Email: 507108 Autolearn: 0 AvgScore: 4.59 AvgScanTime: 1.26 sec Spam: 133122 Autolearn: 0 AvgScore: 14.93 AvgScanTime: 1.43 sec Ham: 373986 Autolearn: 0 AvgScore: 0.91 AvgScanTime: 1.20 sec Time Spent Running SA: 177.36 hours Time Spent Processing Spam: 53.03 hours Time Spent Processing Ham: 124.33 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 125493 90.37 94.27 88.99 2 DKIM_SIGNED 114899 66.68 86.31 59.69 3 XM_B_Unicode 109506 73.45 82.26 70.31 4 XM_DK_Pass 108748 64.50 81.69 58.39 5 RELAYCOUNTRY_US 108074 72.95 81.18 70.02 6 DKIM_VALID 107137 63.44 80.48 57.37 7 DCC_CHECK 97673 41.67 73.37 30.39 8 XMListUnsubscribeExists 90737 45.33 68.16 37.20 9 XM_B_SpammyWords 89559 44.88 67.28 36.90 10 DKIM_VALID_AU 83110 50.21 62.43 45.86 11 XM_B_Unicode3 63955 38.62 48.04 35.27 12 LOC_TINY_FONT_1 61741 27.60 46.38 20.92 13 BAYES_50 53884 57.46 40.48 63.51 14 XM_B_SpammyWords2 53402 21.25 40.12 14.53 15 RCVD_IN_MSPIKE_H2 51920 30.81 39.00 27.89 16 HTML_FONT_LOW_CONTRAST 48935 29.46 36.76 26.86 17 XM_DK_Undo_02 48023 11.75 36.07 3.09 18 T_KAM_HTML_FONT_INVALID 43307 20.72 32.53 16.52 19 FVGT_m_MULTI_ODD 40965 23.41 30.77 20.79 20 MIME_HTML_ONLY 38467 30.18 28.90 30.64 21 BAYES_99 37483 9.03 28.16 2.22 22 DKIM_VALID_EF 37342 24.93 28.05 23.82 23 XMSubLong 33987 30.05 25.53 31.65 24 TR_XM_DKIM_Undo 33242 7.37 24.97 1.11 25 DCC_CHECK_NEGATIVE 32717 57.76 24.58 69.57 26 T_TM2_M_HEADER_IN_MSG 29466 28.28 22.13 30.47 27 TR_DCC_Bayes_99 28138 6.05 21.14 0.67 28 BAYES_999 28064 6.74 21.08 1.63 29 XM_Multi_Part_URI 27146 12.66 20.39 9.90 30 TR_XM_DK_Unsub 25809 12.35 19.39 9.85 31 TR_MAX_INTL_RELAY 22094 7.43 16.60 4.16 32 UNPARSEABLE_RELAY 21050 11.00 15.81 9.28 33 XM_B_Unsub 20934 9.37 15.73 7.11 34 RELAYCOUNTRY_META 20399 6.46 15.32 3.30 35 TR_XM_BayesUnsub 20213 7.81 15.18 5.19 36 XM_B_SpammyWords3 19397 6.40 14.57 3.49 37 LOTS_OF_MONEY 15517 6.82 11.66 5.10 38 TR_XM_SpammyRelay 14920 4.06 11.21 1.51 39 BAYES_80 14234 4.74 10.69 2.62 40 TR_XM_SpammyWords2 14062 2.92 10.56 0.21 41 BOTNET_IPINHOSTNAME 13327 4.36 10.01 2.35 42 TR_XM_SpammyWords4 13235 5.14 9.94 3.44 43 XM_Body_Dirty_Words 12092 4.01 9.08 2.21 44 XM_Evil_Numbers_Gen 11950 9.02 8.98 9.04 45 BOTNET 11768 3.03 8.84 0.96 46 BAYES_60 11626 8.74 8.73 8.74 47 FSL_BULK_SIG 11444 6.56 8.60 5.83 48 LotsOfNums_01 11292 10.12 8.48 10.71 49 XM_B_Phish_Phrases 10541 5.36 7.92 4.45 50 RCVD_IN_BL_SPAMCOP_NET 10215 2.28 7.67 0.35 51 TR_XM_UnparsRelay 9528 2.66 7.16 1.06 52 XMSubMetaSx_00 9202 3.93 6.91 2.86 53 XM_UncommonTLD01 8686 4.34 6.52 3.56 54 TR_XM_SPAMCOP 8561 1.86 6.43 0.23 55 HTML_IMAGE_RATIO_02 8394 4.49 6.31 3.84 56 RELAYCOUNTRY_CA 8143 2.32 6.12 0.97 57 XMStrtUSub 7943 11.50 5.97 13.48 58 DKIM_INVALID 7762 3.24 5.83 2.32 59 XM_H_GMP 7678 5.23 5.77 5.04 60 BAYES_95 7343 2.58 5.52 1.54 61 UNTRUSTED_Relay 7319 2.36 5.50 1.24 62 XM_B_PhoneNumber 7310 7.53 5.49 8.26 63 MPART_ALT_DIFF 7096 3.84 5.33 3.31 64 XMSexyCombo_05 6629 2.22 4.98 1.24 65 XM_B_Investor 6592 2.25 4.95 1.29 66 XM_H_Long_From01 6419 4.51 4.82 4.39 67 TR_XM_PhishingBody 6417 2.20 4.82 1.27 68 T_XMDrugObfuBody_14 6206 2.39 4.66 1.59 69 HTML_IMAGE_RATIO_04 6168 3.83 4.63 3.55 70 TM2_M_VERY_LONG_WORD 5838 6.20 4.39 6.85 71 XM_B_SpammyTLD 5357 2.50 4.02 1.96 72 TR_XM_SpammyWords5 5208 1.95 3.91 1.26 73 RCVD_IN_MSPIKE_WL 5102 4.20 3.83 4.34 74 RCVD_IN_MSPIKE_H3 5102 4.20 3.83 4.34 75 XMNumbers 5038 2.96 3.78 2.67 76 TooManyTo_001 4985 6.63 3.74 7.66 77 ALL_TRUSTED 4939 21.16 3.71 27.38 78 XM_OfRef6 4767 1.65 3.58 0.97 79 HTML_IMAGE_RATIO_06 4672 2.37 3.51 1.97 80 XMNoVowels 4471 2.33 3.36 1.96 81 XM_SPF_SoftFail 4417 1.81 3.32 1.27 82 RCVD_IN_VALIDITY_RPBL 4380 0.91 3.29 0.06 83 T_XMDrugObfuBody_08 4131 2.04 3.10 1.66 84 XMDiploma_00 4074 1.83 3.06 1.39 85 MIME_HTML_ONLY_MULTI 4058 2.31 3.05 2.04 86 XM_CamelCaseFrm001 4056 2.30 3.05 2.03 87 MIME_HTML_MOSTLY 4011 1.96 3.01 1.58 88 XM_URI_RBL 3763 0.93 2.83 0.26 89 MIME_QP_LONG_LINE 3745 3.56 2.81 3.83 90 TM2_M_URI_OPT_OUT 3724 1.76 2.80 1.40 91 XM_B_Unsub2 3556 1.54 2.67 1.13 92 XM_UB50 3545 1.29 2.66 0.80 93 HTML_IMAGE_RATIO_08 3503 1.82 2.63 1.54 94 MAILING_LIST_MULTI 3416 2.50 2.57 2.47 95 RELAYCOUNTRY_AU 3402 1.06 2.56 0.53 96 XM_B_SpammyWords4 3382 1.03 2.54 0.49 97 XM_B_URI_Unicode 3377 1.85 2.54 1.60 98 DKIM_ADSP_NXDOMAIN 3283 0.89 2.47 0.33 99 XMBody_17 3282 0.99 2.47 0.47 100 NO_DNS_FOR_FROM 3204 0.82 2.41 0.26 101 T_TooManySym_01 3175 6.78 2.39 8.34 102 TR_XM_MaxWHORU 3159 0.76 2.37 0.19 103 FROM_EXCESS_BASE64 3100 1.74 2.33 1.54 104 T_XMHurry_00 3070 0.97 2.31 0.49 105 SUBJ_ALL_CAPS 3035 1.65 2.28 1.42 106 T_FILL_THIS_FORM_SHORT 2876 1.12 2.16 0.75 107 RCVD_IN_PSBL 2807 0.85 2.11 0.40 108 USER_IN_DEF_DKIM_WL 2734 7.92 2.05 10.01 109 SHORTCIRCUIT 2716 0.54 2.04 0.00 110 RCVD_IN_ZEN_LASTEXTERNAL 2716 0.54 2.04 0.00 111 NORDNS_LOW_CONTRAST 2706 0.58 2.03 0.06 112 TR_XM_NoHeaderRelay 2697 0.68 2.03 0.20 113 DIET_1 2644 0.85 1.99 0.45 114 HTML_MIME_NO_HTML_TAG 2635 2.30 1.98 2.41 115 RCVD_IN_VALIDITY_SAFE 2615 3.08 1.96 3.48 116 T_HTML_ATTACH 2579 7.28 1.94 9.18 117 T_OBFU_HTML_ATTACH 2471 8.48 1.86 10.83 118 TR_XM_HtmlAttach 2462 7.22 1.85 9.13 119 BAYES_40 2442 4.82 1.83 5.88 120 MIME_CHARSET_FARAWAY 2430 3.20 1.83 3.69 121 SpammyFromTLD_02 2406 0.61 1.81 0.18 122 KHOP_HELO_FCRDNS 2338 3.45 1.76 4.05 123 XM_SendGrid 2285 1.31 1.72 1.17 124 SpammyFromTLD_01 2254 1.02 1.69 0.78 125 T_REMOTE_IMAGE 2206 4.98 1.66 6.16 126 XMGenDplmaNmb 2203 1.03 1.65 0.81 127 XM_H_Undi_Recip 2186 0.60 1.64 0.23 128 BOUNCE_MESSAGE 2181 6.92 1.64 8.80 129 ANY_BOUNCE_MESSAGE 2181 6.92 1.64 8.80 130 TR_XM_INV_DKIM 2180 0.52 1.64 0.13 131 RCVD_IN_VALIDITY_CERTIFIED 2153 2.52 1.62 2.84 132 XMStockSpam_06 2138 1.19 1.61 1.04 133 XMPhish30 2128 0.75 1.60 0.44 134 XM_B_Phish66 2119 0.64 1.59 0.30 135 XMBrknScrpt_02 2060 0.85 1.55 0.60 136 XM_H_Long_From02 2048 0.99 1.54 0.80 137 T_XMDrugObfuBody_00 2012 0.73 1.51 0.45 138 URI_NOVOWEL 1969 1.18 1.48 1.07 139 HOSTED_IMG_MULTI_PUB_01 1949 0.40 1.46 0.02 140 HK_RANDOM_REPLYTO 1890 0.48 1.42 0.14 141 XM_DK_Undo_01 1837 1.44 1.38 1.46 142 TR_XM_Base64_M1 1804 0.79 1.36 0.59 143 XM_B_COPY_HTML 1775 0.86 1.33 0.69 144 DKIM_ADSP_CUSTOM_MED 1774 0.95 1.33 0.81 145 RCVD_IN_PBL 1713 0.90 1.29 0.76 146 RCVD_IN_IADB_LISTED 1702 2.24 1.28 2.58 147 LongTLD 1702 0.65 1.28 0.42 148 BAYES_20 1625 3.17 1.22 3.87 149 XM_DIRTYINTL 1597 0.45 1.20 0.19 150 HTML_TAG_BALANCE_BODY 1589 0.64 1.19 0.45 151 TR_XM_Undi_Recip19 1577 0.38 1.18 0.09 152 XM_B_SEO 1561 0.47 1.17 0.22 153 RCVD_IN_IADB_SPF 1511 1.96 1.14 2.26 154 XMReplyNow 1467 0.45 1.10 0.21 155 TR_XM_PHPForged 1461 0.60 1.10 0.43 156 TR_LOTS_OF_MONEY2 1456 0.43 1.09 0.20 157 T_MONEY_PERCENT 1456 0.43 1.09 0.20 158 URI_HEX 1455 0.95 1.09 0.90 159 TR_XM_Undi_RecipCombo2 1442 0.30 1.08 0.02 160 TR_Mismatch_TLD_02 1437 0.33 1.08 0.06 161 RCVD_IN_IADB_DK 1425 1.73 1.07 1.97 162 TR_XM_PHPDW 1422 0.61 1.07 0.44 163 RCVD_IN_SORBS_DUL 1422 0.32 1.07 0.05 164 RCVD_IN_IADB_SENDERID 1417 1.77 1.06 2.03 165 RDNS_DYNAMIC 1416 0.42 1.06 0.19 166 TM2_M_OBFU_COMMENT 1415 0.54 1.06 0.36 167 RELAYCOUNTRY_FR 1407 0.43 1.06 0.20 168 XM_ProductURIs 1405 0.83 1.06 0.75 169 TR_XM_FormFill2 1397 0.59 1.05 0.43 170 PDS_RDNS_DYNAMIC_FP 1394 0.34 1.05 0.09 171 HTTPS_HTTP_MISMATCH 1393 0.81 1.05 0.72 172 FONT_INVIS_LONG_LINE 1376 0.31 1.03 0.06 173 PLING_QUERY 1372 0.49 1.03 0.30 174 TR_XM_SEO4 1363 0.35 1.02 0.10 175 UNDISC_MONEY 1354 0.27 1.02 0.00 176 TR_XM_RelayPhish 1349 0.33 1.01 0.08 177 XM_H_PHPOS 1346 0.57 1.01 0.42 178 NML_ADSP_CUSTOM_MED 1327 0.67 1.00 0.55 179 XM_OfRef7 1320 0.46 0.99 0.27 180 XMHTML_After_End 1319 0.47 0.99 0.28 181 TR_XM_Undi_Recip5 1310 0.26 0.98 0.00 182 XM_B_DNDMA 1299 0.59 0.98 0.45 183 XM_UB99 1296 0.26 0.97 0.00 184 TVD_RCVD_IP 1278 0.71 0.96 0.62 185 TR_MetaPhish_Combo_01 1259 0.69 0.95 0.60 186 XMSubMetaI_00 1254 0.68 0.94 0.58 187 XM_GoogleGroups 1241 1.05 0.93 1.09 188 SHOPIFY_IMG_NOT_RCVD_SFY 1234 0.39 0.93 0.19 189 XM_S_SpammyWords 1230 0.50 0.92 0.35 190 TR_XM_Spammywords 1230 0.50 0.92 0.35 191 TR_Mismatch_TLD_01 1230 0.37 0.92 0.17 192 XMPhish14 1229 0.49 0.92 0.33 193 MPART_ALT_DIFF_COUNT 1227 0.62 0.92 0.51 194 XMSubMetaSxObfu_03 1199 0.45 0.90 0.29 195 URI_TRY_3LD 1197 0.57 0.90 0.46 196 T_TooManySym_02 1193 4.49 0.90 5.78 197 CHARSET_FARAWAY_HEADER 1191 2.74 0.89 3.40 198 TR_XM_InvalidRelay 1190 0.24 0.89 0.00 199 XMSexyCombo_01 1183 0.35 0.89 0.16 200 T_STY_INVIS_DIRECT 1182 0.43 0.89 0.27 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 332795 90.37 94.27 88.99 2 XM_B_Unicode 262957 73.45 82.26 70.31 3 RELAYCOUNTRY_US 261882 72.95 81.18 70.02 4 DCC_CHECK_NEGATIVE 260188 57.76 24.58 69.57 5 BAYES_50 237502 57.46 40.48 63.51 6 DKIM_SIGNED 223235 66.68 86.31 59.69 7 XM_DK_Pass 218360 64.50 81.69 58.39 8 DKIM_VALID 214557 63.44 80.48 57.37 9 DKIM_VALID_AU 171519 50.21 62.43 45.86 10 XMListUnsubscribeExists 139119 45.33 68.16 37.20 11 XM_B_SpammyWords 138012 44.88 67.28 36.90 12 XM_B_Unicode3 131903 38.62 48.04 35.27 13 XMSubLong 118384 30.05 25.53 31.65 14 MIME_HTML_ONLY 114588 30.18 28.90 30.64 15 T_TM2_M_HEADER_IN_MSG 113952 28.28 22.13 30.47 16 DCC_CHECK 113643 41.67 73.37 30.39 17 RCVD_IN_MSPIKE_H2 104298 30.81 39.00 27.89 18 ALL_TRUSTED 102388 21.16 3.71 27.38 19 HTML_FONT_LOW_CONTRAST 100469 29.46 36.76 26.86 20 DKIM_VALID_EF 89095 24.93 28.05 23.82 21 LOC_TINY_FONT_1 78237 27.60 46.38 20.92 22 FVGT_m_MULTI_ODD 77735 23.41 30.77 20.79 23 T_KAM_HTML_FONT_INVALID 61774 20.72 32.53 16.52 24 XM_B_SpammyWords2 54344 21.25 40.12 14.53 25 XMStrtUSub 50395 11.50 5.97 13.48 26 T_OBFU_HTML_ATTACH 40518 8.48 1.86 10.83 27 LotsOfNums_01 40043 10.12 8.48 10.71 28 USER_IN_DEF_DKIM_WL 37449 7.92 2.05 10.01 29 XM_Multi_Part_URI 37040 12.66 20.39 9.90 30 TR_XM_DK_Unsub 36825 12.35 19.39 9.85 31 BAYES_00 35645 7.23 0.75 9.53 32 UNPARSEABLE_RELAY 34716 11.00 15.81 9.28 33 T_HTML_ATTACH 34346 7.28 1.94 9.18 34 TR_XM_HtmlAttach 34143 7.22 1.85 9.13 35 XM_Evil_Numbers_Gen 33790 9.02 8.98 9.04 36 ANY_BOUNCE_MESSAGE 32919 6.92 1.64 8.80 37 BOUNCE_MESSAGE 32908 6.92 1.64 8.80 38 BAYES_60 32701 8.74 8.73 8.74 39 T_TooManySym_01 31195 6.78 2.39 8.34 40 XM_B_PhoneNumber 30894 7.53 5.49 8.26 41 TooManyTo_001 28648 6.63 3.74 7.66 42 XM_B_Unsub 26602 9.37 15.73 7.11 43 TM2_M_VERY_LONG_WORD 25618 6.20 4.39 6.85 44 HTML_IMAGE_ONLY_32 23219 4.65 0.27 6.21 45 TR_XM_DK_Bayes 23170 4.73 0.60 6.20 46 T_REMOTE_IMAGE 23032 4.98 1.66 6.16 47 TR_XM_DK_Bayes1 22611 4.61 0.59 6.05 48 BAYES_40 21979 4.82 1.83 5.88 49 FSL_BULK_SIG 21812 6.56 8.60 5.83 50 T_TooManySym_02 21599 4.49 0.90 5.78 51 MAY_BE_FORGED 20237 4.19 0.75 5.41 52 TR_XM_BayesUnsub 19402 7.81 15.18 5.19 53 IN_ZIMBRA_NJ_WHITELIST 19259 3.82 0.10 5.15 54 TR_XM_DK_Bayes2 19122 3.88 0.42 5.11 55 LOTS_OF_MONEY 19082 6.82 11.66 5.10 56 XM_DKIMWhitelistDomains 18901 3.75 0.08 5.05 57 XM_H_GMP 18864 5.23 5.77 5.04 58 XM_B_Phish_Phrases 16638 5.36 7.92 4.45 59 XM_H_Long_From01 16431 4.51 4.82 4.39 60 RCVD_IN_MSPIKE_WL 16220 4.20 3.83 4.34 61 RCVD_IN_MSPIKE_H3 16220 4.20 3.83 4.34 62 TR_MAX_INTL_RELAY 15566 7.43 16.60 4.16 63 XM_PDF 15368 3.24 0.81 4.11 64 KHOP_HELO_FCRDNS 15144 3.45 1.76 4.05 65 BAYES_20 14472 3.17 1.22 3.87 66 HTML_IMAGE_RATIO_02 14363 4.49 6.31 3.84 67 MIME_QP_LONG_LINE 14328 3.56 2.81 3.83 68 HTML_IMAGE_ONLY_20 14025 2.96 0.73 3.75 69 MIME_CHARSET_FARAWAY 13818 3.20 1.83 3.69 70 XM_UncommonTLD01 13309 4.34 6.52 3.56 71 HTML_IMAGE_RATIO_04 13267 3.83 4.63 3.55 72 XM_B_SpammyWords3 13060 6.40 14.57 3.49 73 RCVD_IN_VALIDITY_SAFE 13017 3.08 1.96 3.48 74 TR_XM_SpammyWords4 12854 5.14 9.94 3.44 75 CHARSET_FARAWAY_HEADER 12707 2.74 0.89 3.40 76 MPART_ALT_DIFF 12382 3.84 5.33 3.31 77 RELAYCOUNTRY_META 12355 6.46 15.32 3.30 78 MIME_HEADER_CTYPE_ONLY 11975 2.38 0.08 3.20 79 XM_DK_Undo_02 11571 11.75 36.07 3.09 80 TR_Symld_Words 11418 2.48 0.87 3.05 81 XMSubMetaSx_00 10709 3.93 6.91 2.86 82 RCVD_IN_VALIDITY_CERTIFIED 10606 2.52 1.62 2.84 83 TooManyTo_002 10451 2.25 0.72 2.79 84 XMNumbers 9990 2.96 3.78 2.67 85 BAYES_80 9783 4.74 10.69 2.62 86 RCVD_IN_IADB_LISTED 9653 2.24 1.28 2.58 87 MAILING_LIST_MULTI 9248 2.50 2.57 2.47 88 HTML_MIME_NO_HTML_TAG 9021 2.30 1.98 2.41 89 BOTNET_IPINHOSTNAME 8803 4.36 10.01 2.35 90 DKIM_INVALID 8678 3.24 5.83 2.32 91 RCVD_IN_IADB_SPF 8435 1.96 1.14 2.26 92 BAYES_99 8312 9.03 28.16 2.22 93 XM_Body_Dirty_Words 8252 4.01 9.08 2.21 94 BAYES_05 7813 1.69 0.58 2.09 95 MIME_HTML_ONLY_MULTI 7636 2.31 3.05 2.04 96 XM_CamelCaseFrm001 7586 2.30 3.05 2.03 97 RCVD_IN_IADB_SENDERID 7574 1.77 1.06 2.03 98 HTML_IMAGE_RATIO_06 7367 2.37 3.51 1.97 99 RCVD_IN_IADB_DK 7357 1.73 1.07 1.97 100 XMNoVowels 7347 2.33 3.36 1.96 101 XM_B_SpammyTLD 7333 2.50 4.02 1.96 102 INVALID_MSGID 7306 1.48 0.14 1.95 103 XMLngstWrd_00 7303 1.59 0.55 1.95 104 RCVD_IN_IADB_VOUCHED 6461 1.44 0.62 1.73 105 TO_MALFORMED 6219 1.23 0.03 1.66 106 TooManyTo_003 6200 1.38 0.60 1.66 107 T_XMDrugObfuBody_08 6199 2.04 3.10 1.66 108 BAYES_999 6107 6.74 21.08 1.63 109 XM_B_URI_Unicode 5988 1.85 2.54 1.60 110 T_XMDrugObfuBody_14 5932 2.39 4.66 1.59 111 MIME_HTML_MOSTLY 5908 1.96 3.01 1.58 112 T_TooManySym_03 5821 1.21 0.24 1.56 113 BAYES_95 5765 2.58 5.52 1.54 114 FROM_EXCESS_BASE64 5748 1.74 2.33 1.54 115 HTML_IMAGE_RATIO_08 5745 1.82 2.63 1.54 116 TR_XM_SpammyRelay 5661 4.06 11.21 1.51 117 XM_DK_Undo_01 5473 1.44 1.38 1.46 118 SUBJ_ALL_CAPS 5310 1.65 2.28 1.42 119 TM2_M_URI_OPT_OUT 5221 1.76 2.80 1.40 120 XMDiploma_00 5217 1.83 3.06 1.39 121 XM_B_Investor 4819 2.25 4.95 1.29 122 XM_SPF_SoftFail 4766 1.81 3.32 1.27 123 TR_XM_PhishingBody 4753 2.20 4.82 1.27 124 TR_XM_SpammyWords5 4694 1.95 3.91 1.26 125 TooManyTo_004 4674 1.06 0.54 1.25 126 UNTRUSTED_Relay 4638 2.36 5.50 1.24 127 XMSexyCombo_05 4633 2.22 4.98 1.24 128 RCVD_IN_IADB_OPTIN 4586 1.01 0.40 1.23 129 HELO_NODOT 4573 0.96 0.21 1.22 130 HELO_NO_DOMAIN 4568 0.95 0.20 1.22 131 IN_HORDE_ADDRESS_BOOK 4383 0.89 0.11 1.17 132 XM_SendGrid 4378 1.31 1.72 1.17 133 XM_B_Unsub2 4236 1.54 2.67 1.13 134 TR_XM_DKIM_Undo 4154 7.37 24.97 1.11 135 XMCapTrack 4112 0.97 0.61 1.10 136 XM_GoogleGroups 4068 1.05 0.93 1.09 137 URI_NOVOWEL 4013 1.18 1.48 1.07 138 TR_XM_UnparsRelay 3973 2.66 7.16 1.06 139 TooManyTo_005 3970 0.91 0.49 1.06 140 XMStockSpam_06 3892 1.19 1.61 1.04 141 XM_OfRef6 3621 1.65 3.58 0.97 142 RELAYCOUNTRY_CA 3618 2.32 6.12 0.97 143 BOTNET 3605 3.03 8.84 0.96 144 TVD_SPACE_RATIO 3479 0.76 0.28 0.93 145 XMGappySubj_01 3460 0.73 0.18 0.93 146 URI_HEX 3353 0.95 1.09 0.90 147 XMGenDplmaNmb 3037 1.03 1.65 0.81 148 DKIM_ADSP_CUSTOM_MED 3026 0.95 1.33 0.81 149 XM_UB50 3001 1.29 2.66 0.80 150 XM_H_Long_From02 2981 0.99 1.54 0.80 151 SpammyFromTLD_01 2927 1.02 1.69 0.78 152 RCVD_IN_PBL 2835 0.90 1.29 0.76 153 XM_H_PHPMailer 2822 0.74 0.69 0.75 154 T_FILL_THIS_FORM_SHORT 2810 1.12 2.16 0.75 155 XM_ProductURIs 2797 0.83 1.06 0.75 156 XM_ShortIntro_01 2788 0.71 0.61 0.75 157 HTTPS_HTTP_MISMATCH 2701 0.81 1.05 0.72 158 TR_XM_DK_SendGrid 2618 0.75 0.87 0.70 159 XM_B_COPY_HTML 2582 0.86 1.33 0.69 160 TR_DCC_Bayes_99 2524 6.05 21.14 0.67 161 TO_NO_BRKTS_HTML_ONLY 2355 0.58 0.45 0.63 162 TVD_RCVD_IP 2303 0.71 0.96 0.62 163 TR_MetaPhish_Combo_01 2237 0.69 0.95 0.60 164 XMBrknScrpt_02 2227 0.85 1.55 0.60 165 TR_XM_Base64_M1 2205 0.79 1.36 0.59 166 XMSubMetaI_00 2172 0.68 0.94 0.58 167 XMGappySubj_02 2128 0.44 0.07 0.57 168 NML_ADSP_CUSTOM_MED 2049 0.67 1.00 0.55 169 T_OBFU_PDF_ATTACH 2023 0.45 0.19 0.54 170 RELAYCOUNTRY_AU 1978 1.06 2.56 0.53 171 T_TVD_MIME_NO_HEADERS 1948 0.40 0.05 0.52 172 XMBody_95 1933 0.43 0.17 0.52 173 MPART_ALT_DIFF_COUNT 1899 0.62 0.92 0.51 174 XM_RXBody 1894 0.55 0.69 0.51 175 T_XMHurry_00 1844 0.97 2.31 0.49 176 XM_B_SpammyWords4 1837 1.03 2.54 0.49 177 XMBdyGiftCard01 1757 0.58 0.88 0.47 178 XMBody_17 1755 0.99 2.47 0.47 179 XM_B_FormFill 1755 0.35 0.03 0.47 180 FORGED_GMAIL_RCVD 1750 0.57 0.87 0.47 181 URI_TRY_3LD 1702 0.57 0.90 0.46 182 XM_B_DNDMA 1684 0.59 0.98 0.45 183 HTML_TAG_BALANCE_BODY 1681 0.64 1.19 0.45 184 T_XMDrugObfuBody_00 1679 0.73 1.51 0.45 185 FROM_GOV_DKIM_AU 1671 0.35 0.09 0.45 186 DIET_1 1670 0.85 1.99 0.45 187 XMPhish30 1659 0.75 1.60 0.44 188 TR_XM_PHPDW 1658 0.61 1.07 0.44 189 MISSING_HEADERS 1653 0.49 0.62 0.44 190 TR_XM_PHPForged 1607 0.60 1.10 0.43 191 TR_XM_FormFill2 1594 0.59 1.05 0.43 192 XMSlimDrugH 1594 0.51 0.76 0.43 193 LongTLD 1585 0.65 1.28 0.42 194 XM_H_PHPOS 1567 0.57 1.01 0.42 195 RCVD_IN_PSBL 1507 0.85 2.11 0.40 196 RELAYCOUNTRY_GB 1499 0.48 0.70 0.40 197 TM2_M_BODY_EMPTY 1495 0.32 0.08 0.40 198 XMLngstWrd_01 1485 0.40 0.40 0.40 199 MSGID_FROM_MTA_HEADER 1475 0.31 0.07 0.39 200 XMMoneyMeta_00 1385 0.50 0.85 0.37 ----------------------------------------------------------------------