Email: 614989 Autolearn: 0 AvgScore: 5.38 AvgScanTime: 1.55 sec Spam: 252262 Autolearn: 0 AvgScore: 11.91 AvgScanTime: 1.69 sec Ham: 362727 Autolearn: 0 AvgScore: 0.84 AvgScanTime: 1.46 sec Time Spent Running SA: 265.44 hours Time Spent Processing Spam: 118.36 hours Time Spent Processing Ham: 147.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 245335 92.54 97.25 89.26 2 XM_B_Unicode 229446 81.40 90.96 74.76 3 RELAYCOUNTRY_US 228334 86.63 90.51 83.93 4 XM_B_SpammyWords 208017 63.06 82.46 49.57 5 XM_B_SpammyWords2 166452 42.33 65.98 25.88 6 BAYES_50 153929 60.56 61.02 60.24 7 LOC_TINY_FONT_1 152962 41.36 60.64 27.96 8 DCC_CHECK_NEGATIVE 138809 61.04 55.03 65.22 9 T_TM2_M_HEADER_IN_MSG 136878 45.14 54.26 38.80 10 HTML_FONT_LOW_CONTRAST 134203 41.98 53.20 34.17 11 DKIM_SIGNED 132624 61.13 52.57 67.08 12 XM_DK_Pass 126394 59.41 50.10 65.88 13 DKIM_VALID 124945 58.56 49.53 64.84 14 XM_Evil_Numbers_Gen 120331 30.26 47.70 18.13 15 XM_B_Unicode3 115771 41.87 45.89 39.08 16 DCC_CHECK 111271 38.58 44.11 34.73 17 TM2_M_VERY_LONG_WORD 110865 26.12 43.95 13.73 18 LotsOfNums_01 108060 25.26 42.84 13.03 19 BOUNCE_MESSAGE 107045 26.31 42.43 15.10 20 ANY_BOUNCE_MESSAGE 107045 26.31 42.43 15.10 21 MAY_BE_FORGED 106121 24.73 42.07 12.68 22 XMListUnsubscribeExists 102217 42.11 40.52 43.22 23 DKIM_VALID_AU 97867 46.45 38.80 51.77 24 XM_B_Phish_Phrases 95488 23.42 37.85 13.38 25 FVGT_m_MULTI_ODD 78424 26.15 31.09 22.72 26 XMSubLong 73172 24.44 29.01 21.27 27 HTML_IMAGE_RATIO_04 64427 14.47 25.54 6.77 28 XM_DK_Undo_02 59096 11.91 23.43 3.91 29 RCVD_IN_MSPIKE_H2 56997 28.17 22.59 32.05 30 KHOP_HELO_FCRDNS 54581 12.54 21.64 6.21 31 XM_B_SpammyWords3 47270 13.76 18.74 10.30 32 T_KAM_HTML_FONT_INVALID 46703 18.93 18.51 19.22 33 BAYES_99 45592 8.93 18.07 2.58 34 DKIM_VALID_EF 43543 22.37 17.26 25.93 35 TR_XM_DKIM_Undo 42291 7.86 16.76 1.66 36 MIME_HTML_ONLY 41446 16.95 16.43 17.31 37 MIME_CHARSET_FARAWAY 39064 6.99 15.49 1.09 38 CHARSET_FARAWAY_HEADER 38798 6.87 15.38 0.95 39 BAYES_999 34667 6.77 13.74 1.92 40 TR_DCC_Bayes_99 33044 6.02 13.10 1.09 41 XM_Multi_Part_URI 31678 12.43 12.56 12.34 42 TR_XM_DK_Unsub 31677 11.77 12.56 11.22 43 HTML_IMAGE_RATIO_06 30344 6.83 12.03 3.22 44 XM_B_Unsub 26796 8.97 10.62 7.82 45 TR_XM_BayesUnsub 25982 7.72 10.30 5.92 46 UNPARSEABLE_RELAY 25886 10.31 10.26 10.34 47 TR_MAX_INTL_RELAY 22849 6.76 9.06 5.17 48 RELAYCOUNTRY_META 22283 5.41 8.83 3.03 49 LOTS_OF_MONEY 17917 6.13 7.10 5.46 50 TR_XM_SpammyWords2 17207 3.01 6.82 0.37 51 BOTNET_IPINHOSTNAME 16834 4.40 6.67 2.82 52 TR_XM_SpammyRelay 16325 3.55 6.47 1.53 53 XMLngstWrd_00 15975 2.99 6.33 0.66 54 TR_XM_SpammyWords4 15941 4.70 6.32 3.57 55 FSL_BULK_SIG 14392 5.86 5.71 5.96 56 BOTNET 13797 3.01 5.47 1.31 57 BAYES_80 13677 4.13 5.42 3.23 58 TR_XM_UnparsRelay 13394 3.00 5.31 1.39 59 RCVD_IN_BL_SPAMCOP_NET 13264 2.45 5.26 0.50 60 BAYES_60 12093 5.64 4.79 6.23 61 TR_XM_SPAMCOP 10358 1.85 4.11 0.27 62 XMSubMetaSx_00 10004 3.56 3.97 3.28 63 HTML_IMAGE_RATIO_02 9988 4.31 3.96 4.56 64 BAYES_40 9880 6.56 3.92 8.39 65 XM_B_PhoneNumber 9343 6.91 3.70 9.14 66 XM_UncommonTLD01 9262 3.71 3.67 3.74 67 MPART_ALT_DIFF 9070 3.60 3.60 3.60 68 XM_Body_Dirty_Words 9022 2.69 3.58 2.08 69 RELAYCOUNTRY_CA 8681 1.83 3.44 0.71 70 BAYES_95 8395 2.51 3.33 1.93 71 XMLngstWrd_01 8052 1.50 3.19 0.33 72 UNTRUSTED_Relay 7804 1.98 3.09 1.20 73 DKIM_INVALID 7679 2.57 3.04 2.23 74 XM_H_Long_From01 7368 4.16 2.92 5.03 75 XM_H_GMP 6744 4.18 2.67 5.23 76 XM_B_Investor 6722 1.97 2.66 1.48 77 XMSexyCombo_05 6618 1.72 2.62 1.09 78 T_XMDrugObfuBody_14 6104 2.00 2.42 1.71 79 TR_XM_PhishingBody 6039 1.89 2.39 1.53 80 RCVD_IN_MSPIKE_H3 5501 3.91 2.18 5.11 81 RCVD_IN_MSPIKE_WL 5501 3.91 2.18 5.11 82 XM_B_SpammyTLD 5454 2.27 2.16 2.35 83 T_XMDrugObfuBody_08 5240 1.70 2.08 1.44 84 TooManyTo_001 5134 5.33 2.04 7.61 85 TR_XM_SpammyWords5 5086 1.52 2.02 1.17 86 MIME_HTML_MOSTLY 5028 1.87 1.99 1.79 87 XMStrtUSub 4986 3.46 1.98 4.50 88 XM_OfRef6 4960 1.32 1.97 0.87 89 XM_CamelCaseFrm001 4897 1.87 1.94 1.83 90 MIME_HTML_ONLY_MULTI 4854 1.99 1.92 2.03 91 TM2_M_URI_OPT_OUT 4754 1.72 1.88 1.60 92 MIME_QP_LONG_LINE 4559 3.43 1.81 4.55 93 XMNumbers 4558 2.31 1.81 2.65 94 XM_B_URI_Unicode 4519 1.76 1.79 1.73 95 HTML_IMAGE_RATIO_08 4474 2.07 1.77 2.28 96 BAYES_20 4394 3.60 1.74 4.90 97 XM_B_Unsub2 4163 1.36 1.65 1.15 98 XM_SPF_SoftFail 4151 1.49 1.65 1.37 99 XM_B_SpammyWords4 3921 0.94 1.55 0.52 100 RELAYCOUNTRY_AU 3874 0.93 1.54 0.51 101 XM_UB50 3826 1.09 1.52 0.79 102 XM_URI_RBL 3763 0.82 1.49 0.36 103 XMDiploma_00 3720 1.56 1.47 1.61 104 T_TooManySym_01 3580 3.54 1.42 5.01 105 MAILING_LIST_MULTI 3427 2.00 1.36 2.45 106 RCVD_IN_VALIDITY_SAFE 3407 2.55 1.35 3.38 107 RCVD_IN_VALIDITY_RPBL 3235 0.55 1.28 0.04 108 T_FILL_THIS_FORM_SHORT 3211 1.07 1.27 0.92 109 SpammyFromTLD_02 3184 0.76 1.26 0.41 110 TR_XM_INV_DKIM 3180 0.62 1.26 0.18 111 FROM_EXCESS_BASE64 3158 1.49 1.25 1.66 112 XMBody_17 3132 0.75 1.24 0.41 113 TR_XM_NoHeaderRelay 3111 0.59 1.23 0.15 114 ALL_TRUSTED 3106 8.57 1.23 13.67 115 RCVD_IN_VALIDITY_CERTIFIED 3084 2.11 1.22 2.73 116 T_XMDrugObfuBody_00 2813 0.93 1.12 0.80 117 HTML_MIME_NO_HTML_TAG 2776 1.88 1.10 2.41 118 SUBJ_ALL_CAPS 2771 1.27 1.10 1.38 119 USER_IN_DEF_DKIM_WL 2726 7.23 1.08 11.50 120 T_XMHurry_00 2706 0.85 1.07 0.70 121 DIET_1 2642 0.64 1.05 0.35 122 URI_HEX 2593 1.15 1.03 1.24 123 XMStockSpam_06 2544 0.97 1.01 0.95 124 SpammyFromTLD_01 2515 0.95 1.00 0.92 125 XM_H_Long_From02 2400 0.87 0.95 0.82 126 XM_DK_Undo_01 2236 1.27 0.89 1.54 127 LongTLD 2201 0.57 0.87 0.37 128 T_REMOTE_IMAGE 2187 2.20 0.87 3.13 129 RCVD_IN_ZEN_LASTEXTERNAL 2154 0.35 0.85 0.00 130 SHORTCIRCUIT 2154 0.35 0.85 0.00 131 XM_SendGrid 2113 1.04 0.84 1.17 132 XMBrknScrpt_02 2103 0.73 0.83 0.65 133 RCVD_IN_PSBL 2091 0.41 0.83 0.11 134 XMGenDplmaNmb 2077 0.88 0.82 0.92 135 XMPhish30 2062 0.66 0.82 0.55 136 TR_LOTS_OF_MONEY3 1962 0.46 0.78 0.24 137 XM_B_COPY_HTML 1798 0.68 0.71 0.66 138 XMHTML_After_End 1775 0.47 0.70 0.31 139 SHOPIFY_IMG_NOT_RCVD_SFY 1740 0.41 0.69 0.21 140 MPART_ALT_DIFF_COUNT 1738 0.60 0.69 0.55 141 XM_B_SEO 1729 0.39 0.69 0.18 142 XMReplyNow 1715 0.40 0.68 0.21 143 XM_B_Phish66 1706 0.44 0.68 0.27 144 HTML_FONT_TINY_NORDNS 1693 0.32 0.67 0.07 145 URI_TRY_3LD 1692 0.50 0.67 0.37 146 HTTPS_HTTP_MISMATCH 1677 0.66 0.66 0.65 147 BOTNET_NORDNS 1668 0.28 0.66 0.01 148 XM_UB99 1654 0.27 0.66 0.00 149 XMBdyGiftCard01 1645 0.54 0.65 0.46 150 TR_XM_PHPForged 1589 0.44 0.63 0.31 151 TR_XM_PHPDW 1562 0.44 0.62 0.32 152 TR_XM_FormFill2 1558 0.44 0.62 0.31 153 URI_NOVOWEL 1525 1.22 0.60 1.65 154 XM_B_DNDMA 1525 0.50 0.60 0.43 155 RCVD_IN_PBL 1520 0.60 0.60 0.60 156 XM_H_PHPOS 1520 0.43 0.60 0.30 157 HTML_TAG_BALANCE_BODY 1512 0.50 0.60 0.44 158 TR_MetaPhish_Combo_01 1499 0.61 0.59 0.63 159 DKIM_ADSP_CUSTOM_MED 1493 0.70 0.59 0.78 160 TR_XM_Base64_M1 1449 0.56 0.57 0.56 161 MultiRelay_CC 1443 0.30 0.57 0.11 162 XM_HighProb1 1429 0.24 0.57 0.01 163 TR_Symld_Words 1428 1.04 0.57 1.37 164 TR_XM_SEO4 1417 0.28 0.56 0.08 165 TR_Mismatch_TLD_02 1413 0.27 0.56 0.07 166 TM2_M_OBFU_COMMENT 1408 0.42 0.56 0.33 167 XM_B_REG_HTML 1407 0.39 0.56 0.28 168 RCVD_IN_IADB_LISTED 1406 2.20 0.56 3.34 169 RELAYCOUNTRY_FR 1377 0.34 0.55 0.19 170 XM_RXBody 1351 0.61 0.54 0.66 171 TR_XM_RelayPhish 1333 0.26 0.53 0.07 172 XMBody_78 1329 0.39 0.53 0.30 173 TR_XM_FormFill 1317 0.22 0.52 0.01 174 RCVD_IN_IADB_SPF 1313 1.91 0.52 2.88 175 RELAYCOUNTRY_GB 1311 0.49 0.52 0.47 176 XMSlimDrugH 1303 0.49 0.52 0.47 177 XMMoneyMeta_00 1290 0.50 0.51 0.49 178 XM_ProductURIs 1287 0.42 0.51 0.35 179 RCVD_IN_IADB_DK 1281 1.66 0.51 2.47 180 RCVD_IN_IADB_SENDERID 1274 1.70 0.51 2.54 181 TR_LOTS_OF_MONEY2 1256 0.29 0.50 0.15 182 T_MONEY_PERCENT 1256 0.29 0.50 0.15 183 NML_ADSP_CUSTOM_MED 1255 0.50 0.50 0.50 184 XM_UB999 1254 0.21 0.50 0.00 185 TM2_M_A_HREF_HREF 1241 0.34 0.49 0.23 186 XMPhish14 1215 0.47 0.48 0.46 187 TR_XM_DK_SendGrid 1207 0.63 0.48 0.73 188 XM_PDF 1195 2.71 0.47 4.27 189 XM_GoogleGroups 1190 0.87 0.47 1.15 190 FONT_INVIS_LONG_LINE 1188 0.25 0.47 0.10 191 XM_S_SpammyWords 1174 0.27 0.47 0.13 192 TR_XM_Spammywords 1174 0.27 0.47 0.13 193 T_Symld_Words_02 1170 0.42 0.46 0.38 194 DKIM_ADSP_NXDOMAIN 1153 0.36 0.46 0.29 195 XMSubMetaI_00 1147 0.43 0.45 0.41 196 BAYES_00 1142 5.99 0.45 9.85 197 XM_OfRef7 1137 0.28 0.45 0.15 198 XMClaimOffer 1118 0.24 0.44 0.09 199 XM_H_PHPMailer 1109 0.58 0.44 0.68 200 XM_B_COVIDMETA 1106 0.26 0.44 0.14 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 323758 92.54 97.25 89.26 2 RELAYCOUNTRY_US 304432 86.63 90.51 83.93 3 XM_B_Unicode 271174 81.40 90.96 74.76 4 DKIM_SIGNED 243315 61.13 52.57 67.08 5 XM_DK_Pass 238958 59.41 50.10 65.88 6 DCC_CHECK_NEGATIVE 236572 61.04 55.03 65.22 7 DKIM_VALID 235210 58.56 49.53 64.84 8 BAYES_50 218499 60.56 61.02 60.24 9 DKIM_VALID_AU 187797 46.45 38.80 51.77 10 XM_B_SpammyWords 179815 63.06 82.46 49.57 11 XMListUnsubscribeExists 156773 42.11 40.52 43.22 12 XM_B_Unicode3 141743 41.87 45.89 39.08 13 T_TM2_M_HEADER_IN_MSG 140733 45.14 54.26 38.80 14 DCC_CHECK 125990 38.58 44.11 34.73 15 HTML_FONT_LOW_CONTRAST 123940 41.98 53.20 34.17 16 RCVD_IN_MSPIKE_H2 116264 28.17 22.59 32.05 17 LOC_TINY_FONT_1 101428 41.36 60.64 27.96 18 DKIM_VALID_EF 94053 22.37 17.26 25.93 19 XM_B_SpammyWords2 93856 42.33 65.98 25.88 20 FVGT_m_MULTI_ODD 82410 26.15 31.09 22.72 21 XMSubLong 77142 24.44 29.01 21.27 22 T_KAM_HTML_FONT_INVALID 69721 18.93 18.51 19.22 23 XM_Evil_Numbers_Gen 65773 30.26 47.70 18.13 24 MIME_HTML_ONLY 62779 16.95 16.43 17.31 25 BOUNCE_MESSAGE 54763 26.31 42.43 15.10 26 ANY_BOUNCE_MESSAGE 54763 26.31 42.43 15.10 27 TM2_M_VERY_LONG_WORD 49796 26.12 43.95 13.73 28 ALL_TRUSTED 49585 8.57 1.23 13.67 29 XM_B_Phish_Phrases 48530 23.42 37.85 13.38 30 LotsOfNums_01 47279 25.26 42.84 13.03 31 MAY_BE_FORGED 45983 24.73 42.07 12.68 32 XM_Multi_Part_URI 44766 12.43 12.56 12.34 33 USER_IN_DEF_DKIM_WL 41718 7.23 1.08 11.50 34 TR_XM_DK_Unsub 40683 11.77 12.56 11.22 35 UNPARSEABLE_RELAY 37517 10.31 10.26 10.34 36 XM_B_SpammyWords3 37378 13.76 18.74 10.30 37 BAYES_00 35712 5.99 0.45 9.85 38 XM_B_PhoneNumber 33138 6.91 3.70 9.14 39 BAYES_40 30440 6.56 3.92 8.39 40 XM_B_Unsub 28377 8.97 10.62 7.82 41 TooManyTo_001 27620 5.33 2.04 7.61 42 HTML_IMAGE_RATIO_04 24542 14.47 25.54 6.77 43 TR_XM_DK_Bayes 23148 3.92 0.39 6.38 44 TR_XM_DK_Bayes1 22679 3.85 0.38 6.25 45 BAYES_60 22614 5.64 4.79 6.23 46 KHOP_HELO_FCRDNS 22518 12.54 21.64 6.21 47 IN_ZIMBRA_NJ_WHITELIST 21707 3.55 0.06 5.98 48 FSL_BULK_SIG 21627 5.86 5.71 5.96 49 TR_XM_BayesUnsub 21476 7.72 10.30 5.92 50 XM_DKIMWhitelistDomains 21381 3.48 0.01 5.89 51 LOTS_OF_MONEY 19806 6.13 7.10 5.46 52 TR_XM_DK_Bayes2 19398 3.26 0.26 5.35 53 XM_H_GMP 18963 4.18 2.67 5.23 54 TR_MAX_INTL_RELAY 18747 6.76 9.06 5.17 55 RCVD_IN_MSPIKE_H3 18519 3.91 2.18 5.11 56 RCVD_IN_MSPIKE_WL 18519 3.91 2.18 5.11 57 XM_H_Long_From01 18231 4.16 2.92 5.03 58 T_TooManySym_01 18166 3.54 1.42 5.01 59 BAYES_20 17773 3.60 1.74 4.90 60 HTML_IMAGE_RATIO_02 16535 4.31 3.96 4.56 61 MIME_QP_LONG_LINE 16510 3.43 1.81 4.55 62 XMStrtUSub 16318 3.46 1.98 4.50 63 XM_PDF 15492 2.71 0.47 4.27 64 XM_DK_Undo_02 14165 11.91 23.43 3.91 65 XM_UncommonTLD01 13577 3.71 3.67 3.74 66 MPART_ALT_DIFF 13063 3.60 3.60 3.60 67 TR_XM_SpammyWords4 12937 4.70 6.32 3.57 68 RCVD_IN_VALIDITY_SAFE 12277 2.55 1.35 3.38 69 RCVD_IN_IADB_LISTED 12124 2.20 0.56 3.34 70 XMSubMetaSx_00 11881 3.56 3.97 3.28 71 BAYES_80 11720 4.13 5.42 3.23 72 HTML_IMAGE_RATIO_06 11671 6.83 12.03 3.22 73 T_REMOTE_IMAGE 11359 2.20 0.87 3.13 74 RELAYCOUNTRY_META 10983 5.41 8.83 3.03 75 RCVD_IN_IADB_SPF 10439 1.91 0.52 2.88 76 BOTNET_IPINHOSTNAME 10239 4.40 6.67 2.82 77 T_TooManySym_02 10141 1.76 0.27 2.80 78 RCVD_IN_VALIDITY_CERTIFIED 9903 2.11 1.22 2.73 79 XMNumbers 9629 2.31 1.81 2.65 80 BAYES_05 9592 1.72 0.40 2.64 81 TooManyTo_002 9455 1.68 0.34 2.61 82 BAYES_99 9356 8.93 18.07 2.58 83 RCVD_IN_IADB_SENDERID 9210 1.70 0.51 2.54 84 RCVD_IN_IADB_DK 8944 1.66 0.51 2.47 85 MAILING_LIST_MULTI 8874 2.00 1.36 2.45 86 HTML_MIME_NO_HTML_TAG 8759 1.88 1.10 2.41 87 XM_B_SpammyTLD 8506 2.27 2.16 2.35 88 RCVD_IN_IADB_VOUCHED 8328 1.44 0.20 2.30 89 HTML_IMAGE_RATIO_08 8260 2.07 1.77 2.28 90 DKIM_INVALID 8105 2.57 3.04 2.23 91 XM_Body_Dirty_Words 7535 2.69 3.58 2.08 92 MIME_HTML_ONLY_MULTI 7364 1.99 1.92 2.03 93 INVALID_MSGID 7221 1.23 0.15 1.99 94 BAYES_95 7017 2.51 3.33 1.93 95 BAYES_999 6950 6.77 13.74 1.92 96 XM_CamelCaseFrm001 6630 1.87 1.94 1.83 97 MIME_HTML_MOSTLY 6495 1.87 1.99 1.79 98 TO_MALFORMED 6304 1.03 0.01 1.74 99 XM_B_URI_Unicode 6288 1.76 1.79 1.73 100 T_XMDrugObfuBody_14 6194 2.00 2.42 1.71 101 TR_XM_DKIM_Undo 6021 7.86 16.76 1.66 102 FROM_EXCESS_BASE64 6017 1.49 1.25 1.66 103 URI_NOVOWEL 5997 1.22 0.60 1.65 104 XMDiploma_00 5856 1.56 1.47 1.61 105 TM2_M_URI_OPT_OUT 5810 1.72 1.88 1.60 106 RCVD_IN_IADB_OPTIN 5637 0.97 0.13 1.55 107 XM_DK_Undo_01 5588 1.27 0.89 1.54 108 TR_XM_PhishingBody 5559 1.89 2.39 1.53 109 TR_XM_SpammyRelay 5536 3.55 6.47 1.53 110 TooManyTo_003 5472 1.01 0.29 1.51 111 XM_B_Investor 5382 1.97 2.66 1.48 112 T_XMDrugObfuBody_08 5206 1.70 2.08 1.44 113 TR_XM_UnparsRelay 5034 3.00 5.31 1.39 114 SUBJ_ALL_CAPS 5019 1.27 1.10 1.38 115 XM_SPF_SoftFail 4983 1.49 1.65 1.37 116 TR_Symld_Words 4966 1.04 0.57 1.37 117 IN_HORDE_ADDRESS_BOOK 4753 0.80 0.06 1.31 118 BOTNET 4742 3.01 5.47 1.31 119 URI_HEX 4487 1.15 1.03 1.24 120 UNTRUSTED_Relay 4365 1.98 3.09 1.20 121 HELO_NODOT 4353 0.78 0.16 1.20 122 HELO_NO_DOMAIN 4345 0.77 0.16 1.20 123 XM_SendGrid 4257 1.04 0.84 1.17 124 TR_XM_SpammyWords5 4245 1.52 2.02 1.17 125 XM_GoogleGroups 4188 0.87 0.47 1.15 126 XM_B_Unsub2 4175 1.36 1.65 1.15 127 T_TooManySym_03 4015 0.69 0.08 1.11 128 XMGappySubj_01 4000 0.69 0.09 1.10 129 TooManyTo_004 3985 0.75 0.25 1.10 130 TR_DCC_Bayes_99 3962 6.02 13.10 1.09 131 MIME_CHARSET_FARAWAY 3948 6.99 15.49 1.09 132 XMSexyCombo_05 3937 1.72 2.62 1.09 133 XMCapTrack 3908 0.77 0.34 1.08 134 XMBody_95 3674 0.63 0.09 1.01 135 TVD_SPACE_RATIO 3550 0.64 0.15 0.98 136 XMStockSpam_06 3452 0.97 1.01 0.95 137 CHARSET_FARAWAY_HEADER 3435 6.87 15.38 0.95 138 T_FILL_THIS_FORM_SHORT 3354 1.07 1.27 0.92 139 XMGenDplmaNmb 3351 0.88 0.82 0.92 140 SpammyFromTLD_01 3344 0.95 1.00 0.92 141 TooManyTo_005 3293 0.62 0.20 0.91 142 XM_OfRef6 3167 1.32 1.97 0.87 143 FROM_GOV_DKIM_AU 3063 0.53 0.08 0.84 144 XM_H_Long_From02 2978 0.87 0.95 0.82 145 T_XMDrugObfuBody_00 2914 0.93 1.12 0.80 146 XM_UB50 2853 1.09 1.52 0.79 147 DKIM_ADSP_CUSTOM_MED 2822 0.70 0.59 0.78 148 TR_XM_DK_SendGrid 2664 0.63 0.48 0.73 149 XM_ShortIntro_01 2574 0.52 0.25 0.71 150 RELAYCOUNTRY_CA 2560 1.83 3.44 0.71 151 T_XMHurry_00 2545 0.85 1.07 0.70 152 XM_H_PHPMailer 2462 0.58 0.44 0.68 153 XM_RXBody 2402 0.61 0.54 0.66 154 XMLngstWrd_00 2398 2.99 6.33 0.66 155 XM_B_COPY_HTML 2390 0.68 0.71 0.66 156 HTTPS_HTTP_MISMATCH 2366 0.66 0.66 0.65 157 XMBrknScrpt_02 2358 0.73 0.83 0.65 158 TR_MetaPhish_Combo_01 2272 0.61 0.59 0.63 159 RCVD_IN_PBL 2167 0.60 0.60 0.60 160 XMGappySubj_02 2131 0.36 0.03 0.59 161 XMNoVowels 2020 0.46 0.33 0.56 162 TR_XM_Base64_M1 2018 0.56 0.57 0.56 163 XMPhish30 1996 0.66 0.82 0.55 164 MPART_ALT_DIFF_COUNT 1980 0.60 0.69 0.55 165 TVD_RCVD_IP 1971 0.48 0.39 0.54 166 T_OBFU_PDF_ATTACH 1932 0.36 0.11 0.53 167 XM_B_SpammyWords4 1884 0.94 1.55 0.52 168 RELAYCOUNTRY_AU 1852 0.93 1.54 0.51 169 NML_ADSP_CUSTOM_MED 1825 0.50 0.50 0.50 170 RCVD_IN_BL_SPAMCOP_NET 1796 2.45 5.26 0.50 171 XMMoneyMeta_00 1771 0.50 0.51 0.49 172 TO_NO_BRKTS_HTML_ONLY 1736 0.37 0.23 0.48 173 RELAYCOUNTRY_GB 1716 0.49 0.52 0.47 174 XMSlimDrugH 1707 0.49 0.52 0.47 175 FORGED_GMAIL_RCVD 1704 0.45 0.43 0.47 176 XMPhish14 1679 0.47 0.48 0.46 177 HTML_IMAGE_ONLY_20 1668 0.44 0.42 0.46 178 XM_B_FormFill 1662 0.28 0.01 0.46 179 XMBdyGiftCard01 1652 0.54 0.65 0.46 180 MSGID_FROM_MTA_HEADER 1613 0.29 0.07 0.44 181 HTML_IMAGE_ONLY_32 1593 0.31 0.12 0.44 182 HTML_TAG_BALANCE_BODY 1592 0.50 0.60 0.44 183 XM_B_DNDMA 1556 0.50 0.60 0.43 184 SpammyFromTLD_02 1497 0.76 1.26 0.41 185 XMBody_17 1488 0.75 1.24 0.41 186 XMSubMetaI_00 1482 0.43 0.45 0.41 187 XMSubNoVowel 1434 0.35 0.29 0.40 188 TM2_M_BODY_EMPTY 1403 0.26 0.07 0.39 189 T_Symld_Words_02 1383 0.42 0.46 0.38 190 XMDateMe_00 1380 0.34 0.27 0.38 191 URI_TRY_3LD 1360 0.50 0.67 0.37 192 TR_XM_SpammyWords2 1333 3.01 6.82 0.37 193 LongTLD 1332 0.57 0.87 0.37 194 USER_IN_WHITELIST 1329 0.22 0.00 0.37 195 USER_IN_WELCOMELIST 1329 0.22 0.00 0.37 196 HTML_IMAGE_ONLY_28 1327 0.28 0.15 0.37 197 T_STY_INVIS_DIRECT 1326 0.37 0.38 0.37 198 SHORT_HELO_AND_INLINE_IMAGE 1324 0.22 0.02 0.37 199 XMBSHREFv2 1301 0.31 0.23 0.36 200 XM_URI_RBL 1288 0.82 1.49 0.36 ----------------------------------------------------------------------