Email: 571304 Autolearn: 0 AvgScore: 2.79 AvgScanTime: 1.33 sec Spam: 183806 Autolearn: 0 AvgScore: 13.29 AvgScanTime: 1.55 sec Ham: 387498 Autolearn: 0 AvgScore: -2.19 AvgScanTime: 1.22 sec Time Spent Running SA: 211.13 hours Time Spent Processing Spam: 79.27 hours Time Spent Processing Ham: 131.85 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 178338 91.12 97.03 88.33 2 DKIM_SIGNED 169150 74.64 92.03 66.39 3 XM_DK_Pass 162471 72.74 88.39 65.31 4 DKIM_VALID 160566 71.77 87.36 64.38 5 RELAYCOUNTRY_US 158149 85.06 86.04 84.60 6 XM_B_Unicode 157689 77.02 85.79 72.86 7 DCC_CHECK 137636 46.16 74.88 32.54 8 XMListUnsubscribeExists 137045 53.81 74.56 43.97 9 XM_B_SpammyWords 133702 52.03 72.74 42.20 10 DKIM_VALID_AU 130439 58.19 70.97 52.14 11 XM_DK_Undo_02 86432 18.89 47.02 5.55 12 XM_B_Unicode3 81052 42.72 44.10 42.06 13 LOC_TINY_FONT_1 77362 28.51 42.09 22.07 14 XM_B_SpammyWords2 76646 24.04 41.70 15.67 15 HTML_FONT_LOW_CONTRAST 73935 30.12 40.22 25.33 16 RCVD_IN_MSPIKE_H2 72899 31.43 39.66 27.52 17 BAYES_99 70767 15.35 38.50 4.36 18 BAYES_50 68120 51.30 37.06 58.05 19 FVGT_m_MULTI_ODD 67377 27.59 36.66 23.29 20 TR_XM_DKIM_Undo 64322 12.79 34.99 2.26 21 BAYES_999 58040 12.43 31.58 3.35 22 DKIM_VALID_EF 54655 27.04 29.74 25.77 23 T_KAM_HTML_FONT_INVALID 53928 22.13 29.34 18.71 24 TR_DCC_Bayes_99 51163 10.15 27.84 1.76 25 DCC_CHECK_NEGATIVE 46154 53.81 25.11 67.42 26 T_TM2_M_HEADER_IN_MSG 45987 26.40 25.02 27.05 27 MIME_HTML_ONLY 45828 23.08 24.93 22.19 28 XMSubLong 43187 23.00 23.50 22.76 29 TR_XM_DK_Unsub 40229 15.32 21.89 12.20 30 XM_Multi_Part_URI 36562 14.72 19.89 12.27 31 LOTS_OF_MONEY 33223 9.75 18.08 5.80 32 TR_XM_SpammyWords4 29553 7.90 16.08 4.02 33 TR_XM_SpammyWords2 27966 5.25 15.21 0.52 34 UNPARSEABLE_RELAY 27688 10.84 15.06 8.84 35 XM_B_Unsub 27534 9.41 14.98 6.76 36 TR_XM_BayesUnsub 26351 8.29 14.34 5.43 37 XM_B_SpammyWords3 26131 6.94 14.22 3.49 38 RELAYCOUNTRY_META 26036 7.12 14.16 3.78 39 TR_MAX_INTL_RELAY 24622 8.32 13.40 5.91 40 BOTNET_IPINHOSTNAME 24489 6.75 13.32 3.63 41 TR_XM_SpammyRelay 17915 4.46 9.75 1.96 42 XM_Evil_Numbers_Gen 16512 8.76 8.98 8.65 43 RCVD_IN_BL_SPAMCOP_NET 16191 3.27 8.81 0.64 44 TR_XM_UnparsRelay 15555 3.64 8.46 1.35 45 BOTNET 15468 3.48 8.42 1.13 46 BAYES_80 15018 5.05 8.17 3.56 47 FSL_BULK_SIG 14707 5.85 8.00 4.83 48 BAYES_60 13895 8.03 7.56 8.26 49 XM_Body_Dirty_Words 13506 4.15 7.35 2.64 50 TR_XM_SPAMCOP 13256 2.55 7.21 0.34 51 LotsOfNums_01 13047 7.44 7.10 7.60 52 UNTRUSTED_Relay 11662 3.17 6.34 1.66 53 XM_B_PhoneNumber 10825 8.58 5.89 9.86 54 TR_LOTS_OF_MONEY3 10813 2.47 5.88 0.86 55 XMSubMetaSx_00 10426 4.38 5.67 3.76 56 HTML_IMAGE_RATIO_04 10235 10.99 5.57 13.57 57 XM_H_Long_From01 10215 4.91 5.56 4.60 58 XM_B_SEO 10149 2.49 5.52 1.05 59 HTML_IMAGE_RATIO_02 10132 4.90 5.51 4.62 60 MPART_ALT_DIFF 9881 7.71 5.38 8.82 61 TooManyTo_001 9746 7.64 5.30 8.75 62 XM_SPF_SoftFail 9599 3.52 5.22 2.72 63 XM_UncommonTLD01 9493 4.17 5.16 3.70 64 XMBody_17 9290 2.00 5.05 0.55 65 TR_XM_SpammyWords5 8978 2.34 4.88 1.13 66 XM_B_Phish_Phrases 8955 3.82 4.87 3.32 67 BAYES_95 8909 3.15 4.85 2.34 68 TR_XM_SEO4 8801 1.96 4.79 0.62 69 DKIM_INVALID 8584 2.87 4.67 2.01 70 RELAYCOUNTRY_CA 8583 2.23 4.67 1.07 71 XM_B_Investor 7841 2.24 4.27 1.27 72 T_XMDrugObfuBody_14 7706 2.38 4.19 1.51 73 XM_OfRef6 7429 2.03 4.04 1.07 74 HTML_IMAGE_RATIO_06 7416 4.38 4.03 4.54 75 XMNumbers 7224 2.73 3.93 2.17 76 XMStrtUSub 7186 8.42 3.91 10.56 77 XM_H_GMP 7177 5.12 3.90 5.70 78 XMSexyCombo_05 7170 2.43 3.90 1.74 79 MIME_HTML_MOSTLY 6860 2.66 3.73 2.15 80 TR_XM_PhishingBody 6785 2.24 3.69 1.55 81 XM_URI_RBL 6743 1.33 3.67 0.22 82 RCVD_IN_VALIDITY_SAFE 6419 3.93 3.49 4.14 83 MIME_QP_LONG_LINE 6407 4.18 3.49 4.51 84 XM_B_SpammyTLD 6122 2.57 3.33 2.20 85 MIME_HTML_ONLY_MULTI 6024 5.95 3.28 7.22 86 XMBrknScrpt_02 5984 1.68 3.26 0.93 87 XM_UB50 5964 1.63 3.24 0.86 88 TM2_M_VERY_LONG_WORD 5888 1.75 3.20 1.06 89 HTML_IMAGE_RATIO_08 5764 2.47 3.14 2.16 90 XMDiploma_00 5741 2.09 3.12 1.61 91 USER_IN_DEF_DKIM_WL 5608 9.20 3.05 12.11 92 T_XMDrugObfuBody_08 5540 1.91 3.01 1.39 93 XM_CamelCaseFrm001 5323 2.14 2.90 1.79 94 SUBJ_ALL_CAPS 5285 1.77 2.88 1.25 95 XM_B_Unsub2 5049 1.84 2.75 1.41 96 RCVD_IN_MSPIKE_WL 4902 4.49 2.67 5.35 97 RCVD_IN_MSPIKE_H3 4902 4.49 2.67 5.35 98 URI_TRY_3LD 4671 1.36 2.54 0.81 99 T_TooManySym_01 4639 4.28 2.52 5.12 100 T_XMHurry_00 4568 1.19 2.49 0.58 101 TM2_M_URI_OPT_OUT 4258 1.74 2.32 1.47 102 RCVD_IN_VALIDITY_RPBL 4244 0.81 2.31 0.10 103 MAILING_LIST_MULTI 4120 2.75 2.24 2.99 104 RELAYCOUNTRY_AU 3937 1.16 2.14 0.70 105 TR_XM_NoHeaderRelay 3905 0.77 2.12 0.13 106 XM_B_SpammyWords4 3887 1.02 2.11 0.50 107 RCVD_IN_VALIDITY_CERTIFIED 3881 2.89 2.11 3.26 108 T_REMOTE_IMAGE 3341 2.71 1.82 3.14 109 HTML_MIME_NO_HTML_TAG 3240 1.95 1.76 2.04 110 TR_XM_INV_DKIM 3234 0.61 1.76 0.07 111 XM_HighProb1 3200 0.57 1.74 0.01 112 SpammyFromTLD_01 3157 1.08 1.72 0.78 113 XMGenDplmaNmb 3103 1.08 1.69 0.79 114 HTML_TAG_BALANCE_BODY 3017 0.82 1.64 0.43 115 T_XMDrugObfuBody_00 2954 0.93 1.61 0.60 116 XMStockSpam_06 2854 1.17 1.55 0.98 117 BOUNCE_MESSAGE 2777 2.74 1.51 3.33 118 ANY_BOUNCE_MESSAGE 2777 2.74 1.51 3.33 119 URI_HEX 2741 1.22 1.49 1.10 120 AC_BR_BONANZA 2666 0.54 1.45 0.10 121 T_FILL_THIS_FORM_SHORT 2634 1.00 1.43 0.79 122 TR_XM_InvalidRelay 2632 0.48 1.43 0.04 123 TR_Symld_Words 2632 1.51 1.43 1.55 124 FROM_EXCESS_BASE64 2624 1.59 1.43 1.67 125 SpammyFromTLD_02 2570 0.72 1.40 0.40 126 BAYES_40 2539 4.08 1.38 5.36 127 XM_DK_Undo_01 2508 1.62 1.36 1.74 128 TR_XM_PHPForged 2508 1.32 1.36 1.29 129 URI_NOVOWEL 2504 1.22 1.36 1.16 130 XMSexyCombo_01 2489 0.55 1.35 0.17 131 XM_ProductURIs 2460 0.75 1.34 0.47 132 ALL_TRUSTED 2449 8.76 1.33 12.28 133 RCVD_IN_IADB_LISTED 2445 2.54 1.33 3.11 134 KHOP_HELO_FCRDNS 2424 1.17 1.32 1.10 135 TR_XM_PHPDW 2416 1.30 1.31 1.29 136 TR_XM_FormFill2 2381 1.30 1.30 1.30 137 XM_H_PHPOS 2366 1.29 1.29 1.28 138 XM_SendGrid 2362 1.24 1.29 1.22 139 THIS_AD 2273 0.64 1.24 0.35 140 TR_Mismatch_TLD_02 2245 0.44 1.22 0.07 141 HTTPS_HTTP_MISMATCH 2213 0.93 1.20 0.79 142 URIBL_DBL_SPAM 2210 0.39 1.20 0.00 143 XM_B_COPY_HTML 2187 0.82 1.19 0.65 144 LONGLN_LOW_CONTRAST 2172 0.52 1.18 0.20 145 RCVD_IN_IADB_SPF 2164 2.26 1.18 2.77 146 XM_B_Phish66 2154 0.56 1.17 0.27 147 TR_Caps_n_Bayes_99 2100 0.39 1.14 0.03 148 XM_DIRTYINTL 2069 0.44 1.13 0.11 149 RCVD_IN_IADB_SENDERID 2017 2.05 1.10 2.50 150 XMPhish30 2016 0.68 1.10 0.49 151 RCVD_IN_IADB_DK 2009 2.01 1.09 2.44 152 XMHTML_After_End 1995 0.55 1.09 0.30 153 XMReplyNow 1980 0.48 1.08 0.20 154 XMBdyGiftCard01 1978 0.80 1.08 0.67 155 BAYES_20 1969 2.84 1.07 3.67 156 RELAYCOUNTRY_FR 1942 0.49 1.06 0.22 157 HOSTED_IMG_MULTI_PUB_01 1901 0.34 1.03 0.02 158 TR_MetaPhish_Combo_01 1822 0.76 0.99 0.66 159 XM_UB99 1760 0.31 0.96 0.00 160 XM_B_DNDMA 1756 0.61 0.96 0.45 161 LongTLD 1747 0.52 0.95 0.32 162 DKIM_ADSP_CUSTOM_MED 1724 0.85 0.94 0.81 163 AC_HTML_NONSENSE_TAGS 1698 0.31 0.92 0.02 164 XMLngstWrd_00 1696 0.86 0.92 0.83 165 XM_H_Long_From02 1673 1.04 0.91 1.11 166 MPART_ALT_DIFF_COUNT 1670 0.54 0.91 0.36 167 XM_UB60 1651 0.33 0.90 0.07 168 XMSubMetaI_00 1642 0.54 0.89 0.37 169 DKIM_ADSP_NXDOMAIN 1635 0.46 0.89 0.26 170 TooManyTo_002 1600 2.59 0.87 3.40 171 TR_XM_Base64_M1 1593 0.78 0.87 0.74 172 XMHTMLBadTable_001 1589 0.44 0.86 0.25 173 HTML_IMAGE_ONLY_20 1578 0.54 0.86 0.39 174 TR_XM_DK_SendGrid 1540 0.80 0.84 0.78 175 DIET_1 1528 0.69 0.83 0.63 176 BOTNET_NORDNS 1519 0.27 0.83 0.01 177 RELAYCOUNTRY_GB 1495 0.53 0.81 0.39 178 T_Symld_Words_02 1451 0.64 0.79 0.56 179 HTML_FONT_FACE_BAD 1446 8.79 0.79 12.59 180 XM_PDF 1441 2.95 0.78 3.98 181 TR_XM_FormFill 1413 0.25 0.77 0.01 182 T_MONEY_PERCENT 1410 0.37 0.77 0.18 183 TR_LOTS_OF_MONEY2 1410 0.37 0.77 0.18 184 MISSING_HEADERS 1388 0.50 0.76 0.38 185 XMPhish14 1369 0.58 0.74 0.50 186 TR_XM_Spammywords 1364 0.40 0.74 0.24 187 XM_S_SpammyWords 1364 0.40 0.74 0.24 188 XMMoneyMeta_00 1357 0.53 0.74 0.43 189 HTML_FONT_TINY_NORDNS 1353 0.30 0.74 0.10 190 NML_ADSP_CUSTOM_MED 1335 0.57 0.73 0.50 191 RDNS_DYNAMIC 1330 0.45 0.72 0.31 192 FORGED_GMAIL_RCVD 1310 0.55 0.71 0.47 193 FROM_MISSP_EH_MATCH 1305 0.24 0.71 0.02 194 PLING_QUERY 1297 0.41 0.71 0.27 195 BAYES_05 1296 2.29 0.71 3.04 196 BAYES_00 1293 7.93 0.70 11.35 197 PDS_RDNS_DYNAMIC_FP 1292 0.34 0.70 0.17 198 T_STY_INVIS_DIRECT 1289 0.39 0.70 0.24 199 TooManyTo_003 1269 1.17 0.69 1.39 200 RELAYCOUNTRY_DE 1268 0.41 0.69 0.28 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 342261 91.12 97.03 88.33 2 RELAYCOUNTRY_US 327809 85.06 86.04 84.60 3 XM_B_Unicode 282314 77.02 85.79 72.86 4 DCC_CHECK_NEGATIVE 261248 53.81 25.11 67.42 5 DKIM_SIGNED 257278 74.64 92.03 66.39 6 XM_DK_Pass 253079 72.74 88.39 65.31 7 DKIM_VALID 249485 71.77 87.36 64.38 8 BAYES_50 224933 51.30 37.06 58.05 9 DKIM_VALID_AU 202031 58.19 70.97 52.14 10 XMListUnsubscribeExists 170391 53.81 74.56 43.97 11 XM_B_SpammyWords 163522 52.03 72.74 42.20 12 XM_B_Unicode3 162984 42.72 44.10 42.06 13 DCC_CHECK 126084 46.16 74.88 32.54 14 RCVD_IN_MSPIKE_H2 106638 31.43 39.66 27.52 15 T_TM2_M_HEADER_IN_MSG 104814 26.40 25.02 27.05 16 DKIM_VALID_EF 99849 27.04 29.74 25.77 17 HTML_FONT_LOW_CONTRAST 98152 30.12 40.22 25.33 18 FVGT_m_MULTI_ODD 90242 27.59 36.66 23.29 19 XMSubLong 88191 23.00 23.50 22.76 20 MIME_HTML_ONLY 86004 23.08 24.93 22.19 21 LOC_TINY_FONT_1 85506 28.51 42.09 22.07 22 T_KAM_HTML_FONT_INVALID 72495 22.13 29.34 18.71 23 XM_B_SpammyWords2 60702 24.04 41.70 15.67 24 HTML_IMAGE_RATIO_04 52579 10.99 5.57 13.57 25 HTML_FONT_FACE_BAD 48767 8.79 0.79 12.59 26 ALL_TRUSTED 47585 8.76 1.33 12.28 27 XM_Multi_Part_URI 47536 14.72 19.89 12.27 28 TR_XM_DK_Unsub 47294 15.32 21.89 12.20 29 USER_IN_DEF_DKIM_WL 46944 9.20 3.05 12.11 30 XM_H_Trusted_IP 46310 8.11 0.00 11.95 31 BAYES_00 44000 7.93 0.70 11.35 32 XMStrtUSub 40915 8.42 3.91 10.56 33 XM_B_PhoneNumber 38191 8.58 5.89 9.86 34 UNPARSEABLE_RELAY 34243 10.84 15.06 8.84 35 MPART_ALT_DIFF 34187 7.71 5.38 8.82 36 TooManyTo_001 33919 7.64 5.30 8.75 37 XM_Evil_Numbers_Gen 33512 8.76 8.98 8.65 38 BAYES_60 32005 8.03 7.56 8.26 39 LotsOfNums_01 29465 7.44 7.10 7.60 40 MIME_HTML_ONLY_MULTI 27958 5.95 3.28 7.22 41 IN_ZIMBRA_NJ_WHITELIST 27891 4.91 0.10 7.20 42 XM_B_Unsub 26204 9.41 14.98 6.76 43 XM_DKIMWhitelistDomains 26053 4.58 0.06 6.72 44 TR_MAX_INTL_RELAY 22883 8.32 13.40 5.91 45 LOTS_OF_MONEY 22459 9.75 18.08 5.80 46 XM_H_GMP 22073 5.12 3.90 5.70 47 XM_DK_Undo_02 21504 18.89 47.02 5.55 48 TR_XM_BayesUnsub 21034 8.29 14.34 5.43 49 BAYES_40 20770 4.08 1.38 5.36 50 RCVD_IN_MSPIKE_WL 20735 4.49 2.67 5.35 51 RCVD_IN_MSPIKE_H3 20732 4.49 2.67 5.35 52 T_TooManySym_01 19822 4.28 2.52 5.12 53 TR_XM_DK_Bayes 19747 3.62 0.51 5.10 54 TR_XM_DK_Bayes1 19495 3.57 0.50 5.03 55 FSL_BULK_SIG 18721 5.85 8.00 4.83 56 HTML_IMAGE_RATIO_02 17887 4.90 5.51 4.62 57 XM_H_Long_From01 17839 4.91 5.56 4.60 58 HTML_IMAGE_RATIO_06 17593 4.38 4.03 4.54 59 MIME_QP_LONG_LINE 17460 4.18 3.49 4.51 60 BAYES_99 16913 15.35 38.50 4.36 61 TR_XM_DK_Bayes2 16530 3.02 0.40 4.27 62 XMSubNoVowel 16226 2.93 0.29 4.19 63 RCVD_IN_VALIDITY_SAFE 16054 3.93 3.49 4.14 64 TR_XM_SpammyWords4 15575 7.90 16.08 4.02 65 XM_PDF 15410 2.95 0.78 3.98 66 RELAYCOUNTRY_META 14639 7.12 14.16 3.78 67 XMSubMetaSx_00 14571 4.38 5.67 3.76 68 XM_UncommonTLD01 14333 4.17 5.16 3.70 69 BAYES_20 14232 2.84 1.07 3.67 70 BOTNET_IPINHOSTNAME 14083 6.75 13.32 3.63 71 BAYES_80 13809 5.05 8.17 3.56 72 XM_B_SpammyWords3 13539 6.94 14.22 3.49 73 TooManyTo_002 13180 2.59 0.87 3.40 74 BAYES_999 12998 12.43 31.58 3.35 75 ANY_BOUNCE_MESSAGE 12901 2.74 1.51 3.33 76 BOUNCE_MESSAGE 12901 2.74 1.51 3.33 77 XM_B_Phish_Phrases 12884 3.82 4.87 3.32 78 RCVD_IN_VALIDITY_CERTIFIED 12649 2.89 2.11 3.26 79 T_REMOTE_IMAGE 12164 2.71 1.82 3.14 80 RCVD_IN_IADB_LISTED 12040 2.54 1.33 3.11 81 BAYES_05 11773 2.29 0.71 3.04 82 MAILING_LIST_MULTI 11594 2.75 2.24 2.99 83 RCVD_IN_IADB_SPF 10726 2.26 1.18 2.77 84 XM_SPF_SoftFail 10534 3.52 5.22 2.72 85 XM_Body_Dirty_Words 10230 4.15 7.35 2.64 86 T_TooManySym_02 9965 1.94 0.61 2.57 87 RCVD_IN_IADB_SENDERID 9678 2.05 1.10 2.50 88 RCVD_IN_IADB_DK 9447 2.01 1.09 2.44 89 BAYES_95 9062 3.15 4.85 2.34 90 TR_XM_DKIM_Undo 8768 12.79 34.99 2.26 91 XM_B_SpammyTLD 8532 2.57 3.33 2.20 92 XMNumbers 8394 2.73 3.93 2.17 93 HTML_IMAGE_RATIO_08 8361 2.47 3.14 2.16 94 MIME_HTML_MOSTLY 8347 2.66 3.73 2.15 95 XMSubLongNoVowel 8117 1.46 0.13 2.09 96 HTML_MIME_NO_HTML_TAG 7901 1.95 1.76 2.04 97 XMSubGarbage 7873 1.38 0.02 2.03 98 DKIM_INVALID 7793 2.87 4.67 2.01 99 RCVD_IN_IADB_VOUCHED 7711 1.57 0.68 1.99 100 TR_XM_SpammyRelay 7583 4.46 9.75 1.96 101 INVALID_MSGID 7380 1.34 0.15 1.90 102 TO_MALFORMED 7111 1.25 0.03 1.84 103 XM_CamelCaseFrm001 6924 2.14 2.90 1.79 104 TR_DCC_Bayes_99 6824 10.15 27.84 1.76 105 XM_DK_Undo_01 6745 1.62 1.36 1.74 106 XMSexyCombo_05 6728 2.43 3.90 1.74 107 FROM_EXCESS_BASE64 6474 1.59 1.43 1.67 108 UNTRUSTED_Relay 6432 3.17 6.34 1.66 109 HELO_NODOT 6359 1.22 0.34 1.64 110 HELO_NO_DOMAIN 6354 1.22 0.34 1.64 111 XMDiploma_00 6220 2.09 3.12 1.61 112 TR_XM_PhishingBody 5997 2.24 3.69 1.55 113 TR_Symld_Words 5992 1.51 1.43 1.55 114 T_XMDrugObfuBody_14 5866 2.38 4.19 1.51 115 TM2_M_URI_OPT_OUT 5711 1.74 2.32 1.47 116 XM_H_PHPMailer 5559 1.17 0.60 1.43 117 XM_B_Unsub2 5457 1.84 2.75 1.41 118 TooManyTo_003 5405 1.17 0.69 1.39 119 T_XMDrugObfuBody_08 5388 1.91 3.01 1.39 120 XMGappySubj_01 5315 1.00 0.22 1.37 121 RCVD_IN_IADB_OPTIN 5276 1.05 0.41 1.36 122 TR_XM_UnparsRelay 5244 3.64 8.46 1.35 123 TR_XM_FormFill2 5025 1.30 1.30 1.30 124 TR_XM_PHPDW 5018 1.30 1.31 1.29 125 TR_XM_PHPForged 5010 1.32 1.36 1.29 126 XM_H_PHPOS 4976 1.29 1.29 1.28 127 XM_B_Investor 4933 2.24 4.27 1.27 128 SUBJ_ALL_CAPS 4829 1.77 2.88 1.25 129 XM_B_FormFill 4821 0.89 0.15 1.24 130 XM_SendGrid 4746 1.24 1.29 1.22 131 IN_HORDE_ADDRESS_BOOK 4728 0.85 0.08 1.22 132 TVD_RCVD_IP 4631 1.01 0.62 1.20 133 URI_NOVOWEL 4476 1.22 1.36 1.16 134 BOTNET 4398 3.48 8.42 1.13 135 TR_XM_SpammyWords5 4364 2.34 4.88 1.13 136 XMNoVowels 4363 0.90 0.43 1.13 137 XM_H_Long_From02 4292 1.04 0.91 1.11 138 KHOP_HELO_FCRDNS 4266 1.17 1.32 1.10 139 XMCapTrack 4258 0.91 0.51 1.10 140 URI_HEX 4244 1.22 1.49 1.10 141 XM_OfRef6 4160 2.03 4.04 1.07 142 XM_GoogleGroups 4156 0.93 0.62 1.07 143 RELAYCOUNTRY_CA 4129 2.23 4.67 1.07 144 TM2_M_VERY_LONG_WORD 4112 1.75 3.20 1.06 145 XM_B_SEO 4052 2.49 5.52 1.05 146 TooManyTo_004 3889 0.89 0.65 1.00 147 XMBSHREFv2 3883 0.75 0.23 1.00 148 TVD_SPACE_RATIO 3819 0.71 0.13 0.99 149 XMStockSpam_06 3811 1.17 1.55 0.98 150 T_TooManySym_03 3809 0.74 0.23 0.98 151 XM_E_Blogspot 3651 0.66 0.08 0.94 152 XMBrknScrpt_02 3595 1.68 3.26 0.93 153 XM_H_PHPOS_M 3491 0.69 0.26 0.90 154 DATE_IN_PAST_06_12 3456 0.71 0.34 0.89 155 XM_UB50 3332 1.63 3.24 0.86 156 TR_LOTS_OF_MONEY3 3326 2.47 5.88 0.86 157 XMLngstWrd_00 3205 0.86 0.92 0.83 158 TooManyTo_005 3198 0.76 0.63 0.83 159 DKIM_ADSP_CUSTOM_MED 3142 0.85 0.94 0.81 160 URI_TRY_3LD 3127 1.36 2.54 0.81 161 HTTPS_HTTP_MISMATCH 3079 0.93 1.20 0.79 162 T_FILL_THIS_FORM_SHORT 3075 1.00 1.43 0.79 163 XMGenDplmaNmb 3057 1.08 1.69 0.79 164 TR_XM_DK_SendGrid 3038 0.80 0.84 0.78 165 SpammyFromTLD_01 3017 1.08 1.72 0.78 166 TR_XM_Base64_M1 2877 0.78 0.87 0.74 167 XMGappySubj_02 2830 0.51 0.05 0.73 168 RELAYCOUNTRY_AU 2713 1.16 2.14 0.70 169 XM_ShortIntro_01 2639 0.66 0.60 0.68 170 XMBdyGiftCard01 2605 0.80 1.08 0.67 171 TR_MetaPhish_Combo_01 2548 0.76 0.99 0.66 172 T_OBFU_PDF_ATTACH 2525 0.50 0.17 0.65 173 XM_B_COPY_HTML 2513 0.82 1.19 0.65 174 RCVD_IN_BL_SPAMCOP_NET 2466 3.27 8.81 0.64 175 DIET_1 2429 0.69 0.83 0.63 176 TR_XM_SEO4 2384 1.96 4.79 0.62 177 FROM_GOV_DKIM_AU 2352 0.59 0.54 0.61 178 T_XMDrugObfuBody_00 2333 0.93 1.61 0.60 179 T_XMHurry_00 2251 1.19 2.49 0.58 180 T_Symld_Words_02 2186 0.64 0.79 0.56 181 XMBody_17 2150 2.00 5.05 0.55 182 TR_XM_SpammyWords2 2009 5.25 15.21 0.52 183 USER_IN_WELCOMELIST 1963 0.34 0.00 0.51 184 USER_IN_WHITELIST 1963 0.34 0.00 0.51 185 SHORT_HELO_AND_INLINE_IMAGE 1959 0.37 0.07 0.51 186 XM_B_SpammyWords4 1939 1.02 2.11 0.50 187 XMBody_95 1933 0.42 0.24 0.50 188 NML_ADSP_CUSTOM_MED 1919 0.57 0.73 0.50 189 XMPhish14 1919 0.58 0.74 0.50 190 XMPhish30 1882 0.68 1.10 0.49 191 FORGED_GMAIL_RCVD 1838 0.55 0.71 0.47 192 XM_ProductURIs 1836 0.75 1.34 0.47 193 NO_DNS_FOR_FROM 1760 0.53 0.69 0.45 194 XM_B_DNDMA 1741 0.61 0.96 0.45 195 TO_NO_BRKTS_HTML_ONLY 1713 0.37 0.23 0.44 196 LOW_PRICE 1709 0.40 0.32 0.44 197 XMDateMe_00 1700 0.40 0.32 0.44 198 T_TooManySym_04 1698 0.32 0.06 0.44 199 HTML_TAG_BALANCE_BODY 1657 0.82 1.64 0.43 200 XMMoneyMeta_00 1650 0.53 0.74 0.43 ----------------------------------------------------------------------