Email: 458985 Autolearn: 0 AvgScore: 4.83 AvgScanTime: 1.21 sec Spam: 139591 Autolearn: 0 AvgScore: 13.57 AvgScanTime: 1.40 sec Ham: 319394 Autolearn: 0 AvgScore: 1.01 AvgScanTime: 1.12 sec Time Spent Running SA: 153.86 hours Time Spent Processing Spam: 54.32 hours Time Spent Processing Ham: 99.54 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 139361 99.56 99.84 99.45 2 HTML_MESSAGE 134711 89.69 96.50 86.72 3 DKIM_SIGNED 126273 79.27 90.46 74.38 4 XM_DK_Pass 118854 76.74 85.14 73.07 5 DKIM_VALID 117693 75.73 84.31 71.98 6 XM_B_Unicode 117178 73.32 83.94 68.68 7 RELAYCOUNTRY_US 115886 80.34 83.02 79.17 8 DCC_CHECK 103084 46.08 73.85 33.94 9 XM_B_SpammyWords 96569 53.33 69.18 46.40 10 XMListUnsubscribeExists 92288 51.91 66.11 45.71 11 DKIM_VALID_AU 92139 61.66 66.01 59.77 12 XM_B_Unicode3 68507 42.59 49.08 39.76 13 LOC_TINY_FONT_1 67478 34.77 48.34 28.83 14 XM_DK_Undo_02 58844 16.29 42.15 4.99 15 BAYES_50 55151 53.92 39.51 60.21 16 XM_B_SpammyWords2 55002 26.91 39.40 21.45 17 HTML_FONT_LOW_CONTRAST 51868 30.23 37.16 27.20 18 FVGT_m_MULTI_ODD 49710 27.76 35.61 24.33 19 BAYES_99 44258 12.02 31.71 3.41 20 DKIM_VALID_EF 43679 30.95 31.29 30.80 21 T_KAM_HTML_FONT_INVALID 41161 22.49 29.49 19.43 22 TR_XM_DKIM_Undo 40353 10.03 28.91 1.78 23 MIME_HTML_ONLY 38495 22.60 27.58 20.42 24 DCC_CHECK_NEGATIVE 36450 53.86 26.11 65.98 25 XMSubLong 34395 23.63 24.64 23.19 26 BAYES_999 33214 8.91 23.79 2.41 27 XM_Multi_Part_URI 32643 16.42 23.38 13.37 28 TR_XM_DK_Unsub 31232 15.94 22.37 13.13 29 TR_DCC_Bayes_99 31214 7.72 22.36 1.32 30 T_TM2_M_HEADER_IN_MSG 31120 28.75 22.29 31.58 31 XM_B_Unsub 30629 13.05 21.94 9.17 32 TR_XM_BayesUnsub 29482 11.44 21.12 7.21 33 RCVD_IN_MSPIKE_H2 29157 17.94 20.89 16.66 34 UNPARSEABLE_RELAY 26821 14.04 19.21 11.77 35 RELAYCOUNTRY_META 23105 7.46 16.55 3.49 36 TR_MAX_INTL_RELAY 22686 9.45 16.25 6.47 37 XM_B_SpammyWords3 20034 7.63 14.35 4.70 38 LOTS_OF_MONEY 18230 8.60 13.06 6.66 39 RCVD_IN_BL_SPAMCOP_NET 17887 4.28 12.81 0.56 40 TR_XM_SpammyRelay 17532 5.07 12.56 1.79 41 RCVD_IN_MSPIKE_WL 17304 18.22 12.40 20.77 42 BOTNET 17109 4.71 12.26 1.42 43 TR_XM_SpammyWords4 15671 6.71 11.23 4.73 44 BOTNET_IPINHOSTNAME 15663 5.62 11.22 3.17 45 FSL_BULK_SIG 15312 6.14 10.97 4.03 46 TR_XM_UnparsRelay 15024 4.40 10.76 1.62 47 TR_XM_SpammyWords2 14609 3.52 10.47 0.49 48 XM_Evil_Numbers_Gen 13908 10.18 9.96 10.28 49 BAYES_80 13583 5.64 9.73 3.85 50 BAYES_60 12570 7.56 9.00 6.93 51 XM_B_Phish_Phrases 12039 6.72 8.62 5.89 52 RCVD_IN_MSPIKE_BL 11971 3.36 8.58 1.07 53 TR_XM_MSPIKECOMBO 11926 3.34 8.54 1.07 54 MPART_ALT_DIFF 11044 5.46 7.91 4.39 55 UNTRUSTED_Relay 9955 3.25 7.13 1.56 56 XM_H_GMP 9351 6.44 6.70 6.32 57 HTML_IMAGE_RATIO_02 9242 5.21 6.62 4.59 58 TR_XM_SpammyWords3 8775 2.27 6.29 0.51 59 TR_XM_SPAMCOP 8752 2.03 6.27 0.18 60 XM_B_PhoneNumber 8616 9.18 6.17 10.49 61 DKIM_INVALID 8580 3.54 6.15 2.41 62 RELAYCOUNTRY_CA 8429 2.29 6.04 0.65 63 XMSubMetaSx_00 8346 4.30 5.98 3.56 64 BAYES_95 8266 3.62 5.92 2.61 65 XM_H_Long_From01 8258 5.68 5.92 5.58 66 LotsOfNums_01 8079 7.36 5.79 8.05 67 RCVD_IN_MSPIKE_H3 7676 8.05 5.50 9.16 68 XM_Body_Dirty_Words 7435 3.33 5.33 2.46 69 XM_B_SpammyTLD 7079 3.46 5.07 2.76 70 TR_XM_SpammyWords5 7025 2.35 5.03 1.18 71 XMNumbers 6932 3.71 4.97 3.16 72 XM_UncommonTLD01 6883 4.26 4.93 3.97 73 RCVD_IN_MSPIKE_L3 6659 2.09 4.77 0.92 74 TR_XM_PhishingBody 6603 2.60 4.73 1.67 75 XM_B_Investor 6514 2.46 4.67 1.50 76 MIME_HTML_MOSTLY 6463 3.63 4.63 3.19 77 T_XMDrugObfuBody_14 6384 2.36 4.57 1.40 78 XMStrtUSub 6351 5.14 4.55 5.39 79 TooManyTo_001 6148 7.11 4.40 8.30 80 T_XMDrugObfuBody_08 5413 2.23 3.88 1.51 81 XMSexyCombo_05 5375 1.76 3.85 0.85 82 HTML_IMAGE_RATIO_04 5360 3.81 3.84 3.80 83 XM_OfRef6 5246 1.85 3.76 1.02 84 RCVD_IN_MSPIKE_H5 5185 6.17 3.71 7.24 85 XM_B_Unsub2 5110 2.36 3.66 1.79 86 TM2_M_VERY_LONG_WORD 5012 2.20 3.59 1.59 87 XMDiploma_00 4991 2.29 3.58 1.73 88 BOTNET_NORDNS 4826 1.05 3.46 0.00 89 XM_UB50 4812 1.77 3.45 1.04 90 MIME_QP_LONG_LINE 4773 4.44 3.42 4.88 91 XM_CamelCaseFrm001 4532 2.63 3.25 2.37 92 HTML_IMAGE_RATIO_08 4475 2.86 3.21 2.70 93 RCVD_IN_MSPIKE_H4 4443 4.01 3.18 4.37 94 XM_SPF_SoftFail 4264 1.80 3.05 1.25 95 DKIM_ADSP_NXDOMAIN 4246 1.16 3.04 0.33 96 HTML_IMAGE_RATIO_06 4240 2.84 3.04 2.75 97 TR_XM_MSPIKECOMBO2 4152 0.98 2.97 0.10 98 XM_URI_RBL 4033 1.04 2.89 0.23 99 T_FILL_THIS_FORM_SHORT 4031 1.78 2.89 1.30 100 RELAYCOUNTRY_AU 3933 1.19 2.82 0.48 101 MIME_HTML_ONLY_MULTI 3924 2.40 2.81 2.22 102 TR_XM_NoHeaderRelay 3918 0.96 2.81 0.15 103 TM2_M_URI_OPT_OUT 3574 1.96 2.56 1.70 104 RCVD_IN_MSPIKE_L4 3565 0.86 2.55 0.13 105 T_TooManySym_01 3534 5.28 2.53 6.48 106 XM_B_URI_Unicode 3450 2.00 2.47 1.80 107 TR_XM_INV_DKIM 3326 0.73 2.38 0.01 108 RCVD_IN_VALIDITY_RPBL 3256 0.73 2.33 0.04 109 SUBJ_ALL_CAPS 3245 1.74 2.32 1.48 110 T_XMHurry_00 3242 1.10 2.32 0.56 111 FROM_EXCESS_BASE64 3181 1.81 2.28 1.61 112 XMBody_17 3129 0.95 2.24 0.38 113 KHOP_HELO_FCRDNS 2912 1.75 2.09 1.60 114 USER_IN_DEF_DKIM_WL 2911 9.42 2.09 12.63 115 T_REMOTE_IMAGE 2878 3.17 2.06 3.66 116 XM_B_SpammyWords4 2870 1.16 2.06 0.77 117 XM_H_Long_From02 2851 1.14 2.04 0.74 118 MAILING_LIST_MULTI 2812 2.82 2.01 3.17 119 XMGenDplmaNmb 2801 1.27 2.01 0.95 120 TR_XM_MaxSPIKE 2671 0.62 1.91 0.06 121 XM_SendGrid 2584 1.59 1.85 1.48 122 XMBrknScrpt_02 2525 1.42 1.81 1.25 123 TR_LOTS_OF_MONEY3 2492 0.77 1.79 0.32 124 DIET_1 2478 0.82 1.78 0.40 125 URI_HEX 2473 1.31 1.77 1.11 126 XMStockSpam_06 2462 1.34 1.76 1.15 127 RELAYCOUNTRY_FR 2426 0.78 1.74 0.36 128 XMSubMetaI_00 2372 0.81 1.70 0.43 129 SpammyFromTLD_02 2308 0.69 1.65 0.27 130 HTML_MIME_NO_HTML_TAG 2276 3.34 1.63 4.09 131 RCVD_IN_IADB_LISTED 2247 2.58 1.61 3.01 132 T_XMDrugObfuBody_00 2237 1.15 1.60 0.96 133 BAYES_40 2236 5.06 1.60 6.57 134 XMPhish30 2224 0.92 1.59 0.63 135 DKIM_ADSP_CUSTOM_MED 2210 1.17 1.58 0.99 136 HK_RANDOM_REPLYTO 2209 0.55 1.58 0.10 137 ALL_TRUSTED 2163 12.91 1.55 17.88 138 XM_H_DKIM_GOOG 2133 0.47 1.53 0.01 139 XM_DK_Undo_01 2090 1.74 1.50 1.84 140 ANY_BOUNCE_MESSAGE 2074 3.86 1.49 4.90 141 BOUNCE_MESSAGE 2074 3.86 1.49 4.90 142 XM_B_Phish66 2060 0.68 1.48 0.33 143 HTTPS_HTTP_MISMATCH 2060 1.03 1.48 0.84 144 SpammyFromTLD_01 2013 0.95 1.44 0.73 145 XM_B_SEO 1984 0.54 1.42 0.16 146 RCVD_IN_VALIDITY_SAFE 1983 2.79 1.42 3.38 147 TR_Symld_Words 1941 1.65 1.39 1.76 148 URI_NOVOWEL 1908 1.35 1.37 1.34 149 FORGED_GMAIL_RCVD 1860 0.88 1.33 0.69 150 NML_ADSP_CUSTOM_MED 1853 0.79 1.33 0.56 151 RCVD_IN_IADB_SPF 1831 2.26 1.31 2.67 152 RCVD_IN_PSBL 1827 0.41 1.31 0.02 153 T_Symld_Words_02 1812 0.91 1.30 0.74 154 XM_ProductURIs 1772 0.69 1.27 0.43 155 URI_TRY_3LD 1768 0.78 1.27 0.57 156 RCVD_IN_MSPIKE_L5 1702 0.39 1.22 0.03 157 PLING_QUERY 1698 0.68 1.22 0.44 158 XMBody_78 1686 0.56 1.21 0.28 159 TR_XM_SEO4 1676 0.42 1.20 0.09 160 XM_UB99 1667 0.36 1.19 0.00 161 RCVD_IN_IADB_DK 1649 1.96 1.18 2.29 162 TR_LOTS_OF_MONEY2 1643 0.50 1.18 0.20 163 T_MONEY_PERCENT 1643 0.50 1.18 0.20 164 MPART_ALT_DIFF_COUNT 1627 0.74 1.17 0.56 165 RCVD_IN_IADB_SENDERID 1616 2.01 1.16 2.39 166 XM_B_COPY_HTML 1603 0.73 1.15 0.54 167 MultiRelay_CC 1601 0.46 1.15 0.16 168 TR_XM_GMP_BULK_SIG 1595 0.43 1.14 0.12 169 HTML_TAG_BALANCE_BODY 1594 0.71 1.14 0.52 170 BAYES_20 1568 3.10 1.12 3.97 171 XMBdyGiftCard01 1530 0.76 1.10 0.62 172 THIS_AD 1521 0.60 1.09 0.39 173 XM_B_COVIDMETA 1515 0.39 1.09 0.09 174 XM_UB60 1505 0.39 1.08 0.09 175 TM2_M_OBFU_COMMENT 1497 0.55 1.07 0.32 176 RCVD_IN_IADB_VOUCHED 1496 1.67 1.07 1.93 177 RDNS_DYNAMIC 1474 0.43 1.06 0.16 178 XM_HighProb1 1471 0.32 1.05 0.00 179 TR_XM_RelayPhish 1471 0.37 1.05 0.07 180 TR_XM_FormFill 1469 0.32 1.05 0.00 181 TR_XM_DK_SendGrid 1430 1.03 1.02 1.04 182 TR_XM_Base64_M1 1423 0.86 1.02 0.79 183 XM_GoogleGroups 1417 1.31 1.02 1.44 184 HELO_NODOT 1385 1.52 0.99 1.75 185 XMPhish14 1365 0.62 0.98 0.46 186 TR_XM_PHPForged 1349 0.52 0.97 0.33 187 HELO_NO_DOMAIN 1343 1.51 0.96 1.75 188 XM_B_DNDMA 1323 0.79 0.95 0.71 189 XM_PDF 1316 3.62 0.94 4.79 190 TR_XM_PHPDW 1316 0.52 0.94 0.33 191 RCVD_IN_VALIDITY_CERTIFIED 1311 2.27 0.94 2.85 192 TR_XM_FormFill2 1308 0.51 0.94 0.32 193 TR_Caps_n_Bayes_99 1299 0.30 0.93 0.02 194 XM_H_PHPOS 1280 0.50 0.92 0.31 195 HTML_IMAGE_ONLY_28 1258 0.60 0.90 0.47 196 XM_DIRTYINTL 1251 0.32 0.90 0.07 197 XMHTML_After_End 1249 0.58 0.89 0.45 198 TVD_RCVD_IP 1231 0.92 0.88 0.93 199 XMReplyNow 1215 0.41 0.87 0.20 200 TM2_M_A_HREF_HREF 1208 0.49 0.87 0.32 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 317623 99.56 99.84 99.45 2 HTML_MESSAGE 276970 89.69 96.50 86.72 3 RELAYCOUNTRY_US 252854 80.34 83.02 79.17 4 DKIM_SIGNED 237579 79.27 90.46 74.38 5 XM_DK_Pass 233394 76.74 85.14 73.07 6 DKIM_VALID 229897 75.73 84.31 71.98 7 XM_B_Unicode 219345 73.32 83.94 68.68 8 DCC_CHECK_NEGATIVE 210750 53.86 26.11 65.98 9 BAYES_50 192315 53.92 39.51 60.21 10 DKIM_VALID_AU 190887 61.66 66.01 59.77 11 XM_B_SpammyWords 148206 53.33 69.18 46.40 12 XMListUnsubscribeExists 145994 51.91 66.11 45.71 13 XM_B_Unicode3 126988 42.59 49.08 39.76 14 DCC_CHECK 108415 46.08 73.85 33.94 15 T_TM2_M_HEADER_IN_MSG 100852 28.75 22.29 31.58 16 DKIM_VALID_EF 98368 30.95 31.29 30.80 17 LOC_TINY_FONT_1 92097 34.77 48.34 28.83 18 HTML_FONT_LOW_CONTRAST 86882 30.23 37.16 27.20 19 FVGT_m_MULTI_ODD 77718 27.76 35.61 24.33 20 XMSubLong 74056 23.63 24.64 23.19 21 XM_B_SpammyWords2 68501 26.91 39.40 21.45 22 RCVD_IN_MSPIKE_WL 66341 18.22 12.40 20.77 23 MIME_HTML_ONLY 65231 22.60 27.58 20.42 24 T_KAM_HTML_FONT_INVALID 62051 22.49 29.49 19.43 25 ALL_TRUSTED 57103 12.91 1.55 17.88 26 RCVD_IN_MSPIKE_H2 53197 17.94 20.89 16.66 27 XM_Multi_Part_URI 42700 16.42 23.38 13.37 28 TR_XM_DK_Unsub 41922 15.94 22.37 13.13 29 USER_IN_DEF_DKIM_WL 40325 9.42 2.09 12.63 30 UNPARSEABLE_RELAY 37606 14.04 19.21 11.77 31 XM_B_PhoneNumber 33511 9.18 6.17 10.49 32 XM_Evil_Numbers_Gen 32836 10.18 9.96 10.28 33 BAYES_00 32189 7.27 0.85 10.08 34 XM_B_Unsub 29291 13.05 21.94 9.17 35 RCVD_IN_MSPIKE_H3 29272 8.05 5.50 9.16 36 TooManyTo_001 26501 7.11 4.40 8.30 37 LotsOfNums_01 25709 7.36 5.79 8.05 38 RCVD_IN_MSPIKE_H5 23121 6.17 3.71 7.24 39 TR_XM_BayesUnsub 23017 11.44 21.12 7.21 40 TR_XM_DK_Bayes 22868 5.18 0.64 7.16 41 TR_XM_DK_Bayes1 22500 5.10 0.64 7.04 42 BAYES_60 22140 7.56 9.00 6.93 43 LOTS_OF_MONEY 21260 8.60 13.06 6.66 44 BAYES_40 20976 5.06 1.60 6.57 45 T_TooManySym_01 20698 5.28 2.53 6.48 46 TR_MAX_INTL_RELAY 20668 9.45 16.25 6.47 47 XM_DKIMWhitelistDomains 20512 4.48 0.05 6.42 48 XM_H_GMP 20200 6.44 6.70 6.32 49 TR_XM_DK_Bayes2 19658 4.45 0.56 6.15 50 XM_B_Phish_Phrases 18804 6.72 8.62 5.89 51 XM_H_Long_From01 17810 5.68 5.92 5.58 52 XMStrtUSub 17218 5.14 4.55 5.39 53 XM_DK_Undo_02 15942 16.29 42.15 4.99 54 ANY_BOUNCE_MESSAGE 15652 3.86 1.49 4.90 55 BOUNCE_MESSAGE 15650 3.86 1.49 4.90 56 MIME_QP_LONG_LINE 15587 4.44 3.42 4.88 57 XM_PDF 15313 3.62 0.94 4.79 58 TR_XM_SpammyWords4 15115 6.71 11.23 4.73 59 XM_B_SpammyWords3 15009 7.63 14.35 4.70 60 HTML_IMAGE_RATIO_02 14674 5.21 6.62 4.59 61 MPART_ALT_DIFF 14023 5.46 7.91 4.39 62 RCVD_IN_MSPIKE_H4 13948 4.01 3.18 4.37 63 HTML_MIME_NO_HTML_TAG 13064 3.34 1.63 4.09 64 FSL_BULK_SIG 12857 6.14 10.97 4.03 65 XM_UncommonTLD01 12692 4.26 4.93 3.97 66 BAYES_20 12670 3.10 1.12 3.97 67 BAYES_80 12309 5.64 9.73 3.85 68 HTML_IMAGE_RATIO_04 12142 3.81 3.84 3.80 69 T_REMOTE_IMAGE 11683 3.17 2.06 3.66 70 XMSubMetaSx_00 11374 4.30 5.98 3.56 71 RELAYCOUNTRY_META 11149 7.46 16.55 3.49 72 BAYES_99 10892 12.02 31.71 3.41 73 RCVD_IN_VALIDITY_SAFE 10809 2.79 1.42 3.38 74 T_TooManySym_02 10521 2.52 0.73 3.29 75 MIME_HTML_MOSTLY 10189 3.63 4.63 3.19 76 MAILING_LIST_MULTI 10136 2.82 2.01 3.17 77 BOTNET_IPINHOSTNAME 10127 5.62 11.22 3.17 78 XMNumbers 10096 3.71 4.97 3.16 79 RCVD_IN_IADB_LISTED 9605 2.58 1.61 3.01 80 RCVD_IN_VALIDITY_CERTIFIED 9117 2.27 0.94 2.85 81 XM_B_SpammyTLD 8806 3.46 5.07 2.76 82 HTML_IMAGE_RATIO_06 8783 2.84 3.04 2.75 83 HTML_IMAGE_RATIO_08 8638 2.86 3.21 2.70 84 TooManyTo_002 8630 2.08 0.67 2.70 85 RCVD_IN_IADB_SPF 8528 2.26 1.31 2.67 86 BAYES_95 8350 3.62 5.92 2.61 87 XM_Body_Dirty_Words 7842 3.33 5.33 2.46 88 BAYES_999 7696 8.91 23.79 2.41 89 DKIM_INVALID 7682 3.54 6.15 2.41 90 RCVD_IN_IADB_SENDERID 7631 2.01 1.16 2.39 91 XM_CamelCaseFrm001 7557 2.63 3.25 2.37 92 BAYES_05 7551 1.81 0.55 2.36 93 RCVD_IN_IADB_DK 7328 1.96 1.18 2.29 94 INVALID_MSGID 7099 1.60 0.19 2.22 95 MIME_HTML_ONLY_MULTI 7082 2.40 2.81 2.22 96 TO_MALFORMED 6719 1.47 0.03 2.10 97 RCVD_IN_IADB_VOUCHED 6164 1.67 1.07 1.93 98 XM_DK_Undo_01 5889 1.74 1.50 1.84 99 TooManyTo_003 5800 1.43 0.54 1.82 100 XM_B_URI_Unicode 5741 2.00 2.47 1.80 101 TR_XM_SpammyRelay 5722 5.07 12.56 1.79 102 XM_B_Unsub2 5721 2.36 3.66 1.79 103 TR_XM_DKIM_Undo 5701 10.03 28.91 1.78 104 TR_Symld_Words 5631 1.65 1.39 1.76 105 HELO_NODOT 5581 1.52 0.99 1.75 106 HELO_NO_DOMAIN 5575 1.51 0.96 1.75 107 XMDiploma_00 5511 2.29 3.58 1.73 108 TM2_M_URI_OPT_OUT 5414 1.96 2.56 1.70 109 TR_XM_PhishingBody 5335 2.60 4.73 1.67 110 TR_XM_UnparsRelay 5182 4.40 10.76 1.62 111 FROM_EXCESS_BASE64 5148 1.81 2.28 1.61 112 KHOP_HELO_FCRDNS 5116 1.75 2.09 1.60 113 TM2_M_VERY_LONG_WORD 5077 2.20 3.59 1.59 114 TR_XM_SB_Phish 4994 1.15 0.19 1.56 115 UNTRUSTED_Relay 4976 3.25 7.13 1.56 116 XMSubPhish11 4922 1.12 0.16 1.54 117 T_XMDrugObfuBody_08 4815 2.23 3.88 1.51 118 XM_B_Investor 4799 2.46 4.67 1.50 119 SUBJ_ALL_CAPS 4738 1.74 2.32 1.48 120 XM_SendGrid 4736 1.59 1.85 1.48 121 XM_GoogleGroups 4609 1.31 1.02 1.44 122 BOTNET 4520 4.71 12.26 1.42 123 RCVD_IN_IADB_OPTIN 4484 1.20 0.74 1.40 124 T_XMDrugObfuBody_14 4460 2.36 4.57 1.40 125 TooManyTo_004 4363 1.09 0.45 1.37 126 URI_NOVOWEL 4266 1.35 1.37 1.34 127 T_TooManySym_03 4226 1.01 0.28 1.32 128 TR_DCC_Bayes_99 4225 7.72 22.36 1.32 129 IN_HORDE_ADDRESS_BOOK 4188 0.93 0.05 1.31 130 T_FILL_THIS_FORM_SHORT 4140 1.78 2.89 1.30 131 TVD_SPACE_RATIO 4083 0.94 0.17 1.28 132 XM_SPF_SoftFail 4004 1.80 3.05 1.25 133 XMBrknScrpt_02 3989 1.42 1.81 1.25 134 XMCapTrack 3971 1.09 0.74 1.24 135 TR_XM_SpammyWords5 3773 2.35 5.03 1.18 136 TooManyTo_005 3735 0.94 0.40 1.17 137 XMStockSpam_06 3675 1.34 1.76 1.15 138 URI_HEX 3547 1.31 1.77 1.11 139 RCVD_IN_MSPIKE_BL 3433 3.36 8.58 1.07 140 TR_XM_MSPIKECOMBO 3415 3.34 8.54 1.07 141 XM_UB50 3314 1.77 3.45 1.04 142 T_TVD_MIME_NO_HEADERS 3313 0.74 0.05 1.04 143 TR_XM_DK_SendGrid 3306 1.03 1.02 1.04 144 XM_OfRef6 3244 1.85 3.76 1.02 145 XM_ShortIntro_01 3227 0.88 0.58 1.01 146 DKIM_ADSP_CUSTOM_MED 3166 1.17 1.58 0.99 147 XMGappySubj_01 3097 0.78 0.35 0.97 148 T_XMDrugObfuBody_00 3060 1.15 1.60 0.96 149 XMGenDplmaNmb 3042 1.27 2.01 0.95 150 TVD_RCVD_IP 2983 0.92 0.88 0.93 151 RCVD_IN_MSPIKE_L3 2924 2.09 4.77 0.92 152 XMSexyCombo_05 2715 1.76 3.85 0.85 153 HTTPS_HTTP_MISMATCH 2673 1.03 1.48 0.84 154 XMNoVowels 2638 0.79 0.72 0.83 155 TR_MetaPhish_Combo_01 2576 0.80 0.78 0.81 156 TO_NO_BRKTS_HTML_ONLY 2528 0.62 0.24 0.79 157 TR_XM_Base64_M1 2519 0.86 1.02 0.79 158 FROM_GOV_DKIM_AU 2506 0.68 0.43 0.78 159 XM_H_PHPMailer 2459 0.69 0.49 0.77 160 XM_B_SpammyWords4 2454 1.16 2.06 0.77 161 RELAYCOUNTRY_GB 2385 0.73 0.68 0.75 162 TO_IN_SUBJ 2384 0.56 0.13 0.75 163 XM_H_Long_From02 2369 1.14 2.04 0.74 164 T_Symld_Words_02 2349 0.91 1.30 0.74 165 T_OBFU_PDF_ATTACH 2344 0.59 0.25 0.73 166 SpammyFromTLD_01 2334 0.95 1.44 0.73 167 URI_OPTOUT_3LD 2326 0.55 0.14 0.73 168 XM_B_DNDMA 2281 0.79 0.95 0.71 169 FORGED_GMAIL_RCVD 2192 0.88 1.33 0.69 170 HTML_IMAGE_ONLY_20 2157 0.70 0.77 0.68 171 XMBSHREFv2 2098 0.56 0.33 0.66 172 RELAYCOUNTRY_CA 2072 2.29 6.04 0.65 173 XMPhish30 2020 0.92 1.59 0.63 174 XMGappySubj_02 2009 0.46 0.08 0.63 175 XMBdyGiftCard01 1977 0.76 1.10 0.62 176 MSGID_FROM_MTA_HEADER 1932 0.53 0.34 0.60 177 URI_TRY_3LD 1816 0.78 1.27 0.57 178 MPART_ALT_DIFF_COUNT 1787 0.74 1.17 0.56 179 T_XMHurry_00 1784 1.10 2.32 0.56 180 NML_ADSP_CUSTOM_MED 1776 0.79 1.33 0.56 181 RCVD_IN_BL_SPAMCOP_NET 1775 4.28 12.81 0.56 182 XM_B_COPY_HTML 1728 0.73 1.15 0.54 183 XMSlimDrugH 1727 0.62 0.81 0.54 184 HTML_TAG_BALANCE_BODY 1658 0.71 1.14 0.52 185 TR_XM_SpammyWords3 1639 2.27 6.29 0.51 186 SHORT_HELO_AND_INLINE_IMAGE 1605 0.41 0.19 0.50 187 XMDateMe_00 1564 0.47 0.43 0.49 188 TR_XM_SpammyWords2 1560 3.52 10.47 0.49 189 RELAYCOUNTRY_AU 1543 1.19 2.82 0.48 190 HTML_IMAGE_ONLY_28 1513 0.60 0.90 0.47 191 XMSubMetaSxObfu_03 1489 0.51 0.62 0.47 192 HTML_IMAGE_ONLY_32 1477 0.37 0.16 0.46 193 XMPhish14 1459 0.62 0.98 0.46 194 XMHTML_After_End 1423 0.58 0.89 0.45 195 LongTLD 1419 0.46 0.49 0.44 196 XMLngstWrd_00 1414 0.41 0.35 0.44 197 PLING_QUERY 1413 0.68 1.22 0.44 198 XMSolicitRefs_0 1403 0.49 0.60 0.44 199 MISSING_HEADERS 1388 0.55 0.80 0.43 200 T_TooManySym_04 1380 0.34 0.12 0.43 ----------------------------------------------------------------------