Email: 473202 Autolearn: 0 AvgScore: 4.94 AvgScanTime: 1.44 sec Spam: 141091 Autolearn: 0 AvgScore: 14.51 AvgScanTime: 1.59 sec Ham: 332111 Autolearn: 0 AvgScore: 0.88 AvgScanTime: 1.38 sec Time Spent Running SA: 189.43 hours Time Spent Processing Spam: 62.33 hours Time Spent Processing Ham: 127.11 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 138703 99.12 98.31 99.46 2 HTML_MESSAGE 134022 90.20 94.99 88.16 3 DKIM_SIGNED 126644 81.33 89.76 77.74 4 XM_DK_Pass 120491 79.35 85.40 76.78 5 XM_B_Unicode 119548 75.75 84.73 71.94 6 DKIM_VALID 119264 78.38 84.53 75.76 7 RELAYCOUNTRY_US 115592 82.12 81.93 82.19 8 DCC_CHECK 105459 51.25 74.75 41.27 9 XM_B_SpammyWords 96503 52.98 68.40 46.42 10 DKIM_VALID_AU 94536 63.41 67.00 61.88 11 XMListUnsubscribeExists 94398 55.15 66.91 50.15 12 LOC_TINY_FONT_1 69701 35.90 49.40 30.16 13 XM_B_Unicode3 68969 44.21 48.88 42.22 14 XM_DK_Undo_02 58139 15.72 41.21 4.89 15 BAYES_50 56174 54.18 39.81 60.28 16 XM_B_SpammyWords2 55570 25.90 39.39 20.17 17 HTML_FONT_LOW_CONTRAST 54838 32.65 38.87 30.01 18 FVGT_m_MULTI_ODD 48467 29.30 34.35 27.15 19 DKIM_VALID_EF 46344 31.78 32.85 31.33 20 BAYES_99 44454 11.69 31.51 3.27 21 T_KAM_HTML_FONT_INVALID 42865 25.63 30.38 23.62 22 TR_XM_DKIM_Undo 42054 10.52 29.81 2.32 23 MIME_HTML_ONLY 41816 22.44 29.64 19.38 24 XMSubLong 36728 23.54 26.03 22.48 25 BAYES_999 34131 8.92 24.19 2.44 26 DCC_CHECK_NEGATIVE 33442 48.25 23.70 58.68 27 TR_XM_DK_Unsub 32604 16.73 23.11 14.02 28 XM_Multi_Part_URI 31963 18.16 22.65 16.24 29 T_TM2_M_HEADER_IN_MSG 31663 28.56 22.44 31.16 30 TR_DCC_Bayes_99 31341 7.70 22.21 1.53 31 XM_B_Unsub 29273 13.46 20.75 10.37 32 RCVD_IN_MSPIKE_H2 28920 17.61 20.50 16.39 33 TR_XM_BayesUnsub 28057 11.69 19.89 8.20 34 UNPARSEABLE_RELAY 26647 14.20 18.89 12.21 35 RELAYCOUNTRY_META 23833 7.60 16.89 3.66 36 XM_B_SpammyWords3 21977 8.56 15.58 5.58 37 TR_MAX_INTL_RELAY 20514 8.91 14.54 6.52 38 TR_XM_SpammyRelay 17430 5.02 12.35 1.91 39 LOTS_OF_MONEY 16829 8.32 11.93 6.78 40 BOTNET_IPINHOSTNAME 16626 5.70 11.78 3.12 41 TR_XM_SpammyWords2 15372 3.70 10.90 0.65 42 FSL_BULK_SIG 15168 8.94 10.75 8.17 43 TR_XM_SpammyWords4 14989 6.66 10.62 4.98 44 XM_Evil_Numbers_Gen 14960 10.03 10.60 9.78 45 TR_XM_UnparsRelay 14412 4.37 10.21 1.89 46 RCVD_IN_MSPIKE_WL 13607 15.58 9.64 18.11 47 RCVD_IN_BL_SPAMCOP_NET 13543 3.28 9.60 0.60 48 BOTNET 13062 3.74 9.26 1.40 49 BAYES_80 12897 5.59 9.14 4.08 50 XM_B_Phish_Phrases 12254 6.87 8.69 6.11 51 BAYES_60 11367 7.33 8.06 7.02 52 LotsOfNums_01 10617 7.99 7.52 8.19 53 MPART_ALT_DIFF 9782 5.72 6.93 5.20 54 XM_Body_Dirty_Words 9673 4.07 6.86 2.89 55 HTML_IMAGE_RATIO_02 9632 5.31 6.83 4.66 56 XM_B_PhoneNumber 9315 9.56 6.60 10.82 57 XMSubMetaSx_00 9200 4.29 6.52 3.34 58 UNTRUSTED_Relay 8798 3.00 6.24 1.63 59 RELAYCOUNTRY_CA 8671 2.38 6.15 0.78 60 XM_UncommonTLD01 8340 4.62 5.91 4.07 61 RCVD_IN_MSPIKE_H3 7819 7.54 5.54 8.39 62 XM_H_Long_From01 7759 5.81 5.50 5.94 63 DKIM_INVALID 7380 2.95 5.23 1.98 64 TR_XM_PhishingBody 7261 2.77 5.15 1.75 65 HTML_IMAGE_RATIO_04 7238 4.62 5.13 4.40 66 TR_XM_SPAMCOP 7147 1.64 5.07 0.19 67 BAYES_95 7099 3.21 5.03 2.43 68 XM_B_Investor 6966 2.66 4.94 1.69 69 XMStrtUSub 6822 4.87 4.84 4.88 70 XMSexyCombo_05 6468 2.37 4.58 1.43 71 XM_H_GMP 6121 5.26 4.34 5.65 72 RCVD_IN_MSPIKE_BL 6111 1.82 4.33 0.76 73 TR_XM_MSPIKECOMBO 6108 1.82 4.33 0.76 74 HTML_IMAGE_RATIO_06 5777 3.46 4.09 3.19 75 MIME_HTML_MOSTLY 5755 3.17 4.08 2.78 76 TooManyTo_001 5754 7.09 4.08 8.37 77 T_XMDrugObfuBody_14 5475 2.48 3.88 1.88 78 TM2_M_VERY_LONG_WORD 5394 2.18 3.82 1.49 79 XM_B_SpammyTLD 5178 2.83 3.67 2.48 80 MIME_QP_LONG_LINE 4991 4.58 3.54 5.02 81 XM_URI_RBL 4962 1.36 3.52 0.45 82 XM_OfRef6 4943 1.80 3.50 1.07 83 TR_XM_NoHeaderRelay 4939 1.18 3.50 0.19 84 XM_CamelCaseFrm001 4768 2.60 3.38 2.27 85 MIME_HTML_ONLY_MULTI 4765 2.89 3.38 2.69 86 TR_XM_SpammyWords5 4599 2.05 3.26 1.53 87 TR_XM_SpammyWords3 4584 1.19 3.25 0.31 88 XM_B_Unsub2 4476 1.82 3.17 1.25 89 XMNumbers 4473 3.39 3.17 3.48 90 XM_SPF_SoftFail 4464 1.96 3.16 1.44 91 XM_UB50 4418 1.68 3.13 1.06 92 T_XMDrugObfuBody_08 4266 2.37 3.02 2.09 93 RELAYCOUNTRY_AU 4239 1.36 3.00 0.66 94 RCVD_IN_MSPIKE_L3 4054 1.23 2.87 0.54 95 RCVD_IN_VALIDITY_RPBL 3917 0.89 2.78 0.09 96 HTML_IMAGE_RATIO_08 3881 2.31 2.75 2.12 97 XM_B_URI_Unicode 3719 2.17 2.64 1.97 98 TM2_M_URI_OPT_OUT 3692 2.03 2.62 1.79 99 USER_IN_DEF_DKIM_WL 3582 10.28 2.54 13.57 100 T_TooManySym_01 3481 4.66 2.47 5.59 101 XMDiploma_00 3461 1.72 2.45 1.41 102 XM_B_SpammyWords4 3434 1.37 2.43 0.91 103 FROM_EXCESS_BASE64 3264 1.84 2.31 1.63 104 ALL_TRUSTED 3261 11.02 2.31 14.73 105 XMBody_17 3229 0.94 2.29 0.37 106 TR_XM_INV_DKIM 3179 0.70 2.25 0.03 107 XMStockSpam_06 3155 1.62 2.24 1.36 108 RCVD_IN_VALIDITY_SAFE 3100 3.83 2.20 4.52 109 RCVD_IN_MSPIKE_H4 3083 3.31 2.19 3.79 110 MAILING_LIST_MULTI 2986 2.79 2.12 3.08 111 T_FILL_THIS_FORM_SHORT 2939 1.13 2.08 0.72 112 SpammyFromTLD_02 2882 0.97 2.04 0.51 113 SUBJ_ALL_CAPS 2711 1.59 1.92 1.45 114 RCVD_IN_MSPIKE_H5 2705 4.73 1.92 5.92 115 XMPhish30 2594 0.92 1.84 0.52 116 HTML_MIME_NO_HTML_TAG 2543 2.17 1.80 2.32 117 BAYES_40 2543 4.30 1.80 5.37 118 RCVD_IN_VALIDITY_CERTIFIED 2475 3.29 1.75 3.94 119 SpammyFromTLD_01 2431 1.10 1.72 0.83 120 XM_B_COPY_HTML 2427 1.01 1.72 0.71 121 T_XMHurry_00 2379 0.82 1.69 0.45 122 URI_NOVOWEL 2325 1.57 1.65 1.54 123 XMBdyGiftCard01 2321 0.85 1.65 0.51 124 XMBrknScrpt_02 2320 1.09 1.64 0.85 125 SCC_BODY_URI_ONLY 2303 2.15 1.63 2.37 126 XMGenDplmaNmb 2284 0.99 1.62 0.73 127 XM_SendGrid 2246 1.49 1.59 1.45 128 T_XMDrugObfuBody_00 2175 1.01 1.54 0.78 129 SHORTCIRCUIT 2166 0.46 1.54 0.00 130 RCVD_IN_ZEN_LASTEXTERNAL 2166 0.46 1.54 0.00 131 BAYES_20 2158 3.28 1.53 4.03 132 XM_DK_Undo_01 2151 1.74 1.52 1.84 133 HK_RANDOM_REPLYTO 2013 0.52 1.43 0.13 134 RDNS_DYNAMIC 2006 0.60 1.42 0.25 135 PDS_RDNS_DYNAMIC_FP 1974 0.50 1.40 0.12 136 KHOP_HELO_FCRDNS 1960 1.47 1.39 1.50 137 TR_XM_MSPIKECOMBO2 1934 0.42 1.37 0.01 138 XM_B_SEO 1883 0.61 1.33 0.30 139 DIET_1 1881 0.64 1.33 0.34 140 XM_HighProb1 1854 0.39 1.31 0.00 141 RCVD_IN_IADB_LISTED 1841 3.05 1.30 3.79 142 TR_LOTS_OF_MONEY2 1835 0.55 1.30 0.24 143 T_MONEY_PERCENT 1835 0.55 1.30 0.24 144 HTTPS_HTTP_MISMATCH 1820 0.88 1.29 0.71 145 XM_H_Long_From02 1818 0.96 1.29 0.82 146 TR_MetaPhish_Combo_01 1812 1.48 1.28 1.56 147 SHOPIFY_IMG_NOT_RCVD_SFY 1803 0.56 1.28 0.26 148 URI_TRY_3LD 1797 0.81 1.27 0.62 149 T_REMOTE_IMAGE 1776 3.03 1.26 3.78 150 TVD_RCVD_IP 1729 0.95 1.23 0.83 151 XMPhish14 1723 0.77 1.22 0.58 152 RCVD_IN_PBL 1719 0.87 1.22 0.72 153 TR_XM_SEO4 1701 0.45 1.21 0.13 154 BOTNET_NORDNS 1684 0.36 1.19 0.00 155 RCVD_IN_XBL 1680 0.37 1.19 0.02 156 RCVD_IN_MSPIKE_L4 1664 0.44 1.18 0.13 157 URI_HEX 1660 1.25 1.18 1.29 158 RCVD_IN_IADB_SPF 1639 2.67 1.16 3.31 159 HTML_IMAGE_ONLY_20 1632 0.58 1.16 0.33 160 TR_XM_DK_SendGrid 1591 0.99 1.13 0.94 161 XM_B_Phish66 1586 0.54 1.12 0.30 162 THIS_AD 1578 0.57 1.12 0.34 163 XMBody_78 1577 0.61 1.12 0.40 164 RCVD_IN_IADB_DK 1557 2.33 1.10 2.85 165 RCVD_IN_IADB_SENDERID 1557 2.39 1.10 2.93 166 MPART_ALT_DIFF_COUNT 1530 0.73 1.08 0.57 167 ANY_BOUNCE_MESSAGE 1520 2.84 1.08 3.59 168 BOUNCE_MESSAGE 1520 2.84 1.08 3.59 169 TM2_M_A_HREF_HREF 1490 0.54 1.06 0.32 170 HELO_DYNAMIC_SPLIT_IP 1479 0.31 1.05 0.00 171 TR_Mismatch_TLD_02 1460 0.36 1.03 0.07 172 TR_XM_PHPForged 1452 0.49 1.03 0.26 173 XM_DIRTYINTL 1451 0.35 1.03 0.06 174 TR_XM_InvalidRelay 1437 0.31 1.02 0.01 175 TR_XM_FormFill2 1434 0.49 1.02 0.26 176 RCVD_IN_PSBL 1431 0.57 1.01 0.39 177 TR_LOTS_OF_MONEY3 1408 0.49 1.00 0.27 178 TM2_M_OBFU_COMMENT 1407 0.63 1.00 0.48 179 TR_XM_PHPDW 1402 0.48 0.99 0.26 180 MultiRelay_CC 1397 0.42 0.99 0.17 181 RELAYCOUNTRY_FR 1396 0.47 0.99 0.25 182 DKIM_ADSP_NXDOMAIN 1390 0.49 0.99 0.28 183 XM_H_PHPOS 1388 0.47 0.98 0.25 184 TR_Symld_Words 1373 1.31 0.97 1.45 185 URIBL_BLACK 1365 0.30 0.97 0.02 186 DKIM_ADSP_CUSTOM_MED 1362 0.84 0.97 0.78 187 XM_UB99 1347 0.28 0.95 0.00 188 XM_GoogleGroups 1328 1.21 0.94 1.32 189 RCVD_IN_SBL_CSS 1324 0.30 0.94 0.04 190 XM_B_DNDMA 1318 0.64 0.93 0.51 191 RELAYCOUNTRY_GB 1314 0.69 0.93 0.59 192 TR_XM_RelayPhish 1295 0.32 0.92 0.06 193 HTML_FONT_TINY_NORDNS 1288 0.35 0.91 0.12 194 XM_OfRef7 1276 0.42 0.90 0.22 195 TR_XM_MaxSPIKE 1276 0.28 0.90 0.01 196 T_Symld_Words_02 1274 0.65 0.90 0.54 197 LongTLD 1268 0.60 0.90 0.48 198 XMSlimDrugH 1236 0.60 0.88 0.49 199 TR_XM_Base64_M1 1228 0.58 0.87 0.46 200 XM_UB60 1213 0.30 0.86 0.06 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 330316 99.12 98.31 99.46 2 HTML_MESSAGE 292783 90.20 94.99 88.16 3 RELAYCOUNTRY_US 272978 82.12 81.93 82.19 4 DKIM_SIGNED 258190 81.33 89.76 77.74 5 XM_DK_Pass 255004 79.35 85.40 76.78 6 DKIM_VALID 251615 78.38 84.53 75.76 7 XM_B_Unicode 238923 75.75 84.73 71.94 8 DKIM_VALID_AU 205522 63.41 67.00 61.88 9 BAYES_50 200187 54.18 39.81 60.28 10 DCC_CHECK_NEGATIVE 194895 48.25 23.70 58.68 11 XMListUnsubscribeExists 166560 55.15 66.91 50.15 12 XM_B_SpammyWords 154180 52.98 68.40 46.42 13 XM_B_Unicode3 140215 44.21 48.88 42.22 14 DCC_CHECK 137056 51.25 74.75 41.27 15 DKIM_VALID_EF 104051 31.78 32.85 31.33 16 T_TM2_M_HEADER_IN_MSG 103479 28.56 22.44 31.16 17 LOC_TINY_FONT_1 100162 35.90 49.40 30.16 18 HTML_FONT_LOW_CONTRAST 99669 32.65 38.87 30.01 19 FVGT_m_MULTI_ODD 90165 29.30 34.35 27.15 20 T_KAM_HTML_FONT_INVALID 78429 25.63 30.38 23.62 21 XMSubLong 74661 23.54 26.03 22.48 22 XM_B_SpammyWords2 66988 25.90 39.39 20.17 23 MIME_HTML_ONLY 64351 22.44 29.64 19.38 24 RCVD_IN_MSPIKE_WL 60136 15.58 9.64 18.11 25 RCVD_IN_MSPIKE_H2 54419 17.61 20.50 16.39 26 XM_Multi_Part_URI 53947 18.16 22.65 16.24 27 ALL_TRUSTED 48909 11.02 2.31 14.73 28 TR_XM_DK_Unsub 46562 16.73 23.11 14.02 29 USER_IN_DEF_DKIM_WL 45059 10.28 2.54 13.57 30 UNPARSEABLE_RELAY 40540 14.20 18.89 12.21 31 BAYES_00 37062 8.06 0.76 11.16 32 XM_B_PhoneNumber 35929 9.56 6.60 10.82 33 XM_B_Unsub 34443 13.46 20.75 10.37 34 XM_Evil_Numbers_Gen 32483 10.03 10.60 9.78 35 RCVD_IN_MSPIKE_H3 27871 7.54 5.54 8.39 36 TooManyTo_001 27789 7.09 4.08 8.37 37 TR_XM_BayesUnsub 27240 11.69 19.89 8.20 38 LotsOfNums_01 27212 7.99 7.52 8.19 39 XM_DKIMWhitelistDomains 27148 5.79 0.16 8.17 40 FSL_BULK_SIG 27129 8.94 10.75 8.17 41 TR_XM_DK_Bayes 26266 5.73 0.60 7.91 42 TR_XM_DK_Bayes1 25830 5.64 0.60 7.78 43 BAYES_60 23300 7.33 8.06 7.02 44 LOTS_OF_MONEY 22525 8.32 11.93 6.78 45 TR_XM_DK_Bayes2 22142 4.80 0.42 6.67 46 TR_MAX_INTL_RELAY 21639 8.91 14.54 6.52 47 XM_B_Phish_Phrases 20276 6.87 8.69 6.11 48 XM_H_Long_From01 19741 5.81 5.50 5.94 49 RCVD_IN_MSPIKE_H5 19672 4.73 1.92 5.92 50 XM_H_GMP 18768 5.26 4.34 5.65 51 T_TooManySym_01 18563 4.66 2.47 5.59 52 XM_B_SpammyWords3 18525 8.56 15.58 5.58 53 BAYES_40 17826 4.30 1.80 5.37 54 MPART_ALT_DIFF 17264 5.72 6.93 5.20 55 MIME_QP_LONG_LINE 16687 4.58 3.54 5.02 56 TR_XM_SpammyWords4 16542 6.66 10.62 4.98 57 XM_DK_Undo_02 16247 15.72 41.21 4.89 58 XMStrtUSub 16223 4.87 4.84 4.88 59 HTML_IMAGE_RATIO_02 15482 5.31 6.83 4.66 60 RCVD_IN_VALIDITY_SAFE 15016 3.83 2.20 4.52 61 HTML_IMAGE_RATIO_04 14618 4.62 5.13 4.40 62 XM_PDF 14142 3.20 0.71 4.26 63 BAYES_80 13554 5.59 9.14 4.08 64 XM_UncommonTLD01 13506 4.62 5.91 4.07 65 BAYES_20 13368 3.28 1.53 4.03 66 RCVD_IN_VALIDITY_CERTIFIED 13100 3.29 1.75 3.94 67 RCVD_IN_MSPIKE_H4 12593 3.31 2.19 3.79 68 RCVD_IN_IADB_LISTED 12577 3.05 1.30 3.79 69 T_REMOTE_IMAGE 12554 3.03 1.26 3.78 70 RELAYCOUNTRY_META 12152 7.60 16.89 3.66 71 ANY_BOUNCE_MESSAGE 11930 2.84 1.08 3.59 72 BOUNCE_MESSAGE 11924 2.84 1.08 3.59 73 XMNumbers 11571 3.39 3.17 3.48 74 XMSubMetaSx_00 11109 4.29 6.52 3.34 75 RCVD_IN_IADB_SPF 10986 2.67 1.16 3.31 76 BAYES_99 10846 11.69 31.51 3.27 77 HTML_IMAGE_RATIO_06 10587 3.46 4.09 3.19 78 BOTNET_IPINHOSTNAME 10355 5.70 11.78 3.12 79 MAILING_LIST_MULTI 10226 2.79 2.12 3.08 80 TooManyTo_002 9977 2.33 0.75 3.00 81 RCVD_IN_IADB_SENDERID 9735 2.39 1.10 2.93 82 T_TooManySym_02 9715 2.31 0.85 2.93 83 XM_Body_Dirty_Words 9594 4.07 6.86 2.89 84 RCVD_IN_IADB_DK 9473 2.33 1.10 2.85 85 MIME_HTML_MOSTLY 9222 3.17 4.08 2.78 86 MIME_HTML_ONLY_MULTI 8922 2.89 3.38 2.69 87 RCVD_IN_IADB_VOUCHED 8396 1.94 0.56 2.53 88 XM_B_SpammyTLD 8236 2.83 3.67 2.48 89 BAYES_999 8094 8.92 24.19 2.44 90 BAYES_95 8082 3.21 5.03 2.43 91 SCC_BODY_URI_ONLY 7878 2.15 1.63 2.37 92 BAYES_05 7877 1.91 0.82 2.37 93 HTML_MIME_NO_HTML_TAG 7716 2.17 1.80 2.32 94 TR_XM_DKIM_Undo 7716 10.52 29.81 2.32 95 XM_CamelCaseFrm001 7553 2.60 3.38 2.27 96 INVALID_MSGID 7534 1.65 0.19 2.27 97 HTML_IMAGE_RATIO_08 7051 2.31 2.75 2.12 98 T_XMDrugObfuBody_08 6934 2.37 3.02 2.09 99 DKIM_INVALID 6575 2.95 5.23 1.98 100 XM_B_URI_Unicode 6551 2.17 2.64 1.97 101 TR_XM_SpammyRelay 6339 5.02 12.35 1.91 102 TO_MALFORMED 6288 1.33 0.01 1.89 103 TR_XM_UnparsRelay 6268 4.37 10.21 1.89 104 T_XMDrugObfuBody_14 6256 2.48 3.88 1.88 105 XM_DK_Undo_01 6104 1.74 1.52 1.84 106 TM2_M_URI_OPT_OUT 5937 2.03 2.62 1.79 107 RCVD_IN_IADB_OPTIN 5923 1.36 0.35 1.78 108 TR_XM_PhishingBody 5826 2.77 5.15 1.75 109 TooManyTo_003 5705 1.36 0.52 1.72 110 XM_B_Investor 5627 2.66 4.94 1.69 111 FROM_EXCESS_BASE64 5426 1.84 2.31 1.63 112 UNTRUSTED_Relay 5414 3.00 6.24 1.63 113 TR_MetaPhish_Combo_01 5177 1.48 1.28 1.56 114 URI_NOVOWEL 5121 1.57 1.65 1.54 115 TR_XM_SpammyWords5 5093 2.05 3.26 1.53 116 TR_DCC_Bayes_99 5083 7.70 22.21 1.53 117 KHOP_HELO_FCRDNS 4987 1.47 1.39 1.50 118 TM2_M_VERY_LONG_WORD 4945 2.18 3.82 1.49 119 SUBJ_ALL_CAPS 4830 1.59 1.92 1.45 120 TR_Symld_Words 4818 1.31 0.97 1.45 121 XM_SendGrid 4808 1.49 1.59 1.45 122 XM_SPF_SoftFail 4796 1.96 3.16 1.44 123 XMSexyCombo_05 4746 2.37 4.58 1.43 124 XMDiploma_00 4691 1.72 2.45 1.41 125 BOTNET 4643 3.74 9.26 1.40 126 XMStockSpam_06 4527 1.62 2.24 1.36 127 IN_HORDE_ADDRESS_BOOK 4499 0.98 0.08 1.35 128 HELO_NODOT 4389 0.96 0.12 1.32 129 HELO_NO_DOMAIN 4384 0.96 0.11 1.32 130 XM_GoogleGroups 4377 1.21 0.94 1.32 131 URI_HEX 4270 1.25 1.18 1.29 132 XM_B_Unsub2 4138 1.82 3.17 1.25 133 TooManyTo_004 4072 1.00 0.47 1.23 134 XMGappySubj_01 3788 0.86 0.22 1.14 135 XMCapTrack 3769 0.94 0.48 1.13 136 T_TooManySym_03 3721 0.89 0.33 1.12 137 XM_OfRef6 3552 1.80 3.50 1.07 138 XM_UB50 3534 1.68 3.13 1.06 139 TVD_SPACE_RATIO 3304 0.80 0.34 0.99 140 XM_ShortIntro_01 3281 0.81 0.38 0.99 141 TooManyTo_005 3171 0.80 0.43 0.95 142 TR_XM_DK_SendGrid 3113 0.99 1.13 0.94 143 XM_B_SpammyWords4 3038 1.37 2.43 0.91 144 FROM_GOV_DKIM_AU 2956 0.70 0.26 0.89 145 XMBrknScrpt_02 2824 1.09 1.64 0.85 146 SpammyFromTLD_01 2770 1.10 1.72 0.83 147 TVD_RCVD_IP 2767 0.95 1.23 0.83 148 XM_H_Long_From02 2721 0.96 1.29 0.82 149 RELAYCOUNTRY_CA 2607 2.38 6.15 0.78 150 DKIM_ADSP_CUSTOM_MED 2596 0.84 0.97 0.78 151 T_XMDrugObfuBody_00 2582 1.01 1.54 0.78 152 TR_XM_MSPIKECOMBO 2518 1.82 4.33 0.76 153 RCVD_IN_MSPIKE_BL 2518 1.82 4.33 0.76 154 URI_OPTOUT_3LD 2506 0.71 0.60 0.75 155 XM_H_PHPMailer 2444 0.66 0.47 0.74 156 XMGenDplmaNmb 2423 0.99 1.62 0.73 157 T_FILL_THIS_FORM_SHORT 2406 1.13 2.08 0.72 158 T_TVD_MIME_NO_HEADERS 2406 0.53 0.06 0.72 159 RCVD_IN_PBL 2389 0.87 1.22 0.72 160 HTTPS_HTTP_MISMATCH 2362 0.88 1.29 0.71 161 XM_B_COPY_HTML 2343 1.01 1.72 0.71 162 RELAYCOUNTRY_AU 2193 1.36 3.00 0.66 163 XM_B_FormFill 2147 0.47 0.05 0.65 164 TR_XM_SpammyWords2 2146 3.70 10.90 0.65 165 PLING_QUERY 2108 0.64 0.64 0.63 166 URI_TRY_3LD 2052 0.81 1.27 0.62 167 XMMoneyMeta_00 2013 0.64 0.71 0.61 168 RCVD_IN_BL_SPAMCOP_NET 1992 3.28 9.60 0.60 169 RELAYCOUNTRY_GB 1960 0.69 0.93 0.59 170 XMNoVowels 1952 0.57 0.52 0.59 171 XMBSHREFv2 1947 0.50 0.29 0.59 172 XMPhish14 1915 0.77 1.22 0.58 173 T_OBFU_PDF_ATTACH 1909 0.44 0.12 0.57 174 MPART_ALT_DIFF_COUNT 1903 0.73 1.08 0.57 175 HTML_TAG_BALANCE_BODY 1826 0.61 0.75 0.55 176 XMLngstWrd_00 1810 0.53 0.49 0.54 177 T_Symld_Words_02 1804 0.65 0.90 0.54 178 TRACKER_ID 1789 0.46 0.27 0.54 179 RCVD_IN_MSPIKE_L3 1777 1.23 2.87 0.54 180 T_STY_INVIS_DIRECT 1760 0.60 0.76 0.53 181 XMPhish30 1739 0.92 1.84 0.52 182 XMSubMetaI_00 1736 0.62 0.85 0.52 183 XM_ProductURIs 1730 0.60 0.78 0.52 184 XM_B_DNDMA 1708 0.64 0.93 0.51 185 SpammyFromTLD_02 1690 0.97 2.04 0.51 186 XMBdyGiftCard01 1684 0.85 1.65 0.51 187 HTML_IMAGE_ONLY_32 1678 0.40 0.14 0.51 188 XMGappySubj_02 1669 0.38 0.08 0.50 189 FORGED_GMAIL_RCVD 1664 0.56 0.71 0.50 190 XMLngstWrd_01 1643 0.48 0.44 0.49 191 TO_NO_BRKTS_HTML_ONLY 1632 0.58 0.79 0.49 192 MSGID_FROM_MTA_HEADER 1626 0.38 0.13 0.49 193 XMSlimDrugH 1623 0.60 0.88 0.49 194 TM2_M_OBFU_COMMENT 1596 0.63 1.00 0.48 195 LongTLD 1582 0.60 0.90 0.48 196 XMSolicitRefs_0 1578 0.43 0.32 0.48 197 T_XMDrugObfuBody_01 1569 0.35 0.05 0.47 198 TR_XM_Base64_M1 1529 0.58 0.87 0.46 199 XM_URI_RBL 1497 1.36 3.52 0.45 200 T_XMHurry_00 1495 0.82 1.69 0.45 ----------------------------------------------------------------------