Email: 328263 Autolearn: 0 AvgScore: 1.74 AvgScanTime: 1.28 sec Spam: 94128 Autolearn: 0 AvgScore: 14.41 AvgScanTime: 1.42 sec Ham: 234135 Autolearn: 0 AvgScore: -3.35 AvgScanTime: 1.23 sec Time Spent Running SA: 116.79 hours Time Spent Processing Spam: 37.07 hours Time Spent Processing Ham: 79.71 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 89594 88.23 95.18 85.44 2 DKIM_SIGNED 79757 69.02 84.73 62.70 3 XM_DK_Pass 77672 67.44 82.52 61.37 4 DKIM_VALID 75894 65.78 80.63 59.81 5 RELAYCOUNTRY_US 73502 79.42 78.09 79.95 6 DCC_CHECK 72778 46.47 77.32 34.07 7 XM_B_Unicode 71082 72.52 75.52 71.32 8 XMListUnsubscribeExists 64554 50.64 68.58 43.42 9 XM_B_SpammyWords 63537 54.91 67.50 49.85 10 DKIM_VALID_AU 59195 52.45 62.89 48.25 11 XM_DK_Undo_02 43599 19.50 46.32 8.72 12 XM_B_Unicode3 37536 46.29 39.88 48.86 13 TR_XM_DKIM_Undo 35737 14.92 37.97 5.66 14 BAYES_50 34492 45.00 36.64 48.35 15 LOC_TINY_FONT_1 34433 27.17 36.58 23.39 16 XM_B_SpammyWords2 34357 22.28 36.50 16.56 17 BAYES_99 33974 15.48 36.09 7.19 18 MIME_HTML_ONLY 31772 22.83 33.75 18.43 19 DKIM_VALID_EF 30333 25.63 32.23 22.97 20 HTML_FONT_LOW_CONTRAST 30226 29.19 32.11 28.02 21 BAYES_999 27408 12.59 29.12 5.95 22 FVGT_m_MULTI_ODD 26277 22.73 27.92 20.64 23 TR_DCC_Bayes_99 25667 10.11 27.27 3.21 24 T_KAM_HTML_FONT_INVALID 23348 17.41 24.80 14.44 25 RCVD_IN_MSPIKE_H2 22176 17.93 23.56 15.67 26 XMSubLong 21901 19.61 23.27 18.14 27 DCC_CHECK_NEGATIVE 21313 53.50 22.64 65.91 28 XM_Body_Dirty_Words 20399 15.55 21.67 13.09 29 RELAYCOUNTRY_META 18471 7.39 19.62 2.47 30 RCVD_IN_MSPIKE_WL 17847 23.77 18.96 25.71 31 T_TM2_M_HEADER_IN_MSG 17472 27.58 18.56 31.21 32 BOTNET 15925 5.91 16.92 1.48 33 XM_Multi_Part_URI 15478 12.71 16.44 11.20 34 UNPARSEABLE_RELAY 14501 9.73 15.41 7.44 35 XM_B_Unsub 14431 13.87 15.33 13.28 36 FSL_BULK_SIG 14249 7.78 15.14 4.82 37 TR_XM_UnparsRelay 14179 8.60 15.06 6.00 38 UNTRUSTED_Relay 13107 4.60 13.92 0.85 39 XM_UncommonTLD01 13014 6.55 13.83 3.62 40 MPART_ALT_DIFF 12193 6.61 12.95 4.06 41 TR_XM_SpammyWords2 12047 4.64 12.80 1.36 42 TR_XM_SpammyRelay 12025 4.53 12.78 1.22 43 LOTS_OF_MONEY 11059 14.17 11.75 15.15 44 XM_B_SpammyWords3 10712 6.22 11.38 4.15 45 RCVD_IN_MSPIKE_H3 10707 12.59 11.37 13.07 46 BOTNET_IPINHOSTNAME 9861 6.70 10.48 5.19 47 RCVD_IN_BL_SPAMCOP_NET 9282 3.67 9.86 1.18 48 HTML_IMAGE_RATIO_02 9038 7.48 9.60 6.63 49 TR_XM_SpammyWords4 9009 8.14 9.57 7.56 50 XM_SendGrid 8853 6.59 9.41 5.45 51 XM_Evil_Numbers_Gen 8406 8.74 8.93 8.66 52 XMSexyCombo_05 8374 5.10 8.90 3.57 53 HTML_MIME_NO_HTML_TAG 8007 3.48 8.51 1.47 54 TooManyTo_001 7920 9.07 8.41 9.33 55 TR_XM_MaxUnsub 7345 3.33 7.80 1.53 56 BAYES_60 7164 8.86 7.61 9.36 57 MIME_HTML_MOSTLY 7079 3.68 7.52 2.14 58 XMSubMetaSx_00 7078 6.51 7.52 6.11 59 RCVD_IN_MSPIKE_H4 6937 9.69 7.37 10.63 60 BAYES_80 6858 5.21 7.29 4.37 61 SpammyFromTLD_01 6056 2.07 6.43 0.32 62 XM_UB50 5944 2.20 6.31 0.54 63 RCVD_IN_MSPIKE_BL 5733 2.42 6.09 0.94 64 URI_NOVOWEL 5728 3.23 6.09 2.08 65 TR_XM_MSPIKECOMBO 5673 2.40 6.03 0.94 66 TR_XM_DK_SendGrid 5573 4.34 5.92 3.71 67 RELAYCOUNTRY_CA 5512 2.25 5.86 0.80 68 LotsOfNums_01 5453 7.30 5.79 7.91 69 MIME_HTML_ONLY_MULTI 5102 3.40 5.42 2.59 70 RCVD_IN_VALIDITY_SAFE 5057 5.67 5.37 5.79 71 TR_XM_SPAMCOP 5028 1.83 5.34 0.42 72 SpammyFromTLD_02 4979 1.69 5.29 0.24 73 FROM_SUSPICIOUS_NTLD 4932 1.55 5.24 0.07 74 GOOG_STO_IMG_HTML 4930 1.50 5.24 0.00 75 XM_H_Long_From01 4894 4.53 5.20 4.27 76 HTML_SHORT_LINK_IMG_1 4854 1.49 5.16 0.01 77 FROM_SUSPICIOUS_NTLD_FP 4851 1.52 5.15 0.06 78 HDRS_MISSP 4842 1.48 5.14 0.01 79 XM_B_SpammyTLD 4840 2.67 5.14 1.67 80 TR_XM_PhishingBody 4640 2.89 4.93 2.07 81 XM_B_Phish_Phrases 4616 4.09 4.90 3.76 82 TM2_M_URI_OPT_OUT 4539 6.46 4.82 7.11 83 TR_XM_SpammyWords5 4360 2.28 4.63 1.34 84 TM2_M_VERY_LONG_WORD 4259 2.20 4.52 1.27 85 XM_SPF_SoftFail 4200 12.29 4.46 15.44 86 RCVD_IN_VALIDITY_CERTIFIED 4189 4.84 4.45 4.99 87 HTML_IMAGE_RATIO_04 4036 4.97 4.29 5.24 88 DKIM_INVALID 3863 3.24 4.10 2.89 89 JH_SPAMMY_HEADERS 3835 1.17 4.07 0.00 90 BAYES_95 3797 3.13 4.03 2.76 91 URIBL_DBL_SPAM 3728 1.14 3.96 0.01 92 XMBody_17 3704 1.55 3.94 0.59 93 T_REMOTE_IMAGE 3664 2.95 3.89 2.57 94 PDS_OTHER_BAD_TLD 3580 1.21 3.80 0.17 95 USER_IN_DEF_DKIM_WL 3496 10.92 3.71 13.81 96 SUBJ_ALL_CAPS 3430 4.66 3.64 5.07 97 XM_B_Investor 3325 1.80 3.53 1.10 98 RCVD_IN_MSPIKE_L3 3196 1.43 3.40 0.64 99 TR_XM_SpammyWords3 3160 1.31 3.36 0.48 100 RELAYCOUNTRY_FR 3060 1.02 3.25 0.13 101 XMStrtUSub 2981 4.14 3.17 4.54 102 MIME_QP_LONG_LINE 2923 6.39 3.11 7.71 103 T_XMDrugObfuBody_14 2900 2.44 3.08 2.19 104 XMSexyCombo_01 2849 2.66 3.03 2.51 105 T_FILL_THIS_FORM_SHORT 2840 1.14 3.02 0.39 106 HTML_IMAGE_ONLY_08 2747 0.89 2.92 0.07 107 XMNumbers 2681 3.65 2.85 3.97 108 NO_DNS_FOR_FROM 2621 1.08 2.78 0.40 109 XM_B_Phish66 2571 1.47 2.73 0.96 110 XM_BadFromFormat 2561 0.86 2.72 0.11 111 HTML_IMAGE_ONLY_04 2495 0.78 2.65 0.02 112 T_XMDrugObfuBody_08 2457 1.76 2.61 1.42 113 HTML_SHORT_CENTER 2430 0.74 2.58 0.01 114 TR_LOTS_OF_MONEY3 2406 1.09 2.56 0.51 115 BAYES_40 2341 3.72 2.49 4.21 116 XM_DIRTYINTL 2275 0.86 2.42 0.23 117 LONG_IMG_URI 2242 0.74 2.38 0.08 118 HTML_IMAGE_RATIO_06 2234 3.17 2.37 3.48 119 TR_Caps_n_Bayes_99 2166 1.04 2.30 0.54 120 FROM_NTLD_LINKBAIT 2161 0.66 2.30 0.00 121 SHORT_IMG_SUSP_NTLD 2159 0.66 2.29 0.00 122 ALL_TRUSTED 2158 13.57 2.29 18.11 123 TR_XM_FormFill 2154 0.67 2.29 0.01 124 XM_GoogleGroups 2147 1.45 2.28 1.12 125 XM_CamelCaseFrm001 2105 1.78 2.24 1.60 126 T_XMDrugObfuBody_00 2081 1.09 2.21 0.64 127 XM_OfRef6 2043 1.06 2.17 0.61 128 T_XMHurry_00 2035 0.95 2.16 0.47 129 XM_DK_Undo_01 2022 1.31 2.15 0.97 130 BAYES_00 1975 13.21 2.10 17.68 131 RCVD_IN_MSPIKE_L5 1964 0.62 2.09 0.04 132 XM_B_Unsub2 1960 1.39 2.08 1.12 133 XMLngstWrd_00 1954 1.17 2.08 0.80 134 KHOP_HELO_FCRDNS 1922 6.60 2.04 8.43 135 XMLngstWrd_01 1921 1.11 2.04 0.73 136 XMDiploma_00 1912 1.08 2.03 0.70 137 T_TooManySym_01 1895 5.07 2.01 6.30 138 XM_UB99 1893 0.58 2.01 0.00 139 XMLngstWrd_02 1876 1.01 1.99 0.62 140 RCVD_IN_VALIDITY_RPBL 1869 0.63 1.99 0.09 141 FROM_EXCESS_BASE64 1842 2.64 1.96 2.91 142 TR_XM_PHPDW 1798 0.75 1.91 0.28 143 BAYES_05 1776 2.31 1.89 2.47 144 XMLngstWrd_03 1771 0.90 1.88 0.50 145 URI_TRY_3LD 1753 0.94 1.86 0.57 146 BAYES_20 1744 3.08 1.85 3.58 147 XMLngstWrd_04 1721 0.83 1.83 0.43 148 TR_XM_PHPForged 1705 0.69 1.81 0.24 149 TR_XM_FormFill2 1684 0.68 1.79 0.23 150 XM_H_PHPOS 1672 0.67 1.78 0.23 151 UPPERCASE_75_100 1659 0.59 1.76 0.12 152 HTML_TITLE_SUBJ_DIFF 1655 0.59 1.76 0.12 153 BOTNET_NORDNS 1646 0.51 1.75 0.02 154 XMBrknScrpt_02 1640 1.14 1.74 0.90 155 SHOPIFY_IMG_NOT_RCVD_SFY 1610 0.63 1.71 0.20 156 TR_XM_INV_DKIM 1598 0.89 1.70 0.56 157 MAILING_LIST_MULTI 1563 1.66 1.66 1.67 158 DATE_IN_PAST_06_12 1524 0.49 1.62 0.04 159 TR_Mismatch_TLD_02 1522 0.52 1.62 0.08 160 XM_H_TOP 1518 0.47 1.61 0.01 161 TR_XM_NoHeaderRelay 1516 0.54 1.61 0.11 162 XM_UB60 1512 0.49 1.61 0.04 163 HTML_IMAGE_RATIO_08 1489 10.30 1.58 13.80 164 XMBdyGiftCard01 1485 1.05 1.58 0.84 165 RCVD_IN_IADB_LISTED 1474 3.36 1.57 4.09 166 TR_XM_SB_Phish 1467 1.42 1.56 1.37 167 XM_B_SpammyWords4 1460 1.19 1.55 1.04 168 TR_XM_BayesRelay 1441 0.44 1.53 0.01 169 XM_UB999 1434 0.44 1.52 0.00 170 URI_HEX 1412 1.20 1.50 1.07 171 T_Symld_Words_02 1405 0.60 1.49 0.25 172 XMSubMetaI_00 1390 0.84 1.48 0.59 173 XMSlimDrugH 1384 0.68 1.47 0.36 174 TR_Symld_Words 1287 1.53 1.37 1.60 175 XMStockSpam_06 1263 1.45 1.34 1.49 176 XM_RXBody 1262 0.62 1.34 0.34 177 TM2_M_A_HREF_HREF 1236 0.77 1.31 0.55 178 RCVD_IN_IADB_SPF 1214 2.94 1.29 3.61 179 RELAYCOUNTRY_AU 1199 0.52 1.27 0.21 180 RCVD_IN_PSBL 1188 0.50 1.26 0.19 181 TR_XM_MaxWHORU 1186 0.58 1.26 0.31 182 DKIM_ADSP_CUSTOM_MED 1174 0.84 1.25 0.67 183 RCVD_IN_RP_SAFE 1173 1.15 1.25 1.11 184 SHORT_URI_2 1169 1.85 1.24 2.09 185 HK_RANDOM_REPLYTO 1147 0.40 1.22 0.07 186 TR_XM_MaxSPIKE 1130 0.46 1.20 0.17 187 DIET_1 1115 0.56 1.18 0.31 188 RCVD_IN_IADB_SENDERID 1099 2.66 1.17 3.26 189 BODY_URI_ONLY 1095 0.34 1.16 0.01 190 RCVD_IN_IADB_DK 1095 2.59 1.16 3.17 191 FORGED_GMAIL_RCVD 1067 0.60 1.13 0.38 192 RELAYCOUNTRY_IN 1066 0.36 1.13 0.05 193 XMSubPhish11 1058 1.29 1.12 1.35 194 HTML_TAG_BALANCE_BODY 1053 0.65 1.12 0.47 195 RCVD_IN_IADB_VOUCHED 1031 2.08 1.10 2.47 196 XMSubMetaSSx_00 1031 0.48 1.10 0.23 197 XMHTMLBadTable_001 1027 0.65 1.09 0.47 198 URIBL_BLACK 1022 0.33 1.09 0.03 199 XM_URI_RBL 1016 0.41 1.08 0.14 200 XMPhish30 1013 0.76 1.08 0.63 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 200046 88.23 95.18 85.44 2 RELAYCOUNTRY_US 187192 79.42 78.09 79.95 3 XM_B_Unicode 166975 72.52 75.52 71.32 4 DCC_CHECK_NEGATIVE 154311 53.50 22.64 65.91 5 DKIM_SIGNED 146804 69.02 84.73 62.70 6 XM_DK_Pass 143698 67.44 82.52 61.37 7 DKIM_VALID 140042 65.78 80.63 59.81 8 XM_B_SpammyWords 116724 54.91 67.50 49.85 9 XM_B_Unicode3 114405 46.29 39.88 48.86 10 BAYES_50 113210 45.00 36.64 48.35 11 DKIM_VALID_AU 112979 52.45 62.89 48.25 12 XMListUnsubscribeExists 101670 50.64 68.58 43.42 13 DCC_CHECK 79781 46.47 77.32 34.07 14 T_TM2_M_HEADER_IN_MSG 73067 27.58 18.56 31.21 15 HTML_FONT_LOW_CONTRAST 65601 29.19 32.11 28.02 16 RCVD_IN_MSPIKE_WL 60192 23.77 18.96 25.71 17 LOC_TINY_FONT_1 54754 27.17 36.58 23.39 18 DKIM_VALID_EF 53791 25.63 32.23 22.97 19 FVGT_m_MULTI_ODD 48337 22.73 27.92 20.64 20 IN_ZIMBRA_NJ_WHITELIST 44336 13.53 0.07 18.94 21 MIME_HTML_ONLY 43155 22.83 33.75 18.43 22 XMSubLong 42464 19.61 23.27 18.14 23 ALL_TRUSTED 42397 13.57 2.29 18.11 24 BAYES_00 41404 13.21 2.10 17.68 25 XM_B_SpammyWords2 38778 22.28 36.50 16.56 26 RCVD_IN_MSPIKE_H2 36680 17.93 23.56 15.67 27 XM_SPF_SoftFail 36157 12.29 4.46 15.44 28 LOTS_OF_MONEY 35465 14.17 11.75 15.15 29 HTML_FONT_FACE_BAD 35228 10.94 0.73 15.05 30 T_KAM_HTML_FONT_INVALID 33819 17.41 24.80 14.44 31 USER_IN_DEF_DKIM_WL 32338 10.92 3.71 13.81 32 HTML_IMAGE_RATIO_08 32320 10.30 1.58 13.80 33 XM_B_Unsub 31089 13.87 15.33 13.28 34 XM_Body_Dirty_Words 30639 15.55 21.67 13.09 35 RCVD_IN_MSPIKE_H3 30612 12.59 11.37 13.07 36 XM_Multi_Part_URI 26233 12.71 16.44 11.20 37 RCVD_IN_MSPIKE_H4 24879 9.69 7.37 10.63 38 XM_DKIMWhitelistDomains 23971 7.32 0.04 10.24 39 BAYES_60 21923 8.86 7.61 9.36 40 TooManyTo_001 21848 9.07 8.41 9.33 41 XM_DK_Undo_02 20413 19.50 46.32 8.72 42 XM_Evil_Numbers_Gen 20269 8.74 8.93 8.66 43 KHOP_HELO_FCRDNS 19729 6.60 2.04 8.43 44 LotsOfNums_01 18519 7.30 5.79 7.91 45 FILL_THIS_FORM 18099 5.62 0.36 7.73 46 MIME_QP_LONG_LINE 18058 6.39 3.11 7.71 47 TR_XM_SpammyWords4 17697 8.14 9.57 7.56 48 UNPARSEABLE_RELAY 17431 9.73 15.41 7.44 49 BAYES_99 16838 15.48 36.09 7.19 50 TM2_M_URI_OPT_OUT 16656 6.46 4.82 7.11 51 HTML_IMAGE_RATIO_02 15532 7.48 9.60 6.63 52 T_TooManySym_01 14755 5.07 2.01 6.30 53 XMSubMetaSx_00 14306 6.51 7.52 6.11 54 TR_XM_UnparsRelay 14054 8.60 15.06 6.00 55 BAYES_999 13929 12.59 29.12 5.95 56 TR_XM_DK_Bayes 13854 4.39 0.59 5.92 57 TR_XM_DK_Bayes1 13616 4.32 0.59 5.82 58 RCVD_IN_VALIDITY_SAFE 13545 5.67 5.37 5.79 59 TR_XM_DKIM_Undo 13255 14.92 37.97 5.66 60 XM_SendGrid 12766 6.59 9.41 5.45 61 HTML_IMAGE_RATIO_04 12271 4.97 4.29 5.24 62 TR_XM_DK_Bayes2 12188 3.85 0.48 5.21 63 BOTNET_IPINHOSTNAME 12147 6.70 10.48 5.19 64 SUBJ_ALL_CAPS 11876 4.66 3.64 5.07 65 RCVD_IN_VALIDITY_CERTIFIED 11691 4.84 4.45 4.99 66 FSL_BULK_SIG 11297 7.78 15.14 4.82 67 XMStrtUSub 10624 4.14 3.17 4.54 68 BAYES_80 10241 5.21 7.29 4.37 69 XM_H_Long_From01 9986 4.53 5.20 4.27 70 BAYES_40 9867 3.72 2.49 4.21 71 T_TooManySym_02 9860 3.14 0.47 4.21 72 XM_B_SpammyWords3 9710 6.22 11.38 4.15 73 RCVD_IN_IADB_LISTED 9566 3.36 1.57 4.09 74 MPART_ALT_DIFF 9503 6.61 12.95 4.06 75 XMNumbers 9297 3.65 2.85 3.97 76 XM_B_Phish_Phrases 8802 4.09 4.90 3.76 77 TR_XM_DK_SendGrid 8675 4.34 5.92 3.71 78 XM_UncommonTLD01 8474 6.55 13.83 3.62 79 ANY_BOUNCE_MESSAGE 8457 2.69 0.39 3.61 80 BOUNCE_MESSAGE 8457 2.69 0.39 3.61 81 RCVD_IN_IADB_SPF 8451 2.94 1.29 3.61 82 BAYES_20 8382 3.08 1.85 3.58 83 XMSexyCombo_05 8356 5.10 8.90 3.57 84 HTML_IMAGE_RATIO_06 8159 3.17 2.37 3.48 85 RCVD_IN_IADB_SENDERID 7627 2.66 1.17 3.26 86 TR_DCC_Bayes_99 7515 10.11 27.27 3.21 87 RCVD_IN_IADB_DK 7416 2.59 1.16 3.17 88 INVALID_MSGID 7195 2.23 0.14 3.07 89 MSGID_NOFQDN1 6841 2.09 0.04 2.92 90 FROM_EXCESS_BASE64 6811 2.64 1.96 2.91 91 DKIM_INVALID 6762 3.24 4.10 2.89 92 BAYES_95 6471 3.13 4.03 2.76 93 TVD_RCVD_IP 6195 1.96 0.26 2.65 94 TO_MALFORMED 6107 1.86 0.00 2.61 95 MIME_HTML_ONLY_MULTI 6056 3.40 5.42 2.59 96 T_REMOTE_IMAGE 6011 2.95 3.89 2.57 97 XMSexyCombo_01 5886 2.66 3.03 2.51 98 BAYES_05 5793 2.31 1.89 2.47 99 RELAYCOUNTRY_META 5793 7.39 19.62 2.47 100 RCVD_IN_IADB_VOUCHED 5781 2.08 1.10 2.47 101 XM_H_Trusted_IP 5262 1.60 0.00 2.25 102 T_XMDrugObfuBody_14 5123 2.44 3.08 2.19 103 XM_PDF 5038 1.61 0.27 2.15 104 MIME_HTML_MOSTLY 5010 3.68 7.52 2.14 105 SHORT_URI_2 4890 1.85 1.24 2.09 106 URI_NOVOWEL 4864 3.23 6.09 2.08 107 TR_XM_PhishingBody 4845 2.89 4.93 2.07 108 RCVD_IN_MSPIKE_H5 4701 1.49 0.22 2.01 109 SHORT_URI_3 4339 1.44 0.42 1.85 110 IN_HORDE_ADDRESS_BOOK 4189 1.32 0.15 1.79 111 XMBSHREFv2 4077 1.30 0.20 1.74 112 XM_B_SpammyTLD 3912 2.67 5.14 1.67 113 MAILING_LIST_MULTI 3900 1.66 1.66 1.67 114 RCVD_IN_IADB_OPTIN 3853 1.38 0.72 1.65 115 TR_Symld_Words 3751 1.53 1.37 1.60 116 XM_CamelCaseFrm001 3744 1.78 2.24 1.60 117 XM_E_Blogspot 3690 1.17 0.17 1.58 118 TR_XM_MaxUnsub 3585 3.33 7.80 1.53 119 XMStockSpam_06 3486 1.45 1.34 1.49 120 BOTNET 3461 5.91 16.92 1.48 121 HTML_MIME_NO_HTML_TAG 3432 3.48 8.51 1.47 122 XMGappySubj_01 3344 1.07 0.19 1.43 123 T_XMDrugObfuBody_08 3334 1.76 2.61 1.42 124 XM_H_Long_From02 3300 1.20 0.67 1.41 125 TR_XM_SB_Phish 3199 1.42 1.56 1.37 126 TR_XM_SpammyWords2 3183 4.64 12.80 1.36 127 XMSubPhish11 3171 1.29 1.12 1.35 128 TVD_SPACE_RATIO 3147 1.04 0.28 1.34 129 TR_XM_SpammyWords5 3130 2.28 4.63 1.34 130 TM2_M_VERY_LONG_WORD 2970 2.20 4.52 1.27 131 TR_XM_SpammyRelay 2860 4.53 12.78 1.22 132 RCVD_IN_BL_SPAMCOP_NET 2773 3.67 9.86 1.18 133 XM_GoogleGroups 2621 1.45 2.28 1.12 134 XM_B_Unsub2 2619 1.39 2.08 1.12 135 RCVD_IN_RP_SAFE 2600 1.15 1.25 1.11 136 XM_B_Investor 2568 1.80 3.53 1.10 137 URI_HEX 2515 1.20 1.50 1.07 138 XM_B_SpammyWords4 2430 1.19 1.55 1.04 139 XM_D_tchamptons_WL 2345 0.77 0.19 1.00 140 RCVD_IN_RP_CERTIFIED 2311 0.98 0.96 0.99 141 XM_DK_Undo_01 2265 1.31 2.15 0.97 142 XM_B_Phish66 2258 1.47 2.73 0.96 143 XMSubMetaSx_01 2256 0.85 0.58 0.96 144 TooManyTo_002 2220 0.81 0.46 0.95 145 RCVD_IN_MSPIKE_BL 2199 2.42 6.09 0.94 146 TR_XM_MSPIKECOMBO 2196 2.40 6.03 0.94 147 T_TooManySym_03 2169 0.70 0.14 0.93 148 XMBrknScrpt_02 2115 1.14 1.74 0.90 149 UNTRUSTED_Relay 1996 4.60 13.92 0.85 150 XMSubNoVowel 1987 0.85 0.87 0.85 151 XMBody_95 1982 0.64 0.12 0.85 152 XMBdyGiftCard01 1972 1.05 1.58 0.84 153 XMLngstWrd_00 1883 1.17 2.08 0.80 154 RELAYCOUNTRY_CA 1862 2.25 5.86 0.80 155 XM_B_COVIDMETA 1770 0.78 0.84 0.76 156 XMLngstWrd_01 1712 1.11 2.04 0.73 157 XMSexyCombo_02 1697 0.67 0.53 0.72 158 SHORTENED_URL_HREF 1669 0.58 0.27 0.71 159 XMDiploma_00 1632 1.08 2.03 0.70 160 DKIM_ADSP_CUSTOM_MED 1569 0.84 1.25 0.67 161 TooManyTo_003 1509 0.57 0.39 0.64 162 RCVD_IN_MSPIKE_L3 1507 1.43 3.40 0.64 163 XM_B_COPY_HTML 1504 0.68 0.77 0.64 164 T_XMDrugObfuBody_00 1496 1.09 2.21 0.64 165 XMPhish30 1477 0.76 1.08 0.63 166 USER_IN_WELCOMELIST 1441 0.44 0.00 0.62 167 USER_IN_WHITELIST 1441 0.44 0.00 0.62 168 XMLngstWrd_02 1440 1.01 1.99 0.62 169 XM_OfRef6 1439 1.06 2.17 0.61 170 HTTPS_HTTP_MISMATCH 1396 0.72 1.02 0.60 171 XMSubMetaI_00 1377 0.84 1.48 0.59 172 XMBody_17 1371 1.55 3.94 0.59 173 URI_TRY_3LD 1334 0.94 1.86 0.57 174 RDNS_DYNAMIC 1330 0.57 0.56 0.57 175 HTML_IMAGE_ONLY_20 1325 0.52 0.40 0.57 176 TR_MetaPhish_Combo_01 1323 0.57 0.57 0.57 177 TR_XM_INV_DKIM 1321 0.89 1.70 0.56 178 MPART_ALT_DIFF_COUNT 1299 0.62 0.79 0.55 179 TM2_M_A_HREF_HREF 1285 0.77 1.31 0.55 180 XM_UB50 1269 2.20 6.31 0.54 181 TR_Caps_n_Bayes_99 1255 1.04 2.30 0.54 182 XM_shorewaves_Whitelist 1212 0.37 0.00 0.52 183 TR_LOTS_OF_MONEY3 1185 1.09 2.56 0.51 184 XMLngstWrd_03 1175 0.90 1.88 0.50 185 TooManyTo_004 1153 0.45 0.34 0.49 186 TR_XM_SpammyWords3 1125 1.31 3.36 0.48 187 TR_MSPIKEBAYES00 1103 0.34 0.01 0.47 188 DKIM_ADSP_NXDOMAIN 1102 0.47 0.47 0.47 189 T_XMHurry_00 1093 0.95 2.16 0.47 190 XMHTMLBadTable_001 1091 0.65 1.09 0.47 191 HTML_TAG_BALANCE_BODY 1089 0.65 1.12 0.47 192 XMHTML_After_End 1088 0.62 1.01 0.46 193 RELAYCOUNTRY_GB 1063 0.58 0.89 0.45 194 DATE_IN_PAST_03_06 1036 0.54 0.79 0.44 195 XMLngstWrd_04 1011 0.83 1.83 0.43 196 XM_ProductURIs 1004 0.49 0.64 0.43 197 TR_XM_SPAMCOP 974 1.83 5.34 0.42 198 TooManyTo_005 966 0.39 0.32 0.41 199 XM_H_PHPMailer 941 0.59 1.06 0.40 200 T_TooManySym_04 940 0.30 0.05 0.40 ----------------------------------------------------------------------