Email: 607796 Autolearn: 0 AvgScore: 3.87 AvgScanTime: 1.36 sec Spam: 193250 Autolearn: 0 AvgScore: 12.85 AvgScanTime: 1.51 sec Ham: 414546 Autolearn: 0 AvgScore: -0.32 AvgScanTime: 1.29 sec Time Spent Running SA: 229.68 hours Time Spent Processing Spam: 81.06 hours Time Spent Processing Ham: 148.62 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 187691 89.97 97.12 86.64 2 DKIM_SIGNED 175711 77.44 90.92 71.16 3 RELAYCOUNTRY_US 171284 83.61 88.63 81.26 4 XM_DK_Pass 169662 75.51 87.79 69.78 5 DKIM_VALID 167439 74.51 86.64 68.85 6 XM_B_Unicode 165399 74.15 85.59 68.82 7 XM_B_SpammyWords 145376 54.18 75.23 44.36 8 XMListUnsubscribeExists 144315 55.54 74.68 46.62 9 DCC_CHECK 144263 48.60 74.65 36.45 10 DKIM_VALID_AU 138092 59.84 71.46 54.42 11 XM_DK_Undo_02 88025 17.87 45.55 4.97 12 HTML_FONT_LOW_CONTRAST 85982 34.16 44.49 29.34 13 XM_B_Unicode3 85084 41.41 44.03 40.18 14 LOC_TINY_FONT_1 81818 29.97 42.34 24.21 15 XM_B_SpammyWords2 80764 25.69 41.79 18.18 16 RCVD_IN_MSPIKE_H2 77723 33.16 40.22 29.87 17 BAYES_50 74491 54.07 38.55 61.31 18 BAYES_99 72126 14.23 37.32 3.47 19 FVGT_m_MULTI_ODD 70701 27.84 36.59 23.76 20 TR_XM_DKIM_Undo 67655 12.78 35.01 2.42 21 BAYES_999 58387 11.36 30.21 2.57 22 T_KAM_HTML_FONT_INVALID 54725 22.89 28.32 20.36 23 TR_DCC_Bayes_99 54548 9.90 28.23 1.35 24 DKIM_VALID_EF 52758 27.04 27.30 26.92 25 DCC_CHECK_NEGATIVE 48969 51.36 25.34 63.49 26 T_TM2_M_HEADER_IN_MSG 47369 27.96 24.51 29.56 27 XMSubLong 46173 22.71 23.89 22.15 28 MIME_HTML_ONLY 44101 21.59 22.82 21.02 29 TR_XM_DK_Unsub 39940 14.59 20.67 11.76 30 XM_Multi_Part_URI 39645 16.00 20.51 13.89 31 LOTS_OF_MONEY 32253 9.38 16.69 5.97 32 TR_XM_SpammyWords2 30104 5.37 15.58 0.61 33 TR_XM_SpammyWords4 30009 7.69 15.53 4.04 34 UNPARSEABLE_RELAY 28240 11.79 14.61 10.47 35 XM_B_Unsub 26848 10.79 13.89 9.34 36 XM_B_SpammyWords3 26640 7.64 13.79 4.78 37 TR_MAX_INTL_RELAY 26441 8.79 13.68 6.50 38 TR_XM_BayesUnsub 25495 8.82 13.19 6.78 39 XM_Evil_Numbers_Gen 24709 10.33 12.79 9.19 40 BOTNET_IPINHOSTNAME 24297 6.01 12.57 2.95 41 RELAYCOUNTRY_META 23055 6.43 11.93 3.87 42 LotsOfNums_01 19886 9.82 10.29 9.60 43 BAYES_80 16077 5.38 8.32 4.01 44 TR_XM_SpammyRelay 15948 3.95 8.25 1.94 45 TR_XM_UnparsRelay 15493 3.54 8.02 1.45 46 RCVD_IN_BL_SPAMCOP_NET 14629 2.96 7.57 0.80 47 FSL_BULK_SIG 14111 6.20 7.30 5.68 48 BOTNET 13980 3.14 7.23 1.24 49 BAYES_60 13320 8.10 6.89 8.67 50 TR_LOTS_OF_MONEY3 12413 2.46 6.42 0.62 51 TM2_M_VERY_LONG_WORD 12210 4.29 6.32 3.35 52 XM_Body_Dirty_Words 11897 3.70 6.16 2.56 53 TR_XM_SPAMCOP 11723 2.15 6.07 0.33 54 HTML_IMAGE_RATIO_02 11359 4.66 5.88 4.10 55 MPART_ALT_DIFF 10968 5.78 5.68 5.83 56 XMSubMetaSx_00 10834 4.03 5.61 3.29 57 XMBody_17 10825 2.15 5.60 0.55 58 XM_B_PhoneNumber 10481 7.78 5.42 8.88 59 HTML_IMAGE_RATIO_04 10331 4.27 5.35 3.77 60 XM_H_Long_From01 10183 5.00 5.27 4.87 61 BAYES_95 9758 3.31 5.05 2.50 62 UNTRUSTED_Relay 9440 2.49 4.88 1.37 63 XM_B_Investor 9436 2.55 4.88 1.46 64 XM_SPF_SoftFail 9137 3.45 4.73 2.85 65 XM_B_SEO 9036 2.27 4.68 1.15 66 XM_B_Phish_Phrases 8869 3.99 4.59 3.71 67 XM_UncommonTLD01 8857 4.15 4.58 3.94 68 HTML_IMAGE_RATIO_08 8673 3.12 4.49 2.48 69 TR_XM_SpammyWords5 8361 2.15 4.33 1.13 70 DKIM_INVALID 8272 2.94 4.28 2.31 71 TooManyTo_001 8182 6.65 4.23 7.77 72 TR_XM_SEO4 7968 1.79 4.12 0.71 73 HTML_IMAGE_RATIO_06 7785 3.68 4.03 3.52 74 TR_XM_PhishingBody 7574 2.41 3.92 1.71 75 T_XMDrugObfuBody_08 7566 2.26 3.92 1.49 76 XMSexyCombo_05 7536 2.42 3.90 1.74 77 XM_OfRef6 7441 1.85 3.85 0.92 78 XM_H_GMP 7310 4.50 3.78 4.83 79 T_XMDrugObfuBody_14 7123 2.44 3.69 1.86 80 MIME_HTML_ONLY_MULTI 7046 3.99 3.65 4.15 81 XMStrtUSub 6930 4.59 3.59 5.06 82 RELAYCOUNTRY_CA 6871 1.84 3.56 1.04 83 XMNumbers 6867 2.86 3.55 2.54 84 RCVD_IN_VALIDITY_SAFE 6832 3.95 3.54 4.15 85 MIME_QP_LONG_LINE 6658 4.53 3.45 5.03 86 ANY_BOUNCE_MESSAGE 6447 4.69 3.34 5.31 87 BOUNCE_MESSAGE 6441 4.68 3.33 5.31 88 XM_CamelCaseFrm001 6178 2.49 3.20 2.16 89 RCVD_IN_VALIDITY_RPBL 6025 1.09 3.12 0.15 90 XMDiploma_00 5963 2.38 3.09 2.05 91 XM_B_SpammyTLD 5886 3.71 3.05 4.02 92 MIME_HTML_MOSTLY 5825 2.40 3.01 2.11 93 RCVD_IN_MSPIKE_WL 5653 4.54 2.93 5.30 94 RCVD_IN_MSPIKE_H3 5653 4.54 2.93 5.30 95 USER_IN_DEF_DKIM_WL 5609 9.68 2.90 12.84 96 SHORT_URI_2 5577 1.87 2.89 1.39 97 SHORT_URI_3 5479 2.19 2.84 1.90 98 XM_URI_RBL 5394 1.03 2.79 0.22 99 XMBrknScrpt_02 5385 1.54 2.79 0.96 100 T_TooManySym_01 5323 4.12 2.75 4.75 101 HTML_IMAGE_ONLY_32 5237 1.90 2.71 1.52 102 RCVD_IN_VALIDITY_CERTIFIED 5229 3.14 2.71 3.34 103 XM_UB50 5160 1.36 2.67 0.75 104 TM2_M_URI_OPT_OUT 5030 3.10 2.60 3.34 105 KHOP_HELO_FCRDNS 4960 2.66 2.57 2.70 106 URI_TRY_3LD 4927 1.35 2.55 0.80 107 XM_B_Unsub2 4698 1.99 2.43 1.78 108 SUBJ_ALL_CAPS 4670 1.73 2.42 1.41 109 RELAYCOUNTRY_AU 4521 1.30 2.34 0.81 110 XM_B_SpammyWords4 4433 1.11 2.29 0.56 111 T_XMHurry_00 4193 1.00 2.17 0.46 112 FROM_EXCESS_BASE64 3829 1.87 1.98 1.81 113 XM_DK_Undo_01 3786 1.89 1.96 1.86 114 T_REMOTE_IMAGE 3557 3.05 1.84 3.61 115 MAILING_LIST_MULTI 3543 2.63 1.83 3.00 116 LONGLN_LOW_CONTRAST 3457 0.72 1.79 0.22 117 T_XMDrugObfuBody_00 3389 1.27 1.75 1.05 118 XMStockSpam_06 3309 1.31 1.71 1.13 119 HTML_TAG_BALANCE_BODY 3223 0.85 1.67 0.47 120 XMGenDplmaNmb 3014 1.14 1.56 0.95 121 URI_HEX 2999 1.13 1.55 0.94 122 HTML_MIME_NO_HTML_TAG 2961 1.87 1.53 2.03 123 BAYES_40 2915 4.02 1.51 5.20 124 SpammyFromTLD_02 2867 0.71 1.48 0.36 125 RCVD_IN_IADB_LISTED 2786 3.16 1.44 3.96 126 T_FILL_THIS_FORM_SHORT 2754 1.02 1.43 0.83 127 AC_BR_BONANZA 2738 0.51 1.42 0.09 128 SpammyFromTLD_01 2711 0.89 1.40 0.65 129 URI_NOVOWEL 2654 2.59 1.37 3.16 130 XMBdyGiftCard01 2457 0.79 1.27 0.57 131 RCVD_IN_IADB_SPF 2440 2.74 1.26 3.42 132 ALL_TRUSTED 2406 11.14 1.25 15.75 133 TR_XM_NoHeaderRelay 2402 0.51 1.24 0.17 134 TR_Caps_n_Bayes_99 2378 0.41 1.23 0.03 135 XM_HighProb1 2309 0.39 1.19 0.01 136 RCVD_IN_IADB_DK 2278 2.37 1.18 2.92 137 TR_XM_INV_DKIM 2262 0.43 1.17 0.08 138 RCVD_IN_IADB_SENDERID 2250 2.43 1.16 3.02 139 XM_SendGrid 2240 1.31 1.16 1.38 140 XMPhish30 2226 0.71 1.15 0.51 141 HTTPS_HTTP_MISMATCH 2202 0.87 1.14 0.75 142 XM_B_Phish66 2175 0.54 1.13 0.26 143 THIS_AD 2139 0.59 1.11 0.34 144 XMSubMetaI_00 2115 0.77 1.09 0.62 145 BAYES_20 2068 2.57 1.07 3.27 146 XMHTML_After_End 2029 0.52 1.05 0.28 147 HOSTED_IMG_MULTI_PUB_01 2027 0.34 1.05 0.01 148 TR_XM_Base64_M1 1984 0.79 1.03 0.68 149 TR_XM_PHPForged 1957 0.53 1.01 0.31 150 DKIM_ADSP_CUSTOM_MED 1951 0.90 1.01 0.85 151 TR_XM_PHPDW 1930 0.52 1.00 0.30 152 TR_XM_FormFill2 1869 0.52 0.97 0.31 153 XM_H_PHPOS 1859 0.51 0.96 0.30 154 XM_B_COPY_HTML 1857 0.64 0.96 0.50 155 XMPhish14 1796 0.70 0.93 0.60 156 T_MONEY_PERCENT 1792 0.45 0.93 0.23 157 TR_LOTS_OF_MONEY2 1792 0.45 0.93 0.23 158 TR_XM_InvalidRelay 1775 0.31 0.92 0.02 159 DIET_1 1773 0.43 0.92 0.20 160 XM_ProductURIs 1751 0.58 0.91 0.43 161 TR_MetaPhish_Combo_01 1720 0.83 0.89 0.80 162 XMBody_78 1697 0.43 0.88 0.23 163 XM_PDF 1689 4.52 0.87 6.21 164 TR_Symld_Words 1613 1.17 0.83 1.32 165 URIBL_DBL_SPAM 1608 0.27 0.83 0.01 166 RDNS_DYNAMIC 1582 0.45 0.82 0.27 167 LongTLD 1571 0.53 0.81 0.40 168 XM_H_Undi_Recip 1560 0.36 0.81 0.15 169 XMSubMetaSxObfu_03 1558 0.54 0.81 0.42 170 NML_ADSP_CUSTOM_MED 1549 0.60 0.80 0.50 171 PDS_RDNS_DYNAMIC_FP 1535 0.36 0.79 0.16 172 XMReplyNow 1515 0.38 0.78 0.20 173 T_STY_INVIS_DIRECT 1513 0.53 0.78 0.41 174 T_Symld_Words_02 1504 0.59 0.78 0.51 175 BAYES_00 1496 6.77 0.77 9.57 176 RELAYCOUNTRY_FR 1483 0.41 0.77 0.24 177 XMSexyCombo_01 1469 0.32 0.76 0.12 178 TR_XM_Base64_L1 1445 0.30 0.75 0.09 179 TR_Mismatch_TLD_02 1437 0.29 0.74 0.07 180 XMMoneyMeta_00 1436 0.60 0.74 0.53 181 RELAYCOUNTRY_GB 1432 0.53 0.74 0.43 182 TooManyTo_002 1430 1.92 0.74 2.47 183 SHOPIFY_IMG_NOT_RCVD_SFY 1419 0.41 0.73 0.26 184 TVD_RCVD_IP 1417 0.52 0.73 0.42 185 RCVD_IN_IADB_VOUCHED 1400 2.14 0.72 2.80 186 MPART_ALT_DIFF_COUNT 1366 0.46 0.71 0.35 187 XMHTMLBadTable_001 1364 0.38 0.71 0.23 188 T_TooManySym_02 1360 1.86 0.70 2.40 189 XM_OfRef7 1334 0.32 0.69 0.15 190 XM_B_DNDMA 1323 0.56 0.68 0.50 191 XM_UB99 1315 0.22 0.68 0.00 192 FORGED_GMAIL_RCVD 1312 0.56 0.68 0.50 193 TR_XM_DK_SendGrid 1299 0.84 0.67 0.92 194 HELO_DYNAMIC_SPLIT_IP 1287 0.21 0.67 0.00 195 TR_XM_FormFill 1286 0.23 0.67 0.02 196 RELAYCOUNTRY_IN 1279 0.25 0.66 0.05 197 URIBL_BLACK 1274 0.24 0.66 0.04 198 TooManyTo_003 1266 1.19 0.66 1.44 199 TR_XM_DK_Bayes 1263 4.11 0.65 5.73 200 XM_B_COVIDMETA 1242 0.28 0.64 0.11 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 359151 89.97 97.12 86.64 2 RELAYCOUNTRY_US 336876 83.61 88.63 81.26 3 DKIM_SIGNED 294994 77.44 90.92 71.16 4 XM_DK_Pass 289280 75.51 87.79 69.78 5 DKIM_VALID 285400 74.51 86.64 68.85 6 XM_B_Unicode 285276 74.15 85.59 68.82 7 DCC_CHECK_NEGATIVE 263214 51.36 25.34 63.49 8 BAYES_50 254162 54.07 38.55 61.31 9 DKIM_VALID_AU 225600 59.84 71.46 54.42 10 XMListUnsubscribeExists 193265 55.54 74.68 46.62 11 XM_B_SpammyWords 183904 54.18 75.23 44.36 12 XM_B_Unicode3 166583 41.41 44.03 40.18 13 DCC_CHECK 151117 48.60 74.65 36.45 14 RCVD_IN_MSPIKE_H2 123825 33.16 40.22 29.87 15 T_TM2_M_HEADER_IN_MSG 122546 27.96 24.51 29.56 16 HTML_FONT_LOW_CONTRAST 121625 34.16 44.49 29.34 17 DKIM_VALID_EF 111605 27.04 27.30 26.92 18 LOC_TINY_FONT_1 100354 29.97 42.34 24.21 19 FVGT_m_MULTI_ODD 98488 27.84 36.59 23.76 20 XMSubLong 91834 22.71 23.89 22.15 21 MIME_HTML_ONLY 87122 21.59 22.82 21.02 22 T_KAM_HTML_FONT_INVALID 84412 22.89 28.32 20.36 23 XM_B_SpammyWords2 75351 25.69 41.79 18.18 24 ALL_TRUSTED 65276 11.14 1.25 15.75 25 XM_Multi_Part_URI 57589 16.00 20.51 13.89 26 USER_IN_DEF_DKIM_WL 53237 9.68 2.90 12.84 27 TR_XM_DK_Unsub 48738 14.59 20.67 11.76 28 UNPARSEABLE_RELAY 43406 11.79 14.61 10.47 29 LotsOfNums_01 39794 9.82 10.29 9.60 30 BAYES_00 39660 6.77 0.77 9.57 31 XM_B_Unsub 38715 10.79 13.89 9.34 32 XM_Evil_Numbers_Gen 38089 10.33 12.79 9.19 33 XM_B_PhoneNumber 36825 7.78 5.42 8.88 34 BAYES_60 35932 8.10 6.89 8.67 35 TooManyTo_001 32224 6.65 4.23 7.77 36 XM_DKIMWhitelistDomains 29631 4.90 0.07 7.15 37 TR_XM_BayesUnsub 28088 8.82 13.19 6.78 38 IN_ZIMBRA_NJ_WHITELIST 27322 4.52 0.09 6.59 39 TR_MAX_INTL_RELAY 26966 8.79 13.68 6.50 40 XM_PDF 25753 4.52 0.87 6.21 41 LOTS_OF_MONEY 24758 9.38 16.69 5.97 42 MPART_ALT_DIFF 24149 5.78 5.68 5.83 43 TR_XM_DK_Bayes 23742 4.11 0.65 5.73 44 FSL_BULK_SIG 23552 6.20 7.30 5.68 45 TR_XM_DK_Bayes1 23341 4.04 0.63 5.63 46 BOUNCE_MESSAGE 22032 4.68 3.33 5.31 47 ANY_BOUNCE_MESSAGE 22032 4.69 3.34 5.31 48 RCVD_IN_MSPIKE_WL 21952 4.54 2.93 5.30 49 RCVD_IN_MSPIKE_H3 21952 4.54 2.93 5.30 50 BAYES_40 21536 4.02 1.51 5.20 51 XMStrtUSub 20993 4.59 3.59 5.06 52 MIME_QP_LONG_LINE 20863 4.53 3.45 5.03 53 XM_DK_Undo_02 20605 17.87 45.55 4.97 54 XM_H_Long_From01 20199 5.00 5.27 4.87 55 XM_H_GMP 20043 4.50 3.78 4.83 56 TR_XM_DK_Bayes2 19872 3.44 0.52 4.79 57 XM_B_SpammyWords3 19804 7.64 13.79 4.78 58 T_TooManySym_01 19710 4.12 2.75 4.75 59 RCVD_IN_VALIDITY_SAFE 17201 3.95 3.54 4.15 60 MIME_HTML_ONLY_MULTI 17195 3.99 3.65 4.15 61 HTML_IMAGE_RATIO_02 16989 4.66 5.88 4.10 62 TR_XM_SpammyWords4 16738 7.69 15.53 4.04 63 XM_B_SpammyTLD 16679 3.71 3.05 4.02 64 BAYES_80 16604 5.38 8.32 4.01 65 RCVD_IN_IADB_LISTED 16428 3.16 1.44 3.96 66 XM_UncommonTLD01 16343 4.15 4.58 3.94 67 RELAYCOUNTRY_META 16051 6.43 11.93 3.87 68 HTML_IMAGE_RATIO_04 15608 4.27 5.35 3.77 69 XM_B_Phish_Phrases 15394 3.99 4.59 3.71 70 T_REMOTE_IMAGE 14959 3.05 1.84 3.61 71 HTML_IMAGE_RATIO_06 14601 3.68 4.03 3.52 72 BAYES_99 14382 14.23 37.32 3.47 73 RCVD_IN_IADB_SPF 14196 2.74 1.26 3.42 74 TM2_M_VERY_LONG_WORD 13874 4.29 6.32 3.35 75 RCVD_IN_VALIDITY_CERTIFIED 13861 3.14 2.71 3.34 76 TM2_M_URI_OPT_OUT 13829 3.10 2.60 3.34 77 XMSubMetaSx_00 13649 4.03 5.61 3.29 78 BAYES_20 13576 2.57 1.07 3.27 79 URI_NOVOWEL 13116 2.59 1.37 3.16 80 RCVD_IN_IADB_SENDERID 12512 2.43 1.16 3.02 81 MAILING_LIST_MULTI 12421 2.63 1.83 3.00 82 BOTNET_IPINHOSTNAME 12223 6.01 12.57 2.95 83 RCVD_IN_IADB_DK 12105 2.37 1.18 2.92 84 XM_SPF_SoftFail 11826 3.45 4.73 2.85 85 RCVD_IN_IADB_VOUCHED 11602 2.14 0.72 2.80 86 XM_H_Trusted_IP 11511 1.89 0.00 2.78 87 KHOP_HELO_FCRDNS 11203 2.66 2.57 2.70 88 BAYES_999 10648 11.36 30.21 2.57 89 XM_Body_Dirty_Words 10617 3.70 6.16 2.56 90 XMNumbers 10516 2.86 3.55 2.54 91 BAYES_95 10351 3.31 5.05 2.50 92 HTML_IMAGE_RATIO_08 10270 3.12 4.49 2.48 93 TooManyTo_002 10250 1.92 0.74 2.47 94 TR_XM_DKIM_Undo 10020 12.78 35.01 2.42 95 T_TooManySym_02 9966 1.86 0.70 2.40 96 DKIM_INVALID 9594 2.94 4.28 2.31 97 XM_CamelCaseFrm001 8934 2.49 3.20 2.16 98 MIME_HTML_MOSTLY 8742 2.40 3.01 2.11 99 XMDiploma_00 8507 2.38 3.09 2.05 100 T_OBFU_PDF_ATTACH 8470 1.46 0.20 2.04 101 HTML_MIME_NO_HTML_TAG 8435 1.87 1.53 2.03 102 BAYES_05 8338 1.54 0.52 2.01 103 RCVD_IN_IADB_OPTIN 8071 1.48 0.48 1.95 104 TR_XM_SpammyRelay 8054 3.95 8.25 1.94 105 SHORT_URI_3 7859 2.19 2.84 1.90 106 XM_DK_Undo_01 7725 1.89 1.96 1.86 107 T_XMDrugObfuBody_14 7692 2.44 3.69 1.86 108 FROM_EXCESS_BASE64 7512 1.87 1.98 1.81 109 XM_B_Unsub2 7373 1.99 2.43 1.78 110 XMSexyCombo_05 7194 2.42 3.90 1.74 111 TR_XM_PhishingBody 7092 2.41 3.92 1.71 112 INVALID_MSGID 7073 1.20 0.12 1.71 113 HELO_NODOT 6779 1.21 0.31 1.64 114 HELO_NO_DOMAIN 6776 1.21 0.31 1.63 115 TO_MALFORMED 6521 1.08 0.03 1.57 116 HTML_IMAGE_ONLY_32 6309 1.90 2.71 1.52 117 T_XMDrugObfuBody_08 6176 2.26 3.92 1.49 118 XM_B_Investor 6065 2.55 4.88 1.46 119 TR_XM_UnparsRelay 6031 3.54 8.02 1.45 120 MIME_CHARSET_FARAWAY 5984 1.17 0.60 1.44 121 TooManyTo_003 5953 1.19 0.66 1.44 122 SUBJ_ALL_CAPS 5835 1.73 2.42 1.41 123 SHORT_URI_2 5777 1.87 2.89 1.39 124 XM_SendGrid 5709 1.31 1.16 1.38 125 UNTRUSTED_Relay 5682 2.49 4.88 1.37 126 TR_DCC_Bayes_99 5611 9.90 28.23 1.35 127 XMSubNoVowel 5520 1.01 0.31 1.33 128 TR_Symld_Words 5472 1.17 0.83 1.32 129 XMGappySubj_01 5461 0.94 0.12 1.32 130 IN_HORDE_ADDRESS_BOOK 5323 0.90 0.06 1.28 131 BOTNET 5131 3.14 7.23 1.24 132 CHARSET_FARAWAY_HEADER 4908 0.82 0.05 1.18 133 XM_B_SEO 4777 2.27 4.68 1.15 134 TR_XM_SpammyWords5 4682 2.15 4.33 1.13 135 XMStockSpam_06 4669 1.31 1.71 1.13 136 TooManyTo_004 4352 0.90 0.59 1.05 137 T_XMDrugObfuBody_00 4339 1.27 1.75 1.05 138 XM_GoogleGroups 4332 0.90 0.58 1.04 139 RELAYCOUNTRY_CA 4310 1.84 3.56 1.04 140 XM_H_Long_From02 4278 0.91 0.64 1.03 141 XM_TLDProd2 4063 0.75 0.25 0.98 142 XMCapTrack 4042 0.82 0.49 0.98 143 XMBrknScrpt_02 3973 1.54 2.79 0.96 144 TVD_SPACE_RATIO 3939 0.69 0.14 0.95 145 XMGenDplmaNmb 3938 1.14 1.56 0.95 146 URI_HEX 3894 1.13 1.55 0.94 147 TR_XM_DK_SendGrid 3833 0.84 0.67 0.92 148 XM_OfRef6 3811 1.85 3.85 0.92 149 URI_TRUNCATED 3712 0.69 0.26 0.90 150 T_TooManySym_03 3709 0.70 0.27 0.89 151 FROM_GOV_DKIM_AU 3663 0.79 0.58 0.88 152 DKIM_ADSP_CUSTOM_MED 3543 0.90 1.01 0.85 153 XMBody_95 3542 0.64 0.17 0.85 154 T_FILL_THIS_FORM_SHORT 3450 1.02 1.43 0.83 155 TooManyTo_005 3430 0.74 0.55 0.83 156 RELAYCOUNTRY_AU 3367 1.30 2.34 0.81 157 RCVD_IN_BL_SPAMCOP_NET 3333 2.96 7.57 0.80 158 TR_MetaPhish_Combo_01 3311 0.83 0.89 0.80 159 URI_TRY_3LD 3303 1.35 2.55 0.80 160 T_TVD_MIME_NO_HEADERS 3292 0.55 0.04 0.79 161 XMNoVowels 3235 0.69 0.48 0.78 162 XM_UB50 3126 1.36 2.67 0.75 163 HTTPS_HTTP_MISMATCH 3097 0.87 1.14 0.75 164 TR_XM_SEO4 2925 1.79 4.12 0.71 165 XM_ShortIntro_01 2874 0.60 0.41 0.69 166 TR_XM_Base64_M1 2811 0.79 1.03 0.68 167 SpammyFromTLD_01 2691 0.89 1.40 0.65 168 XM_H_PHPMailer 2681 0.61 0.54 0.65 169 TR_LOTS_OF_MONEY3 2560 2.46 6.42 0.62 170 XMSubMetaI_00 2559 0.77 1.09 0.62 171 TR_XM_SpammyWords2 2542 5.37 15.58 0.61 172 XMPhish14 2485 0.70 0.93 0.60 173 XMBdyGiftCard01 2364 0.79 1.27 0.57 174 XM_RXBody 2330 0.49 0.33 0.56 175 XM_B_SpammyWords4 2325 1.11 2.29 0.56 176 XMGappySubj_02 2319 0.40 0.05 0.56 177 XMLngstWrd_00 2287 0.51 0.42 0.55 178 XMBody_17 2273 2.15 5.60 0.55 179 XM_B_FormFill 2220 0.40 0.09 0.54 180 XMMoneyMeta_00 2210 0.60 0.74 0.53 181 SHORT_HELO_AND_INLINE_IMAGE 2151 0.37 0.05 0.52 182 TO_NO_BRKTS_HTML_ONLY 2149 0.44 0.27 0.52 183 T_Symld_Words_02 2104 0.59 0.78 0.51 184 XMPhish30 2099 0.71 1.15 0.51 185 TM2_M_BODY_EMPTY 2090 0.38 0.13 0.50 186 NML_ADSP_CUSTOM_MED 2089 0.60 0.80 0.50 187 USER_IN_WELCOMELIST 2089 0.34 0.00 0.50 188 USER_IN_WHITELIST 2089 0.34 0.00 0.50 189 FORGED_GMAIL_RCVD 2073 0.56 0.68 0.50 190 XM_B_DNDMA 2066 0.56 0.68 0.50 191 XM_B_COPY_HTML 2060 0.64 0.96 0.50 192 HTML_TAG_BALANCE_BODY 1951 0.85 1.67 0.47 193 T_XMHurry_00 1892 1.00 2.17 0.46 194 HTML_IMAGE_ONLY_28 1828 0.42 0.38 0.44 195 RELAYCOUNTRY_GB 1787 0.53 0.74 0.43 196 XMDateMe_00 1773 0.38 0.28 0.43 197 XM_ProductURIs 1769 0.58 0.91 0.43 198 TVD_RCVD_IP 1750 0.52 0.73 0.42 199 XMSubMetaSxObfu_03 1732 0.54 0.81 0.42 200 T_STY_INVIS_DIRECT 1687 0.53 0.78 0.41 ----------------------------------------------------------------------