Email: 410024 Autolearn: 0 AvgScore: 5.26 AvgScanTime: 1.37 sec Spam: 126188 Autolearn: 0 AvgScore: 14.71 AvgScanTime: 1.56 sec Ham: 283836 Autolearn: 0 AvgScore: 1.06 AvgScanTime: 1.29 sec Time Spent Running SA: 156.29 hours Time Spent Processing Spam: 54.57 hours Time Spent Processing Ham: 101.72 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 124243 99.12 98.46 99.41 2 HTML_MESSAGE 120186 88.48 95.24 85.47 3 DKIM_SIGNED 111947 78.61 88.71 74.11 4 XM_DK_Pass 106834 76.71 84.66 73.18 5 DKIM_VALID 105517 75.77 83.62 72.28 6 XM_B_Unicode 103527 72.90 82.04 68.83 7 RELAYCOUNTRY_US 99773 80.15 79.07 80.64 8 DCC_CHECK 95731 52.02 75.86 41.42 9 XM_B_SpammyWords 86141 52.41 68.26 45.36 10 XMListUnsubscribeExists 83975 53.27 66.55 47.37 11 DKIM_VALID_AU 82924 61.01 65.71 58.92 12 XM_B_Unicode3 62021 43.18 49.15 40.53 13 LOC_TINY_FONT_1 60770 34.83 48.16 28.91 14 XM_DK_Undo_02 53423 16.72 42.34 5.33 15 BAYES_50 51129 53.65 40.52 59.49 16 XM_B_SpammyWords2 49333 24.96 39.09 18.67 17 HTML_FONT_LOW_CONTRAST 46909 31.22 37.17 28.57 18 FVGT_m_MULTI_ODD 42069 27.38 33.34 24.73 19 MIME_HTML_ONLY 40355 24.23 31.98 20.78 20 TR_XM_DKIM_Undo 39313 11.24 31.15 2.38 21 DKIM_VALID_EF 39198 30.87 31.06 30.79 22 BAYES_99 38908 12.07 30.83 3.73 23 T_KAM_HTML_FONT_INVALID 35246 23.23 27.93 21.14 24 BAYES_999 30298 9.35 24.01 2.83 25 DCC_CHECK_NEGATIVE 28742 47.53 22.78 58.54 26 XMSubLong 28549 21.74 22.62 21.35 27 TR_XM_DK_Unsub 28413 16.72 22.52 14.14 28 TR_DCC_Bayes_99 27349 7.68 21.67 1.46 29 XM_Multi_Part_URI 26676 16.32 21.14 14.18 30 XM_B_Unsub 26666 13.04 21.13 9.44 31 T_TM2_M_HEADER_IN_MSG 26493 27.17 20.99 29.92 32 TR_XM_BayesUnsub 25787 11.24 20.44 7.15 33 RELAYCOUNTRY_META 24944 8.49 19.77 3.47 34 RCVD_IN_MSPIKE_H2 24604 17.54 19.50 16.68 35 UNPARSEABLE_RELAY 23163 14.44 18.36 12.70 36 TR_MAX_INTL_RELAY 17971 8.58 14.24 6.06 37 LOTS_OF_MONEY 16927 8.63 13.41 6.51 38 XM_B_SpammyWords3 16866 7.59 13.37 5.03 39 TR_XM_SpammyRelay 16589 5.29 13.15 1.79 40 BOTNET_IPINHOSTNAME 15101 5.99 11.97 3.34 41 TR_XM_SpammyWords4 15007 6.69 11.89 4.38 42 BOTNET 14773 4.56 11.71 1.39 43 RCVD_IN_BL_SPAMCOP_NET 14572 3.97 11.55 0.60 44 TR_XM_SpammyWords2 13197 3.50 10.46 0.40 45 RCVD_IN_MSPIKE_WL 12890 16.34 10.21 19.07 46 FSL_BULK_SIG 12431 10.70 9.85 11.08 47 XM_Evil_Numbers_Gen 12104 10.08 9.59 10.29 48 TR_XM_UnparsRelay 11948 4.22 9.47 1.88 49 BAYES_80 11139 5.32 8.83 3.77 50 XM_B_Phish_Phrases 11021 6.26 8.73 5.15 51 BAYES_60 10916 7.61 8.65 7.15 52 UNTRUSTED_Relay 10371 3.58 8.22 1.52 53 LotsOfNums_01 9406 8.84 7.45 9.46 54 RCVD_IN_MSPIKE_BL 9199 3.08 7.29 1.21 55 TR_XM_MSPIKECOMBO 9193 3.08 7.29 1.21 56 RELAYCOUNTRY_CA 9034 2.69 7.16 0.70 57 XM_Body_Dirty_Words 8614 4.36 6.83 3.26 58 HTML_IMAGE_RATIO_02 8564 5.16 6.79 4.43 59 XMStrtUSub 8425 5.58 6.68 5.10 60 XMSubMetaSx_00 7965 4.29 6.31 3.39 61 TR_XM_NoHeaderRelay 7661 1.99 6.07 0.18 62 MPART_ALT_DIFF 7590 5.47 6.01 5.23 63 XM_B_PhoneNumber 7463 7.78 5.91 8.61 64 XM_UncommonTLD01 7142 4.75 5.66 4.35 65 XM_H_Long_From01 7037 5.63 5.58 5.65 66 RCVD_IN_MSPIKE_H3 6632 7.32 5.26 8.24 67 DKIM_INVALID 6430 2.84 5.10 1.84 68 BAYES_95 6373 3.14 5.05 2.29 69 TR_XM_SPAMCOP 6371 1.64 5.05 0.12 70 XMSexyCombo_05 6247 2.42 4.95 1.30 71 XM_B_Investor 6215 2.52 4.93 1.46 72 HTML_IMAGE_RATIO_04 6118 5.19 4.85 5.34 73 TR_XM_PhishingBody 5913 2.55 4.69 1.60 74 XM_H_GMP 5881 5.49 4.66 5.85 75 TooManyTo_001 5829 7.02 4.62 8.09 76 RCVD_IN_VALIDITY_RPBL 5668 1.41 4.49 0.03 77 XM_OfRef6 5567 2.08 4.41 1.04 78 SCC_BODY_URI_ONLY 5384 3.97 4.27 3.84 79 XM_UB50 5175 1.94 4.10 0.99 80 T_XMDrugObfuBody_14 4923 2.56 3.90 1.97 81 XM_B_SpammyTLD 4810 3.06 3.81 2.73 82 TM2_M_VERY_LONG_WORD 4720 3.65 3.74 3.61 83 MIME_HTML_MOSTLY 4667 3.05 3.70 2.76 84 TR_XM_SpammyWords3 4482 1.41 3.55 0.46 85 TR_XM_SpammyWords5 4469 2.18 3.54 1.57 86 XMNumbers 4455 3.61 3.53 3.65 87 XM_CamelCaseFrm001 4448 2.57 3.52 2.15 88 XM_B_Unsub2 4338 1.92 3.44 1.25 89 XMDiploma_00 4314 2.45 3.42 2.02 90 MIME_HTML_ONLY_MULTI 4266 2.84 3.38 2.60 91 HTML_IMAGE_RATIO_06 4041 2.84 3.20 2.68 92 RCVD_IN_MSPIKE_L3 3899 1.55 3.09 0.86 93 XM_URI_RBL 3838 1.20 3.04 0.38 94 RELAYCOUNTRY_AU 3742 1.38 2.97 0.68 95 RCVD_IN_MSPIKE_H4 3535 3.77 2.80 4.21 96 XM_SPF_SoftFail 3517 1.85 2.79 1.43 97 RCVD_IN_MSPIKE_L5 3488 0.85 2.76 0.00 98 MIME_QP_LONG_LINE 3488 4.16 2.76 4.78 99 RCVD_IN_VALIDITY_SAFE 3482 3.85 2.76 4.34 100 XM_B_URI_Unicode 3344 2.09 2.65 1.85 101 HTML_IMAGE_RATIO_08 3297 2.41 2.61 2.32 102 T_TooManySym_01 3282 5.22 2.60 6.39 103 RELAYCOUNTRY_NL 3256 0.92 2.58 0.18 104 USER_IN_DEF_DKIM_WL 3225 10.02 2.56 13.34 105 FROM_EXCESS_BASE64 3213 2.03 2.55 1.80 106 T_XMDrugObfuBody_08 3184 1.97 2.52 1.72 107 TM2_M_URI_OPT_OUT 3145 2.22 2.49 2.09 108 HTML_IMAGE_ONLY_08 3120 0.83 2.47 0.09 109 HTML_SHORT_LINK_IMG_1 3096 0.76 2.45 0.01 110 T_XMHurry_00 3070 1.11 2.43 0.53 111 XM_B_SpammyWords4 3058 1.23 2.42 0.69 112 TR_XM_INV_DKIM 3038 0.75 2.41 0.02 113 SHORTENER_SHORT_IMG 3031 0.74 2.40 0.00 114 BODY_URI_ONLY 3003 0.74 2.38 0.01 115 SCC_BODY_SINGLE_WORD 2967 0.74 2.35 0.02 116 BODY_SINGLE_WORD 2951 0.73 2.34 0.01 117 BODY_SINGLE_URI 2951 0.73 2.34 0.01 118 XMBody_17 2914 1.01 2.31 0.43 119 XMStockSpam_06 2762 1.57 2.19 1.29 120 MAILING_LIST_MULTI 2762 2.84 2.19 3.12 121 RCVD_IN_MSPIKE_H5 2724 5.25 2.16 6.62 122 RCVD_IN_VALIDITY_CERTIFIED 2713 3.17 2.15 3.62 123 T_FILL_THIS_FORM_SHORT 2567 1.22 2.03 0.85 124 SpammyFromTLD_02 2559 0.94 2.03 0.46 125 SUBJ_ALL_CAPS 2400 1.87 1.90 1.86 126 ALL_TRUSTED 2367 11.86 1.88 16.30 127 BAYES_40 2362 4.57 1.87 5.77 128 SpammyFromTLD_01 2281 1.06 1.81 0.73 129 T_XMDrugObfuBody_00 2252 1.13 1.78 0.84 130 XMGenDplmaNmb 2241 1.32 1.78 1.12 131 SHORT_SHORTNER 2209 0.55 1.75 0.01 132 TR_XM_MSPIKECOMBO2 2128 0.56 1.69 0.06 133 XMPhish30 2046 0.80 1.62 0.43 134 TR_LOTS_OF_MONEY3 2045 0.70 1.62 0.29 135 XM_H_Long_From02 2035 1.02 1.61 0.76 136 BAYES_20 1980 3.98 1.57 5.04 137 XM_UB60 1961 0.53 1.55 0.08 138 URI_TRY_3LD 1953 0.92 1.55 0.64 139 XM_Sams_Club_Forge 1933 0.54 1.53 0.10 140 T_REMOTE_IMAGE 1920 3.11 1.52 3.81 141 XM_DK_Undo_01 1887 1.81 1.50 1.94 142 XM_SendGrid 1877 1.51 1.49 1.52 143 URI_NOVOWEL 1847 1.24 1.46 1.14 144 XM_B_Phish66 1827 0.66 1.45 0.31 145 RCVD_IN_MSPIKE_L4 1818 0.68 1.44 0.34 146 HTML_MIME_NO_HTML_TAG 1817 2.17 1.44 2.49 147 HTML_IMAGE_ONLY_20 1796 0.69 1.42 0.37 148 KHOP_HELO_FCRDNS 1780 2.25 1.41 2.62 149 TR_XM_PHPForged 1776 0.70 1.41 0.39 150 XM_B_DNDMA 1771 0.83 1.40 0.58 151 TR_XM_PHPDW 1762 0.70 1.40 0.39 152 TR_XM_FormFill2 1754 0.70 1.39 0.39 153 XMSubMetaI_00 1746 0.71 1.38 0.42 154 XM_H_PHPOS 1719 0.68 1.36 0.38 155 XMBrknScrpt_02 1716 1.04 1.36 0.89 156 RDNS_DYNAMIC 1701 0.55 1.35 0.20 157 SHORTCIRCUIT 1697 0.41 1.34 0.00 158 RCVD_IN_ZEN_LASTEXTERNAL 1697 0.41 1.34 0.00 159 SHOPIFY_IMG_NOT_RCVD_SFY 1696 0.63 1.34 0.31 160 PDS_RDNS_DYNAMIC_FP 1674 0.44 1.33 0.05 161 RCVD_IN_PBL 1671 0.93 1.32 0.75 162 RCVD_IN_XBL 1665 0.42 1.32 0.02 163 XMBody_78 1629 0.68 1.29 0.41 164 RCVD_IN_IADB_LISTED 1613 2.74 1.28 3.39 165 TM2_M_OBFU_COMMENT 1585 0.67 1.26 0.41 166 XM_ProductURIs 1581 0.73 1.25 0.50 167 TR_XM_MaxSPIKE 1571 0.42 1.24 0.05 168 XM_B_COPY_HTML 1554 0.85 1.23 0.68 169 MPART_ALT_DIFF_COUNT 1548 0.74 1.23 0.52 170 HTML_FONT_TINY_NORDNS 1525 0.44 1.21 0.11 171 DIET_1 1517 0.63 1.20 0.37 172 URI_HEX 1515 1.18 1.20 1.18 173 RCVD_IN_PSBL 1498 0.64 1.19 0.40 174 RELAYCOUNTRY_FR 1479 0.56 1.17 0.29 175 BOTNET_NORDNS 1473 0.37 1.17 0.02 176 XM_OfRef7 1473 0.47 1.17 0.16 177 XM_B_SEO 1465 0.50 1.16 0.20 178 ANY_BOUNCE_MESSAGE 1440 5.15 1.14 6.94 179 BOUNCE_MESSAGE 1439 5.15 1.14 6.94 180 XM_HighProb1 1426 0.35 1.13 0.00 181 XMBdyGiftCard01 1416 0.77 1.12 0.62 182 TVD_RCVD_IP 1413 0.94 1.12 0.86 183 RCVD_IN_IADB_SPF 1392 2.41 1.10 2.99 184 TM2_M_A_HREF_HREF 1374 0.55 1.09 0.30 185 TR_XM_SEO4 1374 0.42 1.09 0.12 186 DKIM_ADSP_CUSTOM_MED 1336 0.87 1.06 0.79 187 RCVD_IN_IADB_SENDERID 1284 2.18 1.02 2.70 188 RCVD_IN_IADB_DK 1282 2.12 1.02 2.61 189 RCVD_IN_SBL_CSS 1280 0.34 1.01 0.04 190 TR_LOTS_OF_MONEY2 1277 0.51 1.01 0.29 191 T_MONEY_PERCENT 1277 0.51 1.01 0.29 192 TR_Symld_Words 1243 1.31 0.99 1.45 193 TR_XM_DK_SendGrid 1242 1.01 0.98 1.02 194 XM_UB99 1228 0.30 0.97 0.00 195 T_Symld_Words_02 1225 0.68 0.97 0.54 196 XM_GoogleGroups 1221 1.23 0.97 1.35 197 TR_XM_RelayPhish 1206 0.34 0.96 0.06 198 HTML_TAG_BALANCE_BODY 1202 0.59 0.95 0.42 199 XM_UB80 1195 0.30 0.95 0.01 200 XMHTMLBadTable_001 1184 0.50 0.94 0.31 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 282169 99.12 98.46 99.41 2 HTML_MESSAGE 242608 88.48 95.24 85.47 3 RELAYCOUNTRY_US 228873 80.15 79.07 80.64 4 DKIM_SIGNED 210361 78.61 88.71 74.11 5 XM_DK_Pass 207711 76.71 84.66 73.18 6 DKIM_VALID 205143 75.77 83.62 72.28 7 XM_B_Unicode 195370 72.90 82.04 68.83 8 BAYES_50 168855 53.65 40.52 59.49 9 DKIM_VALID_AU 167229 61.01 65.71 58.92 10 DCC_CHECK_NEGATIVE 166151 47.53 22.78 58.54 11 XMListUnsubscribeExists 134449 53.27 66.55 47.37 12 XM_B_SpammyWords 128757 52.41 68.26 45.36 13 DCC_CHECK 117556 52.02 75.86 41.42 14 XM_B_Unicode3 115025 43.18 49.15 40.53 15 DKIM_VALID_EF 87382 30.87 31.06 30.79 16 T_TM2_M_HEADER_IN_MSG 84924 27.17 20.99 29.92 17 LOC_TINY_FONT_1 82061 34.83 48.16 28.91 18 HTML_FONT_LOW_CONTRAST 81103 31.22 37.17 28.57 19 FVGT_m_MULTI_ODD 70206 27.38 33.34 24.73 20 XMSubLong 60602 21.74 22.62 21.35 21 T_KAM_HTML_FONT_INVALID 60016 23.23 27.93 21.14 22 MIME_HTML_ONLY 58986 24.23 31.98 20.78 23 RCVD_IN_MSPIKE_WL 54122 16.34 10.21 19.07 24 XM_B_SpammyWords2 53001 24.96 39.09 18.67 25 RCVD_IN_MSPIKE_H2 47331 17.54 19.50 16.68 26 ALL_TRUSTED 46257 11.86 1.88 16.30 27 XM_Multi_Part_URI 40255 16.32 21.14 14.18 28 TR_XM_DK_Unsub 40134 16.72 22.52 14.14 29 USER_IN_DEF_DKIM_WL 37855 10.02 2.56 13.34 30 UNPARSEABLE_RELAY 36051 14.44 18.36 12.70 31 FSL_BULK_SIG 31451 10.70 9.85 11.08 32 BAYES_00 29597 7.39 0.56 10.43 33 XM_Evil_Numbers_Gen 29209 10.08 9.59 10.29 34 LotsOfNums_01 26837 8.84 7.45 9.46 35 XM_B_Unsub 26801 13.04 21.13 9.44 36 XM_B_PhoneNumber 24435 7.78 5.91 8.61 37 RCVD_IN_MSPIKE_H3 23384 7.32 5.26 8.24 38 TooManyTo_001 22960 7.02 4.62 8.09 39 TR_XM_DK_Bayes 20981 5.25 0.42 7.39 40 TR_XM_DK_Bayes1 20634 5.16 0.40 7.27 41 BAYES_60 20303 7.61 8.65 7.15 42 TR_XM_BayesUnsub 20294 11.24 20.44 7.15 43 XM_DKIMWhitelistDomains 19944 4.88 0.04 7.03 44 ANY_BOUNCE_MESSAGE 19693 5.15 1.14 6.94 45 BOUNCE_MESSAGE 19690 5.15 1.14 6.94 46 RCVD_IN_MSPIKE_H5 18796 5.25 2.16 6.62 47 LOTS_OF_MONEY 18475 8.63 13.41 6.51 48 T_TooManySym_01 18134 5.22 2.60 6.39 49 TR_XM_DK_Bayes2 17293 4.32 0.34 6.09 50 TR_MAX_INTL_RELAY 17192 8.58 14.24 6.06 51 XM_H_GMP 16609 5.49 4.66 5.85 52 BAYES_40 16385 4.57 1.87 5.77 53 XM_H_Long_From01 16030 5.63 5.58 5.65 54 HTML_IMAGE_RATIO_04 15164 5.19 4.85 5.34 55 XM_DK_Undo_02 15123 16.72 42.34 5.33 56 MPART_ALT_DIFF 14833 5.47 6.01 5.23 57 XM_B_Phish_Phrases 14629 6.26 8.73 5.15 58 XMStrtUSub 14472 5.58 6.68 5.10 59 BAYES_20 14319 3.98 1.57 5.04 60 XM_B_SpammyWords3 14264 7.59 13.37 5.03 61 XM_PDF 13585 3.59 0.90 4.79 62 MIME_QP_LONG_LINE 13559 4.16 2.76 4.78 63 HTML_IMAGE_RATIO_02 12574 5.16 6.79 4.43 64 TR_XM_SpammyWords4 12436 6.69 11.89 4.38 65 XM_UncommonTLD01 12336 4.75 5.66 4.35 66 RCVD_IN_VALIDITY_SAFE 12315 3.85 2.76 4.34 67 RCVD_IN_MSPIKE_H4 11942 3.77 2.80 4.21 68 SCC_BODY_URI_ONLY 10897 3.97 4.27 3.84 69 T_REMOTE_IMAGE 10819 3.11 1.52 3.81 70 BAYES_80 10693 5.32 8.83 3.77 71 BAYES_99 10593 12.07 30.83 3.73 72 XMNumbers 10367 3.61 3.53 3.65 73 RCVD_IN_VALIDITY_CERTIFIED 10285 3.17 2.15 3.62 74 TM2_M_VERY_LONG_WORD 10251 3.65 3.74 3.61 75 RELAYCOUNTRY_META 9850 8.49 19.77 3.47 76 RCVD_IN_IADB_LISTED 9618 2.74 1.28 3.39 77 XMSubMetaSx_00 9615 4.29 6.31 3.39 78 BOTNET_IPINHOSTNAME 9475 5.99 11.97 3.34 79 XM_Body_Dirty_Words 9249 4.36 6.83 3.26 80 T_TooManySym_02 8912 2.43 0.85 3.14 81 MAILING_LIST_MULTI 8868 2.84 2.19 3.12 82 RCVD_IN_IADB_SPF 8474 2.41 1.10 2.99 83 BAYES_999 8021 9.35 24.01 2.83 84 MIME_HTML_MOSTLY 7831 3.05 3.70 2.76 85 XM_B_SpammyTLD 7737 3.06 3.81 2.73 86 RCVD_IN_IADB_SENDERID 7670 2.18 1.02 2.70 87 HTML_IMAGE_RATIO_06 7599 2.84 3.20 2.68 88 KHOP_HELO_FCRDNS 7426 2.25 1.41 2.62 89 RCVD_IN_IADB_DK 7395 2.12 1.02 2.61 90 MIME_HTML_ONLY_MULTI 7366 2.84 3.38 2.60 91 TooManyTo_002 7323 2.04 0.82 2.58 92 INVALID_MSGID 7183 1.83 0.25 2.53 93 HTML_MIME_NO_HTML_TAG 7067 2.17 1.44 2.49 94 TR_XM_DKIM_Undo 6769 11.24 31.15 2.38 95 BAYES_05 6593 1.85 0.78 2.32 96 HTML_IMAGE_RATIO_08 6587 2.41 2.61 2.32 97 MAY_BE_FORGED 6515 1.65 0.20 2.30 98 BAYES_95 6493 3.14 5.05 2.29 99 TO_MALFORMED 6437 1.58 0.03 2.27 100 XM_CamelCaseFrm001 6103 2.57 3.52 2.15 101 RCVD_IN_IADB_VOUCHED 6086 1.70 0.69 2.14 102 TM2_M_URI_OPT_OUT 5940 2.22 2.49 2.09 103 HTML_IMAGE_ONLY_32 5910 1.48 0.12 2.08 104 XMDiploma_00 5739 2.45 3.42 2.02 105 T_XMDrugObfuBody_14 5593 2.56 3.90 1.97 106 XM_DK_Undo_01 5517 1.81 1.50 1.94 107 TR_XM_UnparsRelay 5343 4.22 9.47 1.88 108 SUBJ_ALL_CAPS 5278 1.87 1.90 1.86 109 XM_B_URI_Unicode 5242 2.09 2.65 1.85 110 DKIM_INVALID 5218 2.84 5.10 1.84 111 FROM_EXCESS_BASE64 5117 2.03 2.55 1.80 112 TR_XM_SpammyRelay 5084 5.29 13.15 1.79 113 T_XMDrugObfuBody_08 4891 1.97 2.52 1.72 114 TooManyTo_003 4635 1.34 0.67 1.63 115 TR_XM_PhishingBody 4531 2.55 4.69 1.60 116 TR_XM_SpammyWords5 4460 2.18 3.54 1.57 117 XM_SendGrid 4325 1.51 1.49 1.52 118 UNTRUSTED_Relay 4315 3.58 8.22 1.52 119 RCVD_IN_IADB_OPTIN 4280 1.18 0.45 1.51 120 TR_DCC_Bayes_99 4146 7.68 21.67 1.46 121 XM_B_Investor 4133 2.52 4.93 1.46 122 TR_Symld_Words 4126 1.31 0.99 1.45 123 XM_SPF_SoftFail 4060 1.85 2.79 1.43 124 BOTNET 3937 4.56 11.71 1.39 125 XMGappySubj_01 3936 1.03 0.22 1.39 126 XM_GoogleGroups 3832 1.23 0.97 1.35 127 IN_HORDE_ADDRESS_BOOK 3812 0.96 0.09 1.34 128 XM_H_PHPMailer 3760 1.08 0.54 1.32 129 XMSexyCombo_05 3678 2.42 4.95 1.30 130 XMStockSpam_06 3662 1.57 2.19 1.29 131 XM_B_Unsub2 3551 1.92 3.44 1.25 132 TooManyTo_004 3458 1.02 0.59 1.22 133 TR_XM_MSPIKECOMBO 3436 3.08 7.29 1.21 134 RCVD_IN_MSPIKE_BL 3436 3.08 7.29 1.21 135 T_TooManySym_03 3362 0.94 0.40 1.18 136 URI_HEX 3339 1.18 1.20 1.18 137 HELO_NODOT 3307 0.84 0.11 1.17 138 HELO_NO_DOMAIN 3301 0.84 0.10 1.16 139 URI_NOVOWEL 3237 1.24 1.46 1.14 140 XMGenDplmaNmb 3175 1.32 1.78 1.12 141 XM_ShortIntro_01 2950 0.87 0.47 1.04 142 XM_OfRef6 2941 2.08 4.41 1.04 143 TR_XM_DK_SendGrid 2899 1.01 0.98 1.02 144 TVD_SPACE_RATIO 2857 0.75 0.17 1.01 145 XMCapTrack 2809 0.91 0.73 0.99 146 XM_UB50 2799 1.94 4.10 0.99 147 TooManyTo_005 2747 0.83 0.52 0.97 148 XMBrknScrpt_02 2530 1.04 1.36 0.89 149 TR_XM_Base64_M1 2489 0.89 0.93 0.88 150 RCVD_IN_MSPIKE_L3 2450 1.55 3.09 0.86 151 TVD_RCVD_IP 2443 0.94 1.12 0.86 152 T_FILL_THIS_FORM_SHORT 2419 1.22 2.03 0.85 153 FROM_GOV_DKIM_AU 2401 0.63 0.13 0.85 154 T_XMDrugObfuBody_00 2387 1.13 1.78 0.84 155 DKIM_ADSP_CUSTOM_MED 2247 0.87 1.06 0.79 156 MIME_CHARSET_FARAWAY 2242 0.69 0.48 0.79 157 T_TVD_MIME_NO_HEADERS 2231 0.56 0.06 0.79 158 T_OBFU_PDF_ATTACH 2208 0.59 0.16 0.78 159 XM_H_Long_From02 2163 1.02 1.61 0.76 160 RCVD_IN_PBL 2139 0.93 1.32 0.75 161 XMGappySubj_02 2135 0.54 0.05 0.75 162 TR_MetaPhish_Combo_01 2086 0.78 0.88 0.73 163 SpammyFromTLD_01 2063 1.06 1.81 0.73 164 RELAYCOUNTRY_CA 1978 2.69 7.16 0.70 165 XM_B_SpammyWords4 1971 1.23 2.42 0.69 166 XM_B_COPY_HTML 1943 0.85 1.23 0.68 167 RELAYCOUNTRY_AU 1918 1.38 2.97 0.68 168 CHARSET_FARAWAY_HEADER 1874 0.55 0.31 0.66 169 URI_TRY_3LD 1812 0.92 1.55 0.64 170 LongTLD 1800 0.69 0.81 0.63 171 XMBdyGiftCard01 1759 0.77 1.12 0.62 172 XMNoVowels 1721 0.57 0.50 0.61 173 RCVD_IN_BL_SPAMCOP_NET 1710 3.97 11.55 0.60 174 XM_B_DNDMA 1638 0.83 1.40 0.58 175 XMLngstWrd_00 1555 0.58 0.65 0.55 176 T_Symld_Words_02 1545 0.68 0.97 0.54 177 XMBSHREFv2 1526 0.46 0.29 0.54 178 HTTPS_HTTP_MISMATCH 1509 0.65 0.93 0.53 179 T_XMHurry_00 1492 1.11 2.43 0.53 180 MPART_ALT_DIFF_COUNT 1466 0.74 1.23 0.52 181 T_MANY_PILL_PRICE 1450 0.36 0.01 0.51 182 FORGED_GMAIL_RCVD 1440 0.54 0.62 0.51 183 MSGID_FROM_MTA_HEADER 1428 0.42 0.23 0.50 184 XM_ProductURIs 1411 0.73 1.25 0.50 185 NML_ADSP_CUSTOM_MED 1402 0.56 0.71 0.49 186 RELAYCOUNTRY_GB 1393 0.60 0.84 0.49 187 HTML_FONT_FACE_BAD 1391 0.50 0.54 0.49 188 XMPhish14 1381 0.51 0.57 0.49 189 XMLngstWrd_01 1328 0.47 0.49 0.47 190 XMSlimDrugH 1313 0.52 0.64 0.46 191 SpammyFromTLD_02 1311 0.94 2.03 0.46 192 TR_XM_SpammyWords3 1292 1.41 3.55 0.46 193 T_STY_INVIS_DIRECT 1282 0.59 0.89 0.45 194 TO_NO_BRKTS_HTML_ONLY 1243 0.50 0.65 0.44 195 XMPhish30 1225 0.80 1.62 0.43 196 XMBody_17 1213 1.01 2.31 0.43 197 XMHTML_After_End 1211 0.57 0.89 0.43 198 HTML_TAG_BALANCE_BODY 1203 0.59 0.95 0.42 199 XMSolicitRefs_0 1187 0.50 0.68 0.42 200 XMSubMetaI_00 1184 0.71 1.38 0.42 ----------------------------------------------------------------------