Email: 700364 Autolearn: 0 AvgScore: 1.89 AvgScanTime: 2.15 sec Spam: 136065 Autolearn: 0 AvgScore: 13.56 AvgScanTime: 2.68 sec Ham: 564299 Autolearn: 0 AvgScore: -0.92 AvgScanTime: 2.02 sec Time Spent Running SA: 417.50 hours Time Spent Processing Spam: 101.23 hours Time Spent Processing Ham: 316.27 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 131916 91.65 96.95 90.37 2 DCC_CHECK 111870 52.49 82.22 45.32 3 XM_B_Unicode 99971 73.04 73.47 72.93 4 DKIM_SIGNED 96588 76.66 70.99 78.03 5 XM_DK_Pass 93382 75.31 68.63 76.92 6 DKIM_VALID 87681 71.72 64.44 73.48 7 XMListUnsubscribeExists 82517 56.82 60.65 55.90 8 DKIM_VALID_AU 68012 54.31 49.98 55.36 9 BAYES_50 63606 53.85 46.75 55.56 10 XM_B_Unicode3 62158 44.19 45.68 43.83 11 MIME_HTML_ONLY 55714 24.86 40.95 20.98 12 XM_DK_Undo_02 45650 11.90 33.55 6.68 13 HTML_FONT_LOW_CONTRAST 44626 29.85 32.80 29.14 14 LOC_TINY_FONT_1 44216 27.11 32.50 25.82 15 FVGT_m_MULTI_ODD 34367 22.67 25.26 22.05 16 XMSubLong 33037 21.80 24.28 21.20 17 FSL_BULK_SIG 31751 9.71 23.34 6.42 18 BAYES_99 31467 7.21 23.13 3.37 19 XM_UncommonTLD01 30893 7.22 22.70 3.48 20 T_KAM_HTML_FONT_INVALID 27333 18.90 20.09 18.61 21 DKIM_VALID_EF 27222 25.09 20.01 26.31 22 XM_Body_Dirty_Words 27215 15.04 20.00 13.84 23 RELAYCOUNTRY_META 26174 8.36 19.24 5.74 24 BOTNET 25934 5.50 19.06 2.24 25 XM_B_Unsub 25929 11.76 19.06 10.01 26 BOTNET_IPINHOSTNAME 25374 7.58 18.65 4.91 27 TR_DCC_Bayes_99 25305 4.89 18.60 1.59 28 BAYES_999 24469 5.71 17.98 2.75 29 XM_Multi_Part_URI 23404 13.49 17.20 12.60 30 MultiRelay 22323 17.71 16.41 18.03 31 T_TM2_M_HEADER_IN_MSG 22118 25.75 16.26 28.04 32 KHOP_HELO_FCRDNS 21798 4.65 16.02 1.91 33 DCC_CHECK_NEGATIVE 21753 45.51 15.99 52.63 34 XMSexyCombo_05 19873 6.30 14.61 4.29 35 HTML_IMAGE_RATIO_02 19758 9.96 14.52 8.86 36 SpammyFromTLD_02 17717 2.80 13.02 0.33 37 HTML_MIME_NO_HTML_TAG 16429 4.04 12.07 2.11 38 LOTS_OF_MONEY 16171 9.12 11.88 8.45 39 UNTRUSTED_Relay 15919 3.88 11.70 2.00 40 XM_Evil_Numbers_Gen 15877 10.33 11.67 10.01 41 XMSubMetaSx_00 15014 4.99 11.03 3.54 42 RDNS_DYNAMIC 14501 2.37 10.66 0.37 43 MPART_ALT_DIFF 13368 5.89 9.82 4.94 44 T_REMOTE_IMAGE 13294 5.19 9.77 4.09 45 RCVD_IN_MSPIKE_H2 13218 12.29 9.71 12.91 46 XM_H_Long_From01 13030 7.42 9.58 6.90 47 FROM_SUSPICIOUS_NTLD 12984 1.90 9.54 0.05 48 FROM_SUSPICIOUS_NTLD_FP 12888 1.88 9.47 0.05 49 DKIM_ADSP_NXDOMAIN 12435 2.48 9.14 0.88 50 HTML_SHORT_LINK_IMG_1 12338 1.78 9.07 0.02 51 T_XMDrugObfuBody_14 12149 8.77 8.93 8.74 52 TR_Mismatch_TLD_02 12145 1.80 8.93 0.09 53 LotsOfNums_01 10935 8.54 8.04 8.66 54 HTML_IMAGE_ONLY_08 10813 1.63 7.95 0.11 55 BAYES_80 10584 3.53 7.78 2.50 56 XM_SPF_SoftFail 10541 2.99 7.75 1.84 57 T_HTML_TAG_BALANCE_CENTER 10223 1.57 7.51 0.14 58 HTML_IMAGE_RATIO_04 9650 6.85 7.09 6.79 59 XMStrtUSub 9605 5.21 7.06 4.76 60 XM_UB50 9326 2.29 6.85 1.19 61 XM_B_Phish_Phrases 9310 6.49 6.84 6.41 62 FROM_MISSP_REPLYTO 9033 1.29 6.64 0.00 63 TO_NO_BRKTS_DYNIP 9026 1.29 6.63 0.00 64 DKIM_INVALID 8907 4.94 6.55 4.55 65 FROM_MISSP_DYNIP 8729 1.25 6.42 0.00 66 HDRS_MISSP 8668 1.24 6.37 0.00 67 SHORT_IMG_SUSP_NTLD 8645 1.23 6.35 0.00 68 BAYES_60 8569 5.33 6.30 5.09 69 TooManyTo_001 8112 7.48 5.96 7.84 70 MIME_HTML_MOSTLY 7868 3.48 5.78 2.93 71 XM_DIRTYINTL 7729 3.36 5.68 2.80 72 BODY_URI_ONLY 7717 1.16 5.67 0.07 73 MIME_HEADER_CTYPE_ONLY 7308 1.11 5.37 0.08 74 XM_BadFromFormat 7218 1.12 5.30 0.11 75 MIME_QP_LONG_LINE 6846 6.14 5.03 6.41 76 MIME_HTML_ONLY_MULTI 6825 3.32 5.02 2.91 77 XM_B_SpammyTLD 6624 2.73 4.87 2.22 78 RCVD_IN_MSPIKE_WL 6545 10.16 4.81 11.44 79 XMNumbers 6168 3.47 4.53 3.22 80 RCVD_IN_BL_SPAMCOP_NET 6079 1.80 4.47 1.15 81 BAYES_40 6079 5.28 4.47 5.48 82 HTML_IMAGE_RATIO_06 6027 4.33 4.43 4.30 83 XM_SendGrid 5943 6.13 4.37 6.56 84 RCVD_IN_MSPIKE_H3 5871 9.81 4.31 11.14 85 BAYES_95 5545 1.98 4.08 1.47 86 TM2_M_URI_OPT_OUT 5374 2.62 3.95 2.30 87 XM_CamelCaseFrm001 5292 2.76 3.89 2.49 88 HDRS_LCASE_IMGONLY 5128 0.77 3.77 0.04 89 URI_HEX 5021 2.30 3.69 1.97 90 FROM_EXCESS_BASE64 4701 3.34 3.45 3.31 91 RELAYCOUNTRY_CA 4657 1.98 3.42 1.63 92 BAYES_20 4470 4.17 3.29 4.39 93 RELAYCOUNTRY_GB 4466 1.36 3.28 0.90 94 XM_URI_RBL 4431 0.88 3.26 0.31 95 T_XMHurry_00 4299 1.67 3.16 1.31 96 RCVD_IN_RP_RNBL 4241 0.68 3.12 0.09 97 XM_OfRef6 4215 1.71 3.10 1.37 98 XMHTML_After_End 4132 1.92 3.04 1.66 99 HTML_IMAGE_RATIO_08 4131 2.75 3.04 2.69 100 XMSubMetaSSx_00 3964 0.75 2.91 0.23 101 REPLYTO_WITHOUT_TO_CC 3884 0.59 2.85 0.04 102 SpammyFromTLD_01 3733 1.15 2.74 0.77 103 XM_B_Unsub2 3555 2.00 2.61 1.86 104 XMMoneyMeta_00 3514 0.92 2.58 0.52 105 TO_EQ_FM_DOM_HTML_IMG 3384 0.49 2.49 0.01 106 RELAYCOUNTRY_FR 3332 0.82 2.45 0.43 107 XMSexyCombo_01 3305 0.92 2.43 0.55 108 MultiRelay_Combo 3271 0.68 2.40 0.26 109 MultiRelay_CC 3271 0.68 2.40 0.26 110 RCVD_IN_PSBL 3205 0.48 2.36 0.03 111 T_MONEY_PERCENT 3163 0.84 2.32 0.48 112 TR_LOTS_OF_MONEY2 3163 0.84 2.32 0.48 113 URI_TRY_3LD 3147 1.40 2.31 1.18 114 TR_XM_DK_SendGrid 3124 3.22 2.30 3.45 115 XMStockSpam_06 3084 1.44 2.27 1.25 116 NO_DNS_FOR_FROM 3035 1.60 2.23 1.44 117 XMDiploma_00 2980 1.68 2.19 1.55 118 XMPhish11 2970 1.33 2.18 1.12 119 HK_RANDOM_FROM 2934 0.53 2.16 0.14 120 T_TooManySym_01 2907 4.32 2.14 4.84 121 RCVD_IN_MSPIKE_BL 2902 1.72 2.13 1.62 122 T_XMDrugObfuBody_08 2894 1.48 2.13 1.32 123 MISSING_HEADERS 2863 0.83 2.10 0.53 124 BAYES_00 2758 15.78 2.03 19.10 125 HTML_IMAGE_ONLY_20 2750 0.74 2.02 0.43 126 RCVD_IN_IADB_LISTED 2701 4.79 1.99 5.47 127 TM2_M_VERY_LONG_WORD 2683 1.51 1.97 1.40 128 LongTLD 2659 0.54 1.95 0.20 129 BAYES_05 2658 2.59 1.95 2.74 130 HTML_SHORT_LINK_IMG_3 2569 0.42 1.89 0.07 131 XMBody_17 2557 0.97 1.88 0.75 132 RCVD_IN_IADB_SPF 2532 4.21 1.86 4.78 133 TR_XM_INV_DKIM 2499 0.46 1.84 0.13 134 RCVD_IN_IADB_SENDERID 2489 3.75 1.83 4.21 135 RCVD_IN_IADB_DK 2489 3.69 1.83 4.14 136 TR_XM_PHPDW 2483 1.22 1.82 1.07 137 BOTNET_NORDNS 2467 0.40 1.81 0.06 138 TR_XM_PHPForged 2452 1.20 1.80 1.06 139 TR_XM_FormFill2 2435 1.19 1.79 1.05 140 XM_H_PHPOS 2431 1.19 1.79 1.05 141 XMSubMetaI_00 2428 1.10 1.78 0.93 142 SUBJ_ALL_CAPS 2317 1.48 1.70 1.42 143 XM_DK_Undo_01 2292 1.70 1.68 1.71 144 RCVD_IN_RP_SAFE 2248 9.13 1.65 10.93 145 TR_XM_RelayPhish 2228 1.32 1.64 1.25 146 XMGenDplmaNmb 2222 1.06 1.63 0.92 147 DIET_1 2147 0.80 1.58 0.62 148 T_XMDrugObfuBody_00 2127 0.95 1.56 0.80 149 XMBdyGiftCard01 1976 1.49 1.45 1.50 150 TO_NO_BRKTS_FROM_MSSP 1962 0.29 1.44 0.02 151 T_Symld_Words_02 1890 0.96 1.39 0.86 152 UNPARSEABLE_RELAY 1889 1.95 1.39 2.08 153 ALL_TRUSTED 1872 10.39 1.38 12.56 154 NORDNS_LOW_CONTRAST 1844 0.27 1.36 0.01 155 DATE_IN_PAST_03_06 1843 0.39 1.35 0.15 156 MAILING_LIST_MULTI 1832 2.16 1.35 2.35 157 XM_ProductURIs 1799 0.99 1.32 0.91 158 T_FILL_THIS_FORM_SHORT 1795 0.86 1.32 0.75 159 XM_H_PHPMailer 1769 0.65 1.30 0.49 160 RCVD_IN_RP_CERTIFIED 1753 8.03 1.29 9.66 161 TR_XM_DK_Bayes 1742 11.82 1.28 14.36 162 XMBrknScrpt_02 1741 1.04 1.28 0.99 163 RELAYCOUNTRY_DE 1720 0.70 1.26 0.56 164 HTML_IMAGE_ONLY_12 1710 0.39 1.26 0.18 165 THIS_AD 1577 0.67 1.16 0.55 166 TR_LOTS_OF_MONEY3 1572 0.81 1.16 0.73 167 FSL_THIS_IS_ADV 1539 0.49 1.13 0.34 168 SUBJ_ILLEGAL_CHARS 1536 0.23 1.13 0.01 169 SUBJECT_NEEDS_ENCODING 1535 0.23 1.13 0.01 170 TR_XM_DK_Bayes1 1525 11.25 1.12 13.69 171 XMPhish30 1519 0.69 1.12 0.59 172 HTML_FONT_FACE_BAD 1495 1.13 1.10 1.13 173 SUBJ_DOLLARS 1485 0.58 1.09 0.46 174 TR_Symld_Words 1478 1.49 1.09 1.59 175 RCVD_IN_MSPIKE_L5 1408 0.53 1.03 0.41 176 TR_Mismatch_TLD_01 1339 0.42 0.98 0.28 177 XMSexyCombo_04 1338 0.28 0.98 0.11 178 URIBL_DBL_SPAM 1309 0.21 0.96 0.02 179 FVGT_m_MULTI_ODD_EMAIL 1305 0.20 0.96 0.02 180 XM_UB99 1297 0.19 0.95 0.01 181 XM_H_Long_From02 1293 1.14 0.95 1.19 182 RELAYCOUNTRY_PL 1276 0.21 0.94 0.04 183 XM_SPF_Unknown 1261 0.72 0.93 0.67 184 XMPhish14 1237 0.59 0.91 0.52 185 HK_RANDOM_REPLYTO 1209 0.38 0.89 0.26 186 HTML_IMAGE_ONLY_32 1198 0.48 0.88 0.38 187 XMHTMLBadTable_001 1174 0.72 0.86 0.68 188 TR_MetaPhish_Combo_01 1160 1.17 0.85 1.25 189 RELAYCOUNTRY_AT 1151 0.40 0.85 0.30 190 FORM_FRAUD_5 1133 0.16 0.83 0.00 191 XM_H_PHPOS_M 1129 0.29 0.83 0.16 192 FROM_LOCAL_NOVOWEL 1099 0.18 0.81 0.03 193 XMBody_78 1098 0.51 0.81 0.44 194 LOW_PRICE 1054 0.31 0.77 0.20 195 TooManyTo_002 1050 1.66 0.77 1.87 196 XMSubMetaSxObfu_03 1049 0.53 0.77 0.47 197 LONG_HEX_URI 1037 0.34 0.76 0.24 198 XM_UB60 1011 0.21 0.74 0.08 199 RCVD_IN_MSPIKE_L4 998 0.66 0.73 0.64 200 XM_OfRef7 971 0.26 0.71 0.15 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 509969 91.65 96.95 90.37 2 DKIM_SIGNED 440339 76.66 70.99 78.03 3 XM_DK_Pass 434039 75.31 68.63 76.92 4 DKIM_VALID 414647 71.72 64.44 73.48 5 XM_B_Unicode 411555 73.04 73.47 72.93 6 XMListUnsubscribeExists 315441 56.82 60.65 55.90 7 BAYES_50 313520 53.85 46.75 55.56 8 DKIM_VALID_AU 312385 54.31 49.98 55.36 9 DCC_CHECK_NEGATIVE 297000 45.51 15.99 52.63 10 DCC_CHECK 255742 52.49 82.22 45.32 11 XM_B_Unicode3 247339 44.19 45.68 43.83 12 HTML_FONT_LOW_CONTRAST 164464 29.85 32.80 29.14 13 T_TM2_M_HEADER_IN_MSG 158223 25.75 16.26 28.04 14 DKIM_VALID_EF 148477 25.09 20.01 26.31 15 LOC_TINY_FONT_1 145676 27.11 32.50 25.82 16 FVGT_m_MULTI_ODD 124414 22.67 25.26 22.05 17 XMSubLong 119625 21.80 24.28 21.20 18 MIME_HTML_ONLY 118404 24.86 40.95 20.98 19 BAYES_00 107778 15.78 2.03 19.10 20 T_KAM_HTML_FONT_INVALID 105027 18.90 20.09 18.61 21 MultiRelay 101743 17.71 16.41 18.03 22 TR_XM_DK_Bayes 81024 11.82 1.28 14.36 23 XM_Body_Dirty_Words 78089 15.04 20.00 13.84 24 TR_XM_DK_Bayes1 77241 11.25 1.12 13.69 25 RCVD_IN_MSPIKE_H2 72860 12.29 9.71 12.91 26 XM_Multi_Part_URI 71095 13.49 17.20 12.60 27 ALL_TRUSTED 70877 10.39 1.38 12.56 28 TR_XM_DK_Bayes2 67085 9.69 0.58 11.89 29 RCVD_IN_MSPIKE_WL 64583 10.16 4.81 11.44 30 RCVD_IN_MSPIKE_H3 62860 9.81 4.31 11.14 31 RCVD_IN_RP_SAFE 61692 9.13 1.65 10.93 32 XM_Evil_Numbers_Gen 56497 10.33 11.67 10.01 33 XM_B_Unsub 56462 11.76 19.06 10.01 34 RCVD_IN_RP_CERTIFIED 54517 8.03 1.29 9.66 35 HTML_IMAGE_RATIO_02 50018 9.96 14.52 8.86 36 T_XMDrugObfuBody_14 49293 8.77 8.93 8.74 37 LotsOfNums_01 48844 8.54 8.04 8.66 38 LOTS_OF_MONEY 47706 9.12 11.88 8.45 39 TooManyTo_001 44242 7.48 5.96 7.84 40 XM_DKIMWhitelistDomains 43794 6.26 0.02 7.76 41 XM_H_Long_From01 38912 7.42 9.58 6.90 42 HTML_IMAGE_RATIO_04 38316 6.85 7.09 6.79 43 XM_DK_Undo_02 37693 11.90 33.55 6.68 44 XM_SendGrid 37015 6.13 4.37 6.56 45 FSL_BULK_SIG 36223 9.71 23.34 6.42 46 MIME_QP_LONG_LINE 36190 6.14 5.03 6.41 47 XM_B_Phish_Phrases 36145 6.49 6.84 6.41 48 RELAYCOUNTRY_META 32376 8.36 19.24 5.74 49 BAYES_40 30906 5.28 4.47 5.48 50 RCVD_IN_IADB_LISTED 30878 4.79 1.99 5.47 51 BAYES_60 28728 5.33 6.30 5.09 52 MPART_ALT_DIFF 27858 5.89 9.82 4.94 53 BOTNET_IPINHOSTNAME 27730 7.58 18.65 4.91 54 T_TooManySym_01 27331 4.32 2.14 4.84 55 RCVD_IN_IADB_SPF 26973 4.21 1.86 4.78 56 XMStrtUSub 26867 5.21 7.06 4.76 57 DKIM_INVALID 25692 4.94 6.55 4.55 58 BAYES_20 24770 4.17 3.29 4.39 59 HTML_IMAGE_RATIO_06 24278 4.33 4.43 4.30 60 XMSexyCombo_05 24223 6.30 14.61 4.29 61 RCVD_IN_IADB_SENDERID 23760 3.75 1.83 4.21 62 RCVD_IN_IADB_DK 23345 3.69 1.83 4.14 63 T_REMOTE_IMAGE 23080 5.19 9.77 4.09 64 XM_PDF 21829 3.25 0.67 3.87 65 IN_ZIMBRA_NJ_WHITELIST 20005 2.86 0.02 3.55 66 XMSubMetaSx_00 19967 4.99 11.03 3.54 67 XM_UncommonTLD01 19639 7.22 22.70 3.48 68 RCVD_IN_IADB_VOUCHED 19501 2.88 0.51 3.46 69 TR_XM_DK_SendGrid 19447 3.22 2.30 3.45 70 BAYES_99 19013 7.21 23.13 3.37 71 FROM_EXCESS_BASE64 18663 3.34 3.45 3.31 72 XMNumbers 18166 3.47 4.53 3.22 73 MIME_HTML_MOSTLY 16526 3.48 5.78 2.93 74 MIME_HTML_ONLY_MULTI 16429 3.32 5.02 2.91 75 XM_DIRTYINTL 15813 3.36 5.68 2.80 76 BAYES_999 15504 5.71 17.98 2.75 77 BAYES_05 15472 2.59 1.95 2.74 78 HTML_IMAGE_RATIO_08 15163 2.75 3.04 2.69 79 BAYES_80 14129 3.53 7.78 2.50 80 XM_CamelCaseFrm001 14056 2.76 3.89 2.49 81 XM_H_Trusted_IP 13528 1.93 0.00 2.40 82 MAILING_LIST_MULTI 13272 2.16 1.35 2.35 83 TM2_M_URI_OPT_OUT 13002 2.62 3.95 2.30 84 BOTNET 12613 5.50 19.06 2.24 85 XM_B_SpammyTLD 12525 2.73 4.87 2.22 86 RCVD_IN_IADB_OPTIN 12241 1.81 0.32 2.17 87 HTML_MIME_NO_HTML_TAG 11889 4.04 12.07 2.11 88 T_TooManySym_02 11775 1.79 0.59 2.09 89 UNPARSEABLE_RELAY 11760 1.95 1.39 2.08 90 UNTRUSTED_Relay 11262 3.88 11.70 2.00 91 URI_HEX 11096 2.30 3.69 1.97 92 KHOP_HELO_FCRDNS 10756 4.65 16.02 1.91 93 TooManyTo_002 10560 1.66 0.77 1.87 94 XM_B_Unsub2 10481 2.00 2.61 1.86 95 XM_SPF_SoftFail 10409 2.99 7.75 1.84 96 TVD_RCVD_IP 10280 1.54 0.38 1.82 97 ANY_BOUNCE_MESSAGE 9785 1.49 0.49 1.73 98 BOUNCE_MESSAGE 9783 1.49 0.49 1.73 99 XM_DK_Undo_01 9643 1.70 1.68 1.71 100 XMHTML_After_End 9341 1.92 3.04 1.66 101 RELAYCOUNTRY_CA 9176 1.98 3.42 1.63 102 RCVD_IN_MSPIKE_BL 9156 1.72 2.13 1.62 103 TR_Symld_Words 8986 1.49 1.09 1.59 104 TR_DCC_Bayes_99 8960 4.89 18.60 1.59 105 XMDiploma_00 8761 1.68 2.19 1.55 106 XMBdyGiftCard01 8466 1.49 1.45 1.50 107 IN_HORDE_ADDRESS_BOOK 8383 1.20 0.03 1.49 108 BAYES_95 8304 1.98 4.08 1.47 109 NO_DNS_FOR_FROM 8138 1.60 2.23 1.44 110 SUBJ_ALL_CAPS 8033 1.48 1.70 1.42 111 TM2_M_VERY_LONG_WORD 7914 1.51 1.97 1.40 112 XM_OfRef6 7735 1.71 3.10 1.37 113 HELO_NODOT 7555 1.19 0.56 1.34 114 HELO_NO_DOMAIN 7551 1.19 0.55 1.34 115 CK_HELO_DYNAMIC_SPLIT_IP 7525 1.13 0.28 1.33 116 HELO_DYNAMIC_IPADDR2 7521 1.08 0.06 1.33 117 T_XMDrugObfuBody_08 7463 1.48 2.13 1.32 118 INVALID_MSGID 7431 1.11 0.23 1.32 119 T_XMHurry_00 7375 1.67 3.16 1.31 120 TR_MetaPhish_Combo_01 7037 1.17 0.85 1.25 121 XMStockSpam_06 7026 1.44 2.27 1.25 122 TR_XM_RelayPhish 7026 1.32 1.64 1.25 123 TooManyTo_003 6984 1.12 0.63 1.24 124 XM_H_Long_From02 6723 1.14 0.95 1.19 125 XM_UB50 6720 2.29 6.85 1.19 126 URI_TRY_3LD 6650 1.40 2.31 1.18 127 XMCapTrack 6633 1.01 0.33 1.18 128 TO_MALFORMED 6601 0.95 0.03 1.17 129 RCVD_IN_BL_SPAMCOP_NET 6499 1.80 4.47 1.15 130 XM_GoogleGroups 6426 0.99 0.38 1.14 131 HTML_FONT_FACE_BAD 6390 1.13 1.10 1.13 132 XMPhish11 6330 1.33 2.18 1.12 133 TR_XM_PHPDW 6046 1.22 1.82 1.07 134 TR_XM_PHPForged 5960 1.20 1.80 1.06 135 XMSubNoVowel 5946 0.93 0.41 1.05 136 TR_XM_FormFill2 5932 1.19 1.79 1.05 137 XM_H_PHPOS 5913 1.19 1.79 1.05 138 XMGappySubj_01 5681 0.89 0.43 1.01 139 USER_IN_DEF_DKIM_WL 5644 0.81 0.00 1.00 140 XMBrknScrpt_02 5560 1.04 1.28 0.99 141 DKIM_ADSP_CUSTOM_MED 5273 0.88 0.67 0.93 142 XMSubMetaI_00 5263 1.10 1.78 0.93 143 XMGenDplmaNmb 5180 1.06 1.63 0.92 144 XM_ProductURIs 5141 0.99 1.32 0.91 145 RELAYCOUNTRY_GB 5058 1.36 3.28 0.90 146 TooManyTo_004 5019 0.82 0.52 0.89 147 DKIM_ADSP_NXDOMAIN 4947 2.48 9.14 0.88 148 T_Symld_Words_02 4834 0.96 1.39 0.86 149 XMBody_95 4683 0.71 0.19 0.83 150 T_XMDrugObfuBody_00 4503 0.95 1.56 0.80 151 SpammyFromTLD_01 4337 1.15 2.74 0.77 152 XMBody_17 4213 0.97 1.88 0.75 153 T_FILL_THIS_FORM_SHORT 4208 0.86 1.32 0.75 154 TooManyTo_005 4171 0.68 0.45 0.74 155 TR_LOTS_OF_MONEY3 4129 0.81 1.16 0.73 156 XMHTMLBadTable_001 3861 0.72 0.86 0.68 157 NML_ADSP_CUSTOM_MED 3797 0.63 0.48 0.67 158 XM_SPF_Unknown 3792 0.72 0.93 0.67 159 TO_NO_BRKTS_HTML_ONLY 3708 0.67 0.70 0.66 160 RCVD_IN_MSPIKE_L4 3620 0.66 0.73 0.64 161 URI_NOVOWEL 3597 0.61 0.47 0.64 162 HTML_TAG_BALANCE_BODY 3541 0.63 0.62 0.63 163 DIET_1 3472 0.80 1.58 0.62 164 T_TooManySym_03 3455 0.52 0.16 0.61 165 HTTPS_HTTP_MISMATCH 3419 0.61 0.63 0.61 166 XMNoVowels 3325 0.57 0.47 0.59 167 XMPhish30 3321 0.69 1.12 0.59 168 RCVD_IN_MSPIKE_L3 3237 0.53 0.36 0.57 169 RELAYCOUNTRY_DE 3186 0.70 1.26 0.56 170 XMLngstWrd_00 3180 0.55 0.51 0.56 171 XMSexyCombo_01 3115 0.92 2.43 0.55 172 THIS_AD 3088 0.67 1.16 0.55 173 XMLngstWrd_01 2982 0.52 0.48 0.53 174 FORGED_GMAIL_RCVD 2975 0.54 0.60 0.53 175 MISSING_HEADERS 2969 0.83 2.10 0.53 176 XMMoneyMeta_00 2929 0.92 2.58 0.52 177 XMPhish14 2921 0.59 0.91 0.52 178 XMSolicitRefs_0 2828 0.50 0.50 0.50 179 FROM_GOV_DKIM_AU 2804 0.43 0.15 0.50 180 XM_B_REG_HTML 2779 0.45 0.30 0.49 181 XM_H_PHPMailer 2774 0.65 1.30 0.49 182 FILL_THIS_FORM 2718 0.53 0.70 0.48 183 TR_LOTS_OF_MONEY2 2717 0.84 2.32 0.48 184 T_MONEY_PERCENT 2717 0.84 2.32 0.48 185 RELAYCOUNTRY_AU 2685 0.49 0.53 0.48 186 XM_ShortIntro_01 2677 0.42 0.17 0.47 187 USER_IN_WHITELIST 2672 0.38 0.00 0.47 188 T_OBFU_PDF_ATTACH 2666 0.41 0.15 0.47 189 XMSubMetaSxObfu_03 2663 0.53 0.77 0.47 190 AC_FROM_MANY_DOTS 2604 0.37 0.01 0.46 191 SUBJ_DOLLARS 2568 0.58 1.09 0.46 192 PLING_QUERY 2552 0.50 0.69 0.45 193 URIBL_CSS 2532 0.46 0.48 0.45 194 URIBL_CSS_A 2532 0.46 0.48 0.45 195 XMBody_78 2495 0.51 0.81 0.44 196 XM_RXBody 2461 0.41 0.33 0.44 197 HTML_IMAGE_ONLY_20 2452 0.74 2.02 0.43 198 RELAYCOUNTRY_FR 2409 0.82 2.45 0.43 199 XM_B_COPY_HTML 2369 0.46 0.61 0.42 200 FROM_GOV_SPOOF 2365 0.38 0.21 0.42 ----------------------------------------------------------------------