Email: 678661 Autolearn: 0 AvgScore: 1.36 AvgScanTime: 2.04 sec Spam: 120510 Autolearn: 0 AvgScore: 11.97 AvgScanTime: 3.90 sec Ham: 558151 Autolearn: 0 AvgScore: -0.93 AvgScanTime: 1.64 sec Time Spent Running SA: 384.10 hours Time Spent Processing Spam: 130.42 hours Time Spent Processing Ham: 253.68 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 113036 90.42 93.80 89.69 2 DKIM_SIGNED 100194 79.21 83.14 78.36 3 XM_DK_Pass 97600 77.72 80.99 77.01 4 RELAYCOUNTRY_US 97457 83.52 80.87 84.10 5 DCC_CHECK 94330 48.62 78.28 42.21 6 XM_B_Unicode 93351 73.77 77.46 72.97 7 XMListUnsubscribeExists 84634 56.80 70.23 53.90 8 DKIM_VALID 82239 72.03 68.24 72.85 9 DKIM_VALID_AU 61527 53.27 51.06 53.74 10 XM_B_Unicode3 55214 43.36 45.82 42.83 11 XM_DK_Undo_02 53456 14.09 44.36 7.56 12 BAYES_50 52247 50.32 43.35 51.82 13 LOC_TINY_FONT_1 43208 25.36 35.85 23.09 14 MIME_HTML_ONLY 42041 23.48 34.89 21.02 15 HTML_FONT_LOW_CONTRAST 37501 26.78 31.12 25.84 16 DKIM_VALID_EF 34793 26.38 28.87 25.85 17 XMSubLong 33100 21.41 27.47 20.10 18 BAYES_99 32935 8.24 27.33 4.12 19 FVGT_m_MULTI_ODD 32462 22.61 26.94 21.68 20 T_KAM_HTML_FONT_INVALID 30442 20.92 25.26 19.98 21 BOTNET 30073 6.70 24.95 2.76 22 XM_Body_Dirty_Words 26234 14.10 21.77 12.44 23 BAYES_999 25463 6.36 21.13 3.17 24 TR_DCC_Bayes_99 25219 5.45 20.93 2.11 25 DCC_CHECK_NEGATIVE 23930 49.18 19.86 55.51 26 RELAYCOUNTRY_META 23344 8.01 19.37 5.56 27 T_TM2_M_HEADER_IN_MSG 23298 27.12 19.33 28.80 28 XM_Multi_Part_URI 20146 12.63 16.72 11.74 29 BOTNET_IPINHOSTNAME 19386 6.33 16.09 4.23 30 XM_UncommonTLD01 18232 5.16 15.13 3.01 31 DKIM_INVALID 17955 7.17 14.90 5.50 32 LOTS_OF_MONEY 17001 9.36 14.11 8.34 33 XM_B_Unsub 16875 11.26 14.00 10.67 34 FSL_BULK_SIG 15494 7.99 12.86 6.94 35 HTML_IMAGE_RATIO_02 15247 7.88 12.65 6.85 36 NO_DNS_FOR_FROM 14554 4.53 12.08 2.90 37 UNTRUSTED_Relay 14248 3.35 11.82 1.53 38 XM_Evil_Numbers_Gen 13523 9.93 11.22 9.65 39 XMSexyCombo_05 13360 4.91 11.09 3.58 40 XM_B_Phish_Phrases 13337 10.56 11.07 10.45 41 LotsOfNums_01 10625 8.90 8.82 8.92 42 MPART_ALT_DIFF 9482 5.84 7.87 5.40 43 RCVD_IN_MSPIKE_H2 9425 10.70 7.82 11.32 44 BAYES_80 9392 3.85 7.79 3.00 45 HTML_IMAGE_RATIO_04 9214 5.73 7.65 5.32 46 XMSubMetaSx_00 8560 4.16 7.10 3.52 47 XM_H_Long_From01 8276 6.08 6.87 5.91 48 TooManyTo_001 7865 8.42 6.53 8.82 49 XM_UB50 7838 1.91 6.50 0.92 50 XM_SPF_SoftFail 7651 2.58 6.35 1.76 51 BAYES_60 7277 5.42 6.04 5.28 52 MIME_HTML_MOSTLY 6613 2.86 5.49 2.30 53 MIME_QP_LONG_LINE 6584 6.46 5.46 6.67 54 XM_CamelCaseFrm001 6375 2.71 5.29 2.16 55 XM_SendGrid 6339 6.56 5.26 6.84 56 RCVD_IN_MSPIKE_BL 6177 2.19 5.13 1.56 57 RCVD_IN_MSPIKE_L3 5739 1.78 4.76 1.14 58 RELAYCOUNTRY_CA 5634 2.20 4.68 1.66 59 SpammyFromTLD_02 5441 1.07 4.51 0.32 60 KHOP_HELO_FCRDNS 5321 2.44 4.42 2.01 61 XMStrtUSub 5321 4.50 4.42 4.51 62 XMNumbers 5116 3.83 4.25 3.74 63 TR_Mismatch_TLD_02 5038 0.81 4.18 0.09 64 FROM_SUSPICIOUS_NTLD 4958 0.76 4.11 0.03 65 FROM_SUSPICIOUS_NTLD_FP 4915 0.75 4.08 0.03 66 PDS_OTHER_BAD_TLD 4849 1.39 4.02 0.82 67 TM2_M_URI_OPT_OUT 4778 2.95 3.96 2.74 68 XM_DIRTYINTL 4752 1.20 3.94 0.60 69 XM_OfRef6 4706 1.80 3.91 1.35 70 BAYES_95 4574 2.17 3.80 1.81 71 BAYES_40 4558 5.43 3.78 5.79 72 LongTLD 4545 0.81 3.77 0.17 73 RCVD_IN_MSPIKE_H3 4495 8.42 3.73 9.44 74 RCVD_IN_MSPIKE_WL 4495 8.42 3.73 9.44 75 XMHTML_After_End 4438 1.24 3.68 0.71 76 MIME_HTML_ONLY_MULTI 4390 3.59 3.64 3.58 77 FROM_EXCESS_BASE64 4377 3.08 3.63 2.96 78 XM_B_Unsub2 4323 2.50 3.59 2.27 79 T_REMOTE_IMAGE 4252 4.01 3.53 4.11 80 XM_URI_RBL 4146 0.76 3.44 0.18 81 RCVD_IN_BL_SPAMCOP_NET 4133 1.34 3.43 0.89 82 T_XMDrugObfuBody_08 4120 2.22 3.42 1.96 83 BAYES_20 4093 4.53 3.40 4.78 84 RCVD_IN_RP_RNBL 4066 0.69 3.37 0.11 85 T_TooManySym_01 3942 3.94 3.27 4.09 86 HTML_MIME_NO_HTML_TAG 3838 2.46 3.18 2.30 87 HTML_IMAGE_RATIO_06 3828 3.26 3.18 3.28 88 RELAYCOUNTRY_FR 3774 0.82 3.13 0.33 89 XMNoVowels 3756 2.44 3.12 2.30 90 XM_B_SpammyTLD 3526 2.36 2.93 2.24 91 XMDiploma_00 3465 2.08 2.88 1.91 92 RDNS_DYNAMIC 3402 0.75 2.82 0.30 93 URIBL_SBL_A 3325 0.64 2.76 0.18 94 HTML_IMAGE_RATIO_08 3240 2.48 2.69 2.43 95 SpammyFromTLD_01 3086 1.05 2.56 0.72 96 BODY_URI_ONLY 3060 0.49 2.54 0.05 97 URI_HEX 3050 1.58 2.53 1.38 98 SUBJ_ALL_CAPS 3032 2.25 2.52 2.19 99 TR_XM_INV_DKIM 2994 0.53 2.48 0.11 100 RCVD_IN_RP_SAFE 2993 8.20 2.48 9.44 101 BAYES_00 2951 16.91 2.45 20.04 102 BOTNET_NORDNS 2746 0.43 2.28 0.03 103 XMSubMetaI_00 2713 0.82 2.25 0.52 104 XMStockSpam_06 2678 1.04 2.22 0.78 105 XMGenDplmaNmb 2603 1.32 2.16 1.14 106 TR_XM_DK_SendGrid 2562 3.41 2.13 3.69 107 T_XMDrugObfuBody_14 2557 2.32 2.12 2.37 108 RCVD_IN_IADB_LISTED 2544 5.55 2.11 6.29 109 TR_XM_PHPDW 2496 0.74 2.07 0.45 110 XMSexyCombo_01 2477 0.74 2.06 0.46 111 TR_XM_PHPForged 2459 0.72 2.04 0.44 112 FROM_ADDR_WS 2453 0.36 2.04 0.00 113 TR_XM_FormFill2 2439 0.72 2.02 0.44 114 XM_H_PHPOS 2434 0.71 2.02 0.43 115 NO_FM_NAME_IP_HOSTN 2428 0.36 2.01 0.00 116 TR_XM_MaxBayes 2384 0.36 1.98 0.01 117 TM2_M_VERY_LONG_WORD 2366 1.48 1.96 1.37 118 RCVD_IN_IADB_SPF 2341 4.84 1.94 5.46 119 FROM_NO_USER 2286 0.34 1.90 0.00 120 RCVD_IN_IADB_DK 2274 4.20 1.89 4.70 121 RCVD_IN_IADB_SENDERID 2274 4.26 1.89 4.77 122 TR_LOTS_OF_MONEY2 2216 0.68 1.84 0.44 123 T_MONEY_PERCENT 2216 0.68 1.84 0.44 124 RCVD_IN_RP_CERTIFIED 2196 7.47 1.82 8.69 125 ALL_TRUSTED 2196 10.36 1.82 12.21 126 TR_MetaPhish_Combo_01 2150 1.49 1.78 1.43 127 BAYES_05 2013 2.92 1.67 3.18 128 TR_Symld_Words 1994 1.46 1.65 1.42 129 TR_XM_DK_Bayes 1961 12.32 1.63 14.63 130 XMBody_17 1956 0.83 1.62 0.66 131 URI_NOVOWEL 1942 0.57 1.61 0.35 132 XM_DK_Undo_01 1885 1.83 1.56 1.89 133 DKIM_ADSP_CUSTOM_MED 1826 1.25 1.52 1.20 134 T_XMDrugObfuBody_00 1731 0.80 1.44 0.66 135 DATE_IN_PAST_03_06 1720 0.31 1.43 0.07 136 RCVD_IN_PSBL 1719 0.28 1.43 0.04 137 DKIM_ADSP_NXDOMAIN 1715 0.56 1.42 0.38 138 RELAYCOUNTRY_IN 1714 0.34 1.42 0.11 139 XM_Body_Obfu01 1697 0.66 1.41 0.50 140 T_TooManySym_02 1689 2.09 1.40 2.24 141 XM_OfRef7 1677 0.36 1.39 0.14 142 RELAYCOUNTRY_GB 1662 1.19 1.38 1.14 143 REMOVE_BEFORE_LINK 1657 0.58 1.37 0.41 144 FORGED_GMAIL_RCVD 1630 0.75 1.35 0.62 145 T_XMHurry_00 1627 0.66 1.35 0.51 146 TR_XM_RelayPhish 1619 0.45 1.34 0.25 147 XM_UB80 1612 0.25 1.34 0.02 148 MAILING_LIST_MULTI 1604 2.25 1.33 2.45 149 UNPARSEABLE_RELAY 1576 1.90 1.31 2.02 150 XM_H_PHPOS_M 1554 0.35 1.29 0.15 151 HTML_SHORT_LINK_IMG_1 1550 0.24 1.29 0.02 152 DATE_IN_PAST_06_12 1548 0.27 1.28 0.05 153 XMPhish30 1543 0.79 1.28 0.69 154 XM_H_PHPMailer 1540 0.62 1.28 0.48 155 TR_LOTS_OF_MONEY3 1539 0.52 1.28 0.36 156 DEAR_BENEFICIARY 1536 0.27 1.27 0.06 157 XM_UB60 1523 0.28 1.26 0.06 158 NML_ADSP_CUSTOM_MED 1499 0.92 1.24 0.85 159 URI_TRY_3LD 1490 1.04 1.24 0.99 160 FSL_THIS_IS_ADV 1484 0.38 1.23 0.19 161 XMMoneyMeta_00 1444 0.58 1.20 0.45 162 TR_Mismatch_TLD_01 1443 0.41 1.20 0.24 163 MIME_HEADER_CTYPE_ONLY 1398 0.39 1.16 0.22 164 XM_H_MailChimp 1372 0.37 1.14 0.20 165 XM_ProductURIs 1362 0.77 1.13 0.70 166 HDRS_MISSP 1344 0.22 1.12 0.03 167 HDRS_LCASE_IMGONLY 1333 0.22 1.11 0.02 168 T_Symld_Words_02 1307 0.60 1.08 0.49 169 RELAYCOUNTRY_DE 1302 0.51 1.08 0.39 170 TR_XM_MaxSPIKE 1291 0.22 1.07 0.04 171 THIS_AD 1290 0.35 1.07 0.19 172 XMPhish08 1289 0.64 1.07 0.55 173 HTML_FONT_FACE_BAD 1266 1.13 1.05 1.14 174 TM2_M_A_HREF_HREF 1240 0.70 1.03 0.63 175 LONG_HEX_URI 1196 0.32 0.99 0.18 176 XM_BadFromFormat 1192 0.28 0.99 0.12 177 XMGppyBdWords 1186 0.27 0.98 0.11 178 FVGT_m_MULTI_ODD_EMAIL 1175 0.19 0.98 0.03 179 FROM_DOMAIN_NOVOWEL 1173 0.19 0.97 0.03 180 T_FILL_THIS_FORM_SHORT 1173 1.18 0.97 1.22 181 XMBrknScrpt_02 1168 0.76 0.97 0.72 182 XMSexyCombo_04 1167 0.26 0.97 0.10 183 HTML_IMAGE_ONLY_04 1147 0.21 0.95 0.05 184 MPART_ALT_DIFF_COUNT 1134 0.54 0.94 0.45 185 URIBL_BLACK 1117 0.18 0.93 0.02 186 TR_XM_DK_Bayes1 1111 11.43 0.92 13.70 187 XMSubMetaSSx_00 1102 0.25 0.91 0.11 188 DIET_1 1079 0.59 0.90 0.53 189 XM_H_Long_From02 1078 1.36 0.89 1.46 190 XMPhish14 1054 0.44 0.87 0.34 191 SHORT_IMG_SUSP_NTLD 1051 0.15 0.87 0.00 192 XMHTMLBadTable_001 1049 0.61 0.87 0.56 193 SUBJECT_NEEDS_ENCODING 1027 0.16 0.85 0.01 194 SUBJ_ILLEGAL_CHARS 1025 0.16 0.85 0.01 195 PLING_QUERY 1010 0.48 0.84 0.41 196 RELAYCOUNTRY_AT 984 0.25 0.82 0.13 197 HTML_TAG_BALANCE_CENTER 979 0.24 0.81 0.12 198 XM_UB99 978 0.15 0.81 0.00 199 LOW_PRICE 954 0.27 0.79 0.15 200 FILL_THIS_FORM 940 0.55 0.78 0.50 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 500628 90.42 93.80 89.69 2 RELAYCOUNTRY_US 469382 83.52 80.87 84.10 3 DKIM_SIGNED 437341 79.21 83.14 78.36 4 XM_DK_Pass 429856 77.72 80.99 77.01 5 XM_B_Unicode 407269 73.77 77.46 72.97 6 DKIM_VALID 406615 72.03 68.24 72.85 7 DCC_CHECK_NEGATIVE 309806 49.18 19.86 55.51 8 XMListUnsubscribeExists 300822 56.80 70.23 53.90 9 DKIM_VALID_AU 299978 53.27 51.06 53.74 10 BAYES_50 289253 50.32 43.35 51.82 11 XM_B_Unicode3 239031 43.36 45.82 42.83 12 DCC_CHECK 235622 48.62 78.28 42.21 13 T_TM2_M_HEADER_IN_MSG 160723 27.12 19.33 28.80 14 DKIM_VALID_EF 144268 26.38 28.87 25.85 15 HTML_FONT_LOW_CONTRAST 144246 26.78 31.12 25.84 16 LOC_TINY_FONT_1 128904 25.36 35.85 23.09 17 FVGT_m_MULTI_ODD 120985 22.61 26.94 21.68 18 MIME_HTML_ONLY 117300 23.48 34.89 21.02 19 XMSubLong 112216 21.41 27.47 20.10 20 BAYES_00 111832 16.91 2.45 20.04 21 T_KAM_HTML_FONT_INVALID 111516 20.92 25.26 19.98 22 TR_XM_DK_Bayes 81640 12.32 1.63 14.63 23 TR_XM_DK_Bayes1 76493 11.43 0.92 13.70 24 XM_Body_Dirty_Words 69429 14.10 21.77 12.44 25 ALL_TRUSTED 68132 10.36 1.82 12.21 26 TR_XM_DK_Bayes2 67859 10.13 0.71 12.16 27 XM_Multi_Part_URI 65538 12.63 16.72 11.74 28 RCVD_IN_MSPIKE_H2 63181 10.70 7.82 11.32 29 XM_B_Unsub 59574 11.26 14.00 10.67 30 XM_B_Phish_Phrases 58320 10.56 11.07 10.45 31 XM_Evil_Numbers_Gen 53843 9.93 11.22 9.65 32 RCVD_IN_RP_SAFE 52683 8.20 2.48 9.44 33 RCVD_IN_MSPIKE_WL 52669 8.42 3.73 9.44 34 RCVD_IN_MSPIKE_H3 52669 8.42 3.73 9.44 35 LotsOfNums_01 49783 8.90 8.82 8.92 36 TooManyTo_001 49256 8.42 6.53 8.82 37 RCVD_IN_RP_CERTIFIED 48509 7.47 1.82 8.69 38 LOTS_OF_MONEY 46555 9.36 14.11 8.34 39 XM_DK_Undo_02 42187 14.09 44.36 7.56 40 XM_DKIMWhitelistDomains 39620 5.84 0.02 7.10 41 FSL_BULK_SIG 38726 7.99 12.86 6.94 42 HTML_IMAGE_RATIO_02 38210 7.88 12.65 6.85 43 XM_SendGrid 38188 6.56 5.26 6.84 44 MIME_QP_LONG_LINE 37228 6.46 5.46 6.67 45 RCVD_IN_IADB_LISTED 35093 5.55 2.11 6.29 46 XM_H_Long_From01 32989 6.08 6.87 5.91 47 BAYES_40 32299 5.43 3.78 5.79 48 RELAYCOUNTRY_META 31006 8.01 19.37 5.56 49 DKIM_INVALID 30726 7.17 14.90 5.50 50 RCVD_IN_IADB_SPF 30482 4.84 1.94 5.46 51 MPART_ALT_DIFF 30155 5.84 7.87 5.40 52 HTML_IMAGE_RATIO_04 29678 5.73 7.65 5.32 53 BAYES_60 29496 5.42 6.04 5.28 54 BAYES_20 26665 4.53 3.40 4.78 55 RCVD_IN_IADB_SENDERID 26647 4.26 1.89 4.77 56 RCVD_IN_IADB_DK 26217 4.20 1.89 4.70 57 XMStrtUSub 25195 4.50 4.42 4.51 58 BOTNET_IPINHOSTNAME 23597 6.33 16.09 4.23 59 XM_PDF 23416 3.56 0.60 4.20 60 RCVD_IN_IADB_VOUCHED 22988 3.51 0.71 4.12 61 BAYES_99 22976 8.24 27.33 4.12 62 T_REMOTE_IMAGE 22941 4.01 3.53 4.11 63 T_TooManySym_01 22811 3.94 3.27 4.09 64 XMNumbers 20850 3.83 4.25 3.74 65 TR_XM_DK_SendGrid 20586 3.41 2.13 3.69 66 IN_ZIMBRA_NJ_WHITELIST 20237 2.98 0.01 3.63 67 MIME_HTML_ONLY_MULTI 20000 3.59 3.64 3.58 68 XMSexyCombo_05 19992 4.91 11.09 3.58 69 XMSubMetaSx_00 19642 4.16 7.10 3.52 70 HTML_IMAGE_RATIO_06 18280 3.26 3.18 3.28 71 BAYES_05 17777 2.92 1.67 3.18 72 BAYES_999 17675 6.36 21.13 3.17 73 XM_UncommonTLD01 16794 5.16 15.13 3.01 74 BAYES_80 16757 3.85 7.79 3.00 75 FROM_EXCESS_BASE64 16495 3.08 3.63 2.96 76 NO_DNS_FOR_FROM 16209 4.53 12.08 2.90 77 BOTNET 15396 6.70 24.95 2.76 78 TM2_M_URI_OPT_OUT 15271 2.95 3.96 2.74 79 RCVD_IN_IADB_OPTIN 14594 2.24 0.51 2.61 80 MAILING_LIST_MULTI 13655 2.25 1.33 2.45 81 HTML_IMAGE_RATIO_08 13576 2.48 2.69 2.43 82 T_XMDrugObfuBody_14 13219 2.32 2.12 2.37 83 TooManyTo_002 13171 2.06 0.65 2.36 84 HTML_MIME_NO_HTML_TAG 12842 2.46 3.18 2.30 85 MIME_HTML_MOSTLY 12823 2.86 5.49 2.30 86 XMNoVowels 12820 2.44 3.12 2.30 87 XM_B_Unsub2 12662 2.50 3.59 2.27 88 T_TooManySym_02 12526 2.09 1.40 2.24 89 XM_B_SpammyTLD 12500 2.36 2.93 2.24 90 SUBJ_ALL_CAPS 12206 2.25 2.52 2.19 91 XM_CamelCaseFrm001 12030 2.71 5.29 2.16 92 TR_DCC_Bayes_99 11756 5.45 20.93 2.11 93 UNPARSEABLE_RELAY 11289 1.90 1.31 2.02 94 KHOP_HELO_FCRDNS 11215 2.44 4.42 2.01 95 XM_H_Trusted_IP 11166 1.65 0.00 2.00 96 ANY_BOUNCE_MESSAGE 11084 1.73 0.52 1.99 97 BOUNCE_MESSAGE 11071 1.72 0.52 1.98 98 T_XMDrugObfuBody_08 10932 2.22 3.42 1.96 99 XMDiploma_00 10635 2.08 2.88 1.91 100 XM_DK_Undo_01 10564 1.83 1.56 1.89 101 BAYES_95 10130 2.17 3.80 1.81 102 XM_SPF_SoftFail 9844 2.58 6.35 1.76 103 RELAYCOUNTRY_CA 9263 2.20 4.68 1.66 104 TooManyTo_003 9079 1.43 0.54 1.63 105 INVALID_MSGID 9022 1.37 0.20 1.62 106 IN_HORDE_ADDRESS_BOOK 8843 1.31 0.03 1.58 107 TVD_RCVD_IP 8830 1.43 0.74 1.58 108 USER_IN_DEF_DKIM_WL 8825 1.30 0.01 1.58 109 RCVD_IN_MSPIKE_BL 8718 2.19 5.13 1.56 110 UNTRUSTED_Relay 8518 3.35 11.82 1.53 111 HELO_NODOT 8467 1.35 0.59 1.52 112 HELO_NO_DOMAIN 8466 1.35 0.58 1.52 113 XM_H_Long_From02 8143 1.36 0.89 1.46 114 TR_MetaPhish_Combo_01 7958 1.49 1.78 1.43 115 TR_Symld_Words 7924 1.46 1.65 1.42 116 XM_GoogleGroups 7796 1.23 0.47 1.40 117 URI_HEX 7705 1.58 2.53 1.38 118 TM2_M_VERY_LONG_WORD 7673 1.48 1.96 1.37 119 XM_OfRef6 7515 1.80 3.91 1.35 120 XMCapTrack 7311 1.15 0.41 1.31 121 TooManyTo_004 7122 1.13 0.47 1.28 122 TO_MALFORMED 7082 1.06 0.11 1.27 123 T_FILL_THIS_FORM_SHORT 6822 1.18 0.97 1.22 124 DKIM_ADSP_CUSTOM_MED 6675 1.25 1.52 1.20 125 CK_HELO_DYNAMIC_SPLIT_IP 6673 1.06 0.43 1.20 126 HELO_DYNAMIC_IPADDR2 6662 1.03 0.27 1.19 127 RELAYCOUNTRY_GB 6381 1.19 1.38 1.14 128 HTML_FONT_FACE_BAD 6377 1.13 1.05 1.14 129 XMGenDplmaNmb 6354 1.32 2.16 1.14 130 RCVD_IN_MSPIKE_L3 6336 1.78 4.76 1.14 131 TooManyTo_005 6112 0.97 0.40 1.10 132 URI_TRY_3LD 5542 1.04 1.24 0.99 133 XMBdyGiftCard01 5533 0.94 0.69 0.99 134 XM_UB50 5117 1.91 6.50 0.92 135 XMGappySubj_01 4995 0.77 0.20 0.89 136 RCVD_IN_BL_SPAMCOP_NET 4981 1.34 3.43 0.89 137 TR_MSPIKEBAYES00 4771 0.70 0.01 0.85 138 NML_ADSP_CUSTOM_MED 4725 0.92 1.24 0.85 139 XMSubNoVowel 4685 0.76 0.39 0.84 140 PDS_OTHER_BAD_TLD 4575 1.39 4.02 0.82 141 HTTPS_HTTP_MISMATCH 4384 0.77 0.70 0.79 142 XMStockSpam_06 4371 1.04 2.22 0.78 143 SpammyFromTLD_01 4013 1.05 2.56 0.72 144 XMBrknScrpt_02 3991 0.76 0.97 0.72 145 XMHTML_After_End 3958 1.24 3.68 0.71 146 XM_ProductURIs 3895 0.77 1.13 0.70 147 XMBody_95 3893 0.60 0.13 0.70 148 XMPhish30 3838 0.79 1.28 0.69 149 T_XMDrugObfuBody_00 3679 0.80 1.44 0.66 150 XMBody_17 3656 0.83 1.62 0.66 151 TM2_M_A_HREF_HREF 3497 0.70 1.03 0.63 152 MISSING_HEADERS 3476 0.60 0.50 0.62 153 FORGED_GMAIL_RCVD 3435 0.75 1.35 0.62 154 T_OBFU_PDF_ATTACH 3383 0.53 0.16 0.61 155 XM_DIRTYINTL 3372 1.20 3.94 0.60 156 XM_SPF_Unknown 3306 0.59 0.59 0.59 157 RELAYCOUNTRY_AU 3261 0.57 0.51 0.58 158 T_TooManySym_03 3116 0.50 0.21 0.56 159 XMHTMLBadTable_001 3105 0.61 0.87 0.56 160 FROM_GOV_DKIM_AU 3102 0.50 0.24 0.56 161 XMPhish08 3044 0.64 1.07 0.55 162 DIET_1 2932 0.59 0.90 0.53 163 XMSubMetaI_00 2879 0.82 2.25 0.52 164 T_XMHurry_00 2856 0.66 1.35 0.51 165 XM_Body_Obfu01 2809 0.66 1.41 0.50 166 FILL_THIS_FORM 2773 0.55 0.78 0.50 167 FROM_GOV_SPOOF 2761 0.45 0.23 0.49 168 T_Symld_Words_02 2750 0.60 1.08 0.49 169 HTML_TAG_BALANCE_BODY 2747 0.52 0.66 0.49 170 XM_B_REG_HTML 2721 0.52 0.64 0.49 171 AC_DIV_BONANZA 2702 0.43 0.18 0.48 172 XM_H_PHPMailer 2673 0.62 1.28 0.48 173 XM_ShortIntro_01 2656 0.47 0.45 0.48 174 HTML_IMAGE_ONLY_20 2617 0.44 0.32 0.47 175 XMSexyCombo_01 2555 0.74 2.06 0.46 176 TR_XM_PHPDW 2520 0.74 2.07 0.45 177 MPART_ALT_DIFF_COUNT 2511 0.54 0.94 0.45 178 XMMoneyMeta_00 2502 0.58 1.20 0.45 179 HTML_IMAGE_ONLY_28 2490 0.43 0.33 0.45 180 TR_XM_FormFill2 2459 0.72 2.02 0.44 181 TR_XM_PHPForged 2439 0.72 2.04 0.44 182 T_MONEY_PERCENT 2431 0.68 1.84 0.44 183 TR_LOTS_OF_MONEY2 2431 0.68 1.84 0.44 184 XM_H_PHPOS 2406 0.71 2.02 0.43 185 RCVD_IN_MSPIKE_L4 2316 0.38 0.21 0.41 186 REMOVE_BEFORE_LINK 2312 0.58 1.37 0.41 187 PLING_QUERY 2275 0.48 0.84 0.41 188 HTML_IMAGE_ONLY_32 2263 0.38 0.24 0.41 189 SHORT_HELO_AND_INLINE_IMAGE 2195 0.33 0.04 0.39 190 RELAYCOUNTRY_DE 2157 0.51 1.08 0.39 191 MSGID_FROM_MTA_HEADER 2150 0.37 0.29 0.39 192 DKIM_ADSP_NXDOMAIN 2116 0.56 1.42 0.38 193 USER_IN_WHITELIST 2107 0.31 0.00 0.38 194 TM2_M_BODY_EMPTY 2067 0.32 0.08 0.37 195 HTML_IMAGE_ONLY_24 2056 0.34 0.22 0.37 196 XMBody_78 2045 0.42 0.66 0.37 197 RCVD_IN_SORBS_DUL 2042 0.34 0.21 0.37 198 FILL_THIS_FORM_LONG 2034 0.43 0.73 0.36 199 TR_LOTS_OF_MONEY3 1984 0.52 1.28 0.36 200 XMManySubDom_06 1946 0.31 0.14 0.35 ----------------------------------------------------------------------