Email: 531083 Autolearn: 0 AvgScore: 3.64 AvgScanTime: 1.33 sec Spam: 157413 Autolearn: 0 AvgScore: 14.66 AvgScanTime: 1.42 sec Ham: 373670 Autolearn: 0 AvgScore: -1.00 AvgScanTime: 1.28 sec Time Spent Running SA: 195.56 hours Time Spent Processing Spam: 62.30 hours Time Spent Processing Ham: 133.26 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 152176 89.46 96.67 86.43 2 DKIM_SIGNED 124945 74.39 79.37 72.29 3 XM_DK_Pass 121471 72.08 77.17 69.93 4 DKIM_VALID 117442 69.83 74.61 67.82 5 DCC_CHECK 117034 47.51 74.35 36.20 6 RELAYCOUNTRY_US 115602 77.43 73.44 79.11 7 XM_B_Unicode 109494 67.94 69.56 67.26 8 XMListUnsubscribeExists 105202 53.51 66.83 47.90 9 XM_B_SpammyWords 94121 48.91 59.79 44.33 10 DKIM_VALID_AU 87593 52.37 55.65 50.99 11 XM_DK_Undo_02 65232 17.16 41.44 6.93 12 BAYES_50 62538 50.87 39.73 55.56 13 XM_B_Unicode3 60294 39.37 38.30 39.82 14 LOC_TINY_FONT_1 57794 26.97 36.71 22.87 15 MIME_HTML_ONLY 57338 23.86 36.43 18.57 16 BAYES_99 55168 14.34 35.05 5.62 17 XM_B_SpammyWords2 51297 22.11 32.59 17.70 18 HTML_FONT_LOW_CONTRAST 49059 27.99 31.17 26.65 19 TR_XM_DKIM_Undo 47858 12.45 30.40 4.88 20 FVGT_m_MULTI_ODD 47318 25.52 30.06 23.60 21 DKIM_VALID_EF 46151 26.58 29.32 25.42 22 BAYES_999 41642 11.10 26.45 4.64 23 TR_DCC_Bayes_99 40888 9.17 25.97 2.09 24 T_KAM_HTML_FONT_INVALID 40866 21.09 25.96 19.04 25 DCC_CHECK_NEGATIVE 40317 52.45 25.61 63.75 26 RELAYCOUNTRY_META 37358 9.95 23.73 4.14 27 RCVD_IN_MSPIKE_H2 36231 21.47 23.02 20.82 28 XMSubLong 35604 21.68 22.62 21.28 29 XM_Body_Dirty_Words 33978 14.93 21.59 12.12 30 UNTRUSTED_Relay 30788 6.68 19.56 1.25 31 T_TM2_M_HEADER_IN_MSG 30379 25.99 19.30 28.81 32 RCVD_IN_MSPIKE_WL 29637 25.54 18.83 28.36 33 FSL_BULK_SIG 29123 8.60 18.50 4.43 34 XM_UncommonTLD01 26485 7.32 16.83 3.32 35 BOTNET 23743 5.69 15.08 1.73 36 XM_Multi_Part_URI 23200 12.23 14.74 11.17 37 XM_B_Unsub 20669 12.31 13.13 11.97 38 LOTS_OF_MONEY 19225 8.77 12.21 7.32 39 BOTNET_IPINHOSTNAME 18696 6.83 11.88 4.71 40 RCVD_IN_MSPIKE_H3 18265 14.10 11.60 15.15 41 UNPARSEABLE_RELAY 18214 9.56 11.57 8.72 42 TR_XM_UnparsRelay 17912 8.37 11.38 7.10 43 XMSexyCombo_05 17341 5.54 11.02 3.24 44 TR_XM_SpammyRelay 17307 4.31 10.99 1.49 45 TR_XM_SpammyWords4 16363 5.99 10.39 4.14 46 XM_B_SpammyWords3 16318 5.68 10.37 3.70 47 MPART_ALT_DIFF 15371 6.83 9.76 5.60 48 TR_XM_SpammyWords2 15255 3.44 9.69 0.80 49 SpammyFromTLD_02 13528 2.83 8.59 0.40 50 XM_Evil_Numbers_Gen 13395 7.86 8.51 7.59 51 XM_SendGrid 12587 6.85 8.00 6.37 52 TooManyTo_001 12300 10.02 7.81 10.96 53 HTML_SHORT_LINK_IMG_1 12141 2.30 7.71 0.02 54 XMNumbers 12045 5.00 7.65 3.88 55 HTML_IMAGE_ONLY_08 11960 2.72 7.60 0.66 56 BODY_URI_ONLY 11788 2.23 7.49 0.01 57 XM_UB50 11729 2.76 7.45 0.79 58 HTML_IMAGE_RATIO_02 11576 6.36 7.35 5.95 59 RCVD_IN_BL_SPAMCOP_NET 11480 2.60 7.29 0.62 60 HTML_MIME_NO_HTML_TAG 11454 3.75 7.28 2.26 61 BAYES_80 11320 5.22 7.19 4.38 62 BAYES_60 11180 8.68 7.10 9.35 63 XMSubMetaSx_00 11121 5.78 7.06 5.24 64 RCVD_IN_MSPIKE_H4 10863 10.09 6.90 11.44 65 LotsOfNums_01 10318 8.66 6.55 9.54 66 XM_H_Long_From01 9886 5.46 6.28 5.12 67 GOOG_STO_IMG_NOHTML 9862 1.99 6.27 0.20 68 FROM_SUSPICIOUS_NTLD 9681 1.86 6.15 0.05 69 TR_XM_PhishingBody 9613 4.41 6.11 3.70 70 FROM_SUSPICIOUS_NTLD_FP 9567 1.83 6.08 0.04 71 XM_SPF_SoftFail 9492 3.24 6.03 2.06 72 TR_XM_MaxUnsub 9430 2.40 5.99 0.88 73 MIME_HTML_ONLY_MULTI 8459 3.97 5.37 3.38 74 RCVD_IN_MSPIKE_BL 8390 2.43 5.33 1.21 75 TM2_M_VERY_LONG_WORD 8369 2.70 5.32 1.60 76 MIME_HTML_MOSTLY 8342 3.42 5.30 2.63 77 TR_XM_MSPIKECOMBO 8238 2.39 5.23 1.19 78 XM_UB99 7893 1.49 5.01 0.00 79 XM_B_SpammyTLD 7888 2.96 5.01 2.10 80 SpammyFromTLD_01 7835 2.01 4.98 0.76 81 URI_NOVOWEL 7830 3.77 4.97 3.26 82 TR_XM_DK_SendGrid 7760 4.31 4.93 4.04 83 HDRS_MISSP 7719 1.47 4.90 0.03 84 RELAYCOUNTRY_FR 7516 1.97 4.77 0.79 85 DKIM_INVALID 7503 4.56 4.77 4.47 86 XM_B_Phish_Phrases 7239 3.68 4.60 3.30 87 XMStrtUSub 7237 4.68 4.60 4.72 88 RELAYCOUNTRY_CA 6969 1.89 4.43 0.82 89 TR_XM_SPAMCOP 6332 1.38 4.02 0.27 90 HTML_IMAGE_RATIO_04 6275 5.19 3.99 5.70 91 TM2_M_URI_OPT_OUT 6234 5.09 3.96 5.57 92 BAYES_95 6047 2.86 3.84 2.45 93 XM_B_Investor 6013 2.23 3.82 1.56 94 URIBL_DBL_SPAM 5957 1.14 3.78 0.02 95 MIME_QP_LONG_LINE 5808 7.09 3.69 8.52 96 XM_B_Phish66 5708 2.38 3.63 1.86 97 KHOP_HELO_FCRDNS 5449 2.66 3.46 2.32 98 XM_DIRTYINTL 5351 1.22 3.40 0.30 99 TR_XM_NoHeaderRelay 5249 1.11 3.33 0.17 100 T_REMOTE_IMAGE 5230 3.83 3.32 4.04 101 XM_GoogleGroups 5181 2.09 3.29 1.59 102 SHORT_IMG_SUSP_NTLD 4883 0.92 3.10 0.00 103 RCVD_IN_VALIDITY_SAFE 4850 4.82 3.08 5.55 104 TR_XM_SpammyWords5 4833 1.77 3.07 1.22 105 TR_XM_SpammyWords3 4826 1.30 3.07 0.56 106 XMLngstWrd_00 4777 1.43 3.03 0.75 107 HTML_IMAGE_RATIO_06 4738 3.45 3.01 3.63 108 XMLngstWrd_01 4725 1.38 3.00 0.69 109 RCVD_IN_MSPIKE_L3 4678 1.44 2.97 0.79 110 HTML_TITLE_SUBJ_DIFF 4674 1.10 2.97 0.31 111 XMLngstWrd_02 4648 1.31 2.95 0.62 112 SUBJ_ALL_CAPS 4617 2.04 2.93 1.66 113 PDS_OTHER_BAD_TLD 4598 1.05 2.92 0.26 114 XMLngstWrd_03 4568 1.24 2.90 0.54 115 GOOG_STO_IMG_HTML 4516 0.85 2.87 0.00 116 XMLngstWrd_04 4480 1.17 2.85 0.46 117 UPPERCASE_75_100 4366 1.03 2.77 0.30 118 RCVD_IN_IADB_LISTED 4337 5.05 2.76 6.02 119 T_XMDrugObfuBody_08 4279 1.87 2.72 1.52 120 RELAYCOUNTRY_DE 4240 0.99 2.69 0.27 121 T_XMDrugObfuBody_14 4215 2.16 2.68 1.94 122 DKIM_ADSP_CUSTOM_MED 4191 1.84 2.66 1.50 123 BAYES_40 4172 4.18 2.65 4.83 124 TR_Symld_Words 4163 2.06 2.64 1.82 125 RCVD_IN_VALIDITY_CERTIFIED 4069 4.29 2.58 5.01 126 FORGED_GMAIL_RCVD 4027 1.10 2.56 0.49 127 XMSexyCombo_01 3991 2.00 2.54 1.78 128 RELAYCOUNTRY_RU 3847 0.75 2.44 0.03 129 NML_ADSP_CUSTOM_MED 3825 1.53 2.43 1.15 130 XMDiploma_00 3732 1.65 2.37 1.34 131 JH_SPAMMY_HEADERS 3708 0.70 2.36 0.00 132 XM_OfRef6 3647 1.30 2.32 0.88 133 HTML_IMAGE_RATIO_08 3629 2.56 2.31 2.67 134 RELAYCOUNTRY_NL 3583 0.77 2.28 0.14 135 XM_B_Unsub2 3571 1.73 2.27 1.50 136 XM_UB60 3499 0.71 2.22 0.07 137 RCVD_IN_IADB_SPF 3482 4.39 2.21 5.30 138 XM_BadFromFormat 3433 0.73 2.18 0.11 139 MISSING_HEADERS 3340 0.89 2.12 0.38 140 XM_CamelCaseFrm001 3304 1.77 2.10 1.64 141 XM_H_TOP 3269 0.62 2.08 0.01 142 BAYES_20 3258 3.39 2.07 3.94 143 T_TooManySym_01 3220 4.99 2.05 6.23 144 LONG_JUNK_URI2 3216 0.63 2.04 0.03 145 TR_M_TOP_BAYES 3193 0.60 2.03 0.00 146 XM_UB999 3189 0.60 2.03 0.00 147 XM_DK_Undo_01 3170 1.78 2.01 1.69 148 RELAYCOUNTRY_PL 3141 0.61 2.00 0.03 149 RCVD_IN_IADB_DK 3137 3.80 1.99 4.56 150 TVD_SPACE_RATIO 3127 1.30 1.99 1.01 151 RCVD_IN_IADB_SENDERID 3064 3.92 1.95 4.74 152 DATE_IN_PAST_24_48 3064 0.58 1.95 0.01 153 ALL_TRUSTED 3057 13.57 1.94 18.46 154 XM_B_SpammyWords4 2997 0.89 1.90 0.47 155 TR_XM_SB_Phish 2991 2.05 1.90 2.11 156 MAILING_LIST_MULTI 2983 2.55 1.90 2.82 157 REPLYTO_WITHOUT_TO_CC 2975 0.57 1.89 0.02 158 RCVD_IN_IADB_VOUCHED 2929 3.29 1.86 3.89 159 MultiRelay_CC 2927 0.56 1.86 0.01 160 XM_JunkDunk 2894 0.54 1.84 0.00 161 T_TVD_MIME_EPI 2864 0.55 1.82 0.02 162 HTML_SHORT_CENTER 2811 0.53 1.79 0.00 163 FROM_NTLD_LINKBAIT 2803 0.53 1.78 0.00 164 URI_HEX 2768 1.51 1.76 1.41 165 TR_LOTS_OF_MONEY3 2761 0.75 1.75 0.32 166 XMSubPhish11 2737 1.99 1.74 2.09 167 FROM_EXCESS_BASE64 2678 1.91 1.70 2.00 168 T_XMDrugObfuBody_00 2664 1.31 1.69 1.15 169 XMGappySubj_01 2659 1.47 1.69 1.38 170 USER_IN_DEF_DKIM_WL 2629 8.59 1.67 11.51 171 HTML_IMAGE_ONLY_04 2593 0.52 1.65 0.04 172 XM_URI_RBL 2590 0.57 1.65 0.12 173 HTML_TAG_BALANCE_CENTER 2561 0.51 1.63 0.05 174 XMGappySubj_02 2532 0.64 1.61 0.24 175 RCVD_IN_VALIDITY_RPBL 2489 0.49 1.58 0.03 176 XMBody_17 2445 0.75 1.55 0.42 177 T_FILL_THIS_FORM_SHORT 2433 1.09 1.55 0.90 178 XM_B_COVIDMETA 2430 0.74 1.54 0.40 179 RCVD_IN_MSPIKE_L5 2354 0.46 1.50 0.03 180 XMStockSpam_06 2346 1.29 1.49 1.21 181 TR_XM_COVIDMETA1 2314 0.59 1.47 0.22 182 XM_UB80 2294 0.44 1.46 0.02 183 TR_XM_INV_DKIM 2256 0.70 1.43 0.39 184 BOTNET_NORDNS 2194 0.42 1.39 0.01 185 TR_XM_PHPDW 2192 0.62 1.39 0.29 186 TR_XM_COVIDMETA4 2146 0.63 1.36 0.32 187 RELAYCOUNTRY_AU 2144 0.64 1.36 0.33 188 RELAYCOUNTRY_GB 2142 0.94 1.36 0.77 189 BODY_EMPTY 2123 0.40 1.35 0.00 190 TR_XM_PHPForged 2102 0.58 1.34 0.26 191 TR_XM_FormFill2 2075 0.57 1.32 0.26 192 URIBL_BLACK 2070 0.42 1.32 0.04 193 XM_H_PHPOS 2060 0.57 1.31 0.25 194 BAYES_00 1988 8.58 1.26 11.66 195 HTML_FONT_SIZE_LARGE 1984 0.83 1.26 0.65 196 XMGenDplmaNmb 1983 0.89 1.26 0.73 197 T_XMHurry_00 1952 0.86 1.24 0.70 198 RCVD_IN_PSBL 1945 0.45 1.24 0.12 199 TR_XM_MaxSPIKE 1917 0.45 1.22 0.12 200 MIXED_HREF_CASE 1913 0.36 1.22 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 322949 89.46 96.67 86.43 2 RELAYCOUNTRY_US 295617 77.43 73.44 79.11 3 DKIM_SIGNED 270121 74.39 79.37 72.29 4 XM_DK_Pass 261319 72.08 77.17 69.93 5 DKIM_VALID 253414 69.83 74.61 67.82 6 XM_B_Unicode 251329 67.94 69.56 67.26 7 DCC_CHECK_NEGATIVE 238226 52.45 25.61 63.75 8 BAYES_50 207607 50.87 39.73 55.56 9 DKIM_VALID_AU 190529 52.37 55.65 50.99 10 XMListUnsubscribeExists 178994 53.51 66.83 47.90 11 XM_B_SpammyWords 165636 48.91 59.79 44.33 12 XM_B_Unicode3 148787 39.37 38.30 39.82 13 DCC_CHECK 135275 47.51 74.35 36.20 14 T_TM2_M_HEADER_IN_MSG 107647 25.99 19.30 28.81 15 RCVD_IN_MSPIKE_WL 105988 25.54 18.83 28.36 16 HTML_FONT_LOW_CONTRAST 99593 27.99 31.17 26.65 17 DKIM_VALID_EF 94987 26.58 29.32 25.42 18 FVGT_m_MULTI_ODD 88204 25.52 30.06 23.60 19 LOC_TINY_FONT_1 85458 26.97 36.71 22.87 20 XMSubLong 79519 21.68 22.62 21.28 21 RCVD_IN_MSPIKE_H2 77804 21.47 23.02 20.82 22 T_KAM_HTML_FONT_INVALID 71131 21.09 25.96 19.04 23 MIME_HTML_ONLY 69381 23.86 36.43 18.57 24 ALL_TRUSTED 68997 13.57 1.94 18.46 25 XM_B_SpammyWords2 66122 22.11 32.59 17.70 26 RCVD_IN_MSPIKE_H3 56608 14.10 11.60 15.15 27 XM_Body_Dirty_Words 45291 14.93 21.59 12.12 28 XM_B_Unsub 44720 12.31 13.13 11.97 29 BAYES_00 43560 8.58 1.26 11.66 30 USER_IN_DEF_DKIM_WL 43016 8.59 1.67 11.51 31 RCVD_IN_MSPIKE_H4 42738 10.09 6.90 11.44 32 XM_Multi_Part_URI 41727 12.23 14.74 11.17 33 TooManyTo_001 40939 10.02 7.81 10.96 34 LotsOfNums_01 35648 8.66 6.55 9.54 35 BAYES_60 34925 8.68 7.10 9.35 36 UNPARSEABLE_RELAY 32576 9.56 11.57 8.72 37 MIME_QP_LONG_LINE 31842 7.09 3.69 8.52 38 XM_Evil_Numbers_Gen 28344 7.86 8.51 7.59 39 LOTS_OF_MONEY 27370 8.77 12.21 7.32 40 XM_DKIMWhitelistDomains 26854 5.07 0.04 7.19 41 TR_XM_UnparsRelay 26536 8.37 11.38 7.10 42 XM_DK_Undo_02 25882 17.16 41.44 6.93 43 IN_ZIMBRA_NJ_WHITELIST 24929 4.72 0.07 6.67 44 TR_XM_DK_Bayes 24595 4.79 0.55 6.58 45 TR_XM_DK_Bayes1 23806 4.64 0.52 6.37 46 XM_SendGrid 23802 6.85 8.00 6.37 47 T_TooManySym_01 23265 4.99 2.05 6.23 48 RCVD_IN_IADB_LISTED 22506 5.05 2.76 6.02 49 HTML_IMAGE_RATIO_02 22217 6.36 7.35 5.95 50 HTML_IMAGE_RATIO_04 21305 5.19 3.99 5.70 51 BAYES_99 20984 14.34 35.05 5.62 52 MPART_ALT_DIFF 20913 6.83 9.76 5.60 53 TM2_M_URI_OPT_OUT 20816 5.09 3.96 5.57 54 RCVD_IN_VALIDITY_SAFE 20745 4.82 3.08 5.55 55 TR_XM_DK_Bayes2 20516 3.99 0.43 5.49 56 RCVD_IN_IADB_SPF 19814 4.39 2.21 5.30 57 XMSubMetaSx_00 19568 5.78 7.06 5.24 58 XM_H_Long_From01 19131 5.46 6.28 5.12 59 RCVD_IN_VALIDITY_CERTIFIED 18719 4.29 2.58 5.01 60 TR_XM_DKIM_Undo 18244 12.45 30.40 4.88 61 BAYES_40 18047 4.18 2.65 4.83 62 XM_PDF 18040 3.66 0.90 4.83 63 RCVD_IN_IADB_SENDERID 17729 3.92 1.95 4.74 64 XMStrtUSub 17639 4.68 4.60 4.72 65 BOTNET_IPINHOSTNAME 17599 6.83 11.88 4.71 66 BAYES_999 17326 11.10 26.45 4.64 67 RCVD_IN_IADB_DK 17050 3.80 1.99 4.56 68 DKIM_INVALID 16707 4.56 4.77 4.47 69 FSL_BULK_SIG 16549 8.60 18.50 4.43 70 BAYES_80 16380 5.22 7.19 4.38 71 TR_XM_SpammyWords4 15463 5.99 10.39 4.14 72 RELAYCOUNTRY_META 15459 9.95 23.73 4.14 73 TR_XM_DK_SendGrid 15113 4.31 4.93 4.04 74 T_REMOTE_IMAGE 15108 3.83 3.32 4.04 75 BAYES_20 14729 3.39 2.07 3.94 76 RCVD_IN_IADB_VOUCHED 14525 3.29 1.86 3.89 77 XMNumbers 14490 5.00 7.65 3.88 78 TR_XM_PhishingBody 13832 4.41 6.11 3.70 79 XM_B_SpammyWords3 13828 5.68 10.37 3.70 80 HTML_IMAGE_RATIO_06 13566 3.45 3.01 3.63 81 MIME_HTML_ONLY_MULTI 12630 3.97 5.37 3.38 82 XM_UncommonTLD01 12390 7.32 16.83 3.32 83 XM_B_Phish_Phrases 12320 3.68 4.60 3.30 84 URI_NOVOWEL 12188 3.77 4.97 3.26 85 XMSexyCombo_05 12094 5.54 11.02 3.24 86 ANY_BOUNCE_MESSAGE 11774 2.36 0.47 3.15 87 BOUNCE_MESSAGE 11774 2.36 0.47 3.15 88 T_TooManySym_02 11717 2.43 0.74 3.14 89 XM_H_Trusted_IP 10677 2.01 0.00 2.86 90 MAILING_LIST_MULTI 10547 2.55 1.90 2.82 91 HTML_IMAGE_RATIO_08 9978 2.56 2.31 2.67 92 MIME_HTML_MOSTLY 9814 3.42 5.30 2.63 93 RCVD_IN_IADB_OPTIN 9539 2.13 1.12 2.55 94 BAYES_95 9141 2.86 3.84 2.45 95 KHOP_HELO_FCRDNS 8663 2.66 3.46 2.32 96 HTML_MIME_NO_HTML_TAG 8442 3.75 7.28 2.26 97 BAYES_05 8287 1.88 1.08 2.22 98 TooManyTo_002 8166 1.78 0.81 2.19 99 TR_XM_SB_Phish 7902 2.05 1.90 2.11 100 XM_B_SpammyTLD 7855 2.96 5.01 2.10 101 TR_DCC_Bayes_99 7810 9.17 25.97 2.09 102 XMSubPhish11 7809 1.99 1.74 2.09 103 XM_SPF_SoftFail 7715 3.24 6.03 2.06 104 FROM_EXCESS_BASE64 7487 1.91 1.70 2.00 105 T_XMDrugObfuBody_14 7239 2.16 2.68 1.94 106 IN_HORDE_ADDRESS_BOOK 7042 1.36 0.12 1.88 107 SHORT_URI_3 7014 1.48 0.53 1.88 108 XM_B_Phish66 6937 2.38 3.63 1.86 109 TR_Symld_Words 6798 2.06 2.64 1.82 110 HELO_NODOT 6738 1.43 0.53 1.80 111 HELO_NO_DOMAIN 6736 1.42 0.53 1.80 112 INVALID_MSGID 6656 1.30 0.17 1.78 113 XMSexyCombo_01 6648 2.00 2.54 1.78 114 RCVD_IN_MSPIKE_H5 6642 1.35 0.32 1.78 115 BOTNET 6474 5.69 15.08 1.73 116 XM_DK_Undo_01 6299 1.78 2.01 1.69 117 TVD_RCVD_IP 6259 1.23 0.19 1.68 118 SUBJ_ALL_CAPS 6208 2.04 2.93 1.66 119 MSGID_NOFQDN1 6165 1.19 0.08 1.65 120 TO_MALFORMED 6149 1.19 0.11 1.65 121 XM_CamelCaseFrm001 6119 1.77 2.10 1.64 122 TM2_M_VERY_LONG_WORD 5996 2.70 5.32 1.60 123 XM_GoogleGroups 5934 2.09 3.29 1.59 124 XM_B_Investor 5841 2.23 3.82 1.56 125 T_XMDrugObfuBody_08 5670 1.87 2.72 1.52 126 XM_B_Unsub2 5598 1.73 2.27 1.50 127 DKIM_ADSP_CUSTOM_MED 5589 1.84 2.66 1.50 128 TR_XM_SpammyRelay 5583 4.31 10.99 1.49 129 TooManyTo_003 5540 1.25 0.69 1.48 130 URI_HEX 5276 1.51 1.76 1.41 131 XMGappySubj_01 5158 1.47 1.69 1.38 132 XMDiploma_00 5015 1.65 2.37 1.34 133 UNTRUSTED_Relay 4672 6.68 19.56 1.25 134 XM_H_Long_From02 4557 1.16 1.03 1.22 135 TR_XM_SpammyWords5 4543 1.77 3.07 1.22 136 XMStockSpam_06 4523 1.29 1.49 1.21 137 RCVD_IN_MSPIKE_BL 4510 2.43 5.33 1.21 138 TR_XM_MSPIKECOMBO 4464 2.39 5.23 1.19 139 TM2_M_BODY_EMPTY 4454 0.91 0.24 1.19 140 XMCapTrack 4320 0.89 0.25 1.16 141 NML_ADSP_CUSTOM_MED 4295 1.53 2.43 1.15 142 T_XMDrugObfuBody_00 4288 1.31 1.69 1.15 143 XMPhish30 4193 1.09 1.01 1.12 144 HTML_FONT_FACE_BAD 3940 0.94 0.66 1.05 145 XMBSHREFv2 3894 0.84 0.36 1.04 146 RCVD_IN_RP_SAFE 3888 0.96 0.78 1.04 147 TooManyTo_004 3868 0.91 0.62 1.04 148 SHORT_URI_2 3834 0.87 0.48 1.03 149 TVD_SPACE_RATIO 3792 1.30 1.99 1.01 150 XMSubNoVowel 3772 0.94 0.78 1.01 151 RCVD_IN_RP_CERTIFIED 3597 0.86 0.60 0.96 152 T_FILL_THIS_FORM_SHORT 3355 1.09 1.55 0.90 153 TR_XM_MaxUnsub 3294 2.40 5.99 0.88 154 XM_OfRef6 3274 1.30 2.32 0.88 155 XMEmptyBody_01 3204 0.66 0.20 0.86 156 TooManyTo_005 3199 0.77 0.55 0.86 157 RELAYCOUNTRY_CA 3080 1.89 4.43 0.82 158 TR_XM_SpammyWords2 3002 3.44 9.69 0.80 159 HTTPS_HTTP_MISMATCH 2981 0.87 1.05 0.80 160 RCVD_IN_MSPIKE_L3 2963 1.44 2.97 0.79 161 XM_UB50 2951 2.76 7.45 0.79 162 RELAYCOUNTRY_FR 2941 1.97 4.77 0.79 163 T_TooManySym_03 2900 0.61 0.21 0.78 164 RELAYCOUNTRY_GB 2870 0.94 1.36 0.77 165 SpammyFromTLD_01 2834 2.01 4.98 0.76 166 XMLngstWrd_00 2794 1.43 3.03 0.75 167 XMHTML_After_End 2793 0.88 1.20 0.75 168 XMGenDplmaNmb 2729 0.89 1.26 0.73 169 XM_D_tchamptons_WL 2704 0.51 0.01 0.72 170 T_XMHurry_00 2632 0.86 1.24 0.70 171 XMBrknScrpt_02 2609 0.82 1.10 0.70 172 XMLngstWrd_01 2583 1.38 3.00 0.69 173 XMBody_95 2562 0.53 0.16 0.69 174 HTML_IMAGE_ONLY_08 2472 2.72 7.60 0.66 175 HTML_FONT_SIZE_LARGE 2440 0.83 1.26 0.65 176 XMBdyGiftCard01 2414 0.81 1.19 0.65 177 SHORTENED_URL_HREF 2362 0.52 0.24 0.63 178 TR_MetaPhish_Combo_01 2331 0.73 0.99 0.62 179 HTML_IMAGE_ONLY_20 2319 0.53 0.31 0.62 180 XM_ShortIntro_01 2313 0.59 0.52 0.62 181 RCVD_IN_BL_SPAMCOP_NET 2310 2.60 7.29 0.62 182 XMLngstWrd_02 2304 1.31 2.95 0.62 183 SHORT_HELO_AND_INLINE_IMAGE 2299 0.46 0.09 0.62 184 T_OBFU_PDF_ATTACH 2267 0.50 0.25 0.61 185 FROM_GOV_DKIM_AU 2250 0.46 0.11 0.60 186 XMSubMetaSx_01 2241 0.54 0.41 0.60 187 XM_ProductURIs 2200 0.59 0.60 0.59 188 URI_TRY_3LD 2135 0.72 1.07 0.57 189 TR_XM_SpammyWords3 2084 1.30 3.07 0.56 190 XMLngstWrd_03 2004 1.24 2.90 0.54 191 TR_MSPIKEBAYES00 1957 0.37 0.01 0.52 192 XM_B_COPY_HTML 1955 0.55 0.60 0.52 193 XMNoVowels 1915 0.56 0.67 0.51 194 TM2_M_A_HREF_HREF 1915 0.65 0.98 0.51 195 PLING_QUERY 1892 0.55 0.67 0.51 196 RCVD_IN_SORBS_DUL 1888 0.44 0.28 0.51 197 XMSexyCombo_02 1876 0.49 0.45 0.50 198 FORGED_GMAIL_RCVD 1832 1.10 2.56 0.49 199 XMSubMetaI_00 1815 0.59 0.82 0.49 200 XMPhish14 1787 0.55 0.73 0.48 ----------------------------------------------------------------------