Email: 558337 Autolearn: 0 AvgScore: 4.39 AvgScanTime: 1.35 sec Spam: 184769 Autolearn: 0 AvgScore: 13.04 AvgScanTime: 1.52 sec Ham: 373568 Autolearn: 0 AvgScore: 0.11 AvgScanTime: 1.27 sec Time Spent Running SA: 209.78 hours Time Spent Processing Spam: 77.99 hours Time Spent Processing Ham: 131.79 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 179833 90.55 97.33 87.19 2 DKIM_SIGNED 168882 80.82 91.40 75.58 3 XM_DK_Pass 162618 78.78 88.01 74.21 4 XM_B_Unicode 160846 75.88 87.05 70.36 5 DKIM_VALID 160739 77.75 86.99 73.18 6 RELAYCOUNTRY_US 157834 82.89 85.42 81.63 7 DCC_CHECK 142896 51.41 77.34 38.58 8 XMListUnsubscribeExists 137491 57.92 74.41 49.76 9 XM_B_SpammyWords 136895 54.19 74.09 44.35 10 DKIM_VALID_AU 130740 62.09 70.76 57.81 11 XM_B_Unicode3 87404 43.21 47.30 41.18 12 LOC_TINY_FONT_1 85542 32.87 46.30 26.23 13 XM_DK_Undo_02 82891 18.28 44.86 5.14 14 XM_B_SpammyWords2 76927 26.00 41.63 18.27 15 HTML_FONT_LOW_CONTRAST 75103 32.58 40.65 28.59 16 RCVD_IN_MSPIKE_H2 71527 34.34 38.71 32.18 17 BAYES_50 71261 53.40 38.57 60.73 18 BAYES_99 67805 14.59 36.70 3.65 19 FVGT_m_MULTI_ODD 65667 28.45 35.54 24.94 20 TR_XM_DKIM_Undo 64097 13.01 34.69 2.28 21 T_KAM_HTML_FONT_INVALID 56823 24.94 30.75 22.06 22 BAYES_999 54301 11.56 29.39 2.74 23 TR_DCC_Bayes_99 51692 10.13 27.98 1.31 24 DKIM_VALID_EF 47930 27.82 25.94 28.75 25 MIME_HTML_ONLY 45470 21.61 24.61 20.12 26 XMSubLong 41959 22.75 22.71 22.77 27 DCC_CHECK_NEGATIVE 41851 48.56 22.65 61.37 28 T_TM2_M_HEADER_IN_MSG 41663 27.04 22.55 29.26 29 XM_Multi_Part_URI 36800 16.72 19.92 15.13 30 TR_XM_DK_Unsub 35034 14.68 18.96 12.57 31 XM_B_Unsub 28049 10.87 15.18 8.74 32 UNPARSEABLE_RELAY 27806 12.66 15.05 11.47 33 LOTS_OF_MONEY 27551 9.31 14.91 6.54 34 TR_XM_BayesUnsub 27087 9.68 14.66 7.22 35 TR_XM_SpammyWords2 26456 5.14 14.32 0.61 36 RELAYCOUNTRY_META 26420 7.68 14.30 4.41 37 XM_B_SpammyWords3 26095 7.98 14.12 4.94 38 TR_MAX_INTL_RELAY 25970 9.07 14.06 6.60 39 TR_XM_SpammyWords4 25260 7.49 13.67 4.44 40 BOTNET_IPINHOSTNAME 23652 6.55 12.80 3.46 41 TR_XM_SpammyRelay 18554 4.91 10.04 2.37 42 XM_Evil_Numbers_Gen 17587 8.82 9.52 8.48 43 BAYES_80 15893 5.54 8.60 4.03 44 BOTNET 15811 3.83 8.56 1.49 45 TR_XM_UnparsRelay 15633 4.00 8.46 1.80 46 LotsOfNums_01 14525 8.34 7.86 8.58 47 FSL_BULK_SIG 14014 6.61 7.58 6.13 48 HTML_IMAGE_RATIO_02 13152 5.51 7.12 4.72 49 BAYES_60 13132 8.62 7.11 9.37 50 RCVD_IN_BL_SPAMCOP_NET 12722 2.71 6.89 0.64 51 XM_UncommonTLD01 12618 5.39 6.83 4.68 52 XM_Body_Dirty_Words 12058 4.09 6.53 2.89 53 XM_B_Phish_Phrases 11582 5.05 6.27 4.44 54 XM_B_PhoneNumber 11449 9.00 6.20 10.39 55 UNTRUSTED_Relay 11194 3.10 6.06 1.63 56 MPART_ALT_DIFF 11187 4.77 6.05 4.14 57 XM_SPF_SoftFail 11045 3.68 5.98 2.54 58 XMSubMetaSx_00 10615 4.64 5.75 4.09 59 XM_H_Long_From01 10436 5.75 5.65 5.81 60 TR_XM_SPAMCOP 10090 2.00 5.46 0.28 61 XM_B_Investor 9657 2.85 5.23 1.67 62 HTML_IMAGE_RATIO_04 9348 4.90 5.06 4.83 63 BAYES_95 9265 3.38 5.01 2.57 64 HTML_IMAGE_RATIO_06 8959 3.54 4.85 2.89 65 TR_XM_SpammyWords5 8937 2.63 4.84 1.53 66 XM_B_SEO 8881 2.35 4.81 1.13 67 XMBody_17 8745 2.00 4.73 0.64 68 RELAYCOUNTRY_CA 8712 2.36 4.72 1.20 69 DKIM_INVALID 8143 3.07 4.41 2.40 70 TR_XM_SEO4 8116 1.90 4.39 0.67 71 RCVD_IN_VALIDITY_SAFE 8077 4.64 4.37 4.78 72 RCVD_IN_VALIDITY_RPBL 7851 1.54 4.25 0.20 73 TooManyTo_001 7838 7.56 4.24 9.20 74 HTML_IMAGE_RATIO_08 7780 3.26 4.21 2.79 75 XM_H_GMP 7349 4.54 3.98 4.82 76 XM_OfRef6 7326 1.93 3.96 0.93 77 TR_XM_PhishingBody 7185 2.59 3.89 1.95 78 XMStrtUSub 7167 4.25 3.88 4.43 79 XMNumbers 7057 3.06 3.82 2.69 80 MIME_QP_LONG_LINE 6920 4.81 3.75 5.34 81 XMSexyCombo_05 6905 2.79 3.74 2.32 82 MIME_HTML_MOSTLY 6904 2.90 3.74 2.48 83 XM_CamelCaseFrm001 6663 2.61 3.61 2.12 84 XM_B_SpammyTLD 6627 3.97 3.59 4.16 85 T_XMDrugObfuBody_08 6623 2.22 3.58 1.54 86 RCVD_IN_MSPIKE_WL 6606 4.99 3.58 5.69 87 RCVD_IN_MSPIKE_H3 6606 4.99 3.58 5.69 88 T_XMDrugObfuBody_14 6444 2.49 3.49 2.00 89 RCVD_IN_VALIDITY_CERTIFIED 6442 3.85 3.49 4.03 90 TM2_M_URI_OPT_OUT 6326 2.16 3.42 1.53 91 MIME_HTML_ONLY_MULTI 6245 2.64 3.38 2.28 92 USER_IN_DEF_DKIM_WL 5898 9.78 3.19 13.05 93 TM2_M_VERY_LONG_WORD 5876 1.91 3.18 1.29 94 XMBrknScrpt_02 5842 1.68 3.16 0.94 95 XM_UB50 5691 1.72 3.08 1.05 96 XM_URI_RBL 5506 1.20 2.98 0.33 97 SpammyFromTLD_02 5193 1.77 2.81 1.25 98 SUBJ_ALL_CAPS 5152 1.95 2.79 1.53 99 TR_LOTS_OF_MONEY3 4836 1.12 2.62 0.38 100 ALL_TRUSTED 4625 10.81 2.50 14.91 101 T_TooManySym_01 4504 4.04 2.44 4.84 102 XM_B_SpammyWords4 4502 1.26 2.44 0.67 103 XMDiploma_00 4244 1.81 2.30 1.57 104 SpammyFromTLD_01 4135 1.35 2.24 0.92 105 RELAYCOUNTRY_AU 4097 1.41 2.22 1.02 106 FROM_EXCESS_BASE64 4062 2.15 2.20 2.13 107 MAILING_LIST_MULTI 3874 2.67 2.10 2.95 108 XM_B_Unsub2 3811 1.93 2.06 1.87 109 T_XMDrugObfuBody_00 3659 1.10 1.98 0.67 110 TR_Symld_Words 3281 1.71 1.78 1.68 111 XMStockSpam_06 3267 1.39 1.77 1.20 112 XM_DK_Undo_01 3245 1.89 1.76 1.96 113 T_XMHurry_00 3233 0.99 1.75 0.62 114 RCVD_IN_IADB_LISTED 3232 3.33 1.75 4.11 115 BAYES_40 3085 4.21 1.67 5.47 116 HTML_MIME_NO_HTML_TAG 3028 1.96 1.64 2.12 117 TR_XM_NoHeaderRelay 2921 0.62 1.58 0.14 118 URI_NOVOWEL 2833 2.38 1.53 2.80 119 RCVD_IN_IADB_SPF 2832 2.90 1.53 3.58 120 TR_Caps_n_Bayes_99 2805 0.53 1.52 0.05 121 HTML_TAG_BALANCE_BODY 2804 0.86 1.52 0.53 122 THIS_AD 2722 0.88 1.47 0.59 123 XM_H_Long_From02 2721 1.21 1.47 1.07 124 RCVD_IN_IADB_SENDERID 2655 2.59 1.44 3.17 125 RCVD_IN_IADB_DK 2646 2.53 1.43 3.08 126 T_REMOTE_IMAGE 2575 2.89 1.39 3.63 127 XMReplyNow 2554 0.61 1.38 0.23 128 URI_TRY_3LD 2520 0.92 1.36 0.70 129 URI_HEX 2458 1.22 1.33 1.16 130 XMBdyGiftCard01 2457 0.96 1.33 0.78 131 TR_MetaPhish_Combo_01 2446 0.98 1.32 0.81 132 XMGenDplmaNmb 2433 1.00 1.32 0.84 133 XM_SendGrid 2401 1.33 1.30 1.35 134 XM_HighProb1 2342 0.43 1.27 0.01 135 TR_XM_INV_DKIM 2319 0.46 1.26 0.07 136 T_Symld_Words_02 2309 0.79 1.25 0.56 137 XM_B_DNDMA 2277 0.63 1.23 0.34 138 TR_XM_PHPForged 2208 0.63 1.20 0.35 139 TR_XM_PHPDW 2189 0.63 1.18 0.35 140 XMPhish30 2165 0.80 1.17 0.62 141 XMSubMetaI_00 2162 1.05 1.17 0.99 142 TR_XM_FormFill2 2146 0.62 1.16 0.36 143 XM_H_PHPOS 2134 0.61 1.15 0.34 144 T_FILL_THIS_FORM_SHORT 2125 1.01 1.15 0.95 145 BAYES_20 2089 2.70 1.13 3.47 146 XM_B_COPY_HTML 2079 0.73 1.13 0.53 147 URIBL_DBL_SPAM 2075 0.37 1.12 0.00 148 XM_ProductURIs 2038 0.67 1.10 0.46 149 XMHTML_After_End 2032 0.59 1.10 0.34 150 BOTNET_NORDNS 2028 0.37 1.10 0.01 151 RELAYCOUNTRY_FR 2016 0.59 1.09 0.34 152 T_MONEY_PERCENT 1954 0.54 1.06 0.28 153 TR_LOTS_OF_MONEY2 1954 0.54 1.06 0.28 154 XMBody_78 1937 0.55 1.05 0.30 155 XMPhish14 1878 0.82 1.02 0.73 156 AC_BR_BONANZA 1843 0.37 1.00 0.06 157 TR_XM_Base64_M1 1821 0.90 0.99 0.85 158 KHOP_HELO_FCRDNS 1810 1.13 0.98 1.20 159 MPART_ALT_DIFF_COUNT 1805 0.88 0.98 0.83 160 XM_UB99 1793 0.33 0.97 0.01 161 TR_XM_InvalidRelay 1767 0.33 0.96 0.02 162 HTTPS_HTTP_MISMATCH 1757 0.89 0.95 0.85 163 DKIM_ADSP_CUSTOM_MED 1742 0.82 0.94 0.76 164 XM_B_Phish66 1713 0.50 0.93 0.29 165 RCVD_IN_IADB_VOUCHED 1636 2.15 0.89 2.78 166 RCVD_IN_PSBL 1633 0.34 0.88 0.07 167 XMSexyCombo_01 1589 0.66 0.86 0.56 168 TR_XM_DK_SendGrid 1539 0.85 0.83 0.86 169 T_STY_INVIS_DIRECT 1533 0.46 0.83 0.28 170 XM_B_REG_HTML 1527 0.49 0.83 0.32 171 XM_H_Undi_Recip 1487 0.36 0.80 0.14 172 RDNS_DYNAMIC 1471 0.50 0.80 0.35 173 XMSubMetaSSx_00 1471 0.33 0.80 0.11 174 XMClaimOffer 1471 0.34 0.80 0.12 175 HTML_FONT_FACE_BAD 1444 0.57 0.78 0.47 176 NML_ADSP_CUSTOM_MED 1442 0.57 0.78 0.46 177 PDS_RDNS_DYNAMIC_FP 1422 0.39 0.77 0.20 178 RELAYCOUNTRY_GB 1418 0.56 0.77 0.46 179 LongTLD 1394 0.52 0.75 0.41 180 XMDateMe_00 1379 0.51 0.75 0.40 181 XMMoneyMeta_00 1354 0.57 0.73 0.49 182 URIBL_BLACK 1346 0.27 0.73 0.05 183 DIET_1 1346 0.43 0.73 0.28 184 XM_UB999 1320 0.24 0.71 0.01 185 XM_UB60 1312 0.29 0.71 0.08 186 XM_OfRef7 1303 0.34 0.71 0.16 187 XM_DIRTYINTL 1301 0.30 0.70 0.10 188 XMNoVowels 1294 0.74 0.70 0.77 189 FORGED_GMAIL_RCVD 1291 0.52 0.70 0.44 190 XMSubMetaSxObfu_03 1288 0.42 0.70 0.28 191 SHOPIFY_IMG_NOT_RCVD_SFY 1287 0.49 0.70 0.39 192 RELAYCOUNTRY_IN 1275 0.27 0.69 0.06 193 TM2_M_A_HREF_HREF 1274 0.38 0.69 0.22 194 XMPhish08 1248 0.42 0.68 0.29 195 TR_Mismatch_TLD_02 1237 0.26 0.67 0.06 196 ANY_BOUNCE_MESSAGE 1237 2.12 0.67 2.84 197 BOUNCE_MESSAGE 1236 2.12 0.67 2.84 198 TooManyTo_002 1234 2.55 0.67 3.48 199 TVD_RCVD_IP 1234 0.53 0.67 0.46 200 XMHTMLBadTable_001 1200 0.40 0.65 0.28 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 325727 90.55 97.33 87.19 2 RELAYCOUNTRY_US 304956 82.89 85.42 81.63 3 DKIM_SIGNED 282344 80.82 91.40 75.58 4 XM_DK_Pass 277235 78.78 88.01 74.21 5 DKIM_VALID 273370 77.75 86.99 73.18 6 XM_B_Unicode 262837 75.88 87.05 70.36 7 DCC_CHECK_NEGATIVE 229260 48.56 22.65 61.37 8 BAYES_50 226877 53.40 38.57 60.73 9 DKIM_VALID_AU 215945 62.09 70.76 57.81 10 XMListUnsubscribeExists 185898 57.92 74.41 49.76 11 XM_B_SpammyWords 165662 54.19 74.09 44.35 12 XM_B_Unicode3 153850 43.21 47.30 41.18 13 DCC_CHECK 144125 51.41 77.34 38.58 14 RCVD_IN_MSPIKE_H2 120227 34.34 38.71 32.18 15 T_TM2_M_HEADER_IN_MSG 109315 27.04 22.55 29.26 16 DKIM_VALID_EF 107405 27.82 25.94 28.75 17 HTML_FONT_LOW_CONTRAST 106789 32.58 40.65 28.59 18 LOC_TINY_FONT_1 97993 32.87 46.30 26.23 19 FVGT_m_MULTI_ODD 93181 28.45 35.54 24.94 20 XMSubLong 85060 22.75 22.71 22.77 21 T_KAM_HTML_FONT_INVALID 82407 24.94 30.75 22.06 22 MIME_HTML_ONLY 75164 21.61 24.61 20.12 23 XM_B_SpammyWords2 68243 26.00 41.63 18.27 24 XM_Multi_Part_URI 56536 16.72 19.92 15.13 25 ALL_TRUSTED 55717 10.81 2.50 14.91 26 USER_IN_DEF_DKIM_WL 48732 9.78 3.19 13.05 27 TR_XM_DK_Unsub 46946 14.68 18.96 12.57 28 UNPARSEABLE_RELAY 42855 12.66 15.05 11.47 29 XM_B_PhoneNumber 38798 9.00 6.20 10.39 30 BAYES_60 34994 8.62 7.11 9.37 31 TooManyTo_001 34382 7.56 4.24 9.20 32 XM_B_Unsub 32637 10.87 15.18 8.74 33 BAYES_00 32483 6.01 0.59 8.70 34 LotsOfNums_01 32065 8.34 7.86 8.58 35 XM_Evil_Numbers_Gen 31661 8.82 9.52 8.48 36 XM_DKIMWhitelistDomains 27739 5.01 0.12 7.43 37 TR_XM_BayesUnsub 26969 9.68 14.66 7.22 38 IN_ZIMBRA_NJ_WHITELIST 25527 4.60 0.09 6.83 39 TR_MAX_INTL_RELAY 24673 9.07 14.06 6.60 40 LOTS_OF_MONEY 24442 9.31 14.91 6.54 41 FSL_BULK_SIG 22905 6.61 7.58 6.13 42 TR_XM_DK_Bayes 22162 4.11 0.43 5.93 43 TR_XM_DK_Bayes1 21820 4.05 0.42 5.84 44 XM_H_Long_From01 21689 5.75 5.65 5.81 45 RCVD_IN_MSPIKE_H3 21272 4.99 3.58 5.69 46 RCVD_IN_MSPIKE_WL 21272 4.99 3.58 5.69 47 BAYES_40 20435 4.21 1.67 5.47 48 MIME_QP_LONG_LINE 19949 4.81 3.75 5.34 49 XM_DK_Undo_02 19190 18.28 44.86 5.14 50 TR_XM_DK_Bayes2 18615 3.44 0.32 4.98 51 XM_B_SpammyWords3 18442 7.98 14.12 4.94 52 T_TooManySym_01 18066 4.04 2.44 4.84 53 HTML_IMAGE_RATIO_04 18035 4.90 5.06 4.83 54 XM_H_GMP 17992 4.54 3.98 4.82 55 RCVD_IN_VALIDITY_SAFE 17854 4.64 4.37 4.78 56 HTML_IMAGE_RATIO_02 17623 5.51 7.12 4.72 57 XM_UncommonTLD01 17484 5.39 6.83 4.68 58 XM_B_Phish_Phrases 16602 5.05 6.27 4.44 59 TR_XM_SpammyWords4 16569 7.49 13.67 4.44 60 XMStrtUSub 16550 4.25 3.88 4.43 61 RELAYCOUNTRY_META 16468 7.68 14.30 4.41 62 XM_PDF 16247 3.10 0.56 4.35 63 XM_B_SpammyTLD 15554 3.97 3.59 4.16 64 MPART_ALT_DIFF 15458 4.77 6.05 4.14 65 RCVD_IN_IADB_LISTED 15341 3.33 1.75 4.11 66 XMSubMetaSx_00 15278 4.64 5.75 4.09 67 RCVD_IN_VALIDITY_CERTIFIED 15070 3.85 3.49 4.03 68 BAYES_80 15064 5.54 8.60 4.03 69 BAYES_99 13638 14.59 36.70 3.65 70 T_REMOTE_IMAGE 13574 2.89 1.39 3.63 71 RCVD_IN_IADB_SPF 13372 2.90 1.53 3.58 72 TooManyTo_002 12998 2.55 0.67 3.48 73 BAYES_20 12980 2.70 1.13 3.47 74 BOTNET_IPINHOSTNAME 12934 6.55 12.80 3.46 75 RCVD_IN_IADB_SENDERID 11830 2.59 1.44 3.17 76 RCVD_IN_IADB_DK 11498 2.53 1.43 3.08 77 MAILING_LIST_MULTI 11019 2.67 2.10 2.95 78 HTML_IMAGE_RATIO_06 10801 3.54 4.85 2.89 79 XM_Body_Dirty_Words 10785 4.09 6.53 2.89 80 ANY_BOUNCE_MESSAGE 10608 2.12 0.67 2.84 81 BOUNCE_MESSAGE 10606 2.12 0.67 2.84 82 URI_NOVOWEL 10449 2.38 1.53 2.80 83 HTML_IMAGE_RATIO_08 10435 3.26 4.21 2.79 84 RCVD_IN_IADB_VOUCHED 10391 2.15 0.89 2.78 85 BAYES_999 10229 11.56 29.39 2.74 86 XMNumbers 10038 3.06 3.82 2.69 87 BAYES_95 9599 3.38 5.01 2.57 88 XM_SPF_SoftFail 9490 3.68 5.98 2.54 89 MIME_HTML_MOSTLY 9280 2.90 3.74 2.48 90 T_TooManySym_02 9260 1.86 0.60 2.48 91 DKIM_INVALID 8974 3.07 4.41 2.40 92 TR_XM_SpammyRelay 8869 4.91 10.04 2.37 93 XMSexyCombo_05 8661 2.79 3.74 2.32 94 TR_XM_DKIM_Undo 8526 13.01 34.69 2.28 95 MIME_HTML_ONLY_MULTI 8511 2.64 3.38 2.28 96 FROM_EXCESS_BASE64 7943 2.15 2.20 2.13 97 XM_CamelCaseFrm001 7936 2.61 3.61 2.12 98 HTML_MIME_NO_HTML_TAG 7932 1.96 1.64 2.12 99 BAYES_05 7498 1.55 0.62 2.01 100 T_XMDrugObfuBody_14 7454 2.49 3.49 2.00 101 XM_DK_Undo_01 7316 1.89 1.76 1.96 102 TR_XM_PhishingBody 7301 2.59 3.89 1.95 103 RCVD_IN_IADB_OPTIN 7273 1.48 0.54 1.95 104 INVALID_MSGID 7266 1.34 0.12 1.95 105 XM_B_Unsub2 6971 1.93 2.06 1.87 106 TR_XM_UnparsRelay 6707 4.00 8.46 1.80 107 TO_MALFORMED 6641 1.19 0.01 1.78 108 HELO_NODOT 6517 1.26 0.28 1.74 109 HELO_NO_DOMAIN 6512 1.25 0.26 1.74 110 TR_Symld_Words 6262 1.71 1.78 1.68 111 XM_B_Investor 6253 2.85 5.23 1.67 112 UNTRUSTED_Relay 6097 3.10 6.06 1.63 113 XMDiploma_00 5851 1.81 2.30 1.57 114 T_XMDrugObfuBody_08 5751 2.22 3.58 1.54 115 SUBJ_ALL_CAPS 5733 1.95 2.79 1.53 116 TR_XM_SpammyWords5 5731 2.63 4.84 1.53 117 TM2_M_URI_OPT_OUT 5724 2.16 3.42 1.53 118 TooManyTo_003 5599 1.20 0.60 1.50 119 BOTNET 5562 3.83 8.56 1.49 120 IN_HORDE_ADDRESS_BOOK 5265 0.97 0.07 1.41 121 XM_B_FormFill 5180 0.93 0.02 1.39 122 XM_SendGrid 5025 1.33 1.30 1.35 123 TR_DCC_Bayes_99 4880 10.13 27.98 1.31 124 TM2_M_VERY_LONG_WORD 4814 1.91 3.18 1.29 125 SpammyFromTLD_02 4684 1.77 2.81 1.25 126 XMGappySubj_01 4609 0.93 0.31 1.23 127 KHOP_HELO_FCRDNS 4500 1.13 0.98 1.20 128 XMStockSpam_06 4478 1.39 1.77 1.20 129 RELAYCOUNTRY_CA 4472 2.36 4.72 1.20 130 URI_HEX 4337 1.22 1.33 1.16 131 XM_GoogleGroups 4276 0.96 0.57 1.14 132 XM_B_SEO 4215 2.35 4.81 1.13 133 TooManyTo_004 4181 0.93 0.55 1.12 134 XMCapTrack 4103 0.90 0.51 1.10 135 XM_H_Long_From02 4010 1.21 1.47 1.07 136 TVD_SPACE_RATIO 4002 0.75 0.11 1.07 137 XM_UB50 3908 1.72 3.08 1.05 138 RELAYCOUNTRY_AU 3803 1.41 2.22 1.02 139 XMSubMetaI_00 3700 1.05 1.17 0.99 140 T_TooManySym_03 3571 0.72 0.25 0.96 141 T_FILL_THIS_FORM_SHORT 3541 1.01 1.15 0.95 142 XMBrknScrpt_02 3528 1.68 3.16 0.94 143 XM_OfRef6 3461 1.93 3.96 0.93 144 SpammyFromTLD_01 3426 1.35 2.24 0.92 145 FROM_GOV_DKIM_AU 3383 0.74 0.39 0.91 146 TooManyTo_005 3359 0.78 0.53 0.90 147 XM_TLDProd2 3234 0.66 0.25 0.87 148 TR_XM_DK_SendGrid 3229 0.85 0.83 0.86 149 PLING_QUERY 3200 0.74 0.50 0.86 150 TR_XM_Base64_M1 3190 0.90 0.99 0.85 151 HTTPS_HTTP_MISMATCH 3185 0.89 0.95 0.85 152 XM_H_Trusted_IP 3141 0.56 0.00 0.84 153 XMGenDplmaNmb 3133 1.00 1.32 0.84 154 MPART_ALT_DIFF_COUNT 3116 0.88 0.98 0.83 155 TR_MetaPhish_Combo_01 3036 0.98 1.32 0.81 156 XMBdyGiftCard01 2917 0.96 1.33 0.78 157 XMNoVowels 2858 0.74 0.70 0.77 158 DKIM_ADSP_CUSTOM_MED 2832 0.82 0.94 0.76 159 XMPhish14 2727 0.82 1.02 0.73 160 XM_ShortIntro_01 2696 0.60 0.36 0.72 161 URI_TRY_3LD 2629 0.92 1.36 0.70 162 XM_B_SpammyWords4 2510 1.26 2.44 0.67 163 TR_XM_SEO4 2509 1.90 4.39 0.67 164 T_XMDrugObfuBody_00 2486 1.10 1.98 0.67 165 TO_NO_BRKTS_HTML_ONLY 2470 0.51 0.20 0.66 166 XM_H_PHPMailer 2406 0.60 0.51 0.64 167 RCVD_IN_BL_SPAMCOP_NET 2398 2.71 6.89 0.64 168 XMBody_17 2395 2.00 4.73 0.64 169 XMBody_95 2315 0.46 0.13 0.62 170 T_XMHurry_00 2314 0.99 1.75 0.62 171 XMPhish30 2310 0.80 1.17 0.62 172 XMSubNoVowel 2273 0.50 0.27 0.61 173 TR_XM_SpammyWords2 2265 5.14 14.32 0.61 174 THIS_AD 2195 0.88 1.47 0.59 175 T_OBFU_PDF_ATTACH 2189 0.42 0.10 0.59 176 T_Symld_Words_02 2102 0.79 1.25 0.56 177 XMSexyCombo_01 2076 0.66 0.86 0.56 178 SHORT_HELO_AND_INLINE_IMAGE 2074 0.39 0.05 0.56 179 XMGappySubj_02 2028 0.40 0.11 0.54 180 HTML_TAG_BALANCE_BODY 1993 0.86 1.52 0.53 181 XMLngstWrd_00 1992 0.49 0.41 0.53 182 XM_B_COPY_HTML 1988 0.73 1.13 0.53 183 XMSubMetaSxObfu_04 1862 0.39 0.18 0.50 184 XMMoneyMeta_00 1847 0.57 0.73 0.49 185 HTML_IMAGE_ONLY_28 1833 0.45 0.37 0.49 186 HTML_IMAGE_ONLY_32 1794 0.38 0.17 0.48 187 HTML_IMAGE_ONLY_20 1772 0.45 0.42 0.47 188 HTML_FONT_FACE_BAD 1765 0.57 0.78 0.47 189 FILL_THIS_FORM 1745 0.41 0.29 0.47 190 RELAYCOUNTRY_GB 1730 0.56 0.77 0.46 191 XM_ProductURIs 1729 0.67 1.10 0.46 192 NML_ADSP_CUSTOM_MED 1726 0.57 0.78 0.46 193 TVD_RCVD_IP 1706 0.53 0.67 0.46 194 FORGED_GMAIL_RCVD 1629 0.52 0.70 0.44 195 XMSexyCombo_04 1629 0.41 0.35 0.44 196 USER_IN_WHITELIST 1624 0.29 0.00 0.43 197 USER_IN_WELCOMELIST 1624 0.29 0.00 0.43 198 T_MANY_PILL_PRICE 1584 0.29 0.01 0.42 199 TM2_M_BODY_EMPTY 1552 0.30 0.07 0.42 200 LongTLD 1531 0.52 0.75 0.41 ----------------------------------------------------------------------