Email: 435180 Autolearn: 0 AvgScore: 4.76 AvgScanTime: 1.39 sec Spam: 139947 Autolearn: 0 AvgScore: 14.35 AvgScanTime: 1.53 sec Ham: 295233 Autolearn: 0 AvgScore: 0.21 AvgScanTime: 1.32 sec Time Spent Running SA: 167.80 hours Time Spent Processing Spam: 59.64 hours Time Spent Processing Ham: 108.16 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 130117 88.62 92.98 86.55 2 DKIM_SIGNED 125728 80.29 89.84 75.76 3 XM_B_Unicode 118789 75.64 84.88 71.26 4 XM_DK_Pass 118461 77.42 84.65 73.99 5 DKIM_VALID 117480 76.53 83.95 73.01 6 RELAYCOUNTRY_US 117412 82.18 83.90 81.37 7 DCC_CHECK 105840 51.15 75.63 39.54 8 XM_B_SpammyWords 97914 52.58 69.97 44.35 9 XMListUnsubscribeExists 97506 56.00 69.67 49.52 10 DKIM_VALID_AU 91239 60.57 65.20 58.38 11 XM_B_Unicode3 70198 44.33 50.16 41.57 12 LOC_TINY_FONT_1 65819 34.20 47.03 28.12 13 BAYES_50 62001 55.84 44.30 61.30 14 RCVD_IN_MSPIKE_H2 56912 37.65 40.67 36.22 15 XM_B_SpammyWords2 56734 25.43 40.54 18.26 16 XM_DK_Undo_02 54641 15.93 39.04 4.98 17 HTML_FONT_LOW_CONTRAST 50240 31.09 35.90 28.81 18 FVGT_m_MULTI_ODD 44876 27.65 32.07 25.56 19 DKIM_VALID_EF 44275 29.68 31.64 28.75 20 T_KAM_HTML_FONT_INVALID 43507 24.37 31.09 21.18 21 TR_XM_DKIM_Undo 39852 10.66 28.48 2.22 22 MIME_HTML_ONLY 37731 22.89 26.96 20.97 23 BAYES_99 37650 10.99 26.90 3.45 24 XMSubLong 36885 24.42 26.36 23.50 25 DCC_CHECK_NEGATIVE 32066 48.35 22.91 60.41 26 TR_XM_DK_Unsub 30906 15.79 22.08 12.81 27 T_TM2_M_HEADER_IN_MSG 30067 27.35 21.48 30.14 28 XM_Multi_Part_URI 29486 16.17 21.07 13.84 29 BAYES_999 29111 8.46 20.80 2.61 30 TR_DCC_Bayes_99 27006 7.04 19.30 1.23 31 XM_B_Unsub 22710 11.88 16.23 9.82 32 UNPARSEABLE_RELAY 22563 13.45 16.12 12.19 33 LOTS_OF_MONEY 22306 9.36 15.94 6.24 34 TR_XM_BayesUnsub 21879 9.81 15.63 7.04 35 RELAYCOUNTRY_META 21045 7.33 15.04 3.68 36 XM_B_SpammyWords3 20654 7.86 14.76 4.60 37 TR_MAX_INTL_RELAY 19757 8.23 14.12 5.44 38 TR_XM_SpammyWords4 16902 6.61 12.08 4.02 39 RCVD_IN_BL_SPAMCOP_NET 16234 4.16 11.60 0.64 40 TR_XM_SpammyRelay 15862 4.88 11.33 1.82 41 BOTNET_IPINHOSTNAME 15655 6.00 11.19 3.55 42 BOTNET 15049 4.51 10.75 1.55 43 XM_Evil_Numbers_Gen 14400 9.26 10.29 8.77 44 TR_XM_SpammyWords2 14243 3.56 10.18 0.42 45 TR_XM_SPAMCOP 13909 3.41 9.94 0.32 46 FSL_BULK_SIG 13722 8.07 9.81 7.25 47 XM_B_Phish_Phrases 13719 6.78 9.80 5.34 48 LotsOfNums_01 12843 8.44 9.18 8.09 49 BAYES_80 12062 5.08 8.62 3.40 50 BAYES_60 11560 7.33 8.26 6.89 51 TR_XM_UnparsRelay 10956 3.58 7.83 1.57 52 XMSubMetaSx_00 10532 5.53 7.53 4.58 53 XM_Body_Dirty_Words 10467 4.19 7.48 2.63 54 RELAYCOUNTRY_CA 9760 2.88 6.97 0.93 55 DKIM_INVALID 8248 3.76 5.89 2.75 56 HTML_IMAGE_RATIO_02 8170 5.15 5.84 4.83 57 HTML_IMAGE_RATIO_04 8169 4.92 5.84 4.49 58 XM_B_PhoneNumber 7808 8.29 5.58 9.57 59 XM_UncommonTLD01 7635 4.65 5.46 4.27 60 MPART_ALT_DIFF 7548 5.18 5.39 5.08 61 TR_XM_PhishingBody 7547 2.77 5.39 1.53 62 BAYES_95 7232 3.04 5.17 2.03 63 XM_H_Long_From01 7173 5.73 5.13 6.02 64 XMSexyCombo_05 6824 3.10 4.88 2.25 65 XM_H_GMP 6705 5.40 4.79 5.70 66 UNTRUSTED_Relay 6617 2.62 4.73 1.62 67 XM_B_Investor 6420 2.58 4.59 1.63 68 XM_B_SpammyTLD 6289 3.29 4.49 2.72 69 TM2_M_VERY_LONG_WORD 6206 2.66 4.43 1.83 70 RCVD_IN_MSPIKE_WL 5991 4.79 4.28 5.04 71 RCVD_IN_MSPIKE_H3 5991 4.79 4.28 5.04 72 T_XMDrugObfuBody_14 5899 2.82 4.22 2.15 73 XMStrtUSub 5795 4.39 4.14 4.51 74 XMBody_17 5658 1.66 4.04 0.53 75 TR_XM_SpammyWords5 5459 2.21 3.90 1.41 76 HTML_IMAGE_RATIO_06 5336 3.09 3.81 2.75 77 XMNumbers 5282 3.32 3.77 3.10 78 TR_LOTS_OF_MONEY3 4687 1.35 3.35 0.40 79 TooManyTo_001 4648 7.00 3.32 8.74 80 XM_CamelCaseFrm001 4555 2.61 3.25 2.30 81 XMDiploma_00 4512 2.18 3.22 1.68 82 T_XMDrugObfuBody_08 4481 1.94 3.20 1.34 83 XM_OfRef6 4474 1.84 3.20 1.19 84 MIME_HTML_MOSTLY 4454 2.70 3.18 2.47 85 MIME_QP_LONG_LINE 4329 4.52 3.09 5.20 86 MIME_HTML_ONLY_MULTI 4289 2.97 3.06 2.93 87 KHOP_HELO_FCRDNS 4280 2.10 3.06 1.64 88 BOUNCE_MESSAGE 4214 3.50 3.01 3.73 89 ANY_BOUNCE_MESSAGE 4214 3.50 3.01 3.73 90 XM_B_Unsub2 4120 1.89 2.94 1.39 91 XM_SPF_SoftFail 3793 1.69 2.71 1.21 92 MAILING_LIST_MULTI 3735 2.87 2.67 2.97 93 RCVD_IN_VALIDITY_SAFE 3686 3.72 2.63 4.23 94 XM_URI_RBL 3668 1.09 2.62 0.37 95 XM_B_URI_Unicode 3649 2.28 2.61 2.12 96 HTML_IMAGE_RATIO_08 3538 2.32 2.53 2.22 97 XM_B_Phish66 3525 1.06 2.52 0.36 98 XM_SendGrid 3511 1.83 2.51 1.50 99 TM2_M_URI_OPT_OUT 3507 1.97 2.51 1.71 100 RELAYCOUNTRY_AU 3507 1.25 2.51 0.66 101 T_XMHurry_00 3481 1.40 2.49 0.88 102 XM_UB50 3419 1.52 2.44 1.08 103 FROM_EXCESS_BASE64 3304 1.88 2.36 1.66 104 URI_HEX 3245 1.68 2.32 1.38 105 T_XMDrugObfuBody_00 3242 1.40 2.32 0.97 106 RCVD_IN_VALIDITY_CERTIFIED 3168 3.13 2.26 3.54 107 T_TooManySym_01 3108 4.59 2.22 5.71 108 SpammyFromTLD_02 2950 1.00 2.11 0.48 109 RDNS_DYNAMIC 2907 0.91 2.08 0.36 110 TR_XM_INV_DKIM 2880 0.77 2.06 0.15 111 DIET_1 2879 0.85 2.06 0.28 112 PDS_RDNS_DYNAMIC_FP 2869 0.82 2.05 0.24 113 XM_B_SpammyWords4 2841 1.04 2.03 0.57 114 XMStockSpam_06 2783 1.52 1.99 1.29 115 USER_IN_DEF_DKIM_WL 2776 9.55 1.98 13.14 116 RCVD_IN_VALIDITY_RPBL 2752 0.70 1.97 0.10 117 XMLngstWrd_00 2643 0.97 1.89 0.54 118 TR_XM_NoHeaderRelay 2616 0.75 1.87 0.22 119 BAYES_40 2514 4.22 1.80 5.37 120 T_FILL_THIS_FORM_SHORT 2478 1.31 1.77 1.10 121 ALL_TRUSTED 2458 11.17 1.76 15.63 122 XMGenDplmaNmb 2445 1.21 1.75 0.95 123 XM_B_DNDMA 2383 0.85 1.70 0.44 124 XMLngstWrd_01 2383 0.85 1.70 0.44 125 XM_DK_Undo_01 2330 1.71 1.66 1.74 126 HTML_FONT_TINY_NORDNS 2229 0.59 1.59 0.11 127 SpammyFromTLD_01 2203 1.07 1.57 0.83 128 TM2_M_A_HREF_HREF 2171 0.73 1.55 0.34 129 TR_MetaPhish_Combo_01 2160 1.22 1.54 1.07 130 HTML_MIME_NO_HTML_TAG 2069 2.31 1.48 2.71 131 SUBJ_ALL_CAPS 2045 1.59 1.46 1.65 132 BAYES_00 2041 8.26 1.46 11.49 133 SHORTCIRCUIT 2032 0.47 1.45 0.00 134 RCVD_IN_ZEN_LASTEXTERNAL 2032 0.47 1.45 0.00 135 XMBody_78 1976 0.76 1.41 0.45 136 XMBrknScrpt_02 1961 1.04 1.40 0.87 137 XMLngstWrd_02 1954 0.68 1.40 0.34 138 LOADSA_MONEY_COMBO 1951 0.50 1.39 0.08 139 XMBdyGiftCard01 1921 0.89 1.37 0.67 140 URI_TRY_3LD 1912 0.78 1.37 0.50 141 XFER_LOTSA_MONEY 1902 0.45 1.36 0.02 142 SHOPIFY_IMG_NOT_RCVD_SFY 1899 0.64 1.36 0.30 143 BAYES_20 1883 3.06 1.35 3.87 144 XM_DIRTYINTL 1875 0.49 1.34 0.09 145 XM_UCStrings02 1851 0.47 1.32 0.07 146 ADVANCE_FEE_2_NEW_MONEY 1847 0.43 1.32 0.01 147 MILLION_HUNDRED 1846 0.42 1.32 0.00 148 T_TVD_MIME_NO_HEADERS 1841 0.73 1.32 0.46 149 XMPhish30 1825 0.81 1.30 0.58 150 DKIM_ADSP_NXDOMAIN 1800 0.63 1.29 0.32 151 NA_DOLLARS 1787 0.41 1.28 0.00 152 XMClaimOffer 1785 0.49 1.28 0.12 153 XM_ProductURIs 1779 0.68 1.27 0.40 154 XM_B_COPY_HTML 1779 0.92 1.27 0.76 155 TM2_M_OBFU_COMMENT 1759 0.74 1.26 0.50 156 RELAYCOUNTRY_FR 1750 0.56 1.25 0.23 157 TR_XM_Base64_M1 1747 0.82 1.25 0.62 158 TR_XM_DK_Bayes 1744 5.34 1.25 7.29 159 T_REMOTE_IMAGE 1743 2.75 1.25 3.46 160 TR_XM_DK_Bayes1 1729 5.26 1.24 7.16 161 NO_DNS_FOR_FROM 1702 0.59 1.22 0.30 162 XM_Nigeria_01 1684 0.41 1.20 0.03 163 TR_XM_MaxWHORU 1677 0.54 1.20 0.23 164 HTTPS_HTTP_MISMATCH 1674 0.86 1.20 0.70 165 XMSexyCombo_01 1653 0.46 1.18 0.12 166 TR_XM_DK_Bayes2 1565 4.51 1.12 6.12 167 XM_H_Long_From02 1559 0.94 1.11 0.85 168 XMSubMetaSxObfu_03 1558 0.61 1.11 0.36 169 LongTLD 1555 0.59 1.11 0.34 170 THIS_AD 1550 0.67 1.11 0.46 171 MAY_BE_FORGED 1549 0.79 1.11 0.65 172 XMLngstWrd_03 1524 0.52 1.09 0.25 173 MPART_ALT_DIFF_COUNT 1523 0.66 1.09 0.45 174 XM_RXBody 1515 0.86 1.08 0.75 175 RCVD_IN_PSBL 1512 0.46 1.08 0.17 176 TR_XM_PHPForged 1510 0.64 1.08 0.44 177 TR_XM_FormFill2 1505 0.64 1.08 0.43 178 TR_XM_PHPDW 1498 0.64 1.07 0.43 179 URI_NOVOWEL 1471 1.47 1.05 1.67 180 XM_H_PHPOS 1467 0.62 1.05 0.42 181 XM_B_SEO 1429 0.44 1.02 0.17 182 TR_Symld_Words 1402 1.36 1.00 1.54 183 XMHTML_After_End 1400 0.59 1.00 0.40 184 XMSubMetaSSx_00 1300 0.41 0.93 0.17 185 TR_XM_RelayPhish 1296 0.35 0.93 0.08 186 FONT_INVIS_LONG_LINE 1296 0.37 0.93 0.10 187 RCVD_IN_IADB_LISTED 1290 2.94 0.92 3.90 188 T_STY_INVIS_DIRECT 1280 0.61 0.91 0.46 189 J_POPCORN_WO_D 1267 0.47 0.91 0.26 190 RCVD_IN_PBL 1265 0.74 0.90 0.66 191 DKIM_ADSP_CUSTOM_MED 1225 0.95 0.88 0.99 192 RCVD_IN_IADB_SPF 1217 2.60 0.87 3.42 193 HTML_TAG_BALANCE_BODY 1203 0.64 0.86 0.54 194 XMSlimDrugH 1195 0.58 0.85 0.45 195 RCVD_IN_IADB_SENDERID 1193 2.36 0.85 3.08 196 RCVD_IN_IADB_DK 1191 2.30 0.85 2.98 197 XMReplyNow 1166 0.41 0.83 0.21 198 XMLngstWrd_04 1160 0.40 0.83 0.20 199 XM_H_Undi_Recip 1156 0.39 0.83 0.19 200 HTML_FONT_FACE_BAD 1135 0.55 0.81 0.43 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 255530 88.62 92.98 86.55 2 RELAYCOUNTRY_US 240222 82.18 83.90 81.37 3 DKIM_SIGNED 223662 80.29 89.84 75.76 4 XM_DK_Pass 218456 77.42 84.65 73.99 5 DKIM_VALID 215543 76.53 83.95 73.01 6 XM_B_Unicode 210378 75.64 84.88 71.26 7 BAYES_50 180990 55.84 44.30 61.30 8 DCC_CHECK_NEGATIVE 178347 48.35 22.91 60.41 9 DKIM_VALID_AU 172366 60.57 65.20 58.38 10 XMListUnsubscribeExists 146201 56.00 69.67 49.52 11 XM_B_SpammyWords 130925 52.58 69.97 44.35 12 XM_B_Unicode3 122723 44.33 50.16 41.57 13 DCC_CHECK 116733 51.15 75.63 39.54 14 RCVD_IN_MSPIKE_H2 106923 37.65 40.67 36.22 15 T_TM2_M_HEADER_IN_MSG 88971 27.35 21.48 30.14 16 HTML_FONT_LOW_CONTRAST 85056 31.09 35.90 28.81 17 DKIM_VALID_EF 84885 29.68 31.64 28.75 18 LOC_TINY_FONT_1 83031 34.20 47.03 28.12 19 FVGT_m_MULTI_ODD 75467 27.65 32.07 25.56 20 XMSubLong 69380 24.42 26.36 23.50 21 T_KAM_HTML_FONT_INVALID 62534 24.37 31.09 21.18 22 MIME_HTML_ONLY 61898 22.89 26.96 20.97 23 XM_B_SpammyWords2 53923 25.43 40.54 18.26 24 ALL_TRUSTED 46143 11.17 1.76 15.63 25 XM_Multi_Part_URI 40873 16.17 21.07 13.84 26 USER_IN_DEF_DKIM_WL 38786 9.55 1.98 13.14 27 TR_XM_DK_Unsub 37815 15.79 22.08 12.81 28 UNPARSEABLE_RELAY 35975 13.45 16.12 12.19 29 BAYES_00 33914 8.26 1.46 11.49 30 XM_B_Unsub 28985 11.88 16.23 9.82 31 XM_B_PhoneNumber 28247 8.29 5.58 9.57 32 XM_Evil_Numbers_Gen 25897 9.26 10.29 8.77 33 TooManyTo_001 25806 7.00 3.32 8.74 34 LotsOfNums_01 23887 8.44 9.18 8.09 35 TR_XM_DK_Bayes 21513 5.34 1.25 7.29 36 FSL_BULK_SIG 21395 8.07 9.81 7.25 37 TR_XM_DK_Bayes1 21153 5.26 1.24 7.16 38 XM_DKIMWhitelistDomains 21124 4.90 0.16 7.16 39 TR_XM_BayesUnsub 20791 9.81 15.63 7.04 40 BAYES_60 20343 7.33 8.26 6.89 41 IN_ZIMBRA_NJ_WHITELIST 20008 4.63 0.11 6.78 42 LOTS_OF_MONEY 18430 9.36 15.94 6.24 43 TR_XM_DK_Bayes2 18074 4.51 1.12 6.12 44 XM_H_Long_From01 17784 5.73 5.13 6.02 45 T_TooManySym_01 16846 4.59 2.22 5.71 46 XM_H_GMP 16816 5.40 4.79 5.70 47 TR_MAX_INTL_RELAY 16060 8.23 14.12 5.44 48 BAYES_40 15851 4.22 1.80 5.37 49 XM_B_Phish_Phrases 15774 6.78 9.80 5.34 50 MIME_QP_LONG_LINE 15353 4.52 3.09 5.20 51 MPART_ALT_DIFF 14987 5.18 5.39 5.08 52 RCVD_IN_MSPIKE_WL 14869 4.79 4.28 5.04 53 RCVD_IN_MSPIKE_H3 14868 4.79 4.28 5.04 54 XM_DK_Undo_02 14697 15.93 39.04 4.98 55 HTML_IMAGE_RATIO_02 14250 5.15 5.84 4.83 56 XM_B_SpammyWords3 13571 7.86 14.76 4.60 57 XMSubMetaSx_00 13528 5.53 7.53 4.58 58 XMStrtUSub 13310 4.39 4.14 4.51 59 HTML_IMAGE_RATIO_04 13252 4.92 5.84 4.49 60 XM_PDF 13031 3.24 0.76 4.41 61 XM_UncommonTLD01 12599 4.65 5.46 4.27 62 RCVD_IN_VALIDITY_SAFE 12482 3.72 2.63 4.23 63 TR_XM_SpammyWords4 11876 6.61 12.08 4.02 64 RCVD_IN_IADB_LISTED 11508 2.94 0.92 3.90 65 BAYES_20 11423 3.06 1.35 3.87 66 ANY_BOUNCE_MESSAGE 11017 3.50 3.01 3.73 67 BOUNCE_MESSAGE 11017 3.50 3.01 3.73 68 RELAYCOUNTRY_META 10870 7.33 15.04 3.68 69 BOTNET_IPINHOSTNAME 10470 6.00 11.19 3.55 70 RCVD_IN_VALIDITY_CERTIFIED 10438 3.13 2.26 3.54 71 T_REMOTE_IMAGE 10203 2.75 1.25 3.46 72 BAYES_99 10192 10.99 26.90 3.45 73 TooManyTo_002 10105 2.49 0.53 3.42 74 RCVD_IN_IADB_SPF 10093 2.60 0.87 3.42 75 BAYES_80 10046 5.08 8.62 3.40 76 XMNumbers 9151 3.32 3.77 3.10 77 RCVD_IN_IADB_SENDERID 9087 2.36 0.85 3.08 78 T_TooManySym_02 9076 2.30 0.66 3.07 79 RCVD_IN_IADB_DK 8799 2.30 0.85 2.98 80 MAILING_LIST_MULTI 8770 2.87 2.67 2.97 81 MIME_HTML_ONLY_MULTI 8638 2.97 3.06 2.93 82 DKIM_INVALID 8119 3.76 5.89 2.75 83 HTML_IMAGE_RATIO_06 8117 3.09 3.81 2.75 84 XM_B_SpammyTLD 8041 3.29 4.49 2.72 85 HTML_MIME_NO_HTML_TAG 8001 2.31 1.48 2.71 86 XM_Body_Dirty_Words 7774 4.19 7.48 2.63 87 BAYES_999 7695 8.46 20.80 2.61 88 RCVD_IN_IADB_VOUCHED 7437 1.79 0.25 2.52 89 MIME_HTML_MOSTLY 7279 2.70 3.18 2.47 90 INVALID_MSGID 7091 1.74 0.33 2.40 91 XM_CamelCaseFrm001 6791 2.61 3.25 2.30 92 XMSexyCombo_05 6648 3.10 4.88 2.25 93 TR_XM_DKIM_Undo 6540 10.66 28.48 2.22 94 HTML_IMAGE_RATIO_08 6540 2.32 2.53 2.22 95 BAYES_05 6455 1.71 0.69 2.19 96 T_XMDrugObfuBody_14 6352 2.82 4.22 2.15 97 TO_MALFORMED 6270 1.45 0.03 2.12 98 XM_B_URI_Unicode 6258 2.28 2.61 2.12 99 BAYES_95 6004 3.04 5.17 2.03 100 TM2_M_VERY_LONG_WORD 5390 2.66 4.43 1.83 101 TR_XM_SpammyRelay 5382 4.88 11.33 1.82 102 RCVD_IN_IADB_OPTIN 5310 1.27 0.16 1.80 103 TooManyTo_003 5190 1.34 0.46 1.76 104 XM_DK_Undo_01 5127 1.71 1.66 1.74 105 TM2_M_URI_OPT_OUT 5055 1.97 2.51 1.71 106 XMDiploma_00 4968 2.18 3.22 1.68 107 URI_NOVOWEL 4923 1.47 1.05 1.67 108 FROM_EXCESS_BASE64 4887 1.88 2.36 1.66 109 SUBJ_ALL_CAPS 4882 1.59 1.46 1.65 110 KHOP_HELO_FCRDNS 4846 2.10 3.06 1.64 111 XM_B_Investor 4825 2.58 4.59 1.63 112 UNTRUSTED_Relay 4772 2.62 4.73 1.62 113 TR_XM_UnparsRelay 4629 3.58 7.83 1.57 114 BOTNET 4566 4.51 10.75 1.55 115 TR_Symld_Words 4535 1.36 1.00 1.54 116 TR_XM_PhishingBody 4522 2.77 5.39 1.53 117 XM_SendGrid 4441 1.83 2.51 1.50 118 IN_HORDE_ADDRESS_BOOK 4394 1.05 0.11 1.49 119 XMGappySubj_01 4299 1.04 0.16 1.46 120 TR_XM_SpammyWords5 4170 2.21 3.90 1.41 121 XM_B_Unsub2 4108 1.89 2.94 1.39 122 URI_HEX 4067 1.68 2.32 1.38 123 T_XMDrugObfuBody_08 3969 1.94 3.20 1.34 124 XM_GoogleGroups 3880 1.13 0.75 1.31 125 XMStockSpam_06 3811 1.52 1.99 1.29 126 T_TooManySym_03 3780 0.92 0.16 1.28 127 TooManyTo_004 3774 1.00 0.40 1.28 128 TVD_SPACE_RATIO 3727 0.92 0.19 1.26 129 TR_DCC_Bayes_99 3621 7.04 19.30 1.23 130 XM_SPF_SoftFail 3582 1.69 2.71 1.21 131 XM_OfRef6 3518 1.84 3.20 1.19 132 HELO_NODOT 3273 0.81 0.17 1.11 133 HELO_NO_DOMAIN 3262 0.80 0.17 1.10 134 T_FILL_THIS_FORM_SHORT 3236 1.31 1.77 1.10 135 XM_UB50 3195 1.52 2.44 1.08 136 XM_B_FormFill 3178 0.74 0.02 1.08 137 TR_MetaPhish_Combo_01 3152 1.22 1.54 1.07 138 TooManyTo_005 3111 0.83 0.37 1.05 139 XMCapTrack 3060 0.85 0.47 1.04 140 DKIM_ADSP_CUSTOM_MED 2911 0.95 0.88 0.99 141 T_XMDrugObfuBody_00 2866 1.40 2.32 0.97 142 TR_XM_DK_SendGrid 2857 0.91 0.79 0.97 143 FROM_GOV_DKIM_AU 2816 0.73 0.25 0.95 144 XMGenDplmaNmb 2812 1.21 1.75 0.95 145 HTML_IMAGE_ONLY_32 2762 0.68 0.13 0.94 146 RELAYCOUNTRY_CA 2752 2.88 6.97 0.93 147 T_XMHurry_00 2599 1.40 2.49 0.88 148 XMBrknScrpt_02 2574 1.04 1.40 0.87 149 XM_H_Long_From02 2521 0.94 1.11 0.85 150 XMGappySubj_02 2489 0.59 0.05 0.84 151 SpammyFromTLD_01 2443 1.07 1.57 0.83 152 XM_B_COPY_HTML 2243 0.92 1.27 0.76 153 XM_RXBody 2226 0.86 1.08 0.75 154 NML_ADSP_CUSTOM_MED 2201 0.71 0.65 0.75 155 XM_ShortIntro_01 2134 0.74 0.77 0.72 156 HTTPS_HTTP_MISMATCH 2071 0.86 1.20 0.70 157 FORGED_GMAIL_RCVD 1996 0.69 0.71 0.68 158 XMBdyGiftCard01 1969 0.89 1.37 0.67 159 XM_H_PHPMailer 1966 0.62 0.51 0.67 160 T_OBFU_PDF_ATTACH 1960 0.49 0.11 0.66 161 RCVD_IN_PBL 1937 0.74 0.90 0.66 162 RELAYCOUNTRY_AU 1934 1.25 2.51 0.66 163 XMNoVowels 1931 0.65 0.64 0.65 164 TVD_RCVD_IP 1924 0.65 0.63 0.65 165 MAY_BE_FORGED 1906 0.79 1.11 0.65 166 RCVD_IN_BL_SPAMCOP_NET 1891 4.16 11.60 0.64 167 TR_XM_Base64_M1 1823 0.82 1.25 0.62 168 T_Symld_Words_02 1818 0.57 0.47 0.62 169 XMPhish30 1710 0.81 1.30 0.58 170 XMDateMe_00 1705 0.54 0.47 0.58 171 XM_B_SpammyWords4 1681 1.04 2.03 0.57 172 HTML_TAG_BALANCE_BODY 1593 0.64 0.86 0.54 173 XMSubMetaI_00 1592 0.61 0.77 0.54 174 XMLngstWrd_00 1587 0.97 1.89 0.54 175 T_MANY_PILL_PRICE 1566 0.36 0.00 0.53 176 TO_NO_BRKTS_HTML_ONLY 1560 0.46 0.32 0.53 177 XMBody_17 1559 1.66 4.04 0.53 178 HTML_IMAGE_ONLY_20 1512 0.59 0.76 0.51 179 URI_TRY_3LD 1484 0.78 1.37 0.50 180 TM2_M_OBFU_COMMENT 1464 0.74 1.26 0.50 181 XMBody_95 1461 0.39 0.17 0.49 182 XMBSHREFv2 1431 0.44 0.34 0.48 183 RELAYCOUNTRY_GB 1415 0.58 0.78 0.48 184 SpammyFromTLD_02 1409 1.00 2.11 0.48 185 SUBJ_DOLLARS 1386 0.54 0.68 0.47 186 HELO_MISC_IP 1365 0.33 0.06 0.46 187 T_STY_INVIS_DIRECT 1357 0.61 0.91 0.46 188 THIS_AD 1354 0.67 1.11 0.46 189 T_TVD_MIME_NO_HEADERS 1345 0.73 1.32 0.46 190 XMSlimDrugH 1337 0.58 0.85 0.45 191 MPART_ALT_DIFF_COUNT 1336 0.66 1.09 0.45 192 XMBody_78 1316 0.76 1.41 0.45 193 XMLngstWrd_01 1312 0.85 1.70 0.44 194 XM_B_DNDMA 1301 0.85 1.70 0.44 195 TR_XM_PHPForged 1286 0.64 1.08 0.44 196 TR_XM_PHPDW 1284 0.64 1.07 0.43 197 HTML_FONT_FACE_BAD 1278 0.55 0.81 0.43 198 TR_XM_FormFill2 1274 0.64 1.08 0.43 199 XM_H_PHPOS 1252 0.62 1.05 0.42 200 PLING_QUERY 1248 0.53 0.77 0.42 ----------------------------------------------------------------------