Email: 509755 Autolearn: 0 AvgScore: 5.13 AvgScanTime: 1.25 sec Spam: 159056 Autolearn: 0 AvgScore: 13.55 AvgScanTime: 1.35 sec Ham: 350699 Autolearn: 0 AvgScore: 1.31 AvgScanTime: 1.20 sec Time Spent Running SA: 176.82 hours Time Spent Processing Spam: 59.77 hours Time Spent Processing Ham: 117.05 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 157008 99.31 98.71 99.58 2 HTML_MESSAGE 152338 89.43 95.78 86.55 3 XM_B_Unicode 136820 76.45 86.02 72.12 4 DKIM_SIGNED 120961 67.39 76.05 63.46 5 DCC_CHECK 120828 50.86 75.97 39.47 6 XM_DK_Pass 115124 65.60 72.38 62.53 7 DKIM_VALID 114239 64.85 71.82 61.69 8 RELAYCOUNTRY_US 111711 70.18 70.23 70.15 9 XM_B_SpammyWords 95328 45.48 59.93 38.92 10 DKIM_VALID_AU 90728 52.20 57.04 50.01 11 XM_B_Unicode3 89950 49.78 56.55 46.71 12 XMListUnsubscribeExists 89901 45.71 56.52 40.81 13 LOC_TINY_FONT_1 63429 28.98 39.88 24.04 14 BAYES_50 62200 53.48 39.11 60.00 15 MIME_HTML_ONLY 61661 33.71 38.77 31.41 16 XM_DK_Undo_02 56656 14.25 35.62 4.56 17 XM_B_SpammyWords2 53974 22.53 33.93 17.36 18 XM_Multi_Part_URI 51731 21.64 32.52 16.71 19 HTML_FONT_LOW_CONTRAST 49370 26.15 31.04 23.94 20 FVGT_m_MULTI_ODD 48123 25.02 30.26 22.65 21 BAYES_99 44296 10.88 27.85 3.18 22 DKIM_VALID_EF 43812 25.96 27.55 25.24 23 TR_XM_DKIM_Undo 41567 9.49 26.13 1.94 24 T_KAM_HTML_FONT_INVALID 39788 20.05 25.02 17.80 25 DCC_CHECK_NEGATIVE 36577 48.79 23.00 60.49 26 BAYES_999 34764 8.46 21.86 2.38 27 XMSubLong 33925 25.42 21.33 27.28 28 TR_DCC_Bayes_99 31123 6.95 19.57 1.23 29 TR_XM_DK_Unsub 30196 14.03 18.98 11.79 30 T_TM2_M_HEADER_IN_MSG 29914 24.13 18.81 26.54 31 XM_B_Unsub 29177 13.14 18.34 10.78 32 TR_XM_BayesUnsub 28067 10.11 17.65 6.70 33 RCVD_IN_MSPIKE_H2 25844 15.04 16.25 14.49 34 ALL_TRUSTED 25229 23.58 15.86 27.08 35 RELAYCOUNTRY_META 23644 6.96 14.87 3.37 36 TR_MAX_INTL_RELAY 23634 8.24 14.86 5.24 37 UNPARSEABLE_RELAY 23594 11.98 14.83 10.69 38 PDS_FROM_NAME_TO_DOMAIN 21394 7.30 13.45 4.52 39 PDS_FRNOM_TODOM_NAKED_TO 21393 7.30 13.45 4.52 40 BAYES_60 21034 9.90 13.22 8.39 41 XM_B_SpammyWords3 20803 7.17 13.08 4.49 42 BOTNET_IPINHOSTNAME 18439 5.49 11.59 2.73 43 LOTS_OF_MONEY 16339 6.62 10.27 4.96 44 TR_XM_SpammyRelay 16307 4.37 10.25 1.70 45 TR_XM_SpammyWords2 16278 3.49 10.23 0.43 46 BAYES_80 16035 5.35 10.08 3.20 47 FSL_BULK_SIG 15970 10.20 10.04 10.28 48 TR_XM_SpammyWords4 14343 5.19 9.02 3.46 49 BOTNET 14161 3.61 8.90 1.21 50 RCVD_IN_BL_SPAMCOP_NET 13634 3.13 8.57 0.67 51 TR_XM_UnparsRelay 12842 3.54 8.07 1.48 52 XM_Evil_Numbers_Gen 12548 8.35 7.89 8.56 53 XM_B_Phish_Phrases 11830 6.10 7.44 5.49 54 XM_Body_Dirty_Words 11219 4.10 7.05 2.76 55 LotsOfNums_01 10923 7.11 6.87 7.23 56 RCVD_IN_MSPIKE_WL 10330 10.92 6.49 12.93 57 UNTRUSTED_Relay 9619 2.92 6.05 1.51 58 MPART_ALT_DIFF 8864 4.46 5.57 3.96 59 RELAYCOUNTRY_CA 8861 2.24 5.57 0.73 60 XMSubMetaSx_00 8850 3.99 5.56 3.28 61 HTML_IMAGE_RATIO_02 8793 4.18 5.53 3.56 62 XM_B_PhoneNumber 8332 8.38 5.24 9.80 63 XM_H_Long_From01 8259 4.95 5.19 4.85 64 XM_UncommonTLD01 7747 3.92 4.87 3.49 65 TM2_M_VERY_LONG_WORD 7646 2.98 4.81 2.16 66 RCVD_IN_MSPIKE_BL 7588 1.81 4.77 0.46 67 TR_XM_MSPIKECOMBO 7587 1.81 4.77 0.46 68 BAYES_95 7088 2.79 4.46 2.04 69 TooManyTo_001 7033 7.31 4.42 8.63 70 DKIM_INVALID 6722 2.54 4.23 1.77 71 XM_H_GMP 6638 4.49 4.17 4.63 72 HTML_IMAGE_RATIO_04 6610 4.21 4.16 4.23 73 MIME_HTML_MOSTLY 6586 2.61 4.14 1.92 74 RCVD_IN_VALIDITY_RPBL 6555 1.37 4.12 0.13 75 MIME_QP_LONG_LINE 6509 4.13 4.09 4.14 76 TR_XM_PhishingBody 6503 2.29 4.09 1.47 77 XM_B_SpammyTLD 6184 3.93 3.89 3.95 78 XM_B_Investor 6102 2.12 3.84 1.34 79 XMSexyCombo_05 6096 2.46 3.83 1.83 80 TR_XM_NoHeaderRelay 6053 1.31 3.81 0.18 81 XM_UB50 6007 1.86 3.78 0.99 82 XM_CamelCaseFrm001 5947 2.42 3.74 1.82 83 T_XMDrugObfuBody_14 5947 2.42 3.74 1.82 84 TR_XM_SpammyWords5 5672 1.90 3.57 1.14 85 RCVD_IN_MSPIKE_H3 5350 4.96 3.36 5.68 86 XMNumbers 5248 4.36 3.30 4.84 87 BOUNCE_MESSAGE 5180 5.55 3.26 6.59 88 ANY_BOUNCE_MESSAGE 5180 5.55 3.26 6.59 89 XM_OfRef6 5001 1.74 3.14 1.10 90 XMStrtUSub 4986 3.55 3.13 3.74 91 TR_XM_SPAMCOP 4900 1.05 3.08 0.13 92 HTML_IMAGE_RATIO_06 4847 2.55 3.05 2.33 93 TR_XM_SpammyWords3 4707 1.03 2.96 0.15 94 XM_URI_RBL 4672 1.06 2.94 0.21 95 XMDiploma_00 4658 1.75 2.93 1.22 96 XM_B_Unsub2 4522 1.75 2.84 1.26 97 MIME_HTML_ONLY_MULTI 4439 2.45 2.79 2.29 98 T_TooManySym_01 4009 4.13 2.52 4.86 99 USER_IN_DEF_DKIM_WL 3887 8.81 2.44 11.69 100 RCVD_IN_MSPIKE_L3 3874 0.91 2.44 0.22 101 DKIM_ADSP_NXDOMAIN 3854 0.95 2.42 0.28 102 XM_B_URI_Unicode 3715 1.79 2.34 1.54 103 XM_SPF_SoftFail 3492 1.49 2.20 1.17 104 XM_B_SpammyWords4 3487 1.12 2.19 0.64 105 RELAYCOUNTRY_AU 3478 1.08 2.19 0.58 106 T_XMDrugObfuBody_08 3474 1.55 2.18 1.26 107 T_XMHurry_00 3284 0.95 2.06 0.45 108 XMBody_17 3270 0.88 2.06 0.35 109 HTML_IMAGE_RATIO_08 3249 1.89 2.04 1.82 110 TM2_M_URI_OPT_OUT 3230 1.65 2.03 1.48 111 SUBJ_ALL_CAPS 3216 1.47 2.02 1.22 112 XMBounce_01 3172 0.78 1.99 0.23 113 RCVD_IN_VALIDITY_SAFE 3140 2.82 1.97 3.21 114 TR_XM_INV_DKIM 3003 0.68 1.89 0.14 115 T_FILL_THIS_FORM_SHORT 2953 1.08 1.86 0.72 116 TR_MetaPhish_Combo_01 2931 1.50 1.84 1.35 117 FROM_EXCESS_BASE64 2838 1.45 1.78 1.30 118 XMStockSpam_06 2777 1.26 1.75 1.04 119 T_XMDrugObfuBody_00 2676 1.07 1.68 0.79 120 MAILING_LIST_MULTI 2626 2.19 1.65 2.43 121 XM_SendGrid 2609 1.38 1.64 1.27 122 RCVD_IN_MSPIKE_H5 2531 4.00 1.59 5.09 123 XMGenDplmaNmb 2525 0.93 1.59 0.64 124 SpammyFromTLD_02 2506 0.82 1.58 0.48 125 XMBrknScrpt_02 2469 1.02 1.55 0.78 126 RCVD_IN_MSPIKE_H4 2449 1.97 1.54 2.16 127 RCVD_IN_VALIDITY_CERTIFIED 2417 2.27 1.52 2.61 128 RELAYCOUNTRY_TH 2383 0.47 1.50 0.00 129 XM_DK_Undo_01 2317 1.52 1.46 1.55 130 SpammyFromTLD_01 2297 0.85 1.44 0.58 131 XM_DIRTYINTL 2292 0.48 1.44 0.05 132 KHOP_HELO_FCRDNS 2290 1.58 1.44 1.65 133 BAYES_40 2254 3.94 1.42 5.08 134 SCC_BODY_URI_ONLY 2150 3.33 1.35 4.23 135 RCVD_IN_MSPIKE_L5 2097 0.55 1.32 0.20 136 HTML_MIME_NO_HTML_TAG 2043 1.78 1.28 2.01 137 URI_HEX 2019 1.15 1.27 1.09 138 URI_TRY_3LD 2015 0.69 1.27 0.43 139 BAYES_20 1921 4.11 1.21 5.42 140 XMPhish30 1915 0.71 1.20 0.48 141 HK_RANDOM_REPLYTO 1911 0.46 1.20 0.12 142 DIET_1 1870 0.58 1.18 0.31 143 SHOPIFY_IMG_NOT_RCVD_SFY 1830 0.52 1.15 0.23 144 TR_XM_PHPForged 1826 0.56 1.15 0.29 145 TR_XM_PHPDW 1814 0.55 1.14 0.28 146 TR_XM_FormFill2 1806 0.55 1.14 0.28 147 RDNS_DYNAMIC 1778 0.47 1.12 0.18 148 XM_B_DNDMA 1772 0.75 1.11 0.59 149 XM_H_PHPOS 1770 0.54 1.11 0.28 150 XMBdyGiftCard01 1741 0.72 1.09 0.54 151 XM_B_Phish66 1725 0.51 1.08 0.25 152 TR_XM_MSPIKECOMBO2 1717 0.34 1.08 0.01 153 RCVD_IN_PSBL 1713 0.46 1.08 0.18 154 XM_B_COPY_HTML 1671 0.71 1.05 0.55 155 RCVD_IN_IADB_LISTED 1637 2.63 1.03 3.36 156 PDS_RDNS_DYNAMIC_FP 1633 0.34 1.03 0.03 157 T_REMOTE_IMAGE 1623 2.48 1.02 3.14 158 RCVD_IN_ZEN_LASTEXTERNAL 1620 0.32 1.02 0.00 159 SHORTCIRCUIT 1620 0.32 1.02 0.00 160 RCVD_IN_MSPIKE_L4 1616 0.34 1.02 0.04 161 XMSexyCombo_01 1606 0.42 1.01 0.16 162 XMSubMetaI_00 1558 0.58 0.98 0.39 163 MIME_CHARSET_FARAWAY 1558 0.55 0.98 0.35 164 MPART_ALT_DIFF_COUNT 1550 0.69 0.97 0.56 165 HTML_IMAGE_ONLY_20 1546 0.53 0.97 0.33 166 RELAYCOUNTRY_FR 1542 0.48 0.97 0.25 167 XM_H_Long_From02 1519 0.80 0.96 0.73 168 URI_NOVOWEL 1503 1.20 0.94 1.31 169 XMLngstWrd_00 1498 0.69 0.94 0.57 170 BAYES_00 1492 7.74 0.94 10.83 171 T_Symld_Words_02 1470 0.58 0.92 0.42 172 XM_HighProb1 1458 0.29 0.92 0.01 173 TR_LOTS_OF_MONEY3 1449 0.46 0.91 0.26 174 XM_ProductURIs 1430 0.52 0.90 0.34 175 RCVD_IN_IADB_SPF 1397 2.29 0.88 2.93 176 URI_OPTOUT_3LD 1380 0.82 0.87 0.80 177 TVD_RCVD_IP 1379 0.79 0.87 0.75 178 T_MONEY_PERCENT 1371 0.37 0.86 0.15 179 TR_LOTS_OF_MONEY2 1371 0.37 0.86 0.15 180 TR_XM_DK_Bayes 1356 4.54 0.85 6.22 181 XM_B_SEO 1355 0.40 0.85 0.20 182 TR_XM_DK_Bayes1 1348 4.47 0.85 6.11 183 RCVD_IN_IADB_DK 1338 1.99 0.84 2.52 184 HTTPS_HTTP_MISMATCH 1334 0.65 0.84 0.57 185 CHARSET_FARAWAY_HEADER 1327 0.41 0.83 0.21 186 RCVD_IN_IADB_SENDERID 1317 2.04 0.83 2.59 187 PLING_QUERY 1279 0.51 0.80 0.38 188 XMBody_78 1266 0.43 0.80 0.27 189 XMSlimDrugH 1265 0.64 0.80 0.58 190 TR_XM_RelayPhish 1257 0.31 0.79 0.09 191 XM_B_COVIDMETA 1256 0.33 0.79 0.12 192 BOTNET_NORDNS 1253 0.25 0.79 0.00 193 XMLngstWrd_01 1231 0.52 0.77 0.41 194 TR_XM_MaxSPIKE 1225 0.24 0.77 0.00 195 MAY_BE_FORGED 1216 0.93 0.76 1.01 196 DKIM_ADSP_CUSTOM_MED 1211 0.65 0.76 0.60 197 TR_XM_DK_SendGrid 1208 0.77 0.76 0.78 198 URIBL_BLACK 1202 0.24 0.76 0.01 199 XMPhish08 1198 0.41 0.75 0.25 200 TR_Symld_Words 1192 1.08 0.75 1.23 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 349214 99.31 98.71 99.58 2 HTML_MESSAGE 303525 89.43 95.78 86.55 3 XM_B_Unicode 252913 76.45 86.02 72.12 4 RELAYCOUNTRY_US 246021 70.18 70.23 70.15 5 DKIM_SIGNED 222550 67.39 76.05 63.46 6 XM_DK_Pass 219289 65.60 72.38 62.53 7 DKIM_VALID 216341 64.85 71.82 61.69 8 DCC_CHECK_NEGATIVE 212133 48.79 23.00 60.49 9 BAYES_50 210435 53.48 39.11 60.00 10 DKIM_VALID_AU 175376 52.20 57.04 50.01 11 XM_B_Unicode3 163800 49.78 56.55 46.71 12 XMListUnsubscribeExists 143122 45.71 56.52 40.81 13 DCC_CHECK 138425 50.86 75.97 39.47 14 XM_B_SpammyWords 136506 45.48 59.93 38.92 15 MIME_HTML_ONLY 110167 33.71 38.77 31.41 16 XMSubLong 95674 25.42 21.33 27.28 17 ALL_TRUSTED 94962 23.58 15.86 27.08 18 T_TM2_M_HEADER_IN_MSG 93082 24.13 18.81 26.54 19 DKIM_VALID_EF 88525 25.96 27.55 25.24 20 LOC_TINY_FONT_1 84316 28.98 39.88 24.04 21 HTML_FONT_LOW_CONTRAST 83947 26.15 31.04 23.94 22 FVGT_m_MULTI_ODD 79422 25.02 30.26 22.65 23 T_KAM_HTML_FONT_INVALID 62424 20.05 25.02 17.80 24 XM_B_SpammyWords2 60871 22.53 33.93 17.36 25 XM_Multi_Part_URI 58600 21.64 32.52 16.71 26 RCVD_IN_MSPIKE_H2 50825 15.04 16.25 14.49 27 RCVD_IN_MSPIKE_WL 45341 10.92 6.49 12.93 28 TR_XM_DK_Unsub 41346 14.03 18.98 11.79 29 USER_IN_DEF_DKIM_WL 41006 8.81 2.44 11.69 30 BAYES_00 37969 7.74 0.94 10.83 31 XM_B_Unsub 37805 13.14 18.34 10.78 32 UNPARSEABLE_RELAY 37497 11.98 14.83 10.69 33 FSL_BULK_SIG 36036 10.20 10.04 10.28 34 XM_B_PhoneNumber 34365 8.38 5.24 9.80 35 TooManyTo_001 30252 7.31 4.42 8.63 36 XM_Evil_Numbers_Gen 30010 8.35 7.89 8.56 37 BAYES_60 29428 9.90 13.22 8.39 38 T_HTML_ATTACH 28521 5.78 0.60 8.13 39 TO_IN_SUBJ 27805 5.61 0.50 7.93 40 LotsOfNums_01 25343 7.11 6.87 7.23 41 TR_XM_BayesUnsub 23489 10.11 17.65 6.70 42 ANY_BOUNCE_MESSAGE 23119 5.55 3.26 6.59 43 BOUNCE_MESSAGE 23112 5.55 3.26 6.59 44 TR_XM_DK_Bayes 21810 4.54 0.85 6.22 45 TR_XM_DK_Bayes1 21423 4.47 0.85 6.11 46 XM_DKIMWhitelistDomains 20115 3.95 0.02 5.74 47 RCVD_IN_MSPIKE_H3 19920 4.96 3.36 5.68 48 XM_B_Phish_Phrases 19247 6.10 7.44 5.49 49 BAYES_20 19020 4.11 1.21 5.42 50 TR_MAX_INTL_RELAY 18374 8.24 14.86 5.24 51 TR_XM_DK_Bayes2 18063 3.76 0.70 5.15 52 RCVD_IN_MSPIKE_H5 17849 4.00 1.59 5.09 53 BAYES_40 17810 3.94 1.42 5.08 54 LOTS_OF_MONEY 17386 6.62 10.27 4.96 55 T_TooManySym_01 17039 4.13 2.52 4.86 56 XM_H_Long_From01 16995 4.95 5.19 4.85 57 XMNumbers 16958 4.36 3.30 4.84 58 XM_H_GMP 16243 4.49 4.17 4.63 59 XM_DK_Undo_02 16006 14.25 35.62 4.56 60 PDS_FROM_NAME_TO_DOMAIN 15836 7.30 13.45 4.52 61 PDS_FRNOM_TODOM_NAKED_TO 15835 7.30 13.45 4.52 62 XM_B_SpammyWords3 15742 7.17 13.08 4.49 63 TooManyTo_002 15100 3.12 0.52 4.31 64 HTML_IMAGE_RATIO_04 14836 4.21 4.16 4.23 65 SCC_BODY_URI_ONLY 14823 3.33 1.35 4.23 66 MIME_QP_LONG_LINE 14530 4.13 4.09 4.14 67 MPART_ALT_DIFF 13874 4.46 5.57 3.96 68 XM_B_SpammyTLD 13839 3.93 3.89 3.95 69 XMStrtUSub 13117 3.55 3.13 3.74 70 HTML_IMAGE_RATIO_02 12500 4.18 5.53 3.56 71 XM_PDF 12379 2.59 0.52 3.53 72 XM_UncommonTLD01 12243 3.92 4.87 3.49 73 TR_XM_SpammyWords4 12117 5.19 9.02 3.46 74 RELAYCOUNTRY_META 11827 6.96 14.87 3.37 75 RCVD_IN_IADB_LISTED 11769 2.63 1.03 3.36 76 XMSubMetaSx_00 11510 3.99 5.56 3.28 77 RCVD_IN_VALIDITY_SAFE 11256 2.82 1.97 3.21 78 BAYES_80 11212 5.35 10.08 3.20 79 BAYES_99 11161 10.88 27.85 3.18 80 T_REMOTE_IMAGE 11018 2.48 1.02 3.14 81 RCVD_IN_IADB_SPF 10286 2.29 0.88 2.93 82 XM_Body_Dirty_Words 9693 4.10 7.05 2.76 83 BOTNET_IPINHOSTNAME 9563 5.49 11.59 2.73 84 RCVD_IN_VALIDITY_CERTIFIED 9167 2.27 1.52 2.61 85 RCVD_IN_IADB_SENDERID 9086 2.04 0.83 2.59 86 T_TooManySym_02 9042 1.99 0.70 2.58 87 RCVD_IN_IADB_DK 8826 1.99 0.84 2.52 88 XM_B_FormFill 8769 1.73 0.02 2.50 89 MAILING_LIST_MULTI 8515 2.19 1.65 2.43 90 BAYES_999 8351 8.46 21.86 2.38 91 HTML_IMAGE_RATIO_06 8164 2.55 3.05 2.33 92 MIME_HTML_ONLY_MULTI 8039 2.45 2.79 2.29 93 RCVD_IN_IADB_VOUCHED 7893 1.68 0.41 2.25 94 RCVD_IN_MSPIKE_H4 7572 1.97 1.54 2.16 95 TM2_M_VERY_LONG_WORD 7570 2.98 4.81 2.16 96 INVALID_MSGID 7184 1.48 0.22 2.05 97 BAYES_95 7158 2.79 4.46 2.04 98 HTML_MIME_NO_HTML_TAG 7052 1.78 1.28 2.01 99 TR_XM_DKIM_Undo 6800 9.49 26.13 1.94 100 MIME_HTML_MOSTLY 6731 2.61 4.14 1.92 101 BAYES_05 6498 1.49 0.70 1.85 102 XMSexyCombo_05 6432 2.46 3.83 1.83 103 T_XMDrugObfuBody_14 6396 2.42 3.74 1.82 104 XM_CamelCaseFrm001 6391 2.42 3.74 1.82 105 HTML_IMAGE_RATIO_08 6385 1.89 2.04 1.82 106 TO_MALFORMED 6257 1.23 0.00 1.78 107 DKIM_INVALID 6209 2.54 4.23 1.77 108 TR_XM_SpammyRelay 5946 4.37 10.25 1.70 109 KHOP_HELO_FCRDNS 5779 1.58 1.44 1.65 110 RCVD_IN_IADB_OPTIN 5652 1.17 0.21 1.61 111 XM_DK_Undo_01 5438 1.52 1.46 1.55 112 XM_B_URI_Unicode 5396 1.79 2.34 1.54 113 UNTRUSTED_Relay 5291 2.92 6.05 1.51 114 TM2_M_URI_OPT_OUT 5200 1.65 2.03 1.48 115 TR_XM_UnparsRelay 5192 3.54 8.07 1.48 116 TR_XM_PhishingBody 5165 2.29 4.09 1.47 117 TR_MetaPhish_Combo_01 4720 1.50 1.84 1.35 118 XM_B_Investor 4696 2.12 3.84 1.34 119 URI_NOVOWEL 4601 1.20 0.94 1.31 120 TooManyTo_003 4559 1.03 0.45 1.30 121 FROM_EXCESS_BASE64 4551 1.45 1.78 1.30 122 XM_SendGrid 4441 1.38 1.64 1.27 123 XM_B_Unsub2 4418 1.75 2.84 1.26 124 T_XMDrugObfuBody_08 4412 1.55 2.18 1.26 125 XMGappySubj_01 4407 1.03 0.52 1.26 126 TR_Symld_Words 4330 1.08 0.75 1.23 127 TR_DCC_Bayes_99 4303 6.95 19.57 1.23 128 SUBJ_ALL_CAPS 4290 1.47 2.02 1.22 129 XMDiploma_00 4278 1.75 2.93 1.22 130 IN_HORDE_ADDRESS_BOOK 4267 0.86 0.08 1.22 131 BOTNET 4235 3.61 8.90 1.21 132 XM_SPF_SoftFail 4112 1.49 2.20 1.17 133 TR_XM_SpammyWords5 4012 1.90 3.57 1.14 134 XM_OfRef6 3863 1.74 3.14 1.10 135 URI_HEX 3833 1.15 1.27 1.09 136 XMStockSpam_06 3661 1.26 1.75 1.04 137 T_TooManySym_03 3655 0.81 0.31 1.04 138 MAY_BE_FORGED 3540 0.93 0.76 1.01 139 XM_GoogleGroups 3538 0.90 0.66 1.01 140 XM_UB50 3486 1.86 3.78 0.99 141 TooManyTo_004 3451 0.80 0.40 0.98 142 TVD_SPACE_RATIO 3150 0.67 0.17 0.90 143 HELO_NO_DOMAIN 3085 0.66 0.17 0.88 144 HELO_NODOT 3085 0.66 0.17 0.88 145 XMCapTrack 2847 0.68 0.39 0.81 146 URI_OPTOUT_3LD 2799 0.82 0.87 0.80 147 FILL_THIS_FORM 2779 0.66 0.38 0.79 148 TooManyTo_005 2762 0.66 0.37 0.79 149 T_XMDrugObfuBody_00 2758 1.07 1.68 0.79 150 TR_XM_DK_SendGrid 2734 0.77 0.76 0.78 151 XMBrknScrpt_02 2724 1.02 1.55 0.78 152 XM_ShortIntro_01 2706 0.68 0.47 0.77 153 FROM_GOV_DKIM_AU 2662 0.57 0.15 0.76 154 TVD_RCVD_IP 2644 0.79 0.87 0.75 155 RELAYCOUNTRY_CA 2572 2.24 5.57 0.73 156 XM_H_Long_From02 2571 0.80 0.96 0.73 157 XM_H_PHPMailer 2552 0.69 0.60 0.73 158 T_FILL_THIS_FORM_SHORT 2533 1.08 1.86 0.72 159 TR_XM_Base64_M1 2469 0.67 0.59 0.70 160 TM2_M_OBFU_COMMENT 2463 0.68 0.63 0.70 161 RCVD_IN_BL_SPAMCOP_NET 2341 3.13 8.57 0.67 162 XM_B_SpammyWords4 2236 1.12 2.19 0.64 163 XMGenDplmaNmb 2233 0.93 1.59 0.64 164 FILL_THIS_FORM_LONG 2198 0.53 0.32 0.63 165 XMSubMetaSxObfu_03 2149 0.59 0.55 0.61 166 DKIM_ADSP_CUSTOM_MED 2096 0.65 0.76 0.60 167 XM_B_DNDMA 2062 0.75 1.11 0.59 168 RELAYCOUNTRY_AU 2046 1.08 2.19 0.58 169 SpammyFromTLD_01 2044 0.85 1.44 0.58 170 XMSlimDrugH 2020 0.64 0.80 0.58 171 XMLngstWrd_00 2008 0.69 0.94 0.57 172 HTML_IMAGE_ONLY_32 2008 0.48 0.27 0.57 173 RCVD_IN_PBL 1999 0.62 0.72 0.57 174 HTTPS_HTTP_MISMATCH 1999 0.65 0.84 0.57 175 MPART_ALT_DIFF_COUNT 1965 0.69 0.97 0.56 176 T_TVD_MIME_NO_HEADERS 1945 0.40 0.06 0.55 177 XM_B_COPY_HTML 1923 0.71 1.05 0.55 178 XMBdyGiftCard01 1908 0.72 1.09 0.54 179 XMNoVowels 1907 0.50 0.40 0.54 180 XMGappySubj_02 1810 0.37 0.06 0.52 181 T_OBFU_PDF_ATTACH 1784 0.38 0.08 0.51 182 XMPhish30 1685 0.71 1.20 0.48 183 SpammyFromTLD_02 1676 0.82 1.58 0.48 184 XMBSHREFv2 1674 0.44 0.35 0.48 185 J_POPCORN_WO_D 1637 0.42 0.32 0.47 186 RCVD_IN_MSPIKE_BL 1627 1.81 4.77 0.46 187 TR_XM_MSPIKECOMBO 1626 1.81 4.77 0.46 188 RELAYCOUNTRY_GB 1605 0.53 0.68 0.46 189 T_XMHurry_00 1582 0.95 2.06 0.45 190 TR_XM_SpammyWords2 1522 3.49 10.23 0.43 191 URI_TRY_3LD 1520 0.69 1.27 0.43 192 MSGID_FROM_MTA_HEADER 1507 0.35 0.17 0.43 193 XMBody_95 1497 0.33 0.12 0.43 194 T_Symld_Words_02 1488 0.58 0.92 0.42 195 XMSolicitRefs_0 1487 0.51 0.69 0.42 196 TRACKER_ID 1460 0.31 0.07 0.42 197 XMLngstWrd_01 1433 0.52 0.77 0.41 198 XM_OfRef7 1410 0.40 0.40 0.40 199 XMSubMetaI_00 1378 0.58 0.98 0.39 200 XMPhish14 1372 0.46 0.60 0.39 ----------------------------------------------------------------------