Email: 503824 Autolearn: 0 AvgScore: 3.08 AvgScanTime: 1.55 sec Spam: 138094 Autolearn: 0 AvgScore: 14.43 AvgScanTime: 1.82 sec Ham: 365730 Autolearn: 0 AvgScore: -1.20 AvgScanTime: 1.45 sec Time Spent Running SA: 217.42 hours Time Spent Processing Spam: 69.99 hours Time Spent Processing Ham: 147.43 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 135816 99.24 98.35 99.57 2 HTML_MESSAGE 131871 90.93 95.49 89.21 3 DKIM_SIGNED 124336 73.85 90.04 67.73 4 XM_DK_Pass 117826 71.91 85.32 66.85 5 DKIM_VALID 116700 71.00 84.51 65.90 6 XM_B_Unicode 115938 76.52 83.96 73.72 7 RELAYCOUNTRY_US 113041 82.30 81.86 82.46 8 DCC_CHECK 104412 51.84 75.61 42.86 9 XM_B_SpammyWords 95293 52.82 69.01 46.71 10 XMListUnsubscribeExists 94256 50.36 68.25 43.61 11 DKIM_VALID_AU 91754 57.07 66.44 53.53 12 XM_B_Unicode3 69924 45.37 50.64 43.39 13 LOC_TINY_FONT_1 68392 31.81 49.53 25.12 14 BAYES_50 57172 52.60 41.40 56.83 15 XM_B_SpammyWords2 56290 24.52 40.76 18.39 16 XM_DK_Undo_02 54457 14.43 39.43 4.99 17 HTML_FONT_LOW_CONTRAST 52440 29.47 37.97 26.25 18 FVGT_m_MULTI_ODD 47204 26.34 34.18 23.38 19 DKIM_VALID_EF 43110 28.46 31.22 27.41 20 T_KAM_HTML_FONT_INVALID 42855 22.45 31.03 19.21 21 MIME_HTML_ONLY 42377 25.39 30.69 23.38 22 BAYES_99 41566 10.57 30.10 3.19 23 TR_XM_DKIM_Undo 39510 9.73 28.61 2.61 24 XMSubLong 37370 23.94 27.06 22.77 25 T_TM2_M_HEADER_IN_MSG 32885 27.16 23.81 28.43 26 BAYES_999 32128 8.09 23.27 2.36 27 DCC_CHECK_NEGATIVE 31628 47.73 22.90 57.11 28 TR_XM_DK_Unsub 31253 15.01 22.63 12.13 29 XM_Multi_Part_URI 29585 15.41 21.42 13.14 30 TR_DCC_Bayes_99 29309 6.64 21.22 1.13 31 XM_B_Unsub 26786 11.97 19.40 9.16 32 UNPARSEABLE_RELAY 26081 12.93 18.89 10.69 33 TR_XM_BayesUnsub 25784 10.30 18.67 7.14 34 RCVD_IN_MSPIKE_H2 25644 15.26 18.57 14.01 35 RELAYCOUNTRY_META 23675 7.15 17.14 3.37 36 XM_B_SpammyWords3 20338 7.20 14.73 4.36 37 TR_MAX_INTL_RELAY 19665 7.87 14.24 5.47 38 BOTNET_IPINHOSTNAME 18540 5.95 13.43 3.12 39 LOTS_OF_MONEY 17298 8.58 12.53 7.09 40 TR_XM_SpammyRelay 16791 4.61 12.16 1.76 41 TR_XM_SpammyWords4 15777 7.08 11.42 5.45 42 TR_XM_SpammyWords2 14418 3.13 10.44 0.36 43 FSL_BULK_SIG 13885 12.78 10.05 13.81 44 BOTNET 13712 3.93 9.93 1.66 45 TR_XM_UnparsRelay 13522 3.75 9.79 1.47 46 XM_Evil_Numbers_Gen 13518 10.09 9.79 10.21 47 RCVD_IN_MSPIKE_WL 12859 14.09 9.31 15.89 48 XM_B_Phish_Phrases 12355 6.79 8.95 5.98 49 BAYES_80 12153 4.82 8.80 3.31 50 RCVD_IN_BL_SPAMCOP_NET 11793 2.72 8.54 0.52 51 BAYES_60 10608 6.50 7.68 6.06 52 HTML_IMAGE_RATIO_02 10337 4.99 7.49 4.04 53 LotsOfNums_01 9535 6.97 6.90 7.00 54 XM_B_PhoneNumber 9434 8.54 6.83 9.18 55 XM_Body_Dirty_Words 9352 3.33 6.77 2.03 56 MPART_ALT_DIFF 9200 8.84 6.66 9.66 57 XMSubMetaSx_00 9090 4.07 6.58 3.12 58 RELAYCOUNTRY_CA 8774 2.30 6.35 0.77 59 UNTRUSTED_Relay 8512 2.74 6.16 1.44 60 XM_H_Long_From01 8354 5.34 6.05 5.07 61 XMStrtUSub 7984 9.87 5.78 11.42 62 DKIM_INVALID 7636 2.85 5.53 1.83 63 XM_UncommonTLD01 7634 4.19 5.53 3.69 64 HTML_IMAGE_RATIO_04 7281 11.08 5.27 13.27 65 RCVD_IN_MSPIKE_BL 7125 1.95 5.16 0.73 66 TR_XM_MSPIKECOMBO 7124 1.95 5.16 0.73 67 RCVD_IN_MSPIKE_H3 7091 6.61 5.13 7.16 68 BAYES_95 6820 2.91 4.94 2.15 69 XM_B_Investor 6735 2.33 4.88 1.37 70 TR_XM_PhishingBody 6480 2.31 4.69 1.41 71 TooManyTo_001 6371 6.74 4.61 7.55 72 XMSexyCombo_05 6000 1.93 4.34 1.02 73 TM2_M_VERY_LONG_WORD 5932 1.94 4.30 1.06 74 XM_B_SpammyTLD 5842 2.79 4.23 2.25 75 XM_H_GMP 5792 4.75 4.19 4.96 76 XM_OfRef6 5776 1.64 4.18 0.68 77 MIME_HTML_MOSTLY 5421 2.70 3.93 2.24 78 XM_CamelCaseFrm001 5342 2.27 3.87 1.67 79 XM_B_Unsub2 5184 1.87 3.75 1.16 80 TR_XM_SpammyWords3 4958 1.23 3.59 0.34 81 T_XMDrugObfuBody_14 4926 2.75 3.57 2.45 82 RCVD_IN_MSPIKE_L3 4904 1.34 3.55 0.50 83 MIME_HTML_ONLY_MULTI 4861 6.49 3.52 7.61 84 TR_XM_NoHeaderRelay 4848 1.07 3.51 0.15 85 TR_XM_SPAMCOP 4840 1.07 3.50 0.15 86 XM_URI_RBL 4703 1.14 3.41 0.28 87 XMNumbers 4595 3.14 3.33 3.07 88 TR_XM_SpammyWords5 4432 1.77 3.21 1.22 89 XM_B_URI_Unicode 4429 2.24 3.21 1.88 90 XM_SPF_SoftFail 4425 1.86 3.20 1.36 91 MIME_QP_LONG_LINE 4414 4.20 3.20 4.58 92 HTML_IMAGE_RATIO_06 4404 4.64 3.19 5.18 93 TM2_M_URI_OPT_OUT 4323 2.05 3.13 1.64 94 XM_B_SpammyWords4 4242 1.27 3.07 0.59 95 HTML_IMAGE_RATIO_08 4235 2.60 3.07 2.42 96 RELAYCOUNTRY_AU 4161 1.25 3.01 0.59 97 XM_UB50 4156 1.45 3.01 0.87 98 T_XMDrugObfuBody_08 4048 1.65 2.93 1.17 99 XMDiploma_00 4025 1.63 2.91 1.14 100 TR_XM_INV_DKIM 3849 0.78 2.79 0.03 101 T_TooManySym_01 3727 4.35 2.70 4.97 102 RCVD_IN_VALIDITY_RPBL 3635 0.80 2.63 0.11 103 XMStockSpam_06 3368 1.98 2.44 1.81 104 T_FILL_THIS_FORM_SHORT 3341 1.14 2.42 0.66 105 FROM_EXCESS_BASE64 3199 1.95 2.32 1.81 106 ALL_TRUSTED 3165 11.41 2.29 14.86 107 BAYES_40 3113 4.75 2.25 5.69 108 RCVD_IN_MSPIKE_H4 3051 2.97 2.21 3.26 109 USER_IN_DEF_DKIM_WL 3047 9.50 2.21 12.26 110 T_XMHurry_00 2982 0.91 2.16 0.43 111 XMBody_17 2970 0.84 2.15 0.34 112 MAILING_LIST_MULTI 2839 2.63 2.06 2.85 113 XM_H_Long_From02 2831 1.06 2.05 0.69 114 SpammyFromTLD_02 2755 0.86 2.00 0.44 115 RCVD_IN_VALIDITY_SAFE 2752 3.34 1.99 3.85 116 RCVD_IN_MSPIKE_H5 2717 4.51 1.97 5.47 117 XMGenDplmaNmb 2566 0.96 1.86 0.62 118 XM_DK_Undo_01 2525 1.53 1.83 1.42 119 XMBrknScrpt_02 2520 0.95 1.82 0.62 120 SpammyFromTLD_01 2479 1.04 1.80 0.76 121 SUBJ_ALL_CAPS 2421 1.49 1.75 1.39 122 T_XMDrugObfuBody_00 2345 0.94 1.70 0.65 123 TR_XM_MSPIKECOMBO2 2310 0.47 1.67 0.02 124 BAYES_20 2238 3.99 1.62 4.89 125 XMPhish30 2234 0.78 1.62 0.46 126 HTML_IMAGE_ONLY_20 2221 0.65 1.61 0.29 127 T_REMOTE_IMAGE 2179 2.78 1.58 3.24 128 RCVD_IN_VALIDITY_CERTIFIED 2163 2.80 1.57 3.27 129 T_MONEY_PERCENT 2131 0.61 1.54 0.26 130 TR_LOTS_OF_MONEY2 2131 0.61 1.54 0.26 131 URI_NOVOWEL 2070 1.24 1.50 1.14 132 SCC_BODY_URI_ONLY 2051 1.90 1.49 2.06 133 RCVD_IN_ZEN_LASTEXTERNAL 2026 0.40 1.47 0.00 134 SHORTCIRCUIT 2026 0.40 1.47 0.00 135 HTML_MIME_NO_HTML_TAG 2007 1.95 1.45 2.14 136 KHOP_HELO_FCRDNS 1993 1.30 1.44 1.24 137 XM_B_DNDMA 1990 0.71 1.44 0.44 138 TM2_M_OBFU_COMMENT 1972 0.74 1.43 0.48 139 XM_ProductURIs 1950 0.80 1.41 0.57 140 URI_HEX 1926 1.18 1.39 1.09 141 TR_MetaPhish_Combo_01 1902 1.40 1.38 1.40 142 DIET_1 1890 0.60 1.37 0.31 143 URI_TRY_3LD 1816 0.86 1.32 0.68 144 XM_B_COPY_HTML 1803 0.94 1.31 0.80 145 XM_SendGrid 1799 1.26 1.30 1.24 146 RDNS_DYNAMIC 1791 0.44 1.30 0.12 147 HTTPS_HTTP_MISMATCH 1785 0.78 1.29 0.59 148 PDS_RDNS_DYNAMIC_FP 1751 0.36 1.27 0.02 149 TR_XM_MaxSPIKE 1748 0.36 1.27 0.02 150 SHOPIFY_IMG_NOT_RCVD_SFY 1669 0.50 1.21 0.23 151 RCVD_IN_IADB_LISTED 1666 2.55 1.21 3.05 152 MPART_ALT_DIFF_COUNT 1637 0.66 1.19 0.47 153 XM_B_SEO 1633 0.50 1.18 0.24 154 RCVD_IN_PBL 1601 0.78 1.16 0.64 155 XM_HighProb1 1593 0.32 1.15 0.00 156 HTML_TAG_BALANCE_BODY 1586 0.62 1.15 0.43 157 TR_LOTS_OF_MONEY3 1573 0.50 1.14 0.25 158 TVD_RCVD_IP 1568 0.90 1.14 0.81 159 TR_Symld_Words 1534 1.21 1.11 1.25 160 XMClaimOffer 1525 0.47 1.10 0.23 161 TR_XM_SEO4 1524 0.39 1.10 0.12 162 XMSexyCombo_01 1505 0.39 1.09 0.12 163 RCVD_IN_IADB_SPF 1501 2.24 1.09 2.67 164 TR_XM_InvalidRelay 1484 0.31 1.07 0.02 165 XMBody_78 1477 0.49 1.07 0.28 166 TM2_M_A_HREF_HREF 1477 0.48 1.07 0.26 167 XMSubMetaI_00 1464 0.70 1.06 0.57 168 RCVD_IN_XBL 1464 0.31 1.06 0.02 169 RCVD_IN_IADB_DK 1450 1.97 1.05 2.32 170 RELAYCOUNTRY_GB 1449 0.67 1.05 0.52 171 RCVD_IN_IADB_SENDERID 1441 2.01 1.04 2.38 172 XM_UB99 1436 0.29 1.04 0.00 173 BOTNET_NORDNS 1427 0.29 1.03 0.01 174 XMPhish14 1411 0.58 1.02 0.42 175 RCVD_IN_PSBL 1401 0.54 1.01 0.36 176 URIBL_BLACK 1397 0.29 1.01 0.01 177 BOUNCE_MESSAGE 1394 2.45 1.01 2.99 178 ANY_BOUNCE_MESSAGE 1394 2.45 1.01 2.99 179 RCVD_IN_SBL_CSS 1387 0.30 1.00 0.03 180 XMBdyGiftCard01 1370 0.71 0.99 0.60 181 HELO_DYNAMIC_SPLIT_IP 1351 0.27 0.98 0.00 182 THIS_AD 1349 0.47 0.98 0.27 183 TR_XM_Base64_L1 1344 0.31 0.97 0.06 184 TR_XM_FormFill 1339 0.27 0.97 0.01 185 TR_XM_PHPForged 1336 0.69 0.97 0.59 186 TR_XM_FormFill2 1329 0.69 0.96 0.59 187 XM_B_Phish66 1325 0.45 0.96 0.26 188 RELAYCOUNTRY_FR 1322 0.41 0.96 0.20 189 DKIM_ADSP_NXDOMAIN 1322 0.44 0.96 0.25 190 TR_XM_PHPDW 1317 0.69 0.95 0.59 191 XM_DIRTYINTL 1296 0.30 0.94 0.06 192 RCVD_IN_MSPIKE_L4 1290 0.40 0.93 0.20 193 XM_H_PHPOS 1283 0.68 0.93 0.58 194 XM_GoogleGroups 1275 1.13 0.92 1.21 195 HTML_FONT_TINY_NORDNS 1257 0.33 0.91 0.11 196 DKIM_ADSP_CUSTOM_MED 1232 0.78 0.89 0.73 197 MultiRelay_CC 1228 0.35 0.89 0.14 198 LongTLD 1225 0.58 0.89 0.46 199 TR_XM_Base64_M1 1223 0.59 0.89 0.48 200 BAYES_00 1201 10.69 0.87 14.40 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 364164 99.24 98.35 99.57 2 HTML_MESSAGE 326281 90.93 95.49 89.21 3 RELAYCOUNTRY_US 301594 82.30 81.86 82.46 4 XM_B_Unicode 269598 76.52 83.96 73.72 5 DKIM_SIGNED 247720 73.85 90.04 67.73 6 XM_DK_Pass 244485 71.91 85.32 66.85 7 DKIM_VALID 241012 71.00 84.51 65.90 8 DCC_CHECK_NEGATIVE 208861 47.73 22.90 57.11 9 BAYES_50 207841 52.60 41.40 56.83 10 DKIM_VALID_AU 195757 57.07 66.44 53.53 11 XM_B_SpammyWords 170838 52.82 69.01 46.71 12 XMListUnsubscribeExists 159487 50.36 68.25 43.61 13 XM_B_Unicode3 158684 45.37 50.64 43.39 14 DCC_CHECK 156747 51.84 75.61 42.86 15 T_TM2_M_HEADER_IN_MSG 103974 27.16 23.81 28.43 16 DKIM_VALID_EF 100260 28.46 31.22 27.41 17 HTML_FONT_LOW_CONTRAST 96017 29.47 37.97 26.25 18 LOC_TINY_FONT_1 91877 31.81 49.53 25.12 19 MIME_HTML_ONLY 85525 25.39 30.69 23.38 20 FVGT_m_MULTI_ODD 85496 26.34 34.18 23.38 21 XMSubLong 83261 23.94 27.06 22.77 22 T_KAM_HTML_FONT_INVALID 70247 22.45 31.03 19.21 23 XM_B_SpammyWords2 67253 24.52 40.76 18.39 24 RCVD_IN_MSPIKE_WL 58123 14.09 9.31 15.89 25 ALL_TRUSTED 54331 11.41 2.29 14.86 26 BAYES_00 52678 10.69 0.87 14.40 27 RCVD_IN_MSPIKE_H2 51238 15.26 18.57 14.01 28 FSL_BULK_SIG 50491 12.78 10.05 13.81 29 HTML_IMAGE_RATIO_04 48526 11.08 5.27 13.27 30 XM_Multi_Part_URI 48050 15.41 21.42 13.14 31 USER_IN_DEF_DKIM_WL 44822 9.50 2.21 12.26 32 TR_XM_DK_Unsub 44359 15.01 22.63 12.13 33 HTML_FONT_FACE_BAD 43102 8.75 0.72 11.79 34 XMStrtUSub 41765 9.87 5.78 11.42 35 XM_H_Trusted_IP 40704 8.08 0.00 11.13 36 UNPARSEABLE_RELAY 39082 12.93 18.89 10.69 37 XM_Evil_Numbers_Gen 37325 10.09 9.79 10.21 38 MPART_ALT_DIFF 35329 8.84 6.66 9.66 39 XM_B_PhoneNumber 33591 8.54 6.83 9.18 40 XM_B_Unsub 33511 11.97 19.40 9.16 41 MIME_HTML_ONLY_MULTI 27832 6.49 3.52 7.61 42 TooManyTo_001 27600 6.74 4.61 7.55 43 XM_DKIMWhitelistDomains 27586 5.51 0.12 7.54 44 RCVD_IN_MSPIKE_H3 26187 6.61 5.13 7.16 45 TR_XM_BayesUnsub 26095 10.30 18.67 7.14 46 LOTS_OF_MONEY 25942 8.58 12.53 7.09 47 LotsOfNums_01 25598 6.97 6.90 7.00 48 TR_XM_DK_Bayes 25238 5.21 0.74 6.90 49 TR_XM_DK_Bayes1 24777 5.12 0.72 6.77 50 BAYES_60 22159 6.50 7.68 6.06 51 XM_B_Phish_Phrases 21862 6.79 8.95 5.98 52 TR_XM_DK_Bayes2 21174 4.31 0.41 5.79 53 BAYES_40 20808 4.75 2.25 5.69 54 RCVD_IN_MSPIKE_H5 20023 4.51 1.97 5.47 55 TR_MAX_INTL_RELAY 19997 7.87 14.24 5.47 56 TR_XM_SpammyWords4 19916 7.08 11.42 5.45 57 HTML_IMAGE_RATIO_06 18952 4.64 3.19 5.18 58 XM_H_Long_From01 18544 5.34 6.05 5.07 59 XM_DK_Undo_02 18238 14.43 39.43 4.99 60 T_TooManySym_01 18187 4.35 2.70 4.97 61 XM_H_GMP 18123 4.75 4.19 4.96 62 BAYES_20 17876 3.99 1.62 4.89 63 MIME_QP_LONG_LINE 16747 4.20 3.20 4.58 64 XM_B_SpammyWords3 15943 7.20 14.73 4.36 65 HTML_IMAGE_RATIO_02 14789 4.99 7.49 4.04 66 XMSubNoVowel 14432 3.00 0.50 3.95 67 RCVD_IN_VALIDITY_SAFE 14096 3.34 1.99 3.85 68 XM_UncommonTLD01 13498 4.19 5.53 3.69 69 XM_PDF 13359 2.86 0.75 3.65 70 BAYES_05 12634 2.74 0.86 3.45 71 RELAYCOUNTRY_META 12331 7.15 17.14 3.37 72 BAYES_80 12118 4.82 8.80 3.31 73 RCVD_IN_VALIDITY_CERTIFIED 11958 2.80 1.57 3.27 74 RCVD_IN_MSPIKE_H4 11913 2.97 2.21 3.26 75 T_REMOTE_IMAGE 11837 2.78 1.58 3.24 76 BAYES_99 11679 10.57 30.10 3.19 77 XMSubMetaSx_00 11418 4.07 6.58 3.12 78 BOTNET_IPINHOSTNAME 11415 5.95 13.43 3.12 79 XMNumbers 11218 3.14 3.33 3.07 80 RCVD_IN_IADB_LISTED 11173 2.55 1.21 3.05 81 ANY_BOUNCE_MESSAGE 10933 2.45 1.01 2.99 82 BOUNCE_MESSAGE 10933 2.45 1.01 2.99 83 MAILING_LIST_MULTI 10435 2.63 2.06 2.85 84 TooManyTo_002 10073 2.20 0.73 2.75 85 RCVD_IN_IADB_SPF 9782 2.24 1.09 2.67 86 TR_XM_DKIM_Undo 9535 9.73 28.61 2.61 87 T_TooManySym_02 9040 2.03 0.86 2.47 88 T_XMDrugObfuBody_14 8946 2.75 3.57 2.45 89 HTML_IMAGE_RATIO_08 8868 2.60 3.07 2.42 90 RCVD_IN_IADB_SENDERID 8710 2.01 1.04 2.38 91 BAYES_999 8627 8.09 23.27 2.36 92 RCVD_IN_IADB_DK 8489 1.97 1.05 2.32 93 XM_B_SpammyTLD 8239 2.79 4.23 2.25 94 MIME_HTML_MOSTLY 8199 2.70 3.93 2.24 95 BAYES_95 7865 2.91 4.94 2.15 96 HTML_MIME_NO_HTML_TAG 7809 1.95 1.45 2.14 97 SCC_BODY_URI_ONLY 7540 1.90 1.49 2.06 98 XM_Body_Dirty_Words 7420 3.33 6.77 2.03 99 INVALID_MSGID 7254 1.53 0.34 1.98 100 RCVD_IN_IADB_VOUCHED 7239 1.58 0.51 1.98 101 XM_B_URI_Unicode 6862 2.24 3.21 1.88 102 XMSubLongNoVowel 6838 1.38 0.10 1.87 103 DKIM_INVALID 6708 2.85 5.53 1.83 104 XMSubGarbage 6638 1.32 0.01 1.82 105 FROM_EXCESS_BASE64 6612 1.95 2.32 1.81 106 XMStockSpam_06 6608 1.98 2.44 1.81 107 TR_XM_SpammyRelay 6442 4.61 12.16 1.76 108 TO_MALFORMED 6280 1.25 0.02 1.72 109 XM_CamelCaseFrm001 6112 2.27 3.87 1.67 110 BOTNET 6076 3.93 9.93 1.66 111 TM2_M_URI_OPT_OUT 5994 2.05 3.13 1.64 112 TooManyTo_003 5602 1.26 0.53 1.53 113 TR_XM_UnparsRelay 5373 3.75 9.79 1.47 114 UNTRUSTED_Relay 5282 2.74 6.16 1.44 115 XM_DK_Undo_01 5190 1.53 1.83 1.42 116 TR_XM_PhishingBody 5151 2.31 4.69 1.41 117 TR_MetaPhish_Combo_01 5135 1.40 1.38 1.40 118 SUBJ_ALL_CAPS 5084 1.49 1.75 1.39 119 RCVD_IN_IADB_OPTIN 5052 1.09 0.34 1.38 120 XM_B_Investor 5004 2.33 4.88 1.37 121 XM_SPF_SoftFail 4965 1.86 3.20 1.36 122 TR_Symld_Words 4581 1.21 1.11 1.25 123 KHOP_HELO_FCRDNS 4543 1.30 1.44 1.24 124 XM_SendGrid 4528 1.26 1.30 1.24 125 TR_XM_SpammyWords5 4470 1.77 3.21 1.22 126 XM_GoogleGroups 4408 1.13 0.92 1.21 127 T_XMDrugObfuBody_08 4268 1.65 2.93 1.17 128 IN_HORDE_ADDRESS_BOOK 4264 0.87 0.08 1.17 129 XM_B_Unsub2 4227 1.87 3.75 1.16 130 HELO_NODOT 4197 0.87 0.14 1.15 131 HELO_NO_DOMAIN 4194 0.87 0.13 1.15 132 URI_NOVOWEL 4183 1.24 1.50 1.14 133 XMDiploma_00 4165 1.63 2.91 1.14 134 TR_DCC_Bayes_99 4129 6.64 21.22 1.13 135 TooManyTo_004 4045 0.93 0.47 1.11 136 URI_HEX 3994 1.18 1.39 1.09 137 XMGappySubj_01 3887 0.84 0.27 1.06 138 TM2_M_VERY_LONG_WORD 3863 1.94 4.30 1.06 139 XMCapTrack 3769 0.90 0.54 1.03 140 FROM_GOV_DKIM_AU 3732 0.88 0.51 1.02 141 XMSexyCombo_05 3716 1.93 4.34 1.02 142 T_TooManySym_03 3660 0.83 0.37 1.00 143 XM_E_Blogspot 3355 0.71 0.17 0.92 144 TooManyTo_005 3210 0.75 0.43 0.88 145 XM_ShortIntro_01 3180 0.74 0.38 0.87 146 XM_UB50 3166 1.45 3.01 0.87 147 TVD_SPACE_RATIO 3045 0.69 0.31 0.83 148 TVD_RCVD_IP 2961 0.90 1.14 0.81 149 XM_B_COPY_HTML 2938 0.94 1.31 0.80 150 TR_XM_DK_SendGrid 2894 0.79 0.79 0.79 151 RELAYCOUNTRY_CA 2819 2.30 6.35 0.77 152 SpammyFromTLD_01 2773 1.04 1.80 0.76 153 DKIM_ADSP_CUSTOM_MED 2685 0.78 0.89 0.73 154 RCVD_IN_MSPIKE_BL 2684 1.95 5.16 0.73 155 TR_XM_MSPIKECOMBO 2683 1.95 5.16 0.73 156 URI_OPTOUT_3LD 2664 0.66 0.48 0.73 157 XM_H_Long_From02 2513 1.06 2.05 0.69 158 XM_OfRef6 2505 1.64 4.18 0.68 159 URI_TRY_3LD 2493 0.86 1.32 0.68 160 XM_B_FormFill 2466 0.50 0.04 0.67 161 T_FILL_THIS_FORM_SHORT 2418 1.14 2.42 0.66 162 T_XMDrugObfuBody_00 2373 0.94 1.70 0.65 163 RCVD_IN_PBL 2352 0.78 1.16 0.64 164 XM_H_PHPMailer 2309 0.59 0.49 0.63 165 XMBrknScrpt_02 2280 0.95 1.82 0.62 166 XMGenDplmaNmb 2259 0.96 1.86 0.62 167 XMBdyGiftCard01 2189 0.71 0.99 0.60 168 TR_XM_PHPDW 2174 0.69 0.95 0.59 169 HTTPS_HTTP_MISMATCH 2167 0.78 1.29 0.59 170 TR_XM_FormFill2 2166 0.69 0.96 0.59 171 TR_XM_PHPForged 2152 0.69 0.97 0.59 172 XM_B_SpammyWords4 2151 1.27 3.07 0.59 173 RELAYCOUNTRY_AU 2150 1.25 3.01 0.59 174 XM_H_PHPOS 2134 0.68 0.93 0.58 175 XMNoVowels 2088 0.58 0.62 0.57 176 XM_ProductURIs 2080 0.80 1.41 0.57 177 XMSubMetaI_00 2078 0.70 1.06 0.57 178 T_Symld_Words_02 2013 0.61 0.77 0.55 179 RCVD_IN_BL_SPAMCOP_NET 1919 2.72 8.54 0.52 180 RELAYCOUNTRY_GB 1916 0.67 1.05 0.52 181 XMSlimDrugH 1866 0.51 0.50 0.51 182 XMBSHREFv2 1841 0.44 0.28 0.50 183 RCVD_IN_MSPIKE_L3 1837 1.34 3.55 0.50 184 XMGappySubj_02 1826 0.39 0.09 0.50 185 XMLngstWrd_00 1775 0.44 0.34 0.49 186 T_OBFU_PDF_ATTACH 1767 0.39 0.15 0.48 187 TM2_M_OBFU_COMMENT 1739 0.74 1.43 0.48 188 TR_XM_Base64_M1 1738 0.59 0.89 0.48 189 MPART_ALT_DIFF_COUNT 1708 0.66 1.19 0.47 190 LongTLD 1690 0.58 0.89 0.46 191 NML_ADSP_CUSTOM_MED 1684 0.54 0.76 0.46 192 XMPhish30 1682 0.78 1.62 0.46 193 FORGED_GMAIL_RCVD 1623 0.50 0.64 0.44 194 XM_B_DNDMA 1606 0.71 1.44 0.44 195 XMLngstWrd_01 1602 0.40 0.31 0.44 196 SpammyFromTLD_02 1602 0.86 2.00 0.44 197 T_XMHurry_00 1590 0.91 2.16 0.43 198 HTML_TAG_BALANCE_BODY 1555 0.62 1.15 0.43 199 XMPhish14 1518 0.58 1.02 0.42 200 XMDateMe_00 1506 0.42 0.46 0.41 ----------------------------------------------------------------------