Email: 495361 Autolearn: 0 AvgScore: 4.84 AvgScanTime: 1.47 sec Spam: 137985 Autolearn: 0 AvgScore: 14.51 AvgScanTime: 1.74 sec Ham: 357376 Autolearn: 0 AvgScore: 1.10 AvgScanTime: 1.36 sec Time Spent Running SA: 201.63 hours Time Spent Processing Spam: 66.63 hours Time Spent Processing Ham: 134.99 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 130273 89.22 94.41 87.22 2 DKIM_SIGNED 123209 74.35 89.29 68.59 3 XM_DK_Pass 115974 71.99 84.05 67.34 4 DKIM_VALID 114710 71.05 83.13 66.38 5 XM_B_Unicode 114634 74.96 83.08 71.82 6 RELAYCOUNTRY_US 112959 82.53 81.86 82.79 7 DCC_CHECK 97359 43.06 70.56 32.45 8 XM_B_SpammyWords 94912 50.95 68.78 44.06 9 DKIM_VALID_AU 91318 58.18 66.18 55.09 10 XMListUnsubscribeExists 90712 49.22 65.74 42.85 11 XM_B_Unicode3 67933 44.45 49.23 42.60 12 LOC_TINY_FONT_1 65569 31.90 47.52 25.87 13 XM_DK_Undo_02 55610 14.52 40.30 4.57 14 BAYES_50 54874 52.08 39.77 56.83 15 XM_B_SpammyWords2 53297 23.57 38.63 17.75 16 HTML_FONT_LOW_CONTRAST 49423 27.76 35.82 24.65 17 FVGT_m_MULTI_ODD 45383 25.44 32.89 22.56 18 BAYES_99 43182 10.92 31.29 3.06 19 DKIM_VALID_EF 41746 28.18 30.25 27.37 20 TR_XM_DKIM_Undo 40448 9.53 29.31 1.89 21 MIME_HTML_ONLY 40348 24.11 29.24 22.13 22 T_KAM_HTML_FONT_INVALID 40245 22.11 29.17 19.38 23 DCC_CHECK_NEGATIVE 38624 56.50 27.99 67.51 24 XMSubLong 37494 24.60 27.17 23.60 25 BAYES_999 32771 8.28 23.75 2.31 26 T_TM2_M_HEADER_IN_MSG 29986 25.65 21.73 27.17 27 RCVD_IN_MSPIKE_H2 29299 16.87 21.23 15.18 28 XM_Multi_Part_URI 29102 15.30 21.09 13.06 29 TR_XM_DK_Unsub 28932 14.47 20.97 11.96 30 TR_DCC_Bayes_99 28503 6.42 20.66 0.93 31 XM_B_Unsub 27550 11.43 19.97 8.14 32 TR_XM_BayesUnsub 26618 9.90 19.29 6.28 33 UNPARSEABLE_RELAY 25411 12.89 18.42 10.76 34 RELAYCOUNTRY_META 23392 6.73 16.95 2.78 35 TR_MAX_INTL_RELAY 21024 8.03 15.24 5.24 36 XM_B_SpammyWords3 19634 7.54 14.23 4.95 37 BOTNET_IPINHOSTNAME 17811 13.39 12.91 13.57 38 LOTS_OF_MONEY 16632 7.71 12.05 6.04 39 TR_XM_SpammyRelay 16214 4.32 11.75 1.45 40 RCVD_IN_MSPIKE_WL 16108 15.90 11.67 17.54 41 RCVD_IN_BL_SPAMCOP_NET 15836 3.63 11.48 0.60 42 TR_XM_SpammyWords4 15208 6.20 11.02 4.34 43 BOTNET 14209 3.75 10.30 1.22 44 TR_XM_UnparsRelay 13745 3.72 9.96 1.31 45 TR_XM_SpammyWords2 13639 3.04 9.88 0.40 46 XM_Evil_Numbers_Gen 13609 9.29 9.86 9.06 47 FSL_BULK_SIG 13059 6.76 9.46 5.72 48 BAYES_80 12794 4.91 9.27 3.23 49 XM_B_Phish_Phrases 11668 6.08 8.46 5.16 50 BAYES_60 10879 6.63 7.88 6.15 51 MPART_ALT_DIFF 10710 8.63 7.76 8.97 52 LotsOfNums_01 9453 6.81 6.85 6.80 53 UNTRUSTED_Relay 9305 2.82 6.74 1.30 54 XMSubMetaSx_00 8968 4.15 6.50 3.25 55 XM_B_PhoneNumber 8912 8.07 6.46 8.69 56 HTML_IMAGE_RATIO_02 8638 4.57 6.26 3.92 57 DKIM_INVALID 8499 3.30 6.16 2.20 58 RCVD_IN_MSPIKE_H3 8400 7.52 6.09 8.08 59 RELAYCOUNTRY_CA 8324 2.07 6.03 0.54 60 XM_Body_Dirty_Words 8181 3.31 5.93 2.30 61 RCVD_IN_MSPIKE_BL 7859 2.23 5.70 0.90 62 TR_XM_MSPIKECOMBO 7855 2.23 5.69 0.90 63 XM_UncommonTLD01 7854 4.18 5.69 3.60 64 XM_H_Long_From01 7769 5.37 5.63 5.28 65 XM_H_GMP 7633 5.39 5.53 5.33 66 BAYES_95 7523 2.97 5.45 2.01 67 TR_XM_SPAMCOP 7233 1.58 5.24 0.16 68 TooManyTo_001 7154 6.58 5.18 7.12 69 HTML_IMAGE_RATIO_04 6493 11.07 4.71 13.53 70 XM_OfRef6 6020 1.88 4.36 0.93 71 TR_XM_PhishingBody 5990 2.24 4.34 1.43 72 XMStrtUSub 5987 8.62 4.34 10.27 73 XM_B_Investor 5986 2.17 4.34 1.33 74 TM2_M_VERY_LONG_WORD 5982 2.28 4.34 1.49 75 T_XMDrugObfuBody_14 5830 2.36 4.23 1.64 76 TR_XM_SpammyWords3 5812 1.51 4.21 0.47 77 XM_URI_RBL 5711 1.37 4.14 0.29 78 MIME_HTML_MOSTLY 5707 2.82 4.14 2.31 79 XMSexyCombo_05 5445 1.99 3.95 1.24 80 XMNumbers 5440 3.27 3.94 3.01 81 MIME_QP_LONG_LINE 5397 4.40 3.91 4.59 82 XM_B_SpammyTLD 5356 2.72 3.88 2.27 83 MIME_HTML_ONLY_MULTI 5202 6.05 3.77 6.93 84 RCVD_IN_MSPIKE_L3 5195 1.64 3.76 0.82 85 HTML_IMAGE_RATIO_06 5041 4.20 3.65 4.41 86 XM_B_Unsub2 4665 1.80 3.38 1.19 87 TR_XM_SpammyWords5 4583 1.77 3.32 1.17 88 TR_XM_NoHeaderRelay 4562 1.03 3.31 0.14 89 T_TooManySym_01 4528 5.10 3.28 5.80 90 XM_CamelCaseFrm001 4407 2.10 3.19 1.68 91 XM_B_URI_Unicode 4378 2.23 3.17 1.87 92 XM_SPF_SoftFail 4330 1.71 3.14 1.16 93 HTML_IMAGE_RATIO_08 4313 2.85 3.13 2.74 94 T_XMDrugObfuBody_08 4256 1.76 3.08 1.25 95 TR_XM_INV_DKIM 4166 0.86 3.02 0.02 96 RCVD_IN_MSPIKE_H4 3865 3.40 2.80 3.64 97 RELAYCOUNTRY_AU 3860 1.07 2.80 0.40 98 XMDiploma_00 3847 1.74 2.79 1.34 99 RCVD_IN_MSPIKE_H5 3843 4.98 2.79 5.83 100 MAILING_LIST_MULTI 3839 3.02 2.78 3.11 101 TM2_M_URI_OPT_OUT 3703 2.02 2.68 1.77 102 USER_IN_DEF_DKIM_WL 3503 9.46 2.54 12.13 103 XM_B_SpammyWords4 3432 1.12 2.49 0.59 104 XM_UB50 3382 1.32 2.45 0.88 105 TR_XM_INTL_Spamhaus 3083 0.72 2.23 0.13 106 XM_H_Long_From02 2981 1.15 2.16 0.75 107 FROM_EXCESS_BASE64 2970 1.70 2.15 1.52 108 TR_XM_MSPIKECOMBO2 2906 0.61 2.11 0.03 109 BAYES_40 2890 5.07 2.09 6.22 110 BOUNCE_MESSAGE 2816 4.50 2.04 5.45 111 ANY_BOUNCE_MESSAGE 2816 4.50 2.04 5.45 112 DKIM_ADSP_NXDOMAIN 2790 0.74 2.02 0.24 113 RCVD_IN_VALIDITY_RPBL 2784 0.58 2.02 0.03 114 XMBody_17 2766 0.80 2.00 0.33 115 URI_HEX 2764 1.30 2.00 1.03 116 XMStockSpam_06 2728 1.43 1.98 1.21 117 RCVD_IN_XBL 2722 0.57 1.97 0.02 118 RCVD_IN_VALIDITY_SAFE 2631 2.94 1.91 3.34 119 SpammyFromTLD_02 2629 0.85 1.91 0.45 120 KHOP_HELO_FCRDNS 2618 1.44 1.90 1.26 121 SUBJ_ALL_CAPS 2473 1.35 1.79 1.18 122 SpammyFromTLD_01 2463 0.97 1.78 0.65 123 MPART_ALT_DIFF_COUNT 2263 0.95 1.64 0.68 124 T_XMDrugObfuBody_00 2251 1.07 1.63 0.86 125 XMBrknScrpt_02 2239 0.96 1.62 0.71 126 XMGenDplmaNmb 2190 0.89 1.59 0.63 127 XM_HighProb1 2180 0.44 1.58 0.00 128 XMSubMetaI_00 2178 0.82 1.58 0.53 129 XM_DK_Undo_01 2170 1.69 1.57 1.73 130 T_REMOTE_IMAGE 2124 2.88 1.54 3.39 131 T_FILL_THIS_FORM_SHORT 2119 0.99 1.54 0.78 132 XMPhish30 2080 0.77 1.51 0.48 133 RCVD_IN_MSPIKE_L4 2067 0.46 1.50 0.06 134 BAYES_20 2057 4.45 1.49 5.59 135 RCVD_IN_SBL_CSS 2056 0.45 1.49 0.05 136 XM_B_Phish66 1994 0.66 1.45 0.36 137 RDNS_DYNAMIC 1988 0.50 1.44 0.13 138 TR_XM_MaxSPIKE 1984 0.42 1.44 0.03 139 HTML_IMAGE_ONLY_20 1978 0.77 1.43 0.51 140 RCVD_IN_VALIDITY_CERTIFIED 1974 2.53 1.43 2.96 141 RCVD_IN_IADB_LISTED 1968 2.42 1.43 2.81 142 SHORTCIRCUIT 1965 0.40 1.42 0.00 143 RCVD_IN_ZEN_LASTEXTERNAL 1965 0.40 1.42 0.00 144 XM_GoogleGroups 1937 1.41 1.40 1.42 145 XM_B_SEO 1930 0.53 1.40 0.19 146 XM_SendGrid 1926 1.45 1.40 1.47 147 DIET_1 1899 0.52 1.38 0.19 148 XM_B_DNDMA 1881 0.61 1.36 0.32 149 HTML_FONT_FACE_BAD 1862 8.51 1.35 11.27 150 RCVD_IN_PBL 1857 0.83 1.35 0.63 151 T_XMHurry_00 1840 0.72 1.33 0.49 152 HTML_MIME_NO_HTML_TAG 1838 2.14 1.33 2.45 153 ALL_TRUSTED 1823 10.99 1.32 14.72 154 XMBdyGiftCard01 1759 0.65 1.27 0.40 155 MultiRelay_CC 1756 0.44 1.27 0.11 156 RELAYCOUNTRY_FR 1743 0.51 1.26 0.22 157 XM_OfRef7 1727 0.47 1.25 0.16 158 T_MONEY_PERCENT 1691 0.46 1.23 0.17 159 TR_LOTS_OF_MONEY2 1691 0.46 1.23 0.17 160 URI_TRY_3LD 1689 0.58 1.22 0.33 161 RCVD_IN_IADB_SPF 1671 2.13 1.21 2.49 162 XMBody_78 1641 0.59 1.19 0.35 163 XM_UB80 1637 0.34 1.19 0.02 164 TVD_RCVD_IP 1626 1.00 1.18 0.94 165 XM_ProductURIs 1622 0.64 1.18 0.43 166 XM_B_COPY_HTML 1619 0.88 1.17 0.77 167 URI_NOVOWEL 1597 1.06 1.16 1.03 168 XMHTML_After_End 1596 0.61 1.16 0.40 169 STY_INVIS_DIRECT 1584 0.53 1.15 0.29 170 RCVD_IN_IADB_DK 1555 1.88 1.13 2.17 171 TM2_M_OBFU_COMMENT 1524 0.51 1.10 0.29 172 XM_UB60 1515 0.35 1.10 0.06 173 RCVD_IN_IADB_SENDERID 1506 1.92 1.09 2.24 174 T_Symld_Words_02 1503 0.78 1.09 0.66 175 XM_UB99 1495 0.30 1.08 0.00 176 TM2_M_A_HREF_HREF 1494 0.51 1.08 0.29 177 TR_XM_SEO4 1470 0.37 1.07 0.10 178 RELAYCOUNTRY_GB 1470 0.74 1.07 0.61 179 HELO_DYNAMIC_SPLIT_IP 1449 0.30 1.05 0.01 180 HTML_FONT_TINY_NORDNS 1433 0.33 1.04 0.06 181 TR_XM_PHPForged 1425 0.44 1.03 0.21 182 XMSlimDrugH 1412 0.59 1.02 0.42 183 TR_XM_GMP_BULK_SIG 1401 0.38 1.02 0.14 184 BOTNET_NORDNS 1400 0.29 1.01 0.01 185 TR_XM_FormFill2 1386 0.44 1.00 0.22 186 TR_XM_PHPDW 1384 0.44 1.00 0.22 187 XM_H_PHPOS 1357 0.42 0.98 0.21 188 XM_DIRTYINTL 1356 0.33 0.98 0.08 189 TR_Mismatch_TLD_02 1353 0.33 0.98 0.08 190 RCVD_IN_PSBL 1351 0.33 0.98 0.08 191 TR_XM_Base64_M1 1349 0.70 0.98 0.59 192 XMSubNoVowel 1334 2.98 0.97 3.75 193 TR_XM_InvalidRelay 1319 0.27 0.96 0.01 194 TR_BOTNET_NEGATE 1314 0.35 0.95 0.11 195 TR_XM_RelayPhish 1306 0.32 0.95 0.08 196 HTTPS_HTTP_MISMATCH 1269 0.69 0.92 0.60 197 XMPhish14 1269 0.53 0.92 0.38 198 XMClaimOffer 1240 0.34 0.90 0.13 199 TR_Symld_Words 1220 1.26 0.88 1.41 200 TR_LOTS_OF_MONEY3 1217 0.40 0.88 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 311706 89.22 94.41 87.22 2 RELAYCOUNTRY_US 295865 82.53 81.86 82.79 3 XM_B_Unicode 256675 74.96 83.08 71.82 4 DKIM_SIGNED 245110 74.35 89.29 68.59 5 DCC_CHECK_NEGATIVE 241279 56.50 27.99 67.51 6 XM_DK_Pass 240644 71.99 84.05 67.34 7 DKIM_VALID 237239 71.05 83.13 66.38 8 BAYES_50 203105 52.08 39.77 56.83 9 DKIM_VALID_AU 196890 58.18 66.18 55.09 10 XM_B_SpammyWords 157462 50.95 68.78 44.06 11 XMListUnsubscribeExists 153128 49.22 65.74 42.85 12 XM_B_Unicode3 152240 44.45 49.23 42.60 13 DCC_CHECK 115964 43.06 70.56 32.45 14 DKIM_VALID_EF 97824 28.18 30.25 27.37 15 T_TM2_M_HEADER_IN_MSG 97094 25.65 21.73 27.17 16 LOC_TINY_FONT_1 92443 31.90 47.52 25.87 17 HTML_FONT_LOW_CONTRAST 88081 27.76 35.82 24.65 18 XMSubLong 84345 24.60 27.17 23.60 19 FVGT_m_MULTI_ODD 80626 25.44 32.89 22.56 20 MIME_HTML_ONLY 79075 24.11 29.24 22.13 21 T_KAM_HTML_FONT_INVALID 69257 22.11 29.17 19.38 22 XM_B_SpammyWords2 63435 23.57 38.63 17.75 23 RCVD_IN_MSPIKE_WL 62675 15.90 11.67 17.54 24 RCVD_IN_MSPIKE_H2 54250 16.87 21.23 15.18 25 ALL_TRUSTED 52599 10.99 1.32 14.72 26 BAYES_00 51677 10.63 0.71 14.46 27 BOTNET_IPINHOSTNAME 48507 13.39 12.91 13.57 28 HTML_IMAGE_RATIO_04 48356 11.07 4.71 13.53 29 XM_Multi_Part_URI 46688 15.30 21.09 13.06 30 USER_IN_DEF_DKIM_WL 43362 9.46 2.54 12.13 31 TR_XM_DK_Unsub 42741 14.47 20.97 11.96 32 HTML_FONT_FACE_BAD 40269 8.51 1.35 11.27 33 UNPARSEABLE_RELAY 38464 12.89 18.42 10.76 34 XMStrtUSub 36718 8.62 4.34 10.27 35 XM_Evil_Numbers_Gen 32393 9.29 9.86 9.06 36 MPART_ALT_DIFF 32060 8.63 7.76 8.97 37 XM_B_PhoneNumber 31073 8.07 6.46 8.69 38 XM_B_Unsub 29089 11.43 19.97 8.14 39 RCVD_IN_MSPIKE_H3 28859 7.52 6.09 8.08 40 TooManyTo_001 25428 6.58 5.18 7.12 41 MIME_HTML_ONLY_MULTI 24759 6.05 3.77 6.93 42 LotsOfNums_01 24285 6.81 6.85 6.80 43 TR_XM_BayesUnsub 22446 9.90 19.29 6.28 44 TR_XM_DK_Bayes 22330 4.67 0.58 6.25 45 BAYES_40 22217 5.07 2.09 6.22 46 TR_XM_DK_Bayes1 22003 4.60 0.58 6.16 47 BAYES_60 21975 6.63 7.88 6.15 48 LOTS_OF_MONEY 21574 7.71 12.05 6.04 49 RCVD_IN_MSPIKE_H5 20824 4.98 2.79 5.83 50 T_TooManySym_01 20711 5.10 3.28 5.80 51 FSL_BULK_SIG 20430 6.76 9.46 5.72 52 BAYES_20 19982 4.45 1.49 5.59 53 XM_DKIMWhitelistDomains 19686 3.98 0.02 5.51 54 ANY_BOUNCE_MESSAGE 19465 4.50 2.04 5.45 55 BOUNCE_MESSAGE 19464 4.50 2.04 5.45 56 TR_XM_DK_Bayes2 19318 3.99 0.31 5.41 57 XM_H_GMP 19062 5.39 5.53 5.33 58 XM_H_Long_From01 18855 5.37 5.63 5.28 59 TR_MAX_INTL_RELAY 18734 8.03 15.24 5.24 60 XM_B_Phish_Phrases 18429 6.08 8.46 5.16 61 XM_B_SpammyWords3 17701 7.54 14.23 4.95 62 MIME_QP_LONG_LINE 16421 4.40 3.91 4.59 63 XM_DK_Undo_02 16338 14.52 40.30 4.57 64 HTML_IMAGE_RATIO_06 15749 4.20 3.65 4.41 65 TR_XM_SpammyWords4 15509 6.20 11.02 4.34 66 XM_PDF 14863 3.21 0.76 4.16 67 HTML_IMAGE_RATIO_02 13995 4.57 6.26 3.92 68 XMSubNoVowel 13408 2.98 0.97 3.75 69 RCVD_IN_MSPIKE_H4 12992 3.40 2.80 3.64 70 XM_UncommonTLD01 12856 4.18 5.69 3.60 71 T_REMOTE_IMAGE 12120 2.88 1.54 3.39 72 RCVD_IN_VALIDITY_SAFE 11945 2.94 1.91 3.34 73 XMSubMetaSx_00 11609 4.15 6.50 3.25 74 BAYES_80 11535 4.91 9.27 3.23 75 MAILING_LIST_MULTI 11106 3.02 2.78 3.11 76 BAYES_99 10929 10.92 31.29 3.06 77 XMNumbers 10758 3.27 3.94 3.01 78 RCVD_IN_VALIDITY_CERTIFIED 10577 2.53 1.43 2.96 79 T_TooManySym_02 10325 2.30 0.79 2.89 80 RCVD_IN_IADB_LISTED 10040 2.42 1.43 2.81 81 RELAYCOUNTRY_META 9930 6.73 16.95 2.78 82 HTML_IMAGE_RATIO_08 9791 2.85 3.13 2.74 83 RCVD_IN_IADB_SPF 8900 2.13 1.21 2.49 84 BAYES_05 8758 1.94 0.61 2.45 85 HTML_MIME_NO_HTML_TAG 8757 2.14 1.33 2.45 86 TooManyTo_002 8346 1.87 0.67 2.34 87 BAYES_999 8253 8.28 23.75 2.31 88 MIME_HTML_MOSTLY 8239 2.82 4.14 2.31 89 XM_Body_Dirty_Words 8224 3.31 5.93 2.30 90 XM_B_SpammyTLD 8122 2.72 3.88 2.27 91 RCVD_IN_IADB_SENDERID 8005 1.92 1.09 2.24 92 DKIM_INVALID 7871 3.30 6.16 2.20 93 RCVD_IN_IADB_DK 7751 1.88 1.13 2.17 94 INVALID_MSGID 7193 1.56 0.38 2.01 95 BAYES_95 7193 2.97 5.45 2.01 96 TR_XM_DKIM_Undo 6767 9.53 29.31 1.89 97 XM_B_URI_Unicode 6675 2.23 3.17 1.87 98 RCVD_IN_IADB_VOUCHED 6427 1.53 0.85 1.80 99 MSGID_NOFQDN1 6360 1.32 0.13 1.78 100 TM2_M_URI_OPT_OUT 6326 2.02 2.68 1.77 101 TO_MALFORMED 6287 1.27 0.00 1.76 102 XM_DK_Undo_01 6197 1.69 1.57 1.73 103 XMSubLongNoVowel 6020 1.44 0.79 1.68 104 XM_CamelCaseFrm001 5996 2.10 3.19 1.68 105 XMSubGarbage 5963 1.38 0.64 1.67 106 T_XMDrugObfuBody_14 5852 2.36 4.23 1.64 107 FROM_EXCESS_BASE64 5438 1.70 2.15 1.52 108 TooManyTo_003 5399 1.25 0.57 1.51 109 TM2_M_VERY_LONG_WORD 5334 2.28 4.34 1.49 110 XM_SendGrid 5247 1.45 1.40 1.47 111 TR_XM_SpammyRelay 5192 4.32 11.75 1.45 112 TR_XM_PhishingBody 5107 2.24 4.34 1.43 113 XM_GoogleGroups 5066 1.41 1.40 1.42 114 TR_Symld_Words 5043 1.26 0.88 1.41 115 XMDiploma_00 4787 1.74 2.79 1.34 116 XM_B_Investor 4757 2.17 4.34 1.33 117 TR_XM_UnparsRelay 4687 3.72 9.96 1.31 118 UNTRUSTED_Relay 4648 2.82 6.74 1.30 119 RCVD_IN_IADB_OPTIN 4591 1.09 0.58 1.28 120 KHOP_HELO_FCRDNS 4498 1.44 1.90 1.26 121 T_XMDrugObfuBody_08 4454 1.76 3.08 1.25 122 XMSexyCombo_05 4418 1.99 3.95 1.24 123 BOTNET 4366 3.75 10.30 1.22 124 XMStockSpam_06 4339 1.43 1.98 1.21 125 T_TooManySym_03 4286 0.91 0.15 1.20 126 XM_B_Unsub2 4265 1.80 3.38 1.19 127 SUBJ_ALL_CAPS 4217 1.35 1.79 1.18 128 TR_XM_SpammyWords5 4172 1.77 3.32 1.17 129 HELO_NODOT 4149 0.89 0.17 1.16 130 HELO_NO_DOMAIN 4137 0.87 0.14 1.16 131 XM_SPF_SoftFail 4137 1.71 3.14 1.16 132 IN_HORDE_ADDRESS_BOOK 4110 0.85 0.07 1.15 133 XMCapTrack 3864 1.02 0.86 1.08 134 TooManyTo_004 3853 0.91 0.49 1.08 135 XMGappySubj_01 3731 0.85 0.33 1.04 136 URI_NOVOWEL 3678 1.06 1.16 1.03 137 URI_HEX 3665 1.30 2.00 1.03 138 FROM_GOV_DKIM_AU 3583 0.83 0.38 1.00 139 XM_ShortIntro_01 3396 0.87 0.65 0.95 140 TR_XM_DK_SendGrid 3378 0.93 0.87 0.95 141 TVD_RCVD_IP 3347 1.00 1.18 0.94 142 TR_DCC_Bayes_99 3313 6.42 20.66 0.93 143 XM_OfRef6 3308 1.88 4.36 0.93 144 RCVD_IN_MSPIKE_BL 3202 2.23 5.70 0.90 145 TR_XM_MSPIKECOMBO 3202 2.23 5.69 0.90 146 XM_UB50 3141 1.32 2.45 0.88 147 XM_E_Blogspot 3133 0.66 0.09 0.88 148 T_XMDrugObfuBody_00 3069 1.07 1.63 0.86 149 TooManyTo_005 3065 0.74 0.44 0.86 150 TVD_SPACE_RATIO 3046 0.68 0.25 0.85 151 TR_MetaPhish_Combo_01 2968 0.77 0.62 0.83 152 XMNoVowels 2951 0.74 0.51 0.83 153 RCVD_IN_MSPIKE_L3 2937 1.64 3.76 0.82 154 XM_H_PHPMailer 2913 0.69 0.37 0.82 155 T_FILL_THIS_FORM_SHORT 2774 0.99 1.54 0.78 156 XM_B_COPY_HTML 2742 0.88 1.17 0.77 157 XM_H_Long_From02 2692 1.15 2.16 0.75 158 DKIM_ADSP_CUSTOM_MED 2595 0.77 0.87 0.73 159 XMBrknScrpt_02 2527 0.96 1.62 0.71 160 MPART_ALT_DIFF_COUNT 2433 0.95 1.64 0.68 161 T_Symld_Words_02 2366 0.78 1.09 0.66 162 T_TVD_MIME_NO_HEADERS 2355 0.49 0.05 0.66 163 SpammyFromTLD_01 2331 0.97 1.78 0.65 164 XMBSHREFv2 2329 0.55 0.30 0.65 165 RCVD_IN_PBL 2259 0.83 1.35 0.63 166 XMGenDplmaNmb 2240 0.89 1.59 0.63 167 RELAYCOUNTRY_GB 2172 0.74 1.07 0.61 168 HTTPS_HTTP_MISMATCH 2153 0.69 0.92 0.60 169 RCVD_IN_BL_SPAMCOP_NET 2149 3.63 11.48 0.60 170 XMSubMetaSxObfu_03 2126 0.60 0.61 0.59 171 XM_B_SpammyWords4 2122 1.12 2.49 0.59 172 TR_XM_Base64_M1 2117 0.70 0.98 0.59 173 T_OBFU_PDF_ATTACH 2107 0.47 0.14 0.59 174 THIS_AD 2103 0.65 0.82 0.59 175 RELAYCOUNTRY_CA 1938 2.07 6.03 0.54 176 XMSubMetaI_00 1886 0.82 1.58 0.53 177 XMLngstWrd_00 1865 0.50 0.45 0.52 178 HTML_TAG_BALANCE_BODY 1855 0.59 0.78 0.52 179 XMGappySubj_02 1849 0.39 0.07 0.52 180 HTML_IMAGE_ONLY_20 1831 0.77 1.43 0.51 181 T_XMHurry_00 1751 0.72 1.33 0.49 182 XMPhish30 1724 0.77 1.51 0.48 183 TR_XM_SpammyWords3 1690 1.51 4.21 0.47 184 NML_ADSP_CUSTOM_MED 1637 0.53 0.71 0.46 185 XMLngstWrd_01 1628 0.44 0.41 0.46 186 MSGID_FROM_MTA_HEADER 1612 0.39 0.24 0.45 187 SpammyFromTLD_02 1597 0.85 1.91 0.45 188 FORGED_GMAIL_RCVD 1577 0.49 0.60 0.44 189 XM_ProductURIs 1530 0.64 1.18 0.43 190 LongTLD 1516 0.44 0.48 0.42 191 XMSlimDrugH 1488 0.59 1.02 0.42 192 TO_NO_BRKTS_HTML_ONLY 1463 0.33 0.11 0.41 193 XMBdyGiftCard01 1447 0.65 1.27 0.40 194 XMHTML_After_End 1442 0.61 1.16 0.40 195 HTML_IMAGE_ONLY_32 1431 0.38 0.32 0.40 196 TR_XM_SpammyWords2 1427 3.04 9.88 0.40 197 RELAYCOUNTRY_AU 1418 1.07 2.80 0.40 198 T_TooManySym_04 1416 0.29 0.03 0.40 199 XMMoneyMeta_00 1361 0.48 0.73 0.38 200 XMPhish14 1347 0.53 0.92 0.38 ----------------------------------------------------------------------