Email: 530478 Autolearn: 0 AvgScore: 4.69 AvgScanTime: 1.33 sec Spam: 134933 Autolearn: 0 AvgScore: 14.82 AvgScanTime: 1.64 sec Ham: 395545 Autolearn: 0 AvgScore: 1.23 AvgScanTime: 1.22 sec Time Spent Running SA: 195.40 hours Time Spent Processing Spam: 61.50 hours Time Spent Processing Ham: 133.91 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 132672 99.22 98.32 99.52 2 HTML_MESSAGE 128145 87.58 94.97 85.06 3 DKIM_SIGNED 120529 68.16 89.33 60.94 4 XM_DK_Pass 114311 66.40 84.72 60.15 5 XM_B_Unicode 114022 65.15 84.50 58.55 6 DKIM_VALID 113266 65.58 83.94 59.31 7 RELAYCOUNTRY_US 108829 80.86 80.65 80.93 8 DCC_CHECK 102342 47.44 75.85 37.75 9 XM_B_SpammyWords 94561 46.16 70.08 38.00 10 XMListUnsubscribeExists 90429 46.40 67.02 39.37 11 DKIM_VALID_AU 89401 52.81 66.26 48.23 12 XM_B_Unicode3 66904 37.00 49.58 32.71 13 LOC_TINY_FONT_1 63770 29.29 47.26 23.17 14 XM_B_SpammyWords2 56677 23.42 42.00 17.08 15 BAYES_50 55988 58.03 41.49 63.68 16 XM_DK_Undo_02 54629 13.24 40.49 3.94 17 HTML_FONT_LOW_CONTRAST 47936 25.97 35.53 22.72 18 FVGT_m_MULTI_ODD 44943 24.07 33.31 20.92 19 DKIM_VALID_EF 42931 25.98 31.82 23.98 20 MIME_HTML_ONLY 41275 18.88 30.59 14.89 21 BAYES_99 40721 9.83 30.18 2.89 22 T_KAM_HTML_FONT_INVALID 40022 20.72 29.66 17.66 23 TR_XM_DKIM_Undo 39105 8.56 28.98 1.59 24 XMSubLong 33797 19.93 25.05 18.19 25 TR_XM_DK_Unsub 31368 14.00 23.25 10.85 26 BAYES_999 31054 7.50 23.01 2.21 27 T_TM2_M_HEADER_IN_MSG 30772 34.67 22.81 38.72 28 DCC_CHECK_NEGATIVE 30603 52.15 22.68 62.20 29 XM_Multi_Part_URI 29548 14.08 21.90 11.41 30 TR_DCC_Bayes_99 29078 6.41 21.55 1.25 31 RCVD_IN_MSPIKE_H2 27735 15.30 20.55 13.50 32 XM_B_Unsub 26883 10.44 19.92 7.20 33 TR_XM_BayesUnsub 25788 9.02 19.11 5.58 34 RELAYCOUNTRY_META 24975 6.96 18.51 3.02 35 UNPARSEABLE_RELAY 23395 11.45 17.34 9.44 36 XM_B_SpammyWords3 21654 7.40 16.05 4.45 37 TR_MAX_INTL_RELAY 19518 7.26 14.46 4.80 38 TR_XM_SpammyRelay 18475 4.64 13.69 1.55 39 BOTNET_IPINHOSTNAME 18056 5.17 13.38 2.36 40 LOTS_OF_MONEY 16873 6.75 12.50 4.79 41 FSL_BULK_SIG 15574 11.58 11.54 11.59 42 TR_XM_SpammyWords2 15436 3.28 11.44 0.50 43 TR_XM_SpammyWords4 15343 5.38 11.37 3.34 44 BOTNET 14505 3.44 10.75 0.94 45 XM_Evil_Numbers_Gen 14188 8.63 10.51 7.99 46 RCVD_IN_BL_SPAMCOP_NET 13647 2.91 10.11 0.45 47 XM_B_Phish_Phrases 12713 5.97 9.42 4.80 48 RCVD_IN_MSPIKE_WL 12446 13.11 9.22 14.43 49 BAYES_80 12124 4.48 8.99 2.94 50 TR_XM_UnparsRelay 11973 3.29 8.87 1.38 51 BAYES_60 10921 6.32 8.09 5.72 52 XM_Body_Dirty_Words 9781 3.40 7.25 2.08 53 LotsOfNums_01 9539 11.00 7.07 12.34 54 UNTRUSTED_Relay 9293 2.74 6.89 1.33 55 XM_B_PhoneNumber 9006 7.79 6.67 8.16 56 HTML_IMAGE_RATIO_02 8963 4.34 6.64 3.55 57 RELAYCOUNTRY_CA 8854 2.16 6.56 0.66 58 XM_H_Long_From01 8823 5.16 6.54 4.69 59 XM_UncommonTLD01 8670 4.09 6.43 3.30 60 XMSubMetaSx_00 8554 3.64 6.34 2.72 61 MPART_ALT_DIFF 8544 4.98 6.33 4.52 62 TR_XM_PhishingBody 8050 2.71 5.97 1.59 63 XM_B_Investor 7350 2.48 5.45 1.47 64 DKIM_INVALID 7263 2.59 5.38 1.63 65 HTML_IMAGE_RATIO_04 7186 3.78 5.33 3.25 66 BAYES_95 6996 2.70 5.18 1.86 67 XMStrtUSub 6949 4.38 5.15 4.12 68 TR_XM_SPAMCOP 6915 1.41 5.12 0.15 69 RCVD_IN_MSPIKE_BL 6776 1.88 5.02 0.81 70 TR_XM_MSPIKECOMBO 6775 1.88 5.02 0.81 71 XM_OfRef6 6631 1.83 4.91 0.77 72 XM_H_GMP 6444 4.82 4.78 4.84 73 XMSexyCombo_05 6392 1.91 4.74 0.95 74 TooManyTo_001 6356 6.23 4.71 6.75 75 RCVD_IN_MSPIKE_H3 6184 6.27 4.58 6.85 76 XMNumbers 5589 3.15 4.14 2.81 77 MIME_QP_LONG_LINE 5484 4.34 4.06 4.44 78 HTML_IMAGE_RATIO_06 5439 2.89 4.03 2.50 79 TM2_M_VERY_LONG_WORD 5366 13.16 3.98 16.30 80 T_XMDrugObfuBody_14 5146 2.28 3.81 1.75 81 TR_XM_SpammyWords5 5026 1.76 3.72 1.10 82 XM_UB50 5014 1.58 3.72 0.85 83 TR_XM_SpammyWords3 4985 1.20 3.69 0.35 84 TM2_M_URI_OPT_OUT 4903 1.96 3.63 1.39 85 XM_URI_RBL 4877 1.10 3.61 0.24 86 XM_B_SpammyTLD 4859 2.35 3.60 1.92 87 XM_SPF_SoftFail 4810 1.75 3.56 1.14 88 TR_XM_NoHeaderRelay 4696 1.01 3.48 0.16 89 MIME_HTML_MOSTLY 4601 2.81 3.41 2.61 90 MIME_HTML_ONLY_MULTI 4541 2.27 3.37 1.90 91 XMDiploma_00 4440 1.75 3.29 1.22 92 XM_CamelCaseFrm001 4408 2.09 3.27 1.68 93 HTML_IMAGE_RATIO_08 4152 2.02 3.08 1.66 94 RELAYCOUNTRY_AU 4078 1.12 3.02 0.48 95 XM_B_Unsub2 3951 1.59 2.93 1.14 96 XM_B_SpammyWords4 3743 1.27 2.77 0.76 97 RCVD_IN_MSPIKE_L3 3703 1.17 2.74 0.63 98 T_TooManySym_01 3688 4.19 2.73 4.69 99 RCVD_IN_MSPIKE_H4 3652 2.95 2.71 3.03 100 RCVD_IN_VALIDITY_RPBL 3634 0.72 2.69 0.05 101 T_XMDrugObfuBody_08 3492 1.45 2.59 1.06 102 XM_B_URI_Unicode 3490 1.80 2.59 1.54 103 SpammyFromTLD_02 3380 0.98 2.50 0.47 104 T_FILL_THIS_FORM_SHORT 3259 1.13 2.42 0.69 105 TR_XM_INV_DKIM 3203 0.61 2.37 0.01 106 XM_H_Long_From02 3052 1.04 2.26 0.63 107 XMBody_17 2906 0.71 2.15 0.22 108 USER_IN_DEF_DKIM_WL 2815 8.63 2.09 10.86 109 MAILING_LIST_MULTI 2794 2.48 2.07 2.63 110 FROM_EXCESS_BASE64 2752 1.53 2.04 1.35 111 RCVD_IN_VALIDITY_SAFE 2660 2.95 1.97 3.28 112 T_XMDrugObfuBody_00 2635 1.01 1.95 0.69 113 RCVD_IN_MSPIKE_H5 2610 3.89 1.93 4.55 114 ALL_TRUSTED 2603 12.78 1.93 16.48 115 DKIM_ADSP_NXDOMAIN 2563 0.66 1.90 0.24 116 HTML_MIME_NO_HTML_TAG 2540 1.95 1.88 1.98 117 SpammyFromTLD_01 2495 0.99 1.85 0.70 118 XMStockSpam_06 2495 1.20 1.85 0.98 119 URI_HEX 2478 1.22 1.84 1.01 120 T_XMHurry_00 2410 0.78 1.79 0.44 121 XM_B_DNDMA 2391 0.73 1.77 0.38 122 URI_NOVOWEL 2386 1.20 1.77 1.01 123 SCC_BODY_URI_ONLY 2383 5.15 1.77 6.31 124 XMGenDplmaNmb 2330 0.94 1.73 0.67 125 KHOP_HELO_FCRDNS 2326 7.04 1.72 8.85 126 BAYES_40 2301 4.38 1.71 5.29 127 T_REMOTE_IMAGE 2289 2.75 1.70 3.11 128 XM_DK_Undo_01 2122 1.52 1.57 1.51 129 SUBJ_ALL_CAPS 2120 1.23 1.57 1.11 130 XM_B_Phish66 2111 0.63 1.56 0.31 131 XMBrknScrpt_02 2102 0.92 1.56 0.71 132 MPART_ALT_DIFF_COUNT 2082 0.68 1.54 0.39 133 TR_XM_MSPIKECOMBO2 2059 0.42 1.53 0.05 134 RCVD_IN_IADB_LISTED 2052 2.61 1.52 2.97 135 RCVD_IN_VALIDITY_CERTIFIED 2031 2.34 1.51 2.63 136 XMPhish30 2017 0.66 1.49 0.37 137 ANY_BOUNCE_MESSAGE 2010 18.18 1.49 23.88 138 BOUNCE_MESSAGE 2008 18.18 1.49 23.88 139 XM_SendGrid 1997 1.35 1.48 1.31 140 RDNS_DYNAMIC 1968 0.48 1.46 0.14 141 DIET_1 1964 0.56 1.46 0.26 142 RCVD_IN_ZEN_LASTEXTERNAL 1964 0.37 1.46 0.00 143 URI_TRY_3LD 1964 0.65 1.46 0.38 144 SHORTCIRCUIT 1964 0.37 1.46 0.00 145 RELAYCOUNTRY_FR 1943 0.54 1.44 0.24 146 PDS_RDNS_DYNAMIC_FP 1910 0.38 1.42 0.03 147 BAYES_20 1839 5.88 1.36 7.42 148 XM_HighProb1 1831 0.35 1.36 0.00 149 XM_B_SEO 1831 0.50 1.36 0.21 150 RCVD_IN_IADB_SPF 1816 2.27 1.35 2.58 151 SH_BODYURI_REVERSE_CSS 1766 0.34 1.31 0.01 152 URIBL_CSS_A 1763 0.34 1.31 0.01 153 URIBL_CSS 1763 0.34 1.31 0.01 154 XM_ProductURIs 1762 0.62 1.31 0.38 155 XMBody_78 1740 0.51 1.29 0.24 156 XMPhish14 1733 0.76 1.28 0.58 157 TR_XM_SEO4 1703 0.38 1.26 0.08 158 MultiRelay_CC 1702 0.41 1.26 0.12 159 RCVD_IN_IADB_DK 1688 1.97 1.25 2.22 160 HK_RANDOM_REPLYTO 1681 0.38 1.25 0.08 161 TR_LOTS_OF_MONEY3 1679 0.54 1.24 0.30 162 TM2_M_OBFU_COMMENT 1677 0.46 1.24 0.19 163 HTML_IMAGE_ONLY_20 1668 0.55 1.24 0.32 164 RCVD_IN_IADB_SENDERID 1658 2.02 1.23 2.29 165 TVD_RCVD_IP 1652 0.81 1.22 0.68 166 TR_Symld_Words 1646 1.25 1.22 1.26 167 XM_B_COPY_HTML 1641 0.67 1.22 0.49 168 HTML_FONT_TINY_NORDNS 1632 0.37 1.21 0.08 169 RCVD_IN_PBL 1632 0.78 1.21 0.64 170 TR_XM_FormFill2 1627 0.60 1.21 0.39 171 TR_XM_PHPForged 1625 0.59 1.20 0.39 172 TR_Mismatch_TLD_02 1612 0.34 1.19 0.05 173 RCVD_IN_MSPIKE_L5 1608 0.31 1.19 0.01 174 HTTPS_HTTP_MISMATCH 1606 0.72 1.19 0.56 175 XMBdyGiftCard01 1598 0.75 1.18 0.60 176 RCVD_IN_XBL 1594 0.31 1.18 0.01 177 XMPhish11 1588 0.36 1.18 0.08 178 XM_DIRTYINTL 1586 0.36 1.18 0.08 179 LongTLD 1582 0.60 1.17 0.41 180 TR_XM_PHPDW 1581 0.59 1.17 0.39 181 RCVD_IN_SBL_CSS 1568 0.32 1.16 0.03 182 XM_H_PHPOS 1558 0.58 1.15 0.38 183 TR_XM_MaxSPIKE 1545 0.32 1.15 0.04 184 RCVD_IN_PSBL 1522 0.57 1.13 0.37 185 TR_LOTS_OF_MONEY2 1518 0.50 1.13 0.29 186 T_MONEY_PERCENT 1518 0.50 1.13 0.29 187 RCVD_IN_MSPIKE_L4 1467 0.40 1.09 0.17 188 HTML_TAG_BALANCE_BODY 1466 0.68 1.09 0.54 189 FILL_THIS_FORM 1455 0.49 1.08 0.29 190 TR_XM_DK_SendGrid 1438 0.91 1.07 0.86 191 THIS_AD 1430 0.43 1.06 0.21 192 XM_GoogleGroups 1418 1.18 1.05 1.22 193 URIBL_BLACK 1375 0.27 1.02 0.01 194 XMClaimOffer 1371 0.35 1.02 0.13 195 RELAYCOUNTRY_TH 1368 0.26 1.01 0.00 196 XM_PDF 1339 3.07 0.99 3.78 197 DKIM_ADSP_CUSTOM_MED 1336 0.73 0.99 0.65 198 T_HTML_ATTACH 1336 0.28 0.99 0.04 199 TM2_M_A_HREF_HREF 1330 0.42 0.99 0.23 200 NO_DNS_FOR_FROM 1310 0.41 0.97 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 393650 99.22 98.32 99.52 2 HTML_MESSAGE 336451 87.58 94.97 85.06 3 RELAYCOUNTRY_US 320116 80.86 80.65 80.93 4 BAYES_50 251869 58.03 41.49 63.68 5 DCC_CHECK_NEGATIVE 246039 52.15 22.68 62.20 6 DKIM_SIGNED 241064 68.16 89.33 60.94 7 XM_DK_Pass 237913 66.40 84.72 60.15 8 DKIM_VALID 234598 65.58 83.94 59.31 9 XM_B_Unicode 231582 65.15 84.50 58.55 10 DKIM_VALID_AU 190757 52.81 66.26 48.23 11 XMListUnsubscribeExists 155708 46.40 67.02 39.37 12 T_TM2_M_HEADER_IN_MSG 153141 34.67 22.81 38.72 13 XM_B_SpammyWords 150292 46.16 70.08 38.00 14 DCC_CHECK 149302 47.44 75.85 37.75 15 XM_B_Unicode3 129391 37.00 49.58 32.71 16 DKIM_VALID_EF 94863 25.98 31.82 23.98 17 ANY_BOUNCE_MESSAGE 94455 18.18 1.49 23.88 18 BOUNCE_MESSAGE 94452 18.18 1.49 23.88 19 LOC_TINY_FONT_1 91630 29.29 47.26 23.17 20 HTML_FONT_LOW_CONTRAST 89852 25.97 35.53 22.72 21 FVGT_m_MULTI_ODD 82749 24.07 33.31 20.92 22 XMSubLong 71941 19.93 25.05 18.19 23 T_KAM_HTML_FONT_INVALID 69871 20.72 29.66 17.66 24 XM_B_SpammyWords2 67559 23.42 42.00 17.08 25 ALL_TRUSTED 65203 12.78 1.93 16.48 26 TM2_M_VERY_LONG_WORD 64469 13.16 3.98 16.30 27 MAY_BE_FORGED 60208 11.38 0.11 15.22 28 MIME_HTML_ONLY 58880 18.88 30.59 14.89 29 RCVD_IN_MSPIKE_WL 57080 13.11 9.22 14.43 30 RCVD_IN_MSPIKE_H2 53411 15.30 20.55 13.50 31 LotsOfNums_01 48808 11.00 7.07 12.34 32 FSL_BULK_SIG 45846 11.58 11.54 11.59 33 XM_Multi_Part_URI 45123 14.08 21.90 11.41 34 USER_IN_DEF_DKIM_WL 42944 8.63 2.09 10.86 35 TR_XM_DK_Unsub 42923 14.00 23.25 10.85 36 UNPARSEABLE_RELAY 37350 11.45 17.34 9.44 37 KHOP_HELO_FCRDNS 34999 7.04 1.72 8.85 38 BAYES_00 33023 6.39 0.64 8.35 39 XM_B_PhoneNumber 32295 7.79 6.67 8.16 40 XM_Evil_Numbers_Gen 31592 8.63 10.51 7.99 41 BAYES_20 29354 5.88 1.36 7.42 42 XM_B_Unsub 28481 10.44 19.92 7.20 43 RCVD_IN_MSPIKE_H3 27091 6.27 4.58 6.85 44 TooManyTo_001 26687 6.23 4.71 6.75 45 SCC_BODY_URI_ONLY 24960 5.15 1.77 6.31 46 BAYES_60 22607 6.32 8.09 5.72 47 XM_DKIMWhitelistDomains 22124 4.19 0.09 5.59 48 TR_XM_BayesUnsub 22071 9.02 19.11 5.58 49 TR_XM_DK_Bayes 21588 4.18 0.45 5.46 50 TR_XM_DK_Bayes1 21249 4.12 0.44 5.37 51 BAYES_40 20911 4.38 1.71 5.29 52 XM_H_GMP 19147 4.82 4.78 4.84 53 TR_MAX_INTL_RELAY 18974 7.26 14.46 4.80 54 XM_B_Phish_Phrases 18968 5.97 9.42 4.80 55 LOTS_OF_MONEY 18939 6.75 12.50 4.79 56 T_TooManySym_01 18539 4.19 2.73 4.69 57 XM_H_Long_From01 18532 5.16 6.54 4.69 58 TR_XM_DK_Bayes2 18139 3.51 0.34 4.59 59 RCVD_IN_MSPIKE_H5 18015 3.89 1.93 4.55 60 MPART_ALT_DIFF 17887 4.98 6.33 4.52 61 XM_B_SpammyWords3 17620 7.40 16.05 4.45 62 MIME_QP_LONG_LINE 17546 4.34 4.06 4.44 63 XMStrtUSub 16304 4.38 5.15 4.12 64 XM_DK_Undo_02 15596 13.24 40.49 3.94 65 XM_PDF 14943 3.07 0.99 3.78 66 HTML_IMAGE_RATIO_02 14060 4.34 6.64 3.55 67 TR_XM_SpammyWords4 13204 5.38 11.37 3.34 68 XM_UncommonTLD01 13050 4.09 6.43 3.30 69 RCVD_IN_VALIDITY_SAFE 12982 2.95 1.97 3.28 70 HTML_IMAGE_RATIO_04 12870 3.78 5.33 3.25 71 T_REMOTE_IMAGE 12300 2.75 1.70 3.11 72 RCVD_IN_MSPIKE_H4 11974 2.95 2.71 3.03 73 RELAYCOUNTRY_META 11948 6.96 18.51 3.02 74 RCVD_IN_IADB_LISTED 11767 2.61 1.52 2.97 75 BAYES_80 11619 4.48 8.99 2.94 76 BAYES_99 11425 9.83 30.18 2.89 77 XMNumbers 11131 3.15 4.14 2.81 78 XMSubMetaSx_00 10771 3.64 6.34 2.72 79 RCVD_IN_VALIDITY_CERTIFIED 10403 2.34 1.51 2.63 80 MAILING_LIST_MULTI 10386 2.48 2.07 2.63 81 MIME_HTML_MOSTLY 10321 2.81 3.41 2.61 82 RCVD_IN_IADB_SPF 10216 2.27 1.35 2.58 83 HTML_IMAGE_RATIO_06 9883 2.89 4.03 2.50 84 T_TooManySym_02 9409 1.98 0.82 2.38 85 BOTNET_IPINHOSTNAME 9347 5.17 13.38 2.36 86 RCVD_IN_IADB_SENDERID 9071 2.02 1.23 2.29 87 TooManyTo_002 8972 1.88 0.75 2.27 88 RCVD_IN_IADB_DK 8776 1.97 1.25 2.22 89 BAYES_999 8743 7.50 23.01 2.21 90 XM_Body_Dirty_Words 8233 3.40 7.25 2.08 91 RCVD_IN_IADB_VOUCHED 7856 1.68 0.78 1.99 92 HTML_MIME_NO_HTML_TAG 7823 1.95 1.88 1.98 93 XM_B_SpammyTLD 7592 2.35 3.60 1.92 94 MIME_HTML_ONLY_MULTI 7496 2.27 3.37 1.90 95 BAYES_05 7385 1.62 0.90 1.87 96 BAYES_95 7352 2.70 5.18 1.86 97 INVALID_MSGID 7264 1.42 0.21 1.84 98 T_XMDrugObfuBody_14 6937 2.28 3.81 1.75 99 XM_CamelCaseFrm001 6663 2.09 3.27 1.68 100 T_TVD_MIME_NO_HEADERS 6649 1.28 0.11 1.68 101 HTML_IMAGE_RATIO_08 6556 2.02 3.08 1.66 102 DKIM_INVALID 6466 2.59 5.38 1.63 103 TO_MALFORMED 6415 1.23 0.06 1.62 104 TR_XM_DKIM_Undo 6305 8.56 28.98 1.59 105 TR_XM_PhishingBody 6304 2.71 5.97 1.59 106 TR_XM_SpammyRelay 6133 4.64 13.69 1.55 107 XM_B_URI_Unicode 6081 1.80 2.59 1.54 108 XM_DK_Undo_01 5955 1.52 1.57 1.51 109 XM_B_Investor 5815 2.48 5.45 1.47 110 RCVD_IN_IADB_OPTIN 5500 1.17 0.53 1.39 111 TM2_M_URI_OPT_OUT 5495 1.96 3.63 1.39 112 TR_XM_UnparsRelay 5471 3.29 8.87 1.38 113 TooManyTo_003 5388 1.17 0.61 1.36 114 FROM_EXCESS_BASE64 5352 1.53 2.04 1.35 115 UNTRUSTED_Relay 5255 2.74 6.89 1.33 116 XM_SendGrid 5169 1.35 1.48 1.31 117 TR_Symld_Words 4994 1.25 1.22 1.26 118 TR_DCC_Bayes_99 4925 6.41 21.55 1.25 119 XM_GoogleGroups 4845 1.18 1.05 1.22 120 XMDiploma_00 4820 1.75 3.29 1.22 121 HELO_NODOT 4606 0.90 0.12 1.16 122 HELO_NO_DOMAIN 4598 0.89 0.11 1.16 123 XM_B_Unsub2 4502 1.59 2.93 1.14 124 XM_SPF_SoftFail 4494 1.75 3.56 1.14 125 SUBJ_ALL_CAPS 4406 1.23 1.57 1.11 126 TR_XM_SpammyWords5 4332 1.76 3.72 1.10 127 XMGappySubj_01 4276 0.85 0.16 1.08 128 IN_HORDE_ADDRESS_BOOK 4270 0.83 0.11 1.08 129 T_XMDrugObfuBody_08 4192 1.45 2.59 1.06 130 URI_NOVOWEL 3995 1.20 1.77 1.01 131 URI_HEX 3993 1.22 1.84 1.01 132 TooManyTo_004 3920 0.87 0.51 0.99 133 XMStockSpam_06 3874 1.20 1.85 0.98 134 HTML_IMAGE_ONLY_32 3823 0.76 0.17 0.97 135 XMSexyCombo_05 3739 1.91 4.74 0.95 136 BOTNET 3734 3.44 10.75 0.94 137 T_TooManySym_03 3682 0.80 0.42 0.93 138 XMCapTrack 3566 0.79 0.47 0.90 139 TR_XM_DK_SendGrid 3400 0.91 1.07 0.86 140 XM_UB50 3381 1.58 3.72 0.85 141 XM_H_PHPMailer 3346 0.77 0.55 0.85 142 XMLngstWrd_00 3260 0.73 0.46 0.82 143 RCVD_IN_MSPIKE_BL 3203 1.88 5.02 0.81 144 TR_XM_MSPIKECOMBO 3203 1.88 5.02 0.81 145 TooManyTo_005 3189 0.72 0.46 0.81 146 XM_ShortIntro_01 3167 0.70 0.41 0.80 147 XM_OfRef6 3056 1.83 4.91 0.77 148 XM_B_SpammyWords4 2987 1.27 2.77 0.76 149 TVD_SPACE_RATIO 2941 0.59 0.15 0.74 150 MIME_CHARSET_FARAWAY 2821 0.63 0.39 0.71 151 XMBrknScrpt_02 2800 0.92 1.56 0.71 152 SpammyFromTLD_01 2751 0.99 1.85 0.70 153 XMSolicitRefs_0 2735 0.70 0.74 0.69 154 T_FILL_THIS_FORM_SHORT 2731 1.13 2.42 0.69 155 T_XMDrugObfuBody_00 2730 1.01 1.95 0.69 156 TVD_RCVD_IP 2670 0.81 1.22 0.68 157 XMGenDplmaNmb 2653 0.94 1.73 0.67 158 FROM_GOV_DKIM_AU 2641 0.57 0.28 0.67 159 RELAYCOUNTRY_CA 2602 2.16 6.56 0.66 160 T_Symld_Words_02 2576 0.73 0.95 0.65 161 TR_MetaPhish_Combo_01 2555 0.66 0.72 0.65 162 DKIM_ADSP_CUSTOM_MED 2554 0.73 0.99 0.65 163 RCVD_IN_PBL 2529 0.78 1.21 0.64 164 RCVD_IN_MSPIKE_L3 2509 1.17 2.74 0.63 165 XM_H_Long_From02 2489 1.04 2.26 0.63 166 CHARSET_FARAWAY_HEADER 2457 0.53 0.26 0.62 167 XMBdyGiftCard01 2382 0.75 1.18 0.60 168 TR_XM_Base64_M1 2321 0.65 0.82 0.59 169 XMPhish14 2301 0.76 1.28 0.58 170 HTTPS_HTTP_MISMATCH 2209 0.72 1.19 0.56 171 XMNoVowels 2155 0.53 0.49 0.54 172 XMGappySubj_02 2153 0.42 0.04 0.54 173 HTML_TAG_BALANCE_BODY 2140 0.68 1.09 0.54 174 T_OBFU_PDF_ATTACH 2097 0.44 0.19 0.53 175 RELAYCOUNTRY_GB 2082 0.63 0.95 0.53 176 TR_XM_SpammyWords2 1975 3.28 11.44 0.50 177 XM_B_COPY_HTML 1930 0.67 1.22 0.49 178 XMMoneyMeta_00 1902 0.52 0.62 0.48 179 RELAYCOUNTRY_AU 1882 1.12 3.02 0.48 180 SpammyFromTLD_02 1842 0.98 2.50 0.47 181 RCVD_IN_BL_SPAMCOP_NET 1788 2.91 10.11 0.45 182 XM_B_FormFill 1753 0.34 0.02 0.44 183 T_XMHurry_00 1744 0.78 1.79 0.44 184 TRACKER_ID 1711 0.38 0.24 0.43 185 XMSubMetaI_00 1706 0.51 0.74 0.43 186 PLING_QUERY 1642 0.45 0.54 0.42 187 MSGID_FROM_MTA_HEADER 1621 0.37 0.27 0.41 188 XMBSHREFv2 1621 0.38 0.28 0.41 189 LongTLD 1604 0.60 1.17 0.41 190 XMSlimDrugH 1598 0.47 0.67 0.40 191 NML_ADSP_CUSTOM_MED 1578 0.47 0.69 0.40 192 FORGED_GMAIL_RCVD 1567 0.47 0.69 0.40 193 XMLngstWrd_01 1539 0.38 0.36 0.39 194 MPART_ALT_DIFF_COUNT 1538 0.68 1.54 0.39 195 TR_XM_FormFill2 1533 0.60 1.21 0.39 196 TR_XM_PHPForged 1526 0.59 1.20 0.39 197 TR_XM_PHPDW 1525 0.59 1.17 0.39 198 XM_ProductURIs 1507 0.62 1.31 0.38 199 XM_H_PHPOS 1500 0.58 1.15 0.38 200 XM_B_DNDMA 1498 0.73 1.77 0.38 ----------------------------------------------------------------------