Email: 494435 Autolearn: 0 AvgScore: 5.31 AvgScanTime: 1.36 sec Spam: 153699 Autolearn: 0 AvgScore: 14.25 AvgScanTime: 1.49 sec Ham: 340736 Autolearn: 0 AvgScore: 1.28 AvgScanTime: 1.31 sec Time Spent Running SA: 187.16 hours Time Spent Processing Spam: 63.64 hours Time Spent Processing Ham: 123.52 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143952 89.65 93.66 87.84 2 DKIM_SIGNED 134162 77.55 87.29 73.15 3 XM_DK_Pass 128464 75.49 83.58 71.84 4 DKIM_VALID 127370 74.59 82.87 70.86 5 XM_B_Unicode 126585 73.85 82.36 70.02 6 RELAYCOUNTRY_US 123759 82.50 80.52 83.40 7 DCC_CHECK 106509 45.51 69.30 34.78 8 DKIM_VALID_AU 101274 61.28 65.89 59.21 9 XM_B_SpammyWords 99888 51.60 64.99 45.56 10 XMListUnsubscribeExists 97357 52.60 63.34 47.76 11 LOC_TINY_FONT_1 71754 34.27 46.68 28.67 12 XM_B_Unicode3 69530 42.92 45.24 41.87 13 XM_DK_Undo_02 62958 16.19 40.96 5.01 14 BAYES_50 62513 55.17 40.67 61.72 15 HTML_FONT_LOW_CONTRAST 58689 34.30 38.18 32.54 16 XM_B_SpammyWords2 56909 24.58 37.03 18.96 17 FVGT_m_MULTI_ODD 53044 29.94 34.51 27.87 18 BAYES_99 49129 12.31 31.96 3.45 19 DKIM_VALID_EF 48311 30.15 31.43 29.58 20 DCC_CHECK_NEGATIVE 45394 54.08 29.53 65.15 21 TR_XM_DKIM_Undo 44048 10.41 28.66 2.17 22 MIME_HTML_ONLY 43888 21.45 28.55 18.24 23 T_KAM_HTML_FONT_INVALID 43404 23.28 28.24 21.04 24 XMSubLong 40713 25.30 26.49 24.77 25 XM_Multi_Part_URI 37617 16.65 24.47 13.13 26 BAYES_999 36546 9.16 23.78 2.57 27 T_TM2_M_HEADER_IN_MSG 35504 30.16 23.10 33.34 28 TR_XM_DK_Unsub 32867 16.27 21.38 13.96 29 TR_DCC_Bayes_99 32411 7.57 21.09 1.47 30 RCVD_IN_MSPIKE_H2 32363 18.47 21.06 17.30 31 XM_B_Unsub 29267 11.72 19.04 8.41 32 TR_XM_BayesUnsub 27872 9.98 18.13 6.30 33 UNPARSEABLE_RELAY 27620 13.67 17.97 11.73 34 RELAYCOUNTRY_META 26951 7.85 17.53 3.48 35 TR_MAX_INTL_RELAY 21650 9.03 14.09 6.75 36 XM_B_SpammyWords3 20422 7.71 13.29 5.19 37 BOTNET_IPINHOSTNAME 18182 5.84 11.83 3.13 38 RCVD_IN_BL_SPAMCOP_NET 17144 3.91 11.15 0.64 39 LOTS_OF_MONEY 17062 7.25 11.10 5.52 40 RCVD_IN_MSPIKE_WL 16884 17.16 10.99 19.94 41 TR_XM_SpammyRelay 16445 4.59 10.70 1.83 42 TR_XM_SpammyWords2 15873 3.61 10.33 0.58 43 BOTNET 15840 4.11 10.31 1.31 44 TR_XM_SpammyWords4 15591 5.66 10.14 3.63 45 XM_Evil_Numbers_Gen 14377 10.70 9.35 11.31 46 TR_XM_UnparsRelay 13882 3.91 9.03 1.59 47 FSL_BULK_SIG 13499 5.52 8.78 4.05 48 BAYES_80 13216 5.57 8.60 4.20 49 BAYES_60 12885 7.66 8.38 7.33 50 XM_UncommonTLD01 12336 5.08 8.03 3.76 51 XM_B_Phish_Phrases 12178 5.57 7.92 4.51 52 TR_XM_PhishingBody 10935 3.20 7.11 1.44 53 TR_XM_SPAMCOP 10128 2.22 6.59 0.24 54 LotsOfNums_01 9799 10.43 6.38 12.26 55 XM_B_PhoneNumber 9106 9.05 5.92 10.45 56 UNTRUSTED_Relay 9001 2.85 5.86 1.49 57 XMSubMetaSx_00 8845 4.03 5.75 3.25 58 RCVD_IN_MSPIKE_BL 8728 2.54 5.68 1.12 59 TR_XM_MSPIKECOMBO 8715 2.54 5.67 1.12 60 HTML_IMAGE_RATIO_02 8519 4.70 5.54 4.33 61 XM_H_GMP 8499 6.15 5.53 6.43 62 XM_H_Long_From01 8193 5.22 5.33 5.16 63 RELAYCOUNTRY_CA 8156 2.12 5.31 0.68 64 RCVD_IN_MSPIKE_H3 8045 7.65 5.23 8.74 65 T_TooManySym_01 7886 5.36 5.13 5.47 66 MPART_ALT_DIFF 7836 4.77 5.10 4.61 67 BAYES_95 7815 3.34 5.08 2.56 68 ALL_TRUSTED 7504 10.88 4.88 13.58 69 XM_B_Investor 7313 2.57 4.76 1.58 70 T_XMDrugObfuBody_14 7304 2.47 4.75 1.44 71 XM_Body_Dirty_Words 7023 2.72 4.57 1.89 72 XM_B_SpammyTLD 6815 3.15 4.43 2.58 73 DKIM_INVALID 6792 2.95 4.42 2.29 74 HTML_IMAGE_RATIO_08 6584 2.92 4.28 2.30 75 TR_XM_SpammyWords3 6447 1.70 4.19 0.57 76 HTML_IMAGE_RATIO_04 6360 4.42 4.14 4.55 77 XM_SPF_SoftFail 6163 2.10 4.01 1.24 78 TM2_M_VERY_LONG_WORD 5992 5.67 3.90 6.47 79 XMStrtUSub 5863 4.37 3.81 4.62 80 XM_B_Unsub2 5784 2.05 3.76 1.27 81 TR_XM_SpammyWords5 5594 1.95 3.64 1.19 82 XMNumbers 5592 3.44 3.64 3.36 83 T_XMDrugObfuBody_08 5458 2.26 3.55 1.67 84 HTML_IMAGE_RATIO_06 5223 3.05 3.40 2.89 85 RCVD_IN_MSPIKE_L3 5047 1.67 3.28 0.95 86 T_TooManySym_02 4995 2.96 3.25 2.84 87 MIME_HTML_MOSTLY 4908 2.94 3.19 2.83 88 XM_OfRef6 4744 1.48 3.09 0.76 89 XMSexyCombo_05 4741 1.67 3.08 1.03 90 XM_CamelCaseFrm001 4671 2.13 3.04 1.72 91 TooManyTo_001 4600 5.85 2.99 7.14 92 RCVD_IN_MSPIKE_H5 4555 5.64 2.96 6.85 93 RELAYCOUNTRY_NL 4297 0.93 2.80 0.08 94 URI_GOOGLE_PROXY 4294 0.89 2.79 0.03 95 RCVD_IN_MSPIKE_H4 4284 3.87 2.79 4.36 96 XMDiploma_00 4261 1.92 2.77 1.54 97 T_TooManySym_03 4244 1.64 2.76 1.13 98 XMBody_17 4075 1.17 2.65 0.50 99 XM_UB50 4074 1.51 2.65 0.99 100 XMPhish03 4049 0.82 2.63 0.00 101 TR_XM_SpoofStaff 4012 0.90 2.61 0.13 102 XMSpoofStaff2 4000 0.90 2.60 0.13 103 MIME_HTML_ONLY_MULTI 3937 2.32 2.56 2.20 104 XM_URI_RBL 3932 1.01 2.56 0.31 105 RELAYCOUNTRY_AU 3921 1.17 2.55 0.54 106 TR_XM_NoHeaderRelay 3912 0.87 2.55 0.12 107 HTML_MIME_NO_HTML_TAG 3912 2.63 2.55 2.67 108 TR_XM_SpoofStaff2 3855 0.78 2.51 0.00 109 USER_IN_DEF_DKIM_WL 3838 8.77 2.50 11.60 110 MIME_QP_LONG_LINE 3827 4.30 2.49 5.11 111 XM_B_URI_Unicode 3632 2.00 2.36 1.84 112 XM_B_SpammyWords4 3578 0.99 2.33 0.39 113 T_XMHurry_00 3454 1.18 2.25 0.70 114 TM2_M_URI_OPT_OUT 3452 1.97 2.25 1.84 115 TR_XM_INV_DKIM 3364 0.69 2.19 0.01 116 MAILING_LIST_MULTI 3354 2.83 2.18 3.12 117 T_FILL_THIS_FORM_SHORT 3250 1.36 2.11 1.01 118 TM2_M_BODY_EMPTY 3083 1.22 2.01 0.86 119 XMStockSpam_06 3051 1.41 1.99 1.15 120 XMEmptyBody_01 2991 0.93 1.95 0.47 121 TR_XM_MSPIKECOMBO2 2986 0.68 1.94 0.11 122 XMBrknScrpt_02 2966 1.23 1.93 0.92 123 TR_Symld_Words 2924 1.62 1.90 1.50 124 TR_LOTS_OF_MONEY3 2905 0.91 1.89 0.47 125 URI_TRY_3LD 2901 0.89 1.89 0.44 126 SUBJ_ALL_CAPS 2731 1.53 1.78 1.42 127 XMGenDplmaNmb 2687 1.15 1.75 0.87 128 KHOP_HELO_FCRDNS 2670 4.30 1.74 5.46 129 TR_XM_INTL_Spamhaus 2629 0.65 1.71 0.16 130 SpammyFromTLD_02 2601 0.83 1.69 0.44 131 RCVD_IN_VALIDITY_RPBL 2582 0.58 1.68 0.08 132 RCVD_IN_MSPIKE_L4 2582 0.63 1.68 0.15 133 HTML_FONT_TINY_NORDNS 2553 0.56 1.66 0.06 134 BAYES_40 2521 4.57 1.64 5.89 135 XMPhish30 2486 0.75 1.62 0.36 136 RCVD_IN_PSBL 2456 0.52 1.60 0.03 137 RCVD_IN_IADB_LISTED 2429 2.83 1.58 3.40 138 MPART_ALT_DIFF_COUNT 2408 0.82 1.57 0.49 139 FROM_EXCESS_BASE64 2381 1.56 1.55 1.57 140 URI_HEX 2350 1.32 1.53 1.23 141 HK_RANDOM_REPLYTO 2342 0.55 1.52 0.10 142 XM_SendGrid 2331 1.55 1.52 1.56 143 SpammyFromTLD_01 2311 0.99 1.50 0.76 144 RCVD_IN_VALIDITY_SAFE 2302 3.02 1.50 3.71 145 XM_H_Long_From02 2232 1.07 1.45 0.89 146 TR_XM_MaxSPIKE 2224 0.49 1.45 0.06 147 T_XMDrugObfuBody_00 2196 0.97 1.43 0.76 148 XM_B_Phish66 2144 0.69 1.39 0.37 149 T_REMOTE_IMAGE 2122 2.68 1.38 3.27 150 STY_INVIS_DIRECT 2118 0.55 1.38 0.17 151 RDNS_DYNAMIC 2082 0.52 1.35 0.14 152 RCVD_IN_XBL 2081 0.44 1.35 0.02 153 RELAYCOUNTRY_FR 2076 0.65 1.35 0.33 154 XM_B_DNDMA 2044 0.71 1.33 0.43 155 RCVD_IN_PBL 2009 0.88 1.31 0.68 156 XMBody_78 1969 0.59 1.28 0.28 157 BAYES_20 1964 3.01 1.28 3.79 158 XM_DK_Undo_01 1946 1.50 1.27 1.61 159 XM_B_SEO 1946 0.55 1.27 0.22 160 RCVD_IN_IADB_SPF 1926 2.48 1.25 3.04 161 DIET_1 1903 0.63 1.24 0.35 162 URI_NOVOWEL 1853 1.18 1.21 1.17 163 BOTNET_NORDNS 1781 0.37 1.16 0.01 164 HTTPS_HTTP_MISMATCH 1768 0.81 1.15 0.65 165 RCVD_IN_IADB_DK 1746 2.18 1.14 2.65 166 SHORTCIRCUIT 1744 0.35 1.13 0.00 167 RCVD_IN_ZEN_LASTEXTERNAL 1744 0.35 1.13 0.00 168 XM_ProductURIs 1731 0.72 1.13 0.54 169 ANY_BOUNCE_MESSAGE 1720 7.63 1.12 10.57 170 BOUNCE_MESSAGE 1720 7.63 1.12 10.57 171 RCVD_IN_IADB_SENDERID 1713 2.24 1.11 2.74 172 SHOPIFY_IMG_NOT_RCVD_SFY 1707 0.51 1.11 0.24 173 TVD_RCVD_IP 1684 0.89 1.10 0.79 174 NUMERIC_HTTP_ADDR 1667 0.47 1.08 0.19 175 THIS_AD 1663 0.55 1.08 0.31 176 TR_XM_SEO4 1650 0.39 1.07 0.08 177 RCVD_IN_SBL_CSS 1638 0.35 1.07 0.03 178 RCVD_IN_IADB_VOUCHED 1621 1.79 1.05 2.12 179 XM_UB99 1598 0.32 1.04 0.00 180 RCVD_IN_VALIDITY_CERTIFIED 1555 2.51 1.01 3.19 181 MultiRelay_CC 1553 0.40 1.01 0.12 182 XMSubMetaI_00 1544 0.60 1.00 0.42 183 TM2_M_OBFU_COMMENT 1519 0.41 0.99 0.15 184 DKIM_ADSP_CUSTOM_MED 1501 0.86 0.98 0.81 185 TR_XM_GMP_BULK_SIG 1495 0.39 0.97 0.12 186 T_Symld_Words_02 1484 0.78 0.97 0.70 187 XM_B_COPY_HTML 1440 0.65 0.94 0.52 188 XM_HighProb1 1435 0.29 0.93 0.00 189 TM2_M_A_HREF_HREF 1429 0.46 0.93 0.25 190 XM_GoogleGroups 1390 1.21 0.90 1.34 191 XM_PDF 1379 3.41 0.90 4.54 192 TR_XM_PHPForged 1362 0.46 0.89 0.27 193 TR_XM_FormFill2 1355 0.46 0.88 0.27 194 TR_XM_DK_SendGrid 1350 1.05 0.88 1.13 195 RELAYCOUNTRY_GB 1327 0.79 0.86 0.76 196 TR_XM_PHPDW 1326 0.45 0.86 0.27 197 TR_Mismatch_TLD_02 1322 0.34 0.86 0.10 198 HTML_IMAGE_ONLY_20 1321 0.62 0.86 0.51 199 XM_H_PHPOS 1315 0.44 0.86 0.26 200 HELO_DYNAMIC_SPLIT_IP 1293 0.27 0.84 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 299297 89.65 93.66 87.84 2 RELAYCOUNTRY_US 284163 82.50 80.52 83.40 3 DKIM_SIGNED 249255 77.55 87.29 73.15 4 XM_DK_Pass 244801 75.49 83.58 71.84 5 DKIM_VALID 241453 74.59 82.87 70.86 6 XM_B_Unicode 238569 73.85 82.36 70.02 7 DCC_CHECK_NEGATIVE 221988 54.08 29.53 65.15 8 BAYES_50 210289 55.17 40.67 61.72 9 DKIM_VALID_AU 201736 61.28 65.89 59.21 10 XMListUnsubscribeExists 162721 52.60 63.34 47.76 11 XM_B_SpammyWords 155226 51.60 64.99 45.56 12 XM_B_Unicode3 142674 42.92 45.24 41.87 13 DCC_CHECK 118496 45.51 69.30 34.78 14 T_TM2_M_HEADER_IN_MSG 113609 30.16 23.10 33.34 15 HTML_FONT_LOW_CONTRAST 110881 34.30 38.18 32.54 16 DKIM_VALID_EF 100784 30.15 31.43 29.58 17 LOC_TINY_FONT_1 97696 34.27 46.68 28.67 18 FVGT_m_MULTI_ODD 94980 29.94 34.51 27.87 19 XMSubLong 84401 25.30 26.49 24.77 20 T_KAM_HTML_FONT_INVALID 71678 23.28 28.24 21.04 21 RCVD_IN_MSPIKE_WL 67956 17.16 10.99 19.94 22 XM_B_SpammyWords2 64619 24.58 37.03 18.96 23 MIME_HTML_ONLY 62160 21.45 28.55 18.24 24 RCVD_IN_MSPIKE_H2 58960 18.47 21.06 17.30 25 TR_XM_DK_Unsub 47579 16.27 21.38 13.96 26 ALL_TRUSTED 46278 10.88 4.88 13.58 27 XM_Multi_Part_URI 44729 16.65 24.47 13.13 28 LotsOfNums_01 41761 10.43 6.38 12.26 29 UNPARSEABLE_RELAY 39955 13.67 17.97 11.73 30 USER_IN_DEF_DKIM_WL 39510 8.77 2.50 11.60 31 XM_Evil_Numbers_Gen 38552 10.70 9.35 11.31 32 ANY_BOUNCE_MESSAGE 36010 7.63 1.12 10.57 33 BOUNCE_MESSAGE 36010 7.63 1.12 10.57 34 XM_B_PhoneNumber 35623 9.05 5.92 10.45 35 BAYES_00 30428 6.36 0.67 8.93 36 RCVD_IN_MSPIKE_H3 29776 7.65 5.23 8.74 37 XM_B_Unsub 28672 11.72 19.04 8.41 38 BAYES_60 24985 7.66 8.38 7.33 39 TooManyTo_001 24344 5.85 2.99 7.14 40 RCVD_IN_MSPIKE_H5 23340 5.64 2.96 6.85 41 TR_MAX_INTL_RELAY 23014 9.03 14.09 6.75 42 TM2_M_VERY_LONG_WORD 22057 5.67 3.90 6.47 43 XM_H_GMP 21909 6.15 5.53 6.43 44 TR_XM_DK_Bayes 21597 4.55 0.58 6.34 45 TR_XM_BayesUnsub 21460 9.98 18.13 6.30 46 TR_XM_DK_Bayes1 21246 4.47 0.57 6.24 47 BAYES_40 20071 4.57 1.64 5.89 48 XM_DKIMWhitelistDomains 19803 4.01 0.02 5.81 49 LOTS_OF_MONEY 18807 7.25 11.10 5.52 50 T_TooManySym_01 18622 5.36 5.13 5.47 51 KHOP_HELO_FCRDNS 18610 4.30 1.74 5.46 52 TR_XM_DK_Bayes2 18514 3.90 0.50 5.43 53 XM_B_SpammyWords3 17675 7.71 13.29 5.19 54 XM_H_Long_From01 17594 5.22 5.33 5.16 55 MIME_QP_LONG_LINE 17415 4.30 2.49 5.11 56 XM_DK_Undo_02 17085 16.19 40.96 5.01 57 XMStrtUSub 15746 4.37 3.81 4.62 58 MPART_ALT_DIFF 15724 4.77 5.10 4.61 59 HTML_IMAGE_RATIO_04 15498 4.42 4.14 4.55 60 XM_PDF 15483 3.41 0.90 4.54 61 XM_B_Phish_Phrases 15354 5.57 7.92 4.51 62 RCVD_IN_MSPIKE_H4 14840 3.87 2.79 4.36 63 HTML_IMAGE_RATIO_02 14740 4.70 5.54 4.33 64 BAYES_80 14303 5.57 8.60 4.20 65 FSL_BULK_SIG 13795 5.52 8.78 4.05 66 BAYES_20 12926 3.01 1.28 3.79 67 XM_UncommonTLD01 12802 5.08 8.03 3.76 68 RCVD_IN_VALIDITY_SAFE 12642 3.02 1.50 3.71 69 TR_XM_SpammyWords4 12384 5.66 10.14 3.63 70 RELAYCOUNTRY_META 11850 7.85 17.53 3.48 71 BAYES_99 11747 12.31 31.96 3.45 72 RCVD_IN_IADB_LISTED 11570 2.83 1.58 3.40 73 XMNumbers 11439 3.44 3.64 3.36 74 T_REMOTE_IMAGE 11131 2.68 1.38 3.27 75 XMSubMetaSx_00 11058 4.03 5.75 3.25 76 RCVD_IN_VALIDITY_CERTIFIED 10858 2.51 1.01 3.19 77 BOTNET_IPINHOSTNAME 10672 5.84 11.83 3.13 78 MAILING_LIST_MULTI 10636 2.83 2.18 3.12 79 RCVD_IN_IADB_SPF 10357 2.48 1.25 3.04 80 HTML_IMAGE_RATIO_06 9857 3.05 3.40 2.89 81 T_TooManySym_02 9662 2.96 3.25 2.84 82 MIME_HTML_MOSTLY 9651 2.94 3.19 2.83 83 RCVD_IN_IADB_SENDERID 9349 2.24 1.11 2.74 84 HTML_MIME_NO_HTML_TAG 9104 2.63 2.55 2.67 85 RCVD_IN_IADB_DK 9033 2.18 1.14 2.65 86 XM_B_SpammyTLD 8779 3.15 4.43 2.58 87 BAYES_999 8768 9.16 23.78 2.57 88 BAYES_95 8710 3.34 5.08 2.56 89 TooManyTo_002 7977 1.77 0.50 2.34 90 HTML_IMAGE_RATIO_08 7833 2.92 4.28 2.30 91 DKIM_INVALID 7802 2.95 4.42 2.29 92 SHORT_URI_2 7746 1.67 0.33 2.27 93 MIME_HTML_ONLY_MULTI 7513 2.32 2.56 2.20 94 TR_XM_DKIM_Undo 7401 10.41 28.66 2.17 95 BAYES_05 7276 1.65 0.57 2.14 96 RCVD_IN_IADB_VOUCHED 7207 1.79 1.05 2.12 97 MIME_CHARSET_FARAWAY 7170 1.56 0.34 2.10 98 INVALID_MSGID 6938 1.47 0.23 2.04 99 CHARSET_FARAWAY_HEADER 6820 1.45 0.23 2.00 100 TO_MALFORMED 6774 1.37 0.02 1.99 101 XM_Body_Dirty_Words 6435 2.72 4.57 1.89 102 MSGID_NOFQDN1 6310 1.29 0.03 1.85 103 TM2_M_URI_OPT_OUT 6277 1.97 2.25 1.84 104 XM_B_URI_Unicode 6267 2.00 2.36 1.84 105 TR_XM_SpammyRelay 6247 4.59 10.70 1.83 106 XM_CamelCaseFrm001 5874 2.13 3.04 1.72 107 T_XMDrugObfuBody_08 5697 2.26 3.55 1.67 108 XM_DK_Undo_01 5486 1.50 1.27 1.61 109 TR_XM_UnparsRelay 5426 3.91 9.03 1.59 110 XM_B_Investor 5383 2.57 4.76 1.58 111 FROM_EXCESS_BASE64 5346 1.56 1.55 1.57 112 XM_SendGrid 5317 1.55 1.52 1.56 113 XMDiploma_00 5242 1.92 2.77 1.54 114 TR_Symld_Words 5104 1.62 1.90 1.50 115 RCVD_IN_IADB_OPTIN 5086 1.25 0.70 1.49 116 UNTRUSTED_Relay 5069 2.85 5.86 1.49 117 TR_DCC_Bayes_99 5014 7.57 21.09 1.47 118 T_XMDrugObfuBody_14 4920 2.47 4.75 1.44 119 TR_XM_PhishingBody 4901 3.20 7.11 1.44 120 HOSTED_IMG_DIRECT_MX 4860 1.00 0.06 1.43 121 SUBJ_ALL_CAPS 4831 1.53 1.78 1.42 122 TooManyTo_003 4756 1.08 0.39 1.40 123 XM_GoogleGroups 4576 1.21 0.90 1.34 124 BOTNET 4474 4.11 10.31 1.31 125 XM_B_Unsub2 4341 2.05 3.76 1.27 126 IN_HORDE_ADDRESS_BOOK 4281 0.89 0.06 1.26 127 T_TVD_MIME_NO_HEADERS 4269 0.89 0.07 1.25 128 TVD_SPACE_RATIO 4213 0.93 0.25 1.24 129 XM_SPF_SoftFail 4211 2.10 4.01 1.24 130 URI_HEX 4189 1.32 1.53 1.23 131 TR_XM_SpammyWords5 4050 1.95 3.64 1.19 132 SHORT_URI_3 4015 0.84 0.10 1.18 133 URI_NOVOWEL 3980 1.18 1.21 1.17 134 XMGappySubj_01 3965 0.89 0.28 1.16 135 XMStockSpam_06 3913 1.41 1.99 1.15 136 TR_XM_DK_SendGrid 3866 1.05 0.88 1.13 137 T_TooManySym_03 3845 1.64 2.76 1.13 138 RCVD_IN_MSPIKE_BL 3824 2.54 5.68 1.12 139 TR_XM_MSPIKECOMBO 3819 2.54 5.67 1.12 140 HELO_NODOT 3636 0.80 0.22 1.07 141 HELO_NO_DOMAIN 3629 0.80 0.21 1.07 142 FROM_GOV_DKIM_AU 3584 0.84 0.38 1.05 143 HTML_IMAGE_ONLY_32 3578 0.80 0.24 1.05 144 TooManyTo_004 3573 0.83 0.35 1.05 145 XMSexyCombo_05 3523 1.67 3.08 1.03 146 T_FILL_THIS_FORM_SHORT 3451 1.36 2.11 1.01 147 XMCapTrack 3387 0.85 0.52 0.99 148 XM_UB50 3369 1.51 2.65 0.99 149 T_OBFU_PDF_ATTACH 3300 0.75 0.26 0.97 150 RCVD_IN_MSPIKE_L3 3229 1.67 3.28 0.95 151 XMBrknScrpt_02 3128 1.23 1.93 0.92 152 XM_H_Long_From02 3035 1.07 1.45 0.89 153 XMGenDplmaNmb 2980 1.15 1.75 0.87 154 XM_ShortIntro_01 2953 0.79 0.61 0.87 155 TooManyTo_005 2938 0.69 0.32 0.86 156 TM2_M_BODY_EMPTY 2929 1.22 2.01 0.86 157 DKIM_ADSP_CUSTOM_MED 2744 0.86 0.98 0.81 158 TVD_RCVD_IP 2703 0.89 1.10 0.79 159 XMHTML_After_End 2665 0.76 0.72 0.78 160 TR_XM_Base64_M1 2632 0.75 0.69 0.77 161 RELAYCOUNTRY_GB 2585 0.79 0.86 0.76 162 T_XMDrugObfuBody_00 2583 0.97 1.43 0.76 163 TR_MetaPhish_Combo_01 2582 0.77 0.80 0.76 164 SpammyFromTLD_01 2574 0.99 1.50 0.76 165 XM_OfRef6 2573 1.48 3.09 0.76 166 XM_H_PHPMailer 2523 0.63 0.37 0.74 167 T_XMHurry_00 2381 1.18 2.25 0.70 168 T_Symld_Words_02 2372 0.78 0.97 0.70 169 RCVD_IN_PBL 2326 0.88 1.31 0.68 170 XMBdyGiftCard01 2315 0.72 0.82 0.68 171 RELAYCOUNTRY_CA 2314 2.12 5.31 0.68 172 HTTPS_HTTP_MISMATCH 2227 0.81 1.15 0.65 173 RCVD_IN_BL_SPAMCOP_NET 2168 3.91 11.15 0.64 174 HTML_TAG_BALANCE_BODY 2095 0.67 0.79 0.61 175 XMGappySubj_02 2038 0.43 0.05 0.60 176 TR_XM_SpammyWords2 1991 3.61 10.33 0.58 177 TO_NO_BRKTS_HTML_ONLY 1981 0.46 0.19 0.58 178 TR_XM_SpammyWords3 1940 1.70 4.19 0.57 179 XMLngstWrd_00 1936 0.55 0.52 0.57 180 XMBSHREFv2 1914 0.49 0.34 0.56 181 XMNoVowels 1899 0.55 0.52 0.56 182 RELAYCOUNTRY_AU 1853 1.17 2.55 0.54 183 XM_ProductURIs 1847 0.72 1.13 0.54 184 XM_B_COPY_HTML 1783 0.65 0.94 0.52 185 HTML_IMAGE_ONLY_20 1747 0.62 0.86 0.51 186 FORGED_GMAIL_RCVD 1733 0.59 0.77 0.51 187 XMBody_17 1718 1.17 2.65 0.50 188 MPART_ALT_DIFF_COUNT 1662 0.82 1.57 0.49 189 XMLngstWrd_01 1625 0.44 0.37 0.48 190 NML_ADSP_CUSTOM_MED 1611 0.58 0.80 0.47 191 TR_LOTS_OF_MONEY3 1588 0.91 1.89 0.47 192 XMEmptyBody_01 1585 0.93 1.95 0.47 193 URI_TRY_3LD 1512 0.89 1.89 0.44 194 SpammyFromTLD_02 1501 0.83 1.69 0.44 195 XMSlimDrugH 1499 0.51 0.67 0.44 196 MSGID_FROM_MTA_HEADER 1492 0.41 0.34 0.44 197 XM_B_DNDMA 1463 0.71 1.33 0.43 198 XMAntiAgingB 1434 0.29 0.01 0.42 199 XMSubMetaI_00 1431 0.60 1.00 0.42 200 XMSolicitRefs_0 1425 0.42 0.44 0.42 ----------------------------------------------------------------------