Email: 408135 Autolearn: 0 AvgScore: 5.19 AvgScanTime: 1.36 sec Spam: 127169 Autolearn: 0 AvgScore: 14.54 AvgScanTime: 1.50 sec Ham: 280966 Autolearn: 0 AvgScore: 0.96 AvgScanTime: 1.30 sec Time Spent Running SA: 154.69 hours Time Spent Processing Spam: 53.04 hours Time Spent Processing Ham: 101.64 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 125287 99.23 98.52 99.56 2 HTML_MESSAGE 121295 88.43 95.38 85.28 3 DKIM_SIGNED 114699 81.00 90.19 76.84 4 XM_DK_Pass 109795 79.12 86.34 75.85 5 DKIM_VALID 108476 78.11 85.30 74.86 6 XM_B_Unicode 107369 75.59 84.43 71.60 7 RELAYCOUNTRY_US 103515 82.41 81.40 82.86 8 DCC_CHECK 94232 51.55 74.10 41.34 9 XM_B_SpammyWords 88583 53.58 69.66 46.30 10 XMListUnsubscribeExists 86951 55.16 68.37 49.17 11 DKIM_VALID_AU 85461 63.34 67.20 61.59 12 XM_B_Unicode3 66127 44.65 52.00 41.33 13 LOC_TINY_FONT_1 60008 35.03 47.19 29.53 14 XM_DK_Undo_02 55066 17.43 43.30 5.72 15 XM_B_SpammyWords2 51212 26.51 40.27 20.28 16 BAYES_50 49477 54.19 38.91 61.11 17 HTML_FONT_LOW_CONTRAST 48431 32.54 38.08 30.03 18 FVGT_m_MULTI_ODD 44370 28.65 34.89 25.82 19 BAYES_99 42033 13.32 33.05 4.38 20 DKIM_VALID_EF 40356 31.21 31.73 30.97 21 TR_XM_DKIM_Undo 40315 11.72 31.70 2.68 22 MIME_HTML_ONLY 38665 22.53 30.40 18.96 23 T_KAM_HTML_FONT_INVALID 38273 23.79 30.10 20.94 24 BAYES_999 33034 10.49 25.98 3.48 25 XMSubLong 32151 24.64 25.28 24.35 26 DCC_CHECK_NEGATIVE 31245 48.01 24.57 58.62 27 T_TM2_M_HEADER_IN_MSG 29033 28.00 22.83 30.34 28 XM_Multi_Part_URI 28875 16.63 22.71 13.88 29 TR_DCC_Bayes_99 28623 8.26 22.51 1.81 30 TR_XM_DK_Unsub 28374 16.46 22.31 13.81 31 RCVD_IN_MSPIKE_H2 25188 17.17 19.81 15.97 32 XM_B_Unsub 23666 11.68 18.61 8.54 33 TR_XM_BayesUnsub 22627 10.01 17.79 6.48 34 UNPARSEABLE_RELAY 21677 13.84 17.05 12.39 35 RELAYCOUNTRY_META 21570 7.61 16.96 3.38 36 TR_MAX_INTL_RELAY 18720 8.65 14.72 5.91 37 XM_B_SpammyWords3 18480 8.27 14.53 5.44 38 LOTS_OF_MONEY 16478 8.62 12.96 6.65 39 TR_XM_SpammyRelay 15626 5.06 12.29 1.79 40 TR_XM_SpammyWords4 14913 6.83 11.73 4.61 41 BOTNET_IPINHOSTNAME 14882 5.99 11.70 3.40 42 TR_XM_SpammyWords2 14615 4.10 11.49 0.76 43 RCVD_IN_BL_SPAMCOP_NET 14513 4.01 11.41 0.65 44 XM_Evil_Numbers_Gen 13134 10.76 10.33 10.96 45 XM_B_Phish_Phrases 12648 7.45 9.95 6.32 46 RCVD_IN_MSPIKE_WL 12210 15.75 9.60 18.53 47 BOTNET 12081 3.88 9.50 1.34 48 FSL_BULK_SIG 11851 9.39 9.32 9.42 49 TR_XM_UnparsRelay 11353 3.95 8.93 1.69 50 BAYES_80 11192 5.23 8.80 3.62 51 BAYES_60 9636 7.00 7.58 6.75 52 MPART_ALT_DIFF 9625 5.49 7.57 4.54 53 LotsOfNums_01 9300 8.11 7.31 8.47 54 XMSubMetaSx_00 8814 4.50 6.93 3.40 55 RELAYCOUNTRY_CA 8343 2.54 6.56 0.71 56 HTML_IMAGE_RATIO_02 8332 5.16 6.55 4.53 57 XM_Body_Dirty_Words 8286 3.73 6.52 2.47 58 XM_UncommonTLD01 8075 4.80 6.35 4.10 59 XM_H_Long_From01 7838 6.02 6.16 5.96 60 UNTRUSTED_Relay 7820 2.95 6.15 1.50 61 XM_B_PhoneNumber 7699 8.22 6.05 9.21 62 XM_B_Investor 7115 2.78 5.59 1.50 63 BAYES_95 7085 3.31 5.57 2.29 64 HTML_IMAGE_RATIO_04 6956 4.80 5.47 4.50 65 TR_XM_SPAMCOP 6770 1.81 5.32 0.22 66 XM_H_GMP 6246 5.33 4.91 5.52 67 DKIM_INVALID 6223 2.88 4.89 1.98 68 XMStrtUSub 6190 4.97 4.87 5.01 69 T_XMDrugObfuBody_14 6162 2.85 4.85 1.95 70 TM2_M_VERY_LONG_WORD 5990 4.16 4.71 3.91 71 TR_XM_PhishingBody 5816 2.43 4.57 1.45 72 RCVD_IN_MSPIKE_BL 5811 2.19 4.57 1.11 73 TR_XM_MSPIKECOMBO 5811 2.19 4.57 1.11 74 XM_OfRef6 5535 2.03 4.35 0.97 75 XMSexyCombo_05 5493 2.06 4.32 1.03 76 RCVD_IN_MSPIKE_H3 5471 6.87 4.30 8.04 77 XM_CamelCaseFrm001 5354 2.91 4.21 2.32 78 MIME_HTML_ONLY_MULTI 5039 3.06 3.96 2.66 79 XM_B_SpammyTLD 4840 3.39 3.81 3.20 80 TooManyTo_001 4822 6.48 3.79 7.69 81 TR_XM_SpammyWords5 4754 2.08 3.74 1.33 82 XMDiploma_00 4731 2.40 3.72 1.81 83 XM_URI_RBL 4693 1.40 3.69 0.37 84 MIME_HTML_MOSTLY 4562 2.61 3.59 2.17 85 XM_B_Unsub2 4416 1.92 3.47 1.22 86 TR_XM_NoHeaderRelay 4362 1.15 3.43 0.11 87 XMNumbers 4284 3.27 3.37 3.22 88 HTML_IMAGE_RATIO_06 4263 3.04 3.35 2.90 89 TR_XM_SpammyWords3 4185 1.33 3.29 0.44 90 RCVD_IN_MSPIKE_H4 3997 3.82 3.14 4.12 91 RELAYCOUNTRY_AU 3836 1.32 3.02 0.55 92 RCVD_IN_MSPIKE_L3 3708 1.43 2.92 0.75 93 XMBody_17 3667 1.14 2.88 0.36 94 XM_SPF_SoftFail 3645 1.81 2.87 1.34 95 XM_UB50 3619 1.55 2.85 0.96 96 RCVD_IN_VALIDITY_SAFE 3595 3.70 2.83 4.10 97 MIME_QP_LONG_LINE 3560 4.43 2.80 5.17 98 T_XMDrugObfuBody_08 3550 1.73 2.79 1.25 99 T_TooManySym_01 3522 5.26 2.77 6.39 100 URI_TRY_3LD 3521 1.41 2.77 0.79 101 T_FILL_THIS_FORM_SHORT 3507 1.41 2.76 0.79 102 XM_SendGrid 3423 3.05 2.69 3.22 103 XM_B_SpammyWords4 3422 1.22 2.69 0.56 104 TM2_M_URI_OPT_OUT 3356 2.06 2.64 1.79 105 HTML_IMAGE_RATIO_08 3323 2.20 2.61 2.01 106 SpammyFromTLD_02 3270 1.30 2.57 0.72 107 RCVD_IN_VALIDITY_RPBL 3193 0.82 2.51 0.05 108 XM_B_URI_Unicode 3178 2.08 2.50 1.89 109 SUBJ_ALL_CAPS 3122 1.79 2.46 1.48 110 XMGenDplmaNmb 3070 1.39 2.41 0.93 111 FROM_EXCESS_BASE64 3068 1.79 2.41 1.50 112 BAYES_40 2909 4.34 2.29 5.26 113 TR_XM_INV_DKIM 2864 0.75 2.25 0.07 114 T_XMHurry_00 2837 1.41 2.23 1.04 115 RCVD_IN_VALIDITY_CERTIFIED 2773 2.90 2.18 3.22 116 XMBrknScrpt_02 2758 1.38 2.17 1.02 117 RCVD_IN_MSPIKE_H5 2742 5.06 2.16 6.37 118 USER_IN_DEF_DKIM_WL 2732 10.66 2.15 14.51 119 SCC_BODY_URI_ONLY 2604 2.28 2.05 2.39 120 T_XMDrugObfuBody_00 2598 1.32 2.04 0.99 121 MAILING_LIST_MULTI 2491 2.72 1.96 3.07 122 ALL_TRUSTED 2440 10.37 1.92 14.19 123 XMStockSpam_06 2300 1.60 1.81 1.51 124 SpammyFromTLD_01 2280 1.04 1.79 0.70 125 XMPhish30 2127 0.82 1.67 0.43 126 KHOP_HELO_FCRDNS 2122 2.27 1.67 2.55 127 RCVD_IN_XBL 2120 0.53 1.67 0.01 128 TR_XM_DK_SendGrid 2108 1.97 1.66 2.12 129 TR_LOTS_OF_MONEY3 2096 0.77 1.65 0.38 130 TR_XM_MSPIKECOMBO2 2085 0.54 1.64 0.04 131 RCVD_IN_PBL 1982 0.98 1.56 0.71 132 RDNS_DYNAMIC 1910 0.59 1.50 0.18 133 XM_DK_Undo_01 1888 1.74 1.48 1.85 134 PDS_RDNS_DYNAMIC_FP 1881 0.48 1.48 0.03 135 HTML_MIME_NO_HTML_TAG 1847 2.18 1.45 2.51 136 RCVD_IN_SBL_CSS 1817 0.47 1.43 0.04 137 RCVD_IN_MSPIKE_L4 1801 0.68 1.42 0.35 138 TR_XM_PHPForged 1789 0.86 1.41 0.61 139 XM_B_COPY_HTML 1785 0.91 1.40 0.68 140 TR_XM_FormFill2 1776 0.85 1.40 0.61 141 HTML_IMAGE_ONLY_20 1771 0.65 1.39 0.31 142 BOTNET_NORDNS 1769 0.44 1.39 0.01 143 TR_XM_PHPDW 1767 0.85 1.39 0.61 144 T_REMOTE_IMAGE 1756 2.89 1.38 3.58 145 THIS_AD 1755 0.69 1.38 0.38 146 XM_H_PHPOS 1744 0.84 1.37 0.60 147 TVD_RCVD_IP 1735 1.09 1.36 0.96 148 LongTLD 1722 0.66 1.35 0.35 149 XM_B_Phish66 1718 0.63 1.35 0.30 150 URI_NOVOWEL 1709 1.31 1.34 1.30 151 T_TooManySym_02 1696 2.72 1.33 3.35 152 XMBdyGiftCard01 1675 1.05 1.32 0.93 153 XM_HighProb1 1675 0.42 1.32 0.01 154 TM2_M_OBFU_COMMENT 1674 0.68 1.32 0.39 155 SHORTCIRCUIT 1668 0.41 1.31 0.00 156 RCVD_IN_ZEN_LASTEXTERNAL 1668 0.41 1.31 0.00 157 RCVD_IN_IADB_LISTED 1667 2.94 1.31 3.67 158 XMSubMetaI_00 1651 0.73 1.30 0.47 159 XM_H_Long_From02 1625 0.92 1.28 0.76 160 TR_XM_Base64_M1 1613 0.93 1.27 0.78 161 XM_ProductURIs 1610 0.76 1.27 0.53 162 MPART_ALT_DIFF_COUNT 1592 0.69 1.25 0.43 163 BAYES_20 1588 2.87 1.25 3.61 164 XM_B_DNDMA 1574 0.90 1.24 0.75 165 XM_B_SEO 1547 0.56 1.22 0.26 166 DKIM_ADSP_CUSTOM_MED 1541 0.97 1.21 0.86 167 T_MONEY_PERCENT 1516 0.57 1.19 0.29 168 TR_LOTS_OF_MONEY2 1516 0.57 1.19 0.29 169 TR_Symld_Words 1495 1.41 1.18 1.52 170 XM_DIRTYINTL 1495 0.41 1.18 0.06 171 TR_XM_MaxSPIKE 1485 0.38 1.17 0.03 172 RCVD_IN_IADB_SPF 1483 2.58 1.17 3.22 173 URI_HEX 1483 1.30 1.17 1.36 174 HK_RANDOM_REPLYTO 1481 0.48 1.16 0.17 175 BOUNCE_MESSAGE 1425 4.37 1.12 5.84 176 ANY_BOUNCE_MESSAGE 1425 4.37 1.12 5.84 177 RCVD_IN_PSBL 1418 0.61 1.12 0.39 178 RCVD_IN_IADB_DK 1412 2.26 1.11 2.78 179 RELAYCOUNTRY_FR 1410 0.54 1.11 0.28 180 FROM_SUSPICIOUS_NTLD 1406 0.39 1.11 0.07 181 MultiRelay_CC 1401 0.45 1.10 0.16 182 URIBL_BLACK 1400 0.35 1.10 0.01 183 TR_XM_SEO4 1386 0.41 1.09 0.10 184 RCVD_IN_IADB_SENDERID 1381 2.31 1.09 2.87 185 PLING_QUERY 1374 0.60 1.08 0.38 186 TR_XM_FormFill 1349 0.34 1.06 0.01 187 T_STY_INVIS_DIRECT 1332 0.63 1.05 0.44 188 DIET_1 1295 0.44 1.02 0.18 189 HTTPS_HTTP_MISMATCH 1289 0.69 1.01 0.54 190 TM2_M_A_HREF_HREF 1287 0.45 1.01 0.20 191 XM_UB99 1285 0.32 1.01 0.00 192 TR_XM_InvalidRelay 1279 0.32 1.01 0.01 193 NML_ADSP_CUSTOM_MED 1250 0.67 0.98 0.52 194 HELO_DYNAMIC_SPLIT_IP 1231 0.30 0.97 0.00 195 HTML_FONT_TINY_NORDNS 1219 0.36 0.96 0.09 196 FORGED_GMAIL_RCVD 1208 0.69 0.95 0.58 197 XMReplyNow 1207 0.44 0.95 0.21 198 TR_XM_RelayPhish 1199 0.34 0.94 0.07 199 DKIM_ADSP_NXDOMAIN 1181 0.48 0.93 0.27 200 XMBody_78 1171 0.55 0.92 0.38 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 279720 99.23 98.52 99.56 2 HTML_MESSAGE 239616 88.43 95.38 85.28 3 RELAYCOUNTRY_US 232810 82.41 81.40 82.86 4 DKIM_SIGNED 215882 81.00 90.19 76.84 5 XM_DK_Pass 213108 79.12 86.34 75.85 6 DKIM_VALID 210331 78.11 85.30 74.86 7 XM_B_Unicode 201158 75.59 84.43 71.60 8 DKIM_VALID_AU 173038 63.34 67.20 61.59 9 BAYES_50 171690 54.19 38.91 61.11 10 DCC_CHECK_NEGATIVE 164702 48.01 24.57 58.62 11 XMListUnsubscribeExists 138159 55.16 68.37 49.17 12 XM_B_SpammyWords 130078 53.58 69.66 46.30 13 DCC_CHECK 116165 51.55 74.10 41.34 14 XM_B_Unicode3 116111 44.65 52.00 41.33 15 DKIM_VALID_EF 87027 31.21 31.73 30.97 16 T_TM2_M_HEADER_IN_MSG 85243 28.00 22.83 30.34 17 HTML_FONT_LOW_CONTRAST 84370 32.54 38.08 30.03 18 LOC_TINY_FONT_1 82963 35.03 47.19 29.53 19 FVGT_m_MULTI_ODD 72542 28.65 34.89 25.82 20 XMSubLong 68419 24.64 25.28 24.35 21 T_KAM_HTML_FONT_INVALID 58840 23.79 30.10 20.94 22 XM_B_SpammyWords2 56978 26.51 40.27 20.28 23 MIME_HTML_ONLY 53269 22.53 30.40 18.96 24 RCVD_IN_MSPIKE_WL 52055 15.75 9.60 18.53 25 RCVD_IN_MSPIKE_H2 44871 17.17 19.81 15.97 26 USER_IN_DEF_DKIM_WL 40774 10.66 2.15 14.51 27 ALL_TRUSTED 39868 10.37 1.92 14.19 28 XM_Multi_Part_URI 39007 16.63 22.71 13.88 29 TR_XM_DK_Unsub 38804 16.46 22.31 13.81 30 UNPARSEABLE_RELAY 34825 13.84 17.05 12.39 31 XM_Evil_Numbers_Gen 30791 10.76 10.33 10.96 32 BAYES_00 30528 7.66 0.58 10.87 33 FSL_BULK_SIG 26479 9.39 9.32 9.42 34 XM_B_PhoneNumber 25864 8.22 6.05 9.21 35 XM_B_Unsub 24004 11.68 18.61 8.54 36 LotsOfNums_01 23788 8.11 7.31 8.47 37 TR_XM_DK_Bayes 22801 5.73 0.47 8.12 38 RCVD_IN_MSPIKE_H3 22577 6.87 4.30 8.04 39 TR_XM_DK_Bayes1 22544 5.67 0.46 8.02 40 TooManyTo_001 21615 6.48 3.79 7.69 41 XM_DKIMWhitelistDomains 19837 4.87 0.02 7.06 42 TR_XM_DK_Bayes2 19474 4.87 0.32 6.93 43 BAYES_60 18952 7.00 7.58 6.75 44 LOTS_OF_MONEY 18695 8.62 12.96 6.65 45 TR_XM_BayesUnsub 18215 10.01 17.79 6.48 46 T_TooManySym_01 17965 5.26 2.77 6.39 47 RCVD_IN_MSPIKE_H5 17890 5.06 2.16 6.37 48 XM_B_Phish_Phrases 17767 7.45 9.95 6.32 49 XM_H_Long_From01 16746 6.02 6.16 5.96 50 TR_MAX_INTL_RELAY 16602 8.65 14.72 5.91 51 ANY_BOUNCE_MESSAGE 16409 4.37 1.12 5.84 52 BOUNCE_MESSAGE 16407 4.37 1.12 5.84 53 XM_DK_Undo_02 16070 17.43 43.30 5.72 54 XM_H_GMP 15496 5.33 4.91 5.52 55 XM_B_SpammyWords3 15291 8.27 14.53 5.44 56 BAYES_40 14790 4.34 2.29 5.26 57 MIME_QP_LONG_LINE 14516 4.43 2.80 5.17 58 XMStrtUSub 14089 4.97 4.87 5.01 59 TR_XM_SpammyWords4 12962 6.83 11.73 4.61 60 MPART_ALT_DIFF 12769 5.49 7.57 4.54 61 HTML_IMAGE_RATIO_02 12715 5.16 6.55 4.53 62 XM_PDF 12703 3.34 0.73 4.52 63 HTML_IMAGE_RATIO_04 12646 4.80 5.47 4.50 64 BAYES_99 12315 13.32 33.05 4.38 65 RCVD_IN_MSPIKE_H4 11588 3.82 3.14 4.12 66 XM_UncommonTLD01 11532 4.80 6.35 4.10 67 RCVD_IN_VALIDITY_SAFE 11521 3.70 2.83 4.10 68 TM2_M_VERY_LONG_WORD 10984 4.16 4.71 3.91 69 RCVD_IN_IADB_LISTED 10319 2.94 1.31 3.67 70 BAYES_80 10161 5.23 8.80 3.62 71 BAYES_20 10143 2.87 1.25 3.61 72 T_REMOTE_IMAGE 10058 2.89 1.38 3.58 73 BAYES_999 9790 10.49 25.98 3.48 74 BOTNET_IPINHOSTNAME 9565 5.99 11.70 3.40 75 XMSubMetaSx_00 9563 4.50 6.93 3.40 76 RELAYCOUNTRY_META 9494 7.61 16.96 3.38 77 T_TooManySym_02 9412 2.72 1.33 3.35 78 RCVD_IN_VALIDITY_CERTIFIED 9060 2.90 2.18 3.22 79 XM_SendGrid 9045 3.05 2.69 3.22 80 XMNumbers 9045 3.27 3.37 3.22 81 RCVD_IN_IADB_SPF 9037 2.58 1.17 3.22 82 XM_B_SpammyTLD 9001 3.39 3.81 3.20 83 MAILING_LIST_MULTI 8625 2.72 1.96 3.07 84 HTML_IMAGE_RATIO_06 8137 3.04 3.35 2.90 85 RCVD_IN_IADB_SENDERID 8053 2.31 1.09 2.87 86 RCVD_IN_IADB_DK 7799 2.26 1.11 2.78 87 TR_XM_DKIM_Undo 7533 11.72 31.70 2.68 88 MIME_HTML_ONLY_MULTI 7467 3.06 3.96 2.66 89 MAY_BE_FORGED 7295 1.87 0.27 2.60 90 KHOP_HELO_FCRDNS 7159 2.27 1.67 2.55 91 TooManyTo_002 7125 1.95 0.65 2.54 92 HTML_MIME_NO_HTML_TAG 7039 2.18 1.45 2.51 93 HTML_IMAGE_ONLY_32 6988 1.80 0.29 2.49 94 XM_Body_Dirty_Words 6953 3.73 6.52 2.47 95 RCVD_IN_IADB_VOUCHED 6838 1.87 0.63 2.43 96 SCC_BODY_URI_ONLY 6719 2.28 2.05 2.39 97 INVALID_MSGID 6643 1.70 0.22 2.36 98 XM_CamelCaseFrm001 6505 2.91 4.21 2.32 99 BAYES_95 6434 3.31 5.57 2.29 100 TO_MALFORMED 6400 1.58 0.04 2.28 101 MIME_HTML_MOSTLY 6106 2.61 3.59 2.17 102 TR_XM_DK_SendGrid 5945 1.97 1.66 2.12 103 BAYES_05 5925 1.66 0.67 2.11 104 HTML_IMAGE_RATIO_08 5638 2.20 2.61 2.01 105 DKIM_INVALID 5551 2.88 4.89 1.98 106 T_XMDrugObfuBody_14 5478 2.85 4.85 1.95 107 XM_B_URI_Unicode 5304 2.08 2.50 1.89 108 XM_DK_Undo_01 5198 1.74 1.48 1.85 109 TR_DCC_Bayes_99 5093 8.26 22.51 1.81 110 XMDiploma_00 5072 2.40 3.72 1.81 111 TR_XM_SpammyRelay 5041 5.06 12.29 1.79 112 TM2_M_URI_OPT_OUT 5033 2.06 2.64 1.79 113 TR_XM_UnparsRelay 4760 3.95 8.93 1.69 114 RCVD_IN_IADB_OPTIN 4729 1.28 0.38 1.68 115 TooManyTo_003 4508 1.28 0.56 1.60 116 TR_Symld_Words 4273 1.41 1.18 1.52 117 XMStockSpam_06 4248 1.60 1.81 1.51 118 FROM_EXCESS_BASE64 4228 1.79 2.41 1.50 119 XM_B_Investor 4215 2.78 5.59 1.50 120 UNTRUSTED_Relay 4207 2.95 6.15 1.50 121 SUBJ_ALL_CAPS 4164 1.79 2.46 1.48 122 T_TooManySym_03 4104 1.14 0.42 1.46 123 TR_XM_PhishingBody 4087 2.43 4.57 1.45 124 XMGappySubj_01 3977 1.03 0.19 1.42 125 IN_HORDE_ADDRESS_BOOK 3862 0.98 0.10 1.37 126 URI_HEX 3814 1.30 1.17 1.36 127 BOTNET 3769 3.88 9.50 1.34 128 XM_SPF_SoftFail 3754 1.81 2.87 1.34 129 TR_XM_SpammyWords5 3740 2.08 3.74 1.33 130 XM_GoogleGroups 3699 1.17 0.86 1.32 131 URI_NOVOWEL 3654 1.31 1.34 1.30 132 T_XMDrugObfuBody_08 3524 1.73 2.79 1.25 133 XM_B_Unsub2 3419 1.92 3.47 1.22 134 TooManyTo_004 3288 0.96 0.50 1.17 135 FROM_GOV_DKIM_AU 3165 0.85 0.23 1.13 136 MIME_CHARSET_FARAWAY 3120 0.95 0.60 1.11 137 TR_XM_MSPIKECOMBO 3118 2.19 4.57 1.11 138 RCVD_IN_MSPIKE_BL 3118 2.19 4.57 1.11 139 HELO_NODOT 3032 0.78 0.11 1.08 140 HELO_NO_DOMAIN 3028 0.77 0.10 1.08 141 T_XMHurry_00 2917 1.41 2.23 1.04 142 XMSexyCombo_05 2897 2.06 4.32 1.03 143 XMCapTrack 2891 0.86 0.49 1.03 144 TVD_SPACE_RATIO 2885 0.81 0.34 1.03 145 XMBrknScrpt_02 2878 1.38 2.17 1.02 146 CHARSET_FARAWAY_HEADER 2857 0.82 0.39 1.02 147 T_XMDrugObfuBody_00 2774 1.32 2.04 0.99 148 XM_OfRef6 2731 2.03 4.35 0.97 149 XM_UB50 2699 1.55 2.85 0.96 150 TVD_RCVD_IP 2694 1.09 1.36 0.96 151 TooManyTo_005 2630 0.79 0.46 0.94 152 XMBdyGiftCard01 2625 1.05 1.32 0.93 153 XMGenDplmaNmb 2613 1.39 2.41 0.93 154 DKIM_ADSP_CUSTOM_MED 2422 0.97 1.21 0.86 155 T_FILL_THIS_FORM_SHORT 2229 1.41 2.76 0.79 156 URI_TRY_3LD 2226 1.41 2.77 0.79 157 TR_XM_Base64_M1 2187 0.93 1.27 0.78 158 T_TVD_MIME_NO_HEADERS 2152 0.54 0.04 0.77 159 XM_H_Long_From02 2142 0.92 1.28 0.76 160 TR_XM_SpammyWords2 2135 4.10 11.49 0.76 161 RCVD_IN_MSPIKE_L3 2113 1.43 2.92 0.75 162 XM_B_DNDMA 2094 0.90 1.24 0.75 163 XM_ShortIntro_01 2073 0.64 0.43 0.74 164 SpammyFromTLD_02 2033 1.30 2.57 0.72 165 XM_H_PHPMailer 2027 0.73 0.74 0.72 166 RELAYCOUNTRY_CA 2005 2.54 6.56 0.71 167 RCVD_IN_PBL 2003 0.98 1.56 0.71 168 SpammyFromTLD_01 1978 1.04 1.79 0.70 169 XM_B_COPY_HTML 1921 0.91 1.40 0.68 170 XMLngstWrd_00 1872 0.60 0.47 0.67 171 TR_MetaPhish_Combo_01 1856 0.62 0.52 0.66 172 XMBSHREFv2 1841 0.56 0.34 0.66 173 RCVD_IN_BL_SPAMCOP_NET 1840 4.01 11.41 0.65 174 XMNoVowels 1811 0.68 0.75 0.64 175 T_Symld_Words_02 1782 0.66 0.71 0.63 176 XMGappySubj_02 1781 0.45 0.05 0.63 177 TR_XM_PHPForged 1711 0.86 1.41 0.61 178 TR_XM_FormFill2 1701 0.85 1.40 0.61 179 TR_XM_PHPDW 1700 0.85 1.39 0.61 180 T_OBFU_PDF_ATTACH 1688 0.47 0.17 0.60 181 XM_H_PHPOS 1675 0.84 1.37 0.60 182 RELAYCOUNTRY_GB 1652 0.68 0.87 0.59 183 FORGED_GMAIL_RCVD 1624 0.69 0.95 0.58 184 XM_B_SpammyWords4 1568 1.22 2.69 0.56 185 RELAYCOUNTRY_AU 1557 1.32 3.02 0.55 186 HTTPS_HTTP_MISMATCH 1518 0.69 1.01 0.54 187 XMPhish14 1510 0.64 0.87 0.54 188 T_TooManySym_04 1496 0.42 0.17 0.53 189 XM_ProductURIs 1478 0.76 1.27 0.53 190 NML_ADSP_CUSTOM_MED 1466 0.67 0.98 0.52 191 TR_Mismatch_TLD_01 1463 0.61 0.80 0.52 192 HTML_TAG_BALANCE_BODY 1446 0.59 0.77 0.51 193 MSGID_FROM_MTA_HEADER 1438 0.42 0.22 0.51 194 XMSlimDrugH 1373 0.54 0.65 0.49 195 XMSolicitRefs_0 1369 0.45 0.36 0.49 196 TRACKER_ID 1349 0.39 0.18 0.48 197 XMLngstWrd_01 1347 0.44 0.36 0.48 198 XMSubMetaI_00 1330 0.73 1.30 0.47 199 XMMoneyMeta_00 1329 0.54 0.70 0.47 200 HTML_FONT_FACE_BAD 1317 0.50 0.56 0.47 ----------------------------------------------------------------------