Email: 607382 Autolearn: 0 AvgScore: 1.91 AvgScanTime: 2.30 sec Spam: 134686 Autolearn: 0 AvgScore: 12.46 AvgScanTime: 3.51 sec Ham: 472696 Autolearn: 0 AvgScore: -1.09 AvgScanTime: 1.95 sec Time Spent Running SA: 387.28 hours Time Spent Processing Spam: 131.45 hours Time Spent Processing Ham: 255.83 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 124623 88.06 92.53 86.79 2 DKIM_SIGNED 109178 75.71 81.06 74.19 3 XM_DK_Pass 105099 74.13 78.03 73.01 4 RELAYCOUNTRY_US 102892 80.16 76.39 81.24 5 DCC_CHECK 99779 45.89 74.08 37.86 6 XM_B_Unicode 96412 68.34 71.58 67.42 7 XMListUnsubscribeExists 92838 52.97 68.93 48.43 8 DKIM_VALID 91036 68.37 67.59 68.60 9 DKIM_VALID_AU 66793 51.79 49.59 52.42 10 BAYES_50 65131 50.73 48.36 51.40 11 XM_B_Unicode3 59747 40.21 44.36 39.02 12 MIME_HTML_ONLY 46902 23.70 34.82 20.54 13 XM_DK_Undo_02 46453 13.03 34.49 6.92 14 HTML_FONT_LOW_CONTRAST 44483 27.84 33.03 26.37 15 LOC_TINY_FONT_1 43116 24.54 32.01 22.42 16 URIBL_RHS_DOB 40165 18.11 29.82 14.78 17 DKIM_VALID_EF 36047 26.21 26.76 26.05 18 XMSubLong 33947 21.34 25.20 20.24 19 FVGT_m_MULTI_ODD 33511 21.38 24.88 20.38 20 DCC_CHECK_NEGATIVE 32254 52.09 23.95 60.11 21 T_KAM_HTML_FONT_INVALID 30000 18.12 22.27 16.93 22 BAYES_99 29846 7.49 22.16 3.30 23 XM_Body_Dirty_Words 28392 14.85 21.08 13.07 24 RELAYCOUNTRY_META 27437 9.12 20.37 5.92 25 BOTNET 27095 6.63 20.12 2.79 26 T_TM2_M_HEADER_IN_MSG 26506 28.35 19.68 30.82 27 BAYES_999 23630 5.98 17.54 2.68 28 XM_Multi_Part_URI 22953 12.51 17.04 11.22 29 TR_DCC_Bayes_99 21865 5.04 16.23 1.85 30 UNTRUSTED_Relay 20986 4.85 15.58 1.79 31 XM_UncommonTLD01 20293 6.72 15.07 4.34 32 DKIM_INVALID 18142 7.34 13.47 5.59 33 BOTNET_IPINHOSTNAME 17869 6.16 13.27 4.14 34 FSL_BULK_SIG 16447 8.11 12.21 6.94 35 XM_B_Unsub 15882 10.50 11.79 10.13 36 LOTS_OF_MONEY 15066 9.36 11.19 8.84 37 XM_Evil_Numbers_Gen 15016 9.12 11.15 8.54 38 HTML_IMAGE_RATIO_02 14407 8.01 10.70 7.25 39 LotsOfNums_01 13766 7.96 10.22 7.31 40 XMSexyCombo_05 13461 5.38 9.99 4.07 41 NO_DNS_FOR_FROM 13072 4.46 9.71 2.96 42 XM_B_Phish_Phrases 12057 7.42 8.95 6.98 43 XM_UB50 11726 2.71 8.71 1.00 44 MPART_ALT_DIFF 10743 4.97 7.98 4.12 45 TooManyTo_001 10494 8.58 7.79 8.81 46 RCVD_IN_MSPIKE_H2 10451 9.93 7.76 10.54 47 BAYES_80 9722 3.24 7.22 2.11 48 BAYES_60 9671 5.10 7.18 4.50 49 XM_SPF_SoftFail 9246 3.22 6.86 2.18 50 XMNumbers 8920 4.31 6.62 3.65 51 KHOP_HELO_FCRDNS 8559 3.19 6.35 2.29 52 XMSubMetaSx_00 8431 4.07 6.26 3.44 53 HTML_IMAGE_RATIO_04 8150 5.59 6.05 5.46 54 XM_H_Long_From01 8126 5.62 6.03 5.51 55 XM_CamelCaseFrm001 7981 2.79 5.93 1.90 56 MIME_QP_LONG_LINE 7945 5.27 5.90 5.09 57 T_REMOTE_IMAGE 7122 4.29 5.29 4.01 58 XM_SendGrid 6921 5.87 5.14 6.08 59 XM_B_SpammyTLD 6843 2.58 5.08 1.87 60 SpammyFromTLD_02 6786 1.31 5.04 0.25 61 PDS_OTHER_BAD_TLD 6768 1.51 5.03 0.51 62 HTML_MIME_NO_HTML_TAG 6699 3.33 4.97 2.87 63 BODY_URI_ONLY 6634 1.16 4.93 0.09 64 MIME_HTML_MOSTLY 6555 2.71 4.87 2.09 65 RELAYCOUNTRY_CA 5750 2.21 4.27 1.63 66 FROM_SUSPICIOUS_NTLD 5452 0.94 4.05 0.05 67 RCVD_IN_BL_SPAMCOP_NET 5399 1.61 4.01 0.93 68 FROM_SUSPICIOUS_NTLD_FP 5251 0.90 3.90 0.04 69 RDNS_DYNAMIC 5239 1.09 3.89 0.29 70 TR_Mismatch_TLD_02 5231 0.90 3.88 0.05 71 BAYES_40 5201 5.71 3.86 6.24 72 RCVD_IN_MSPIKE_BL 5134 1.57 3.81 0.93 73 MIME_HTML_ONLY_MULTI 4893 2.85 3.63 2.62 74 BAYES_95 4825 1.76 3.58 1.24 75 FROM_MISSP_REPLYTO 4810 0.80 3.57 0.01 76 RCVD_IN_RP_RNBL 4726 0.87 3.51 0.11 77 URI_HEX 4660 1.68 3.46 1.18 78 TR_XM_PHPDW 4637 2.17 3.44 1.80 79 TR_XM_PHPForged 4624 2.16 3.43 1.79 80 TM2_M_URI_OPT_OUT 4612 2.66 3.42 2.44 81 XMStrtUSub 4591 4.07 3.41 4.26 82 TR_XM_FormFill2 4589 2.15 3.41 1.79 83 XM_H_PHPOS 4583 2.14 3.40 1.78 84 RELAYCOUNTRY_FR 4523 1.01 3.36 0.35 85 TR_XM_INV_DKIM 4397 0.80 3.26 0.10 86 SpammyFromTLD_01 4369 2.17 3.24 1.87 87 XM_BadFromFormat 4335 0.79 3.22 0.10 88 BOTNET_NORDNS 4335 0.77 3.22 0.07 89 XMHTML_After_End 4334 1.29 3.22 0.74 90 HTML_IMAGE_RATIO_06 4314 2.99 3.20 2.93 91 RCVD_IN_MSPIKE_H3 4295 8.23 3.19 9.67 92 RCVD_IN_MSPIKE_WL 4295 8.23 3.19 9.67 93 XM_DIRTYINTL 4291 1.18 3.19 0.61 94 HTML_IMAGE_ONLY_08 4258 0.82 3.16 0.15 95 T_XMDrugObfuBody_08 4183 1.82 3.11 1.45 96 FROM_EXCESS_BASE64 4125 3.09 3.06 3.10 97 BAYES_20 4010 4.68 2.98 5.16 98 FROM_MISSP_DYNIP 3908 0.64 2.90 0.00 99 XM_URI_RBL 3747 0.77 2.78 0.20 100 BAYES_00 3714 17.94 2.76 22.27 101 XMDiploma_00 3703 2.04 2.75 1.84 102 ALL_TRUSTED 3643 12.30 2.70 15.04 103 T_TooManySym_01 3573 4.33 2.65 4.81 104 HTML_IMAGE_RATIO_08 3533 2.47 2.62 2.43 105 RCVD_IN_IADB_LISTED 3492 4.19 2.59 4.65 106 T_XMDrugObfuBody_14 3463 1.76 2.57 1.52 107 XM_B_Unsub2 3459 2.35 2.57 2.28 108 XM_OfRef6 3427 1.76 2.54 1.54 109 TR_Symld_Words 3397 1.86 2.52 1.67 110 DATE_IN_PAST_03_06 3392 0.64 2.52 0.11 111 SUBJ_ALL_CAPS 3359 2.06 2.49 1.94 112 HTML_TAG_BALANCE_CENTER 3333 0.60 2.47 0.07 113 RCVD_IN_IADB_SPF 3327 3.63 2.47 3.96 114 HTML_SHORT_LINK_IMG_1 3288 0.56 2.44 0.03 115 RCVD_IN_IADB_DK 3275 3.16 2.43 3.37 116 RCVD_IN_IADB_SENDERID 3272 3.22 2.43 3.44 117 HDRS_LCASE_IMGONLY 3146 0.55 2.34 0.05 118 TR_XM_DK_Bayes 2991 12.83 2.22 15.85 119 XMCapTrack 2965 1.61 2.20 1.45 120 NO_FM_NAME_IP_HOSTN 2961 0.49 2.20 0.00 121 XM_UB99 2938 0.49 2.18 0.00 122 TR_XM_DK_SendGrid 2854 3.10 2.12 3.37 123 XMSexyCombo_01 2826 0.94 2.10 0.61 124 RCVD_IN_MSPIKE_L3 2777 0.95 2.06 0.63 125 RCVD_IN_RP_SAFE 2731 7.49 2.03 9.04 126 XMSubMetaI_00 2698 1.11 2.00 0.86 127 XMGenDplmaNmb 2693 1.37 2.00 1.19 128 TM2_M_VERY_LONG_WORD 2556 1.39 1.90 1.25 129 XM_UB999 2432 0.40 1.81 0.00 130 XMEqualsVooDoo_00 2337 0.40 1.74 0.02 131 XM_DK_Undo_01 2332 1.82 1.73 1.85 132 TR_LOTS_OF_MONEY3 2318 0.75 1.72 0.47 133 XMEqualsVooDoo_01 2294 0.38 1.70 0.00 134 XMEqualsVooDoo_02 2293 0.38 1.70 0.00 135 XMEqualsVooDoo_03 2284 0.38 1.70 0.00 136 LOCALPART_IN_SUBJECT 2255 0.38 1.67 0.01 137 XMNoVowels 2253 1.37 1.67 1.28 138 BAYES_05 2247 3.19 1.67 3.62 139 T_Symld_Words_02 2189 0.92 1.63 0.72 140 DIET_1 2116 0.71 1.57 0.46 141 XMBody_17 2111 0.91 1.57 0.72 142 NORDNS_LOW_CONTRAST 2102 0.35 1.56 0.01 143 TR_XM_DK_Bayes1 2092 11.89 1.55 14.84 144 T_XMHurry_00 2092 0.77 1.55 0.55 145 RELAYCOUNTRY_GB 2052 1.38 1.52 1.34 146 LongTLD 2041 0.48 1.52 0.18 147 URIBL_SBL_A 2021 0.52 1.50 0.24 148 RELAYCOUNTRY_DE 1999 0.75 1.48 0.54 149 RCVD_IN_RP_CERTIFIED 1967 6.78 1.46 8.30 150 XMStockSpam_06 1949 1.12 1.45 1.03 151 RCVD_IN_PSBL 1947 0.35 1.45 0.04 152 XMPhish14 1928 0.58 1.43 0.34 153 MAILING_LIST_MULTI 1917 2.11 1.42 2.30 154 DKIM_ADSP_NXDOMAIN 1907 0.54 1.42 0.29 155 RELAYCOUNTRY_IN 1896 0.42 1.41 0.13 156 XM_H_TOP 1886 0.31 1.40 0.00 157 XMMoneyMeta_00 1808 0.71 1.34 0.53 158 XM_UB60 1774 0.36 1.32 0.08 159 UNPARSEABLE_RELAY 1772 1.95 1.32 2.13 160 XMBrknScrpt_02 1770 0.75 1.31 0.59 161 XMSlimDrugH 1759 0.63 1.31 0.44 162 XM_H_PHPMailer 1749 0.79 1.30 0.64 163 RCVD_IN_MSPIKE_L5 1699 0.30 1.26 0.03 164 XMPhish08 1665 0.64 1.24 0.47 165 TR_M_TOP_BAYES 1660 0.27 1.23 0.00 166 TR_XM_DK_Bayes2 1654 10.44 1.23 13.07 167 TR_Mismatch_TLD_01 1627 0.41 1.21 0.18 168 TR_XM_RelayPhish 1608 0.40 1.19 0.17 169 REMOVE_BEFORE_LINK 1572 0.49 1.17 0.29 170 URI_TRY_3LD 1539 1.44 1.14 1.52 171 T_XMDrugObfuBody_00 1536 0.75 1.14 0.63 172 MISSING_HEADERS 1524 0.81 1.13 0.72 173 DKIM_ADSP_CUSTOM_MED 1523 1.12 1.13 1.12 174 XM_ProductURIs 1483 0.69 1.10 0.57 175 XM_UB80 1470 0.25 1.09 0.01 176 XM_H_PHPOS_M 1457 0.43 1.08 0.24 177 XMPhish30 1391 0.79 1.03 0.72 178 PLING_QUERY 1380 0.79 1.02 0.72 179 FORGED_GMAIL_RCVD 1361 0.62 1.01 0.51 180 HTTPS_HTTP_MISMATCH 1357 0.73 1.01 0.65 181 XM_SPF_Unknown 1347 0.80 1.00 0.74 182 URIBL_ABUSE_SURBL 1346 0.28 1.00 0.07 183 TR_MetaPhish_Combo_01 1331 0.92 0.99 0.91 184 RELAYCOUNTRY_AT 1320 0.39 0.98 0.22 185 THIS_AD 1319 0.47 0.98 0.33 186 XM_H_Long_From02 1318 1.24 0.98 1.32 187 NML_ADSP_CUSTOM_MED 1310 0.87 0.97 0.85 188 DATE_IN_PAST_06_12 1262 0.25 0.94 0.06 189 TR_XM_MaxBayes 1255 0.21 0.93 0.01 190 FILL_THIS_FORM_SHORT 1223 0.48 0.91 0.36 191 T_MONEY_PERCENT 1218 0.39 0.90 0.25 192 TR_LOTS_OF_MONEY2 1218 0.39 0.90 0.25 193 MPART_ALT_DIFF_COUNT 1198 0.45 0.89 0.33 194 TM2_M_A_HREF_HREF 1159 0.39 0.86 0.26 195 XM_PDF 1117 4.55 0.83 5.61 196 URI_NOVOWEL 1111 0.43 0.82 0.32 197 XMBody_78 1111 0.34 0.82 0.20 198 XMHTMLBadTable_001 1080 0.59 0.80 0.54 199 XM_B_COPY_HTML 1077 0.44 0.80 0.33 200 XM_H_MailChimp 1071 0.28 0.80 0.14 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 410265 88.06 92.53 86.79 2 RELAYCOUNTRY_US 384008 80.16 76.39 81.24 3 DKIM_SIGNED 350691 75.71 81.06 74.19 4 XM_DK_Pass 345131 74.13 78.03 73.01 5 DKIM_VALID 324247 68.37 67.59 68.60 6 XM_B_Unicode 318672 68.34 71.58 67.42 7 DCC_CHECK_NEGATIVE 284150 52.09 23.95 60.11 8 DKIM_VALID_AU 247770 51.79 49.59 52.42 9 BAYES_50 242975 50.73 48.36 51.40 10 XMListUnsubscribeExists 228910 52.97 68.93 48.43 11 XM_B_Unicode3 184465 40.21 44.36 39.02 12 DCC_CHECK 178962 45.89 74.08 37.86 13 T_TM2_M_HEADER_IN_MSG 145665 28.35 19.68 30.82 14 HTML_FONT_LOW_CONTRAST 124636 27.84 33.03 26.37 15 DKIM_VALID_EF 123141 26.21 26.76 26.05 16 LOC_TINY_FONT_1 105958 24.54 32.01 22.42 17 BAYES_00 105256 17.94 2.76 22.27 18 MIME_HTML_ONLY 97075 23.70 34.82 20.54 19 FVGT_m_MULTI_ODD 96324 21.38 24.88 20.38 20 XMSubLong 95662 21.34 25.20 20.24 21 T_KAM_HTML_FONT_INVALID 80038 18.12 22.27 16.93 22 TR_XM_DK_Bayes 74911 12.83 2.22 15.85 23 ALL_TRUSTED 71084 12.30 2.70 15.04 24 TR_XM_DK_Bayes1 70138 11.89 1.55 14.84 25 URIBL_RHS_DOB 69844 18.11 29.82 14.78 26 XM_Body_Dirty_Words 61794 14.85 21.08 13.07 27 TR_XM_DK_Bayes2 61760 10.44 1.23 13.07 28 XM_Multi_Part_URI 53034 12.51 17.04 11.22 29 RCVD_IN_MSPIKE_H2 49838 9.93 7.76 10.54 30 XM_B_Unsub 47889 10.50 11.79 10.13 31 RCVD_IN_MSPIKE_H3 45710 8.23 3.19 9.67 32 RCVD_IN_MSPIKE_WL 45710 8.23 3.19 9.67 33 RCVD_IN_RP_SAFE 42755 7.49 2.03 9.04 34 LOTS_OF_MONEY 41808 9.36 11.19 8.84 35 TooManyTo_001 41638 8.58 7.79 8.81 36 XM_Evil_Numbers_Gen 40391 9.12 11.15 8.54 37 RCVD_IN_RP_CERTIFIED 39213 6.78 1.46 8.30 38 XM_DKIMWhitelistDomains 37774 6.23 0.06 7.99 39 LotsOfNums_01 34564 7.96 10.22 7.31 40 HTML_IMAGE_RATIO_02 34257 8.01 10.70 7.25 41 XM_B_Phish_Phrases 32986 7.42 8.95 6.98 42 FSL_BULK_SIG 32788 8.11 12.21 6.94 43 XM_DK_Undo_02 32719 13.03 34.49 6.92 44 BAYES_40 29488 5.71 3.86 6.24 45 XM_SendGrid 28749 5.87 5.14 6.08 46 RELAYCOUNTRY_META 27973 9.12 20.37 5.92 47 XM_PDF 26519 4.55 0.83 5.61 48 DKIM_INVALID 26444 7.34 13.47 5.59 49 XM_H_Long_From01 26026 5.62 6.03 5.51 50 HTML_IMAGE_RATIO_04 25807 5.59 6.05 5.46 51 BAYES_20 24387 4.68 2.98 5.16 52 MIME_QP_LONG_LINE 24043 5.27 5.90 5.09 53 T_TooManySym_01 22739 4.33 2.65 4.81 54 RCVD_IN_IADB_LISTED 21957 4.19 2.59 4.65 55 BAYES_60 21286 5.10 7.18 4.50 56 XM_UncommonTLD01 20493 6.72 15.07 4.34 57 XMStrtUSub 20153 4.07 3.41 4.26 58 BOTNET_IPINHOSTNAME 19567 6.16 13.27 4.14 59 MPART_ALT_DIFF 19459 4.97 7.98 4.12 60 XMSexyCombo_05 19225 5.38 9.99 4.07 61 IN_ZIMBRA_NJ_WHITELIST 19012 3.13 0.02 4.02 62 T_REMOTE_IMAGE 18957 4.29 5.29 4.01 63 RCVD_IN_IADB_SPF 18723 3.63 2.47 3.96 64 XMNumbers 17270 4.31 6.62 3.65 65 BAYES_05 17133 3.19 1.67 3.62 66 XMSubMetaSx_00 16271 4.07 6.26 3.44 67 RCVD_IN_IADB_SENDERID 16262 3.22 2.43 3.44 68 TR_XM_DK_SendGrid 15949 3.10 2.12 3.37 69 RCVD_IN_IADB_DK 15944 3.16 2.43 3.37 70 BAYES_99 15620 7.49 22.16 3.30 71 RCVD_IN_IADB_VOUCHED 15106 2.62 0.62 3.20 72 FROM_EXCESS_BASE64 14672 3.09 3.06 3.10 73 NO_DNS_FOR_FROM 14011 4.46 9.71 2.96 74 HTML_IMAGE_RATIO_06 13863 2.99 3.20 2.93 75 ANY_BOUNCE_MESSAGE 13599 2.40 0.73 2.88 76 BOUNCE_MESSAGE 13597 2.40 0.73 2.88 77 HTML_MIME_NO_HTML_TAG 13557 3.33 4.97 2.87 78 XM_H_Trusted_IP 13271 2.18 0.00 2.81 79 BOTNET 13190 6.63 20.12 2.79 80 BAYES_999 12681 5.98 17.54 2.68 81 MIME_HTML_ONLY_MULTI 12401 2.85 3.63 2.62 82 TooManyTo_002 11719 2.09 0.70 2.48 83 TM2_M_URI_OPT_OUT 11525 2.66 3.42 2.44 84 HTML_IMAGE_RATIO_08 11465 2.47 2.62 2.43 85 T_TooManySym_02 11307 2.02 0.70 2.39 86 MAILING_LIST_MULTI 10875 2.11 1.42 2.30 87 KHOP_HELO_FCRDNS 10840 3.19 6.35 2.29 88 XM_B_Unsub2 10793 2.35 2.57 2.28 89 XM_SPF_SoftFail 10297 3.22 6.86 2.18 90 UNPARSEABLE_RELAY 10073 1.95 1.32 2.13 91 BAYES_80 9984 3.24 7.22 2.11 92 MIME_HTML_MOSTLY 9898 2.71 4.87 2.09 93 RCVD_IN_IADB_OPTIN 9650 1.69 0.45 2.04 94 SUBJ_ALL_CAPS 9173 2.06 2.49 1.94 95 XM_CamelCaseFrm001 8968 2.79 5.93 1.90 96 HELO_NODOT 8855 1.63 0.79 1.87 97 XM_B_SpammyTLD 8826 2.58 5.08 1.87 98 HELO_NO_DOMAIN 8826 1.63 0.78 1.87 99 SpammyFromTLD_01 8826 2.17 3.24 1.87 100 XM_DK_Undo_01 8748 1.82 1.73 1.85 101 TR_DCC_Bayes_99 8731 5.04 16.23 1.85 102 XMDiploma_00 8684 2.04 2.75 1.84 103 TR_XM_PHPDW 8517 2.17 3.44 1.80 104 TR_XM_PHPForged 8466 2.16 3.43 1.79 105 UNTRUSTED_Relay 8449 4.85 15.58 1.79 106 TR_XM_FormFill2 8440 2.15 3.41 1.79 107 XM_H_PHPOS 8425 2.14 3.40 1.78 108 TooManyTo_003 8110 1.46 0.55 1.72 109 TR_Symld_Words 7908 1.86 2.52 1.67 110 TVD_RCVD_IP 7853 1.39 0.43 1.66 111 INVALID_MSGID 7826 1.34 0.25 1.66 112 IN_HORDE_ADDRESS_BOOK 7740 1.28 0.03 1.64 113 RELAYCOUNTRY_CA 7688 2.21 4.27 1.63 114 XMSubNoVowel 7325 1.31 0.48 1.55 115 XM_OfRef6 7261 1.76 2.54 1.54 116 T_XMDrugObfuBody_14 7206 1.76 2.57 1.52 117 URI_TRY_3LD 7197 1.44 1.14 1.52 118 TO_MALFORMED 7013 1.16 0.01 1.48 119 T_XMDrugObfuBody_08 6857 1.82 3.11 1.45 120 XMCapTrack 6842 1.61 2.20 1.45 121 RELAYCOUNTRY_GB 6334 1.38 1.52 1.34 122 CK_HELO_DYNAMIC_SPLIT_IP 6268 1.06 0.15 1.33 123 HELO_DYNAMIC_IPADDR2 6264 1.04 0.03 1.33 124 XM_H_Long_From02 6220 1.24 0.98 1.32 125 TooManyTo_004 6110 1.11 0.45 1.29 126 USER_IN_DEF_DKIM_WL 6071 1.00 0.01 1.28 127 XMNoVowels 6064 1.37 1.67 1.28 128 TM2_M_VERY_LONG_WORD 5886 1.39 1.90 1.25 129 BAYES_95 5848 1.76 3.58 1.24 130 XMGenDplmaNmb 5637 1.37 2.00 1.19 131 URI_HEX 5566 1.68 3.46 1.18 132 XM_GoogleGroups 5438 1.01 0.51 1.15 133 DKIM_ADSP_CUSTOM_MED 5289 1.12 1.13 1.12 134 TooManyTo_005 5033 0.92 0.42 1.06 135 XMGappySubj_01 4958 0.84 0.13 1.05 136 XMStockSpam_06 4872 1.12 1.45 1.03 137 XM_UB50 4718 2.71 8.71 1.00 138 XMBdyGiftCard01 4460 0.90 0.75 0.94 139 RCVD_IN_BL_SPAMCOP_NET 4392 1.61 4.01 0.93 140 RCVD_IN_MSPIKE_BL 4380 1.57 3.81 0.93 141 TR_MetaPhish_Combo_01 4286 0.92 0.99 0.91 142 HTML_FONT_FACE_BAD 4135 0.83 0.68 0.87 143 TR_MSPIKEBAYES00 4120 0.68 0.01 0.87 144 XMSubMetaI_00 4073 1.11 2.00 0.86 145 NML_ADSP_CUSTOM_MED 4004 0.87 0.97 0.85 146 XMBody_95 3867 0.66 0.11 0.82 147 XMHTML_After_End 3494 1.29 3.22 0.74 148 XM_SPF_Unknown 3482 0.80 1.00 0.74 149 PLING_QUERY 3426 0.79 1.02 0.72 150 XMBody_17 3417 0.91 1.57 0.72 151 XMPhish30 3404 0.79 1.03 0.72 152 MISSING_HEADERS 3400 0.81 1.13 0.72 153 T_Symld_Words_02 3383 0.92 1.63 0.72 154 XM_E_Blogspot 3305 0.57 0.10 0.70 155 T_OBFU_PDF_ATTACH 3132 0.55 0.16 0.66 156 T_FILL_THIS_FORM_SHORT 3119 0.67 0.69 0.66 157 HTTPS_HTTP_MISMATCH 3059 0.73 1.01 0.65 158 XM_H_PHPMailer 3020 0.79 1.30 0.64 159 T_XMDrugObfuBody_00 2992 0.75 1.14 0.63 160 RCVD_IN_MSPIKE_L3 2990 0.95 2.06 0.63 161 XM_B_REG_HTML 2938 0.60 0.53 0.62 162 XMSexyCombo_01 2893 0.94 2.10 0.61 163 XM_DIRTYINTL 2888 1.18 3.19 0.61 164 XM_ShortIntro_01 2876 0.57 0.42 0.61 165 FILL_THIS_FORM 2871 0.55 0.33 0.61 166 XMBrknScrpt_02 2803 0.75 1.31 0.59 167 XM_ProductURIs 2700 0.69 1.10 0.57 168 TM2_M_BODY_EMPTY 2631 0.51 0.36 0.56 169 T_XMHurry_00 2588 0.77 1.55 0.55 170 RELAYCOUNTRY_DE 2569 0.75 1.48 0.54 171 XMHTMLBadTable_001 2531 0.59 0.80 0.54 172 FROM_GOV_SPOOF 2512 0.48 0.28 0.53 173 XMMoneyMeta_00 2504 0.71 1.34 0.53 174 FROM_GOV_DKIM_AU 2457 0.43 0.11 0.52 175 FORGED_GMAIL_RCVD 2411 0.62 1.01 0.51 176 PDS_OTHER_BAD_TLD 2410 1.51 5.03 0.51 177 AC_DIV_BONANZA 2386 0.42 0.13 0.50 178 HTML_IMAGE_ONLY_32 2377 0.43 0.20 0.50 179 T_TooManySym_03 2366 0.45 0.27 0.50 180 SHORT_HELO_AND_INLINE_IMAGE 2366 0.40 0.06 0.50 181 USER_IN_WHITELIST 2364 0.39 0.00 0.50 182 XMLngstWrd_00 2339 0.52 0.59 0.49 183 HTML_IMAGE_ONLY_20 2337 0.44 0.26 0.49 184 GAPPY_SUBJECT 2283 0.39 0.05 0.48 185 TR_LOTS_OF_MONEY3 2228 0.75 1.72 0.47 186 XMPhish08 2208 0.64 1.24 0.47 187 FILL_THIS_FORM_LONG 2207 0.42 0.27 0.47 188 DIET_1 2173 0.71 1.57 0.46 189 RELAYCOUNTRY_AU 2169 0.48 0.55 0.46 190 XMLngstWrd_01 2142 0.47 0.53 0.45 191 T_FILL_THIS_FORM_LOAN 2105 0.38 0.16 0.45 192 XMSlimDrugH 2089 0.63 1.31 0.44 193 XMSubMetaSxObfu_03 2074 0.48 0.62 0.44 194 XMDateMe_00 2073 0.41 0.33 0.44 195 TR_Caps_n_Bayes_99 2038 0.41 0.32 0.43 196 HTML_IMAGE_ONLY_28 2022 0.40 0.31 0.43 197 RCVD_IN_SORBS_DUL 1916 0.35 0.14 0.41 198 HTML_TAG_BALANCE_BODY 1773 0.39 0.45 0.38 199 GMD_PDF_EMPTY_BODY 1719 0.29 0.05 0.36 200 XM_Body_Obfu01 1697 0.39 0.50 0.36 ----------------------------------------------------------------------