Email: 475275 Autolearn: 0 AvgScore: 4.53 AvgScanTime: 1.61 sec Spam: 145945 Autolearn: 0 AvgScore: 14.63 AvgScanTime: 1.80 sec Ham: 329330 Autolearn: 0 AvgScore: 0.06 AvgScanTime: 1.53 sec Time Spent Running SA: 212.41 hours Time Spent Processing Spam: 72.85 hours Time Spent Processing Ham: 139.56 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 137774 89.44 94.40 87.24 2 DKIM_SIGNED 126944 78.43 86.98 74.64 3 XM_DK_Pass 121802 76.35 83.46 73.20 4 XM_B_Unicode 121716 75.21 83.40 71.58 5 DKIM_VALID 120302 75.22 82.43 72.02 6 RELAYCOUNTRY_US 117505 81.82 80.51 82.40 7 DCC_CHECK 109264 50.50 74.87 39.70 8 XMListUnsubscribeExists 99197 54.05 67.97 47.88 9 XM_B_SpammyWords 97598 51.39 66.87 44.53 10 DKIM_VALID_AU 96052 60.13 65.81 57.62 11 XM_B_Unicode3 73118 44.69 50.10 42.30 12 LOC_TINY_FONT_1 72242 35.89 49.50 29.86 13 BAYES_50 62369 55.68 42.73 61.41 14 XM_B_SpammyWords2 57969 24.81 39.72 18.20 15 RCVD_IN_MSPIKE_H2 56050 35.69 38.40 34.49 16 XM_DK_Undo_02 55359 14.90 37.93 4.70 17 T_SCC_BODY_TEXT_LINE 52962 38.15 36.29 38.97 18 HTML_FONT_LOW_CONTRAST 52723 30.25 36.13 27.65 19 FVGT_m_MULTI_ODD 47563 26.72 32.59 24.13 20 T_KAM_HTML_FONT_INVALID 43896 24.24 30.08 21.66 21 DKIM_VALID_EF 42599 28.96 29.19 28.85 22 BAYES_99 41772 11.07 28.62 3.29 23 XMSubLong 41394 25.43 28.36 24.13 24 MIME_HTML_ONLY 41064 22.65 28.14 20.22 25 TR_XM_DKIM_Undo 38511 9.67 26.39 2.26 26 DCC_CHECK_NEGATIVE 34293 48.96 23.50 60.24 27 T_TM2_M_HEADER_IN_MSG 33460 29.52 22.93 32.44 28 BAYES_999 32284 8.55 22.12 2.54 29 XM_Multi_Part_URI 31957 15.75 21.90 13.03 30 TR_XM_DK_Unsub 31003 15.23 21.24 12.57 31 TR_DCC_Bayes_99 30306 7.32 20.77 1.37 32 UNPARSEABLE_RELAY 27313 13.78 18.71 11.59 33 RELAYCOUNTRY_META 25621 7.97 17.56 3.72 34 XM_B_Unsub 24217 10.96 16.59 8.47 35 TR_XM_BayesUnsub 23281 9.28 15.95 6.32 36 TR_MAX_INTL_RELAY 20629 7.98 14.13 5.26 37 XM_B_SpammyWords3 20603 7.55 14.12 4.64 38 LOTS_OF_MONEY 17908 7.87 12.27 5.92 39 BOTNET_IPINHOSTNAME 17609 5.88 12.07 3.14 40 TR_XM_SpammyRelay 16629 4.85 11.39 1.94 41 BOTNET 16127 4.46 11.05 1.54 42 TR_XM_SpammyWords4 16097 6.24 11.03 4.11 43 XM_Evil_Numbers_Gen 15851 11.00 10.86 11.06 44 FSL_BULK_SIG 15642 8.25 10.72 7.15 45 TR_XM_SpammyWords2 15089 3.56 10.34 0.56 46 XM_B_Phish_Phrases 14004 7.07 9.60 5.95 47 TR_XM_UnparsRelay 13962 4.04 9.57 1.60 48 BAYES_80 12862 4.97 8.81 3.26 49 LotsOfNums_01 12680 9.31 8.69 9.59 50 BAYES_60 11826 7.16 8.10 6.75 51 XM_Body_Dirty_Words 11580 4.06 7.93 2.34 52 XMSubMetaSx_00 11241 4.64 7.70 3.29 53 UNTRUSTED_Relay 10634 3.23 7.29 1.44 54 RCVD_IN_BL_SPAMCOP_NET 10100 2.43 6.92 0.45 55 XM_B_PhoneNumber 9644 9.16 6.61 10.29 56 RELAYCOUNTRY_CA 9428 2.61 6.46 0.91 57 HTML_IMAGE_RATIO_02 9293 5.15 6.37 4.62 58 MPART_ALT_DIFF 8787 5.43 6.02 5.16 59 XMStrtUSub 8576 4.96 5.88 4.56 60 XM_UncommonTLD01 8237 4.53 5.64 4.04 61 HTML_IMAGE_RATIO_04 7814 4.98 5.35 4.81 62 XM_H_Long_From01 7799 5.74 5.34 5.92 63 TR_XM_SPAMCOP 7707 1.80 5.28 0.26 64 HTML_IMAGE_RATIO_06 7564 4.87 5.18 4.74 65 BAYES_95 7238 2.90 4.96 1.99 66 TM2_M_VERY_LONG_WORD 7161 4.04 4.91 3.66 67 TR_XM_PhishingBody 6739 2.51 4.62 1.57 68 XM_B_Investor 6660 2.71 4.56 1.89 69 DKIM_INVALID 6642 3.21 4.55 2.62 70 XM_SPF_SoftFail 6583 2.33 4.51 1.36 71 XM_H_GMP 6419 5.34 4.40 5.76 72 XMSexyCombo_05 6413 2.22 4.39 1.25 73 XM_UB50 5811 1.88 3.98 0.95 74 TR_XM_SpammyWords5 5763 2.16 3.95 1.36 75 XMNumbers 5487 3.51 3.76 3.40 76 MIME_QP_LONG_LINE 5416 4.60 3.71 4.99 77 TooManyTo_001 5309 7.24 3.64 8.84 78 T_XMDrugObfuBody_14 5290 2.40 3.62 1.86 79 MIME_HTML_MOSTLY 5237 2.69 3.59 2.30 80 XM_B_SpammyTLD 5176 2.84 3.55 2.53 81 T_TooManySym_01 5110 5.53 3.50 6.43 82 FROM_EXCESS_BASE64 5072 2.22 3.48 1.67 83 MIME_HTML_ONLY_MULTI 5064 3.32 3.47 3.25 84 HTML_IMAGE_RATIO_08 5021 2.72 3.44 2.40 85 XM_CamelCaseFrm001 4988 2.50 3.42 2.09 86 T_XMDrugObfuBody_08 4840 2.08 3.32 1.53 87 XM_OfRef6 4639 1.68 3.18 1.02 88 XMDiploma_00 4540 1.95 3.11 1.43 89 RCVD_IN_VALIDITY_RPBL 4315 0.95 2.96 0.06 90 RCVD_IN_MSPIKE_H3 4261 4.83 2.92 5.67 91 RCVD_IN_MSPIKE_WL 4261 4.83 2.92 5.68 92 XM_B_URI_Unicode 4130 2.18 2.83 1.89 93 XM_URI_RBL 4091 1.12 2.80 0.38 94 ALL_TRUSTED 3967 11.04 2.72 14.72 95 RCVD_IN_PBL 3918 1.36 2.68 0.77 96 XM_B_Unsub2 3887 1.83 2.66 1.46 97 RELAYCOUNTRY_AU 3870 1.32 2.65 0.72 98 TM2_M_URI_OPT_OUT 3714 1.82 2.54 1.50 99 XM_B_SpammyWords4 3623 1.16 2.48 0.58 100 MAILING_LIST_MULTI 3517 2.89 2.41 3.10 101 ANY_BOUNCE_MESSAGE 3484 4.47 2.39 5.40 102 BOUNCE_MESSAGE 3483 4.47 2.39 5.40 103 BOTNET_NORDNS 3449 0.73 2.36 0.01 104 TR_XM_InvalidRelay 3446 0.73 2.36 0.01 105 BAYES_40 3208 4.55 2.20 5.59 106 RCVD_IN_VALIDITY_SAFE 3154 3.07 2.16 3.47 107 XM_DK_Undo_01 3101 2.01 2.12 1.96 108 SUBJ_ALL_CAPS 3084 1.90 2.11 1.81 109 TR_XM_NoHeaderRelay 3036 0.79 2.08 0.22 110 KHOP_HELO_FCRDNS 3005 2.34 2.06 2.46 111 USER_IN_DEF_DKIM_WL 2998 9.90 2.05 13.38 112 XMStockSpam_06 2953 1.52 2.02 1.29 113 TR_XM_PHPDW 2952 1.13 2.02 0.74 114 TR_XM_PHPForged 2916 1.12 2.00 0.74 115 TR_XM_FormFill2 2900 1.12 1.99 0.74 116 XMBody_17 2875 0.87 1.97 0.38 117 XM_H_PHPOS 2871 1.11 1.97 0.73 118 T_XMHurry_00 2818 1.00 1.93 0.58 119 SpammyFromTLD_02 2802 0.89 1.92 0.44 120 TR_XM_INV_DKIM 2704 0.69 1.85 0.18 121 TR_Symld_Words 2676 1.73 1.83 1.68 122 XMBrknScrpt_02 2666 1.08 1.83 0.76 123 T_XMDrugObfuBody_00 2614 1.11 1.79 0.81 124 T_TooManySym_02 2605 2.62 1.78 2.98 125 T_HTML_ATTACH 2595 0.59 1.78 0.06 126 T_FILL_THIS_FORM_SHORT 2572 1.24 1.76 1.01 127 XM_DIRTYINTL 2423 0.58 1.66 0.10 128 HTML_MIME_NO_HTML_TAG 2397 2.18 1.64 2.42 129 XM_SendGrid 2384 1.45 1.63 1.37 130 RCVD_IN_ZEN_LASTEXTERNAL 2368 0.50 1.62 0.00 131 SHORTCIRCUIT 2368 0.50 1.62 0.00 132 HTML_FONT_TINY_NORDNS 2361 0.53 1.62 0.04 133 RELAYCOUNTRY_KR 2353 0.50 1.61 0.01 134 T_OBFU_HTML_ATTACH 2343 0.49 1.61 0.00 135 TR_XM_HtmlAttach 2343 0.49 1.61 0.00 136 MAY_BE_FORGED 2319 1.50 1.59 1.46 137 SpammyFromTLD_01 2301 1.10 1.58 0.88 138 BAYES_20 2281 3.19 1.56 3.92 139 DKIM_ADSP_NXDOMAIN 2277 0.71 1.56 0.33 140 URI_HEX 2272 1.32 1.56 1.21 141 NO_DNS_FOR_FROM 2252 0.68 1.54 0.30 142 URI_NOVOWEL 2228 1.63 1.53 1.68 143 RCVD_IN_VALIDITY_CERTIFIED 2220 2.37 1.52 2.75 144 TR_XM_MaxWHORU 2210 0.62 1.51 0.22 145 XMPhish30 2093 0.75 1.43 0.45 146 XM_B_SEO 2073 0.58 1.42 0.21 147 T_REMOTE_IMAGE 2064 3.03 1.41 3.75 148 XMSubMetaI_00 1991 0.79 1.36 0.53 149 XM_H_Long_From02 1987 1.01 1.36 0.85 150 URI_TRY_3LD 1985 0.80 1.36 0.56 151 XMGenDplmaNmb 1985 0.90 1.36 0.70 152 DIET_1 1876 0.55 1.29 0.22 153 DKIM_ADSP_CUSTOM_MED 1861 0.94 1.28 0.79 154 XM_B_Phish66 1823 0.61 1.25 0.32 155 HTTPS_HTTP_MISMATCH 1820 0.91 1.25 0.76 156 XMBody_78 1738 0.59 1.19 0.32 157 SHOPIFY_IMG_NOT_RCVD_SFY 1720 0.53 1.18 0.24 158 TR_LOTS_OF_MONEY3 1702 0.57 1.17 0.30 159 XM_B_COPY_HTML 1700 0.95 1.16 0.86 160 T_MONEY_PERCENT 1683 0.48 1.15 0.18 161 TR_LOTS_OF_MONEY2 1683 0.48 1.15 0.18 162 TR_MetaPhish_Combo_01 1673 0.92 1.15 0.82 163 RCVD_IN_PSBL 1659 0.53 1.14 0.27 164 TR_XM_SEO4 1643 0.42 1.13 0.10 165 XMSexyCombo_01 1597 0.46 1.09 0.18 166 XMNoVowels 1596 0.79 1.09 0.66 167 NML_ADSP_CUSTOM_MED 1572 0.71 1.08 0.55 168 LongTLD 1570 0.59 1.08 0.38 169 RCVD_IN_IADB_LISTED 1569 3.32 1.08 4.31 170 T_TooManySym_03 1504 1.17 1.03 1.24 171 HTML_TAG_BALANCE_BODY 1500 0.73 1.03 0.60 172 RELAYCOUNTRY_FR 1475 0.49 1.01 0.26 173 RCVD_IN_IADB_SPF 1449 2.89 0.99 3.73 174 FORGED_GMAIL_RCVD 1439 0.60 0.99 0.43 175 XM_ProductURIs 1437 0.61 0.98 0.45 176 RDNS_DYNAMIC 1434 0.44 0.98 0.20 177 RCVD_IN_IADB_DK 1403 2.52 0.96 3.21 178 RELAYCOUNTRY_GB 1399 0.64 0.96 0.50 179 XM_HighProb1 1390 0.30 0.95 0.01 180 RCVD_IN_IADB_SENDERID 1386 2.58 0.95 3.31 181 MultiRelay_CC 1370 0.42 0.94 0.18 182 TR_Mismatch_TLD_02 1366 0.34 0.94 0.08 183 XMHTML_After_End 1345 0.54 0.92 0.37 184 XMSubMetaSxObfu_03 1330 0.58 0.91 0.43 185 XM_UB99 1288 0.27 0.88 0.00 186 TR_XM_RelayPhish 1283 0.32 0.88 0.07 187 XMPhish14 1280 0.54 0.88 0.39 188 MPART_ALT_DIFF_COUNT 1237 0.68 0.85 0.60 189 RCVD_IN_SORBS_DUL 1233 0.28 0.84 0.03 190 TM2_M_OBFU_COMMENT 1231 0.44 0.84 0.26 191 XM_PDF 1222 3.25 0.84 4.32 192 RELAYCOUNTRY_DE 1216 0.46 0.83 0.29 193 T_Symld_Words_02 1210 0.67 0.83 0.60 194 XMMoneyMeta_00 1193 0.64 0.82 0.56 195 XM_UB60 1189 0.28 0.81 0.05 196 TR_XM_DK_SendGrid 1187 0.84 0.81 0.86 197 XMBdyGiftCard01 1185 0.59 0.81 0.49 198 T_STY_INVIS_DIRECT 1166 0.56 0.80 0.45 199 HTML_IMAGE_ONLY_20 1147 0.59 0.79 0.50 200 SUBJ_DOLLARS 1142 0.43 0.78 0.28 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 287313 89.44 94.40 87.24 2 RELAYCOUNTRY_US 271356 81.82 80.51 82.40 3 DKIM_SIGNED 245827 78.43 86.98 74.64 4 XM_DK_Pass 241063 76.35 83.46 73.20 5 DKIM_VALID 237191 75.22 82.43 72.02 6 XM_B_Unicode 235727 75.21 83.40 71.58 7 BAYES_50 202254 55.68 42.73 61.41 8 DCC_CHECK_NEGATIVE 198399 48.96 23.50 60.24 9 DKIM_VALID_AU 189753 60.13 65.81 57.62 10 XMListUnsubscribeExists 157676 54.05 67.97 47.88 11 XM_B_SpammyWords 146637 51.39 66.87 44.53 12 XM_B_Unicode3 139301 44.69 50.10 42.30 13 DCC_CHECK 130729 50.50 74.87 39.70 14 T_SCC_BODY_TEXT_LINE 128342 38.15 36.29 38.97 15 RCVD_IN_MSPIKE_H2 113592 35.69 38.40 34.49 16 T_TM2_M_HEADER_IN_MSG 106846 29.52 22.93 32.44 17 LOC_TINY_FONT_1 98337 35.89 49.50 29.86 18 DKIM_VALID_EF 95023 28.96 29.19 28.85 19 HTML_FONT_LOW_CONTRAST 91067 30.25 36.13 27.65 20 XMSubLong 79462 25.43 28.36 24.13 21 FVGT_m_MULTI_ODD 79451 26.72 32.59 24.13 22 T_KAM_HTML_FONT_INVALID 71334 24.24 30.08 21.66 23 MIME_HTML_ONLY 66600 22.65 28.14 20.22 24 XM_B_SpammyWords2 59944 24.81 39.72 18.20 25 ALL_TRUSTED 48490 11.04 2.72 14.72 26 USER_IN_DEF_DKIM_WL 44068 9.90 2.05 13.38 27 XM_Multi_Part_URI 42917 15.75 21.90 13.03 28 TR_XM_DK_Unsub 41400 15.23 21.24 12.57 29 UNPARSEABLE_RELAY 38161 13.78 18.71 11.59 30 BAYES_00 37324 8.09 0.76 11.33 31 XM_Evil_Numbers_Gen 36423 11.00 10.86 11.06 32 XM_B_PhoneNumber 33890 9.16 6.61 10.29 33 LotsOfNums_01 31572 9.31 8.69 9.59 34 TooManyTo_001 29122 7.24 3.64 8.84 35 XM_B_Unsub 27891 10.96 16.59 8.47 36 TR_XM_DK_Bayes 24628 5.36 0.58 7.48 37 TR_XM_DK_Bayes1 24087 5.24 0.57 7.31 38 FSL_BULK_SIG 23547 8.25 10.72 7.15 39 XM_DKIMWhitelistDomains 22879 4.84 0.07 6.95 40 BAYES_60 22219 7.16 8.10 6.75 41 IN_ZIMBRA_NJ_WHITELIST 21708 4.60 0.09 6.59 42 T_TooManySym_01 21174 5.53 3.50 6.43 43 TR_XM_BayesUnsub 20818 9.28 15.95 6.32 44 TR_XM_DK_Bayes2 20623 4.48 0.46 6.26 45 XM_B_Phish_Phrases 19586 7.07 9.60 5.95 46 LOTS_OF_MONEY 19495 7.87 12.27 5.92 47 XM_H_Long_From01 19494 5.74 5.34 5.92 48 XM_H_GMP 18956 5.34 4.40 5.76 49 RCVD_IN_MSPIKE_WL 18705 4.83 2.92 5.68 50 RCVD_IN_MSPIKE_H3 18681 4.83 2.92 5.67 51 BAYES_40 18419 4.55 2.20 5.59 52 ANY_BOUNCE_MESSAGE 17784 4.47 2.39 5.40 53 BOUNCE_MESSAGE 17780 4.47 2.39 5.40 54 TR_MAX_INTL_RELAY 17312 7.98 14.13 5.26 55 MPART_ALT_DIFF 17009 5.43 6.02 5.16 56 MIME_QP_LONG_LINE 16431 4.60 3.71 4.99 57 HTML_IMAGE_RATIO_04 15854 4.98 5.35 4.81 58 HTML_IMAGE_RATIO_06 15596 4.87 5.18 4.74 59 XM_DK_Undo_02 15464 14.90 37.93 4.70 60 XM_B_SpammyWords3 15289 7.55 14.12 4.64 61 HTML_IMAGE_RATIO_02 15202 5.15 6.37 4.62 62 XMStrtUSub 15020 4.96 5.88 4.56 63 XM_PDF 14224 3.25 0.84 4.32 64 RCVD_IN_IADB_LISTED 14188 3.32 1.08 4.31 65 TR_XM_SpammyWords4 13537 6.24 11.03 4.11 66 XM_UncommonTLD01 13302 4.53 5.64 4.04 67 BAYES_20 12896 3.19 1.56 3.92 68 T_REMOTE_IMAGE 12351 3.03 1.41 3.75 69 RCVD_IN_IADB_SPF 12292 2.89 0.99 3.73 70 RELAYCOUNTRY_META 12259 7.97 17.56 3.72 71 TM2_M_VERY_LONG_WORD 12053 4.04 4.91 3.66 72 RCVD_IN_VALIDITY_SAFE 11443 3.07 2.16 3.47 73 XMNumbers 11212 3.51 3.76 3.40 74 RCVD_IN_IADB_SENDERID 10898 2.58 0.95 3.31 75 BAYES_99 10821 11.07 28.62 3.29 76 XMSubMetaSx_00 10820 4.64 7.70 3.29 77 BAYES_80 10744 4.97 8.81 3.26 78 MIME_HTML_ONLY_MULTI 10695 3.32 3.47 3.25 79 RCVD_IN_IADB_DK 10567 2.52 0.96 3.21 80 BOTNET_IPINHOSTNAME 10340 5.88 12.07 3.14 81 MAILING_LIST_MULTI 10204 2.89 2.41 3.10 82 TooManyTo_002 10135 2.30 0.55 3.08 83 T_TooManySym_02 9824 2.62 1.78 2.98 84 RCVD_IN_IADB_VOUCHED 9576 2.14 0.40 2.91 85 RCVD_IN_VALIDITY_CERTIFIED 9066 2.37 1.52 2.75 86 DKIM_INVALID 8636 3.21 4.55 2.62 87 BAYES_999 8361 8.55 22.12 2.54 88 XM_B_SpammyTLD 8332 2.84 3.55 2.53 89 KHOP_HELO_FCRDNS 8097 2.34 2.06 2.46 90 BAYES_05 8083 1.89 0.62 2.45 91 HTML_MIME_NO_HTML_TAG 7976 2.18 1.64 2.42 92 HTML_IMAGE_RATIO_08 7888 2.72 3.44 2.40 93 XM_Body_Dirty_Words 7711 4.06 7.93 2.34 94 MIME_HTML_MOSTLY 7566 2.69 3.59 2.30 95 TR_XM_DKIM_Undo 7430 9.67 26.39 2.26 96 INVALID_MSGID 7064 1.54 0.19 2.14 97 XM_CamelCaseFrm001 6893 2.50 3.42 2.09 98 RCVD_IN_IADB_OPTIN 6754 1.49 0.23 2.05 99 BAYES_95 6554 2.90 4.96 1.99 100 XM_DK_Undo_01 6463 2.01 2.12 1.96 101 TR_XM_SpammyRelay 6400 4.85 11.39 1.94 102 TO_MALFORMED 6249 1.32 0.03 1.90 103 XM_B_Investor 6218 2.71 4.56 1.89 104 XM_B_URI_Unicode 6216 2.18 2.83 1.89 105 T_XMDrugObfuBody_14 6139 2.40 3.62 1.86 106 SUBJ_ALL_CAPS 5959 1.90 2.11 1.81 107 TooManyTo_003 5648 1.33 0.47 1.71 108 TR_Symld_Words 5535 1.73 1.83 1.68 109 URI_NOVOWEL 5530 1.63 1.53 1.68 110 FROM_EXCESS_BASE64 5499 2.22 3.48 1.67 111 TR_XM_UnparsRelay 5259 4.04 9.57 1.60 112 TR_XM_PhishingBody 5173 2.51 4.62 1.57 113 BOTNET 5079 4.46 11.05 1.54 114 T_XMDrugObfuBody_08 5036 2.08 3.32 1.53 115 TM2_M_URI_OPT_OUT 4932 1.82 2.54 1.50 116 MAY_BE_FORGED 4820 1.50 1.59 1.46 117 XM_B_Unsub2 4792 1.83 2.66 1.46 118 UNTRUSTED_Relay 4733 3.23 7.29 1.44 119 XMDiploma_00 4710 1.95 3.11 1.43 120 XM_SendGrid 4524 1.45 1.63 1.37 121 TR_DCC_Bayes_99 4499 7.32 20.77 1.37 122 XM_SPF_SoftFail 4484 2.33 4.51 1.36 123 TR_XM_SpammyWords5 4483 2.16 3.95 1.36 124 XMGappySubj_01 4430 1.06 0.42 1.35 125 HELO_NODOT 4391 1.01 0.28 1.33 126 HELO_NO_DOMAIN 4384 1.01 0.28 1.33 127 XMCapTrack 4369 1.08 0.51 1.33 128 XMStockSpam_06 4262 1.52 2.02 1.29 129 XM_GoogleGroups 4239 1.11 0.72 1.29 130 IN_HORDE_ADDRESS_BOOK 4219 0.91 0.09 1.28 131 XMSexyCombo_05 4133 2.22 4.39 1.25 132 T_TooManySym_03 4072 1.17 1.03 1.24 133 TooManyTo_004 3996 0.97 0.41 1.21 134 URI_HEX 3978 1.32 1.56 1.21 135 MIME_CHARSET_FARAWAY 3683 0.88 0.34 1.12 136 XM_OfRef6 3345 1.68 3.18 1.02 137 T_FILL_THIS_FORM_SHORT 3322 1.24 1.76 1.01 138 CHARSET_FARAWAY_HEADER 3282 0.74 0.16 1.00 139 TVD_SPACE_RATIO 3247 0.76 0.25 0.99 140 XMLngstWrd_00 3219 0.80 0.41 0.98 141 TooManyTo_005 3122 0.77 0.37 0.95 142 XM_UB50 3121 1.88 3.98 0.95 143 RELAYCOUNTRY_CA 2988 2.61 6.46 0.91 144 FROM_GOV_DKIM_AU 2935 0.66 0.14 0.89 145 SpammyFromTLD_01 2908 1.10 1.58 0.88 146 XM_H_PHPMailer 2871 0.82 0.71 0.87 147 XM_B_COPY_HTML 2829 0.95 1.16 0.86 148 TR_XM_DK_SendGrid 2816 0.84 0.81 0.86 149 XM_H_Long_From02 2802 1.01 1.36 0.85 150 XM_H_Trusted_IP 2779 0.58 0.00 0.84 151 XM_ShortIntro_01 2771 0.75 0.55 0.84 152 TR_MetaPhish_Combo_01 2710 0.92 1.15 0.82 153 T_XMDrugObfuBody_00 2654 1.11 1.79 0.81 154 LOW_PRICE 2637 0.64 0.29 0.80 155 DKIM_ADSP_CUSTOM_MED 2600 0.94 1.28 0.79 156 RCVD_IN_PBL 2535 1.36 2.68 0.77 157 XMBrknScrpt_02 2490 1.08 1.83 0.76 158 HTTPS_HTTP_MISMATCH 2489 0.91 1.25 0.76 159 TR_XM_FormFill2 2441 1.12 1.99 0.74 160 TR_XM_PHPDW 2430 1.13 2.02 0.74 161 TR_XM_PHPForged 2425 1.12 2.00 0.74 162 XM_H_PHPOS 2403 1.11 1.97 0.73 163 RELAYCOUNTRY_AU 2385 1.32 2.65 0.72 164 XMGappySubj_02 2346 0.51 0.05 0.71 165 XMGenDplmaNmb 2290 0.90 1.36 0.70 166 TO_NO_BRKTS_HTML_ONLY 2194 0.61 0.48 0.67 167 HTML_IMAGE_ONLY_32 2186 0.53 0.23 0.66 168 XMNoVowels 2162 0.79 1.09 0.66 169 TR_XM_Base64_M1 2155 0.67 0.71 0.65 170 TVD_RCVD_IP 2143 0.66 0.69 0.65 171 XM_B_FormFill 2082 0.45 0.04 0.63 172 XMSubNoVowel 1994 0.54 0.41 0.61 173 T_OBFU_PDF_ATTACH 1989 0.46 0.15 0.60 174 MPART_ALT_DIFF_COUNT 1988 0.68 0.85 0.60 175 T_Symld_Words_02 1978 0.67 0.83 0.60 176 HTML_TAG_BALANCE_BODY 1968 0.73 1.03 0.60 177 T_XMHurry_00 1924 1.00 1.93 0.58 178 XM_B_SpammyWords4 1902 1.16 2.48 0.58 179 TR_XM_SpammyWords2 1839 3.56 10.34 0.56 180 URI_TRY_3LD 1830 0.80 1.36 0.56 181 XMMoneyMeta_00 1828 0.64 0.82 0.56 182 NML_ADSP_CUSTOM_MED 1805 0.71 1.08 0.55 183 XMBSHREFv2 1779 0.50 0.40 0.54 184 XMSlimDrugH 1776 0.56 0.60 0.54 185 XM_B_DNDMA 1752 0.59 0.72 0.53 186 XMSubMetaI_00 1750 0.79 1.36 0.53 187 MSGID_FROM_MTA_HEADER 1725 0.40 0.13 0.52 188 RELAYCOUNTRY_GB 1652 0.64 0.96 0.50 189 HTML_IMAGE_ONLY_20 1646 0.59 0.79 0.50 190 XMBdyGiftCard01 1614 0.59 0.81 0.49 191 HTML_IMAGE_ONLY_28 1555 0.42 0.29 0.47 192 XMDateMe_00 1516 0.47 0.51 0.46 193 XMPhish30 1486 0.75 1.43 0.45 194 T_STY_INVIS_DIRECT 1481 0.56 0.80 0.45 195 XM_ProductURIs 1471 0.61 0.98 0.45 196 RCVD_IN_BL_SPAMCOP_NET 1469 2.43 6.92 0.45 197 SpammyFromTLD_02 1436 0.89 1.92 0.44 198 XMBody_95 1431 0.35 0.14 0.43 199 FORGED_GMAIL_RCVD 1415 0.60 0.99 0.43 200 XMSubMetaSxObfu_03 1404 0.58 0.91 0.43 ----------------------------------------------------------------------