Email: 487427 Autolearn: 0 AvgScore: 4.91 AvgScanTime: 1.41 sec Spam: 147103 Autolearn: 0 AvgScore: 14.21 AvgScanTime: 1.59 sec Ham: 340324 Autolearn: 0 AvgScore: 0.88 AvgScanTime: 1.33 sec Time Spent Running SA: 190.39 hours Time Spent Processing Spam: 65.04 hours Time Spent Processing Ham: 125.35 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 144788 99.19 98.43 99.52 2 HTML_MESSAGE 140018 90.36 95.18 88.27 3 DKIM_SIGNED 131065 77.61 89.10 72.64 4 XM_DK_Pass 124808 75.57 84.84 71.56 5 XM_B_Unicode 123685 74.29 84.08 70.06 6 DKIM_VALID 123615 74.63 84.03 70.56 7 RELAYCOUNTRY_US 120415 82.28 81.86 82.46 8 DCC_CHECK 111553 50.54 75.83 39.60 9 XM_B_SpammyWords 101787 52.63 69.19 45.48 10 XMListUnsubscribeExists 98912 53.27 67.24 47.23 11 DKIM_VALID_AU 98695 60.08 67.09 57.05 12 XM_B_Unicode3 72155 43.58 49.05 41.22 13 LOC_TINY_FONT_1 71603 33.37 48.68 26.76 14 BAYES_50 62032 55.80 42.17 61.70 15 XM_B_SpammyWords2 60252 25.88 40.96 19.36 16 XM_DK_Undo_02 57428 14.91 39.04 4.49 17 HTML_FONT_LOW_CONTRAST 55561 32.35 37.77 30.01 18 FVGT_m_MULTI_ODD 51807 28.05 35.22 24.95 19 T_KAM_HTML_FONT_INVALID 45348 24.12 30.83 21.22 20 BAYES_99 44595 11.32 30.32 3.11 21 DKIM_VALID_EF 44587 28.92 30.31 28.32 22 MIME_HTML_ONLY 42762 23.09 29.07 20.51 23 TR_XM_DKIM_Undo 40893 9.62 27.80 1.76 24 XMSubLong 37375 23.41 25.41 22.55 25 BAYES_999 34433 8.65 23.41 2.27 26 DCC_CHECK_NEGATIVE 33595 49.02 22.84 60.33 27 T_TM2_M_HEADER_IN_MSG 33506 29.58 22.78 32.53 28 XM_Multi_Part_URI 32250 16.28 21.92 13.84 29 TR_XM_DK_Unsub 31993 15.58 21.75 12.91 30 TR_DCC_Bayes_99 31919 7.40 21.70 1.21 31 XM_B_Unsub 29970 13.81 20.37 10.97 32 TR_XM_BayesUnsub 28609 10.90 19.45 7.20 33 RCVD_IN_MSPIKE_H2 28045 17.22 19.06 16.42 34 UNPARSEABLE_RELAY 27149 13.73 18.46 11.68 35 RELAYCOUNTRY_META 24736 7.64 16.82 3.68 36 XM_B_SpammyWords3 23676 8.55 16.09 5.28 37 TR_MAX_INTL_RELAY 20572 7.98 13.98 5.39 38 BOTNET_IPINHOSTNAME 20253 6.32 13.77 3.09 39 LOTS_OF_MONEY 18317 7.86 12.45 5.88 40 TR_XM_SpammyRelay 17322 4.94 11.78 1.99 41 FSL_BULK_SIG 16699 9.03 11.35 8.02 42 TR_XM_SpammyWords4 16307 5.94 11.09 3.71 43 TR_XM_SpammyWords2 15901 3.48 10.81 0.31 44 XM_Evil_Numbers_Gen 15086 10.22 10.26 10.21 45 BOTNET 14954 4.02 10.17 1.37 46 TR_XM_UnparsRelay 14073 3.99 9.57 1.58 47 XM_B_Phish_Phrases 13731 7.33 9.33 6.47 48 BAYES_80 12656 4.89 8.60 3.29 49 RCVD_IN_BL_SPAMCOP_NET 11845 2.79 8.05 0.51 50 LotsOfNums_01 11784 10.27 8.01 11.25 51 BAYES_60 11427 6.87 7.77 6.48 52 XM_Body_Dirty_Words 11381 4.02 7.74 2.42 53 HTML_IMAGE_RATIO_02 10636 5.23 7.23 4.36 54 RCVD_IN_MSPIKE_WL 10339 11.99 7.03 14.14 55 XM_B_PhoneNumber 10158 9.81 6.91 11.07 56 RELAYCOUNTRY_CA 9478 2.49 6.44 0.78 57 XMSubMetaSx_00 9465 4.70 6.43 3.95 58 MPART_ALT_DIFF 9250 5.15 6.29 4.66 59 UNTRUSTED_Relay 9119 2.88 6.20 1.45 60 XM_UncommonTLD01 7950 4.34 5.40 3.88 61 XM_H_Long_From01 7798 5.54 5.30 5.64 62 HTML_IMAGE_RATIO_04 7610 4.30 5.17 3.92 63 TR_XM_PhishingBody 7469 2.66 5.08 1.61 64 DKIM_INVALID 7450 2.98 5.06 2.08 65 BAYES_95 7287 2.96 4.95 2.10 66 XM_B_Investor 7011 2.47 4.77 1.47 67 XMStrtUSub 6889 4.72 4.68 4.73 68 MIME_HTML_MOSTLY 6731 3.31 4.58 2.77 69 T_XMDrugObfuBody_14 6491 2.77 4.41 2.06 70 XM_H_GMP 6448 5.07 4.38 5.37 71 RCVD_IN_MSPIKE_BL 6229 1.53 4.23 0.36 72 TR_XM_MSPIKECOMBO 6229 1.53 4.23 0.36 73 TooManyTo_001 6217 7.55 4.23 8.99 74 XM_B_SpammyTLD 6216 3.26 4.23 2.84 75 XMSexyCombo_05 6145 2.64 4.18 1.98 76 HTML_IMAGE_RATIO_06 6125 3.60 4.16 3.35 77 TM2_M_VERY_LONG_WORD 6034 5.01 4.10 5.40 78 XM_OfRef6 5581 1.92 3.79 1.12 79 TR_XM_SpammyWords5 5459 2.12 3.71 1.44 80 XMNumbers 5408 4.26 3.68 4.51 81 MIME_QP_LONG_LINE 5396 4.84 3.67 5.34 82 XM_URI_RBL 5265 1.32 3.58 0.34 83 RCVD_IN_MSPIKE_H3 5251 5.62 3.57 6.50 84 XM_CamelCaseFrm001 5131 2.87 3.49 2.60 85 XM_B_Unsub2 5017 2.16 3.41 1.62 86 TR_XM_NoHeaderRelay 4835 1.16 3.29 0.25 87 TM2_M_URI_OPT_OUT 4820 2.21 3.28 1.75 88 XM_UB50 4732 1.62 3.22 0.93 89 MIME_HTML_ONLY_MULTI 4563 2.58 3.10 2.36 90 RCVD_IN_VALIDITY_RPBL 4559 1.06 3.10 0.18 91 T_XMDrugObfuBody_08 4440 1.86 3.02 1.36 92 XMDiploma_00 4221 1.83 2.87 1.38 93 XM_B_URI_Unicode 4159 2.05 2.83 1.71 94 XM_SPF_SoftFail 4141 1.80 2.82 1.37 95 T_TooManySym_01 4095 4.60 2.78 5.38 96 TR_XM_SpammyWords3 3871 0.91 2.63 0.17 97 USER_IN_DEF_DKIM_WL 3850 10.13 2.62 13.38 98 RELAYCOUNTRY_AU 3807 1.31 2.59 0.75 99 TR_XM_SPAMCOP 3805 0.86 2.59 0.11 100 RCVD_IN_MSPIKE_L3 3801 0.95 2.58 0.25 101 XM_B_SpammyWords4 3732 1.11 2.54 0.49 102 ALL_TRUSTED 3676 10.97 2.50 14.64 103 HTML_IMAGE_RATIO_08 3595 2.35 2.44 2.30 104 RCVD_IN_VALIDITY_SAFE 3526 3.58 2.40 4.10 105 XMStockSpam_06 3500 1.32 2.38 0.86 106 T_FILL_THIS_FORM_SHORT 3407 1.34 2.32 0.92 107 TR_XM_INV_DKIM 3337 0.76 2.27 0.11 108 XMBody_17 3242 0.94 2.20 0.39 109 MAILING_LIST_MULTI 3170 2.63 2.15 2.84 110 DKIM_ADSP_NXDOMAIN 2987 0.80 2.03 0.27 111 SUBJ_ALL_CAPS 2965 1.64 2.02 1.47 112 SpammyFromTLD_02 2901 0.90 1.97 0.44 113 XM_H_Long_From02 2860 1.20 1.94 0.88 114 RCVD_IN_MSPIKE_H5 2804 4.31 1.91 5.34 115 XM_DK_Undo_01 2802 1.69 1.90 1.59 116 XMBrknScrpt_02 2772 1.11 1.88 0.78 117 ANY_BOUNCE_MESSAGE 2720 5.77 1.85 7.46 118 BOUNCE_MESSAGE 2720 5.77 1.85 7.46 119 HTML_MIME_NO_HTML_TAG 2664 2.27 1.81 2.47 120 FROM_EXCESS_BASE64 2626 1.85 1.79 1.87 121 URI_HEX 2606 1.44 1.77 1.29 122 KHOP_HELO_FCRDNS 2586 2.90 1.76 3.39 123 RCVD_IN_VALIDITY_CERTIFIED 2574 2.90 1.75 3.40 124 URI_TRY_3LD 2573 0.89 1.75 0.52 125 BAYES_40 2551 4.38 1.73 5.52 126 SpammyFromTLD_01 2546 1.05 1.73 0.76 127 HK_RANDOM_REPLYTO 2532 0.62 1.72 0.14 128 TR_LOTS_OF_MONEY3 2515 0.76 1.71 0.35 129 T_XMHurry_00 2405 0.81 1.63 0.46 130 XM_B_Phish66 2396 0.71 1.63 0.31 131 T_REMOTE_IMAGE 2376 2.78 1.62 3.29 132 SCC_BODY_URI_ONLY 2334 2.14 1.59 2.37 133 XMPhish30 2330 0.82 1.58 0.49 134 XMGenDplmaNmb 2290 1.03 1.56 0.80 135 RCVD_IN_MSPIKE_H4 2284 2.07 1.55 2.29 136 URI_NOVOWEL 2225 1.43 1.51 1.40 137 RCVD_IN_PSBL 2214 0.58 1.51 0.19 138 BAYES_20 2182 3.29 1.48 4.07 139 XM_SendGrid 2158 1.46 1.47 1.45 140 T_XMDrugObfuBody_00 2157 0.94 1.47 0.71 141 TR_MetaPhish_Combo_01 1980 1.83 1.35 2.04 142 RCVD_IN_ZEN_LASTEXTERNAL 1941 0.40 1.32 0.00 143 SHORTCIRCUIT 1941 0.40 1.32 0.00 144 SHOPIFY_IMG_NOT_RCVD_SFY 1919 0.57 1.30 0.26 145 TR_XM_PHPForged 1884 0.58 1.28 0.28 146 TR_XM_PHPDW 1869 0.58 1.27 0.28 147 TR_XM_FormFill2 1864 0.58 1.27 0.28 148 XM_H_PHPOS 1823 0.56 1.24 0.27 149 RCVD_IN_PBL 1816 0.86 1.23 0.70 150 XMSubMetaI_00 1798 0.79 1.22 0.61 151 HTTPS_HTTP_MISMATCH 1786 0.80 1.21 0.62 152 XMBdyGiftCard01 1784 0.92 1.21 0.80 153 XM_HighProb1 1752 0.36 1.19 0.01 154 RCVD_IN_IADB_LISTED 1737 2.98 1.18 3.76 155 DIET_1 1724 0.62 1.17 0.38 156 RDNS_DYNAMIC 1696 0.49 1.15 0.20 157 XMSexyCombo_01 1668 0.44 1.13 0.14 158 HTML_IMAGE_ONLY_20 1652 0.57 1.12 0.33 159 MPART_ALT_DIFF_COUNT 1640 0.70 1.11 0.52 160 XM_B_COPY_HTML 1614 0.73 1.10 0.57 161 XM_B_COVIDMETA 1608 0.45 1.09 0.17 162 PDS_RDNS_DYNAMIC_FP 1562 0.35 1.06 0.04 163 BOTNET_NORDNS 1555 0.32 1.06 0.01 164 RCVD_IN_IADB_SPF 1555 2.63 1.06 3.31 165 XM_B_SEO 1531 0.51 1.04 0.28 166 XM_ProductURIs 1528 0.62 1.04 0.43 167 XMBody_78 1504 0.49 1.02 0.26 168 NO_DNS_FOR_FROM 1489 0.45 1.01 0.21 169 URIBL_BLACK 1477 0.32 1.00 0.02 170 RCVD_IN_XBL 1474 0.32 1.00 0.02 171 RELAYCOUNTRY_GB 1459 0.68 0.99 0.54 172 RCVD_IN_IADB_DK 1455 2.32 0.99 2.89 173 TR_Mismatch_TLD_02 1452 0.35 0.99 0.07 174 MultiRelay_CC 1450 0.41 0.99 0.17 175 TR_XM_MSPIKECOMBO2 1450 0.30 0.99 0.00 176 RCVD_IN_IADB_SENDERID 1446 2.37 0.98 2.97 177 RELAYCOUNTRY_FR 1442 0.51 0.98 0.31 178 RCVD_IN_MSPIKE_L4 1425 0.31 0.97 0.02 179 XM_UB99 1425 0.29 0.97 0.00 180 TR_Symld_Words 1415 1.21 0.96 1.32 181 TR_XM_SEO4 1400 0.42 0.95 0.20 182 BAYES_00 1396 8.36 0.95 11.57 183 T_MONEY_PERCENT 1378 0.54 0.94 0.37 184 TVD_RCVD_IP 1378 0.86 0.94 0.83 185 TR_LOTS_OF_MONEY2 1378 0.54 0.94 0.37 186 XM_DIRTYINTL 1365 0.33 0.93 0.07 187 T_Symld_Words_02 1364 0.67 0.93 0.56 188 RCVD_IN_SBL_CSS 1345 0.30 0.91 0.04 189 XM_B_DNDMA 1323 0.57 0.90 0.43 190 XMReplyNow 1298 0.43 0.88 0.23 191 HTML_FONT_TINY_NORDNS 1277 0.32 0.87 0.08 192 TR_XM_RelayPhish 1267 0.32 0.86 0.09 193 DKIM_ADSP_CUSTOM_MED 1264 0.74 0.86 0.69 194 HTML_TAG_BALANCE_BODY 1264 0.57 0.86 0.44 195 XMHTML_After_End 1261 0.52 0.86 0.38 196 XM_OfRef7 1256 0.50 0.85 0.35 197 TR_XM_DK_SendGrid 1252 0.94 0.85 0.98 198 XMPhish08 1249 0.49 0.85 0.34 199 XMBounce_01 1243 0.27 0.84 0.03 200 LongTLD 1233 0.55 0.84 0.42 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 338674 99.19 98.43 99.52 2 HTML_MESSAGE 300402 90.36 95.18 88.27 3 RELAYCOUNTRY_US 280648 82.28 81.86 82.46 4 DKIM_SIGNED 247224 77.61 89.10 72.64 5 XM_DK_Pass 243547 75.57 84.84 71.56 6 DKIM_VALID 240129 74.63 84.03 70.56 7 XM_B_Unicode 238447 74.29 84.08 70.06 8 BAYES_50 209966 55.80 42.17 61.70 9 DCC_CHECK_NEGATIVE 205322 49.02 22.84 60.33 10 DKIM_VALID_AU 194143 60.08 67.09 57.05 11 XMListUnsubscribeExists 160721 53.27 67.24 47.23 12 XM_B_SpammyWords 154764 52.63 69.19 45.48 13 XM_B_Unicode3 140284 43.58 49.05 41.22 14 DCC_CHECK 134783 50.54 75.83 39.60 15 T_TM2_M_HEADER_IN_MSG 110694 29.58 22.78 32.53 16 HTML_FONT_LOW_CONTRAST 102117 32.35 37.77 30.01 17 DKIM_VALID_EF 96386 28.92 30.31 28.32 18 LOC_TINY_FONT_1 91073 33.37 48.68 26.76 19 FVGT_m_MULTI_ODD 84901 28.05 35.22 24.95 20 XMSubLong 76727 23.41 25.41 22.55 21 T_KAM_HTML_FONT_INVALID 72223 24.12 30.83 21.22 22 MIME_HTML_ONLY 69789 23.09 29.07 20.51 23 XM_B_SpammyWords2 65883 25.88 40.96 19.36 24 RCVD_IN_MSPIKE_H2 55871 17.22 19.06 16.42 25 ALL_TRUSTED 49809 10.97 2.50 14.64 26 RCVD_IN_MSPIKE_WL 48122 11.99 7.03 14.14 27 XM_Multi_Part_URI 47095 16.28 21.92 13.84 28 USER_IN_DEF_DKIM_WL 45523 10.13 2.62 13.38 29 TR_XM_DK_Unsub 43931 15.58 21.75 12.91 30 UNPARSEABLE_RELAY 39756 13.73 18.46 11.68 31 BAYES_00 39374 8.36 0.95 11.57 32 LotsOfNums_01 38271 10.27 8.01 11.25 33 XM_B_PhoneNumber 37675 9.81 6.91 11.07 34 XM_B_Unsub 37320 13.81 20.37 10.97 35 XM_Evil_Numbers_Gen 34746 10.22 10.26 10.21 36 TooManyTo_001 30594 7.55 4.23 8.99 37 FSL_BULK_SIG 27308 9.03 11.35 8.02 38 ANY_BOUNCE_MESSAGE 25393 5.77 1.85 7.46 39 BOUNCE_MESSAGE 25382 5.77 1.85 7.46 40 TR_XM_BayesUnsub 24516 10.90 19.45 7.20 41 TR_XM_DK_Bayes 23657 5.08 0.75 6.95 42 TR_XM_DK_Bayes1 23203 4.99 0.75 6.82 43 RCVD_IN_MSPIKE_H3 22129 5.62 3.57 6.50 44 BAYES_60 22039 6.87 7.77 6.48 45 XM_B_Phish_Phrases 22017 7.33 9.33 6.47 46 XM_DKIMWhitelistDomains 21739 4.49 0.10 6.39 47 LOTS_OF_MONEY 20000 7.86 12.45 5.88 48 TR_XM_DK_Bayes2 19515 4.17 0.56 5.73 49 XM_H_Long_From01 19189 5.54 5.30 5.64 50 BAYES_40 18776 4.38 1.73 5.52 51 TM2_M_VERY_LONG_WORD 18373 5.01 4.10 5.40 52 TR_MAX_INTL_RELAY 18345 7.98 13.98 5.39 53 T_TooManySym_01 18310 4.60 2.78 5.38 54 XM_H_GMP 18269 5.07 4.38 5.37 55 RCVD_IN_MSPIKE_H5 18190 4.31 1.91 5.34 56 MIME_QP_LONG_LINE 18176 4.84 3.67 5.34 57 XM_B_SpammyWords3 17982 8.55 16.09 5.28 58 XMStrtUSub 16096 4.72 4.68 4.73 59 MPART_ALT_DIFF 15854 5.15 6.29 4.66 60 XMNumbers 15345 4.26 3.68 4.51 61 XM_DK_Undo_02 15269 14.91 39.04 4.49 62 HTML_IMAGE_RATIO_02 14839 5.23 7.23 4.36 63 MAY_BE_FORGED 14544 3.13 0.50 4.27 64 XM_PDF 14121 3.12 0.73 4.15 65 TooManyTo_002 13962 3.08 0.73 4.10 66 RCVD_IN_VALIDITY_SAFE 13947 3.58 2.40 4.10 67 BAYES_20 13853 3.29 1.48 4.07 68 XMSubMetaSx_00 13444 4.70 6.43 3.95 69 HTML_IMAGE_RATIO_04 13333 4.30 5.17 3.92 70 XM_UncommonTLD01 13194 4.34 5.40 3.88 71 RCVD_IN_IADB_LISTED 12802 2.98 1.18 3.76 72 TR_XM_SpammyWords4 12625 5.94 11.09 3.71 73 RELAYCOUNTRY_META 12517 7.64 16.82 3.68 74 RCVD_IN_VALIDITY_CERTIFIED 11555 2.90 1.75 3.40 75 KHOP_HELO_FCRDNS 11551 2.90 1.76 3.39 76 HTML_IMAGE_RATIO_06 11410 3.60 4.16 3.35 77 HTML_IMAGE_ONLY_32 11265 2.36 0.16 3.31 78 RCVD_IN_IADB_SPF 11251 2.63 1.06 3.31 79 T_REMOTE_IMAGE 11192 2.78 1.62 3.29 80 BAYES_80 11185 4.89 8.60 3.29 81 BAYES_99 10568 11.32 30.32 3.11 82 BOTNET_IPINHOSTNAME 10529 6.32 13.77 3.09 83 RCVD_IN_IADB_SENDERID 10094 2.37 0.98 2.97 84 RCVD_IN_IADB_DK 9836 2.32 0.99 2.89 85 XM_B_SpammyTLD 9655 3.26 4.23 2.84 86 MAILING_LIST_MULTI 9650 2.63 2.15 2.84 87 T_TooManySym_02 9526 2.20 0.83 2.80 88 MIME_HTML_MOSTLY 9425 3.31 4.58 2.77 89 XM_CamelCaseFrm001 8859 2.87 3.49 2.60 90 RCVD_IN_IADB_VOUCHED 8501 1.91 0.54 2.50 91 HTML_MIME_NO_HTML_TAG 8402 2.27 1.81 2.47 92 XM_Body_Dirty_Words 8219 4.02 7.74 2.42 93 SCC_BODY_URI_ONLY 8077 2.14 1.59 2.37 94 MIME_HTML_ONLY_MULTI 8036 2.58 3.10 2.36 95 HTML_IMAGE_RATIO_08 7841 2.35 2.44 2.30 96 RCVD_IN_MSPIKE_H4 7803 2.07 1.55 2.29 97 BAYES_999 7740 8.65 23.41 2.27 98 BAYES_05 7396 1.73 0.70 2.17 99 BAYES_95 7155 2.96 4.95 2.10 100 INVALID_MSGID 7118 1.52 0.21 2.09 101 DKIM_INVALID 7095 2.98 5.06 2.08 102 T_XMDrugObfuBody_14 7010 2.77 4.41 2.06 103 TR_MetaPhish_Combo_01 6943 1.83 1.35 2.04 104 TR_XM_SpammyRelay 6763 4.94 11.78 1.99 105 XMSexyCombo_05 6737 2.64 4.18 1.98 106 XM_B_FormFill 6609 1.36 0.03 1.94 107 FROM_EXCESS_BASE64 6368 1.85 1.79 1.87 108 TO_MALFORMED 6259 1.29 0.01 1.84 109 TR_XM_DKIM_Undo 5997 9.62 27.80 1.76 110 TM2_M_URI_OPT_OUT 5950 2.21 3.28 1.75 111 RCVD_IN_IADB_OPTIN 5902 1.32 0.35 1.73 112 XM_B_URI_Unicode 5827 2.05 2.83 1.71 113 XM_B_Unsub2 5512 2.16 3.41 1.62 114 TR_XM_PhishingBody 5474 2.66 5.08 1.61 115 XM_DK_Undo_01 5418 1.69 1.90 1.59 116 TR_XM_UnparsRelay 5361 3.99 9.57 1.58 117 MIME_CHARSET_FARAWAY 5317 1.30 0.69 1.56 118 TooManyTo_003 5274 1.27 0.63 1.55 119 XM_B_Investor 5012 2.47 4.77 1.47 120 SUBJ_ALL_CAPS 5006 1.64 2.02 1.47 121 XM_SendGrid 4940 1.46 1.47 1.45 122 UNTRUSTED_Relay 4923 2.88 6.20 1.45 123 TR_XM_SpammyWords5 4889 2.12 3.71 1.44 124 CHARSET_FARAWAY_HEADER 4770 1.11 0.43 1.40 125 URI_NOVOWEL 4763 1.43 1.51 1.40 126 XMDiploma_00 4689 1.83 2.87 1.38 127 BOTNET 4650 4.02 10.17 1.37 128 XM_SPF_SoftFail 4648 1.80 2.82 1.37 129 T_XMDrugObfuBody_08 4623 1.86 3.02 1.36 130 TR_Symld_Words 4497 1.21 0.96 1.32 131 URI_HEX 4400 1.44 1.77 1.29 132 IN_HORDE_ADDRESS_BOOK 4375 0.92 0.08 1.29 133 XM_GoogleGroups 4231 1.11 0.81 1.24 134 HELO_NODOT 4150 0.91 0.21 1.22 135 HELO_NO_DOMAIN 4149 0.91 0.20 1.22 136 TR_DCC_Bayes_99 4131 7.40 21.70 1.21 137 XMGappySubj_01 3880 0.85 0.18 1.14 138 T_TooManySym_03 3876 0.90 0.36 1.14 139 TooManyTo_004 3872 0.97 0.58 1.14 140 XM_OfRef6 3796 1.92 3.79 1.12 141 XMCapTrack 3592 0.86 0.40 1.06 142 TVD_SPACE_RATIO 3506 0.77 0.17 1.03 143 TR_XM_DK_SendGrid 3339 0.94 0.85 0.98 144 XM_UB50 3175 1.62 3.22 0.93 145 T_FILL_THIS_FORM_SHORT 3125 1.34 2.32 0.92 146 TooManyTo_005 3056 0.79 0.53 0.90 147 XM_H_Long_From02 3000 1.20 1.94 0.88 148 XM_H_PHPMailer 2941 0.82 0.71 0.86 149 XM_ShortIntro_01 2934 0.75 0.48 0.86 150 XMStockSpam_06 2910 1.32 2.38 0.86 151 HTML_EXTRA_CLOSE 2891 0.60 0.03 0.85 152 TVD_RCVD_IP 2830 0.86 0.94 0.83 153 TR_XM_Base64_M1 2798 0.74 0.54 0.82 154 XMGenDplmaNmb 2721 1.03 1.56 0.80 155 XMBdyGiftCard01 2711 0.92 1.21 0.80 156 XMBrknScrpt_02 2657 1.11 1.88 0.78 157 RELAYCOUNTRY_CA 2649 2.49 6.44 0.78 158 SpammyFromTLD_01 2574 1.05 1.73 0.76 159 URI_OPTOUT_3LD 2563 0.68 0.51 0.75 160 RELAYCOUNTRY_AU 2560 1.31 2.59 0.75 161 T_XMDrugObfuBody_00 2411 0.94 1.47 0.71 162 FROM_GOV_DKIM_AU 2409 0.58 0.28 0.71 163 T_HTML_ATTACH 2385 0.63 0.46 0.70 164 RCVD_IN_PBL 2367 0.86 1.23 0.70 165 DKIM_ADSP_CUSTOM_MED 2347 0.74 0.86 0.69 166 TO_IN_SUBJ 2240 0.47 0.04 0.66 167 XMSlimDrugH 2133 0.66 0.73 0.63 168 HTTPS_HTTP_MISMATCH 2110 0.80 1.21 0.62 169 XMSubMetaI_00 2072 0.79 1.22 0.61 170 XMNoVowels 2039 0.58 0.53 0.60 171 T_OBFU_PDF_ATTACH 2004 0.47 0.20 0.59 172 FILL_THIS_FORM 1968 0.49 0.30 0.58 173 XM_B_COPY_HTML 1944 0.73 1.10 0.57 174 T_Symld_Words_02 1897 0.67 0.93 0.56 175 XMLngstWrd_00 1891 0.58 0.63 0.56 176 XMGappySubj_02 1885 0.40 0.04 0.55 177 MSGID_FROM_MTA_HEADER 1866 0.42 0.11 0.55 178 RELAYCOUNTRY_GB 1836 0.68 0.99 0.54 179 XMBSHREFv2 1817 0.52 0.49 0.53 180 XMMoneyMeta_00 1804 0.58 0.68 0.53 181 MPART_ALT_DIFF_COUNT 1776 0.70 1.11 0.52 182 URI_TRY_3LD 1766 0.89 1.75 0.52 183 RCVD_IN_BL_SPAMCOP_NET 1744 2.79 8.05 0.51 184 XM_B_SpammyWords4 1673 1.11 2.54 0.49 185 XMPhish30 1659 0.82 1.58 0.49 186 TO_NO_BRKTS_HTML_ONLY 1633 0.54 0.69 0.48 187 T_XMHurry_00 1563 0.81 1.63 0.46 188 NML_ADSP_CUSTOM_MED 1558 0.53 0.70 0.46 189 PLING_QUERY 1551 0.55 0.77 0.46 190 SpammyFromTLD_02 1510 0.90 1.97 0.44 191 HTML_TAG_BALANCE_BODY 1490 0.57 0.86 0.44 192 XM_ProductURIs 1475 0.62 1.04 0.43 193 XM_B_DNDMA 1475 0.57 0.90 0.43 194 THIS_AD 1460 0.51 0.71 0.43 195 TM2_M_OBFU_COMMENT 1458 0.52 0.72 0.43 196 XMDateMe_00 1441 0.41 0.37 0.42 197 LongTLD 1440 0.55 0.84 0.42 198 XM_S_SpammyWords 1434 0.44 0.47 0.42 199 TR_XM_Spammywords 1434 0.44 0.47 0.42 200 XMLngstWrd_01 1420 0.39 0.34 0.42 ----------------------------------------------------------------------