Email: 570789 Autolearn: 0 AvgScore: 5.60 AvgScanTime: 1.29 sec Spam: 200724 Autolearn: 0 AvgScore: 13.60 AvgScanTime: 1.36 sec Ham: 370065 Autolearn: 0 AvgScore: 1.26 AvgScanTime: 1.25 sec Time Spent Running SA: 203.86 hours Time Spent Processing Spam: 75.57 hours Time Spent Processing Ham: 128.29 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 194131 91.72 96.72 89.01 2 XM_B_Unicode 173249 78.44 86.31 74.18 3 RELAYCOUNTRY_US 172184 81.51 85.78 79.19 4 DKIM_SIGNED 140888 68.25 70.19 67.20 5 XM_DK_Pass 133754 66.34 66.64 66.18 6 DKIM_VALID 132832 65.64 66.18 65.35 7 DCC_CHECK 116161 46.21 57.87 39.88 8 XM_B_SpammyWords 115378 48.95 57.48 44.32 9 XM_B_Unicode3 105439 46.95 52.53 43.92 10 XMListUnsubscribeExists 104894 46.45 52.26 43.30 11 DKIM_VALID_AU 103222 52.78 51.42 53.51 12 DCC_CHECK_NEGATIVE 82512 53.40 41.11 60.07 13 LOC_TINY_FONT_1 79854 30.54 39.78 25.53 14 BAYES_50 75347 50.24 37.54 57.12 15 XM_DK_Undo_02 66658 14.83 33.21 4.86 16 BOTNET_IPINHOSTNAME 64211 16.03 31.99 7.37 17 BOTNET 62319 14.53 31.05 5.57 18 XM_B_SpammyWords2 58079 20.96 28.93 16.63 19 HTML_FONT_LOW_CONTRAST 56599 26.32 28.20 25.29 20 FVGT_m_MULTI_ODD 55302 24.36 27.55 22.62 21 DKIM_VALID_EF 53801 26.73 26.80 26.69 22 HTML_IMAGE_RATIO_04 49049 16.28 24.44 11.86 23 XM_Multi_Part_URI 48210 16.37 24.02 12.23 24 ANY_BOUNCE_MESSAGE 46960 15.79 23.40 11.67 25 BOUNCE_MESSAGE 46960 15.79 23.40 11.67 26 DKIM_ADSP_NXDOMAIN 46364 13.78 23.10 8.73 27 MIME_HTML_ONLY 45853 18.46 22.84 16.08 28 HTML_FONT_FACE_BAD 44941 13.43 22.39 8.57 29 BAYES_99 44820 9.94 22.33 3.22 30 TR_XM_DKIM_Undo 44380 8.86 22.11 1.67 31 T_KAM_HTML_FONT_INVALID 43792 20.92 21.82 20.44 32 XMSubLong 40892 20.28 20.37 20.23 33 TR_XM_DK_Unsub 40573 14.90 20.21 12.02 34 BAYES_999 34405 7.63 17.14 2.47 35 T_TM2_M_HEADER_IN_MSG 33549 22.77 16.71 26.05 36 DATE_IN_PAST_24_48 32893 6.33 16.39 0.87 37 TR_DCC_Bayes_99 31089 6.30 15.49 1.31 38 MPART_ALT_DIFF 30296 13.66 15.09 12.89 39 XM_B_Unsub 28992 10.20 14.44 7.89 40 RCVD_IN_MSPIKE_H2 27865 14.14 13.88 14.28 41 TR_XM_BayesUnsub 27419 8.62 13.66 5.88 42 UNPARSEABLE_RELAY 27149 11.30 13.53 10.09 43 RELAYCOUNTRY_META 26875 6.71 13.39 3.08 44 MIME_HTML_MOSTLY 26463 12.05 13.18 11.43 45 TR_MAX_INTL_RELAY 25832 7.85 12.87 5.13 46 RCVD_IN_BL_SPAMCOP_NET 22823 4.41 11.37 0.63 47 XM_B_SpammyWords3 22310 6.57 11.11 4.10 48 LOTS_OF_MONEY 19621 7.45 9.78 6.20 49 TR_XM_SpammyRelay 19144 4.39 9.54 1.59 50 TR_XM_SpammyWords4 17980 5.87 8.96 4.20 51 BAYES_80 16641 4.98 8.29 3.18 52 RCVD_IN_MSPIKE_BL 16411 3.48 8.18 0.93 53 TR_XM_MSPIKECOMBO 16309 3.45 8.13 0.92 54 XM_Evil_Numbers_Gen 16296 8.37 8.12 8.50 55 TR_XM_UnparsRelay 15092 3.51 7.52 1.33 56 FSL_BULK_SIG 14951 8.12 7.45 8.48 57 TR_XM_SpammyWords2 14379 2.79 7.16 0.42 58 BAYES_60 14275 6.45 7.11 6.10 59 HTML_IMAGE_RATIO_02 14209 5.18 7.08 4.15 60 RCVD_IN_MSPIKE_WL 13642 11.59 6.80 14.19 61 XM_B_Phish_Phrases 13048 5.17 6.50 4.45 62 BAYES_00 12992 13.71 6.47 17.64 63 XM_UncommonTLD01 12828 4.58 6.39 3.61 64 BAYES_40 12670 5.41 6.31 4.92 65 HTML_IMAGE_RATIO_06 11646 4.06 5.80 3.12 66 RCVD_IN_MSPIKE_L4 10977 1.97 5.47 0.07 67 HTML_FONT_TINY_NORDNS 10969 1.97 5.46 0.08 68 UNTRUSTED_Relay 10799 2.84 5.38 1.46 69 RCVD_IN_PSBL 10336 2.09 5.15 0.43 70 XM_Body_Dirty_Words 9956 3.10 4.96 2.10 71 RELAYCOUNTRY_CA 9664 2.09 4.81 0.62 72 LotsOfNums_01 9450 6.18 4.71 6.99 73 BAYES_20 9422 3.92 4.69 3.49 74 TR_XM_SpammyWords3 9343 1.96 4.65 0.50 75 XM_B_PhoneNumber 9190 7.49 4.58 9.07 76 BAYES_95 8595 2.77 4.28 1.95 77 DKIM_INVALID 8056 2.61 4.01 1.85 78 XMStrtUSub 8039 4.26 4.01 4.40 79 XMSubMetaSx_00 8009 3.22 3.99 2.80 80 XM_H_Long_From01 7988 4.69 3.98 5.08 81 RCVD_IN_MSPIKE_H3 7600 5.87 3.79 7.00 82 XM_H_GMP 7455 4.72 3.71 5.26 83 XM_B_Investor 7305 2.15 3.64 1.35 84 XM_SPF_SoftFail 6732 1.97 3.35 1.22 85 TR_XM_PhishingBody 6547 2.10 3.26 1.47 86 TR_XM_SPAMCOP 6522 1.26 3.25 0.19 87 XM_URI_RBL 6477 1.28 3.23 0.23 88 XMSexyCombo_05 6406 1.64 3.19 0.80 89 RCVD_IN_VALIDITY_RPBL 6322 1.14 3.15 0.05 90 XM_B_SpammyTLD 6083 2.67 3.03 2.48 91 T_XMDrugObfuBody_14 6024 2.08 3.00 1.59 92 XM_CamelCaseFrm001 5961 2.30 2.97 1.94 93 TooManyTo_001 5703 5.76 2.84 7.34 94 TM2_M_URI_OPT_OUT 5651 2.27 2.82 1.98 95 LongTLD 5554 1.27 2.77 0.46 96 XMDiploma_00 5322 2.17 2.65 1.91 97 XM_H_Long_From02 5212 1.34 2.60 0.66 98 T_XMDrugObfuBody_08 5209 1.79 2.60 1.36 99 XM_OfRef6 5204 1.51 2.59 0.92 100 MIME_HTML_ONLY_MULTI 5083 2.30 2.53 2.18 101 TR_XM_SpammyWords5 5019 1.68 2.50 1.24 102 XM_B_Unsub2 5000 1.73 2.49 1.31 103 HTML_IMAGE_RATIO_08 5000 2.64 2.49 2.72 104 TR_XM_NoHeaderRelay 4919 1.00 2.45 0.22 105 TM2_M_VERY_LONG_WORD 4810 1.67 2.40 1.28 106 XMNumbers 4777 3.12 2.38 3.52 107 RELAYCOUNTRY_AU 4691 1.14 2.34 0.49 108 MIME_QP_LONG_LINE 4670 4.05 2.33 4.99 109 HTML_MIME_NO_HTML_TAG 4644 2.24 2.31 2.20 110 T_TooManySym_01 4573 4.36 2.28 5.49 111 XM_UB50 4487 1.40 2.24 0.95 112 RCVD_IN_MSPIKE_L3 4348 1.30 2.17 0.82 113 TR_XM_INV_DKIM 4198 0.75 2.09 0.03 114 XM_B_URI_Unicode 4105 1.75 2.05 1.60 115 BAYES_05 3932 2.23 1.96 2.37 116 XMBody_17 3780 0.93 1.88 0.42 117 XM_E_Blogspot 3741 1.14 1.86 0.74 118 XM_B_SpammyWords4 3689 0.98 1.84 0.52 119 RCVD_IN_PBL 3649 1.06 1.82 0.64 120 USER_IN_DEF_DKIM_WL 3507 8.24 1.75 11.76 121 T_FILL_THIS_FORM_SHORT 3451 1.06 1.72 0.71 122 TR_XM_MSPIKECOMBO2 3447 0.64 1.72 0.06 123 XMGenDplmaNmb 3296 1.24 1.64 1.01 124 SpammyFromTLD_02 3284 0.89 1.64 0.48 125 FROM_EXCESS_BASE64 3247 1.57 1.62 1.55 126 RCVD_IN_MSPIKE_H4 3232 2.37 1.61 2.79 127 T_Symld_Words_02 3125 1.05 1.56 0.78 128 XMStockSpam_06 3076 1.24 1.53 1.08 129 XMBrknScrpt_02 2981 1.00 1.49 0.73 130 RCVD_IN_VALIDITY_SAFE 2958 2.74 1.47 3.42 131 MAILING_LIST_MULTI 2927 2.33 1.46 2.81 132 T_REMOTE_IMAGE 2913 2.56 1.45 3.16 133 RCVD_IN_MSPIKE_H5 2811 3.35 1.40 4.40 134 T_HTML_ATTACH 2728 0.52 1.36 0.07 135 XM_HighProb1 2684 0.47 1.34 0.00 136 HTML_IMAGE_ONLY_20 2595 0.63 1.29 0.27 137 TR_LOTS_OF_MONEY3 2564 0.63 1.28 0.28 138 XM_DK_Undo_01 2484 1.45 1.24 1.57 139 RCVD_IN_VALIDITY_CERTIFIED 2454 2.37 1.22 2.99 140 DATE_IN_PAST_12_24 2417 2.06 1.20 2.52 141 SUBJ_ALL_CAPS 2400 1.15 1.20 1.12 142 XMPhish30 2379 0.74 1.19 0.50 143 SpammyFromTLD_01 2378 0.88 1.18 0.71 144 T_XMDrugObfuBody_00 2254 0.83 1.12 0.68 145 BOTNET_NORDNS 2245 0.40 1.12 0.01 146 ALL_TRUSTED 2234 12.13 1.11 18.10 147 RCVD_IN_IADB_LISTED 2194 2.30 1.09 2.96 148 URI_HEX 2192 1.11 1.09 1.12 149 KHOP_HELO_FCRDNS 2168 1.17 1.08 1.21 150 HK_RANDOM_REPLYTO 2134 0.43 1.06 0.09 151 T_XMHurry_00 2099 0.67 1.05 0.46 152 TR_XM_INTL_Spamhaus 2042 0.45 1.02 0.15 153 SHORTCIRCUIT 2028 0.36 1.01 0.00 154 RCVD_IN_ZEN_LASTEXTERNAL 2028 0.36 1.01 0.00 155 XM_SendGrid 2018 1.19 1.01 1.30 156 XM_ProductURIs 2009 0.69 1.00 0.52 157 TR_XM_MaxSPIKE 2003 0.38 1.00 0.05 158 URI_TRY_3LD 1932 0.82 0.96 0.74 159 XM_B_COPY_HTML 1910 0.70 0.95 0.56 160 XMBdyGiftCard01 1879 0.54 0.94 0.33 161 RCVD_IN_IADB_SPF 1870 2.03 0.93 2.63 162 URI_NOVOWEL 1848 1.08 0.92 1.17 163 XM_UB80 1834 0.33 0.91 0.02 164 XM_UB99 1826 0.32 0.91 0.00 165 DIET_1 1790 0.48 0.89 0.26 166 TR_Mismatch_TLD_02 1784 0.36 0.89 0.07 167 XM_B_COVIDMETA 1777 0.36 0.89 0.08 168 XM_B_DNDMA 1752 0.66 0.87 0.54 169 RCVD_IN_IADB_DK 1743 1.81 0.87 2.32 170 HTTPS_HTTP_MISMATCH 1734 0.77 0.86 0.72 171 RCVD_IN_IADB_SENDERID 1706 1.84 0.85 2.37 172 XMSubMetaI_00 1699 0.60 0.85 0.47 173 XM_B_Phish66 1691 0.48 0.84 0.29 174 MPART_ALT_DIFF_COUNT 1683 0.61 0.84 0.49 175 XM_H_Undi_Recip 1640 0.39 0.82 0.15 176 XM_B_SEO 1611 0.40 0.80 0.19 177 TR_XM_GMP_BULK_SIG 1593 0.45 0.79 0.27 178 STY_INVIS_DIRECT 1580 0.45 0.79 0.27 179 RELAYCOUNTRY_FR 1561 0.45 0.78 0.28 180 TR_XM_RelayPhish 1561 0.32 0.78 0.07 181 RDNS_DYNAMIC 1555 0.36 0.77 0.14 182 TR_LOTS_OF_MONEY2 1554 0.37 0.77 0.14 183 T_MONEY_PERCENT 1554 0.37 0.77 0.14 184 XM_UB60 1552 0.32 0.77 0.07 185 XMBody_78 1542 0.48 0.77 0.33 186 TM2_M_OBFU_COMMENT 1532 0.41 0.76 0.22 187 PDS_RDNS_DYNAMIC_FP 1527 0.29 0.76 0.03 188 HTML_TAG_BALANCE_BODY 1525 0.56 0.76 0.46 189 TR_XM_FormFill 1514 0.27 0.75 0.01 190 XMPhish14 1489 0.50 0.74 0.37 191 RCVD_IN_XBL 1481 0.27 0.74 0.01 192 TVD_RCVD_IP 1459 0.93 0.73 1.04 193 TR_Symld_Words 1457 1.11 0.73 1.32 194 THIS_AD 1424 0.46 0.71 0.33 195 TR_XM_InvalidRelay 1421 0.26 0.71 0.01 196 SHOPIFY_IMG_NOT_RCVD_SFY 1418 0.36 0.71 0.16 197 XM_ShortIntro_01 1413 0.86 0.70 0.95 198 DKIM_ADSP_CUSTOM_MED 1412 0.67 0.70 0.65 199 TR_XM_PHPForged 1397 0.39 0.70 0.22 200 TR_XM_PHPDW 1389 0.39 0.69 0.23 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 329392 91.72 96.72 89.01 2 RELAYCOUNTRY_US 293062 81.51 85.78 79.19 3 XM_B_Unicode 274496 78.44 86.31 74.18 4 DKIM_SIGNED 248678 68.25 70.19 67.20 5 XM_DK_Pass 244896 66.34 66.64 66.18 6 DKIM_VALID 241835 65.64 66.18 65.35 7 DCC_CHECK_NEGATIVE 222307 53.40 41.11 60.07 8 BAYES_50 211394 50.24 37.54 57.12 9 DKIM_VALID_AU 198012 52.78 51.42 53.51 10 XM_B_SpammyWords 164021 48.95 57.48 44.32 11 XM_B_Unicode3 162546 46.95 52.53 43.92 12 XMListUnsubscribeExists 160221 46.45 52.26 43.30 13 DCC_CHECK 147578 46.21 57.87 39.88 14 DKIM_VALID_EF 98777 26.73 26.80 26.69 15 T_TM2_M_HEADER_IN_MSG 96395 22.77 16.71 26.05 16 LOC_TINY_FONT_1 94474 30.54 39.78 25.53 17 HTML_FONT_LOW_CONTRAST 93607 26.32 28.20 25.29 18 FVGT_m_MULTI_ODD 83716 24.36 27.55 22.62 19 T_KAM_HTML_FONT_INVALID 75639 20.92 21.82 20.44 20 XMSubLong 74850 20.28 20.37 20.23 21 ALL_TRUSTED 66989 12.13 1.11 18.10 22 BAYES_00 65276 13.71 6.47 17.64 23 XM_B_SpammyWords2 61549 20.96 28.93 16.63 24 MIME_HTML_ONLY 59497 18.46 22.84 16.08 25 RCVD_IN_MSPIKE_H2 52850 14.14 13.88 14.28 26 RCVD_IN_MSPIKE_WL 52501 11.59 6.80 14.19 27 MPART_ALT_DIFF 47698 13.66 15.09 12.89 28 XM_Multi_Part_URI 45247 16.37 24.02 12.23 29 TR_XM_DK_Unsub 44486 14.90 20.21 12.02 30 HTML_IMAGE_RATIO_04 43899 16.28 24.44 11.86 31 USER_IN_DEF_DKIM_WL 43522 8.24 1.75 11.76 32 ANY_BOUNCE_MESSAGE 43177 15.79 23.40 11.67 33 BOUNCE_MESSAGE 43170 15.79 23.40 11.67 34 MIME_HTML_MOSTLY 42294 12.05 13.18 11.43 35 UNPARSEABLE_RELAY 37344 11.30 13.53 10.09 36 XM_B_PhoneNumber 33563 7.49 4.58 9.07 37 DKIM_ADSP_NXDOMAIN 32307 13.78 23.10 8.73 38 HTML_FONT_FACE_BAD 31731 13.43 22.39 8.57 39 XM_Evil_Numbers_Gen 31473 8.37 8.12 8.50 40 FSL_BULK_SIG 31396 8.12 7.45 8.48 41 XM_B_Unsub 29212 10.20 14.44 7.89 42 BOTNET_IPINHOSTNAME 27260 16.03 31.99 7.37 43 TooManyTo_001 27164 5.76 2.84 7.34 44 RCVD_IN_MSPIKE_H3 25906 5.87 3.79 7.00 45 LotsOfNums_01 25851 6.18 4.71 6.99 46 TR_XM_DK_Bayes 23342 4.24 0.43 6.31 47 TR_XM_DK_Bayes1 22991 4.18 0.43 6.21 48 LOTS_OF_MONEY 22928 7.45 9.78 6.20 49 BAYES_60 22563 6.45 7.11 6.10 50 TR_XM_BayesUnsub 21776 8.62 13.66 5.88 51 XM_DKIMWhitelistDomains 21771 3.82 0.00 5.88 52 BOTNET 20601 14.53 31.05 5.57 53 T_TooManySym_01 20308 4.36 2.28 5.49 54 TR_XM_DK_Bayes2 19613 3.55 0.32 5.30 55 XM_H_GMP 19469 4.72 3.71 5.26 56 TR_MAX_INTL_RELAY 18978 7.85 12.87 5.13 57 XM_H_Long_From01 18791 4.69 3.98 5.08 58 MIME_QP_LONG_LINE 18452 4.05 2.33 4.99 59 BAYES_40 18223 5.41 6.31 4.92 60 XM_DK_Undo_02 17972 14.83 33.21 4.86 61 XM_PDF 16594 3.11 0.58 4.48 62 XM_B_Phish_Phrases 16456 5.17 6.50 4.45 63 RCVD_IN_MSPIKE_H5 16284 3.35 1.40 4.40 64 XMStrtUSub 16276 4.26 4.01 4.40 65 TR_XM_SpammyWords4 15546 5.87 8.96 4.20 66 HTML_IMAGE_RATIO_02 15346 5.18 7.08 4.15 67 XM_B_SpammyWords3 15186 6.57 11.11 4.10 68 XM_UncommonTLD01 13341 4.58 6.39 3.61 69 XMNumbers 13021 3.12 2.38 3.52 70 BAYES_20 12926 3.92 4.69 3.49 71 RCVD_IN_VALIDITY_SAFE 12672 2.74 1.47 3.42 72 BAYES_99 11926 9.94 22.33 3.22 73 BAYES_80 11771 4.98 8.29 3.18 74 T_REMOTE_IMAGE 11704 2.56 1.45 3.16 75 HTML_IMAGE_RATIO_06 11543 4.06 5.80 3.12 76 RELAYCOUNTRY_META 11402 6.71 13.39 3.08 77 RCVD_IN_VALIDITY_CERTIFIED 11062 2.37 1.22 2.99 78 RCVD_IN_IADB_LISTED 10943 2.30 1.09 2.96 79 T_TooManySym_02 10552 2.00 0.42 2.85 80 MAILING_LIST_MULTI 10382 2.33 1.46 2.81 81 XMSubMetaSx_00 10374 3.22 3.99 2.80 82 RCVD_IN_MSPIKE_H4 10311 2.37 1.61 2.79 83 HTML_IMAGE_RATIO_08 10048 2.64 2.49 2.72 84 RCVD_IN_IADB_SPF 9735 2.03 0.93 2.63 85 DATE_IN_PAST_12_24 9319 2.06 1.20 2.52 86 XM_B_SpammyTLD 9176 2.67 3.03 2.48 87 BAYES_999 9134 7.63 17.14 2.47 88 BAYES_05 8779 2.23 1.96 2.37 89 RCVD_IN_IADB_SENDERID 8776 1.84 0.85 2.37 90 RCVD_IN_IADB_DK 8578 1.81 0.87 2.32 91 HTML_MIME_NO_HTML_TAG 8136 2.24 2.31 2.20 92 MIME_HTML_ONLY_MULTI 8060 2.30 2.53 2.18 93 INVALID_MSGID 7828 1.47 0.29 2.12 94 XM_Body_Dirty_Words 7764 3.10 4.96 2.10 95 TooManyTo_002 7588 1.48 0.44 2.05 96 TM2_M_URI_OPT_OUT 7332 2.27 2.82 1.98 97 BAYES_95 7206 2.77 4.28 1.95 98 XM_CamelCaseFrm001 7161 2.30 2.97 1.94 99 XMDiploma_00 7086 2.17 2.65 1.91 100 RCVD_IN_IADB_VOUCHED 6887 1.41 0.59 1.86 101 DKIM_INVALID 6843 2.61 4.01 1.85 102 MSGID_NOFQDN1 6781 1.22 0.10 1.83 103 TO_MALFORMED 6344 1.11 0.00 1.71 104 TR_XM_DKIM_Undo 6192 8.86 22.11 1.67 105 XM_B_URI_Unicode 5903 1.75 2.05 1.60 106 TR_XM_SpammyRelay 5888 4.39 9.54 1.59 107 T_XMDrugObfuBody_14 5868 2.08 3.00 1.59 108 XM_DK_Undo_01 5803 1.45 1.24 1.57 109 FROM_EXCESS_BASE64 5739 1.57 1.62 1.55 110 TR_XM_PhishingBody 5428 2.10 3.26 1.47 111 UNTRUSTED_Relay 5408 2.84 5.38 1.46 112 T_XMDrugObfuBody_08 5028 1.79 2.60 1.36 113 XM_B_Investor 4990 2.15 3.64 1.35 114 TR_XM_UnparsRelay 4927 3.51 7.52 1.33 115 TR_Symld_Words 4886 1.11 0.73 1.32 116 XM_B_Unsub2 4863 1.73 2.49 1.31 117 TR_DCC_Bayes_99 4853 6.30 15.49 1.31 118 RCVD_IN_IADB_OPTIN 4844 0.98 0.39 1.31 119 TooManyTo_003 4806 0.96 0.34 1.30 120 XM_SendGrid 4798 1.19 1.01 1.30 121 TM2_M_VERY_LONG_WORD 4748 1.67 2.40 1.28 122 XM_GoogleGroups 4660 1.04 0.64 1.26 123 TR_XM_SpammyWords5 4584 1.68 2.50 1.24 124 XM_SPF_SoftFail 4520 1.97 3.35 1.22 125 HELO_NODOT 4495 0.88 0.27 1.21 126 HELO_NO_DOMAIN 4485 0.88 0.26 1.21 127 KHOP_HELO_FCRDNS 4482 1.17 1.08 1.21 128 IN_HORDE_ADDRESS_BOOK 4369 0.79 0.06 1.18 129 XMGappySubj_01 4358 0.82 0.15 1.18 130 URI_NOVOWEL 4337 1.08 0.92 1.17 131 URI_HEX 4156 1.11 1.09 1.12 132 SUBJ_ALL_CAPS 4143 1.15 1.20 1.12 133 FROM_GOV_DKIM_AU 4095 0.79 0.20 1.11 134 XMStockSpam_06 3997 1.24 1.53 1.08 135 TVD_RCVD_IP 3846 0.93 0.73 1.04 136 T_TooManySym_03 3775 0.71 0.13 1.02 137 XMGenDplmaNmb 3754 1.24 1.64 1.01 138 TooManyTo_004 3684 0.74 0.27 1.00 139 XMCapTrack 3579 0.75 0.36 0.97 140 XM_UB50 3532 1.40 2.24 0.95 141 XM_ShortIntro_01 3521 0.86 0.70 0.95 142 RCVD_IN_MSPIKE_BL 3435 3.48 8.18 0.93 143 TR_XM_MSPIKECOMBO 3410 3.45 8.13 0.92 144 XM_OfRef6 3404 1.51 2.59 0.92 145 DATE_IN_PAST_24_48 3225 6.33 16.39 0.87 146 TR_XM_DK_SendGrid 3145 0.76 0.58 0.85 147 TooManyTo_005 3056 0.62 0.24 0.83 148 RCVD_IN_MSPIKE_L3 3051 1.30 2.17 0.82 149 XMSexyCombo_05 2976 1.64 3.19 0.80 150 TVD_SPACE_RATIO 2951 0.56 0.12 0.80 151 T_Symld_Words_02 2895 1.05 1.56 0.78 152 URI_TRY_3LD 2740 0.82 0.96 0.74 153 XM_E_Blogspot 2738 1.14 1.86 0.74 154 XMBrknScrpt_02 2704 1.00 1.49 0.73 155 HTTPS_HTTP_MISMATCH 2647 0.77 0.86 0.72 156 SpammyFromTLD_01 2636 0.88 1.18 0.71 157 T_FILL_THIS_FORM_SHORT 2611 1.06 1.72 0.71 158 T_XMDrugObfuBody_00 2502 0.83 1.12 0.68 159 XM_H_Long_From02 2437 1.34 2.60 0.66 160 DKIM_ADSP_CUSTOM_MED 2402 0.67 0.70 0.65 161 RCVD_IN_PBL 2376 1.06 1.82 0.64 162 RCVD_IN_BL_SPAMCOP_NET 2330 4.41 11.37 0.63 163 XMBSHREFv2 2324 0.55 0.41 0.63 164 RELAYCOUNTRY_CA 2289 2.09 4.81 0.62 165 XMGappySubj_02 2269 0.41 0.04 0.61 166 XM_H_PHPMailer 2261 0.52 0.35 0.61 167 XMSlimDrugH 2194 0.60 0.61 0.59 168 RELAYCOUNTRY_GB 2166 0.62 0.68 0.59 169 TR_MetaPhish_Combo_01 2154 0.59 0.61 0.58 170 HTML_IMAGE_ONLY_32 2134 0.43 0.16 0.58 171 T_OBFU_PDF_ATTACH 2127 0.40 0.07 0.57 172 TR_XM_Base64_M1 2073 0.59 0.65 0.56 173 XM_B_COPY_HTML 2059 0.70 0.95 0.56 174 XMNoVowels 2015 0.46 0.31 0.54 175 XM_B_DNDMA 2003 0.66 0.87 0.54 176 XMMoneyMeta_00 1999 0.54 0.53 0.54 177 XMLngstWrd_00 1983 0.48 0.38 0.54 178 XM_B_SpammyWords4 1919 0.98 1.84 0.52 179 XM_ProductURIs 1918 0.69 1.00 0.52 180 XMPhish30 1868 0.74 1.19 0.50 181 TR_XM_SpammyWords3 1860 1.96 4.65 0.50 182 MSGID_FROM_MTA_HEADER 1858 0.40 0.23 0.50 183 RELAYCOUNTRY_AU 1827 1.14 2.34 0.49 184 MPART_ALT_DIFF_COUNT 1815 0.61 0.84 0.49 185 T_TVD_MIME_NO_HEADERS 1791 0.32 0.03 0.48 186 SpammyFromTLD_02 1785 0.89 1.64 0.48 187 XMSubMetaI_00 1726 0.60 0.85 0.47 188 LongTLD 1704 1.27 2.77 0.46 189 T_XMHurry_00 1701 0.67 1.05 0.46 190 HTML_TAG_BALANCE_BODY 1688 0.56 0.76 0.46 191 XMDateMe_00 1669 0.44 0.42 0.45 192 XMHTML_After_End 1611 0.51 0.65 0.44 193 RCVD_IN_PSBL 1608 2.09 5.15 0.43 194 PLING_QUERY 1602 0.43 0.43 0.43 195 FORGED_GMAIL_RCVD 1556 0.45 0.51 0.42 196 XMBody_17 1542 0.93 1.88 0.42 197 TR_XM_SpammyWords2 1538 2.79 7.16 0.42 198 XMBody_95 1459 0.36 0.30 0.39 199 TR_XM_GMP_MSPIKE_UNDO2 1419 0.30 0.14 0.38 200 XMLngstWrd_01 1401 0.35 0.31 0.38 ----------------------------------------------------------------------