Email: 538497 Autolearn: 0 AvgScore: 5.03 AvgScanTime: 1.30 sec Spam: 164057 Autolearn: 0 AvgScore: 14.27 AvgScanTime: 1.59 sec Ham: 374440 Autolearn: 0 AvgScore: 0.98 AvgScanTime: 1.18 sec Time Spent Running SA: 195.19 hours Time Spent Processing Spam: 72.31 hours Time Spent Processing Ham: 122.87 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 163837 99.68 99.87 99.60 2 HTML_MESSAGE 157782 89.43 96.18 86.47 3 DKIM_SIGNED 146034 73.87 89.01 67.23 4 RELAYCOUNTRY_US 136953 81.25 83.48 80.28 5 XM_B_Unicode 134539 74.67 82.01 71.46 6 XM_DK_Pass 129584 70.01 78.99 66.08 7 DKIM_VALID 128425 69.23 78.28 65.26 8 DCC_CHECK 119105 45.82 72.60 34.08 9 XM_B_SpammyWords 112550 51.05 68.60 43.35 10 DKIM_VALID_AU 101482 56.33 61.86 53.91 11 XMListUnsubscribeExists 100492 48.78 61.25 43.32 12 LOC_TINY_FONT_1 77670 31.93 47.34 25.18 13 XM_B_Unicode3 75780 44.04 46.19 43.10 14 XM_DK_Undo_02 64875 15.36 39.54 4.77 15 XM_B_SpammyWords2 64384 24.06 39.24 17.40 16 HTML_FONT_LOW_CONTRAST 61668 27.97 37.59 23.75 17 BAYES_50 61560 50.01 37.52 55.47 18 FVGT_m_MULTI_ODD 57813 27.01 35.24 23.41 19 BAYES_99 54246 12.40 33.07 3.34 20 DKIM_VALID_EF 49194 27.98 29.99 27.09 21 MIME_HTML_ONLY 47216 23.51 28.78 21.20 22 TR_XM_DKIM_Undo 45582 9.81 27.78 1.94 23 XMSubLong 45179 24.88 27.54 23.71 24 T_KAM_HTML_FONT_INVALID 45142 21.92 27.52 19.47 25 DCC_CHECK_NEGATIVE 44854 54.11 27.34 65.84 26 BAYES_999 42365 9.63 25.82 2.54 27 XM_B_Unsub 40958 13.01 24.97 7.78 28 TR_XM_BayesUnsub 39180 11.34 23.88 5.84 29 XM_Multi_Part_URI 37247 15.71 22.70 12.65 30 TR_DCC_Bayes_99 35716 7.47 21.77 1.21 31 TR_XM_DK_Unsub 35049 14.94 21.36 12.13 32 RCVD_IN_MSPIKE_H2 33588 16.53 20.47 14.81 33 T_TM2_M_HEADER_IN_MSG 33173 24.61 20.22 26.53 34 RELAYCOUNTRY_META 29727 7.64 18.12 3.05 35 UNPARSEABLE_RELAY 28895 12.39 17.61 10.11 36 TR_MAX_INTL_RELAY 26320 8.65 16.04 5.41 37 RCVD_IN_BL_SPAMCOP_NET 25186 5.11 15.35 0.62 38 BOTNET 23467 5.20 14.30 1.21 39 XM_B_SpammyWords3 23142 7.51 14.11 4.62 40 FSL_BULK_SIG 22603 8.28 13.78 5.88 41 LOTS_OF_MONEY 22138 7.69 13.49 5.14 42 TR_XM_SpammyRelay 20812 4.93 12.69 1.53 43 TR_XM_SpammyWords4 19852 5.99 12.10 3.31 44 TR_XM_SpammyWords2 19848 3.98 12.10 0.42 45 RCVD_IN_MSPIKE_WL 19045 16.86 11.61 19.16 46 BOTNET_IPINHOSTNAME 18959 12.47 11.56 12.87 47 MPART_ALT_DIFF 18766 9.09 11.44 8.06 48 DKIM_INVALID 17609 4.64 10.73 1.97 49 XM_Evil_Numbers_Gen 16695 9.23 10.18 8.81 50 BAYES_80 16333 5.36 9.96 3.34 51 TR_XM_UnparsRelay 16117 3.96 9.82 1.40 52 RCVD_IN_MSPIKE_BL 15227 3.57 9.28 1.07 53 TR_XM_MSPIKECOMBO 15060 3.53 9.18 1.06 54 BAYES_60 14405 6.96 8.78 6.16 55 XM_B_Phish_Phrases 14235 6.41 8.68 5.42 56 UNTRUSTED_Relay 13430 3.46 8.19 1.40 57 TR_XM_SPAMCOP 10934 2.17 6.66 0.21 58 XMSubMetaSx_00 10559 4.01 6.44 2.95 59 MIME_QP_LONG_LINE 10286 5.66 6.27 5.39 60 XMNumbers 10059 3.97 6.13 3.02 61 TR_XM_SpammyWords3 10037 2.22 6.12 0.51 62 XM_B_PhoneNumber 9657 8.03 5.89 8.96 63 XM_UncommonTLD01 9618 4.24 5.86 3.53 64 LotsOfNums_01 9575 7.25 5.84 7.87 65 XM_H_GMP 9534 5.27 5.81 5.04 66 HTML_IMAGE_RATIO_02 9355 4.48 5.70 3.94 67 BAYES_95 9231 3.15 5.63 2.06 68 XM_H_Long_From01 9178 5.30 5.59 5.17 69 XMStrtUSub 9073 8.58 5.53 9.92 70 XM_Body_Dirty_Words 9072 3.13 5.53 2.08 71 XM_B_Investor 9066 2.67 5.53 1.42 72 DKIM_ADSP_NXDOMAIN 9062 1.86 5.52 0.25 73 TR_XM_INV_DKIM 8512 1.59 5.19 0.01 74 RCVD_IN_MSPIKE_H3 8356 7.32 5.09 8.30 75 RELAYCOUNTRY_CA 8346 1.98 5.09 0.62 76 T_XMDrugObfuBody_14 8332 2.44 5.08 1.29 77 TR_XM_SpammyWords5 8264 2.51 5.04 1.40 78 MIME_HTML_MOSTLY 8100 3.31 4.94 2.60 79 TR_XM_PhishingBody 7970 2.42 4.86 1.35 80 HTML_IMAGE_RATIO_04 7945 10.45 4.84 12.91 81 TR_XM_NoHeaderRelay 7523 1.50 4.59 0.15 82 XM_B_SpammyTLD 7303 3.17 4.45 2.62 83 RCVD_IN_MSPIKE_L3 7195 1.95 4.39 0.88 84 XMSexyCombo_05 6760 1.86 4.12 0.86 85 BOTNET_NORDNS 6569 1.23 4.00 0.01 86 TooManyTo_001 6457 5.88 3.94 6.73 87 XM_OfRef6 6086 1.68 3.71 0.80 88 HTML_IMAGE_RATIO_06 5944 4.23 3.62 4.49 89 RCVD_IN_MSPIKE_H5 5890 5.71 3.59 6.64 90 RCVD_IN_VALIDITY_RPBL 5729 1.09 3.49 0.04 91 XM_B_Unsub2 5634 2.08 3.43 1.48 92 XMDiploma_00 5613 2.44 3.42 2.01 93 XM_UB50 5566 1.70 3.39 0.96 94 XM_URI_RBL 5444 1.23 3.32 0.31 95 MIME_HTML_ONLY_MULTI 5374 5.38 3.28 6.31 96 TM2_M_VERY_LONG_WORD 5334 1.84 3.25 1.22 97 RCVD_IN_PSBL 5267 1.00 3.21 0.04 98 XM_SPF_SoftFail 5210 1.76 3.18 1.14 99 RELAYCOUNTRY_DE 5130 1.14 3.13 0.27 100 XM_H_DKIM_GOOG 5096 0.95 3.11 0.01 101 TR_XM_MSPIKECOMBO2 5074 1.03 3.09 0.13 102 XMStockSpam_06 4939 1.47 3.01 0.80 103 RCVD_IN_MSPIKE_L4 4870 1.02 2.97 0.16 104 RCVD_IN_MSPIKE_H4 4799 3.82 2.93 4.22 105 XM_B_URI_Unicode 4766 1.97 2.91 1.57 106 T_XMDrugObfuBody_08 4686 1.97 2.86 1.59 107 USER_IN_DEF_DKIM_WL 4611 8.90 2.81 11.57 108 T_XMHurry_00 4604 1.18 2.81 0.47 109 XM_CamelCaseFrm001 4593 2.06 2.80 1.74 110 HTML_IMAGE_RATIO_08 4385 2.45 2.67 2.36 111 T_TooManySym_01 4337 4.51 2.64 5.32 112 T_REMOTE_IMAGE 4162 3.09 2.54 3.33 113 T_FILL_THIS_FORM_SHORT 4101 1.36 2.50 0.87 114 XM_B_SpammyWords4 3913 0.98 2.39 0.37 115 XMBody_17 3786 0.96 2.31 0.37 116 RELAYCOUNTRY_AU 3774 0.99 2.30 0.42 117 NORDNS_LOW_CONTRAST 3525 1.16 2.15 0.73 118 HTTPS_HTTP_MISMATCH 3329 1.10 2.03 0.69 119 KHOP_HELO_FCRDNS 3309 1.33 2.02 1.02 120 RCVD_IN_VALIDITY_SAFE 3305 3.01 2.01 3.44 121 TM2_M_URI_OPT_OUT 3304 1.89 2.01 1.84 122 XM_H_Long_From02 3282 1.13 2.00 0.75 123 XMGenDplmaNmb 3211 1.49 1.96 1.29 124 BAYES_40 3125 4.88 1.90 6.18 125 SpammyFromTLD_02 3071 0.87 1.87 0.43 126 TR_Symld_Words 3014 1.60 1.84 1.50 127 RCVD_IN_MSPIKE_L5 2995 0.57 1.83 0.02 128 TR_XM_MaxSPIKE 2904 0.58 1.77 0.05 129 FROM_EXCESS_BASE64 2899 1.69 1.77 1.65 130 HTML_IMAGE_ONLY_20 2899 0.91 1.77 0.53 131 MPART_ALT_DIFF_COUNT 2894 1.22 1.76 0.97 132 SCC_CANSPAM_2 2889 0.54 1.76 0.00 133 SUBJ_ALL_CAPS 2874 1.37 1.75 1.20 134 URI_HEX 2782 1.31 1.70 1.14 135 SpammyFromTLD_01 2762 1.01 1.68 0.71 136 BOUNCE_MESSAGE 2751 5.47 1.68 7.14 137 ANY_BOUNCE_MESSAGE 2751 5.48 1.68 7.14 138 XMBrknScrpt_02 2728 1.04 1.66 0.77 139 MAILING_LIST_MULTI 2686 2.26 1.64 2.53 140 HTML_FONT_FACE_BAD 2679 8.62 1.63 11.69 141 TR_LOTS_OF_MONEY3 2651 0.71 1.62 0.32 142 XMPhish30 2639 0.73 1.61 0.34 143 T_XMDrugObfuBody_00 2635 1.12 1.61 0.90 144 XM_B_DNDMA 2617 0.79 1.60 0.43 145 URI_NOVOWEL 2510 1.15 1.53 0.98 146 RELAYCOUNTRY_FR 2469 0.68 1.50 0.31 147 XM_UB99 2434 0.45 1.48 0.00 148 RCVD_IN_IADB_LISTED 2429 2.57 1.48 3.05 149 TR_XM_GMP_BULK_SIG 2405 0.52 1.47 0.10 150 HTML_MIME_NO_HTML_TAG 2342 1.96 1.43 2.19 151 BAYES_20 2299 4.75 1.40 6.21 152 XM_SendGrid 2280 1.31 1.39 1.28 153 RCVD_IN_VALIDITY_CERTIFIED 2263 2.46 1.38 2.93 154 TM2_M_OBFU_COMMENT 2250 0.61 1.37 0.28 155 XMBdyGiftCard01 2193 0.87 1.34 0.66 156 XM_DK_Undo_01 2168 1.60 1.32 1.72 157 XM_B_SEO 2146 0.55 1.31 0.22 158 RCVD_IN_IADB_SPF 2008 2.25 1.22 2.71 159 XM_B_Phish66 1967 0.57 1.20 0.30 160 LOW_PRICE 1954 0.45 1.19 0.13 161 TR_LOTS_OF_MONEY2 1953 0.51 1.19 0.22 162 RDNS_DYNAMIC 1953 0.46 1.19 0.13 163 T_MONEY_PERCENT 1953 0.51 1.19 0.22 164 XMClaimOffer 1952 0.50 1.19 0.19 165 XM_UB80 1928 0.37 1.18 0.02 166 ALL_TRUSTED 1913 12.22 1.17 17.07 167 XM_HighProb1 1891 0.35 1.15 0.00 168 TR_XM_SEO4 1873 0.40 1.14 0.08 169 DKIM_ADSP_CUSTOM_MED 1861 0.80 1.13 0.65 170 XMSubNoVowel 1850 2.79 1.13 3.52 171 RCVD_IN_IADB_DK 1801 1.97 1.10 2.35 172 URI_TRY_3LD 1796 0.69 1.09 0.51 173 TR_XM_InvalidRelay 1791 0.34 1.09 0.01 174 MultiRelay_CC 1772 0.42 1.08 0.13 175 RCVD_IN_IADB_SENDERID 1770 2.02 1.08 2.44 176 TR_Mismatch_TLD_02 1719 0.40 1.05 0.12 177 TVD_RCVD_IP 1718 1.04 1.05 1.04 178 XMHTML_After_End 1716 0.56 1.05 0.35 179 XMSexyCombo_01 1705 0.46 1.04 0.21 180 XM_UB60 1700 0.38 1.04 0.10 181 XM_B_COPY_HTML 1683 0.72 1.03 0.59 182 DIET_1 1660 0.53 1.01 0.32 183 RCVD_IN_IADB_VOUCHED 1650 1.59 1.01 1.85 184 HK_RANDOM_REPLYTO 1638 0.38 1.00 0.10 185 BAYES_00 1632 10.55 0.99 14.74 186 TR_MetaPhish_Combo_01 1617 1.06 0.99 1.10 187 NML_ADSP_CUSTOM_MED 1597 0.59 0.97 0.42 188 XMBody_78 1573 0.51 0.96 0.31 189 FORGED_GMAIL_RCVD 1544 0.55 0.94 0.38 190 XM_ProductURIs 1544 0.56 0.94 0.40 191 NO_DNS_FOR_FROM 1540 0.42 0.94 0.19 192 TR_XM_RelayPhish 1520 0.34 0.93 0.08 193 FROM_OFFERS 1518 0.32 0.93 0.06 194 FROM_DOMAIN_NOVOWEL 1498 0.29 0.91 0.02 195 XM_UB999 1487 0.28 0.91 0.00 196 MISSING_HEADERS 1464 0.48 0.89 0.30 197 TR_XM_MaxWHORU 1442 0.37 0.88 0.15 198 T_MANY_PILL_PRICE 1439 0.27 0.88 0.00 199 XMSubMetaI_00 1435 0.70 0.87 0.63 200 THIS_AD 1433 0.50 0.87 0.34 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 372942 99.68 99.87 99.60 2 HTML_MESSAGE 323772 89.43 96.18 86.47 3 RELAYCOUNTRY_US 300587 81.25 83.48 80.28 4 XM_B_Unicode 267578 74.67 82.01 71.46 5 DKIM_SIGNED 251737 73.87 89.01 67.23 6 XM_DK_Pass 247444 70.01 78.99 66.08 7 DCC_CHECK_NEGATIVE 246536 54.11 27.34 65.84 8 DKIM_VALID 244376 69.23 78.28 65.26 9 BAYES_50 207719 50.01 37.52 55.47 10 DKIM_VALID_AU 201847 56.33 61.86 53.91 11 XM_B_SpammyWords 162329 51.05 68.60 43.35 12 XMListUnsubscribeExists 162207 48.78 61.25 43.32 13 XM_B_Unicode3 161378 44.04 46.19 43.10 14 DCC_CHECK 127612 45.82 72.60 34.08 15 DKIM_VALID_EF 101451 27.98 29.99 27.09 16 T_TM2_M_HEADER_IN_MSG 99338 24.61 20.22 26.53 17 LOC_TINY_FONT_1 94274 31.93 47.34 25.18 18 HTML_FONT_LOW_CONTRAST 88945 27.97 37.59 23.75 19 XMSubLong 88789 24.88 27.54 23.71 20 FVGT_m_MULTI_ODD 87656 27.01 35.24 23.41 21 MIME_HTML_ONLY 79400 23.51 28.78 21.20 22 T_KAM_HTML_FONT_INVALID 72892 21.92 27.52 19.47 23 RCVD_IN_MSPIKE_WL 71746 16.86 11.61 19.16 24 XM_B_SpammyWords2 65171 24.06 39.24 17.40 25 ALL_TRUSTED 63911 12.22 1.17 17.07 26 RCVD_IN_MSPIKE_H2 55436 16.53 20.47 14.81 27 BAYES_00 55184 10.55 0.99 14.74 28 HTML_IMAGE_RATIO_04 48336 10.45 4.84 12.91 29 BOTNET_IPINHOSTNAME 48206 12.47 11.56 12.87 30 XM_Multi_Part_URI 47377 15.71 22.70 12.65 31 TR_XM_DK_Unsub 45421 14.94 21.36 12.13 32 HTML_FONT_FACE_BAD 43764 8.62 1.63 11.69 33 USER_IN_DEF_DKIM_WL 43305 8.90 2.81 11.57 34 UNPARSEABLE_RELAY 37847 12.39 17.61 10.11 35 XMStrtUSub 37154 8.58 5.53 9.92 36 XM_B_PhoneNumber 33568 8.03 5.89 8.96 37 XM_Evil_Numbers_Gen 32998 9.23 10.18 8.81 38 RCVD_IN_MSPIKE_H3 31075 7.32 5.09 8.30 39 MPART_ALT_DIFF 30182 9.09 11.44 8.06 40 LotsOfNums_01 29456 7.25 5.84 7.87 41 XM_B_Unsub 29113 13.01 24.97 7.78 42 ANY_BOUNCE_MESSAGE 26733 5.48 1.68 7.14 43 BOUNCE_MESSAGE 26731 5.47 1.68 7.14 44 TooManyTo_001 25215 5.88 3.94 6.73 45 RCVD_IN_MSPIKE_H5 24879 5.71 3.59 6.64 46 XM_DKIMWhitelistDomains 24195 4.55 0.18 6.46 47 TR_XM_DK_Bayes 24103 4.71 0.78 6.44 48 TR_XM_DK_Bayes1 23778 4.65 0.77 6.35 49 MIME_HTML_ONLY_MULTI 23609 5.38 3.28 6.31 50 BAYES_20 23255 4.75 1.40 6.21 51 BAYES_40 23151 4.88 1.90 6.18 52 BAYES_60 23056 6.96 8.78 6.16 53 FSL_BULK_SIG 21999 8.28 13.78 5.88 54 TR_XM_BayesUnsub 21873 11.34 23.88 5.84 55 TR_XM_DK_Bayes2 20780 4.00 0.46 5.55 56 XM_B_Phish_Phrases 20299 6.41 8.68 5.42 57 TR_MAX_INTL_RELAY 20246 8.65 16.04 5.41 58 MIME_QP_LONG_LINE 20172 5.66 6.27 5.39 59 T_TooManySym_01 19929 4.51 2.64 5.32 60 XM_H_Long_From01 19377 5.30 5.59 5.17 61 LOTS_OF_MONEY 19263 7.69 13.49 5.14 62 XM_H_GMP 18854 5.27 5.81 5.04 63 XM_DK_Undo_02 17856 15.36 39.54 4.77 64 XM_B_SpammyWords3 17282 7.51 14.11 4.62 65 HTML_IMAGE_RATIO_06 16826 4.23 3.62 4.49 66 RCVD_IN_MSPIKE_H4 15792 3.82 2.93 4.22 67 HTML_IMAGE_RATIO_02 14767 4.48 5.70 3.94 68 XM_PDF 13973 2.82 0.75 3.73 69 XM_UncommonTLD01 13221 4.24 5.86 3.53 70 XMSubNoVowel 13188 2.79 1.13 3.52 71 RCVD_IN_VALIDITY_SAFE 12896 3.01 2.01 3.44 72 BAYES_80 12516 5.36 9.96 3.34 73 BAYES_99 12513 12.40 33.07 3.34 74 T_REMOTE_IMAGE 12481 3.09 2.54 3.33 75 TR_XM_SpammyWords4 12382 5.99 12.10 3.31 76 RCVD_IN_IADB_LISTED 11411 2.57 1.48 3.05 77 RELAYCOUNTRY_META 11410 7.64 18.12 3.05 78 XMNumbers 11308 3.97 6.13 3.02 79 XMSubMetaSx_00 11034 4.01 6.44 2.95 80 RCVD_IN_VALIDITY_CERTIFIED 10959 2.46 1.38 2.93 81 T_TooManySym_02 10279 2.16 0.81 2.75 82 RCVD_IN_IADB_SPF 10135 2.25 1.22 2.71 83 XM_B_SpammyTLD 9792 3.17 4.45 2.62 84 MIME_HTML_MOSTLY 9730 3.31 4.94 2.60 85 BAYES_999 9513 9.63 25.82 2.54 86 MAILING_LIST_MULTI 9489 2.26 1.64 2.53 87 BAYES_05 9312 1.96 0.75 2.49 88 RCVD_IN_IADB_SENDERID 9132 2.02 1.08 2.44 89 HTML_IMAGE_RATIO_08 8823 2.45 2.67 2.36 90 RCVD_IN_IADB_DK 8811 1.97 1.10 2.35 91 HTML_MIME_NO_HTML_TAG 8203 1.96 1.43 2.19 92 XM_Body_Dirty_Words 7782 3.13 5.53 2.08 93 BAYES_95 7726 3.15 5.63 2.06 94 XMDiploma_00 7521 2.44 3.42 2.01 95 DKIM_INVALID 7361 4.64 10.73 1.97 96 TooManyTo_002 7344 1.51 0.49 1.96 97 TR_XM_DKIM_Undo 7268 9.81 27.78 1.94 98 INVALID_MSGID 7030 1.41 0.34 1.88 99 RCVD_IN_IADB_VOUCHED 6915 1.59 1.01 1.85 100 TM2_M_URI_OPT_OUT 6878 1.89 2.01 1.84 101 TO_MALFORMED 6834 1.27 0.02 1.83 102 XM_CamelCaseFrm001 6505 2.06 2.80 1.74 103 XM_DK_Undo_01 6428 1.60 1.32 1.72 104 XMSubLongNoVowel 6216 1.37 0.72 1.66 105 FROM_EXCESS_BASE64 6185 1.69 1.77 1.65 106 XMSubGarbage 6156 1.32 0.57 1.64 107 T_XMDrugObfuBody_08 5935 1.97 2.86 1.59 108 XM_B_URI_Unicode 5863 1.97 2.91 1.57 109 TR_XM_SpammyRelay 5741 4.93 12.69 1.53 110 TR_Symld_Words 5611 1.60 1.84 1.50 111 XM_B_Unsub2 5540 2.08 3.43 1.48 112 XM_B_Investor 5335 2.67 5.53 1.42 113 TR_XM_UnparsRelay 5229 3.96 9.82 1.40 114 TR_XM_SpammyWords5 5228 2.51 5.04 1.40 115 UNTRUSTED_Relay 5225 3.46 8.19 1.40 116 HELO_NODOT 5134 1.10 0.48 1.37 117 HELO_NO_DOMAIN 5129 1.10 0.47 1.37 118 TR_XM_PhishingBody 5047 2.42 4.86 1.35 119 RCVD_IN_IADB_OPTIN 4859 1.12 0.72 1.30 120 XMGenDplmaNmb 4833 1.49 1.96 1.29 121 T_XMDrugObfuBody_14 4829 2.44 5.08 1.29 122 XM_SendGrid 4791 1.31 1.39 1.28 123 TooManyTo_003 4713 0.99 0.39 1.26 124 TM2_M_VERY_LONG_WORD 4559 1.84 3.25 1.22 125 TR_DCC_Bayes_99 4531 7.47 21.77 1.21 126 BOTNET 4522 5.20 14.30 1.21 127 SUBJ_ALL_CAPS 4502 1.37 1.75 1.20 128 T_TooManySym_03 4412 0.88 0.20 1.18 129 URI_HEX 4284 1.31 1.70 1.14 130 XM_SPF_SoftFail 4262 1.76 3.18 1.14 131 XMGappySubj_01 4260 1.01 0.71 1.14 132 IN_HORDE_ADDRESS_BOOK 4234 0.81 0.07 1.13 133 TR_MetaPhish_Combo_01 4104 1.06 0.99 1.10 134 XM_GoogleGroups 4065 0.99 0.76 1.09 135 RCVD_IN_MSPIKE_BL 4021 3.57 9.28 1.07 136 TR_XM_MSPIKECOMBO 3966 3.53 9.18 1.06 137 TVD_RCVD_IP 3906 1.04 1.05 1.04 138 KHOP_HELO_FCRDNS 3832 1.33 2.02 1.02 139 TVD_SPACE_RATIO 3797 0.78 0.26 1.01 140 URI_NOVOWEL 3664 1.15 1.53 0.98 141 MPART_ALT_DIFF_COUNT 3649 1.22 1.76 0.97 142 XM_UB50 3590 1.70 3.39 0.96 143 XMCapTrack 3517 0.79 0.44 0.94 144 TooManyTo_004 3404 0.73 0.33 0.91 145 FROM_GOV_DKIM_AU 3383 0.73 0.35 0.90 146 T_XMDrugObfuBody_00 3380 1.12 1.61 0.90 147 TR_XM_DK_SendGrid 3357 0.86 0.77 0.90 148 RCVD_IN_MSPIKE_L3 3285 1.95 4.39 0.88 149 T_FILL_THIS_FORM_SHORT 3248 1.36 2.50 0.87 150 XMSexyCombo_05 3231 1.86 4.12 0.86 151 XMStockSpam_06 2998 1.47 3.01 0.80 152 XM_OfRef6 2981 1.68 3.71 0.80 153 XM_E_Blogspot 2981 0.65 0.32 0.80 154 XMBrknScrpt_02 2879 1.04 1.66 0.77 155 XM_ShortIntro_01 2832 0.75 0.73 0.76 156 TooManyTo_005 2831 0.61 0.27 0.76 157 XM_H_Long_From02 2807 1.13 2.00 0.75 158 NORDNS_LOW_CONTRAST 2738 1.16 2.15 0.73 159 XM_H_PHPMailer 2718 0.65 0.46 0.73 160 SpammyFromTLD_01 2677 1.01 1.68 0.71 161 TR_XM_Base64_M1 2589 0.64 0.51 0.69 162 HTTPS_HTTP_MISMATCH 2580 1.10 2.03 0.69 163 XMBdyGiftCard01 2485 0.87 1.34 0.66 164 XMNoVowels 2449 0.62 0.55 0.65 165 DKIM_ADSP_CUSTOM_MED 2445 0.80 1.13 0.65 166 XMSubMetaI_00 2342 0.70 0.87 0.63 167 RCVD_IN_BL_SPAMCOP_NET 2339 5.11 15.35 0.62 168 XMGappySubj_02 2337 0.48 0.14 0.62 169 RELAYCOUNTRY_GB 2320 0.67 0.79 0.62 170 RELAYCOUNTRY_CA 2313 1.98 5.09 0.62 171 URI_OPTOUT_3LD 2271 0.46 0.13 0.61 172 XM_B_COPY_HTML 2205 0.72 1.03 0.59 173 XMBSHREFv2 2166 0.51 0.35 0.58 174 TO_IN_SUBJ 2159 0.42 0.07 0.58 175 TO_NO_BRKTS_HTML_ONLY 2073 0.44 0.19 0.55 176 T_Symld_Words_02 2060 0.54 0.53 0.55 177 T_OBFU_PDF_ATTACH 2059 0.43 0.14 0.55 178 HTML_IMAGE_ONLY_20 1993 0.91 1.77 0.53 179 URI_TRY_3LD 1916 0.69 1.09 0.51 180 TR_XM_SpammyWords3 1894 2.22 6.12 0.51 181 XMLngstWrd_00 1791 0.44 0.36 0.48 182 T_XMHurry_00 1777 1.18 2.81 0.47 183 XMPhish14 1754 0.56 0.77 0.47 184 XM_B_DNDMA 1625 0.79 1.60 0.43 185 SpammyFromTLD_02 1602 0.87 1.87 0.43 186 SHORT_HELO_AND_INLINE_IMAGE 1600 0.33 0.11 0.43 187 TR_XM_SpammyWords2 1591 3.98 12.10 0.42 188 T_TooManySym_04 1587 0.32 0.09 0.42 189 RELAYCOUNTRY_AU 1581 0.99 2.30 0.42 190 NML_ADSP_CUSTOM_MED 1571 0.59 0.97 0.42 191 XMSlimDrugH 1561 0.47 0.61 0.42 192 PLING_QUERY 1556 0.50 0.69 0.42 193 HTML_TAG_BALANCE_BODY 1523 0.52 0.79 0.41 194 XMMoneyMeta_00 1487 0.46 0.60 0.40 195 XM_ProductURIs 1482 0.56 0.94 0.40 196 MSGID_FROM_MTA_HEADER 1443 0.33 0.21 0.39 197 HTML_IMAGE_ONLY_28 1441 0.33 0.21 0.38 198 FORGED_GMAIL_RCVD 1414 0.55 0.94 0.38 199 XMLngstWrd_01 1406 0.36 0.33 0.38 200 T_TVD_MIME_NO_HEADERS 1405 0.27 0.03 0.38 ----------------------------------------------------------------------