Email: 461391 Autolearn: 0 AvgScore: 5.14 AvgScanTime: 1.47 sec Spam: 143943 Autolearn: 0 AvgScore: 14.11 AvgScanTime: 1.67 sec Ham: 317448 Autolearn: 0 AvgScore: 1.08 AvgScanTime: 1.38 sec Time Spent Running SA: 188.72 hours Time Spent Processing Spam: 66.59 hours Time Spent Processing Ham: 122.13 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 142125 99.19 98.74 99.39 2 HTML_MESSAGE 137953 90.35 95.84 87.86 3 DKIM_SIGNED 130920 79.18 90.95 73.84 4 XM_DK_Pass 125364 77.27 87.09 72.82 5 XM_B_Unicode 124558 75.14 86.53 69.97 6 DKIM_VALID 124496 76.51 86.49 71.98 7 RELAYCOUNTRY_US 120106 83.24 83.44 83.15 8 DCC_CHECK 108905 50.88 75.66 39.64 9 XM_B_SpammyWords 102386 53.86 71.13 46.03 10 XMListUnsubscribeExists 100754 55.21 70.00 48.51 11 DKIM_VALID_AU 97809 60.84 67.95 57.61 12 XM_B_Unicode3 71721 43.84 49.83 41.12 13 LOC_TINY_FONT_1 70361 33.74 48.88 26.87 14 XM_B_SpammyWords2 61359 26.69 42.63 19.46 15 BAYES_50 60811 55.71 42.25 61.82 16 XM_DK_Undo_02 58623 16.06 40.73 4.87 17 HTML_FONT_LOW_CONTRAST 57958 34.73 40.26 32.22 18 FVGT_m_MULTI_ODD 51221 28.94 35.58 25.93 19 DKIM_VALID_EF 48988 30.66 34.03 29.13 20 T_KAM_HTML_FONT_INVALID 44278 24.66 30.76 21.89 21 TR_XM_DKIM_Undo 43262 10.72 30.05 1.95 22 BAYES_99 42631 11.60 29.62 3.44 23 MIME_HTML_ONLY 42305 22.66 29.39 19.61 24 XMSubLong 39686 25.04 27.57 23.89 25 TR_XM_DK_Unsub 36438 17.10 25.31 13.38 26 DCC_CHECK_NEGATIVE 33438 48.74 23.23 60.30 27 BAYES_999 33127 8.93 23.01 2.55 28 T_TM2_M_HEADER_IN_MSG 31682 28.61 22.01 31.61 29 TR_DCC_Bayes_99 30097 7.39 20.91 1.26 30 XM_Multi_Part_URI 30083 16.17 20.90 14.03 31 XM_B_Unsub 27730 12.95 19.26 10.09 32 UNPARSEABLE_RELAY 27665 13.97 19.22 11.59 33 TR_XM_BayesUnsub 26592 10.80 18.47 7.32 34 RCVD_IN_MSPIKE_H2 25897 15.05 17.99 13.71 35 RELAYCOUNTRY_META 23462 7.42 16.30 3.39 36 LOTS_OF_MONEY 23150 9.54 16.08 6.57 37 XM_B_SpammyWords3 22161 8.11 15.40 4.81 38 TR_XM_SpammyWords4 20687 7.65 14.37 4.61 39 TR_MAX_INTL_RELAY 20164 8.69 14.01 6.28 40 BOTNET_IPINHOSTNAME 17928 6.13 12.45 3.26 41 TR_XM_SpammyRelay 17020 4.96 11.82 1.85 42 RCVD_IN_BL_SPAMCOP_NET 16798 4.08 11.67 0.64 43 TR_XM_SpammyWords2 15505 3.72 10.77 0.52 44 RCVD_IN_MSPIKE_WL 14271 14.88 9.91 17.13 45 XM_Evil_Numbers_Gen 14189 10.87 9.86 11.32 46 FSL_BULK_SIG 14065 8.91 9.77 8.52 47 TR_XM_UnparsRelay 13695 3.95 9.51 1.43 48 XM_B_Phish_Phrases 13352 6.80 9.28 5.67 49 BAYES_80 12636 5.33 8.78 3.77 50 BOTNET 12561 3.59 8.73 1.26 51 BAYES_60 11221 7.03 7.80 6.69 52 XM_Body_Dirty_Words 11124 4.77 7.73 3.43 53 LotsOfNums_01 10703 10.14 7.44 11.36 54 HTML_IMAGE_RATIO_02 9898 4.84 6.88 3.92 55 XMSubMetaSx_00 9388 4.09 6.52 2.99 56 MPART_ALT_DIFF 9295 5.06 6.46 4.43 57 RELAYCOUNTRY_CA 9189 2.52 6.38 0.76 58 TR_XM_SPAMCOP 8649 1.97 6.01 0.14 59 XM_B_PhoneNumber 8299 7.95 5.77 8.94 60 UNTRUSTED_Relay 8154 2.80 5.66 1.51 61 RCVD_IN_MSPIKE_BL 8069 2.35 5.61 0.87 62 TR_XM_MSPIKECOMBO 8068 2.35 5.60 0.87 63 XM_B_Investor 8037 2.81 5.58 1.56 64 XM_UncommonTLD01 7765 4.36 5.39 3.89 65 XM_B_SpammyTLD 7659 3.43 5.32 2.57 66 XM_H_Long_From01 7634 5.22 5.30 5.18 67 RCVD_IN_MSPIKE_H3 7302 6.69 5.07 7.42 68 BAYES_95 7162 3.28 4.98 2.51 69 XM_CamelCaseFrm001 6991 2.72 4.86 1.75 70 HTML_IMAGE_RATIO_04 6872 4.91 4.77 4.97 71 XMDiploma_00 6853 2.99 4.76 2.18 72 TR_XM_SpammyWords5 6704 2.62 4.66 1.69 73 DKIM_INVALID 6424 2.67 4.46 1.85 74 XMSexyCombo_05 6279 2.46 4.36 1.59 75 TR_XM_PhishingBody 6238 2.27 4.33 1.34 76 T_XMDrugObfuBody_14 6208 2.74 4.31 2.03 77 XMNumbers 6173 4.12 4.29 4.05 78 TM2_M_VERY_LONG_WORD 6050 5.02 4.20 5.39 79 XM_H_GMP 5849 4.88 4.06 5.25 80 XMStrtUSub 5831 4.44 4.05 4.62 81 TR_LOTS_OF_MONEY3 5806 1.81 4.03 0.80 82 XM_OfRef6 5685 2.12 3.95 1.29 83 TR_XM_SpammyWords3 5643 1.44 3.92 0.32 84 XM_B_Unsub2 5363 2.19 3.73 1.49 85 RCVD_IN_VALIDITY_RPBL 5330 1.23 3.70 0.11 86 RCVD_IN_MSPIKE_L3 5219 1.53 3.63 0.58 87 MIME_HTML_MOSTLY 5158 2.77 3.58 2.40 88 TooManyTo_001 5154 6.57 3.58 7.92 89 MIME_QP_LONG_LINE 4801 4.75 3.34 5.39 90 HTML_IMAGE_RATIO_06 4794 2.95 3.33 2.77 91 TR_XM_NoHeaderRelay 4637 1.15 3.22 0.21 92 MIME_HTML_ONLY_MULTI 4463 2.60 3.10 2.38 93 XM_URI_RBL 4435 1.15 3.08 0.28 94 T_TooManySym_01 4392 4.87 3.05 5.69 95 TM2_M_URI_OPT_OUT 4275 2.11 2.97 1.71 96 RCVD_IN_MSPIKE_H4 4265 3.32 2.96 3.49 97 XM_UB50 4251 1.54 2.95 0.90 98 RELAYCOUNTRY_AU 4101 1.40 2.85 0.74 99 T_FILL_THIS_FORM_SHORT 4016 1.45 2.79 0.85 100 T_XMHurry_00 3918 1.33 2.72 0.70 101 T_XMDrugObfuBody_08 3849 1.67 2.67 1.21 102 XM_SPF_SoftFail 3760 1.76 2.61 1.37 103 XM_B_URI_Unicode 3729 2.10 2.59 1.87 104 XMGenDplmaNmb 3664 1.55 2.55 1.10 105 XMBody_17 3601 1.11 2.50 0.48 106 URI_HEX 3524 1.58 2.45 1.18 107 SUBJ_ALL_CAPS 3491 1.98 2.43 1.77 108 URI_TRY_3LD 3489 1.17 2.42 0.60 109 HTML_IMAGE_RATIO_08 3442 2.35 2.39 2.33 110 XM_B_DNDMA 3416 1.11 2.37 0.53 111 USER_IN_DEF_DKIM_WL 3318 9.46 2.31 12.70 112 XM_B_SpammyWords4 3155 1.02 2.19 0.50 113 MAILING_LIST_MULTI 3025 2.58 2.10 2.80 114 RCVD_IN_VALIDITY_SAFE 2969 3.50 2.06 4.14 115 BAYES_40 2954 4.56 2.05 5.70 116 T_XMDrugObfuBody_00 2947 1.64 2.05 1.46 117 XM_H_Long_From02 2876 1.19 2.00 0.82 118 XMStockSpam_06 2808 1.40 1.95 1.15 119 SpammyFromTLD_02 2794 0.89 1.94 0.42 120 FROM_EXCESS_BASE64 2780 1.66 1.93 1.54 121 XM_B_SEO 2776 0.80 1.93 0.29 122 ALL_TRUSTED 2767 10.18 1.92 13.92 123 XMBrknScrpt_02 2755 1.19 1.91 0.86 124 RCVD_IN_MSPIKE_H5 2704 4.87 1.88 6.23 125 TR_XM_INV_DKIM 2621 0.62 1.82 0.08 126 HK_RANDOM_REPLYTO 2498 0.61 1.74 0.10 127 SpammyFromTLD_01 2473 0.96 1.72 0.61 128 RCVD_IN_PSBL 2442 0.91 1.70 0.55 129 XMBody_78 2362 0.74 1.64 0.34 130 BAYES_20 2315 3.04 1.61 3.69 131 RCVD_IN_VALIDITY_CERTIFIED 2256 2.86 1.57 3.44 132 TR_XM_SEO4 2227 0.57 1.55 0.13 133 XMPhish30 2205 0.80 1.53 0.47 134 HTTPS_HTTP_MISMATCH 2180 0.93 1.51 0.67 135 THIS_AD 2178 0.72 1.51 0.36 136 KHOP_HELO_FCRDNS 2162 3.01 1.50 3.70 137 T_REMOTE_IMAGE 2126 2.80 1.48 3.40 138 TR_XM_MSPIKECOMBO2 2117 0.48 1.47 0.03 139 XMSexyCombo_01 2084 0.61 1.45 0.24 140 RELAYCOUNTRY_FR 2071 0.66 1.44 0.30 141 XMBdyGiftCard01 2040 0.74 1.42 0.43 142 XM_DK_Undo_01 2029 1.43 1.41 1.44 143 URI_NOVOWEL 2012 1.34 1.40 1.32 144 XM_ProductURIs 1949 0.76 1.35 0.49 145 SCC_BODY_URI_ONLY 1893 1.93 1.32 2.21 146 HTML_MIME_NO_HTML_TAG 1883 2.06 1.31 2.40 147 XM_SendGrid 1814 1.28 1.26 1.28 148 XMMoneyMeta_00 1786 0.76 1.24 0.54 149 RDNS_DYNAMIC 1770 0.50 1.23 0.17 150 SHOPIFY_IMG_NOT_RCVD_SFY 1738 0.55 1.21 0.26 151 RCVD_IN_MSPIKE_L4 1733 0.50 1.20 0.19 152 XM_B_Phish66 1721 0.59 1.20 0.31 153 XM_B_COPY_HTML 1721 1.07 1.20 1.02 154 PDS_RDNS_DYNAMIC_FP 1720 0.40 1.19 0.05 155 BOUNCE_MESSAGE 1718 6.28 1.19 8.58 156 ANY_BOUNCE_MESSAGE 1718 6.28 1.19 8.59 157 TM2_M_OBFU_COMMENT 1687 0.75 1.17 0.55 158 XMClaimOffer 1684 0.46 1.17 0.14 159 TR_MetaPhish_Combo_01 1674 1.54 1.16 1.71 160 XM_HighProb1 1665 0.36 1.16 0.00 161 HTML_IMAGE_ONLY_20 1651 0.62 1.15 0.38 162 TR_Symld_Words 1649 1.30 1.15 1.37 163 RCVD_IN_IADB_LISTED 1648 3.32 1.14 4.31 164 TR_XM_PHPDW 1634 0.61 1.14 0.37 165 XM_DIRTYINTL 1618 0.39 1.12 0.05 166 TR_XM_PHPForged 1616 0.61 1.12 0.37 167 DKIM_ADSP_NXDOMAIN 1607 0.54 1.12 0.28 168 TR_XM_FormFill2 1593 0.60 1.11 0.37 169 SHORTCIRCUIT 1578 0.34 1.10 0.00 170 RCVD_IN_ZEN_LASTEXTERNAL 1578 0.34 1.10 0.00 171 T_MONEY_PERCENT 1574 0.46 1.09 0.17 172 TR_LOTS_OF_MONEY2 1574 0.46 1.09 0.17 173 XM_H_PHPOS 1559 0.59 1.08 0.36 174 RCVD_IN_XBL 1553 0.35 1.08 0.03 175 T_Symld_Words_02 1516 0.63 1.05 0.44 176 TR_XM_MaxSPIKE 1509 0.34 1.05 0.02 177 MultiRelay_CC 1503 0.41 1.04 0.13 178 MPART_ALT_DIFF_COUNT 1487 0.69 1.03 0.53 179 XMSubMetaI_00 1471 0.91 1.02 0.85 180 RCVD_IN_IADB_SPF 1403 2.90 0.97 3.78 181 DKIM_ADSP_CUSTOM_MED 1396 0.87 0.97 0.82 182 RCVD_IN_PBL 1390 0.72 0.97 0.62 183 T_TooManySym_02 1384 2.20 0.96 2.76 184 URIBL_BLACK 1372 0.31 0.95 0.02 185 BOTNET_NORDNS 1340 0.30 0.93 0.01 186 BAYES_05 1340 1.73 0.93 2.09 187 RCVD_IN_IADB_DK 1336 2.52 0.93 3.24 188 DIET_1 1334 0.50 0.93 0.31 189 RCVD_IN_IADB_SENDERID 1332 2.59 0.93 3.34 190 RCVD_IN_SBL_CSS 1315 0.31 0.91 0.03 191 XMSubMetaSxObfu_03 1309 0.51 0.91 0.33 192 BAYES_00 1293 7.37 0.90 10.30 193 TR_XM_RelayPhish 1285 0.33 0.89 0.07 194 HTML_FONT_TINY_NORDNS 1272 0.34 0.88 0.09 195 TVD_RCVD_IP 1268 0.80 0.88 0.77 196 XMPhish14 1237 0.47 0.86 0.29 197 J_POPCORN_WO_D 1217 0.45 0.85 0.28 198 HTML_TAG_BALANCE_BODY 1206 0.59 0.84 0.48 199 TR_XM_DK_SendGrid 1193 0.82 0.83 0.81 200 LongTLD 1189 0.69 0.83 0.63 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 315523 99.19 98.74 99.39 2 HTML_MESSAGE 278918 90.35 95.84 87.86 3 RELAYCOUNTRY_US 263973 83.24 83.44 83.15 4 DKIM_SIGNED 234389 79.18 90.95 73.84 5 XM_DK_Pass 231156 77.27 87.09 72.82 6 DKIM_VALID 228508 76.51 86.49 71.98 7 XM_B_Unicode 222111 75.14 86.53 69.97 8 BAYES_50 196238 55.71 42.25 61.82 9 DCC_CHECK_NEGATIVE 191436 48.74 23.23 60.30 10 DKIM_VALID_AU 182890 60.84 67.95 57.61 11 XMListUnsubscribeExists 153981 55.21 70.00 48.51 12 XM_B_SpammyWords 146115 53.86 71.13 46.03 13 XM_B_Unicode3 130537 43.84 49.83 41.12 14 DCC_CHECK 125831 50.88 75.66 39.64 15 HTML_FONT_LOW_CONTRAST 102272 34.73 40.26 32.22 16 T_TM2_M_HEADER_IN_MSG 100344 28.61 22.01 31.61 17 DKIM_VALID_EF 92472 30.66 34.03 29.13 18 LOC_TINY_FONT_1 85303 33.74 48.88 26.87 19 FVGT_m_MULTI_ODD 82314 28.94 35.58 25.93 20 XMSubLong 75837 25.04 27.57 23.89 21 T_KAM_HTML_FONT_INVALID 69503 24.66 30.76 21.89 22 MIME_HTML_ONLY 62262 22.66 29.39 19.61 23 XM_B_SpammyWords2 61770 26.69 42.63 19.46 24 RCVD_IN_MSPIKE_WL 54388 14.88 9.91 17.13 25 XM_Multi_Part_URI 44542 16.17 20.90 14.03 26 ALL_TRUSTED 44204 10.18 1.92 13.92 27 RCVD_IN_MSPIKE_H2 43535 15.05 17.99 13.71 28 TR_XM_DK_Unsub 42473 17.10 25.31 13.38 29 USER_IN_DEF_DKIM_WL 40308 9.46 2.31 12.70 30 UNPARSEABLE_RELAY 36790 13.97 19.22 11.59 31 LotsOfNums_01 36066 10.14 7.44 11.36 32 XM_Evil_Numbers_Gen 35944 10.87 9.86 11.32 33 BAYES_00 32702 7.37 0.90 10.30 34 XM_B_Unsub 32022 12.95 19.26 10.09 35 XM_B_PhoneNumber 28386 7.95 5.77 8.94 36 ANY_BOUNCE_MESSAGE 27254 6.28 1.19 8.59 37 BOUNCE_MESSAGE 27250 6.28 1.19 8.58 38 FSL_BULK_SIG 27045 8.91 9.77 8.52 39 TooManyTo_001 25141 6.57 3.58 7.92 40 RCVD_IN_MSPIKE_H3 23550 6.69 5.07 7.42 41 TR_XM_BayesUnsub 23233 10.80 18.47 7.32 42 TR_XM_DK_Bayes 22108 5.03 0.77 6.96 43 XM_DKIMWhitelistDomains 21841 4.74 0.01 6.88 44 TR_XM_DK_Bayes1 21753 4.95 0.77 6.85 45 BAYES_60 21222 7.03 7.80 6.69 46 LOTS_OF_MONEY 20852 9.54 16.08 6.57 47 TR_MAX_INTL_RELAY 19935 8.69 14.01 6.28 48 RCVD_IN_MSPIKE_H5 19762 4.87 1.88 6.23 49 TR_XM_DK_Bayes2 18268 4.09 0.43 5.75 50 BAYES_40 18099 4.56 2.05 5.70 51 T_TooManySym_01 18055 4.87 3.05 5.69 52 XM_B_Phish_Phrases 18013 6.80 9.28 5.67 53 MIME_QP_LONG_LINE 17116 4.75 3.34 5.39 54 TM2_M_VERY_LONG_WORD 17114 5.02 4.20 5.39 55 XM_H_GMP 16671 4.88 4.06 5.25 56 XM_H_Long_From01 16457 5.22 5.30 5.18 57 HTML_IMAGE_RATIO_04 15785 4.91 4.77 4.97 58 XM_DK_Undo_02 15470 16.06 40.73 4.87 59 XM_B_SpammyWords3 15262 8.11 15.40 4.81 60 XMStrtUSub 14651 4.44 4.05 4.62 61 TR_XM_SpammyWords4 14628 7.65 14.37 4.61 62 XM_PDF 14359 3.31 0.63 4.52 63 MPART_ALT_DIFF 14066 5.06 6.46 4.43 64 RCVD_IN_IADB_LISTED 13681 3.32 1.14 4.31 65 HTML_IMAGE_ONLY_32 13460 2.97 0.16 4.24 66 MAY_BE_FORGED 13413 3.04 0.42 4.23 67 RCVD_IN_VALIDITY_SAFE 13158 3.50 2.06 4.14 68 XMNumbers 12842 4.12 4.29 4.05 69 HTML_IMAGE_RATIO_02 12437 4.84 6.88 3.92 70 XM_UncommonTLD01 12345 4.36 5.39 3.89 71 RCVD_IN_IADB_SPF 12000 2.90 0.97 3.78 72 BAYES_80 11977 5.33 8.78 3.77 73 KHOP_HELO_FCRDNS 11738 3.01 1.50 3.70 74 BAYES_20 11719 3.04 1.61 3.69 75 RCVD_IN_MSPIKE_H4 11076 3.32 2.96 3.49 76 RCVD_IN_VALIDITY_CERTIFIED 10924 2.86 1.57 3.44 77 BAYES_99 10912 11.60 29.62 3.44 78 XM_Body_Dirty_Words 10883 4.77 7.73 3.43 79 T_REMOTE_IMAGE 10803 2.80 1.48 3.40 80 RELAYCOUNTRY_META 10751 7.42 16.30 3.39 81 RCVD_IN_IADB_SENDERID 10606 2.59 0.93 3.34 82 SHORT_URI_2 10522 2.44 0.51 3.31 83 BOTNET_IPINHOSTNAME 10361 6.13 12.45 3.26 84 RCVD_IN_IADB_DK 10294 2.52 0.93 3.24 85 XMSubMetaSx_00 9482 4.09 6.52 2.99 86 TooManyTo_002 9353 2.19 0.52 2.95 87 RCVD_IN_IADB_VOUCHED 9181 2.16 0.56 2.89 88 MAILING_LIST_MULTI 8896 2.58 2.10 2.80 89 HTML_IMAGE_RATIO_06 8798 2.95 3.33 2.77 90 T_TooManySym_02 8753 2.20 0.96 2.76 91 XM_B_SpammyTLD 8156 3.43 5.32 2.57 92 BAYES_999 8097 8.93 23.01 2.55 93 BAYES_95 7953 3.28 4.98 2.51 94 MIME_HTML_MOSTLY 7621 2.77 3.58 2.40 95 HTML_MIME_NO_HTML_TAG 7609 2.06 1.31 2.40 96 MIME_HTML_ONLY_MULTI 7546 2.60 3.10 2.38 97 INVALID_MSGID 7499 1.71 0.26 2.36 98 HTML_IMAGE_RATIO_08 7389 2.35 2.39 2.33 99 SCC_BODY_URI_ONLY 7007 1.93 1.32 2.21 100 XMDiploma_00 6930 2.99 4.76 2.18 101 BAYES_05 6619 1.73 0.93 2.09 102 T_XMDrugObfuBody_14 6457 2.74 4.31 2.03 103 RCVD_IN_IADB_OPTIN 6368 1.48 0.32 2.01 104 TO_MALFORMED 6282 1.38 0.07 1.98 105 TR_XM_DKIM_Undo 6180 10.72 30.05 1.95 106 XM_B_URI_Unicode 5952 2.10 2.59 1.87 107 TR_XM_SpammyRelay 5884 4.96 11.82 1.85 108 DKIM_INVALID 5881 2.67 4.46 1.85 109 SUBJ_ALL_CAPS 5624 1.98 2.43 1.77 110 XM_CamelCaseFrm001 5545 2.72 4.86 1.75 111 TM2_M_URI_OPT_OUT 5442 2.11 2.97 1.71 112 TR_MetaPhish_Combo_01 5439 1.54 1.16 1.71 113 TR_XM_SpammyWords5 5375 2.62 4.66 1.69 114 MIME_CHARSET_FARAWAY 5174 1.25 0.42 1.63 115 XMSexyCombo_05 5063 2.46 4.36 1.59 116 XM_B_Investor 4943 2.81 5.58 1.56 117 T_TVD_MIME_NO_HEADERS 4934 1.09 0.07 1.55 118 FROM_EXCESS_BASE64 4900 1.66 1.93 1.54 119 UNTRUSTED_Relay 4786 2.80 5.66 1.51 120 XM_B_Unsub2 4730 2.19 3.73 1.49 121 CHARSET_FARAWAY_HEADER 4715 1.08 0.18 1.49 122 T_XMDrugObfuBody_00 4635 1.64 2.05 1.46 123 XM_DK_Undo_01 4562 1.43 1.41 1.44 124 TR_XM_UnparsRelay 4528 3.95 9.51 1.43 125 SHORT_URI_3 4505 1.02 0.13 1.42 126 TR_Symld_Words 4356 1.30 1.15 1.37 127 XM_SPF_SoftFail 4352 1.76 2.61 1.37 128 TooManyTo_003 4317 1.08 0.45 1.36 129 IN_HORDE_ADDRESS_BOOK 4294 0.96 0.08 1.35 130 TR_XM_PhishingBody 4244 2.27 4.33 1.34 131 URI_NOVOWEL 4178 1.34 1.40 1.32 132 XM_OfRef6 4089 2.12 3.95 1.29 133 XM_SendGrid 4075 1.28 1.26 1.28 134 BOTNET 4002 3.59 8.73 1.26 135 TR_DCC_Bayes_99 3995 7.39 20.91 1.26 136 XMGappySubj_01 3977 0.95 0.29 1.25 137 T_XMDrugObfuBody_08 3853 1.67 2.67 1.21 138 URI_HEX 3744 1.58 2.45 1.18 139 XMStockSpam_06 3636 1.40 1.95 1.15 140 TVD_SPACE_RATIO 3548 0.85 0.27 1.12 141 XMGenDplmaNmb 3477 1.55 2.55 1.10 142 XM_GoogleGroups 3411 0.97 0.74 1.07 143 T_TooManySym_03 3361 0.91 0.59 1.06 144 XM_B_COPY_HTML 3237 1.07 1.20 1.02 145 XM_B_FormFill 3148 0.69 0.02 0.99 146 TooManyTo_004 3117 0.80 0.40 0.98 147 FROM_GOV_DKIM_AU 2984 0.72 0.24 0.94 148 XM_ShortIntro_01 2977 0.75 0.33 0.94 149 XM_UB50 2872 1.54 2.95 0.90 150 XMCapTrack 2823 0.72 0.34 0.89 151 HELO_NODOT 2819 0.64 0.10 0.89 152 HELO_NO_DOMAIN 2814 0.64 0.09 0.89 153 RCVD_IN_MSPIKE_BL 2770 2.35 5.61 0.87 154 TR_XM_MSPIKECOMBO 2770 2.35 5.60 0.87 155 XMBrknScrpt_02 2736 1.19 1.91 0.86 156 XMSubMetaI_00 2706 0.91 1.02 0.85 157 T_FILL_THIS_FORM_SHORT 2688 1.45 2.79 0.85 158 DKIM_ADSP_CUSTOM_MED 2618 0.87 0.97 0.82 159 XM_H_Long_From02 2613 1.19 2.00 0.82 160 TR_XM_DK_SendGrid 2586 0.82 0.83 0.81 161 T_OBFU_PDF_ATTACH 2579 0.58 0.08 0.81 162 URI_OPTOUT_3LD 2557 0.72 0.52 0.81 163 TR_LOTS_OF_MONEY3 2551 1.81 4.03 0.80 164 TooManyTo_005 2481 0.65 0.35 0.78 165 TVD_RCVD_IP 2429 0.80 0.88 0.77 166 RELAYCOUNTRY_CA 2417 2.52 6.38 0.76 167 XMLngstWrd_00 2397 0.73 0.68 0.76 168 RELAYCOUNTRY_AU 2358 1.40 2.85 0.74 169 XM_H_PHPMailer 2331 0.65 0.47 0.73 170 XMGappySubj_02 2266 0.52 0.08 0.71 171 T_XMHurry_00 2229 1.33 2.72 0.70 172 HTTPS_HTTP_MISMATCH 2125 0.93 1.51 0.67 173 RCVD_IN_BL_SPAMCOP_NET 2032 4.08 11.67 0.64 174 LongTLD 1994 0.69 0.83 0.63 175 RCVD_IN_PBL 1954 0.72 0.97 0.62 176 SpammyFromTLD_01 1937 0.96 1.72 0.61 177 URI_TRY_3LD 1910 1.17 2.42 0.60 178 TR_XM_Base64_M1 1884 0.62 0.68 0.59 179 XMNoVowels 1854 0.53 0.40 0.58 180 RCVD_IN_MSPIKE_L3 1826 1.53 3.63 0.58 181 XMBSHREFv2 1780 0.54 0.49 0.56 182 TM2_M_OBFU_COMMENT 1758 0.75 1.17 0.55 183 RCVD_IN_PSBL 1750 0.91 1.70 0.55 184 XMMoneyMeta_00 1727 0.76 1.24 0.54 185 FORGED_GMAIL_RCVD 1706 0.60 0.75 0.54 186 XM_B_DNDMA 1685 1.11 2.37 0.53 187 MPART_ALT_DIFF_COUNT 1681 0.69 1.03 0.53 188 TR_XM_SpammyWords2 1641 3.72 10.77 0.52 189 XM_B_SpammyWords4 1573 1.02 2.19 0.50 190 XM_ProductURIs 1557 0.76 1.35 0.49 191 NML_ADSP_CUSTOM_MED 1556 0.59 0.80 0.49 192 XMBody_17 1536 1.11 2.50 0.48 193 HTML_TAG_BALANCE_BODY 1528 0.59 0.84 0.48 194 XMPhish30 1499 0.80 1.53 0.47 195 TM2_M_BODY_EMPTY 1487 0.35 0.09 0.47 196 RELAYCOUNTRY_GB 1466 0.55 0.73 0.46 197 T_MANY_PILL_PRICE 1465 0.32 0.01 0.46 198 XMSolicitRefs_0 1455 0.44 0.39 0.46 199 XMBody_95 1443 0.35 0.13 0.45 200 XMLngstWrd_01 1403 0.50 0.62 0.44 ----------------------------------------------------------------------