Email: 473551 Autolearn: 0 AvgScore: 3.56 AvgScanTime: 1.38 sec Spam: 143777 Autolearn: 0 AvgScore: 14.64 AvgScanTime: 1.55 sec Ham: 329774 Autolearn: 0 AvgScore: -1.27 AvgScanTime: 1.31 sec Time Spent Running SA: 181.78 hours Time Spent Processing Spam: 61.71 hours Time Spent Processing Ham: 120.08 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 135555 87.51 94.28 84.56 2 DKIM_SIGNED 123075 76.00 85.60 71.81 3 XM_DK_Pass 119904 74.59 83.40 70.75 4 DKIM_VALID 118867 73.81 82.67 69.94 5 RELAYCOUNTRY_US 118353 80.60 82.32 79.86 6 XM_B_Unicode 117269 73.68 81.56 70.24 7 DCC_CHECK 99414 42.26 69.14 30.54 8 XM_B_SpammyWords 96175 49.37 66.89 41.73 9 XMListUnsubscribeExists 90947 51.43 63.26 46.27 10 DKIM_VALID_AU 86779 54.69 60.36 52.22 11 XM_DK_Undo_02 65206 18.64 45.35 7.00 12 XM_B_Unicode3 62543 41.52 43.50 40.66 13 BAYES_50 57396 51.02 39.92 55.86 14 XM_B_SpammyWords2 55905 24.13 38.88 17.70 15 TR_XM_DKIM_Undo 52881 14.66 36.78 5.01 16 LOC_TINY_FONT_1 50761 26.31 35.31 22.39 17 BAYES_99 49539 14.56 34.46 5.89 18 HTML_FONT_LOW_CONTRAST 48139 27.47 33.48 24.85 19 FVGT_m_MULTI_ODD 47692 26.14 33.17 23.08 20 MIME_HTML_ONLY 46325 23.82 32.22 20.16 21 DKIM_VALID_EF 45577 27.90 31.70 26.24 22 DCC_CHECK_NEGATIVE 44320 57.70 30.83 69.42 23 T_KAM_HTML_FONT_INVALID 39414 21.21 27.41 18.51 24 BAYES_999 39360 11.69 27.38 4.85 25 RCVD_IN_MSPIKE_H2 36580 22.91 25.44 21.80 26 T_TM2_M_HEADER_IN_MSG 35636 26.39 24.79 27.09 27 TR_DCC_Bayes_99 34043 8.45 23.68 1.82 28 RCVD_IN_MSPIKE_WL 32092 26.96 22.32 28.98 29 XM_Body_Dirty_Words 31945 14.58 22.22 11.25 30 XMSubLong 31200 21.32 21.70 21.15 31 XM_Multi_Part_URI 28351 14.01 19.72 11.52 32 RELAYCOUNTRY_META 26932 8.07 18.73 3.43 33 XM_B_Unsub 26109 11.76 18.16 8.97 34 TR_XM_BayesUnsub 25371 10.29 17.65 7.08 35 LOTS_OF_MONEY 23568 10.73 16.39 8.26 36 UNPARSEABLE_RELAY 21344 9.73 14.85 7.50 37 TR_XM_UnparsRelay 21013 8.65 14.61 6.05 38 FSL_BULK_SIG 20966 6.44 14.58 2.90 39 BOTNET_IPINHOSTNAME 20923 7.66 14.55 4.66 40 TR_XM_SpammyWords4 20277 7.69 14.10 4.89 41 RCVD_IN_MSPIKE_H3 19886 15.36 13.83 16.03 42 XM_B_SpammyWords3 18505 6.82 12.87 4.18 43 BOTNET 18152 4.83 12.63 1.43 44 TR_XM_SpammyWords2 17059 4.29 11.86 0.99 45 RCVD_IN_BL_SPAMCOP_NET 16867 4.02 11.73 0.66 46 HTML_IMAGE_RATIO_02 15679 7.04 10.91 5.35 47 XMSexyCombo_05 15327 5.78 10.66 3.65 48 TR_XM_SpammyRelay 14496 4.08 10.08 1.46 49 UNTRUSTED_Relay 13239 3.65 9.21 1.22 50 BAYES_80 13080 5.83 9.10 4.40 51 RCVD_IN_MSPIKE_BL 12686 3.60 8.82 1.32 52 TR_XM_MSPIKECOMBO 12607 3.58 8.77 1.32 53 XM_Evil_Numbers_Gen 12517 7.92 8.71 7.58 54 XM_SendGrid 12010 6.18 8.35 5.23 55 RCVD_IN_MSPIKE_H4 11675 10.23 8.12 11.15 56 BAYES_60 11079 9.02 7.71 9.59 57 XM_B_Phish_Phrases 10498 4.60 7.30 3.43 58 LotsOfNums_01 10497 8.65 7.30 9.23 59 XM_UncommonTLD01 10019 4.79 6.97 3.84 60 TR_XM_PhishingBody 10009 4.33 6.96 3.18 61 MPART_ALT_DIFF 9377 6.15 6.52 5.99 62 XM_H_Long_From01 9264 5.44 6.44 5.00 63 RELAYCOUNTRY_CA 9263 2.67 6.44 1.03 64 XM_B_SpammyTLD 8889 5.39 6.18 5.05 65 XMSubMetaSx_00 8828 4.14 6.14 3.27 66 TR_XM_SPAMCOP 8222 1.85 5.72 0.16 67 TR_XM_DK_SendGrid 7875 3.98 5.48 3.32 68 XM_B_Investor 7599 2.69 5.29 1.56 69 RCVD_IN_VALIDITY_RPBL 7369 1.61 5.13 0.07 70 BAYES_95 7214 3.39 5.02 2.69 71 RCVD_IN_MSPIKE_L5 7144 1.52 4.97 0.02 72 T_XMDrugObfuBody_14 6989 2.66 4.86 1.70 73 T_REMOTE_IMAGE 6744 3.92 4.69 3.58 74 TooManyTo_001 6551 6.87 4.56 7.88 75 TR_XM_SpammyWords5 6424 2.26 4.47 1.30 76 XM_B_Phish66 6371 2.64 4.43 1.86 77 XMStrtUSub 6296 3.98 4.38 3.80 78 XM_UB50 6218 1.86 4.32 0.79 79 HTML_IMAGE_RATIO_04 6129 5.42 4.26 5.92 80 XM_SPF_SoftFail 6039 2.49 4.20 1.74 81 RCVD_IN_PSBL 5944 1.37 4.13 0.17 82 HTML_MIME_NO_HTML_TAG 5877 2.67 4.09 2.05 83 TR_XM_SpammyWords3 5826 1.61 4.05 0.54 84 TM2_M_VERY_LONG_WORD 5514 2.11 3.84 1.36 85 XMNumbers 5473 3.46 3.81 3.31 86 KHOP_HELO_FCRDNS 5430 1.94 3.78 1.13 87 MIME_HTML_ONLY_MULTI 5425 4.05 3.77 4.17 88 XM_DIRTYINTL 5331 1.42 3.71 0.42 89 RCVD_IN_VALIDITY_SAFE 5280 4.25 3.67 4.50 90 SpammyFromTLD_01 4964 1.56 3.45 0.74 91 T_XMDrugObfuBody_08 4895 1.90 3.40 1.25 92 HTML_IMAGE_RATIO_06 4736 3.39 3.29 3.43 93 RCVD_IN_MSPIKE_L3 4593 1.86 3.19 1.27 94 MIME_HTML_MOSTLY 4586 2.55 3.19 2.27 95 RCVD_IN_VALIDITY_CERTIFIED 4498 3.71 3.13 3.96 96 SUBJ_ALL_CAPS 4479 2.10 3.12 1.65 97 TR_Mismatch_TLD_01 4436 1.10 3.09 0.23 98 PDS_OTHER_BAD_TLD 4423 1.05 3.08 0.17 99 TM2_M_URI_OPT_OUT 4358 3.15 3.03 3.20 100 XM_DK_Undo_01 4241 1.93 2.95 1.49 101 URIBL_DBL_SPAM 4220 0.90 2.94 0.01 102 MIME_QP_LONG_LINE 4213 4.61 2.93 5.34 103 DKIM_INVALID 4208 2.19 2.93 1.87 104 XM_OfRef6 4199 1.53 2.92 0.93 105 XM_B_COVIDMETA 4181 1.40 2.91 0.74 106 T_TooManySym_01 4140 4.92 2.88 5.81 107 HTML_IMAGE_RATIO_08 4109 2.37 2.86 2.16 108 T_FILL_THIS_FORM_SHORT 4071 1.40 2.83 0.78 109 XM_B_Unsub2 3951 1.61 2.75 1.12 110 XMBody_17 3850 1.19 2.68 0.55 111 RCVD_IN_IADB_LISTED 3830 4.50 2.66 5.30 112 TR_XM_MSPIKECOMBO2 3616 0.93 2.52 0.24 113 T_XMHurry_00 3543 1.22 2.46 0.67 114 XM_CamelCaseFrm001 3493 1.96 2.43 1.76 115 BOTNET_NORDNS 3361 0.72 2.34 0.01 116 XMSexyCombo_01 3331 1.22 2.32 0.74 117 XM_B_SpammyWords4 3329 1.15 2.32 0.64 118 URI_PHP_REDIR 3202 0.68 2.23 0.00 119 RCVD_IN_IADB_SPF 3187 3.96 2.22 4.72 120 USER_IN_DEF_DKIM_WL 3184 8.78 2.21 11.65 121 TR_LOTS_OF_MONEY3 3167 0.94 2.20 0.39 122 XMDiploma_00 3071 1.38 2.14 1.05 123 TR_XM_SB_Phish 3015 2.02 2.10 1.99 124 XM_H_Undi_Recip 2984 0.76 2.08 0.18 125 RCVD_IN_IADB_DK 2891 3.46 2.01 4.09 126 RCVD_IN_IADB_SENDERID 2817 3.56 1.96 4.26 127 XMSubPhish11 2793 1.96 1.94 1.97 128 URI_NOVOWEL 2748 2.35 1.91 2.54 129 DATE_IN_PAST_03_06 2721 0.72 1.89 0.21 130 HOSTED_IMG_DIRECT_MX 2646 0.56 1.84 0.00 131 XM_UB99 2607 0.55 1.81 0.00 132 ALL_TRUSTED 2593 12.82 1.80 17.63 133 HTML_IMAGE_ONLY_08 2546 0.62 1.77 0.11 134 TR_XM_MaxSPIKE 2539 0.70 1.77 0.24 135 RELAYCOUNTRY_DE 2496 0.77 1.74 0.34 136 T_XMDrugObfuBody_00 2485 1.03 1.73 0.72 137 FROM_EXCESS_BASE64 2470 2.19 1.72 2.40 138 XMHTML_After_End 2460 1.00 1.71 0.69 139 XM_H_Long_From02 2428 1.22 1.69 1.01 140 MAILING_LIST_MULTI 2411 2.25 1.68 2.49 141 ANY_BOUNCE_MESSAGE 2404 2.47 1.67 2.82 142 BOUNCE_MESSAGE 2403 2.47 1.67 2.82 143 RCVD_IN_IADB_VOUCHED 2374 2.82 1.65 3.33 144 BAYES_40 2350 4.12 1.63 5.20 145 URI_HEX 2281 1.45 1.59 1.39 146 HTML_TAG_BALANCE_BODY 2274 0.97 1.58 0.71 147 BODY_URI_ONLY 2264 0.49 1.57 0.01 148 TR_XM_PHPDW 2242 0.77 1.56 0.43 149 TR_XM_BayesRelay 2226 0.47 1.55 0.00 150 DIET_1 2219 0.83 1.54 0.52 151 XMStockSpam_06 2198 1.35 1.53 1.27 152 TR_XM_PHPForged 2174 0.72 1.51 0.38 153 URI_TRY_3LD 2149 0.86 1.49 0.59 154 TR_XM_FormFill2 2144 0.72 1.49 0.38 155 XM_URI_RBL 2128 0.53 1.48 0.12 156 SpammyFromTLD_02 2117 0.71 1.47 0.38 157 XM_H_PHPOS 2116 0.70 1.47 0.36 158 XM_UB999 2104 0.45 1.46 0.00 159 XM_Body_Dirty_Words_01 2103 0.58 1.46 0.19 160 TR_XM_COVIDMETA4 2068 0.58 1.44 0.20 161 URIBL_BLACK 2054 0.47 1.43 0.06 162 TR_XM_FormFill 2029 0.43 1.41 0.01 163 XMBrknScrpt_02 1995 0.80 1.39 0.54 164 TR_XM_COVIDMETA1 1990 0.60 1.38 0.26 165 TR_BOTNET_NEGATE 1987 0.65 1.38 0.32 166 RELAYCOUNTRY_AU 1942 0.63 1.35 0.32 167 T_XMDrugObfuBody_13 1926 0.41 1.34 0.01 168 HTML_TAG_BALANCE_CENTER 1864 0.47 1.30 0.11 169 HTTPS_HTTP_MISMATCH 1860 0.83 1.29 0.63 170 TR_Symld_Words 1858 1.58 1.29 1.70 171 XM_B_SEO 1820 0.49 1.27 0.15 172 TR_XM_NoHeaderRelay 1816 0.46 1.26 0.11 173 XMGenDplmaNmb 1799 0.79 1.25 0.58 174 TR_Mismatch_TLD_02 1751 0.42 1.22 0.08 175 XMBdyGiftCard01 1741 0.84 1.21 0.68 176 MIXED_CENTER_CASE 1721 0.37 1.20 0.00 177 HTML_FONT_SIZE_LARGE 1704 0.41 1.19 0.08 178 MIXED_HREF_CASE 1701 0.36 1.18 0.00 179 MIXED_IMG_CASE 1686 0.36 1.17 0.00 180 HK_RANDOM_REPLYTO 1685 0.41 1.17 0.08 181 MIXED_AREA_CASE 1684 0.36 1.17 0.00 182 RELAYCOUNTRY_UA 1676 0.36 1.17 0.01 183 XM_B_DNDMA 1672 0.59 1.16 0.33 184 MIXED_FONT_CASE 1660 0.35 1.15 0.00 185 TR_Caps_n_Bayes_99 1656 0.40 1.15 0.07 186 URI_GOOG_STO_SPAMMY 1646 0.35 1.14 0.00 187 FACEBOOK_IMG_NOT_RCVD_FB 1627 0.35 1.13 0.02 188 READY_TO_SHIP 1622 0.35 1.13 0.01 189 HTML_FONT_FACE_BAD 1608 1.69 1.12 1.94 190 YOUR_DELIVERY_ADDRESS 1605 0.34 1.12 0.01 191 HTML_SHORT_LINK_IMG_1 1591 0.35 1.11 0.01 192 MONEY_NOHTML 1588 0.41 1.10 0.10 193 TR_Sbj_FN_Bdy 1585 0.42 1.10 0.13 194 XM_UB60 1578 0.38 1.10 0.07 195 TR_XM_SEO4 1577 0.39 1.10 0.09 196 XMPhish30 1570 0.85 1.09 0.74 197 XMLngstWrd_00 1562 0.63 1.09 0.43 198 XMSubMetaSxObfu_03 1552 0.61 1.08 0.41 199 TR_XM_Undi_Recip11 1543 0.37 1.07 0.06 200 DRUGS_ERECTILE 1538 0.39 1.07 0.10 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 278863 87.51 94.28 84.56 2 RELAYCOUNTRY_US 263351 80.60 82.32 79.86 3 DKIM_SIGNED 236814 76.00 85.60 71.81 4 XM_DK_Pass 233309 74.59 83.40 70.75 5 XM_B_Unicode 231621 73.68 81.56 70.24 6 DKIM_VALID 230647 73.81 82.67 69.94 7 DCC_CHECK_NEGATIVE 228931 57.70 30.83 69.42 8 BAYES_50 184202 51.02 39.92 55.86 9 DKIM_VALID_AU 172209 54.69 60.36 52.22 10 XMListUnsubscribeExists 152602 51.43 63.26 46.27 11 XM_B_SpammyWords 137610 49.37 66.89 41.73 12 XM_B_Unicode3 134087 41.52 43.50 40.66 13 DCC_CHECK 100712 42.26 69.14 30.54 14 RCVD_IN_MSPIKE_WL 95570 26.96 22.32 28.98 15 T_TM2_M_HEADER_IN_MSG 89350 26.39 24.79 27.09 16 DKIM_VALID_EF 86544 27.90 31.70 26.24 17 HTML_FONT_LOW_CONTRAST 81948 27.47 33.48 24.85 18 FVGT_m_MULTI_ODD 76117 26.14 33.17 23.08 19 LOC_TINY_FONT_1 73838 26.31 35.31 22.39 20 RCVD_IN_MSPIKE_H2 71907 22.91 25.44 21.80 21 XMSubLong 69760 21.32 21.70 21.15 22 MIME_HTML_ONLY 66491 23.82 32.22 20.16 23 T_KAM_HTML_FONT_INVALID 61046 21.21 27.41 18.51 24 XM_B_SpammyWords2 58382 24.13 38.88 17.70 25 ALL_TRUSTED 58129 12.82 1.80 17.63 26 RCVD_IN_MSPIKE_H3 52855 15.36 13.83 16.03 27 USER_IN_DEF_DKIM_WL 38416 8.78 2.21 11.65 28 XM_Multi_Part_URI 38004 14.01 19.72 11.52 29 XM_Body_Dirty_Words 37110 14.58 22.22 11.25 30 RCVD_IN_MSPIKE_H4 36776 10.23 8.12 11.15 31 BAYES_00 31873 6.94 0.68 9.67 32 BAYES_60 31621 9.02 7.71 9.59 33 LotsOfNums_01 30446 8.65 7.30 9.23 34 XM_B_Unsub 29570 11.76 18.16 8.97 35 LOTS_OF_MONEY 27249 10.73 16.39 8.26 36 XM_DKIMWhitelistDomains 26061 5.51 0.03 7.90 37 TooManyTo_001 25979 6.87 4.56 7.88 38 XM_Evil_Numbers_Gen 25001 7.92 8.71 7.58 39 UNPARSEABLE_RELAY 24720 9.73 14.85 7.50 40 TR_XM_BayesUnsub 23346 10.29 17.65 7.08 41 XM_DK_Undo_02 23075 18.64 45.35 7.00 42 IN_ZIMBRA_NJ_WHITELIST 21797 4.65 0.15 6.61 43 TR_XM_UnparsRelay 19966 8.65 14.61 6.05 44 MPART_ALT_DIFF 19761 6.15 6.52 5.99 45 HTML_IMAGE_RATIO_04 19526 5.42 4.26 5.92 46 BAYES_99 19424 14.56 34.46 5.89 47 TR_XM_DK_Bayes 19176 4.21 0.54 5.81 48 T_TooManySym_01 19146 4.92 2.88 5.81 49 TR_XM_DK_Bayes1 18845 4.14 0.54 5.71 50 HTML_IMAGE_RATIO_02 17642 7.04 10.91 5.35 51 MIME_QP_LONG_LINE 17617 4.61 2.93 5.34 52 RCVD_IN_IADB_LISTED 17486 4.50 2.66 5.30 53 XM_SendGrid 17243 6.18 8.35 5.23 54 BAYES_40 17138 4.12 1.63 5.20 55 XM_B_SpammyTLD 16642 5.39 6.18 5.05 56 TR_XM_DKIM_Undo 16532 14.66 36.78 5.01 57 XM_H_Long_From01 16487 5.44 6.44 5.00 58 XM_H_Trusted_IP 16337 3.45 0.00 4.95 59 TR_XM_SpammyWords4 16142 7.69 14.10 4.89 60 BAYES_999 15978 11.69 27.38 4.85 61 TR_XM_DK_Bayes2 15795 3.45 0.38 4.79 62 XM_PDF 15754 3.58 0.82 4.78 63 RCVD_IN_IADB_SPF 15568 3.96 2.22 4.72 64 BOTNET_IPINHOSTNAME 15359 7.66 14.55 4.66 65 RCVD_IN_VALIDITY_SAFE 14852 4.25 3.67 4.50 66 BAYES_80 14509 5.83 9.10 4.40 67 RCVD_IN_IADB_SENDERID 14039 3.56 1.96 4.26 68 XM_B_SpammyWords3 13776 6.82 12.87 4.18 69 MIME_HTML_ONLY_MULTI 13762 4.05 3.77 4.17 70 BAYES_20 13753 3.21 1.01 4.17 71 RCVD_IN_IADB_DK 13490 3.46 2.01 4.09 72 RCVD_IN_VALIDITY_CERTIFIED 13072 3.71 3.13 3.96 73 XM_UncommonTLD01 12658 4.79 6.97 3.84 74 XMStrtUSub 12535 3.98 4.38 3.80 75 XMSexyCombo_05 12041 5.78 10.66 3.65 76 T_REMOTE_IMAGE 11802 3.92 4.69 3.58 77 HTML_IMAGE_RATIO_06 11325 3.39 3.29 3.43 78 RELAYCOUNTRY_META 11305 8.07 18.73 3.43 79 XM_B_Phish_Phrases 11303 4.60 7.30 3.43 80 RCVD_IN_IADB_VOUCHED 10978 2.82 1.65 3.33 81 TR_XM_DK_SendGrid 10960 3.98 5.48 3.32 82 XMNumbers 10917 3.46 3.81 3.31 83 T_TooManySym_02 10803 2.54 0.84 3.28 84 XMSubMetaSx_00 10798 4.14 6.14 3.27 85 TM2_M_URI_OPT_OUT 10558 3.15 3.03 3.20 86 TR_XM_PhishingBody 10488 4.33 6.96 3.18 87 T_HTML_ATTACH 9607 2.05 0.06 2.91 88 FSL_BULK_SIG 9552 6.44 14.58 2.90 89 ANY_BOUNCE_MESSAGE 9290 2.47 1.67 2.82 90 BOUNCE_MESSAGE 9288 2.47 1.67 2.82 91 BAYES_95 8858 3.39 5.02 2.69 92 BAYES_05 8393 1.92 0.48 2.55 93 URI_NOVOWEL 8390 2.35 1.91 2.54 94 MAILING_LIST_MULTI 8224 2.25 1.68 2.49 95 FROM_EXCESS_BASE64 7921 2.19 1.72 2.40 96 MIME_HTML_MOSTLY 7493 2.55 3.19 2.27 97 RCVD_IN_IADB_OPTIN 7269 1.85 1.04 2.20 98 HTML_IMAGE_RATIO_08 7136 2.37 2.86 2.16 99 TooManyTo_002 6890 1.69 0.77 2.09 100 HTML_MIME_NO_HTML_TAG 6776 2.67 4.09 2.05 101 INVALID_MSGID 6666 1.47 0.21 2.02 102 TR_XM_SB_Phish 6549 2.02 2.10 1.99 103 XMSubPhish11 6501 1.96 1.94 1.97 104 HTML_FONT_FACE_BAD 6383 1.69 1.12 1.94 105 DKIM_INVALID 6167 2.19 2.93 1.87 106 XM_B_Phish66 6150 2.64 4.43 1.86 107 IN_HORDE_ADDRESS_BOOK 6079 1.35 0.22 1.84 108 TR_DCC_Bayes_99 5987 8.45 23.68 1.82 109 RCVD_IN_MSPIKE_H5 5939 1.37 0.37 1.80 110 XM_CamelCaseFrm001 5801 1.96 2.43 1.76 111 TO_MALFORMED 5793 1.23 0.02 1.76 112 XM_SPF_SoftFail 5741 2.49 4.20 1.74 113 TR_Symld_Words 5611 1.58 1.29 1.70 114 T_XMDrugObfuBody_14 5598 2.66 4.86 1.70 115 TVD_RCVD_IP 5594 1.26 0.27 1.70 116 SUBJ_ALL_CAPS 5449 2.10 3.12 1.65 117 XM_B_Investor 5136 2.69 5.29 1.56 118 XM_DK_Undo_01 4909 1.93 2.95 1.49 119 HELO_NODOT 4863 1.18 0.51 1.47 120 HELO_NO_DOMAIN 4861 1.18 0.51 1.47 121 TR_XM_SpammyRelay 4812 4.08 10.08 1.46 122 BOTNET 4702 4.83 12.63 1.43 123 URI_HEX 4569 1.45 1.59 1.39 124 TooManyTo_003 4544 1.17 0.70 1.38 125 XMSubNoVowel 4475 1.24 0.97 1.36 126 TM2_M_VERY_LONG_WORD 4472 2.11 3.84 1.36 127 XMGappySubj_01 4394 0.96 0.11 1.33 128 RCVD_IN_MSPIKE_BL 4359 3.60 8.82 1.32 129 TR_XM_MSPIKECOMBO 4349 3.58 8.77 1.32 130 TR_XM_SpammyWords5 4291 2.26 4.47 1.30 131 XM_GoogleGroups 4204 1.07 0.59 1.27 132 RCVD_IN_MSPIKE_L3 4202 1.86 3.19 1.27 133 XMStockSpam_06 4186 1.35 1.53 1.27 134 T_XMDrugObfuBody_08 4119 1.90 3.40 1.25 135 XMBSHREFv2 4075 0.93 0.23 1.24 136 UNTRUSTED_Relay 4034 3.65 9.21 1.22 137 KHOP_HELO_FCRDNS 3737 1.94 3.78 1.13 138 XM_B_Unsub2 3689 1.61 2.75 1.12 139 TVD_SPACE_RATIO 3477 1.01 0.92 1.05 140 XMDiploma_00 3466 1.38 2.14 1.05 141 RELAYCOUNTRY_CA 3391 2.67 6.44 1.03 142 XM_H_Long_From02 3329 1.22 1.69 1.01 143 XMCapTrack 3293 0.86 0.54 1.00 144 TR_XM_SpammyWords2 3256 4.29 11.86 0.99 145 TooManyTo_004 3125 0.83 0.56 0.95 146 XM_OfRef6 3061 1.53 2.92 0.93 147 HTML_IMAGE_ONLY_20 2953 0.73 0.36 0.90 148 RCVD_IN_RP_SAFE 2939 0.84 0.71 0.89 149 DKIM_ADSP_CUSTOM_MED 2917 0.93 1.04 0.88 150 TR_MetaPhish_Combo_01 2887 0.89 0.94 0.88 151 XM_ProductURIs 2717 0.87 0.98 0.82 152 XMBody_95 2673 0.62 0.20 0.81 153 RCVD_IN_RP_CERTIFIED 2658 0.73 0.57 0.81 154 T_TooManySym_03 2617 0.64 0.27 0.79 155 XM_UB50 2589 1.86 4.32 0.79 156 T_FILL_THIS_FORM_SHORT 2577 1.40 2.83 0.78 157 XM_B_COVIDMETA 2450 1.40 2.91 0.74 158 XMPhish30 2439 0.85 1.09 0.74 159 TooManyTo_005 2436 0.62 0.35 0.74 160 XMSexyCombo_01 2434 1.22 2.32 0.74 161 SpammyFromTLD_01 2432 1.56 3.45 0.74 162 T_XMDrugObfuBody_00 2384 1.03 1.73 0.72 163 XM_B_COPY_HTML 2372 0.71 0.67 0.72 164 HTML_TAG_BALANCE_BODY 2329 0.97 1.58 0.71 165 MSGID_NOFQDN1 2283 0.49 0.01 0.69 166 XMHTML_After_End 2268 1.00 1.71 0.69 167 XMBdyGiftCard01 2241 0.84 1.21 0.68 168 T_XMHurry_00 2218 1.22 2.46 0.67 169 RCVD_IN_BL_SPAMCOP_NET 2162 4.02 11.73 0.66 170 XM_B_SpammyWords4 2110 1.15 2.32 0.64 171 HTTPS_HTTP_MISMATCH 2067 0.83 1.29 0.63 172 LOW_PRICE 2022 0.48 0.16 0.61 173 T_OBFU_PDF_ATTACH 2016 0.47 0.16 0.61 174 XM_ShortIntro_01 2012 0.58 0.51 0.61 175 RELAYCOUNTRY_GB 1994 0.69 0.89 0.60 176 URI_TRY_3LD 1941 0.86 1.49 0.59 177 XMGenDplmaNmb 1920 0.79 1.25 0.58 178 FROM_GOV_DKIM_AU 1903 0.47 0.23 0.58 179 XM_H_PHPMailer 1883 0.62 0.75 0.57 180 XMSubMetaI_00 1876 0.68 0.93 0.57 181 XMHTMLBadTable_001 1851 0.62 0.76 0.56 182 NML_ADSP_CUSTOM_MED 1842 0.64 0.83 0.56 183 TR_MSPIKEBAYES00 1821 0.39 0.03 0.55 184 MPART_ALT_DIFF_COUNT 1810 0.68 0.98 0.55 185 XMBody_17 1801 1.19 2.68 0.55 186 XMBrknScrpt_02 1797 0.80 1.39 0.54 187 TR_XM_SpammyWords3 1794 1.61 4.05 0.54 188 XM_D_tchamptons_WL 1725 0.37 0.00 0.52 189 DIET_1 1724 0.83 1.54 0.52 190 XMNoVowels 1689 0.46 0.34 0.51 191 FORGED_GMAIL_RCVD 1636 0.62 0.92 0.50 192 TM2_M_BODY_EMPTY 1581 0.37 0.12 0.48 193 SUBJ_DOLLARS 1489 0.56 0.82 0.45 194 SHORT_HELO_AND_INLINE_IMAGE 1449 0.33 0.08 0.44 195 TM2_M_A_HREF_HREF 1442 0.53 0.76 0.44 196 TR_XM_PHPDW 1427 0.77 1.56 0.43 197 XMLngstWrd_00 1423 0.63 1.09 0.43 198 FROM_GOV_SPOOF 1410 0.33 0.10 0.43 199 XM_DIRTYINTL 1396 1.42 3.71 0.42 200 XMSubMetaSxObfu_03 1351 0.61 1.08 0.41 ----------------------------------------------------------------------