Email: 444665 Autolearn: 0 AvgScore: 4.96 AvgScanTime: 1.33 sec Spam: 128988 Autolearn: 0 AvgScore: 15.03 AvgScanTime: 1.48 sec Ham: 315677 Autolearn: 0 AvgScore: 0.85 AvgScanTime: 1.27 sec Time Spent Running SA: 163.99 hours Time Spent Processing Spam: 52.97 hours Time Spent Processing Ham: 111.03 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 126342 98.99 97.95 99.42 2 HTML_MESSAGE 120761 88.84 93.62 86.88 3 DKIM_SIGNED 112552 75.55 87.26 70.76 4 XM_DK_Pass 106516 73.31 82.58 69.53 5 XM_B_Unicode 106135 71.86 82.28 67.60 6 DKIM_VALID 105493 72.32 81.79 68.45 7 RELAYCOUNTRY_US 103122 81.15 79.95 81.64 8 DCC_CHECK 95847 47.73 74.31 36.87 9 XM_B_SpammyWords 89690 50.91 69.53 43.30 10 XMListUnsubscribeExists 85127 50.19 66.00 43.73 11 DKIM_VALID_AU 83693 58.31 64.88 55.62 12 XM_B_Unicode3 61547 41.06 47.72 38.34 13 LOC_TINY_FONT_1 60724 31.77 47.08 25.51 14 BAYES_50 52638 55.00 40.81 60.80 15 XM_B_SpammyWords2 51369 24.42 39.82 18.13 16 XM_DK_Undo_02 48638 14.07 37.71 4.41 17 HTML_FONT_LOW_CONTRAST 45603 31.12 35.35 29.39 18 FVGT_m_MULTI_ODD 41464 27.34 32.15 25.38 19 DKIM_VALID_EF 40326 30.26 31.26 29.85 20 BAYES_99 38684 11.37 29.99 3.76 21 MIME_HTML_ONLY 38655 23.56 29.97 20.94 22 T_KAM_HTML_FONT_INVALID 38437 22.43 29.80 19.41 23 TR_XM_DKIM_Undo 36153 9.32 28.03 1.68 24 XMSubLong 32447 23.88 25.16 23.36 25 DCC_CHECK_NEGATIVE 30721 51.70 23.82 63.09 26 BAYES_999 29481 8.57 22.86 2.74 27 TR_XM_DK_Unsub 29012 15.86 22.49 13.15 28 T_TM2_M_HEADER_IN_MSG 28467 31.02 22.07 34.67 29 TR_DCC_Bayes_99 26954 6.93 20.90 1.23 30 XM_Multi_Part_URI 25358 15.17 19.66 13.33 31 XM_B_Unsub 25017 13.46 19.39 11.03 32 RELAYCOUNTRY_META 24153 7.91 18.72 3.49 33 TR_XM_BayesUnsub 24150 10.57 18.72 7.24 34 RCVD_IN_MSPIKE_H2 22131 16.19 17.16 15.79 35 UNPARSEABLE_RELAY 22112 13.65 17.14 12.22 36 XM_B_SpammyWords3 18922 7.19 14.67 4.13 37 TR_MAX_INTL_RELAY 18672 8.36 14.48 5.86 38 TR_XM_SpammyRelay 18513 5.33 14.35 1.65 39 LOTS_OF_MONEY 17754 8.01 13.76 5.66 40 BOTNET_IPINHOSTNAME 17214 5.73 13.35 2.62 41 TR_XM_SpammyWords4 15807 6.19 12.25 3.71 42 FSL_BULK_SIG 14123 9.09 10.95 8.33 43 TR_XM_SpammyWords2 13298 3.30 10.31 0.44 44 BOTNET 12818 3.64 9.94 1.06 45 RCVD_IN_MSPIKE_WL 11982 14.15 9.29 16.13 46 XM_Evil_Numbers_Gen 11908 10.67 9.23 11.26 47 BAYES_80 11352 5.08 8.80 3.56 48 TR_XM_UnparsRelay 11065 3.61 8.58 1.58 49 RCVD_IN_BL_SPAMCOP_NET 10940 2.77 8.48 0.43 50 XM_Body_Dirty_Words 10444 3.86 8.10 2.12 51 BAYES_60 10379 6.83 8.05 6.33 52 XM_B_Phish_Phrases 10117 6.28 7.84 5.64 53 XMSubMetaSx_00 9051 5.17 7.02 4.42 54 RELAYCOUNTRY_CA 8687 2.49 6.73 0.75 55 LotsOfNums_01 8677 8.63 6.73 9.41 56 UNTRUSTED_Relay 8614 3.03 6.68 1.54 57 MPART_ALT_DIFF 8370 4.79 6.49 4.09 58 HTML_IMAGE_RATIO_02 8154 4.53 6.32 3.79 59 XM_B_PhoneNumber 7801 9.90 6.05 11.47 60 XM_UncommonTLD01 7604 4.57 5.90 4.03 61 RCVD_IN_MSPIKE_BL 7469 2.01 5.79 0.47 62 TR_XM_MSPIKECOMBO 7466 2.01 5.79 0.47 63 XM_H_Long_From01 7072 5.32 5.48 5.25 64 DKIM_INVALID 7059 3.23 5.47 2.31 65 BAYES_95 6824 3.17 5.29 2.30 66 XM_B_Investor 6637 2.63 5.15 1.60 67 XMSexyCombo_05 6552 2.91 5.08 2.02 68 RCVD_IN_VALIDITY_RPBL 6530 1.65 5.06 0.26 69 XMStrtUSub 6372 4.71 4.94 4.62 70 TR_XM_PhishingBody 6226 2.42 4.83 1.44 71 TR_XM_SpammyWords5 6197 2.31 4.80 1.29 72 XM_B_SpammyTLD 6154 3.17 4.77 2.51 73 XM_H_GMP 6018 5.62 4.67 6.01 74 TooManyTo_001 5939 8.75 4.60 10.44 75 HTML_IMAGE_RATIO_04 5800 4.24 4.50 4.14 76 TR_XM_SpammyWords3 5761 1.43 4.47 0.19 77 XMNumbers 5611 4.83 4.35 5.02 78 T_XMDrugObfuBody_14 5539 2.69 4.29 2.03 79 RCVD_IN_MSPIKE_H3 5449 6.10 4.22 6.87 80 TM2_M_VERY_LONG_WORD 5313 4.70 4.12 4.93 81 MIME_HTML_MOSTLY 4819 2.54 3.74 2.05 82 TR_XM_NoHeaderRelay 4771 1.22 3.70 0.20 83 XM_URI_RBL 4747 1.24 3.68 0.24 84 XM_B_Unsub2 4645 1.86 3.60 1.15 85 HTML_IMAGE_RATIO_06 4429 3.17 3.43 3.06 86 XM_CamelCaseFrm001 4389 2.72 3.40 2.43 87 MIME_HTML_ONLY_MULTI 4295 2.59 3.33 2.29 88 MIME_QP_LONG_LINE 4218 3.92 3.27 4.19 89 XMDiploma_00 4114 1.82 3.19 1.26 90 XM_SPF_SoftFail 3997 1.94 3.10 1.47 91 ALL_TRUSTED 3934 11.92 3.05 15.54 92 XM_OfRef6 3891 1.63 3.02 1.06 93 XM_UB50 3866 1.56 3.00 0.97 94 RELAYCOUNTRY_AU 3776 1.19 2.93 0.49 95 RCVD_IN_MSPIKE_L3 3707 1.04 2.87 0.29 96 T_TooManySym_01 3683 5.12 2.86 6.05 97 TR_XM_SPAMCOP 3582 0.88 2.78 0.11 98 HTML_IMAGE_RATIO_08 3576 2.16 2.77 1.92 99 T_XMDrugObfuBody_08 3537 1.81 2.74 1.43 100 RCVD_IN_MSPIKE_H4 3480 3.08 2.70 3.24 101 TM2_M_URI_OPT_OUT 3459 1.88 2.68 1.56 102 XM_B_URI_Unicode 3437 2.11 2.66 1.88 103 XM_B_SpammyWords4 3311 1.23 2.57 0.68 104 SUBJ_ALL_CAPS 3093 1.75 2.40 1.49 105 BAYES_40 3090 4.63 2.40 5.54 106 RCVD_IN_MSPIKE_H5 3053 4.97 2.37 6.03 107 XMStockSpam_06 2929 1.65 2.27 1.40 108 MAILING_LIST_MULTI 2912 2.82 2.26 3.05 109 SCC_BODY_URI_ONLY 2809 2.30 2.18 2.35 110 T_FILL_THIS_FORM_SHORT 2801 1.17 2.17 0.76 111 TR_XM_INV_DKIM 2765 0.76 2.14 0.20 112 SpammyFromTLD_01 2710 1.10 2.10 0.69 113 SpammyFromTLD_02 2700 0.81 2.09 0.29 114 USER_IN_DEF_DKIM_WL 2692 9.34 2.09 12.30 115 FROM_EXCESS_BASE64 2618 1.70 2.03 1.57 116 TR_LOTS_OF_MONEY3 2582 0.80 2.00 0.31 117 URI_TRY_3LD 2572 0.96 1.99 0.53 118 T_XMHurry_00 2572 1.00 1.99 0.59 119 XMBody_17 2530 0.81 1.96 0.34 120 XMBrknScrpt_02 2492 1.34 1.93 1.10 121 XM_DIRTYINTL 2424 0.60 1.88 0.07 122 RCVD_IN_ZEN_LASTEXTERNAL 2398 0.54 1.86 0.00 123 SHORTCIRCUIT 2398 0.54 1.86 0.00 124 HTML_MIME_NO_HTML_TAG 2317 2.56 1.80 2.88 125 RCVD_IN_PSBL 2312 0.94 1.79 0.59 126 RELAYCOUNTRY_FR 2237 0.74 1.73 0.33 127 KHOP_HELO_FCRDNS 2217 3.03 1.72 3.57 128 RCVD_IN_MSPIKE_L4 2183 0.56 1.69 0.09 129 RCVD_IN_VALIDITY_SAFE 2167 2.94 1.68 3.46 130 RDNS_DYNAMIC 2158 0.60 1.67 0.16 131 XMSexyCombo_01 2118 0.62 1.64 0.20 132 PDS_RDNS_DYNAMIC_FP 2102 0.51 1.63 0.05 133 T_REMOTE_IMAGE 2091 3.01 1.62 3.58 134 RCVD_IN_XBL 2062 0.47 1.60 0.02 135 DIET_1 2061 0.61 1.60 0.21 136 URI_NOVOWEL 1994 1.43 1.55 1.38 137 URI_HEX 1973 1.25 1.53 1.14 138 XM_HighProb1 1965 0.44 1.52 0.00 139 XM_DK_Undo_01 1965 1.55 1.52 1.56 140 XMGenDplmaNmb 1958 0.94 1.52 0.71 141 RCVD_IN_SBL_CSS 1948 0.46 1.51 0.03 142 BAYES_20 1883 3.14 1.46 3.83 143 HTTPS_HTTP_MISMATCH 1878 0.94 1.46 0.73 144 TR_XM_MSPIKECOMBO2 1854 0.42 1.44 0.00 145 XMPhish30 1842 0.82 1.43 0.57 146 TVD_RCVD_IP 1836 1.05 1.42 0.89 147 XM_B_Phish66 1763 0.60 1.37 0.29 148 XM_H_Long_From02 1738 0.96 1.35 0.80 149 RCVD_IN_PBL 1735 0.92 1.35 0.75 150 DKIM_ADSP_NXDOMAIN 1718 0.59 1.33 0.28 151 HK_RANDOM_REPLYTO 1675 0.46 1.30 0.12 152 HTML_IMAGE_ONLY_20 1650 0.66 1.28 0.41 153 T_XMDrugObfuBody_00 1626 0.84 1.26 0.66 154 RCVD_IN_VALIDITY_CERTIFIED 1620 2.36 1.26 2.81 155 MultiRelay_CC 1580 0.47 1.22 0.15 156 RCVD_IN_MSPIKE_L5 1576 0.41 1.22 0.08 157 ANY_BOUNCE_MESSAGE 1546 5.64 1.20 7.45 158 BOUNCE_MESSAGE 1545 5.64 1.20 7.45 159 TR_Symld_Words 1540 1.51 1.19 1.64 160 XM_B_SEO 1528 0.50 1.18 0.22 161 TR_Mismatch_TLD_02 1510 0.42 1.17 0.11 162 TR_XM_PHPForged 1492 0.54 1.16 0.29 163 T_Symld_Words_02 1479 0.68 1.15 0.49 164 BOTNET_NORDNS 1467 0.34 1.14 0.01 165 DKIM_ADSP_CUSTOM_MED 1465 0.91 1.14 0.82 166 XM_UB99 1462 0.33 1.13 0.00 167 TR_XM_PHPDW 1456 0.53 1.13 0.29 168 TR_XM_FormFill2 1454 0.54 1.13 0.29 169 TR_MetaPhish_Combo_01 1448 1.43 1.12 1.56 170 SHOPIFY_IMG_NOT_RCVD_SFY 1442 0.49 1.12 0.23 171 XM_SendGrid 1438 1.50 1.11 1.65 172 XM_H_PHPOS 1426 0.52 1.11 0.28 173 RELAYCOUNTRY_GB 1402 0.70 1.09 0.55 174 XM_B_COPY_HTML 1396 0.70 1.08 0.54 175 MPART_ALT_DIFF_COUNT 1389 0.71 1.08 0.56 176 RCVD_IN_IADB_LISTED 1386 2.61 1.07 3.23 177 TR_XM_SEO4 1385 0.38 1.07 0.10 178 TR_XM_RelayPhish 1366 0.38 1.06 0.10 179 XM_B_DNDMA 1356 0.77 1.05 0.65 180 T_MONEY_PERCENT 1354 0.44 1.05 0.19 181 TR_LOTS_OF_MONEY2 1354 0.44 1.05 0.19 182 XMSubMetaI_00 1353 0.68 1.05 0.53 183 RCVD_IN_SORBS_DUL 1341 0.32 1.04 0.03 184 XM_PDF 1333 3.65 1.03 4.72 185 RELAYCOUNTRY_CN 1317 0.35 1.02 0.07 186 XMFrmHeader_28 1306 0.29 1.01 0.00 187 XMReplyNow 1282 0.48 0.99 0.27 188 TO_NO_BRKTS_HTML_ONLY 1250 0.53 0.97 0.35 189 XMBdyGiftCard01 1246 0.71 0.97 0.61 190 T_TooManySym_02 1220 2.58 0.95 3.25 191 TR_XM_Spammywords 1220 0.39 0.95 0.17 192 XM_S_SpammyWords 1220 0.39 0.95 0.17 193 XMMoneyMeta_00 1216 0.62 0.94 0.49 194 NML_ADSP_CUSTOM_MED 1190 0.64 0.92 0.52 195 XMHTML_After_End 1189 0.50 0.92 0.33 196 XM_UB60 1183 0.33 0.92 0.09 197 TM2_M_OBFU_COMMENT 1173 0.52 0.91 0.36 198 XM_ProductURIs 1157 0.64 0.90 0.53 199 XMSubMetaSSx_00 1156 0.43 0.90 0.24 200 TR_XM_InvalidRelay 1147 0.27 0.89 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 313845 98.99 97.95 99.42 2 HTML_MESSAGE 274258 88.84 93.62 86.88 3 RELAYCOUNTRY_US 257704 81.15 79.95 81.64 4 DKIM_SIGNED 223378 75.55 87.26 70.76 5 XM_DK_Pass 219475 73.31 82.58 69.53 6 DKIM_VALID 216090 72.32 81.79 68.45 7 XM_B_Unicode 213395 71.86 82.28 67.60 8 DCC_CHECK_NEGATIVE 199150 51.70 23.82 63.09 9 BAYES_50 191946 55.00 40.81 60.80 10 DKIM_VALID_AU 175570 58.31 64.88 55.62 11 XMListUnsubscribeExists 138059 50.19 66.00 43.73 12 XM_B_SpammyWords 136674 50.91 69.53 43.30 13 XM_B_Unicode3 121035 41.06 47.72 38.34 14 DCC_CHECK 116386 47.73 74.31 36.87 15 T_TM2_M_HEADER_IN_MSG 109460 31.02 22.07 34.67 16 DKIM_VALID_EF 94243 30.26 31.26 29.85 17 HTML_FONT_LOW_CONTRAST 92776 31.12 35.35 29.39 18 LOC_TINY_FONT_1 80531 31.77 47.08 25.51 19 FVGT_m_MULTI_ODD 80124 27.34 32.15 25.38 20 XMSubLong 73751 23.88 25.16 23.36 21 MIME_HTML_ONLY 66102 23.56 29.97 20.94 22 T_KAM_HTML_FONT_INVALID 61285 22.43 29.80 19.41 23 XM_B_SpammyWords2 57230 24.42 39.82 18.13 24 RCVD_IN_MSPIKE_WL 50926 14.15 9.29 16.13 25 RCVD_IN_MSPIKE_H2 49851 16.19 17.16 15.79 26 ALL_TRUSTED 49053 11.92 3.05 15.54 27 XM_Multi_Part_URI 42082 15.17 19.66 13.33 28 TR_XM_DK_Unsub 41519 15.86 22.49 13.15 29 USER_IN_DEF_DKIM_WL 38833 9.34 2.09 12.30 30 UNPARSEABLE_RELAY 38570 13.65 17.14 12.22 31 BAYES_00 36810 8.50 0.77 11.66 32 XM_B_PhoneNumber 36201 9.90 6.05 11.47 33 XM_Evil_Numbers_Gen 35549 10.67 9.23 11.26 34 XM_B_Unsub 34822 13.46 19.39 11.03 35 TooManyTo_001 32969 8.75 4.60 10.44 36 LotsOfNums_01 29707 8.63 6.73 9.41 37 FSL_BULK_SIG 26286 9.09 10.95 8.33 38 ANY_BOUNCE_MESSAGE 23521 5.64 1.20 7.45 39 BOUNCE_MESSAGE 23518 5.64 1.20 7.45 40 TR_XM_BayesUnsub 22853 10.57 18.72 7.24 41 RCVD_IN_MSPIKE_H3 21674 6.10 4.22 6.87 42 XM_DKIMWhitelistDomains 21542 4.85 0.02 6.82 43 TR_XM_DK_Bayes 20805 4.85 0.58 6.59 44 TR_XM_DK_Bayes1 20417 4.75 0.53 6.47 45 BAYES_60 19996 6.83 8.05 6.33 46 T_TooManySym_01 19090 5.12 2.86 6.05 47 RCVD_IN_MSPIKE_H5 19026 4.97 2.37 6.03 48 XM_H_GMP 18985 5.62 4.67 6.01 49 TR_MAX_INTL_RELAY 18507 8.36 14.48 5.86 50 LOTS_OF_MONEY 17878 8.01 13.76 5.66 51 XM_B_Phish_Phrases 17790 6.28 7.84 5.64 52 BAYES_40 17478 4.63 2.40 5.54 53 TR_XM_DK_Bayes2 17298 4.00 0.39 5.48 54 XM_H_Long_From01 16562 5.32 5.48 5.25 55 XMNumbers 15859 4.83 4.35 5.02 56 TM2_M_VERY_LONG_WORD 15574 4.70 4.12 4.93 57 XM_PDF 14900 3.65 1.03 4.72 58 TooManyTo_002 14702 3.56 0.88 4.66 59 XMStrtUSub 14578 4.71 4.94 4.62 60 XMSubMetaSx_00 13943 5.17 7.02 4.42 61 XM_DK_Undo_02 13933 14.07 37.71 4.41 62 MIME_QP_LONG_LINE 13231 3.92 3.27 4.19 63 HTML_IMAGE_RATIO_04 13068 4.24 4.50 4.14 64 XM_B_SpammyWords3 13037 7.19 14.67 4.13 65 MPART_ALT_DIFF 12918 4.79 6.49 4.09 66 HTML_IMAGE_ONLY_32 12791 2.93 0.20 4.05 67 XM_UncommonTLD01 12714 4.57 5.90 4.03 68 MAY_BE_FORGED 12139 2.82 0.30 3.85 69 BAYES_20 12092 3.14 1.46 3.83 70 HTML_IMAGE_RATIO_02 11976 4.53 6.32 3.79 71 BAYES_99 11881 11.37 29.99 3.76 72 TR_XM_SpammyWords4 11698 6.19 12.25 3.71 73 T_REMOTE_IMAGE 11313 3.01 1.62 3.58 74 KHOP_HELO_FCRDNS 11270 3.03 1.72 3.57 75 BAYES_80 11250 5.08 8.80 3.56 76 RELAYCOUNTRY_META 11025 7.91 18.72 3.49 77 RCVD_IN_VALIDITY_SAFE 10909 2.94 1.68 3.46 78 T_TooManySym_02 10254 2.58 0.95 3.25 79 RCVD_IN_MSPIKE_H4 10226 3.08 2.70 3.24 80 RCVD_IN_IADB_LISTED 10198 2.61 1.07 3.23 81 HTML_IMAGE_RATIO_06 9654 3.17 3.43 3.06 82 MAILING_LIST_MULTI 9618 2.82 2.26 3.05 83 HTML_MIME_NO_HTML_TAG 9079 2.56 1.80 2.88 84 RCVD_IN_IADB_SPF 8955 2.26 0.86 2.84 85 RCVD_IN_VALIDITY_CERTIFIED 8864 2.36 1.26 2.81 86 BAYES_999 8640 8.57 22.86 2.74 87 BOTNET_IPINHOSTNAME 8263 5.73 13.35 2.62 88 RCVD_IN_IADB_SENDERID 7932 2.02 0.80 2.51 89 XM_B_SpammyTLD 7920 3.17 4.77 2.51 90 RCVD_IN_IADB_DK 7708 1.97 0.80 2.44 91 XM_CamelCaseFrm001 7686 2.72 3.40 2.43 92 SCC_BODY_URI_ONLY 7433 2.30 2.18 2.35 93 DKIM_INVALID 7288 3.23 5.47 2.31 94 BAYES_95 7252 3.17 5.29 2.30 95 MIME_HTML_ONLY_MULTI 7236 2.59 3.33 2.29 96 INVALID_MSGID 7155 1.68 0.25 2.27 97 RCVD_IN_IADB_VOUCHED 7108 1.78 0.63 2.25 98 XM_B_FormFill 7029 1.60 0.08 2.23 99 BAYES_05 6952 1.73 0.58 2.20 100 XM_Body_Dirty_Words 6704 3.86 8.10 2.12 101 MIME_HTML_MOSTLY 6486 2.54 3.74 2.05 102 T_XMDrugObfuBody_14 6422 2.69 4.29 2.03 103 XMSexyCombo_05 6372 2.91 5.08 2.02 104 TO_MALFORMED 6296 1.42 0.03 1.99 105 HTML_IMAGE_RATIO_08 6049 2.16 2.77 1.92 106 XM_B_URI_Unicode 5932 2.11 2.66 1.88 107 TooManyTo_003 5621 1.47 0.71 1.78 108 TR_XM_DKIM_Undo 5303 9.32 28.03 1.68 109 XM_SendGrid 5218 1.50 1.11 1.65 110 TR_XM_SpammyRelay 5202 5.33 14.35 1.65 111 TR_Symld_Words 5178 1.51 1.19 1.64 112 MIME_CHARSET_FARAWAY 5053 1.30 0.57 1.60 113 XM_B_Investor 5042 2.63 5.15 1.60 114 TR_XM_UnparsRelay 4982 3.61 8.58 1.58 115 FROM_EXCESS_BASE64 4949 1.70 2.03 1.57 116 XM_DK_Undo_01 4933 1.55 1.52 1.56 117 TR_MetaPhish_Combo_01 4920 1.43 1.12 1.56 118 TM2_M_URI_OPT_OUT 4911 1.88 2.68 1.56 119 RCVD_IN_IADB_OPTIN 4903 1.20 0.32 1.55 120 UNTRUSTED_Relay 4872 3.03 6.68 1.54 121 SUBJ_ALL_CAPS 4696 1.75 2.40 1.49 122 XM_SPF_SoftFail 4650 1.94 3.10 1.47 123 CHARSET_FARAWAY_HEADER 4551 1.14 0.39 1.44 124 TR_XM_PhishingBody 4532 2.42 4.83 1.44 125 T_XMDrugObfuBody_08 4510 1.81 2.74 1.43 126 XMStockSpam_06 4419 1.65 2.27 1.40 127 URI_NOVOWEL 4352 1.43 1.55 1.38 128 TooManyTo_004 4207 1.13 0.63 1.33 129 XMGappySubj_01 4087 1.01 0.30 1.29 130 TR_XM_SpammyWords5 4070 2.31 4.80 1.29 131 IN_HORDE_ADDRESS_BOOK 4051 0.93 0.08 1.28 132 T_TooManySym_03 4036 1.04 0.45 1.28 133 HELO_NODOT 3982 0.96 0.22 1.26 134 HELO_NO_DOMAIN 3976 0.96 0.21 1.26 135 XMDiploma_00 3974 1.82 3.19 1.26 136 TR_DCC_Bayes_99 3871 6.93 20.90 1.23 137 XMCapTrack 3869 1.02 0.52 1.23 138 XM_GoogleGroups 3848 1.11 0.83 1.22 139 XM_B_Unsub2 3645 1.86 3.60 1.15 140 URI_HEX 3601 1.25 1.53 1.14 141 TooManyTo_005 3544 0.96 0.58 1.12 142 XMBrknScrpt_02 3482 1.34 1.93 1.10 143 T_TVD_MIME_NO_HEADERS 3460 0.79 0.04 1.10 144 BOTNET 3349 3.64 9.94 1.06 145 XM_OfRef6 3345 1.63 3.02 1.06 146 TR_XM_DK_SendGrid 3235 0.94 0.72 1.02 147 TVD_SPACE_RATIO 3211 0.84 0.39 1.02 148 XM_ShortIntro_01 3196 0.84 0.43 1.01 149 XM_UB50 3063 1.56 3.00 0.97 150 XM_H_PHPMailer 2876 0.84 0.66 0.91 151 TVD_RCVD_IP 2818 1.05 1.42 0.89 152 XMNoVowels 2717 0.78 0.59 0.86 153 DKIM_ADSP_CUSTOM_MED 2603 0.91 1.14 0.82 154 XMGappySubj_02 2558 0.59 0.06 0.81 155 XM_H_Long_From02 2527 0.96 1.35 0.80 156 URI_OPTOUT_3LD 2504 0.71 0.52 0.79 157 T_FILL_THIS_FORM_SHORT 2414 1.17 2.17 0.76 158 RELAYCOUNTRY_CA 2376 2.49 6.73 0.75 159 RCVD_IN_PBL 2367 0.92 1.35 0.75 160 HTTPS_HTTP_MISMATCH 2295 0.94 1.46 0.73 161 XMGenDplmaNmb 2242 0.94 1.52 0.71 162 T_OBFU_PDF_ATTACH 2229 0.59 0.29 0.71 163 TR_XM_Base64_M1 2217 0.73 0.81 0.70 164 SpammyFromTLD_01 2190 1.10 2.10 0.69 165 XM_B_SpammyWords4 2157 1.23 2.57 0.68 166 XMSubMetaSxObfu_03 2111 0.60 0.44 0.67 167 T_XMDrugObfuBody_00 2087 0.84 1.26 0.66 168 XM_B_DNDMA 2056 0.77 1.05 0.65 169 MSGID_FROM_MTA_HEADER 2021 0.53 0.27 0.64 170 XM_RXBody 2019 0.68 0.80 0.64 171 FILL_THIS_FORM 1939 0.54 0.36 0.61 172 XMBdyGiftCard01 1933 0.71 0.97 0.61 173 HTML_TAG_BALANCE_BODY 1904 0.68 0.88 0.60 174 XMBSHREFv2 1888 0.53 0.37 0.60 175 RCVD_IN_PSBL 1863 0.94 1.79 0.59 176 T_XMHurry_00 1863 1.00 1.99 0.59 177 XMLngstWrd_00 1841 0.61 0.67 0.58 178 XMPhish30 1800 0.82 1.43 0.57 179 MPART_ALT_DIFF_COUNT 1755 0.71 1.08 0.56 180 FROM_GOV_DKIM_AU 1745 0.44 0.16 0.55 181 RELAYCOUNTRY_GB 1724 0.70 1.09 0.55 182 XMSlimDrugH 1710 0.62 0.83 0.54 183 XM_B_COPY_HTML 1709 0.70 1.08 0.54 184 XM_ProductURIs 1686 0.64 0.90 0.53 185 URI_TRY_3LD 1682 0.96 1.99 0.53 186 XMSubMetaI_00 1673 0.68 1.05 0.53 187 NML_ADSP_CUSTOM_MED 1642 0.64 0.92 0.52 188 FORGED_GMAIL_RCVD 1606 0.60 0.83 0.51 189 XMLngstWrd_01 1547 0.49 0.48 0.49 190 SUBJ_DOLLARS 1541 0.49 0.48 0.49 191 XMMoneyMeta_00 1537 0.62 0.94 0.49 192 RELAYCOUNTRY_AU 1536 1.19 2.93 0.49 193 T_Symld_Words_02 1532 0.68 1.15 0.49 194 RCVD_IN_MSPIKE_BL 1485 2.01 5.79 0.47 195 TR_XM_MSPIKECOMBO 1483 2.01 5.79 0.47 196 LongTLD 1476 0.50 0.58 0.47 197 T_MANY_PILL_PRICE 1466 0.33 0.00 0.46 198 TR_XM_SpammyWords2 1398 3.30 10.31 0.44 199 RCVD_IN_BL_SPAMCOP_NET 1369 2.77 8.48 0.43 200 XMDateMe_00 1344 0.46 0.55 0.43 ----------------------------------------------------------------------