Email: 423528 Autolearn: 0 AvgScore: 5.02 AvgScanTime: 1.42 sec Spam: 122124 Autolearn: 0 AvgScore: 15.08 AvgScanTime: 1.57 sec Ham: 301404 Autolearn: 0 AvgScore: 0.95 AvgScanTime: 1.36 sec Time Spent Running SA: 167.04 hours Time Spent Processing Spam: 53.33 hours Time Spent Processing Ham: 113.71 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 115036 86.79 94.20 83.79 2 DKIM_SIGNED 107918 76.73 88.37 72.02 3 XM_DK_Pass 102471 74.59 83.91 70.81 4 DKIM_VALID 101512 73.64 83.12 69.79 5 XM_B_Unicode 100946 72.08 82.66 67.80 6 RELAYCOUNTRY_US 96841 78.82 79.30 78.63 7 DCC_CHECK 88193 47.00 72.22 36.78 8 XM_B_SpammyWords 82272 49.78 67.37 42.65 9 DKIM_VALID_AU 81197 59.96 66.49 57.31 10 XMListUnsubscribeExists 80536 51.31 65.95 45.37 11 XM_B_Unicode3 59816 42.98 48.98 40.55 12 LOC_TINY_FONT_1 57540 33.16 47.12 27.51 13 XM_DK_Undo_02 51406 15.43 42.09 4.63 14 XM_B_SpammyWords2 45856 23.30 37.55 17.53 15 BAYES_50 45795 52.15 37.50 58.09 16 HTML_FONT_LOW_CONTRAST 42535 30.82 34.83 29.20 17 BAYES_99 41279 12.21 33.80 3.46 18 FVGT_m_MULTI_ODD 39658 26.25 32.47 23.73 19 T_KAM_HTML_FONT_INVALID 38104 23.06 31.20 19.76 20 MIME_HTML_ONLY 37041 22.37 30.33 19.15 21 DKIM_VALID_EF 36897 29.51 30.21 29.23 22 TR_XM_DKIM_Undo 36406 9.85 29.81 1.76 23 DCC_CHECK_NEGATIVE 31959 52.50 26.17 63.17 24 BAYES_999 31892 9.40 26.11 2.62 25 XMSubLong 29266 23.43 23.96 23.21 26 TR_DCC_Bayes_99 28934 7.64 23.69 1.14 27 T_TM2_M_HEADER_IN_MSG 28167 29.48 23.06 32.08 28 TR_XM_DK_Unsub 25481 15.13 20.86 12.80 29 XM_Multi_Part_URI 24908 14.97 20.40 12.78 30 RELAYCOUNTRY_META 24392 8.29 19.97 3.55 31 XM_B_Unsub 24258 11.54 19.86 8.17 32 RCVD_IN_MSPIKE_H2 23584 16.53 19.31 15.40 33 TR_XM_BayesUnsub 23293 10.23 19.07 6.64 34 UNPARSEABLE_RELAY 21159 13.49 17.33 11.93 35 TR_MAX_INTL_RELAY 19178 8.58 15.70 5.69 36 XM_B_SpammyWords3 17252 7.59 14.13 4.94 37 LOTS_OF_MONEY 16099 7.65 13.18 5.41 38 TR_XM_SpammyRelay 15953 5.04 13.06 1.78 39 BOTNET_IPINHOSTNAME 14522 5.58 11.89 3.02 40 RCVD_IN_BL_SPAMCOP_NET 13909 3.66 11.39 0.53 41 RCVD_IN_MSPIKE_WL 13826 16.15 11.32 18.11 42 TR_XM_SpammyWords4 13826 5.75 11.32 3.49 43 BOTNET 13612 3.94 11.15 1.02 44 FSL_BULK_SIG 12929 8.45 10.59 7.59 45 TR_XM_SpammyWords2 12699 3.33 10.40 0.47 46 BAYES_80 11640 5.26 9.53 3.52 47 TR_XM_UnparsRelay 11498 3.73 9.42 1.42 48 XM_Evil_Numbers_Gen 11209 9.74 9.18 9.96 49 UNTRUSTED_Relay 10557 3.60 8.64 1.56 50 BAYES_60 9751 6.83 7.98 6.37 51 XM_B_Phish_Phrases 9505 5.52 7.78 4.60 52 RELAYCOUNTRY_CA 8368 2.50 6.85 0.74 53 RCVD_IN_MSPIKE_BL 7800 2.56 6.39 1.01 54 TR_XM_MSPIKECOMBO 7798 2.56 6.39 1.01 55 TooManyTo_001 7245 7.24 5.93 7.76 56 XM_B_PhoneNumber 7210 8.32 5.90 9.30 57 XMSubMetaSx_00 7165 3.65 5.87 2.76 58 RCVD_IN_MSPIKE_H3 7021 7.62 5.75 8.38 59 MPART_ALT_DIFF 6940 4.72 5.68 4.32 60 XM_H_Long_From01 6882 5.27 5.64 5.13 61 HTML_IMAGE_RATIO_02 6879 4.88 5.63 4.57 62 XM_H_GMP 6854 5.74 5.61 5.79 63 BAYES_95 6775 3.14 5.55 2.17 64 XM_UncommonTLD01 6579 4.41 5.39 4.02 65 DKIM_INVALID 6406 3.10 5.25 2.23 66 LotsOfNums_01 6390 6.78 5.23 7.41 67 XM_Body_Dirty_Words 6219 2.93 5.09 2.06 68 TR_XM_SPAMCOP 6040 1.56 4.95 0.19 69 XM_B_Investor 5991 2.45 4.91 1.45 70 TR_XM_NoHeaderRelay 5828 1.57 4.77 0.27 71 RCVD_IN_MSPIKE_L3 5488 1.94 4.49 0.91 72 TR_XM_SpammyWords3 5420 1.67 4.44 0.55 73 MIME_QP_LONG_LINE 5211 4.55 4.27 4.67 74 TM2_M_VERY_LONG_WORD 5193 4.58 4.25 4.71 75 XM_B_SpammyTLD 5139 2.94 4.21 2.42 76 XMSexyCombo_05 5046 1.88 4.13 0.97 77 T_XMDrugObfuBody_08 4964 2.57 4.06 1.96 78 HTML_IMAGE_RATIO_04 4909 3.91 4.02 3.87 79 XMNumbers 4900 3.52 4.01 3.31 80 T_XMDrugObfuBody_14 4893 2.41 4.01 1.76 81 TR_XM_PhishingBody 4855 2.12 3.98 1.37 82 XM_URI_RBL 4842 1.39 3.96 0.35 83 XMBody_17 4784 1.52 3.92 0.55 84 MIME_HTML_MOSTLY 4736 2.79 3.88 2.35 85 XM_OfRef6 4593 1.72 3.76 0.89 86 TR_XM_SpammyWords5 4534 2.01 3.71 1.32 87 XMStrtUSub 4253 4.36 3.48 4.72 88 XM_SPF_SoftFail 4212 1.85 3.45 1.21 89 HTML_IMAGE_RATIO_06 4130 2.96 3.38 2.79 90 XM_CamelCaseFrm001 3828 2.05 3.13 1.61 91 ANY_BOUNCE_MESSAGE 3801 8.63 3.11 10.87 92 BOUNCE_MESSAGE 3801 8.63 3.11 10.87 93 T_TooManySym_01 3724 5.48 3.05 6.47 94 MIME_HTML_ONLY_MULTI 3627 2.45 2.97 2.24 95 XM_B_URI_Unicode 3611 2.09 2.96 1.74 96 XM_UB50 3513 1.56 2.88 1.03 97 XM_B_Unsub2 3502 1.57 2.87 1.05 98 RCVD_IN_MSPIKE_H4 3493 3.30 2.86 3.48 99 RELAYCOUNTRY_AU 3465 1.23 2.84 0.57 100 SUBJ_ALL_CAPS 3458 1.81 2.83 1.40 101 XM_B_SpammyWords4 3356 1.13 2.75 0.48 102 T_FILL_THIS_FORM_SHORT 3314 1.46 2.71 0.96 103 RCVD_IN_MSPIKE_H5 3312 5.23 2.71 6.25 104 KHOP_HELO_FCRDNS 3311 2.88 2.71 2.95 105 DKIM_ADSP_NXDOMAIN 3263 0.99 2.67 0.31 106 TR_XM_INTL_Spamhaus 3200 0.92 2.62 0.23 107 XMDiploma_00 3167 1.73 2.59 1.38 108 RCVD_IN_VALIDITY_RPBL 3019 0.73 2.47 0.03 109 TR_XM_INV_DKIM 2996 0.72 2.45 0.02 110 HTML_IMAGE_RATIO_08 2989 2.32 2.45 2.26 111 FROM_EXCESS_BASE64 2977 2.06 2.44 1.91 112 TM2_M_URI_OPT_OUT 2824 1.92 2.31 1.76 113 TR_XM_MSPIKECOMBO2 2660 0.66 2.18 0.05 114 XMStockSpam_06 2557 1.54 2.09 1.32 115 MAILING_LIST_MULTI 2486 3.01 2.04 3.40 116 RCVD_IN_XBL 2444 0.60 2.00 0.03 117 T_XMHurry_00 2438 1.02 2.00 0.62 118 USER_IN_DEF_DKIM_WL 2436 9.55 1.99 12.61 119 T_XMDrugObfuBody_00 2419 1.26 1.98 0.96 120 RCVD_IN_SBL_CSS 2376 0.60 1.95 0.05 121 XM_UB99 2268 0.54 1.86 0.00 122 RCVD_IN_VALIDITY_SAFE 2199 3.23 1.80 3.81 123 RCVD_IN_PBL 2183 1.06 1.79 0.76 124 SpammyFromTLD_02 2154 0.66 1.76 0.22 125 BAYES_40 2140 5.00 1.75 6.32 126 TR_XM_MaxSPIKE 2126 0.53 1.74 0.04 127 XMPhish30 2065 0.81 1.69 0.45 128 XMGenDplmaNmb 2053 1.01 1.68 0.74 129 XMBrknScrpt_02 2041 1.16 1.67 0.95 130 XM_HighProb1 2027 0.48 1.66 0.00 131 MultiRelay_CC 1970 0.59 1.61 0.17 132 XM_ProductURIs 1952 0.83 1.60 0.52 133 SHORTCIRCUIT 1934 0.46 1.58 0.00 134 RCVD_IN_ZEN_LASTEXTERNAL 1934 0.46 1.58 0.00 135 THIS_AD 1925 0.78 1.58 0.46 136 URI_HEX 1917 1.32 1.57 1.22 137 SpammyFromTLD_01 1904 0.88 1.56 0.60 138 RCVD_IN_MSPIKE_L4 1902 0.51 1.56 0.09 139 XMBdyGiftCard01 1901 0.98 1.56 0.75 140 TR_XM_InvalidRelay 1897 0.45 1.55 0.01 141 XMBounce_01 1869 0.45 1.53 0.01 142 RELAYCOUNTRY_FR 1843 0.66 1.51 0.31 143 T_REMOTE_IMAGE 1824 3.01 1.49 3.63 144 RCVD_IN_IADB_LISTED 1824 2.55 1.49 2.98 145 T_Symld_Words_02 1792 0.96 1.47 0.76 146 TR_LOTS_OF_MONEY3 1780 0.62 1.46 0.29 147 XM_SendGrid 1773 1.50 1.45 1.52 148 URI_TRY_3LD 1771 0.64 1.45 0.31 149 XM_B_SEO 1753 0.56 1.44 0.21 150 RDNS_DYNAMIC 1752 0.53 1.43 0.16 151 HTML_MIME_NO_HTML_TAG 1714 2.41 1.40 2.82 152 TR_XM_RelayPhish 1683 0.45 1.38 0.07 153 DIET_1 1659 0.58 1.36 0.27 154 BOTNET_NORDNS 1653 0.39 1.35 0.00 155 XM_UB60 1641 0.43 1.34 0.07 156 XMSubMetaI_00 1639 0.84 1.34 0.64 157 HTML_FONT_TINY_NORDNS 1626 0.42 1.33 0.05 158 RCVD_IN_VALIDITY_CERTIFIED 1564 2.64 1.28 3.19 159 ALL_TRUSTED 1562 13.37 1.28 18.27 160 TR_Caps_n_Bayes_99 1556 0.38 1.27 0.01 161 XM_UB80 1550 0.38 1.27 0.02 162 RCVD_IN_PSBL 1545 0.37 1.27 0.01 163 RCVD_IN_IADB_SPF 1523 2.21 1.25 2.60 164 TR_XM_Base64_M1 1496 0.87 1.22 0.72 165 XM_UB999 1490 0.35 1.22 0.00 166 DKIM_ADSP_CUSTOM_MED 1489 0.94 1.22 0.82 167 URI_NOVOWEL 1478 1.13 1.21 1.10 168 MPART_ALT_DIFF_COUNT 1468 0.75 1.20 0.56 169 T_MONEY_PERCENT 1454 0.50 1.19 0.22 170 TR_LOTS_OF_MONEY2 1454 0.50 1.19 0.22 171 TR_XM_Spammywords 1448 0.48 1.19 0.20 172 XM_S_SpammyWords 1448 0.48 1.19 0.20 173 STY_INVIS_DIRECT 1448 0.56 1.19 0.30 174 SHOPIFY_IMG_NOT_RCVD_SFY 1401 0.53 1.15 0.28 175 MISSING_HEADERS 1390 0.60 1.14 0.39 176 RCVD_IN_IADB_DK 1383 1.92 1.13 2.24 177 SUBJ_DOLLARS 1379 0.49 1.13 0.23 178 TR_Symld_Words 1373 1.44 1.12 1.57 179 TR_XM_SEO4 1362 0.40 1.12 0.11 180 BAYES_20 1353 5.93 1.11 7.89 181 RCVD_IN_IADB_SENDERID 1353 1.98 1.11 2.34 182 TVD_RCVD_IP 1346 1.05 1.10 1.03 183 MIME_CHARSET_FARAWAY 1300 1.66 1.06 1.90 184 XM_B_DNDMA 1293 0.76 1.06 0.64 185 TR_XM_GMP_BULK_SIG 1278 0.38 1.05 0.11 186 TM2_M_OBFU_COMMENT 1263 0.52 1.03 0.31 187 XMReplyNow 1250 0.52 1.02 0.31 188 XM_DK_Undo_01 1240 1.41 1.02 1.58 189 NML_ADSP_CUSTOM_MED 1233 0.62 1.01 0.46 190 XM_H_Long_From02 1218 0.77 1.00 0.68 191 XM_B_COPY_HTML 1205 0.85 0.99 0.80 192 TM2_M_A_HREF_HREF 1185 0.50 0.97 0.30 193 HTML_TAG_BALANCE_BODY 1180 0.65 0.97 0.52 194 TR_XM_PHPForged 1167 0.50 0.96 0.32 195 XMHTML_After_End 1165 0.56 0.95 0.40 196 HELO_DYNAMIC_SPLIT_IP 1152 0.28 0.94 0.01 197 HTML_IMAGE_ONLY_20 1148 0.75 0.94 0.67 198 XM_DIRTYINTL 1147 0.32 0.94 0.07 199 TR_XM_FormFill2 1145 0.50 0.94 0.32 200 RCVD_IN_IADB_VOUCHED 1140 1.69 0.93 2.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 252542 86.79 94.20 83.79 2 RELAYCOUNTRY_US 236986 78.82 79.30 78.63 3 DKIM_SIGNED 217068 76.73 88.37 72.02 4 XM_DK_Pass 213436 74.59 83.91 70.81 5 DKIM_VALID 210357 73.64 83.12 69.79 6 XM_B_Unicode 204349 72.08 82.66 67.80 7 DCC_CHECK_NEGATIVE 190382 52.50 26.17 63.17 8 BAYES_50 175095 52.15 37.50 58.09 9 DKIM_VALID_AU 172739 59.96 66.49 57.31 10 XMListUnsubscribeExists 136757 51.31 65.95 45.37 11 XM_B_SpammyWords 128545 49.78 67.37 42.65 12 XM_B_Unicode3 122228 42.98 48.98 40.55 13 DCC_CHECK 110854 47.00 72.22 36.78 14 T_TM2_M_HEADER_IN_MSG 96676 29.48 23.06 32.08 15 DKIM_VALID_EF 88089 29.51 30.21 29.23 16 HTML_FONT_LOW_CONTRAST 88007 30.82 34.83 29.20 17 LOC_TINY_FONT_1 82916 33.16 47.12 27.51 18 FVGT_m_MULTI_ODD 71520 26.25 32.47 23.73 19 XMSubLong 69955 23.43 23.96 23.21 20 T_KAM_HTML_FONT_INVALID 59571 23.06 31.20 19.76 21 MIME_HTML_ONLY 57710 22.37 30.33 19.15 22 ALL_TRUSTED 55060 13.37 1.28 18.27 23 RCVD_IN_MSPIKE_WL 54594 16.15 11.32 18.11 24 XM_B_SpammyWords2 52826 23.30 37.55 17.53 25 RCVD_IN_MSPIKE_H2 46418 16.53 19.31 15.40 26 TR_XM_DK_Unsub 38594 15.13 20.86 12.80 27 XM_Multi_Part_URI 38508 14.97 20.40 12.78 28 USER_IN_DEF_DKIM_WL 38015 9.55 1.99 12.61 29 UNPARSEABLE_RELAY 35961 13.49 17.33 11.93 30 ANY_BOUNCE_MESSAGE 32766 8.63 3.11 10.87 31 BOUNCE_MESSAGE 32763 8.63 3.11 10.87 32 XM_Evil_Numbers_Gen 30022 9.74 9.18 9.96 33 BAYES_00 29430 7.10 0.53 9.76 34 XM_B_PhoneNumber 28019 8.32 5.90 9.30 35 RCVD_IN_MSPIKE_H3 25260 7.62 5.75 8.38 36 XM_B_Unsub 24637 11.54 19.86 8.17 37 BAYES_20 23767 5.93 1.11 7.89 38 TooManyTo_001 23402 7.24 5.93 7.76 39 FSL_BULK_SIG 22862 8.45 10.59 7.59 40 LotsOfNums_01 22328 6.78 5.23 7.41 41 TR_XM_DK_Bayes 21316 5.11 0.26 7.07 42 TR_XM_DK_Bayes1 21053 5.04 0.26 6.98 43 TR_XM_BayesUnsub 20016 10.23 19.07 6.64 44 T_TooManySym_01 19506 5.48 3.05 6.47 45 BAYES_60 19196 6.83 7.98 6.37 46 BAYES_40 19042 5.00 1.75 6.32 47 RCVD_IN_MSPIKE_H5 18831 5.23 2.71 6.25 48 XM_DKIMWhitelistDomains 18563 4.40 0.05 6.16 49 XM_H_GMP 17443 5.74 5.61 5.79 50 TR_XM_DK_Bayes2 17252 4.13 0.19 5.72 51 TR_MAX_INTL_RELAY 17162 8.58 15.70 5.69 52 LOTS_OF_MONEY 16302 7.65 13.18 5.41 53 XM_H_Long_From01 15458 5.27 5.64 5.13 54 XM_B_SpammyWords3 14882 7.59 14.13 4.94 55 XMStrtUSub 14222 4.36 3.48 4.72 56 TM2_M_VERY_LONG_WORD 14194 4.58 4.25 4.71 57 MIME_QP_LONG_LINE 14075 4.55 4.27 4.67 58 XM_DK_Undo_02 13952 15.43 42.09 4.63 59 XM_B_Phish_Phrases 13853 5.52 7.78 4.60 60 HTML_IMAGE_RATIO_02 13775 4.88 5.63 4.57 61 MPART_ALT_DIFF 13034 4.72 5.68 4.32 62 XM_PDF 12977 3.29 0.80 4.31 63 XM_UncommonTLD01 12112 4.41 5.39 4.02 64 HTML_IMAGE_RATIO_04 11664 3.91 4.02 3.87 65 RCVD_IN_VALIDITY_SAFE 11474 3.23 1.80 3.81 66 T_REMOTE_IMAGE 10944 3.01 1.49 3.63 67 RELAYCOUNTRY_META 10707 8.29 19.97 3.55 68 BAYES_80 10618 5.26 9.53 3.52 69 TR_XM_SpammyWords4 10516 5.75 11.32 3.49 70 RCVD_IN_MSPIKE_H4 10503 3.30 2.86 3.48 71 BAYES_99 10433 12.21 33.80 3.46 72 T_TooManySym_02 10278 2.64 0.75 3.41 73 MAILING_LIST_MULTI 10258 3.01 2.04 3.40 74 XMNumbers 9991 3.52 4.01 3.31 75 RCVD_IN_VALIDITY_CERTIFIED 9610 2.64 1.28 3.19 76 BOTNET_IPINHOSTNAME 9108 5.58 11.89 3.02 77 RCVD_IN_IADB_LISTED 8981 2.55 1.49 2.98 78 KHOP_HELO_FCRDNS 8894 2.88 2.71 2.95 79 HTML_MIME_NO_HTML_TAG 8493 2.41 1.40 2.82 80 HTML_IMAGE_RATIO_06 8398 2.96 3.38 2.79 81 XMSubMetaSx_00 8313 3.65 5.87 2.76 82 BAYES_999 7909 9.40 26.11 2.62 83 RCVD_IN_IADB_SPF 7850 2.21 1.25 2.60 84 TooManyTo_002 7749 2.01 0.62 2.57 85 XM_B_SpammyTLD 7292 2.94 4.21 2.42 86 BAYES_05 7281 1.91 0.66 2.42 87 MIME_HTML_MOSTLY 7071 2.79 3.88 2.35 88 RCVD_IN_IADB_SENDERID 7038 1.98 1.11 2.34 89 INVALID_MSGID 7014 1.72 0.22 2.33 90 HTML_IMAGE_RATIO_08 6824 2.32 2.45 2.26 91 RCVD_IN_IADB_DK 6750 1.92 1.13 2.24 92 MIME_HTML_ONLY_MULTI 6745 2.45 2.97 2.24 93 DKIM_INVALID 6711 3.10 5.25 2.23 94 BAYES_95 6542 3.14 5.55 2.17 95 MSGID_NOFQDN1 6379 1.51 0.02 2.12 96 TO_MALFORMED 6322 1.50 0.02 2.10 97 XM_Body_Dirty_Words 6199 2.93 5.09 2.06 98 RCVD_IN_IADB_VOUCHED 6035 1.69 0.93 2.00 99 T_XMDrugObfuBody_08 5920 2.57 4.06 1.96 100 FROM_EXCESS_BASE64 5767 2.06 2.44 1.91 101 MIME_CHARSET_FARAWAY 5741 1.66 1.06 1.90 102 CHARSET_FARAWAY_HEADER 5507 1.55 0.87 1.83 103 TR_XM_SpammyRelay 5375 5.04 13.06 1.78 104 TR_XM_DKIM_Undo 5316 9.85 29.81 1.76 105 TM2_M_URI_OPT_OUT 5300 1.92 2.31 1.76 106 T_XMDrugObfuBody_14 5294 2.41 4.01 1.76 107 XM_B_URI_Unicode 5230 2.09 2.96 1.74 108 TooManyTo_003 5009 1.34 0.53 1.66 109 XM_CamelCaseFrm001 4857 2.05 3.13 1.61 110 XM_DK_Undo_01 4750 1.41 1.02 1.58 111 TR_Symld_Words 4740 1.44 1.12 1.57 112 UNTRUSTED_Relay 4697 3.60 8.64 1.56 113 XM_SendGrid 4574 1.50 1.45 1.52 114 XM_GoogleGroups 4407 1.30 0.91 1.46 115 RCVD_IN_IADB_OPTIN 4399 1.23 0.68 1.46 116 XM_B_Investor 4382 2.45 4.91 1.45 117 T_TooManySym_03 4326 1.07 0.18 1.44 118 TR_XM_UnparsRelay 4291 3.73 9.42 1.42 119 SUBJ_ALL_CAPS 4212 1.81 2.83 1.40 120 XMDiploma_00 4163 1.73 2.59 1.38 121 TR_XM_PhishingBody 4132 2.12 3.98 1.37 122 TooManyTo_004 3973 1.07 0.45 1.32 123 XMStockSpam_06 3972 1.54 2.09 1.32 124 TR_XM_SpammyWords5 3969 2.01 3.71 1.32 125 XMLngstWrd_00 3795 1.01 0.38 1.26 126 IN_HORDE_ADDRESS_BOOK 3735 0.91 0.10 1.24 127 HELO_NODOT 3721 1.01 0.47 1.23 128 HELO_NO_DOMAIN 3715 1.01 0.46 1.23 129 XMCapTrack 3708 1.03 0.52 1.23 130 URI_HEX 3666 1.32 1.57 1.22 131 XM_SPF_SoftFail 3636 1.85 3.45 1.21 132 TR_DCC_Bayes_99 3435 7.64 23.69 1.14 133 URI_NOVOWEL 3318 1.13 1.21 1.10 134 TooManyTo_005 3282 0.89 0.39 1.09 135 TR_XM_DK_SendGrid 3220 1.02 0.89 1.07 136 XM_ShortIntro_01 3219 0.95 0.64 1.07 137 XM_B_Unsub2 3163 1.57 2.87 1.05 138 XMGappySubj_01 3132 0.80 0.19 1.04 139 TVD_RCVD_IP 3102 1.05 1.10 1.03 140 XM_UB50 3094 1.56 2.88 1.03 141 BOTNET 3064 3.94 11.15 1.02 142 TR_XM_MSPIKECOMBO 3046 2.56 6.39 1.01 143 RCVD_IN_MSPIKE_BL 3046 2.56 6.39 1.01 144 XMNoVowels 3013 0.86 0.50 1.00 145 XMSexyCombo_05 2933 1.88 4.13 0.97 146 T_XMDrugObfuBody_00 2901 1.26 1.98 0.96 147 TVD_SPACE_RATIO 2891 0.76 0.26 0.96 148 T_FILL_THIS_FORM_SHORT 2880 1.46 2.71 0.96 149 XMBrknScrpt_02 2862 1.16 1.67 0.95 150 RCVD_IN_MSPIKE_L3 2749 1.94 4.49 0.91 151 XM_OfRef6 2683 1.72 3.76 0.89 152 TO_NO_BRKTS_HTML_ONLY 2507 0.63 0.14 0.83 153 DKIM_ADSP_CUSTOM_MED 2476 0.94 1.22 0.82 154 XM_B_COPY_HTML 2413 0.85 0.99 0.80 155 T_TVD_MIME_NO_HEADERS 2299 0.56 0.05 0.76 156 RCVD_IN_PBL 2290 1.06 1.79 0.76 157 T_Symld_Words_02 2288 0.96 1.47 0.76 158 XMBdyGiftCard01 2255 0.98 1.56 0.75 159 HTTPS_HTTP_MISMATCH 2239 0.79 0.90 0.74 160 RELAYCOUNTRY_CA 2239 2.50 6.85 0.74 161 XMGenDplmaNmb 2232 1.01 1.68 0.74 162 TR_XM_Base64_M1 2168 0.87 1.22 0.72 163 RELAYCOUNTRY_GB 2129 0.76 0.88 0.71 164 XMBSHREFv2 2119 0.59 0.31 0.70 165 TR_MetaPhish_Combo_01 2084 0.75 0.88 0.69 166 XM_H_PHPMailer 2070 0.62 0.45 0.69 167 XM_H_Long_From02 2058 0.77 1.00 0.68 168 HTML_IMAGE_ONLY_20 2023 0.75 0.94 0.67 169 XMGappySubj_02 1955 0.47 0.04 0.65 170 XM_B_DNDMA 1941 0.76 1.06 0.64 171 XMSubMetaI_00 1925 0.84 1.34 0.64 172 T_XMHurry_00 1877 1.02 2.00 0.62 173 SpammyFromTLD_01 1811 0.88 1.56 0.60 174 T_OBFU_PDF_ATTACH 1785 0.46 0.12 0.59 175 RELAYCOUNTRY_AU 1730 1.23 2.84 0.57 176 MPART_ALT_DIFF_COUNT 1702 0.75 1.20 0.56 177 TR_XM_SpammyWords3 1660 1.67 4.44 0.55 178 XMBody_17 1651 1.52 3.92 0.55 179 RCVD_IN_BL_SPAMCOP_NET 1586 3.66 11.39 0.53 180 XM_ProductURIs 1563 0.83 1.60 0.52 181 HTML_TAG_BALANCE_BODY 1559 0.65 0.97 0.52 182 MSGID_FROM_MTA_HEADER 1552 0.53 0.56 0.51 183 FORGED_GMAIL_RCVD 1501 0.62 0.92 0.50 184 XM_B_SpammyWords4 1450 1.13 2.75 0.48 185 TR_XM_SpammyWords2 1419 3.33 10.40 0.47 186 PLING_QUERY 1414 0.53 0.68 0.47 187 TR_XM_GMP_MSPIKE_UNDO2 1410 0.40 0.22 0.47 188 T_TooManySym_04 1405 0.34 0.03 0.47 189 NML_ADSP_CUSTOM_MED 1393 0.62 1.01 0.46 190 XMSlimDrugH 1392 0.53 0.70 0.46 191 THIS_AD 1378 0.78 1.58 0.46 192 XMPhish30 1355 0.81 1.69 0.45 193 HTML_IMAGE_ONLY_32 1330 0.39 0.26 0.44 194 XMSubMetaSxObfu_03 1293 0.49 0.63 0.43 195 XMLngstWrd_01 1280 0.40 0.35 0.42 196 XMDateMe_00 1272 0.43 0.44 0.42 197 XMHTML_After_End 1200 0.56 0.95 0.40 198 LongTLD 1173 0.42 0.49 0.39 199 FILL_THIS_FORM 1165 0.53 0.88 0.39 200 MISSING_HEADERS 1163 0.60 1.14 0.39 ----------------------------------------------------------------------