Email: 530586 Autolearn: 0 AvgScore: 4.11 AvgScanTime: 1.41 sec Spam: 183988 Autolearn: 0 AvgScore: 14.00 AvgScanTime: 1.50 sec Ham: 346598 Autolearn: 0 AvgScore: -1.15 AvgScanTime: 1.35 sec Time Spent Running SA: 207.09 hours Time Spent Processing Spam: 76.91 hours Time Spent Processing Ham: 130.18 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 176991 89.23 96.20 85.53 2 DKIM_SIGNED 161339 77.45 87.69 72.02 3 XM_DK_Pass 152598 74.83 82.94 70.52 4 RELAYCOUNTRY_US 152379 80.55 82.82 79.35 5 DKIM_VALID 151852 74.04 82.53 69.54 6 XM_B_Unicode 139515 70.63 75.83 67.86 7 DCC_CHECK 134637 45.88 73.18 31.39 8 XMListUnsubscribeExists 124999 54.57 67.94 47.47 9 XM_B_SpammyWords 119376 50.30 64.88 42.56 10 DKIM_VALID_AU 117045 57.08 63.62 53.61 11 RCVD_IN_MSPIKE_H2 87131 40.62 47.36 37.04 12 BAYES_50 85096 52.62 46.25 56.00 13 XM_B_Unicode3 75000 39.69 40.76 39.12 14 XM_DK_Undo_02 71457 17.64 38.84 6.39 15 FVGT_m_MULTI_ODD 67940 28.39 36.93 23.86 16 XM_B_SpammyWords2 65544 23.24 35.62 16.67 17 MIME_HTML_ONLY 65258 24.33 35.47 18.42 18 LOC_TINY_FONT_1 62065 25.94 33.73 21.80 19 HTML_FONT_LOW_CONTRAST 58590 28.22 31.84 26.30 20 BAYES_99 56684 14.33 30.81 5.59 21 TR_XM_DKIM_Undo 55785 13.36 30.32 4.36 22 DKIM_VALID_EF 55290 28.86 30.05 28.24 23 DCC_CHECK_NEGATIVE 49281 54.07 26.78 68.56 24 T_KAM_HTML_FONT_INVALID 49274 21.57 26.78 18.81 25 BAYES_999 45066 11.49 24.49 4.59 26 XMSubLong 40368 22.42 21.94 22.67 27 TR_DCC_Bayes_99 39586 8.53 21.52 1.63 28 T_TM2_M_HEADER_IN_MSG 39471 27.99 21.45 31.47 29 RELAYCOUNTRY_META 37713 9.45 20.50 3.59 30 XM_Body_Dirty_Words 37562 14.07 20.42 10.70 31 XM_Multi_Part_URI 30469 13.55 16.56 11.94 32 XM_B_Unsub 30063 11.00 16.34 8.17 33 TR_XM_BayesUnsub 29207 9.47 15.87 6.07 34 RCVD_IN_MSPIKE_WL 27974 16.00 15.20 16.42 35 BOTNET_IPINHOSTNAME 25921 7.98 14.09 4.74 36 LOTS_OF_MONEY 25485 9.82 13.85 7.68 37 FSL_BULK_SIG 24095 6.39 13.10 2.82 38 RCVD_IN_MSPIKE_H3 23075 11.56 12.54 11.03 39 BOTNET 22653 5.22 12.31 1.45 40 MPART_ALT_DIFF 22134 7.03 12.03 4.37 41 TR_XM_SpammyWords4 21961 7.27 11.94 4.79 42 XM_B_SpammyWords3 21508 6.64 11.69 3.96 43 UNPARSEABLE_RELAY 21453 8.73 11.66 7.17 44 TR_XM_UnparsRelay 20984 7.68 11.41 5.71 45 TR_XM_SpammyRelay 19903 4.90 10.82 1.75 46 TM2_M_VERY_LONG_WORD 19354 4.40 10.52 1.15 47 TR_XM_SpammyWords2 18355 4.06 9.98 0.93 48 MIME_HTML_ONLY_MULTI 18132 5.23 9.85 2.77 49 RCVD_IN_BL_SPAMCOP_NET 17595 3.63 9.56 0.49 50 XMSexyCombo_05 17494 5.02 9.51 2.64 51 HTML_MIME_NO_HTML_TAG 17357 4.49 9.43 1.87 52 XM_UncommonTLD01 16165 5.40 8.79 3.60 53 XM_Evil_Numbers_Gen 15140 7.64 8.23 7.33 54 UNTRUSTED_Relay 14817 3.59 8.05 1.22 55 XMLngstWrd_00 14602 3.07 7.94 0.49 56 XMLngstWrd_01 14510 3.01 7.89 0.42 57 XMLngstWrd_02 14336 2.92 7.79 0.33 58 XM_GoogleGroups 14252 3.56 7.75 1.34 59 XMLngstWrd_03 13925 2.78 7.57 0.24 60 BAYES_60 13765 8.75 7.48 9.43 61 XMLngstWrd_04 13694 2.68 7.44 0.16 62 HTML_TITLE_SUBJ_DIFF 13613 2.59 7.40 0.04 63 BAYES_80 13566 5.51 7.37 4.52 64 LotsOfNums_01 13341 8.77 7.25 9.58 65 UPPERCASE_75_100 13330 2.53 7.25 0.03 66 RELAYCOUNTRY_CA 12256 3.02 6.66 1.08 67 TR_XM_SPAMCOP 12103 2.48 6.58 0.31 68 XM_B_SpammyTLD 11918 4.38 6.48 3.27 69 HTML_IMAGE_RATIO_02 11292 5.67 6.14 5.43 70 XM_H_Long_From01 11281 5.36 6.13 4.95 71 XM_SendGrid 11110 4.97 6.04 4.41 72 TR_XM_PhishingBody 10828 3.97 5.89 2.95 73 XM_B_Investor 10636 3.09 5.78 1.66 74 XMSubMetaSx_00 10608 4.61 5.77 3.99 75 XM_B_Phish_Phrases 9831 3.66 5.34 2.77 76 DKIM_INVALID 9487 3.41 5.16 2.48 77 TooManyTo_001 8425 7.49 4.58 9.03 78 BAYES_95 8199 3.23 4.46 2.57 79 HTML_IMAGE_RATIO_04 8176 4.56 4.44 4.62 80 XM_SPF_SoftFail 7855 3.58 4.27 3.22 81 XMStrtUSub 7796 4.73 4.24 4.99 82 TR_XM_DK_SendGrid 7312 3.21 3.97 2.81 83 TR_XM_SpammyWords5 7268 2.31 3.95 1.43 84 T_XMDrugObfuBody_14 7247 2.51 3.94 1.76 85 MIME_QP_LONG_LINE 7214 5.18 3.92 5.85 86 RCVD_IN_MSPIKE_BL 7129 2.20 3.87 1.31 87 TR_XM_MSPIKECOMBO 7024 2.17 3.82 1.29 88 XM_DIRTYINTL 7011 1.53 3.81 0.32 89 T_REMOTE_IMAGE 6436 3.77 3.50 3.91 90 XM_B_Phish66 6412 2.35 3.49 1.75 91 SpammyFromTLD_02 6378 1.52 3.47 0.48 92 XMNumbers 6278 3.28 3.41 3.21 93 XM_UB50 6263 1.68 3.40 0.76 94 PDS_OTHER_BAD_TLD 6188 1.27 3.36 0.16 95 XM_CamelCaseFrm001 5890 2.40 3.20 1.98 96 HTML_IMAGE_RATIO_06 5851 3.76 3.18 4.07 97 RCVD_IN_VALIDITY_RPBL 5844 1.15 3.18 0.07 98 XMDiploma_00 5708 2.16 3.10 1.67 99 T_XMDrugObfuBody_08 5685 1.96 3.09 1.36 100 HTML_IMAGE_RATIO_08 5460 2.49 2.97 2.23 101 MIME_HTML_MOSTLY 5387 2.76 2.93 2.68 102 XM_OfRef6 5231 1.63 2.84 0.99 103 TR_XM_SB_Phish 5170 2.72 2.81 2.68 104 URIBL_DBL_SPAM 5155 0.98 2.80 0.02 105 RCVD_IN_VALIDITY_SAFE 5143 3.88 2.80 4.46 106 XMSubPhish11 5005 2.67 2.72 2.64 107 KHOP_HELO_FCRDNS 4902 2.39 2.66 2.24 108 XM_B_Unsub2 4631 1.85 2.52 1.50 109 URI_PHP_REDIR 4624 0.87 2.51 0.00 110 TM2_M_URI_OPT_OUT 4605 2.54 2.50 2.56 111 RCVD_IN_IADB_LISTED 4594 4.58 2.50 5.69 112 RCVD_IN_MSPIKE_H4 4433 3.72 2.41 4.42 113 BOTNET_NORDNS 4299 0.82 2.34 0.01 114 ALL_TRUSTED 4292 12.57 2.33 18.00 115 SUBJ_ALL_CAPS 4219 1.95 2.29 1.77 116 T_FILL_THIS_FORM_SHORT 4158 1.34 2.26 0.85 117 RCVD_IN_VALIDITY_CERTIFIED 4130 3.39 2.24 4.00 118 SpammyFromTLD_01 4129 1.31 2.24 0.82 119 T_TooManySym_01 4022 5.06 2.19 6.59 120 XM_DK_Undo_01 3953 1.81 2.15 1.63 121 RCVD_IN_IADB_SPF 3875 4.05 2.11 5.09 122 URI_NOVOWEL 3871 2.46 2.10 2.64 123 TR_XM_MSPIKECOMBO2 3798 0.83 2.06 0.18 124 USER_IN_DEF_DKIM_WL 3761 8.31 2.04 11.64 125 RCVD_IN_IADB_DK 3585 3.59 1.95 4.46 126 RCVD_IN_IADB_SENDERID 3553 3.68 1.93 4.61 127 FROM_EXCESS_BASE64 3548 2.23 1.93 2.40 128 XM_B_COVIDMETA 3543 0.93 1.93 0.40 129 XM_B_SpammyWords4 3465 0.99 1.88 0.52 130 XM_UB99 3457 0.65 1.88 0.00 131 TR_LOTS_OF_MONEY3 3450 0.89 1.88 0.36 132 XMSexyCombo_01 3416 1.12 1.86 0.72 133 HTTPS_HTTP_MISMATCH 3415 1.32 1.86 1.04 134 XMBody_17 3342 0.92 1.82 0.44 135 TR_XM_COVIDMETA4 3315 0.79 1.80 0.26 136 T_XMDrugObfuBody_00 3228 1.03 1.75 0.65 137 RCVD_IN_MSPIKE_L3 3173 1.03 1.72 0.66 138 TR_XM_NoHeaderRelay 3171 0.68 1.72 0.13 139 TR_XM_SpammyWords3 3101 0.93 1.69 0.53 140 MAILING_LIST_MULTI 3076 2.90 1.67 3.55 141 LongTLD 3029 0.73 1.65 0.24 142 HK_RANDOM_REPLYTO 3026 0.63 1.64 0.09 143 XM_ShortIntro_01 3017 1.43 1.64 1.31 144 XMHTML_After_End 2867 0.98 1.56 0.67 145 RCVD_IN_PSBL 2815 0.69 1.53 0.25 146 URI_HEX 2790 1.28 1.52 1.16 147 TR_Mismatch_TLD_02 2668 0.57 1.45 0.10 148 BAYES_40 2613 3.68 1.42 4.88 149 XM_URI_RBL 2582 0.56 1.40 0.12 150 XMStockSpam_06 2557 0.91 1.39 0.66 151 XM_UB999 2541 0.48 1.38 0.00 152 XMGenDplmaNmb 2533 1.12 1.38 0.99 153 HTML_TAG_BALANCE_BODY 2521 0.95 1.37 0.73 154 RCVD_IN_IADB_VOUCHED 2464 2.66 1.34 3.36 155 TR_XM_PHPDW 2442 0.70 1.33 0.37 156 TR_XM_PHPForged 2427 0.66 1.32 0.31 157 XMBdyGiftCard01 2424 0.93 1.32 0.73 158 TR_XM_Spammywords 2416 0.88 1.31 0.65 159 XM_S_SpammyWords 2416 0.88 1.31 0.65 160 URIBL_BLACK 2408 0.49 1.31 0.05 161 XMBrknScrpt_02 2394 0.78 1.30 0.51 162 TR_XM_FormFill2 2383 0.66 1.30 0.32 163 XM_H_PHPOS 2363 0.64 1.28 0.30 164 RCVD_IN_MSPIKE_L5 2350 0.45 1.28 0.02 165 RELAYCOUNTRY_AU 2301 0.65 1.25 0.34 166 FROM_SUSPICIOUS_NTLD 2291 0.45 1.25 0.03 167 XM_UB60 2246 0.47 1.22 0.07 168 XM_H_Long_From02 2221 1.20 1.21 1.19 169 RELAYCOUNTRY_RU 2159 0.42 1.17 0.03 170 URI_TRY_3LD 2145 0.83 1.17 0.65 171 TR_XM_COVIDMETA1 2130 0.53 1.16 0.20 172 XM_B_DNDMA 2076 0.67 1.13 0.43 173 T_XMHurry_00 2055 0.79 1.12 0.61 174 XM_H_Undi_Recip 2037 0.53 1.11 0.23 175 TR_XM_MaxSPIKE 2034 0.43 1.11 0.07 176 FROM_SUSPICIOUS_NTLD_FP 1963 0.39 1.07 0.03 177 XMPhish30 1933 0.80 1.05 0.66 178 NO_DNS_FOR_FROM 1891 0.50 1.03 0.21 179 XM_B_SEO 1880 0.43 1.02 0.11 180 TR_XM_MaxWHORU 1874 0.46 1.02 0.16 181 DATE_IN_PAST_24_48 1862 0.47 1.01 0.18 182 MPART_ALT_DIFF_COUNT 1856 0.74 1.01 0.59 183 TR_MetaPhish_Combo_01 1844 0.86 1.00 0.79 184 DIET_1 1788 0.51 0.97 0.27 185 T_Symld_Words_02 1785 0.70 0.97 0.56 186 XM_B_DynamicLink 1785 0.35 0.97 0.03 187 HTML_TAG_BALANCE_CENTER 1767 0.40 0.96 0.10 188 BAYES_20 1765 2.74 0.96 3.69 189 TR_XM_BayesRelay 1746 0.33 0.95 0.00 190 TR_XM_SEO4 1729 0.37 0.94 0.06 191 XMSubNoVowel 1716 0.84 0.93 0.78 192 TR_XM_Base64_M1 1711 0.80 0.93 0.73 193 XM_Body_Dirty_Words_01 1700 0.41 0.92 0.14 194 RELAYCOUNTRY_FR 1633 0.44 0.89 0.20 195 TR_Symld_Words 1627 1.44 0.88 1.74 196 RELAYCOUNTRY_IN 1612 0.35 0.88 0.06 197 FONT_INVIS_LONG_LINE 1594 0.41 0.87 0.17 198 MIXED_CENTER_CASE 1591 0.30 0.86 0.00 199 XM_ProductURIs 1555 0.62 0.85 0.50 200 TR_LOTS_OF_MONEY2 1554 0.50 0.84 0.32 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 296440 89.23 96.20 85.53 2 RELAYCOUNTRY_US 275027 80.55 82.82 79.35 3 DKIM_SIGNED 249611 77.45 87.69 72.02 4 XM_DK_Pass 244431 74.83 82.94 70.52 5 DKIM_VALID 241007 74.04 82.53 69.54 6 DCC_CHECK_NEGATIVE 237631 54.07 26.78 68.56 7 XM_B_Unicode 235213 70.63 75.83 67.86 8 BAYES_50 194094 52.62 46.25 56.00 9 DKIM_VALID_AU 185813 57.08 63.62 53.61 10 XMListUnsubscribeExists 164543 54.57 67.94 47.47 11 XM_B_SpammyWords 147523 50.30 64.88 42.56 12 XM_B_Unicode3 135602 39.69 40.76 39.12 13 RCVD_IN_MSPIKE_H2 128395 40.62 47.36 37.04 14 T_TM2_M_HEADER_IN_MSG 109058 27.99 21.45 31.47 15 DCC_CHECK 108797 45.88 73.18 31.39 16 DKIM_VALID_EF 97862 28.86 30.05 28.24 17 HTML_FONT_LOW_CONTRAST 91161 28.22 31.84 26.30 18 FVGT_m_MULTI_ODD 82685 28.39 36.93 23.86 19 XMSubLong 78573 22.42 21.94 22.67 20 LOC_TINY_FONT_1 75552 25.94 33.73 21.80 21 T_KAM_HTML_FONT_INVALID 65193 21.57 26.78 18.81 22 MIME_HTML_ONLY 63828 24.33 35.47 18.42 23 ALL_TRUSTED 62398 12.57 2.33 18.00 24 XM_B_SpammyWords2 57768 23.24 35.62 16.67 25 RCVD_IN_MSPIKE_WL 56901 16.00 15.20 16.42 26 XM_Multi_Part_URI 41399 13.55 16.56 11.94 27 USER_IN_DEF_DKIM_WL 40350 8.31 2.04 11.64 28 BAYES_00 38544 7.54 0.78 11.12 29 RCVD_IN_MSPIKE_H3 38235 11.56 12.54 11.03 30 XM_Body_Dirty_Words 37100 14.07 20.42 10.70 31 LotsOfNums_01 33217 8.77 7.25 9.58 32 BAYES_60 32678 8.75 7.48 9.43 33 TooManyTo_001 31306 7.49 4.58 9.03 34 IN_ZIMBRA_NJ_WHITELIST 28498 5.42 0.14 8.22 35 XM_B_Unsub 28319 11.00 16.34 8.17 36 LOTS_OF_MONEY 26629 9.82 13.85 7.68 37 XM_DKIMWhitelistDomains 26541 5.15 0.43 7.66 38 XM_Evil_Numbers_Gen 25400 7.64 8.23 7.33 39 UNPARSEABLE_RELAY 24856 8.73 11.66 7.17 40 T_TooManySym_01 22845 5.06 2.19 6.59 41 XM_DK_Undo_02 22135 17.64 38.84 6.39 42 TR_XM_DK_Bayes 21207 4.19 0.57 6.12 43 TR_XM_BayesUnsub 21034 9.47 15.87 6.07 44 TR_XM_DK_Bayes1 20808 4.11 0.55 6.00 45 MIME_QP_LONG_LINE 20272 5.18 3.92 5.85 46 TR_XM_UnparsRelay 19786 7.68 11.41 5.71 47 RCVD_IN_IADB_LISTED 19714 4.58 2.50 5.69 48 BAYES_99 19358 14.33 30.81 5.59 49 HTML_IMAGE_RATIO_02 18808 5.67 6.14 5.43 50 TR_XM_DK_Bayes2 17964 3.56 0.49 5.18 51 RCVD_IN_IADB_SPF 17627 4.05 2.11 5.09 52 XMStrtUSub 17287 4.73 4.24 4.99 53 XM_H_Long_From01 17154 5.36 6.13 4.95 54 BAYES_40 16903 3.68 1.42 4.88 55 XM_PDF 16645 3.41 0.78 4.80 56 TR_XM_SpammyWords4 16587 7.27 11.94 4.79 57 BOTNET_IPINHOSTNAME 16423 7.98 14.09 4.74 58 HTML_IMAGE_RATIO_04 16013 4.56 4.44 4.62 59 RCVD_IN_IADB_SENDERID 15966 3.68 1.93 4.61 60 BAYES_999 15924 11.49 24.49 4.59 61 BAYES_80 15653 5.51 7.37 4.52 62 RCVD_IN_IADB_DK 15472 3.59 1.95 4.46 63 RCVD_IN_VALIDITY_SAFE 15449 3.88 2.80 4.46 64 RCVD_IN_MSPIKE_H4 15329 3.72 2.41 4.42 65 XM_SendGrid 15271 4.97 6.04 4.41 66 MPART_ALT_DIFF 15145 7.03 12.03 4.37 67 TR_XM_DKIM_Undo 15116 13.36 30.32 4.36 68 HTML_IMAGE_RATIO_06 14112 3.76 3.18 4.07 69 RCVD_IN_VALIDITY_CERTIFIED 13861 3.39 2.24 4.00 70 XMSubMetaSx_00 13846 4.61 5.77 3.99 71 XM_B_SpammyWords3 13739 6.64 11.69 3.96 72 T_REMOTE_IMAGE 13565 3.77 3.50 3.91 73 BAYES_20 12785 2.74 0.96 3.69 74 T_TooManySym_02 12625 2.61 0.66 3.64 75 XM_UncommonTLD01 12464 5.40 8.79 3.60 76 RELAYCOUNTRY_META 12447 9.45 20.50 3.59 77 MAILING_LIST_MULTI 12296 2.90 1.67 3.55 78 RCVD_IN_IADB_VOUCHED 11645 2.66 1.34 3.36 79 XM_B_SpammyTLD 11337 4.38 6.48 3.27 80 XM_SPF_SoftFail 11164 3.58 4.27 3.22 81 XMNumbers 11135 3.28 3.41 3.21 82 TR_XM_PhishingBody 10234 3.97 5.89 2.95 83 FSL_BULK_SIG 9786 6.39 13.10 2.82 84 TR_XM_DK_SendGrid 9727 3.21 3.97 2.81 85 XM_B_Phish_Phrases 9614 3.66 5.34 2.77 86 MIME_HTML_ONLY_MULTI 9613 5.23 9.85 2.77 87 TR_XM_SB_Phish 9288 2.72 2.81 2.68 88 MIME_HTML_MOSTLY 9281 2.76 2.93 2.68 89 URI_NOVOWEL 9167 2.46 2.10 2.64 90 XMSubPhish11 9151 2.67 2.72 2.64 91 XMSexyCombo_05 9149 5.02 9.51 2.64 92 BAYES_95 8920 3.23 4.46 2.57 93 TM2_M_URI_OPT_OUT 8862 2.54 2.50 2.56 94 DKIM_INVALID 8604 3.41 5.16 2.48 95 FROM_EXCESS_BASE64 8304 2.23 1.93 2.40 96 XM_H_Trusted_IP 7979 1.50 0.00 2.30 97 BOUNCE_MESSAGE 7869 1.76 0.79 2.27 98 ANY_BOUNCE_MESSAGE 7869 1.76 0.79 2.27 99 KHOP_HELO_FCRDNS 7767 2.39 2.66 2.24 100 HTML_IMAGE_RATIO_08 7742 2.49 2.97 2.23 101 RCVD_IN_IADB_OPTIN 7715 1.74 0.82 2.23 102 TVD_RCVD_IP 7674 1.64 0.55 2.21 103 BAYES_05 7663 1.61 0.47 2.21 104 TooManyTo_002 7587 1.62 0.56 2.19 105 INVALID_MSGID 6944 1.36 0.14 2.00 106 HELO_NODOT 6895 1.49 0.54 1.99 107 HELO_NO_DOMAIN 6889 1.48 0.53 1.99 108 XM_CamelCaseFrm001 6866 2.40 3.20 1.98 109 HTML_FONT_FACE_BAD 6612 1.46 0.61 1.91 110 HTML_MIME_NO_HTML_TAG 6484 4.49 9.43 1.87 111 XMGappySubj_01 6351 1.40 0.60 1.83 112 IN_HORDE_ADDRESS_BOOK 6177 1.20 0.10 1.78 113 SUBJ_ALL_CAPS 6122 1.95 2.29 1.77 114 T_XMDrugObfuBody_14 6095 2.51 3.94 1.76 115 TR_XM_SpammyRelay 6077 4.90 10.82 1.75 116 XM_B_Phish66 6075 2.35 3.49 1.75 117 TR_Symld_Words 6027 1.44 0.88 1.74 118 TO_MALFORMED 5950 1.20 0.23 1.72 119 XMDiploma_00 5776 2.16 3.10 1.67 120 XM_B_Investor 5746 3.09 5.78 1.66 121 TR_DCC_Bayes_99 5660 8.53 21.52 1.63 122 XM_DK_Undo_01 5641 1.81 2.15 1.63 123 XM_B_Unsub2 5210 1.85 2.52 1.50 124 BOTNET 5025 5.22 12.31 1.45 125 TR_XM_SpammyWords5 4970 2.31 3.95 1.43 126 TooManyTo_003 4939 1.10 0.48 1.42 127 T_XMDrugObfuBody_08 4727 1.96 3.09 1.36 128 XM_GoogleGroups 4657 3.56 7.75 1.34 129 XM_ShortIntro_01 4549 1.43 1.64 1.31 130 RCVD_IN_MSPIKE_BL 4531 2.20 3.87 1.31 131 TR_XM_MSPIKECOMBO 4485 2.17 3.82 1.29 132 XMBSHREFv2 4440 0.97 0.38 1.28 133 UNTRUSTED_Relay 4245 3.59 8.05 1.22 134 XM_H_Long_From02 4141 1.20 1.21 1.19 135 XMCapTrack 4131 0.90 0.35 1.19 136 URI_HEX 4024 1.28 1.52 1.16 137 TM2_M_VERY_LONG_WORD 3970 4.40 10.52 1.15 138 RELAYCOUNTRY_CA 3752 3.02 6.66 1.08 139 HTTPS_HTTP_MISMATCH 3606 1.32 1.86 1.04 140 TooManyTo_004 3501 0.81 0.43 1.01 141 TVD_SPACE_RATIO 3457 0.67 0.07 1.00 142 XM_OfRef6 3440 1.63 2.84 0.99 143 XMGenDplmaNmb 3417 1.12 1.38 0.99 144 T_TooManySym_03 3394 0.74 0.28 0.98 145 XM_H_PHPMailer 3365 0.86 0.65 0.97 146 RCVD_IN_MSPIKE_H5 3337 0.72 0.25 0.96 147 XMBody_95 3285 0.72 0.28 0.95 148 TR_XM_SpammyWords2 3207 4.06 9.98 0.93 149 DKIM_ADSP_CUSTOM_MED 3179 0.81 0.62 0.92 150 T_FILL_THIS_FORM_SHORT 2952 1.34 2.26 0.85 151 TooManyTo_005 2935 0.69 0.39 0.85 152 RCVD_IN_RP_SAFE 2894 0.76 0.62 0.83 153 SpammyFromTLD_01 2847 1.31 2.24 0.82 154 TR_MetaPhish_Combo_01 2727 0.86 1.00 0.79 155 XMSubNoVowel 2718 0.84 0.93 0.78 156 XM_UB50 2650 1.68 3.40 0.76 157 DATE_IN_PAST_96_XX 2606 0.51 0.04 0.75 158 RCVD_IN_RP_CERTIFIED 2596 0.66 0.50 0.75 159 XMNoVowels 2535 0.68 0.59 0.73 160 XMBdyGiftCard01 2522 0.93 1.32 0.73 161 TR_XM_Base64_M1 2521 0.80 0.93 0.73 162 HTML_TAG_BALANCE_BODY 2513 0.95 1.37 0.73 163 XMSexyCombo_01 2508 1.12 1.86 0.72 164 XMHTML_After_End 2311 0.98 1.56 0.67 165 MSGID_NOFQDN1 2307 0.44 0.01 0.67 166 XMPhish30 2287 0.80 1.05 0.66 167 XMStockSpam_06 2284 0.91 1.39 0.66 168 RCVD_IN_MSPIKE_L3 2281 1.03 1.72 0.66 169 XM_S_SpammyWords 2242 0.88 1.31 0.65 170 URI_TRY_3LD 2241 0.83 1.17 0.65 171 TR_XM_Spammywords 2241 0.88 1.31 0.65 172 T_XMDrugObfuBody_00 2238 1.03 1.75 0.65 173 RELAYCOUNTRY_GB 2188 0.70 0.82 0.63 174 DATE_IN_PAST_12_24 2177 0.46 0.14 0.63 175 RCVD_IN_MSPIKE_L4 2144 0.69 0.82 0.62 176 FROM_GOV_DKIM_AU 2125 0.48 0.22 0.61 177 HTML_IMAGE_ONLY_20 2125 0.66 0.76 0.61 178 T_XMHurry_00 2114 0.79 1.12 0.61 179 SHORT_HELO_AND_INLINE_IMAGE 2082 0.41 0.06 0.60 180 MPART_ALT_DIFF_COUNT 2062 0.74 1.01 0.59 181 XM_B_COPY_HTML 2034 0.56 0.52 0.59 182 XMGappySubj_02 2016 0.56 0.51 0.58 183 T_OBFU_PDF_ATTACH 1994 0.43 0.17 0.58 184 NML_ADSP_CUSTOM_MED 1985 0.54 0.48 0.57 185 T_Symld_Words_02 1930 0.70 0.97 0.56 186 TRACKER_ID 1930 0.54 0.51 0.56 187 TR_XM_SpammyWords3 1854 0.93 1.69 0.53 188 XMSubMetaSxObfu_02 1854 0.45 0.28 0.53 189 SUBJ_DOLLARS 1847 0.63 0.81 0.53 190 RCVD_IN_SORBS_DUL 1839 0.38 0.11 0.53 191 XM_B_SpammyWords4 1808 0.99 1.88 0.52 192 FORGED_GMAIL_RCVD 1775 0.51 0.51 0.51 193 XMBrknScrpt_02 1765 0.78 1.30 0.51 194 BASE64_LENGTH_79_INF 1752 0.40 0.19 0.51 195 XM_shorewaves_Whitelist 1734 0.33 0.00 0.50 196 XM_ProductURIs 1720 0.62 0.85 0.50 197 TM2_M_BODY_EMPTY 1716 0.40 0.23 0.50 198 XMHTMLBadTable_001 1687 0.53 0.62 0.49 199 RCVD_IN_BL_SPAMCOP_NET 1683 3.63 9.56 0.49 200 XMLngstWrd_00 1682 3.07 7.94 0.49 ----------------------------------------------------------------------