Email: 542956 Autolearn: 0 AvgScore: 4.87 AvgScanTime: 1.46 sec Spam: 177076 Autolearn: 0 AvgScore: 14.21 AvgScanTime: 1.59 sec Ham: 365880 Autolearn: 0 AvgScore: 0.35 AvgScanTime: 1.39 sec Time Spent Running SA: 219.64 hours Time Spent Processing Spam: 78.07 hours Time Spent Processing Ham: 141.57 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 169298 89.86 95.61 87.08 2 DKIM_SIGNED 163098 80.39 92.11 74.73 3 XM_DK_Pass 156922 78.29 88.62 73.29 4 DKIM_VALID 154808 77.13 87.42 72.15 5 XM_B_Unicode 152798 75.91 86.29 70.88 6 RELAYCOUNTRY_US 151951 83.18 85.81 81.91 7 DCC_CHECK 135238 52.28 76.37 40.62 8 XMListUnsubscribeExists 130067 57.65 73.45 50.00 9 XM_B_SpammyWords 128523 53.45 72.58 44.19 10 DKIM_VALID_AU 125183 61.97 70.69 57.74 11 XM_B_Unicode3 84976 45.06 47.99 43.64 12 LOC_TINY_FONT_1 83602 33.33 47.21 26.61 13 XM_DK_Undo_02 76976 17.92 43.47 5.55 14 HTML_FONT_LOW_CONTRAST 73510 35.46 41.51 32.54 15 XM_B_SpammyWords2 71258 24.98 40.24 17.59 16 RCVD_IN_MSPIKE_H2 69494 34.78 39.25 32.62 17 BAYES_50 66998 53.50 37.84 61.08 18 BAYES_99 62113 14.23 35.08 4.14 19 FVGT_m_MULTI_ODD 61911 28.28 34.96 25.05 20 TR_XM_DKIM_Undo 56782 12.23 32.07 2.64 21 T_KAM_HTML_FONT_INVALID 53745 24.14 30.35 21.13 22 BAYES_999 49562 11.29 27.99 3.20 23 TR_DCC_Bayes_99 46681 9.88 26.36 1.90 24 DKIM_VALID_EF 46182 27.74 26.08 28.55 25 MIME_HTML_ONLY 44420 20.20 25.09 17.83 26 DCC_CHECK_NEGATIVE 39227 47.20 22.15 59.33 27 T_TM2_M_HEADER_IN_MSG 38001 27.18 21.46 29.95 28 XM_Multi_Part_URI 37816 16.92 21.36 14.78 29 XMSubLong 37312 21.23 21.07 21.30 30 TR_XM_DK_Unsub 32583 14.70 18.40 12.90 31 UNPARSEABLE_RELAY 29507 12.87 16.66 11.03 32 XM_B_Unsub 28819 11.14 16.27 8.65 33 TR_XM_BayesUnsub 27839 9.76 15.72 6.88 34 XM_B_SpammyWords3 26043 7.99 14.71 4.74 35 TR_MAX_INTL_RELAY 25555 9.23 14.43 6.72 36 LOTS_OF_MONEY 24769 8.35 13.99 5.62 37 BOTNET_IPINHOSTNAME 24233 6.69 13.69 3.31 38 RELAYCOUNTRY_META 23759 7.11 13.42 4.05 39 TR_XM_SpammyWords2 23129 4.87 13.06 0.90 40 TR_XM_SpammyWords4 22796 6.79 12.87 3.85 41 XM_Evil_Numbers_Gen 19741 9.88 11.15 9.26 42 TR_XM_UnparsRelay 17308 4.35 9.77 1.73 43 TR_XM_SpammyRelay 17259 4.60 9.75 2.11 44 BAYES_80 15595 5.65 8.81 4.13 45 BOTNET 14692 3.69 8.30 1.47 46 BAYES_60 14283 8.81 8.07 9.18 47 FSL_BULK_SIG 14133 6.55 7.98 5.86 48 LotsOfNums_01 13327 9.18 7.53 9.98 49 XMSubMetaSx_00 12416 4.69 7.01 3.57 50 HTML_IMAGE_RATIO_02 12167 5.66 6.87 5.08 51 RCVD_IN_BL_SPAMCOP_NET 11700 2.54 6.61 0.57 52 XM_B_PhoneNumber 11263 8.40 6.36 9.38 53 MPART_ALT_DIFF 10803 4.66 6.10 3.96 54 HTML_IMAGE_RATIO_04 10592 4.76 5.98 4.16 55 XM_Body_Dirty_Words 10115 3.40 5.71 2.28 56 XM_H_Long_From01 9962 5.24 5.63 5.06 57 UNTRUSTED_Relay 9544 2.78 5.39 1.52 58 BAYES_95 9105 3.42 5.14 2.59 59 XM_UncommonTLD01 9019 4.34 5.09 3.97 60 XM_B_Investor 8939 2.65 5.05 1.49 61 TR_XM_SPAMCOP 8742 1.81 4.94 0.29 62 TR_XM_SpammyWords5 8631 2.63 4.87 1.55 63 XM_B_SEO 8596 2.50 4.85 1.36 64 XM_SPF_SoftFail 8521 3.19 4.81 2.40 65 XM_B_Phish_Phrases 8514 4.54 4.81 4.41 66 DKIM_INVALID 8290 3.26 4.68 2.57 67 TooManyTo_001 8284 7.17 4.68 8.38 68 XMSexyCombo_05 7985 2.60 4.51 1.68 69 RELAYCOUNTRY_CA 7951 2.16 4.49 1.03 70 RCVD_IN_VALIDITY_SAFE 7898 4.83 4.46 5.01 71 XM_H_GMP 7802 4.95 4.41 5.21 72 TR_XM_SEO4 7741 2.06 4.37 0.94 73 USER_IN_DEF_DKIM_WL 7357 10.62 4.15 13.75 74 HTML_IMAGE_RATIO_06 7085 3.41 4.00 3.12 75 TR_XM_PhishingBody 7063 2.45 3.99 1.70 76 HTML_IMAGE_RATIO_08 7022 2.74 3.97 2.14 77 XMNumbers 6879 3.18 3.88 2.84 78 TM2_M_VERY_LONG_WORD 6579 4.15 3.72 4.37 79 RCVD_IN_VALIDITY_CERTIFIED 6525 4.06 3.68 4.23 80 MIME_HTML_MOSTLY 6492 2.84 3.67 2.44 81 T_XMDrugObfuBody_14 6406 2.49 3.62 1.95 82 MIME_QP_LONG_LINE 6245 4.54 3.53 5.03 83 XMStrtUSub 6221 4.38 3.51 4.80 84 MIME_HTML_ONLY_MULTI 6220 2.62 3.51 2.19 85 XM_B_SpammyTLD 6194 3.45 3.50 3.43 86 XM_URI_RBL 5727 1.27 3.23 0.31 87 XM_CamelCaseFrm001 5556 2.76 3.14 2.58 88 SUBJ_ALL_CAPS 5524 2.16 3.12 1.70 89 XMBody_17 5498 1.34 3.10 0.49 90 RCVD_IN_MSPIKE_WL 5361 4.64 3.03 5.42 91 RCVD_IN_MSPIKE_H3 5361 4.64 3.03 5.42 92 T_XMDrugObfuBody_08 5338 2.29 3.01 1.94 93 XM_B_SpammyWords4 5246 1.31 2.96 0.52 94 XM_B_URI_Unicode 4955 2.25 2.80 1.98 95 XMBrknScrpt_02 4943 1.68 2.79 1.14 96 TR_LOTS_OF_MONEY3 4932 1.22 2.79 0.46 97 XM_UB50 4879 1.54 2.76 0.95 98 TM2_M_URI_OPT_OUT 4830 1.96 2.73 1.58 99 XM_OfRef6 4824 1.43 2.72 0.81 100 XMDiploma_00 4746 1.83 2.68 1.42 101 RELAYCOUNTRY_AU 4720 1.50 2.67 0.93 102 T_TooManySym_01 4280 4.20 2.42 5.07 103 RCVD_IN_VALIDITY_RPBL 4051 0.83 2.29 0.13 104 T_XMHurry_00 3939 1.10 2.22 0.56 105 XM_B_Unsub2 3800 1.66 2.15 1.42 106 XM_DK_Undo_01 3687 1.72 2.08 1.54 107 FROM_EXCESS_BASE64 3548 2.06 2.00 2.09 108 SpammyFromTLD_01 3425 1.21 1.93 0.86 109 MAILING_LIST_MULTI 3419 2.57 1.93 2.88 110 TR_XM_NoHeaderRelay 3314 0.69 1.87 0.12 111 XMStockSpam_06 3264 1.32 1.84 1.07 112 T_XMDrugObfuBody_00 3234 1.12 1.83 0.78 113 XMSubMetaI_00 2987 0.97 1.69 0.62 114 URI_NOVOWEL 2836 2.26 1.60 2.59 115 URI_TRY_3LD 2798 0.89 1.58 0.56 116 RCVD_IN_IADB_LISTED 2613 3.07 1.48 3.84 117 XMSubMetaSxObfu_03 2600 0.96 1.47 0.71 118 RCVD_IN_ZEN_LASTEXTERNAL 2591 0.48 1.46 0.00 119 SHORTCIRCUIT 2591 0.48 1.46 0.00 120 TR_XM_PHPForged 2575 0.79 1.45 0.47 121 BAYES_40 2567 3.86 1.45 5.02 122 TR_XM_PHPDW 2560 0.80 1.45 0.48 123 XMBdyGiftCard01 2530 1.04 1.43 0.84 124 TR_XM_FormFill2 2526 0.79 1.43 0.48 125 URI_HEX 2525 1.21 1.43 1.11 126 XM_H_PHPOS 2492 0.77 1.41 0.47 127 HTML_MIME_NO_HTML_TAG 2417 1.74 1.36 1.92 128 T_REMOTE_IMAGE 2387 2.77 1.35 3.46 129 T_MONEY_PERCENT 2366 0.66 1.34 0.33 130 TR_LOTS_OF_MONEY2 2366 0.66 1.34 0.33 131 XM_HighProb1 2347 0.44 1.33 0.02 132 KHOP_HELO_FCRDNS 2343 2.31 1.32 2.79 133 XMPhish30 2337 0.81 1.32 0.56 134 TR_XM_INV_DKIM 2328 0.46 1.31 0.04 135 XM_ProductURIs 2276 1.05 1.29 0.93 136 XM_SendGrid 2263 1.36 1.28 1.40 137 SpammyFromTLD_02 2257 0.59 1.27 0.27 138 RCVD_IN_IADB_SPF 2253 2.70 1.27 3.39 139 DIET_1 2227 0.66 1.26 0.37 140 HTML_TAG_BALANCE_BODY 2222 0.74 1.25 0.49 141 XM_B_REG_HTML 2221 0.68 1.25 0.41 142 HTTPS_HTTP_MISMATCH 2192 1.00 1.24 0.88 143 THIS_AD 2172 0.74 1.23 0.51 144 T_FILL_THIS_FORM_SHORT 2160 1.02 1.22 0.93 145 RCVD_IN_IADB_SENDERID 2086 2.44 1.18 3.05 146 RDNS_DYNAMIC 2069 0.62 1.17 0.36 147 RCVD_IN_IADB_DK 2061 2.37 1.16 2.95 148 PDS_RDNS_DYNAMIC_FP 2042 0.53 1.15 0.22 149 TR_XM_Base64_M1 2003 0.81 1.13 0.66 150 XM_B_COPY_HTML 1954 0.66 1.10 0.44 151 XMGenDplmaNmb 1950 0.86 1.10 0.74 152 TR_Caps_n_Bayes_99 1920 0.46 1.08 0.16 153 TM2_M_OBFU_COMMENT 1896 0.52 1.07 0.26 154 XM_B_Phish66 1893 0.57 1.07 0.34 155 TVD_RCVD_IP 1891 0.63 1.07 0.41 156 ALL_TRUSTED 1891 10.49 1.07 15.05 157 TR_Symld_Words 1885 1.33 1.06 1.46 158 TooManyTo_002 1867 2.11 1.05 2.62 159 HELO_DYNAMIC_SPLIT_IP 1859 0.35 1.05 0.01 160 TR_XM_Spammywords 1856 0.52 1.05 0.26 161 XM_S_SpammyWords 1856 0.52 1.05 0.26 162 XMReplyNow 1852 0.50 1.05 0.23 163 BAYES_20 1804 2.52 1.02 3.25 164 XM_B_DNDMA 1787 0.80 1.01 0.70 165 TR_MetaPhish_Combo_01 1772 1.07 1.00 1.11 166 XMHTML_After_End 1694 0.52 0.96 0.31 167 TR_XM_InvalidRelay 1685 0.33 0.95 0.03 168 XMMoneyMeta_00 1654 0.79 0.93 0.72 169 RELAYCOUNTRY_FR 1651 0.47 0.93 0.24 170 MPART_ALT_DIFF_COUNT 1646 0.63 0.93 0.48 171 TM2_M_A_HREF_HREF 1637 0.54 0.92 0.35 172 DKIM_ADSP_CUSTOM_MED 1613 0.88 0.91 0.86 173 XM_UB99 1612 0.30 0.91 0.01 174 XM_H_Undi_Recip 1604 0.44 0.91 0.22 175 SHOPIFY_IMG_NOT_RCVD_SFY 1593 0.57 0.90 0.41 176 RCVD_IN_PBL 1535 0.73 0.87 0.66 177 PLING_QUERY 1524 0.53 0.86 0.36 178 XMHTMLBadTable_001 1494 0.45 0.84 0.25 179 TR_XM_DK_SendGrid 1483 0.90 0.84 0.93 180 NO_DNS_FOR_FROM 1464 0.46 0.83 0.28 181 XMPhish08 1458 0.43 0.82 0.24 182 TooManyTo_003 1443 1.23 0.81 1.43 183 RELAYCOUNTRY_GB 1438 0.59 0.81 0.48 184 TR_XM_MaxWHORU 1430 0.43 0.81 0.24 185 XMSolicitRefs_0 1388 0.65 0.78 0.58 186 MISSING_HEADERS 1388 0.50 0.78 0.37 187 T_STY_INVIS_DIRECT 1370 0.45 0.77 0.30 188 T_Symld_Words_02 1368 0.47 0.77 0.33 189 LongTLD 1359 0.51 0.77 0.39 190 TooManyTo_004 1356 0.95 0.77 1.04 191 RCVD_IN_IADB_VOUCHED 1337 1.90 0.76 2.45 192 TR_XM_Undi_Recip19 1335 0.29 0.75 0.06 193 BOTNET_NORDNS 1323 0.25 0.75 0.01 194 XM_RXBody 1319 0.55 0.74 0.45 195 AC_BR_BONANZA 1318 0.29 0.74 0.07 196 NML_ADSP_CUSTOM_MED 1316 0.62 0.74 0.56 197 TooManyTo_005 1283 0.81 0.72 0.85 198 XMSlimDrugH 1279 0.41 0.72 0.25 199 XMPhish14 1274 0.58 0.72 0.51 200 RCVD_IN_SORBS_DUL 1272 0.26 0.72 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 318601 89.86 95.61 87.08 2 RELAYCOUNTRY_US 299677 83.18 85.81 81.91 3 DKIM_SIGNED 273411 80.39 92.11 74.73 4 XM_DK_Pass 268165 78.29 88.62 73.29 5 DKIM_VALID 263990 77.13 87.42 72.15 6 XM_B_Unicode 259344 75.91 86.29 70.88 7 BAYES_50 223490 53.50 37.84 61.08 8 DCC_CHECK_NEGATIVE 217066 47.20 22.15 59.33 9 DKIM_VALID_AU 211262 61.97 70.69 57.74 10 XMListUnsubscribeExists 182945 57.65 73.45 50.00 11 XM_B_SpammyWords 161686 53.45 72.58 44.19 12 XM_B_Unicode3 159675 45.06 47.99 43.64 13 DCC_CHECK 148617 52.28 76.37 40.62 14 RCVD_IN_MSPIKE_H2 119368 34.78 39.25 32.62 15 HTML_FONT_LOW_CONTRAST 119042 35.46 41.51 32.54 16 T_TM2_M_HEADER_IN_MSG 109597 27.18 21.46 29.95 17 DKIM_VALID_EF 104449 27.74 26.08 28.55 18 LOC_TINY_FONT_1 97347 33.33 47.21 26.61 19 FVGT_m_MULTI_ODD 91658 28.28 34.96 25.05 20 XMSubLong 77949 21.23 21.07 21.30 21 T_KAM_HTML_FONT_INVALID 77323 24.14 30.35 21.13 22 MIME_HTML_ONLY 65250 20.20 25.09 17.83 23 XM_B_SpammyWords2 64369 24.98 40.24 17.59 24 ALL_TRUSTED 55080 10.49 1.07 15.05 25 XM_Multi_Part_URI 54067 16.92 21.36 14.78 26 USER_IN_DEF_DKIM_WL 50296 10.62 4.15 13.75 27 TR_XM_DK_Unsub 47211 14.70 18.40 12.90 28 UNPARSEABLE_RELAY 40348 12.87 16.66 11.03 29 LotsOfNums_01 36527 9.18 7.53 9.98 30 XM_B_PhoneNumber 34323 8.40 6.36 9.38 31 XM_Evil_Numbers_Gen 33880 9.88 11.15 9.26 32 BAYES_60 33570 8.81 8.07 9.18 33 BAYES_00 32223 6.12 0.57 8.81 34 XM_B_Unsub 31646 11.14 16.27 8.65 35 TooManyTo_001 30661 7.17 4.68 8.38 36 XM_DKIMWhitelistDomains 26095 4.94 0.42 7.13 37 TR_XM_BayesUnsub 25180 9.76 15.72 6.88 38 TR_MAX_INTL_RELAY 24579 9.23 14.43 6.72 39 IN_ZIMBRA_NJ_WHITELIST 23588 4.37 0.08 6.45 40 TR_XM_DK_Bayes 23548 4.48 0.45 6.44 41 TR_XM_DK_Bayes1 22734 4.33 0.44 6.21 42 ANY_BOUNCE_MESSAGE 21607 4.18 0.60 5.91 43 BOUNCE_MESSAGE 21607 4.18 0.60 5.91 44 FSL_BULK_SIG 21438 6.55 7.98 5.86 45 LOTS_OF_MONEY 20572 8.35 13.99 5.62 46 XM_DK_Undo_02 20324 17.92 43.47 5.55 47 RCVD_IN_MSPIKE_WL 19827 4.64 3.03 5.42 48 RCVD_IN_MSPIKE_H3 19827 4.64 3.03 5.42 49 TR_XM_DK_Bayes2 19465 3.70 0.35 5.32 50 XM_H_GMP 19050 4.95 4.41 5.21 51 HTML_IMAGE_RATIO_02 18578 5.66 6.87 5.08 52 T_TooManySym_01 18532 4.20 2.42 5.07 53 XM_H_Long_From01 18509 5.24 5.63 5.06 54 MIME_QP_LONG_LINE 18410 4.54 3.53 5.03 55 BAYES_40 18365 3.86 1.45 5.02 56 RCVD_IN_VALIDITY_SAFE 18316 4.83 4.46 5.01 57 XMStrtUSub 17574 4.38 3.51 4.80 58 XM_B_SpammyWords3 17360 7.99 14.71 4.74 59 XM_B_Phish_Phrases 16126 4.54 4.81 4.41 60 TM2_M_VERY_LONG_WORD 15980 4.15 3.72 4.37 61 RCVD_IN_VALIDITY_CERTIFIED 15495 4.06 3.68 4.23 62 HTML_IMAGE_RATIO_04 15238 4.76 5.98 4.16 63 BAYES_99 15139 14.23 35.08 4.14 64 BAYES_80 15103 5.65 8.81 4.13 65 XM_PDF 15034 2.95 0.55 4.11 66 RELAYCOUNTRY_META 14819 7.11 13.42 4.05 67 XM_UncommonTLD01 14542 4.34 5.09 3.97 68 MPART_ALT_DIFF 14490 4.66 6.10 3.96 69 TR_XM_SpammyWords4 14097 6.79 12.87 3.85 70 RCVD_IN_IADB_LISTED 14062 3.07 1.48 3.84 71 XMSubMetaSx_00 13071 4.69 7.01 3.57 72 HTML_IMAGE_ONLY_32 12830 2.41 0.14 3.51 73 T_REMOTE_IMAGE 12674 2.77 1.35 3.46 74 XM_B_SpammyTLD 12541 3.45 3.50 3.43 75 RCVD_IN_IADB_SPF 12387 2.70 1.27 3.39 76 BOTNET_IPINHOSTNAME 12097 6.69 13.69 3.31 77 BAYES_20 11883 2.52 1.02 3.25 78 BAYES_999 11717 11.29 27.99 3.20 79 HTML_IMAGE_RATIO_06 11415 3.41 4.00 3.12 80 RCVD_IN_IADB_SENDERID 11154 2.44 1.18 3.05 81 RCVD_IN_IADB_DK 10807 2.37 1.16 2.95 82 MAILING_LIST_MULTI 10531 2.57 1.93 2.88 83 XMNumbers 10378 3.18 3.88 2.84 84 KHOP_HELO_FCRDNS 10209 2.31 1.32 2.79 85 TR_XM_DKIM_Undo 9646 12.23 32.07 2.64 86 TooManyTo_002 9602 2.11 1.05 2.62 87 BAYES_95 9465 3.42 5.14 2.59 88 URI_NOVOWEL 9460 2.26 1.60 2.59 89 XM_CamelCaseFrm001 9436 2.76 3.14 2.58 90 DKIM_INVALID 9421 3.26 4.68 2.57 91 T_TooManySym_02 9261 1.91 0.64 2.53 92 RCVD_IN_IADB_VOUCHED 8976 1.90 0.76 2.45 93 MIME_HTML_MOSTLY 8932 2.84 3.67 2.44 94 XM_SPF_SoftFail 8795 3.19 4.81 2.40 95 XM_Body_Dirty_Words 8341 3.40 5.71 2.28 96 MIME_HTML_ONLY_MULTI 8003 2.62 3.51 2.19 97 HTML_IMAGE_RATIO_08 7836 2.74 3.97 2.14 98 TR_XM_SpammyRelay 7714 4.60 9.75 2.11 99 FROM_EXCESS_BASE64 7635 2.06 2.00 2.09 100 INVALID_MSGID 7279 1.37 0.08 1.99 101 XM_B_URI_Unicode 7244 2.25 2.80 1.98 102 T_XMDrugObfuBody_14 7131 2.49 3.62 1.95 103 MIME_CHARSET_FARAWAY 7116 1.50 0.58 1.94 104 T_XMDrugObfuBody_08 7080 2.29 3.01 1.94 105 HTML_MIME_NO_HTML_TAG 7030 1.74 1.36 1.92 106 TR_DCC_Bayes_99 6944 9.88 26.36 1.90 107 BAYES_05 6637 1.41 0.57 1.81 108 TO_MALFORMED 6635 1.23 0.02 1.81 109 RCVD_IN_IADB_OPTIN 6509 1.37 0.52 1.78 110 TR_XM_UnparsRelay 6326 4.35 9.77 1.73 111 CHARSET_FARAWAY_HEADER 6245 1.16 0.04 1.71 112 SUBJ_ALL_CAPS 6223 2.16 3.12 1.70 113 TR_XM_PhishingBody 6218 2.45 3.99 1.70 114 XMSexyCombo_05 6139 2.60 4.51 1.68 115 TM2_M_URI_OPT_OUT 5799 1.96 2.73 1.58 116 TR_XM_SpammyWords5 5656 2.63 4.87 1.55 117 XM_DK_Undo_01 5643 1.72 2.08 1.54 118 UNTRUSTED_Relay 5563 2.78 5.39 1.52 119 XM_B_Investor 5445 2.65 5.05 1.49 120 BOTNET 5370 3.69 8.30 1.47 121 TR_Symld_Words 5356 1.33 1.06 1.46 122 TooManyTo_003 5237 1.23 0.81 1.43 123 XMDiploma_00 5204 1.83 2.68 1.42 124 XM_B_Unsub2 5200 1.66 2.15 1.42 125 XM_SendGrid 5106 1.36 1.28 1.40 126 IN_HORDE_ADDRESS_BOOK 5056 0.95 0.07 1.38 127 XMLngstWrd_00 5031 1.06 0.40 1.38 128 XM_B_SEO 4964 2.50 4.85 1.36 129 XM_H_Long_From02 4916 1.13 0.69 1.34 130 XMBrknScrpt_02 4165 1.68 2.79 1.14 131 XM_GoogleGroups 4102 0.95 0.60 1.12 132 TR_MetaPhish_Combo_01 4061 1.07 1.00 1.11 133 HELO_NODOT 4056 0.83 0.25 1.11 134 HELO_NO_DOMAIN 4048 0.82 0.24 1.11 135 URI_HEX 4045 1.21 1.43 1.11 136 TVD_SPACE_RATIO 3941 0.83 0.31 1.08 137 XMCapTrack 3929 0.92 0.59 1.07 138 XMStockSpam_06 3906 1.32 1.84 1.07 139 TooManyTo_004 3819 0.95 0.77 1.04 140 RELAYCOUNTRY_CA 3784 2.16 4.49 1.03 141 XMBody_95 3658 0.75 0.24 1.00 142 XM_UB50 3490 1.54 2.76 0.95 143 TR_XM_SEO4 3442 2.06 4.37 0.94 144 XM_ProductURIs 3420 1.05 1.29 0.93 145 RELAYCOUNTRY_AU 3419 1.50 2.67 0.93 146 TR_XM_DK_SendGrid 3414 0.90 0.84 0.93 147 T_FILL_THIS_FORM_SHORT 3393 1.02 1.22 0.93 148 XMGappySubj_01 3351 0.67 0.15 0.92 149 TR_XM_SpammyWords2 3299 4.87 13.06 0.90 150 T_TooManySym_03 3281 0.67 0.19 0.90 151 HTTPS_HTTP_MISMATCH 3229 1.00 1.24 0.88 152 SpammyFromTLD_01 3150 1.21 1.93 0.86 153 DKIM_ADSP_CUSTOM_MED 3146 0.88 0.91 0.86 154 TooManyTo_005 3113 0.81 0.72 0.85 155 XMBdyGiftCard01 3090 1.04 1.43 0.84 156 XM_OfRef6 2953 1.43 2.72 0.81 157 XM_TLDProd2 2875 0.61 0.26 0.79 158 T_XMDrugObfuBody_00 2859 1.12 1.83 0.78 159 XMGenDplmaNmb 2723 0.86 1.10 0.74 160 XM_ShortIntro_01 2667 0.61 0.36 0.73 161 XMMoneyMeta_00 2640 0.79 0.93 0.72 162 XMSubMetaSxObfu_03 2603 0.96 1.47 0.71 163 XM_B_DNDMA 2574 0.80 1.01 0.70 164 FROM_GOV_DKIM_AU 2532 0.57 0.30 0.69 165 RCVD_IN_PBL 2421 0.73 0.87 0.66 166 TR_XM_Base64_M1 2419 0.81 1.13 0.66 167 XMNoVowels 2328 0.57 0.44 0.64 168 XM_B_FormFill 2287 0.49 0.21 0.63 169 XMSubMetaI_00 2285 0.97 1.69 0.62 170 XMGappySubj_02 2256 0.44 0.08 0.62 171 XMSubNoVowel 2237 0.51 0.31 0.61 172 XM_H_OutlookMailer 2121 0.42 0.10 0.58 173 XMSolicitRefs_0 2115 0.65 0.78 0.58 174 T_OBFU_PDF_ATTACH 2105 0.43 0.13 0.58 175 HTML_IMAGE_ONLY_20 2103 0.51 0.39 0.57 176 XM_H_PHPMailer 2093 0.61 0.69 0.57 177 RCVD_IN_BL_SPAMCOP_NET 2087 2.54 6.61 0.57 178 URI_TRY_3LD 2048 0.89 1.58 0.56 179 NML_ADSP_CUSTOM_MED 2048 0.62 0.74 0.56 180 XMPhish30 2047 0.81 1.32 0.56 181 T_XMHurry_00 2033 1.10 2.22 0.56 182 XMLngstWrd_01 1892 0.47 0.36 0.52 183 XM_B_SpammyWords4 1888 1.31 2.96 0.52 184 THIS_AD 1865 0.74 1.23 0.51 185 FORGED_GMAIL_RCVD 1864 0.54 0.62 0.51 186 XMPhish14 1857 0.58 0.72 0.51 187 HTML_TAG_BALANCE_BODY 1809 0.74 1.25 0.49 188 XMBody_17 1796 1.34 3.10 0.49 189 TRACKER_ID 1792 0.37 0.13 0.49 190 RELAYCOUNTRY_GB 1767 0.59 0.81 0.48 191 TR_XM_PHPDW 1766 0.80 1.45 0.48 192 MPART_ALT_DIFF_COUNT 1755 0.63 0.93 0.48 193 TR_XM_FormFill2 1753 0.79 1.43 0.48 194 TR_XM_PHPForged 1735 0.79 1.45 0.47 195 XM_H_PHPOS 1711 0.77 1.41 0.47 196 TR_LOTS_OF_MONEY3 1670 1.22 2.79 0.46 197 XM_RXBody 1664 0.55 0.74 0.45 198 XM_B_COPY_HTML 1609 0.66 1.10 0.44 199 USER_IN_WHITELIST 1575 0.29 0.00 0.43 200 USER_IN_WELCOMELIST 1575 0.29 0.00 0.43 ----------------------------------------------------------------------