.25 83.12 68.32 7 XM_B_Unicode 208074 70.65 77.48 67.23 8 BAYES_50 172213 51.95 44.55 55.64 9 DKIM_VALID_AU 161444 55.84 63.19 52.16 10 XMListUnsubscribeExists 137555 51.79 66.49 44.45 11 XM_B_SpammyWords 125275 48.30 63.95 40.48 12 XM_B_Unicode3 118441 39.82 42.94 38.27 13 RCVD_IN_MSPIKE_H2 110825 38.17 42.89 35.81 14 T_TM2_M_HEADER_IN_MSG 96494 28.73 23.83 31.18 15 DKIM_VALID_EF 87994 28.53 28.73 28.43 16 DCC_CHECK 87086 42.37 70.84 28.14 17 HTML_FONT_LOW_CONTRAST 78317 26.79 29.78 25.30 18 FVGT_m_MULTI_ODD 72831 27.44 35.26 23.53 19 XMSubLong 70952 22.60 21.94 22.93 20 LOC_TINY_FONT_1 64550 25.38 34.44 20.86 21 MIME_HTML_ONLY 58595 24.14 34.57 18.93 22 T_KAM_HTML_FONT_INVALID 56262 21.50 28.13 18.18 23 ALL_TRUSTED 55070 12.47 1.81 17.79 24 XM_B_SpammyWords2 53744 23.67 36.28 17.37 25 USER_IN_DEF_DKIM_WL 36586 8.76 2.63 11.82 26 RCVD_IN_MSPIKE_WL 34450 10.78 10.08 11.13 27 BAYES_00 34240 7.62 0.72 11.06 28 XM_Multi_Part_URI 33529 13.03 17.42 10.83 29 XM_Body_Dirty_Words 32997 14.15 21.12 10.66 30 RCVD_IN_MSPIKE_H3 28592 9.27 9.33 9.24 31 TooManyTo_001 28009 7.45 4.26 9.05 32 BAYES_60 27591 8.31 7.09 8.91 33 LotsOfNums_01 26254 8.20 7.65 8.48 34 XM_DKIMWhitelistDomains 25933 5.62 0.09 8.38 35 XM_B_Unsub 25064 10.28 14.64 8.10 36 XM_Evil_Numbers_Gen 24443 8.35 9.25 7.90 37 UNPARSEABLE_RELAY 24108 9.43 12.71 7.79 38 T_TooManySym_01 23985 6.08 2.73 7.75 39 IN_ZIMBRA_NJ_WHITELIST 22537 4.89 0.11 7.28 40 LOTS_OF_MONEY 21821 9.28 13.74 7.05 41 XM_DK_Undo_02 20674 17.64 39.57 6.68 42 TR_XM_DK_Bayes 19925 4.48 0.55 6.44 43 TR_XM_BayesUnsub 19513 8.95 14.23 6.30 44 TR_XM_DK_Bayes1 19467 4.37 0.53 6.29 45 TR_XM_UnparsRelay 18398 8.12 12.47 5.94 46 BAYES_99 17858 14.52 32.04 5.77 47 HTML_IMAGE_RATIO_02 17749 6.80 8.92 5.73 48 RCVD_IN_IADB_LISTED 16870 4.40 2.29 5.45 49 TR_XM_DK_Bayes2 16824 3.76 0.42 5.44 50 BAYES_40 16431 4.07 1.58 5.31 51 XM_PDF 15901 3.78 1.05 5.14 52 HTML_IMAGE_RATIO_04 15842 4.73 3.96 5.12 53 XM_H_Long_From01 15839 5.52 6.31 5.12 54 XM_SendGrid 15741 5.66 6.82 5.09 55 MIME_QP_LONG_LINE 15518 4.53 3.56 5.01 56 XMNumbers 15055 4.49 3.73 4.86 57 RCVD_IN_VALIDITY_SAFE 14837 4.51 3.94 4.79 58 RCVD_IN_IADB_SPF 14668 3.83 2.02 4.74 59 T_TooManySym_02 14354 3.35 0.77 4.64 60 TR_XM_SpammyWords4 14260 7.00 11.80 4.61 61 BAYES_999 14183 11.53 25.44 4.58 62 TR_XM_DKIM_Undo 14126 13.69 31.96 4.56 63 XMStrtUSub 14059 4.22 3.57 4.54 64 MPART_ALT_DIFF 13623 6.29 10.07 4.40 65 BOTNET_IPINHOSTNAME 13369 7.92 15.11 4.32 66 T_REMOTE_IMAGE 13167 4.68 5.53 4.25 67 RCVD_IN_VALIDITY_CERTIFIED 13154 3.99 3.47 4.25 68 BAYES_80 13130 5.44 7.83 4.24 69 RCVD_IN_IADB_SENDERID 12950 3.42 1.90 4.18 70 RCVD_IN_IADB_DK 12515 3.34 1.93 4.04 71 XMSubMetaSx_00 12214 4.43 5.39 3.95 72 RELAYCOUNTRY_META 12026 9.05 19.40 3.89 73 BAYES_20 11960 2.93 1.06 3.86 74 XM_B_SpammyWords3 11946 6.40 11.50 3.86 75 XM_UncommonTLD01 11737 5.57 9.13 3.79 76 RCVD_IN_IADB_VOUCHED 11651 2.85 1.03 3.76 77 DKIM_INVALID 10422 3.12 2.62 3.37 78 TR_XM_PhishingBody 10271 4.40 6.57 3.32 79 XMSexyCombo_05 10062 5.23 9.20 3.25 80 TR_XM_DK_SendGrid 9994 3.61 4.38 3.23 81 XM_H_Trusted_IP 9918 2.14 0.00 3.20 82 XM_B_Phish_Phrases 9891 4.14 6.01 3.20 83 HTML_IMAGE_RATIO_06 9837 3.24 3.37 3.18 84 XM_B_SpammyTLD 9577 3.87 5.43 3.09 85 URI_NOVOWEL 9110 2.53 1.69 2.94 86 MIME_HTML_ONLY_MULTI 9029 4.34 7.19 2.92 87 FSL_BULK_SIG 8997 6.53 13.78 2.91 88 TooManyTo_002 8467 2.01 0.55 2.74 89 MAILING_LIST_MULTI 8427 2.35 1.59 2.72 90 BAYES_95 8204 3.28 4.55 2.65 91 ANY_BOUNCE_MESSAGE 8072 2.03 0.87 2.61 92 BOUNCE_MESSAGE 8070 2.03 0.87 2.61 93 RCVD_IN_IADB_OPTIN 7959 1.89 0.52 2.57 94 BAYES_05 7851 1.88 0.57 2.54 95 XM_SPF_SoftFail 7249 3.07 4.54 2.34 96 FROM_EXCESS_BASE64 7093 2.14 1.83 2.29 97 TM2_M_URI_OPT_OUT 6795 2.35 2.65 2.20 98 TR_XM_SB_Phish 6733 2.08 1.87 2.18 99 HELO_NODOT 6660 1.64 0.63 2.15 100 XMSubPhish11 6658 2.02 1.76 2.15 101 HELO_NO_DOMAIN 6657 1.64 0.63 2.15 102 INVALID_MSGID 6600 1.46 0.11 2.13 103 XM_B_Phish66 6348 2.75 4.13 2.05 104 MIME_HTML_MOSTLY 6187 2.52 3.55 2.00 105 IN_HORDE_ADDRESS_BOOK 6099 1.35 0.12 1.97 106 HTML_MIME_NO_HTML_TAG 5987 3.82 7.60 1.93 107 TO_MALFORMED 5819 1.29 0.10 1.88 108 TVD_RCVD_IP 5700 1.29 0.20 1.84 109 TooManyTo_003 5699 1.36 0.41 1.84 110 HTML_IMAGE_RATIO_08 5673 2.08 2.56 1.83 111 TR_DCC_Bayes_99 5597 8.57 22.11 1.81 112 XM_CamelCaseFrm001 5591 2.13 2.79 1.81 113 T_TooManySym_03 5563 1.32 0.35 1.80 114 RCVD_IN_MSPIKE_H4 5550 1.41 0.65 1.79 115 TR_Symld_Words 5470 1.56 1.14 1.77 116 XMDiploma_00 5391 2.35 3.56 1.74 117 SUBJ_ALL_CAPS 5336 1.99 2.52 1.72 118 T_XMDrugObfuBody_14 5259 2.48 4.05 1.70 119 TR_XM_SpammyRelay 5206 4.34 9.66 1.68 120 KHOP_HELO_FCRDNS 5060 2.76 5.01 1.63 121 XM_DK_Undo_01 4886 2.11 3.16 1.58 122 XM_B_Investor 4640 2.76 5.29 1.50 123 XMCapTrack 4476 1.10 0.41 1.45 124 XM_GoogleGroups 4349 2.62 5.04 1.41 125 TM2_M_VERY_LONG_WORD 4323 3.43 7.50 1.40 126 TR_XM_SpammyWords5 4238 2.17 3.77 1.37 127 UNTRUSTED_Relay 4236 3.80 8.65 1.37 128 BOTNET 4215 5.07 12.48 1.36 129 TooManyTo_004 4198 1.02 0.35 1.36 130 XMGappySubj_01 3893 0.89 0.17 1.26 131 XMSubNoVowel 3823 1.29 1.40 1.24 132 URI_HEX 3809 1.46 1.91 1.23 133 T_XMDrugObfuBody_08 3766 1.94 3.38 1.22 134 XMStockSpam_06 3732 1.35 1.63 1.21 135 XM_B_Unsub2 3532 1.54 2.32 1.14 136 XMBSHREFv2 3510 0.86 0.31 1.13 137 TooManyTo_005 3469 0.85 0.31 1.12 138 XMSexyCombo_01 3462 1.36 1.83 1.12 139 TVD_SPACE_RATIO 3361 0.83 0.31 1.09 140 XM_B_SEO 3355 1.18 1.37 1.08 141 XM_H_Long_From02 3225 1.24 1.63 1.04 142 HTML_FONT_FACE_BAD 3217 0.92 0.68 1.04 143 RELAYCOUNTRY_CA 3216 2.75 6.17 1.04 144 XM_OfRef6 3148 1.85 3.52 1.02 145 DKIM_ADSP_CUSTOM_MED 3122 1.13 1.37 1.01 146 XMGenDplmaNmb 3116 1.21 1.63 1.01 147 XMSubMetaSxObfu_03 2960 0.80 0.50 0.96 148 FVGT_m_MULTI_ODD_EMAIL 2955 0.67 0.09 0.95 149 RCVD_IN_RP_SAFE 2927 0.90 0.82 0.95 150 XM_E_Blogspot 2889 0.67 0.14 0.93 151 T_FILL_THIS_FORM_SHORT 2855 1.38 2.30 0.92 152 TR_XM_SpammyWords2 2831 4.10 10.46 0.91 153 XM_UB50 2636 1.77 3.62 0.85 154 RCVD_IN_RP_CERTIFIED 2602 0.80 0.72 0.84 155 XMBody_95 2557 0.59 0.12 0.83 156 TR_MetaPhish_Combo_01 2471 0.85 0.97 0.80 157 XM_ShortIntro_01 2465 0.71 0.55 0.80 158 SpammyFromTLD_01 2454 1.82 3.88 0.79 159 HTML_IMAGE_ONLY_20 2377 0.72 0.63 0.77 160 XMSexyCombo_04 2374 0.68 0.52 0.77 161 XMHTML_After_End 2353 0.99 1.45 0.76 162 XMBdyGiftCard01 2339 0.91 1.21 0.76 163 HTTPS_HTTP_MISMATCH 2263 1.07 1.75 0.73 164 MSGID_NOFQDN1 2242 0.49 0.01 0.72 165 XM_B_COVIDMETA 2233 1.21 2.19 0.72 166 RELAYCOUNTRY_GB 2162 0.82 1.07 0.70 167 SHORT_HELO_AND_INLINE_IMAGE 2066 0.47 0.08 0.67 168 T_XMDrugObfuBody_00 2006 0.99 1.69 0.65 169 T_OBFU_PDF_ATTACH 1994 0.53 0.30 0.64 170 NML_ADSP_CUSTOM_MED 1993 0.77 1.02 0.64 171 XM_H_PHPMailer 1979 0.70 0.83 0.64 172 HTML_TAG_BALANCE_BODY 1958 0.81 1.17 0.63 173 RCVD_IN_SORBS_DUL 1887 0.44 0.10 0.61 174 XMSubMetaSx_01 1857 0.52 0.37 0.60 175 XMBrknScrpt_02 1855 0.80 1.21 0.60 176 XMPhish30 1855 0.72 0.96 0.60 177 T_Symld_Words_02 1829 0.63 0.71 0.59 178 RCVD_IN_BL_SPAMCOP_NET 1828 3.13 8.20 0.59 179 XM_ProductURIs 1810 0.70 0.92 0.58 180 XMSexyCombo_02 1809 0.52 0.40 0.58 181 MPART_ALT_DIFF_COUNT 1783 0.67 0.86 0.58 182 URI_TRY_3LD 1737 0.71 1.01 0.56 183 XM_B_COPY_HTML 1715 0.61 0.72 0.55 184 XMNoVowels 1704 0.48 0.33 0.55 185 FORGED_GMAIL_RCVD 1677 0.77 1.23 0.54 186 XMMoneyMeta_00 1644 0.72 1.10 0.53 187 XM_B_SpammyWords4 1611 0.98 1.89 0.52 188 T_XMHurry_00 1522 0.85 1.56 0.49 189 HTML_IMAGE_ONLY_28 1511 0.43 0.31 0.49 190 XMSubMetaSxObfu_02 1505 0.49 0.49 0.49 191 USER_IN_WHITELIST 1489 0.32 0.00 0.48 192 USER_IN_WELCOMELIST 1489 0.32 0.00 0.48 193 MISSING_HEADERS 1448 0.48 0.49 0.47 194 FROM_GOV_DKIM_AU 1437 0.34 0.10 0.46 195 HTML_IMAGE_ONLY_32 1418 0.38 0.23 0.46 196 XM_RXBody 1401 0.52 0.65 0.45 197 XMDateMe_00 1400 0.46 0.48 0.45 198 RDNS_DYNAMIC 1391 0.49 0.57 0.45 199 TM2_M_BODY_EMPTY 1382 0.34 0.12 0.45 200 HTML_IMAGE_ONLY_24 1377 0.39 0.27 0.44 ----------------------------------------------------------------------