Email: 470501 Autolearn: 0 AvgScore: 5.10 AvgScanTime: 1.50 sec Spam: 145995 Autolearn: 0 AvgScore: 14.97 AvgScanTime: 1.58 sec Ham: 324506 Autolearn: 0 AvgScore: 0.66 AvgScanTime: 1.46 sec Time Spent Running SA: 195.77 hours Time Spent Processing Spam: 63.94 hours Time Spent Processing Ham: 131.83 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 138895 88.92 95.14 86.13 2 DKIM_SIGNED 130797 82.11 89.59 78.74 3 XM_B_Unicode 125516 76.17 85.97 71.76 4 XM_DK_Pass 124430 79.98 85.23 77.63 5 DKIM_VALID 123670 79.08 84.71 76.54 6 RELAYCOUNTRY_US 117312 82.16 80.35 82.98 7 DCC_CHECK 102422 44.36 70.15 32.75 8 XM_B_SpammyWords 99692 52.76 68.28 45.78 9 XMListUnsubscribeExists 99630 55.93 68.24 50.39 10 DKIM_VALID_AU 96324 64.26 65.98 63.48 11 XM_B_Unicode3 69674 43.62 47.72 41.77 12 LOC_TINY_FONT_1 69674 35.05 47.72 29.35 13 XM_B_SpammyWords2 60170 26.13 41.21 19.35 14 XM_DK_Undo_02 60037 16.12 41.12 4.87 15 BAYES_50 58374 54.72 39.98 61.34 16 FVGT_m_MULTI_ODD 52257 28.77 35.79 25.60 17 HTML_FONT_LOW_CONTRAST 50316 30.01 34.46 28.01 18 DKIM_VALID_EF 48837 31.91 33.45 31.21 19 T_KAM_HTML_FONT_INVALID 42320 25.18 28.99 23.47 20 BAYES_99 42297 11.42 28.97 3.52 21 MIME_HTML_ONLY 42124 22.19 28.85 19.19 22 DCC_CHECK_NEGATIVE 41287 55.12 28.28 67.19 23 TR_XM_DKIM_Undo 40771 9.93 27.93 1.84 24 XMSubLong 39246 25.38 26.88 24.70 25 TR_XM_DK_Unsub 35747 16.79 24.49 13.33 26 XM_Multi_Part_URI 33577 16.41 23.00 13.45 27 BAYES_999 31997 8.62 21.92 2.64 28 T_TM2_M_HEADER_IN_MSG 31377 27.62 21.49 30.38 29 TR_DCC_Bayes_99 27703 6.60 18.98 1.04 30 XM_B_Unsub 27545 11.79 18.87 8.61 31 RELAYCOUNTRY_META 27286 8.25 18.69 3.56 32 TR_XM_BayesUnsub 26239 10.37 17.97 6.94 33 RCVD_IN_MSPIKE_H2 25845 16.34 17.70 15.72 34 UNPARSEABLE_RELAY 25210 13.52 17.27 11.84 35 TR_MAX_INTL_RELAY 23837 9.41 16.33 6.30 36 XM_B_SpammyWords3 21727 8.20 14.88 5.20 37 LOTS_OF_MONEY 20268 8.49 13.88 6.07 38 RCVD_IN_BL_SPAMCOP_NET 19945 4.65 13.66 0.59 39 TR_XM_SpammyRelay 19813 5.46 13.57 1.81 40 TR_XM_SpammyWords4 18289 6.74 12.53 4.14 41 BOTNET_IPINHOSTNAME 17330 5.90 11.87 3.21 42 BOTNET 15579 4.14 10.67 1.21 43 XM_B_Phish_Phrases 15316 6.92 10.49 5.32 44 XM_Evil_Numbers_Gen 15272 9.63 10.46 9.26 45 BAYES_80 14986 5.84 10.26 3.85 46 RCVD_IN_MSPIKE_BL 14196 3.97 9.72 1.38 47 TR_XM_MSPIKECOMBO 14196 3.97 9.72 1.38 48 RCVD_IN_MSPIKE_WL 14095 16.16 9.65 19.08 49 TR_XM_UnparsRelay 13430 4.05 9.20 1.73 50 BAYES_60 13430 7.96 9.20 7.41 51 FSL_BULK_SIG 13359 5.25 9.15 3.50 52 TR_XM_SpammyWords2 13359 3.16 9.15 0.46 53 HTML_IMAGE_RATIO_02 12870 5.78 8.82 4.42 54 UNTRUSTED_Relay 11269 3.53 7.72 1.65 55 XM_Body_Dirty_Words 10068 4.01 6.90 2.72 56 XM_UncommonTLD01 10021 5.00 6.86 4.16 57 RELAYCOUNTRY_CA 9850 2.58 6.75 0.70 58 LotsOfNums_01 9677 7.80 6.63 8.33 59 XM_B_PhoneNumber 9634 9.05 6.60 10.15 60 MPART_ALT_DIFF 9544 5.53 6.54 5.07 61 XMSubMetaSx_00 9179 4.24 6.29 3.32 62 XM_H_Long_From01 8513 5.57 5.83 5.45 63 XM_B_Investor 8400 3.22 5.75 2.08 64 BAYES_95 8200 3.43 5.62 2.44 65 XM_OfRef6 8007 2.45 5.48 1.08 66 TR_XM_SpammyWords3 7984 2.14 5.47 0.64 67 RCVD_IN_MSPIKE_H3 7929 7.88 5.43 8.99 68 DKIM_INVALID 7127 3.03 4.88 2.20 69 TR_XM_SPAMCOP 7041 1.60 4.82 0.16 70 RCVD_IN_PSBL 6890 1.88 4.72 0.60 71 MIME_HTML_MOSTLY 6702 3.38 4.59 2.83 72 XMSexyCombo_05 6438 2.24 4.41 1.26 73 XMStrtUSub 6424 4.97 4.40 5.23 74 XM_H_GMP 6384 6.16 4.37 6.96 75 TR_XM_PhishingBody 6266 2.48 4.29 1.67 76 T_TooManySym_01 6148 5.14 4.21 5.56 77 RCVD_IN_MSPIKE_L3 6109 2.14 4.18 1.23 78 TooManyTo_001 6013 6.75 4.12 7.93 79 HTML_IMAGE_RATIO_04 5998 4.31 4.11 4.39 80 XM_UB50 5663 1.95 3.88 1.08 81 XM_B_SpammyTLD 5645 3.14 3.87 2.81 82 RCVD_IN_VALIDITY_RPBL 5551 1.21 3.80 0.04 83 T_XMDrugObfuBody_14 5362 2.23 3.67 1.58 84 XMDiploma_00 5345 2.58 3.66 2.09 85 TR_XM_SpammyWords5 5319 2.13 3.64 1.45 86 XM_H_Long_From02 5225 1.63 3.58 0.75 87 XM_SPF_SoftFail 5185 2.46 3.55 1.97 88 XMNumbers 5031 3.20 3.45 3.08 89 HTML_FONT_TINY_NORDNS 4981 1.14 3.41 0.12 90 TM2_M_VERY_LONG_WORD 4725 1.93 3.24 1.35 91 RCVD_IN_MSPIKE_L5 4716 1.03 3.23 0.03 92 TR_XM_NoHeaderRelay 4694 1.16 3.22 0.23 93 XM_URI_RBL 4674 1.28 3.20 0.41 94 XM_B_SpammyWords4 4657 1.53 3.19 0.79 95 MIME_QP_LONG_LINE 4604 4.90 3.15 5.69 96 HTML_IMAGE_RATIO_06 4458 3.00 3.05 2.98 97 TM2_M_URI_OPT_OUT 4393 2.21 3.01 1.84 98 XM_CamelCaseFrm001 4317 2.31 2.96 2.02 99 MIME_HTML_ONLY_MULTI 4192 2.66 2.87 2.56 100 HTML_IMAGE_RATIO_08 4190 2.48 2.87 2.31 101 RELAYCOUNTRY_AU 4169 1.28 2.86 0.58 102 XM_B_Unsub2 4099 1.98 2.81 1.60 103 T_XMDrugObfuBody_08 4008 1.90 2.75 1.52 104 KHOP_HELO_FCRDNS 3997 1.99 2.74 1.65 105 SpammyFromTLD_02 3873 1.20 2.65 0.55 106 XM_B_URI_Unicode 3824 2.24 2.62 2.06 107 URI_HEX 3767 1.78 2.58 1.42 108 T_FILL_THIS_FORM_SHORT 3723 1.49 2.55 1.01 109 USER_IN_DEF_DKIM_WL 3625 10.18 2.48 13.64 110 TVD_RATWARE_MSGID_01 3603 0.83 2.47 0.10 111 TR_XM_MSPIKECOMBO2 3464 0.80 2.37 0.10 112 RCVD_IN_MSPIKE_L4 3431 0.81 2.35 0.12 113 XMStockSpam_06 3298 1.53 2.26 1.20 114 RCVD_IN_VALIDITY_SAFE 3218 3.68 2.20 4.35 115 RCVD_IN_MSPIKE_H5 3184 4.69 2.18 5.82 116 XMBody_17 3122 0.93 2.14 0.39 117 MAILING_LIST_MULTI 3122 2.85 2.14 3.18 118 XMGenDplmaNmb 3072 1.57 2.10 1.32 119 RCVD_IN_MSPIKE_H4 2982 3.59 2.04 4.28 120 SUBJ_ALL_CAPS 2911 1.66 1.99 1.51 121 TR_XM_INV_DKIM 2831 0.62 1.94 0.02 122 RCVD_IN_VALIDITY_CERTIFIED 2808 3.11 1.92 3.64 123 SpammyFromTLD_01 2788 1.08 1.91 0.71 124 TR_LOTS_OF_MONEY3 2774 0.82 1.90 0.33 125 XMBdyGiftCard01 2693 0.75 1.84 0.26 126 TR_XM_INTL_Spamhaus 2670 0.68 1.83 0.17 127 FROM_EXCESS_BASE64 2620 1.69 1.79 1.64 128 TR_Mismatch_TLD_02 2611 0.62 1.79 0.09 129 XM_SendGrid 2572 1.61 1.76 1.54 130 RDNS_DYNAMIC 2522 0.64 1.73 0.16 131 BAYES_40 2509 4.12 1.72 5.20 132 XMPhish30 2489 0.88 1.70 0.50 133 RCVD_IN_IADB_LISTED 2487 3.13 1.70 3.78 134 HK_RANDOM_REPLYTO 2484 0.59 1.70 0.09 135 BOTNET_NORDNS 2474 0.53 1.69 0.00 136 XM_DK_Undo_01 2399 1.78 1.64 1.85 137 HTML_MIME_NO_HTML_TAG 2386 2.28 1.63 2.57 138 XMBrknScrpt_02 2385 1.23 1.63 1.05 139 XM_OfRef7 2362 0.61 1.62 0.15 140 TR_XM_MaxSPIKE 2344 0.54 1.61 0.06 141 TR_XM_RelayPhish 2337 0.56 1.60 0.09 142 T_XMHurry_00 2281 0.90 1.56 0.60 143 SHORTCIRCUIT 2251 0.48 1.54 0.00 144 RCVD_IN_ZEN_LASTEXTERNAL 2251 0.48 1.54 0.00 145 XM_HighProb1 2235 0.48 1.53 0.00 146 RELAYCOUNTRY_FR 2158 0.69 1.48 0.34 147 URI_NOVOWEL 2146 1.36 1.47 1.31 148 DIET_1 2097 0.80 1.44 0.52 149 RCVD_IN_IADB_SPF 2093 2.73 1.43 3.32 150 T_XMDrugObfuBody_00 2062 0.99 1.41 0.80 151 RCVD_IN_SBL_CSS 2028 0.46 1.39 0.04 152 RCVD_IN_XBL 2026 0.44 1.39 0.01 153 RCVD_IN_IADB_DK 1943 2.39 1.33 2.87 154 TR_XM_InvalidRelay 1890 0.41 1.29 0.01 155 RCVD_IN_IADB_SENDERID 1889 2.47 1.29 3.00 156 DKIM_ADSP_NXDOMAIN 1883 0.60 1.29 0.29 157 HTTPS_HTTP_MISMATCH 1879 0.96 1.29 0.81 158 XM_B_SEO 1873 0.56 1.28 0.24 159 XM_UB60 1859 0.47 1.27 0.11 160 T_MONEY_PERCENT 1852 0.50 1.27 0.16 161 TR_LOTS_OF_MONEY2 1852 0.50 1.27 0.16 162 BAYES_20 1838 3.03 1.26 3.83 163 T_REMOTE_IMAGE 1804 3.08 1.24 3.91 164 XMBody_78 1802 0.67 1.23 0.42 165 ALL_TRUSTED 1743 9.91 1.19 13.83 166 XMClaimOffer 1733 0.45 1.19 0.12 167 XM_B_COPY_HTML 1713 0.84 1.17 0.69 168 RCVD_IN_PBL 1705 0.86 1.17 0.73 169 URI_TRY_3LD 1686 0.81 1.15 0.66 170 THIS_AD 1656 0.60 1.13 0.37 171 T_HTML_ATTACH 1649 0.38 1.13 0.04 172 XMSexyCombo_01 1641 0.43 1.12 0.12 173 FILL_THIS_FORM 1622 0.63 1.11 0.42 174 MultiRelay_CC 1620 0.44 1.11 0.15 175 TR_XM_SEO4 1614 0.42 1.11 0.11 176 XM_UB99 1564 0.33 1.07 0.00 177 DKIM_ADSP_CUSTOM_MED 1559 0.87 1.07 0.77 178 HTML_TAG_BALANCE_BODY 1550 0.70 1.06 0.54 179 LOW_PRICE 1520 0.49 1.04 0.24 180 XM_B_Phish66 1514 0.58 1.04 0.38 181 LongTLD 1513 0.71 1.04 0.57 182 MPART_ALT_DIFF_COUNT 1504 0.68 1.03 0.52 183 XM_ProductURIs 1463 0.90 1.00 0.86 184 RCVD_IN_IADB_VOUCHED 1428 2.04 0.98 2.52 185 TR_XM_DK_SendGrid 1405 1.07 0.96 1.11 186 URI_TRUNCATED 1400 0.36 0.96 0.09 187 T_FILL_THIS_FORM_FRAUD_PHISH 1395 0.35 0.96 0.07 188 XM_B_COVIDMETA 1388 0.36 0.95 0.09 189 RELAYCOUNTRY_RU 1383 0.32 0.95 0.03 190 T_Symld_Words_02 1373 0.80 0.94 0.74 191 XMHTML_After_End 1368 0.61 0.94 0.46 192 TR_XM_PHPForged 1346 0.50 0.92 0.31 193 TR_XM_PHPDW 1341 0.50 0.92 0.32 194 TR_XM_FormFill2 1339 0.50 0.92 0.32 195 STY_INVIS_DIRECT 1337 0.51 0.92 0.33 196 URIBL_SBL 1333 0.29 0.91 0.01 197 URIBL_SBL_A 1333 0.29 0.91 0.01 198 XM_DIRTYINTL 1332 0.33 0.91 0.06 199 XMPhish14 1331 0.62 0.91 0.49 200 SH_BODYURI_REVERSE_SBL 1330 0.29 0.91 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 279492 88.92 95.14 86.13 2 RELAYCOUNTRY_US 269273 82.16 80.35 82.98 3 DKIM_SIGNED 255529 82.11 89.59 78.74 4 XM_DK_Pass 251900 79.98 85.23 77.63 5 DKIM_VALID 248388 79.08 84.71 76.54 6 XM_B_Unicode 232859 76.17 85.97 71.76 7 DCC_CHECK_NEGATIVE 218032 55.12 28.28 67.19 8 DKIM_VALID_AU 206006 64.26 65.98 63.48 9 BAYES_50 199067 54.72 39.98 61.34 10 XMListUnsubscribeExists 163508 55.93 68.24 50.39 11 XM_B_SpammyWords 148564 52.76 68.28 45.78 12 XM_B_Unicode3 135542 43.62 47.72 41.77 13 DCC_CHECK 106280 44.36 70.15 32.75 14 DKIM_VALID_EF 101289 31.91 33.45 31.21 15 T_TM2_M_HEADER_IN_MSG 98579 27.62 21.49 30.38 16 LOC_TINY_FONT_1 95251 35.05 47.72 29.35 17 HTML_FONT_LOW_CONTRAST 90904 30.01 34.46 28.01 18 FVGT_m_MULTI_ODD 83088 28.77 35.79 25.60 19 XMSubLong 80164 25.38 26.88 24.70 20 T_KAM_HTML_FONT_INVALID 76154 25.18 28.99 23.47 21 XM_B_SpammyWords2 62783 26.13 41.21 19.35 22 MIME_HTML_ONLY 62268 22.19 28.85 19.19 23 RCVD_IN_MSPIKE_WL 61928 16.16 9.65 19.08 24 RCVD_IN_MSPIKE_H2 51021 16.34 17.70 15.72 25 ALL_TRUSTED 44868 9.91 1.19 13.83 26 USER_IN_DEF_DKIM_WL 44262 10.18 2.48 13.64 27 XM_Multi_Part_URI 43650 16.41 23.00 13.45 28 TR_XM_DK_Unsub 43241 16.79 24.49 13.33 29 UNPARSEABLE_RELAY 38420 13.52 17.27 11.84 30 XM_B_PhoneNumber 32941 9.05 6.60 10.15 31 BAYES_00 32923 7.24 0.79 10.15 32 XM_Evil_Numbers_Gen 30050 9.63 10.46 9.26 33 RCVD_IN_MSPIKE_H3 29159 7.88 5.43 8.99 34 XM_B_Unsub 27938 11.79 18.87 8.61 35 LotsOfNums_01 27017 7.80 6.63 8.33 36 TooManyTo_001 25729 6.75 4.12 7.93 37 BAYES_60 24039 7.96 9.20 7.41 38 TR_XM_DK_Bayes 23780 5.22 0.53 7.33 39 TR_XM_DK_Bayes1 23409 5.14 0.52 7.21 40 XM_H_GMP 22594 6.16 4.37 6.96 41 TR_XM_BayesUnsub 22535 10.37 17.97 6.94 42 XM_DKIMWhitelistDomains 21545 4.59 0.02 6.64 43 TR_XM_DK_Bayes2 20495 4.47 0.38 6.32 44 TR_MAX_INTL_RELAY 20438 9.41 16.33 6.30 45 LOTS_OF_MONEY 19691 8.49 13.88 6.07 46 RCVD_IN_MSPIKE_H5 18883 4.69 2.18 5.82 47 MIME_QP_LONG_LINE 18453 4.90 3.15 5.69 48 T_TooManySym_01 18036 5.14 4.21 5.56 49 XM_H_Long_From01 17688 5.57 5.83 5.45 50 XM_B_Phish_Phrases 17251 6.92 10.49 5.32 51 XMStrtUSub 16978 4.97 4.40 5.23 52 BAYES_40 16882 4.12 1.72 5.20 53 XM_B_SpammyWords3 16876 8.20 14.88 5.20 54 MPART_ALT_DIFF 16463 5.53 6.54 5.07 55 XM_DK_Undo_02 15804 16.12 41.12 4.87 56 HTML_IMAGE_RATIO_02 14331 5.78 8.82 4.42 57 HTML_IMAGE_RATIO_04 14262 4.31 4.11 4.39 58 RCVD_IN_VALIDITY_SAFE 14109 3.68 2.20 4.35 59 XM_PDF 14050 3.21 0.73 4.33 60 RCVD_IN_MSPIKE_H4 13886 3.59 2.04 4.28 61 XM_UncommonTLD01 13500 5.00 6.86 4.16 62 TR_XM_SpammyWords4 13432 6.74 12.53 4.14 63 T_REMOTE_IMAGE 12698 3.08 1.24 3.91 64 BAYES_80 12501 5.84 10.26 3.85 65 BAYES_20 12423 3.03 1.26 3.83 66 ANY_BOUNCE_MESSAGE 12291 2.86 0.80 3.79 67 BOUNCE_MESSAGE 12291 2.86 0.80 3.79 68 RCVD_IN_IADB_LISTED 12251 3.13 1.70 3.78 69 RCVD_IN_VALIDITY_CERTIFIED 11816 3.11 1.92 3.64 70 RELAYCOUNTRY_META 11538 8.25 18.69 3.56 71 BAYES_99 11420 11.42 28.97 3.52 72 FSL_BULK_SIG 11344 5.25 9.15 3.50 73 XMSubMetaSx_00 10774 4.24 6.29 3.32 74 RCVD_IN_IADB_SPF 10772 2.73 1.43 3.32 75 BOTNET_IPINHOSTNAME 10419 5.90 11.87 3.21 76 MAILING_LIST_MULTI 10308 2.85 2.14 3.18 77 XMNumbers 10006 3.20 3.45 3.08 78 T_TooManySym_02 9916 2.34 0.75 3.06 79 RCVD_IN_IADB_SENDERID 9742 2.47 1.29 3.00 80 HTML_IMAGE_RATIO_06 9663 3.00 3.05 2.98 81 RCVD_IN_IADB_DK 9304 2.39 1.33 2.87 82 MIME_HTML_MOSTLY 9191 3.38 4.59 2.83 83 XM_B_SpammyTLD 9110 3.14 3.87 2.81 84 XM_Body_Dirty_Words 8820 4.01 6.90 2.72 85 BAYES_999 8554 8.62 21.92 2.64 86 HTML_MIME_NO_HTML_TAG 8356 2.28 1.63 2.57 87 MIME_HTML_ONLY_MULTI 8311 2.66 2.87 2.56 88 RCVD_IN_IADB_VOUCHED 8193 2.04 0.98 2.52 89 BAYES_95 7932 3.43 5.62 2.44 90 HTML_IMAGE_RATIO_08 7496 2.48 2.87 2.31 91 TooManyTo_002 7494 1.79 0.63 2.31 92 BAYES_05 7319 1.76 0.66 2.26 93 DKIM_INVALID 7141 3.03 4.88 2.20 94 INVALID_MSGID 7086 1.58 0.22 2.18 95 XMDiploma_00 6777 2.58 3.66 2.09 96 XM_B_Investor 6734 3.22 5.75 2.08 97 XM_B_URI_Unicode 6700 2.24 2.62 2.06 98 XM_CamelCaseFrm001 6560 2.31 2.96 2.02 99 XM_SPF_SoftFail 6402 2.46 3.55 1.97 100 MSGID_NOFQDN1 6374 1.36 0.01 1.96 101 TO_MALFORMED 6369 1.37 0.04 1.96 102 XM_DK_Undo_01 5991 1.78 1.64 1.85 103 TM2_M_URI_OPT_OUT 5985 2.21 3.01 1.84 104 TR_XM_DKIM_Undo 5961 9.93 27.93 1.84 105 TR_XM_SpammyRelay 5882 5.46 13.57 1.81 106 RCVD_IN_IADB_OPTIN 5643 1.40 0.66 1.74 107 TR_XM_UnparsRelay 5606 4.05 9.20 1.73 108 TR_XM_PhishingBody 5425 2.48 4.29 1.67 109 KHOP_HELO_FCRDNS 5366 1.99 2.74 1.65 110 UNTRUSTED_Relay 5340 3.53 7.72 1.65 111 FROM_EXCESS_BASE64 5321 1.69 1.79 1.64 112 XM_B_Unsub2 5202 1.98 2.81 1.60 113 T_XMDrugObfuBody_14 5130 2.23 3.67 1.58 114 XM_SendGrid 5006 1.61 1.76 1.54 115 T_XMDrugObfuBody_08 4929 1.90 2.75 1.52 116 SUBJ_ALL_CAPS 4909 1.66 1.99 1.51 117 TR_Symld_Words 4830 1.29 0.85 1.49 118 TooManyTo_003 4828 1.20 0.55 1.49 119 TR_XM_SpammyWords5 4694 2.13 3.64 1.45 120 URI_HEX 4612 1.78 2.58 1.42 121 RCVD_IN_MSPIKE_BL 4491 3.97 9.72 1.38 122 TR_XM_MSPIKECOMBO 4486 3.97 9.72 1.38 123 XM_GoogleGroups 4459 1.20 0.80 1.37 124 TM2_M_VERY_LONG_WORD 4367 1.93 3.24 1.35 125 XMGenDplmaNmb 4298 1.57 2.10 1.32 126 XMGappySubj_01 4256 0.98 0.24 1.31 127 URI_NOVOWEL 4248 1.36 1.47 1.31 128 HELO_NODOT 4232 0.98 0.25 1.30 129 HELO_NO_DOMAIN 4225 0.95 0.18 1.30 130 IN_HORDE_ADDRESS_BOOK 4191 0.93 0.12 1.29 131 XMSexyCombo_05 4094 2.24 4.41 1.26 132 RCVD_IN_MSPIKE_L3 3981 2.14 4.18 1.23 133 BOTNET 3921 4.14 10.67 1.21 134 T_TooManySym_03 3894 0.89 0.19 1.20 135 XMStockSpam_06 3893 1.53 2.26 1.20 136 XMCapTrack 3674 0.94 0.50 1.13 137 TooManyTo_004 3619 0.92 0.48 1.12 138 TR_XM_DK_SendGrid 3614 1.07 0.96 1.11 139 TVD_RCVD_IP 3602 1.05 0.91 1.11 140 XM_OfRef6 3520 2.45 5.48 1.08 141 XM_UB50 3511 1.95 3.88 1.08 142 XMBrknScrpt_02 3400 1.23 1.63 1.05 143 TR_DCC_Bayes_99 3371 6.60 18.98 1.04 144 T_FILL_THIS_FORM_SHORT 3270 1.49 2.55 1.01 145 TVD_SPACE_RATIO 3043 0.68 0.10 0.94 146 XM_ShortIntro_01 2974 0.74 0.34 0.92 147 T_TVD_MIME_NO_HEADERS 2913 0.63 0.02 0.90 148 TooManyTo_005 2905 0.75 0.44 0.90 149 FROM_GOV_DKIM_AU 2791 0.64 0.15 0.86 150 XM_ProductURIs 2787 0.90 1.00 0.86 151 HTTPS_HTTP_MISMATCH 2642 0.96 1.29 0.81 152 T_XMDrugObfuBody_00 2606 0.99 1.41 0.80 153 XM_B_SpammyWords4 2549 1.53 3.19 0.79 154 XMNoVowels 2546 0.74 0.65 0.78 155 TR_MetaPhish_Combo_01 2521 0.77 0.74 0.78 156 DKIM_ADSP_CUSTOM_MED 2511 0.87 1.07 0.77 157 XMSubMetaI_00 2472 0.75 0.72 0.76 158 XM_H_PHPMailer 2458 0.63 0.36 0.76 159 XM_H_Long_From02 2440 1.63 3.58 0.75 160 TR_XM_Base64_M1 2424 0.79 0.89 0.75 161 T_Symld_Words_02 2386 0.80 0.94 0.74 162 RCVD_IN_PBL 2355 0.86 1.17 0.73 163 SpammyFromTLD_01 2313 1.08 1.91 0.71 164 RELAYCOUNTRY_CA 2273 2.58 6.75 0.70 165 XM_B_COPY_HTML 2239 0.84 1.17 0.69 166 RELAYCOUNTRY_GB 2237 0.75 0.88 0.69 167 URI_TRY_3LD 2143 0.81 1.15 0.66 168 XMBSHREFv2 2139 0.60 0.47 0.66 169 XMGappySubj_02 2120 0.46 0.04 0.65 170 TR_XM_SpammyWords3 2089 2.14 5.47 0.64 171 TO_NO_BRKTS_HTML_ONLY 2088 0.49 0.14 0.64 172 T_XMHurry_00 1959 0.90 1.56 0.60 173 TRACKER_ID 1957 0.44 0.09 0.60 174 RCVD_IN_PSBL 1957 1.88 4.72 0.60 175 XM_B_DNDMA 1951 0.65 0.77 0.60 176 RCVD_IN_BL_SPAMCOP_NET 1925 4.65 13.66 0.59 177 XMMoneyMeta_00 1907 0.59 0.60 0.59 178 T_OBFU_PDF_ATTACH 1873 0.42 0.07 0.58 179 RELAYCOUNTRY_AU 1871 1.28 2.86 0.58 180 HTML_IMAGE_ONLY_20 1861 0.65 0.82 0.57 181 LongTLD 1850 0.71 1.04 0.57 182 SpammyFromTLD_02 1776 1.20 2.65 0.55 183 HTML_TAG_BALANCE_BODY 1738 0.70 1.06 0.54 184 XMLngstWrd_00 1707 0.59 0.73 0.53 185 MPART_ALT_DIFF_COUNT 1702 0.68 1.03 0.52 186 DIET_1 1681 0.80 1.44 0.52 187 XMSlimDrugH 1675 0.54 0.59 0.52 188 PLING_QUERY 1671 0.61 0.83 0.51 189 XMSubMetaSxObfu_02 1659 0.46 0.35 0.51 190 XMPhish30 1635 0.88 1.70 0.50 191 XMPhish14 1590 0.62 0.91 0.49 192 HTML_IMAGE_ONLY_32 1583 0.40 0.21 0.49 193 MSGID_FROM_MTA_HEADER 1576 0.41 0.25 0.49 194 FORGED_GMAIL_RCVD 1543 0.58 0.82 0.48 195 NML_ADSP_CUSTOM_MED 1517 0.56 0.77 0.47 196 TR_XM_SpammyWords2 1507 3.16 9.15 0.46 197 XMHTML_After_End 1488 0.61 0.94 0.46 198 HTML_IMAGE_ONLY_28 1448 0.39 0.28 0.45 199 XM_Walgreens_Forge 1415 0.31 0.02 0.44 200 XMBody_78 1373 0.67 1.23 0.42 ----------------------------------------------------------------------