Email: 453886 Autolearn: 0 AvgScore: 5.24 AvgScanTime: 1.42 sec Spam: 141139 Autolearn: 0 AvgScore: 14.76 AvgScanTime: 1.57 sec Ham: 312747 Autolearn: 0 AvgScore: 0.95 AvgScanTime: 1.36 sec Time Spent Running SA: 179.50 hours Time Spent Processing Spam: 61.57 hours Time Spent Processing Ham: 117.93 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 138755 98.92 98.31 99.20 2 HTML_MESSAGE 133957 88.88 94.91 86.16 3 DKIM_SIGNED 127528 82.40 90.36 78.82 4 XM_DK_Pass 120028 79.96 85.04 77.67 5 XM_B_Unicode 119300 76.37 84.53 72.68 6 DKIM_VALID 118957 79.06 84.28 76.70 7 RELAYCOUNTRY_US 114349 82.04 81.02 82.50 8 DCC_CHECK 105622 52.60 74.84 42.56 9 XMListUnsubscribeExists 95475 55.20 67.65 49.58 10 XM_B_SpammyWords 94116 52.08 66.68 45.49 11 DKIM_VALID_AU 90572 62.99 64.17 62.46 12 XM_B_Unicode3 70083 44.29 49.66 41.87 13 LOC_TINY_FONT_1 66807 34.61 47.33 28.86 14 XM_DK_Undo_02 60121 17.38 42.60 6.00 15 BAYES_50 55645 53.92 39.43 60.45 16 XM_B_SpammyWords2 54554 24.52 38.65 18.15 17 HTML_FONT_LOW_CONTRAST 50663 30.24 35.90 27.69 18 FVGT_m_MULTI_ODD 47933 29.18 33.96 27.03 19 BAYES_99 44101 12.71 31.25 4.34 20 DKIM_VALID_EF 43409 31.46 30.76 31.78 21 T_KAM_HTML_FONT_INVALID 43342 25.27 30.71 22.81 22 MIME_HTML_ONLY 43194 22.41 30.60 18.71 23 TR_XM_DKIM_Undo 41841 11.25 29.65 2.95 24 XMSubLong 34279 24.29 24.29 24.30 25 BAYES_999 33918 9.83 24.03 3.43 26 DCC_CHECK_NEGATIVE 33425 46.90 23.68 57.38 27 TR_XM_DK_Unsub 31631 16.74 22.41 14.17 28 T_TM2_M_HEADER_IN_MSG 30938 26.66 21.92 28.80 29 TR_DCC_Bayes_99 30674 8.23 21.73 2.14 30 XM_Multi_Part_URI 29023 16.91 20.56 15.27 31 RCVD_IN_MSPIKE_H2 28525 17.99 20.21 16.98 32 XM_B_Unsub 27748 12.33 19.66 9.02 33 TR_XM_BayesUnsub 26444 10.82 18.74 7.25 34 RELAYCOUNTRY_META 24804 8.14 17.57 3.88 35 UNPARSEABLE_RELAY 24477 13.80 17.34 12.21 36 TR_MAX_INTL_RELAY 21787 9.08 15.44 6.22 37 XM_B_SpammyWords3 20390 8.20 14.45 5.38 38 LOTS_OF_MONEY 19007 8.30 13.47 5.97 39 BOTNET_IPINHOSTNAME 18450 6.35 13.07 3.31 40 RCVD_IN_BL_SPAMCOP_NET 17854 4.50 12.65 0.83 41 TR_XM_SpammyRelay 17512 5.19 12.41 1.93 42 TR_XM_SpammyWords4 16859 6.46 11.94 3.98 43 FSL_BULK_SIG 15037 9.59 10.65 9.11 44 BOTNET 14967 4.28 10.60 1.43 45 TR_XM_SpammyWords2 14637 3.59 10.37 0.52 46 XM_Evil_Numbers_Gen 14415 9.38 10.21 9.00 47 RCVD_IN_MSPIKE_WL 13962 15.88 9.89 18.58 48 BAYES_80 13373 5.57 9.48 3.80 49 TR_XM_UnparsRelay 13061 4.06 9.25 1.72 50 XM_B_Phish_Phrases 12010 6.85 8.51 6.11 51 BAYES_60 11600 7.42 8.22 7.06 52 XMSubMetaSx_00 11269 5.11 7.98 3.82 53 XM_UncommonTLD01 10701 5.18 7.58 4.09 54 UNTRUSTED_Relay 9853 3.29 6.98 1.62 55 LotsOfNums_01 9769 7.79 6.92 8.19 56 HTML_IMAGE_RATIO_02 9599 5.35 6.80 4.70 57 MPART_ALT_DIFF 9433 5.22 6.68 4.56 58 RELAYCOUNTRY_CA 9150 2.57 6.48 0.81 59 XM_Body_Dirty_Words 8753 3.63 6.20 2.47 60 XM_B_PhoneNumber 8684 8.67 6.15 9.81 61 XM_H_Long_From01 8648 5.93 6.13 5.85 62 DKIM_INVALID 8571 3.34 6.07 2.11 63 BAYES_95 7939 3.41 5.62 2.41 64 TR_XM_SPAMCOP 7912 1.92 5.61 0.25 65 XM_B_Investor 7736 2.72 5.48 1.48 66 XMSexyCombo_05 7377 2.45 5.23 1.20 67 RCVD_IN_MSPIKE_BL 7356 2.27 5.21 0.94 68 TR_XM_MSPIKECOMBO 7330 2.26 5.19 0.94 69 XM_H_GMP 6907 5.54 4.89 5.83 70 HTML_IMAGE_RATIO_04 6554 4.37 4.64 4.25 71 XMStrtUSub 6381 5.04 4.52 5.28 72 RCVD_IN_MSPIKE_H3 6098 7.24 4.32 8.56 73 TR_XM_PhishingBody 6084 2.93 4.31 2.31 74 HTML_IMAGE_RATIO_06 6050 3.87 4.29 3.69 75 XM_B_SpammyTLD 5821 3.26 4.12 2.87 76 T_XMDrugObfuBody_14 5813 2.93 4.12 2.39 77 TooManyTo_001 5724 7.08 4.06 8.44 78 TM2_M_VERY_LONG_WORD 5705 2.36 4.04 1.60 79 XM_OfRef6 5669 1.91 4.02 0.96 80 XM_CamelCaseFrm001 5129 2.49 3.63 1.97 81 XM_UB50 5104 1.81 3.62 1.00 82 MIME_QP_LONG_LINE 4945 4.90 3.50 5.53 83 XMNumbers 4868 3.51 3.45 3.54 84 MIME_HTML_MOSTLY 4864 2.68 3.45 2.34 85 TR_XM_SpammyWords5 4785 2.06 3.39 1.46 86 RCVD_IN_MSPIKE_H4 4777 3.78 3.38 3.96 87 TR_XM_NoHeaderRelay 4730 1.19 3.35 0.22 88 TR_XM_SpammyWords3 4684 1.30 3.32 0.39 89 SpammyFromTLD_02 4603 1.37 3.26 0.52 90 MIME_HTML_ONLY_MULTI 4337 2.63 3.07 2.44 91 XM_URI_RBL 4234 1.16 3.00 0.32 92 TM2_M_URI_OPT_OUT 4232 2.22 3.00 1.87 93 XM_SPF_SoftFail 4158 1.95 2.95 1.51 94 XM_B_Unsub2 4153 1.75 2.94 1.22 95 T_XMDrugObfuBody_08 4135 2.21 2.93 1.88 96 RCVD_IN_MSPIKE_L3 3979 1.36 2.82 0.70 97 XM_B_URI_Unicode 3967 2.09 2.81 1.76 98 RELAYCOUNTRY_AU 3893 1.34 2.76 0.71 99 XMBody_17 3815 1.23 2.70 0.56 100 XMDiploma_00 3800 1.76 2.69 1.34 101 RCVD_IN_VALIDITY_RPBL 3778 0.87 2.68 0.06 102 TR_XM_INV_DKIM 3760 0.88 2.66 0.08 103 XM_SendGrid 3684 3.10 2.61 3.32 104 T_TooManySym_01 3599 4.78 2.55 5.78 105 XM_B_SpammyWords4 3582 1.31 2.54 0.75 106 FROM_EXCESS_BASE64 3480 1.78 2.47 1.47 107 T_XMHurry_00 3401 1.35 2.41 0.87 108 T_FILL_THIS_FORM_SHORT 3301 1.30 2.34 0.83 109 HTML_IMAGE_RATIO_08 3228 2.37 2.29 2.40 110 RCVD_IN_MSPIKE_L4 3158 0.86 2.24 0.23 111 MAILING_LIST_MULTI 3098 2.84 2.19 3.13 112 RCVD_IN_MSPIKE_H5 3087 4.85 2.19 6.06 113 USER_IN_DEF_DKIM_WL 3022 10.21 2.14 13.85 114 RCVD_IN_VALIDITY_SAFE 3005 3.69 2.13 4.39 115 XM_H_Long_From02 2983 1.35 2.11 1.00 116 SCC_BODY_URI_ONLY 2848 2.23 2.02 2.32 117 XMStockSpam_06 2729 1.48 1.93 1.27 118 XMBrknScrpt_02 2705 1.15 1.92 0.81 119 BAYES_40 2666 4.10 1.89 5.10 120 RCVD_IN_PBL 2553 1.07 1.81 0.74 121 HTML_MIME_NO_HTML_TAG 2538 2.44 1.80 2.73 122 ALL_TRUSTED 2520 10.38 1.79 14.26 123 SpammyFromTLD_01 2459 1.12 1.74 0.84 124 RCVD_IN_VALIDITY_CERTIFIED 2354 3.01 1.67 3.62 125 DKIM_ADSP_NXDOMAIN 2332 0.70 1.65 0.27 126 HTML_IMAGE_ONLY_20 2293 0.71 1.62 0.29 127 T_XMDrugObfuBody_00 2291 1.44 1.62 1.36 128 BOTNET_NORDNS 2265 0.51 1.60 0.01 129 LongTLD 2261 0.75 1.60 0.36 130 TR_LOTS_OF_MONEY2 2255 0.64 1.60 0.20 131 T_MONEY_PERCENT 2255 0.64 1.60 0.20 132 RCVD_IN_XBL 2253 0.51 1.60 0.02 133 URI_NOVOWEL 2246 1.45 1.59 1.38 134 TR_XM_DK_SendGrid 2223 2.04 1.58 2.25 135 TR_XM_MSPIKECOMBO2 2199 0.51 1.56 0.04 136 TR_LOTS_OF_MONEY3 2177 0.68 1.54 0.30 137 TR_XM_PHPForged 2103 0.69 1.49 0.33 138 XMPhish30 2076 0.82 1.47 0.53 139 RCVD_IN_ZEN_LASTEXTERNAL 2074 0.46 1.47 0.00 140 SHORTCIRCUIT 2074 0.46 1.47 0.00 141 SUBJ_ALL_CAPS 2070 1.47 1.47 1.48 142 XM_DK_Undo_01 2066 1.75 1.46 1.88 143 TR_XM_PHPDW 2063 0.68 1.46 0.33 144 TR_XM_FormFill2 2063 0.69 1.46 0.34 145 XM_H_PHPOS 2029 0.67 1.44 0.32 146 RCVD_IN_IADB_LISTED 2003 3.00 1.42 3.72 147 XM_B_DNDMA 1979 0.80 1.40 0.52 148 HK_RANDOM_REPLYTO 1970 0.53 1.40 0.13 149 ANY_BOUNCE_MESSAGE 1963 2.64 1.39 3.21 150 BOUNCE_MESSAGE 1959 2.64 1.39 3.21 151 T_REMOTE_IMAGE 1927 2.96 1.37 3.69 152 XMGenDplmaNmb 1919 0.96 1.36 0.78 153 XMBdyGiftCard01 1897 1.22 1.34 1.16 154 KHOP_HELO_FCRDNS 1838 1.30 1.30 1.31 155 URI_TRY_3LD 1829 0.72 1.30 0.46 156 XMMoneyMeta_00 1827 0.77 1.29 0.53 157 RDNS_DYNAMIC 1823 0.52 1.29 0.17 158 XM_B_Phish66 1790 0.63 1.27 0.34 159 DKIM_ADSP_CUSTOM_MED 1786 0.99 1.27 0.86 160 PDS_RDNS_DYNAMIC_FP 1776 0.42 1.26 0.04 161 TR_Mismatch_TLD_02 1755 0.43 1.24 0.07 162 TM2_M_A_HREF_HREF 1750 0.54 1.24 0.23 163 MultiRelay_CC 1731 0.53 1.23 0.21 164 URI_HEX 1730 1.27 1.23 1.29 165 URIBL_BLACK 1715 0.39 1.22 0.02 166 TR_XM_Base64_M1 1702 0.79 1.21 0.60 167 RCVD_IN_IADB_SPF 1692 2.62 1.20 3.26 168 XMBody_78 1669 0.60 1.18 0.34 169 XM_ProductURIs 1668 0.64 1.18 0.39 170 TR_XM_InvalidRelay 1653 0.37 1.17 0.01 171 BAYES_20 1620 2.88 1.15 3.66 172 XM_B_SEO 1590 0.53 1.13 0.26 173 RCVD_IN_IADB_DK 1584 2.25 1.12 2.77 174 TVD_RCVD_IP 1576 0.95 1.12 0.87 175 RCVD_IN_IADB_SENDERID 1575 2.33 1.12 2.88 176 TR_XM_MaxSPIKE 1571 0.36 1.11 0.03 177 XM_S_SpammyWords 1562 0.46 1.11 0.17 178 TR_XM_Spammywords 1561 0.46 1.11 0.17 179 HTTPS_HTTP_MISMATCH 1550 0.81 1.10 0.68 180 FROM_SUSPICIOUS_NTLD 1547 0.38 1.10 0.06 181 TR_Mismatch_TLD_01 1449 0.55 1.03 0.34 182 DIET_1 1449 0.48 1.03 0.23 183 XM_HighProb1 1448 0.32 1.03 0.01 184 XM_UB99 1444 0.32 1.02 0.00 185 RCVD_IN_SBL 1418 0.31 1.00 0.00 186 XM_GoogleGroups 1418 1.23 1.00 1.33 187 RCVD_IN_PSBL 1414 0.50 1.00 0.27 188 XMSubMetaSxObfu_03 1410 0.59 1.00 0.41 189 MPART_ALT_DIFF_COUNT 1410 0.68 1.00 0.54 190 XM_B_COPY_HTML 1393 0.82 0.99 0.74 191 TR_XM_SEO4 1389 0.39 0.98 0.13 192 RELAYCOUNTRY_FR 1388 0.49 0.98 0.26 193 XMSubMetaI_00 1383 0.73 0.98 0.62 194 TR_XM_FormFill 1366 0.31 0.97 0.01 195 XM_DIRTYINTL 1346 0.35 0.95 0.08 196 XMLngstWrd_00 1331 0.68 0.94 0.56 197 T_STY_INVIS_DIRECT 1329 0.62 0.94 0.47 198 RCVD_IN_SBL_DROP 1324 0.29 0.94 0.00 199 HTML_FONT_TINY_NORDNS 1302 0.36 0.92 0.11 200 THIS_AD 1290 0.84 0.91 0.80 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 310246 98.92 98.31 99.20 2 HTML_MESSAGE 269462 88.88 94.91 86.16 3 RELAYCOUNTRY_US 258013 82.04 81.02 82.50 4 DKIM_SIGNED 246496 82.40 90.36 78.82 5 XM_DK_Pass 242906 79.96 85.04 77.67 6 DKIM_VALID 239886 79.06 84.28 76.70 7 XM_B_Unicode 227318 76.37 84.53 72.68 8 DKIM_VALID_AU 195346 62.99 64.17 62.46 9 BAYES_50 189070 53.92 39.43 60.45 10 DCC_CHECK_NEGATIVE 179458 46.90 23.68 57.38 11 XMListUnsubscribeExists 155056 55.20 67.65 49.58 12 XM_B_SpammyWords 142254 52.08 66.68 45.49 13 DCC_CHECK 133116 52.60 74.84 42.56 14 XM_B_Unicode3 130932 44.29 49.66 41.87 15 DKIM_VALID_EF 99394 31.46 30.76 31.78 16 LOC_TINY_FONT_1 90262 34.61 47.33 28.86 17 T_TM2_M_HEADER_IN_MSG 90057 26.66 21.92 28.80 18 HTML_FONT_LOW_CONTRAST 86606 30.24 35.90 27.69 19 FVGT_m_MULTI_ODD 84533 29.18 33.96 27.03 20 XMSubLong 75992 24.29 24.29 24.30 21 T_KAM_HTML_FONT_INVALID 71342 25.27 30.71 22.81 22 MIME_HTML_ONLY 58514 22.41 30.60 18.71 23 RCVD_IN_MSPIKE_WL 58106 15.88 9.89 18.58 24 XM_B_SpammyWords2 56753 24.52 38.65 18.15 25 RCVD_IN_MSPIKE_H2 53112 17.99 20.21 16.98 26 XM_Multi_Part_URI 47749 16.91 20.56 15.27 27 ALL_TRUSTED 44590 10.38 1.79 14.26 28 TR_XM_DK_Unsub 44329 16.74 22.41 14.17 29 USER_IN_DEF_DKIM_WL 43331 10.21 2.14 13.85 30 UNPARSEABLE_RELAY 38177 13.80 17.34 12.21 31 BAYES_00 34187 7.80 0.85 10.93 32 XM_B_PhoneNumber 30678 8.67 6.15 9.81 33 FSL_BULK_SIG 28494 9.59 10.65 9.11 34 XM_B_Unsub 28207 12.33 19.66 9.02 35 XM_Evil_Numbers_Gen 28141 9.38 10.21 9.00 36 RCVD_IN_MSPIKE_H3 26771 7.24 4.32 8.56 37 TooManyTo_001 26401 7.08 4.06 8.44 38 LotsOfNums_01 25601 7.79 6.92 8.19 39 TR_XM_DK_Bayes 24289 5.58 0.74 7.77 40 TR_XM_DK_Bayes1 23988 5.51 0.73 7.67 41 XM_DKIMWhitelistDomains 23031 5.09 0.04 7.36 42 TR_XM_BayesUnsub 22686 10.82 18.74 7.25 43 BAYES_60 22074 7.42 8.22 7.06 44 TR_XM_DK_Bayes2 20772 4.75 0.57 6.64 45 TR_MAX_INTL_RELAY 19445 9.08 15.44 6.22 46 XM_B_Phish_Phrases 19096 6.85 8.51 6.11 47 RCVD_IN_MSPIKE_H5 18940 4.85 2.19 6.06 48 XM_DK_Undo_02 18753 17.38 42.60 6.00 49 LOTS_OF_MONEY 18681 8.30 13.47 5.97 50 XM_H_Long_From01 18290 5.93 6.13 5.85 51 XM_H_GMP 18220 5.54 4.89 5.83 52 T_TooManySym_01 18085 4.78 2.55 5.78 53 MIME_QP_LONG_LINE 17292 4.90 3.50 5.53 54 XM_B_SpammyWords3 16832 8.20 14.45 5.38 55 XMStrtUSub 16509 5.04 4.52 5.28 56 BAYES_40 15952 4.10 1.89 5.10 57 HTML_IMAGE_RATIO_02 14697 5.35 6.80 4.70 58 XM_PDF 14573 3.44 0.73 4.66 59 MPART_ALT_DIFF 14272 5.22 6.68 4.56 60 RCVD_IN_VALIDITY_SAFE 13736 3.69 2.13 4.39 61 BAYES_99 13581 12.71 31.25 4.34 62 HTML_IMAGE_RATIO_04 13292 4.37 4.64 4.25 63 XM_UncommonTLD01 12800 5.18 7.58 4.09 64 TR_XM_SpammyWords4 12449 6.46 11.94 3.98 65 RCVD_IN_MSPIKE_H4 12395 3.78 3.38 3.96 66 RELAYCOUNTRY_META 12131 8.14 17.57 3.88 67 XMSubMetaSx_00 11943 5.11 7.98 3.82 68 BAYES_80 11894 5.57 9.48 3.80 69 RCVD_IN_IADB_LISTED 11626 3.00 1.42 3.72 70 HTML_IMAGE_RATIO_06 11535 3.87 4.29 3.69 71 T_REMOTE_IMAGE 11525 2.96 1.37 3.69 72 BAYES_20 11433 2.88 1.15 3.66 73 RCVD_IN_VALIDITY_CERTIFIED 11327 3.01 1.67 3.62 74 XMNumbers 11080 3.51 3.45 3.54 75 BAYES_999 10720 9.83 24.03 3.43 76 XM_SendGrid 10394 3.10 2.61 3.32 77 BOTNET_IPINHOSTNAME 10365 6.35 13.07 3.31 78 RCVD_IN_IADB_SPF 10192 2.62 1.20 3.26 79 ANY_BOUNCE_MESSAGE 10038 2.64 1.39 3.21 80 BOUNCE_MESSAGE 10034 2.64 1.39 3.21 81 MAILING_LIST_MULTI 9784 2.84 2.19 3.13 82 T_TooManySym_02 9389 2.31 0.79 3.00 83 TR_XM_DKIM_Undo 9237 11.25 29.65 2.95 84 RCVD_IN_IADB_SENDERID 9018 2.33 1.12 2.88 85 XM_B_SpammyTLD 8977 3.26 4.12 2.87 86 RCVD_IN_IADB_DK 8648 2.25 1.12 2.77 87 HTML_MIME_NO_HTML_TAG 8538 2.44 1.80 2.73 88 TooManyTo_002 7964 1.99 0.75 2.55 89 RCVD_IN_IADB_VOUCHED 7915 1.99 0.78 2.53 90 XM_Body_Dirty_Words 7739 3.63 6.20 2.47 91 MIME_HTML_ONLY_MULTI 7621 2.63 3.07 2.44 92 BAYES_95 7543 3.41 5.62 2.41 93 HTML_IMAGE_RATIO_08 7509 2.37 2.29 2.40 94 T_XMDrugObfuBody_14 7484 2.93 4.12 2.39 95 MIME_HTML_MOSTLY 7306 2.68 3.45 2.34 96 SCC_BODY_URI_ONLY 7252 2.23 2.02 2.32 97 TR_XM_PhishingBody 7214 2.93 4.31 2.31 98 TR_XM_DK_SendGrid 7040 2.04 1.58 2.25 99 BAYES_05 7007 1.75 0.65 2.24 100 TR_DCC_Bayes_99 6680 8.23 21.73 2.14 101 INVALID_MSGID 6676 1.53 0.18 2.13 102 DKIM_INVALID 6610 3.34 6.07 2.11 103 TO_MALFORMED 6394 1.56 0.48 2.04 104 XM_CamelCaseFrm001 6167 2.49 3.63 1.97 105 TR_XM_SpammyRelay 6029 5.19 12.41 1.93 106 T_XMDrugObfuBody_08 5892 2.21 2.93 1.88 107 XM_DK_Undo_01 5869 1.75 1.46 1.88 108 TM2_M_URI_OPT_OUT 5855 2.22 3.00 1.87 109 RCVD_IN_IADB_OPTIN 5623 1.39 0.50 1.80 110 XM_B_URI_Unicode 5514 2.09 2.81 1.76 111 TR_XM_UnparsRelay 5383 4.06 9.25 1.72 112 TooManyTo_003 5159 1.34 0.65 1.65 113 UNTRUSTED_Relay 5073 3.29 6.98 1.62 114 TM2_M_VERY_LONG_WORD 5013 2.36 4.04 1.60 115 XM_SPF_SoftFail 4711 1.95 2.95 1.51 116 SUBJ_ALL_CAPS 4624 1.47 1.47 1.48 117 XM_B_Investor 4617 2.72 5.48 1.48 118 FROM_EXCESS_BASE64 4607 1.78 2.47 1.47 119 TR_XM_SpammyWords5 4551 2.06 3.39 1.46 120 BOTNET 4463 4.28 10.60 1.43 121 URI_NOVOWEL 4328 1.45 1.59 1.38 122 TR_Symld_Words 4310 1.23 0.89 1.38 123 XMGappySubj_01 4295 1.12 0.57 1.37 124 T_XMDrugObfuBody_00 4263 1.44 1.62 1.36 125 HELO_NODOT 4239 0.97 0.13 1.36 126 HELO_NO_DOMAIN 4236 0.97 0.12 1.35 127 XMDiploma_00 4199 1.76 2.69 1.34 128 IN_HORDE_ADDRESS_BOOK 4166 0.94 0.07 1.33 129 XM_GoogleGroups 4147 1.23 1.00 1.33 130 KHOP_HELO_FCRDNS 4083 1.30 1.30 1.31 131 URI_HEX 4030 1.27 1.23 1.29 132 XMStockSpam_06 3966 1.48 1.93 1.27 133 TooManyTo_004 3846 1.03 0.59 1.23 134 XM_B_Unsub2 3812 1.75 2.94 1.22 135 XMSexyCombo_05 3761 2.45 5.23 1.20 136 T_TooManySym_03 3691 0.92 0.35 1.18 137 XMBdyGiftCard01 3635 1.22 1.34 1.16 138 XMCapTrack 3481 0.95 0.58 1.11 139 XM_UB50 3129 1.81 3.62 1.00 140 XM_H_Long_From02 3124 1.35 2.11 1.00 141 TVD_SPACE_RATIO 3113 0.75 0.20 1.00 142 TooManyTo_005 3070 0.85 0.55 0.98 143 XM_OfRef6 2994 1.91 4.02 0.96 144 RCVD_IN_MSPIKE_BL 2944 2.27 5.21 0.94 145 TR_XM_MSPIKECOMBO 2942 2.26 5.19 0.94 146 TVD_RCVD_IP 2731 0.95 1.12 0.87 147 T_XMHurry_00 2728 1.35 2.41 0.87 148 DKIM_ADSP_CUSTOM_MED 2694 0.99 1.27 0.86 149 T_Symld_Words_02 2684 0.80 0.68 0.86 150 SpammyFromTLD_01 2617 1.12 1.74 0.84 151 XMSolicitRefs_0 2611 0.71 0.44 0.83 152 XM_ShortIntro_01 2610 0.70 0.40 0.83 153 T_FILL_THIS_FORM_SHORT 2600 1.30 2.34 0.83 154 RCVD_IN_BL_SPAMCOP_NET 2585 4.50 12.65 0.83 155 RELAYCOUNTRY_CA 2532 2.57 6.48 0.81 156 XMBrknScrpt_02 2524 1.15 1.92 0.81 157 THIS_AD 2502 0.84 0.91 0.80 158 XMGenDplmaNmb 2446 0.96 1.36 0.78 159 XM_H_PHPMailer 2410 0.76 0.73 0.77 160 TVD_PH_BODY_ACCOUNTS_PRE 2351 0.54 0.08 0.75 161 XM_B_SpammyWords4 2343 1.31 2.54 0.75 162 RCVD_IN_PBL 2325 1.07 1.81 0.74 163 XM_B_COPY_HTML 2313 0.82 0.99 0.74 164 XMGappySubj_02 2268 0.51 0.04 0.73 165 RELAYCOUNTRY_AU 2210 1.34 2.76 0.71 166 RCVD_IN_MSPIKE_L3 2199 1.36 2.82 0.70 167 HTTPS_HTTP_MISMATCH 2124 0.81 1.10 0.68 168 TR_MetaPhish_Combo_01 2121 0.70 0.76 0.68 169 XMPhish11 2110 0.52 0.16 0.67 170 FROM_GOV_DKIM_AU 2084 0.52 0.18 0.67 171 RELAYCOUNTRY_GB 2005 0.72 0.91 0.64 172 XMSlimDrugH 2003 0.64 0.64 0.64 173 TM2_M_BODY_EMPTY 1943 0.45 0.08 0.62 174 MSGID_FROM_MTA_HEADER 1943 0.48 0.16 0.62 175 XMSubMetaI_00 1931 0.73 0.98 0.62 176 TR_XM_Base64_M1 1883 0.79 1.21 0.60 177 T_OBFU_PDF_ATTACH 1881 0.46 0.16 0.60 178 FORGED_GMAIL_RCVD 1857 0.64 0.76 0.59 179 ACCT_PHISHING_MANY 1833 0.41 0.03 0.59 180 NML_ADSP_CUSTOM_MED 1803 0.66 0.83 0.58 181 XMNoVowels 1793 0.53 0.42 0.57 182 XMBody_17 1757 1.23 2.70 0.56 183 XMLngstWrd_00 1742 0.68 0.94 0.56 184 XMBSHREFv2 1683 0.47 0.31 0.54 185 MPART_ALT_DIFF_COUNT 1683 0.68 1.00 0.54 186 XMMoneyMeta_00 1665 0.77 1.29 0.53 187 XMPhish30 1656 0.82 1.47 0.53 188 TR_XM_SpammyWords2 1641 3.59 10.37 0.52 189 XM_B_DNDMA 1638 0.80 1.40 0.52 190 HTML_TAG_BALANCE_BODY 1629 0.60 0.77 0.52 191 SpammyFromTLD_02 1621 1.37 3.26 0.52 192 XM_RXBody 1617 0.53 0.56 0.52 193 XMLngstWrd_01 1566 0.62 0.89 0.50 194 HTML_EXTRA_CLOSE 1521 0.34 0.02 0.49 195 XMPhish14 1487 0.58 0.81 0.48 196 T_STY_INVIS_DIRECT 1469 0.62 0.94 0.47 197 URI_TRY_3LD 1442 0.72 1.30 0.46 198 T_TVD_MIME_NO_HEADERS 1391 0.32 0.04 0.44 199 HTML_FONT_FACE_BAD 1374 0.49 0.60 0.44 200 HTML_IMAGE_ONLY_32 1359 0.34 0.14 0.43 ----------------------------------------------------------------------