Email: 669846 Autolearn: 0 AvgScore: 1.31 AvgScanTime: 1.92 sec Spam: 117423 Autolearn: 0 AvgScore: 11.78 AvgScanTime: 3.52 sec Ham: 552423 Autolearn: 0 AvgScore: -0.91 AvgScanTime: 1.58 sec Time Spent Running SA: 357.42 hours Time Spent Processing Spam: 114.95 hours Time Spent Processing Ham: 242.47 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 108139 89.83 92.09 89.35 2 DKIM_SIGNED 93807 74.49 79.89 73.34 3 XM_B_Unicode 91950 72.46 78.31 71.21 4 XM_DK_Pass 91280 73.04 77.74 72.05 5 RELAYCOUNTRY_US 88835 79.59 75.65 80.43 6 DCC_CHECK 82989 43.54 70.68 37.77 7 DKIM_VALID 76988 67.45 65.56 67.85 8 XMListUnsubscribeExists 75900 51.67 64.64 48.92 9 XM_B_Unicode3 56955 41.98 48.50 40.59 10 DKIM_VALID_AU 56741 49.31 48.32 49.52 11 BAYES_50 56047 51.81 47.73 52.68 12 XM_DK_Undo_02 48688 13.00 41.46 6.95 13 LOC_TINY_FONT_1 44079 27.77 37.54 25.69 14 MIME_HTML_ONLY 35082 21.62 29.88 19.87 15 HTML_FONT_LOW_CONTRAST 32596 25.07 27.76 24.50 16 DKIM_VALID_EF 32423 25.30 27.61 24.80 17 DCC_CHECK_NEGATIVE 32199 54.32 27.42 60.03 18 FVGT_m_MULTI_ODD 30328 21.37 25.83 20.42 19 BAYES_99 30103 7.29 25.64 3.39 20 XM_Multi_Part_URI 26915 15.52 22.92 13.95 21 T_KAM_HTML_FONT_INVALID 26204 18.14 22.32 17.25 22 XMSubLong 26195 19.36 22.31 18.74 23 BOTNET 26151 6.26 22.27 2.86 24 T_TM2_M_HEADER_IN_MSG 23617 27.27 20.11 28.79 25 XM_Body_Dirty_Words 23220 12.70 19.77 11.19 26 TR_DCC_Bayes_99 23191 4.90 19.75 1.75 27 BAYES_999 22990 5.66 19.58 2.70 28 RELAYCOUNTRY_META 22314 8.01 19.00 5.68 29 BOTNET_IPINHOSTNAME 17313 6.01 14.74 4.15 30 DKIM_INVALID 16819 7.04 14.32 5.49 31 XM_UncommonTLD01 14460 4.72 12.31 3.10 32 XM_Evil_Numbers_Gen 14121 9.89 12.03 9.44 33 XM_B_Phish_Phrases 14097 9.15 12.01 8.54 34 FSL_BULK_SIG 13988 8.00 11.91 7.17 35 LOTS_OF_MONEY 13716 7.84 11.68 7.02 36 HTML_IMAGE_RATIO_02 13344 7.80 11.36 7.05 37 UNTRUSTED_Relay 13282 3.37 11.31 1.68 38 NO_DNS_FOR_FROM 13092 4.59 11.15 3.20 39 XM_B_Unsub 13011 9.81 11.08 9.54 40 XMSexyCombo_05 11515 4.18 9.81 2.99 41 LotsOfNums_01 11399 8.73 9.71 8.52 42 ALL_TRUSTED 9017 14.42 7.68 15.86 43 UNICODE_OBFU_ASC 8571 4.40 7.30 3.79 44 RCVD_IN_MSPIKE_H2 8251 10.68 7.03 11.45 45 BAYES_80 7845 3.33 6.68 2.62 46 XM_H_Long_From01 7527 5.81 6.41 5.68 47 TooManyTo_001 7296 8.43 6.21 8.90 48 BAYES_60 7171 5.19 6.11 5.00 49 XM_B_SpammyTLD 7105 3.44 6.05 2.88 50 XM_UB50 7077 1.83 6.03 0.94 51 HTML_IMAGE_RATIO_04 7065 4.73 6.02 4.46 52 XMSubMetaSx_00 7003 3.26 5.96 2.69 53 MPART_ALT_DIFF 6819 5.05 5.81 4.89 54 UPPERCASE_75_100 6731 4.11 5.73 3.76 55 XM_H_BADHELO 6593 0.98 5.61 0.00 56 MIME_QP_LONG_LINE 6250 5.99 5.32 6.13 57 XMNumbers 5929 3.88 5.05 3.63 58 XM_SPF_SoftFail 5554 2.24 4.73 1.71 59 RELAYCOUNTRY_CA 5258 2.05 4.48 1.53 60 PDS_OTHER_BAD_TLD 5197 1.18 4.43 0.49 61 RCVD_IN_MSPIKE_BL 5064 2.04 4.31 1.55 62 XM_SendGrid 5059 6.20 4.31 6.60 63 XM_URI_RBL 5031 0.90 4.28 0.18 64 XM_CamelCaseFrm001 4863 2.36 4.14 1.98 65 RCVD_IN_MSPIKE_L3 4809 1.68 4.10 1.17 66 MIME_HTML_MOSTLY 4578 2.56 3.90 2.27 67 RCVD_IN_BL_SPAMCOP_NET 4315 1.42 3.67 0.94 68 XMStrtUSub 4290 3.98 3.65 4.05 69 XM_DIRTYINTL 4222 1.05 3.60 0.51 70 BAYES_95 4036 1.91 3.44 1.59 71 SpammyFromTLD_02 4036 0.84 3.44 0.28 72 RCVD_IN_MSPIKE_WL 4034 7.93 3.44 8.89 73 RCVD_IN_MSPIKE_H3 4034 7.93 3.44 8.89 74 MISSING_HEADERS 4022 1.38 3.43 0.94 75 TM2_M_URI_OPT_OUT 3991 3.16 3.40 3.11 76 T_XMDrugObfuBody_08 3922 1.81 3.34 1.48 77 FROM_EXCESS_BASE64 3914 2.70 3.33 2.56 78 BAYES_40 3805 5.46 3.24 5.93 79 KHOP_HELO_FCRDNS 3801 2.56 3.24 2.41 80 FROM_SUSPICIOUS_NTLD 3780 0.62 3.22 0.07 81 RCVD_IN_RP_SAFE 3773 7.67 3.21 8.62 82 TR_Mismatch_TLD_01 3741 0.78 3.19 0.27 83 FROM_SUSPICIOUS_NTLD_FP 3701 0.61 3.15 0.06 84 HTML_IMAGE_RATIO_06 3692 2.99 3.14 2.96 85 BAYES_20 3533 4.41 3.01 4.71 86 T_TooManySym_01 3490 4.08 2.97 4.32 87 TR_XM_PHPDW 3414 0.86 2.91 0.43 88 RELAYCOUNTRY_FR 3398 0.76 2.89 0.31 89 TR_XM_PHPForged 3359 0.84 2.86 0.41 90 TR_XM_FormFill2 3346 0.84 2.85 0.41 91 XM_H_PHPOS 3337 0.83 2.84 0.41 92 MIME_HTML_ONLY_MULTI 3308 3.14 2.82 3.21 93 XMNoVowels 3196 2.18 2.72 2.06 94 XMBody_17 3148 1.01 2.68 0.65 95 REPLYTO_WITHOUT_TO_CC 3136 0.61 2.67 0.18 96 XM_OfRef6 2980 1.40 2.54 1.16 97 SpammyFromTLD_01 2954 1.08 2.52 0.78 98 XM_B_Unsub2 2940 1.99 2.50 1.88 99 T_REMOTE_IMAGE 2875 3.72 2.45 3.99 100 LongTLD 2816 0.56 2.40 0.17 101 URI_HEX 2809 1.46 2.39 1.26 102 URIBL_SBL_A 2802 0.52 2.39 0.12 103 RCVD_IN_RP_RNBL 2743 0.46 2.34 0.06 104 SUBJ_ALL_CAPS 2706 1.62 2.30 1.47 105 TR_Mismatch_TLD_02 2703 0.45 2.30 0.05 106 HTML_IMAGE_RATIO_08 2664 2.09 2.27 2.05 107 RCVD_IN_RP_CERTIFIED 2663 6.96 2.27 7.96 108 TR_XM_INV_DKIM 2647 0.47 2.25 0.10 109 BOTNET_NORDNS 2625 0.41 2.24 0.02 110 BAYES_00 2549 17.54 2.17 20.80 111 T_XMDrugObfuBody_14 2509 1.87 2.14 1.82 112 DATE_IN_PAST_06_12 2498 0.49 2.13 0.14 113 XMDiploma_00 2409 1.75 2.05 1.69 114 RELAYCOUNTRY_GB 2286 1.35 1.95 1.23 115 RCVD_IN_IADB_LISTED 2265 4.94 1.93 5.58 116 BOUNCE_MESSAGE 2251 2.34 1.92 2.43 117 ANY_BOUNCE_MESSAGE 2251 2.34 1.92 2.43 118 TR_XM_MaxBayes 2229 0.34 1.90 0.01 119 HTML_MIME_NO_HTML_TAG 2216 2.22 1.89 2.30 120 XMHTML_After_End 2173 0.93 1.85 0.74 121 BAYES_05 2128 2.94 1.81 3.18 122 TM2_M_VERY_LONG_WORD 2126 1.29 1.81 1.18 123 RCVD_IN_IADB_SPF 2120 4.31 1.81 4.84 124 RCVD_IN_IADB_DK 2072 3.75 1.76 4.17 125 RCVD_IN_IADB_SENDERID 2067 3.76 1.76 4.18 126 XMSubMetaI_00 2059 0.70 1.75 0.47 127 TR_XM_RelayPhish 2017 0.48 1.72 0.21 128 TR_XM_DK_Bayes 1948 11.99 1.66 14.19 129 XMStockSpam_06 1948 1.09 1.66 0.97 130 RDNS_DYNAMIC 1894 0.53 1.61 0.30 131 DKIM_ADSP_CUSTOM_MED 1885 1.35 1.61 1.30 132 MAILING_LIST_MULTI 1876 2.39 1.60 2.55 133 XM_H_PHPMailer 1876 0.64 1.60 0.44 134 XMSexyCombo_01 1830 0.61 1.56 0.41 135 URI_OPTOUT_3LD 1822 0.37 1.55 0.12 136 T_XMDrugObfuBody_00 1817 0.79 1.55 0.63 137 TR_LOTS_OF_MONEY3 1806 0.54 1.54 0.33 138 TR_Symld_Words 1767 1.27 1.50 1.22 139 XM_H_PHPOS_M 1730 0.36 1.47 0.13 140 FORGED_GMAIL_RCVD 1683 0.83 1.43 0.71 141 REMOVE_BEFORE_LINK 1666 0.58 1.42 0.40 142 XM_DK_Undo_01 1662 1.83 1.42 1.92 143 TR_XM_DK_SendGrid 1636 3.09 1.39 3.45 144 DEAR_SOMETHING 1633 0.39 1.39 0.17 145 XMGenDplmaNmb 1613 1.12 1.37 1.07 146 NML_ADSP_CUSTOM_MED 1590 0.97 1.35 0.89 147 TR_LOTS_OF_MONEY2 1588 0.74 1.35 0.61 148 T_MONEY_PERCENT 1588 0.74 1.35 0.61 149 TR_MetaPhish_Combo_01 1539 1.29 1.31 1.29 150 XMReplyNow 1528 0.35 1.30 0.14 151 T_XMHurry_00 1498 0.63 1.28 0.49 152 RELAYCOUNTRY_IN 1455 0.32 1.24 0.12 153 XM_UB60 1436 0.27 1.22 0.06 154 XMBrknScrpt_02 1428 1.01 1.22 0.96 155 TM2_M_A_HREF_HREF 1413 0.43 1.20 0.26 156 XM_ProductURIs 1397 0.78 1.19 0.69 157 XM_RXBody 1378 0.86 1.17 0.79 158 URI_TRY_3LD 1365 1.18 1.16 1.19 159 XMPhish08 1360 0.55 1.16 0.42 160 XMPhish30 1352 0.76 1.15 0.68 161 UNPARSEABLE_RELAY 1337 1.83 1.14 1.98 162 RCVD_IN_PSBL 1321 0.23 1.12 0.04 163 TR_LOTS_OF_MONEY1 1299 0.38 1.11 0.22 164 T_TooManySym_02 1257 2.17 1.07 2.41 165 XM_UB99 1252 0.19 1.07 0.00 166 TR_XM_MaxSPIKE 1245 0.21 1.06 0.03 167 XMLngstWrd_00 1229 0.44 1.05 0.32 168 HTTPS_HTTP_MISMATCH 1199 0.96 1.02 0.94 169 TR_XM_DK_Bayes1 1192 11.14 1.02 13.29 170 XMBdyGiftCard01 1176 1.12 1.00 1.14 171 XMLngstWrd_01 1166 0.40 0.99 0.28 172 T_FILL_THIS_FORM_SHORT 1156 1.03 0.98 1.04 173 DATE_IN_PAST_12_24 1151 0.22 0.98 0.06 174 XM_H_Long_From02 1140 1.30 0.97 1.37 175 XMHTMLBadTable_001 1139 0.54 0.97 0.45 176 XM_H_MailChimp 1137 0.34 0.97 0.20 177 TR_XM_DK_Bayes2 1136 9.59 0.97 11.42 178 XMSubMetaD_03 1101 0.20 0.94 0.05 179 RELAYCOUNTRY_VN 1093 0.19 0.93 0.03 180 XM_OfRef7 1090 0.29 0.93 0.16 181 DIET_1 1054 0.47 0.90 0.38 182 RELAYCOUNTRY_AT 1038 0.31 0.88 0.18 183 DATE_IN_PAST_03_06 992 0.24 0.84 0.12 184 MPART_ALT_DIFF_COUNT 991 0.48 0.84 0.40 185 XM_ShortIntro_01 973 0.69 0.83 0.66 186 THIS_AD 971 0.28 0.83 0.16 187 URIBL_BLACK 968 0.16 0.82 0.02 188 XMPhish14 967 0.39 0.82 0.29 189 XM_UB80 965 0.16 0.82 0.02 190 FROM_MISSP_REPLYTO 961 0.16 0.82 0.02 191 XMBody_78 951 0.38 0.81 0.28 192 XM_PDF 942 3.59 0.80 4.19 193 XMSubMetaI_01 934 0.18 0.80 0.05 194 T_Symld_Words_02 933 0.54 0.79 0.49 195 XMSubNoVowel 911 1.13 0.78 1.21 196 FROM_MISSP_DYNIP 910 0.14 0.77 0.00 197 BODY_URI_ONLY 874 0.19 0.74 0.08 198 XM_UB999 871 0.13 0.74 0.00 199 XMSubMetaSxObfu_03 868 0.42 0.74 0.35 200 XM_SPF_Unknown 866 0.68 0.74 0.67 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 493570 89.83 92.09 89.35 2 RELAYCOUNTRY_US 444302 79.59 75.65 80.43 3 DKIM_SIGNED 405150 74.49 79.89 73.34 4 XM_DK_Pass 397996 73.04 77.74 72.05 5 XM_B_Unicode 393399 72.46 78.31 71.21 6 DKIM_VALID 374803 67.45 65.56 67.85 7 DCC_CHECK_NEGATIVE 331637 54.32 27.42 60.03 8 BAYES_50 291008 51.81 47.73 52.68 9 DKIM_VALID_AU 273533 49.31 48.32 49.52 10 XMListUnsubscribeExists 270232 51.67 64.64 48.92 11 XM_B_Unicode3 224250 41.98 48.50 40.59 12 DCC_CHECK 208677 43.54 70.68 37.77 13 T_TM2_M_HEADER_IN_MSG 159061 27.27 20.11 28.79 14 LOC_TINY_FONT_1 141910 27.77 37.54 25.69 15 DKIM_VALID_EF 137015 25.30 27.61 24.80 16 HTML_FONT_LOW_CONTRAST 135319 25.07 27.76 24.50 17 BAYES_00 114921 17.54 2.17 20.80 18 FVGT_m_MULTI_ODD 112805 21.37 25.83 20.42 19 MIME_HTML_ONLY 109744 21.62 29.88 19.87 20 XMSubLong 103507 19.36 22.31 18.74 21 T_KAM_HTML_FONT_INVALID 95306 18.14 22.32 17.25 22 ALL_TRUSTED 87608 14.42 7.68 15.86 23 TR_XM_DK_Bayes 78364 11.99 1.66 14.19 24 XM_Multi_Part_URI 77072 15.52 22.92 13.95 25 TR_XM_DK_Bayes1 73405 11.14 1.02 13.29 26 RCVD_IN_MSPIKE_H2 63280 10.68 7.03 11.45 27 TR_XM_DK_Bayes2 63080 9.59 0.97 11.42 28 XM_Body_Dirty_Words 61834 12.70 19.77 11.19 29 XM_B_Unsub 52715 9.81 11.08 9.54 30 XM_Evil_Numbers_Gen 52155 9.89 12.03 9.44 31 TooManyTo_001 49167 8.43 6.21 8.90 32 RCVD_IN_MSPIKE_H3 49098 7.93 3.44 8.89 33 RCVD_IN_MSPIKE_WL 49098 7.93 3.44 8.89 34 RCVD_IN_RP_SAFE 47611 7.67 3.21 8.62 35 XM_B_Phish_Phrases 47162 9.15 12.01 8.54 36 LotsOfNums_01 47069 8.73 9.71 8.52 37 RCVD_IN_RP_CERTIFIED 43976 6.96 2.27 7.96 38 FSL_BULK_SIG 39583 8.00 11.91 7.17 39 HTML_IMAGE_RATIO_02 38936 7.80 11.36 7.05 40 LOTS_OF_MONEY 38779 7.84 11.68 7.02 41 XM_DK_Undo_02 38417 13.00 41.46 6.95 42 XM_SendGrid 36462 6.20 4.31 6.60 43 XM_DKIMWhitelistDomains 35887 5.37 0.05 6.50 44 MIME_QP_LONG_LINE 33851 5.99 5.32 6.13 45 BAYES_40 32759 5.46 3.24 5.93 46 XM_H_Long_From01 31399 5.81 6.41 5.68 47 RELAYCOUNTRY_META 31370 8.01 19.00 5.68 48 RCVD_IN_IADB_LISTED 30819 4.94 1.93 5.58 49 DKIM_INVALID 30347 7.04 14.32 5.49 50 BAYES_60 27597 5.19 6.11 5.00 51 MPART_ALT_DIFF 27026 5.05 5.81 4.89 52 RCVD_IN_IADB_SPF 26757 4.31 1.81 4.84 53 BAYES_20 26010 4.41 3.01 4.71 54 HTML_IMAGE_RATIO_04 24626 4.73 6.02 4.46 55 T_TooManySym_01 23855 4.08 2.97 4.32 56 XM_PDF 23124 3.59 0.80 4.19 57 RCVD_IN_IADB_SENDERID 23110 3.76 1.76 4.18 58 RCVD_IN_IADB_DK 23014 3.75 1.76 4.17 59 BOTNET_IPINHOSTNAME 22924 6.01 14.74 4.15 60 XMStrtUSub 22373 3.98 3.65 4.05 61 T_REMOTE_IMAGE 22067 3.72 2.45 3.99 62 UNICODE_OBFU_ASC 20910 4.40 7.30 3.79 63 UPPERCASE_75_100 20780 4.11 5.73 3.76 64 IN_ZIMBRA_NJ_WHITELIST 20758 3.10 0.02 3.76 65 RCVD_IN_IADB_VOUCHED 20127 3.09 0.49 3.64 66 XMNumbers 20062 3.88 5.05 3.63 67 TR_XM_DK_SendGrid 19081 3.09 1.39 3.45 68 BAYES_99 18723 7.29 25.64 3.39 69 MIME_HTML_ONLY_MULTI 17755 3.14 2.82 3.21 70 NO_DNS_FOR_FROM 17685 4.59 11.15 3.20 71 BAYES_05 17556 2.94 1.81 3.18 72 TM2_M_URI_OPT_OUT 17163 3.16 3.40 3.11 73 XM_UncommonTLD01 17147 4.72 12.31 3.10 74 XMSexyCombo_05 16512 4.18 9.81 2.99 75 HTML_IMAGE_RATIO_06 16365 2.99 3.14 2.96 76 XM_B_SpammyTLD 15909 3.44 6.05 2.88 77 BOTNET 15808 6.26 22.27 2.86 78 TooManyTo_002 14997 2.37 0.73 2.71 79 BAYES_999 14900 5.66 19.58 2.70 80 XMSubMetaSx_00 14853 3.26 5.96 2.69 81 BAYES_80 14479 3.33 6.68 2.62 82 FROM_EXCESS_BASE64 14139 2.70 3.33 2.56 83 MAILING_LIST_MULTI 14106 2.39 1.60 2.55 84 XM_H_Trusted_IP 13459 2.01 0.00 2.44 85 ANY_BOUNCE_MESSAGE 13424 2.34 1.92 2.43 86 BOUNCE_MESSAGE 13414 2.34 1.92 2.43 87 KHOP_HELO_FCRDNS 13336 2.56 3.24 2.41 88 T_TooManySym_02 13289 2.17 1.07 2.41 89 RCVD_IN_IADB_OPTIN 12747 1.97 0.39 2.31 90 HTML_MIME_NO_HTML_TAG 12684 2.22 1.89 2.30 91 MIME_HTML_MOSTLY 12556 2.56 3.90 2.27 92 XMNoVowels 11381 2.18 2.72 2.06 93 HTML_IMAGE_RATIO_08 11328 2.09 2.27 2.05 94 XM_CamelCaseFrm001 10964 2.36 4.14 1.98 95 UNPARSEABLE_RELAY 10937 1.83 1.14 1.98 96 TooManyTo_003 10871 1.73 0.62 1.97 97 XM_DK_Undo_01 10580 1.83 1.42 1.92 98 XM_B_Unsub2 10389 1.99 2.50 1.88 99 T_XMDrugObfuBody_14 10046 1.87 2.14 1.82 100 TR_DCC_Bayes_99 9658 4.90 19.75 1.75 101 HELO_NODOT 9582 1.55 0.69 1.73 102 HELO_NO_DOMAIN 9580 1.55 0.69 1.73 103 XM_SPF_SoftFail 9431 2.24 4.73 1.71 104 XMDiploma_00 9320 1.75 2.05 1.69 105 UNTRUSTED_Relay 9289 3.37 11.31 1.68 106 BAYES_95 8786 1.91 3.44 1.59 107 TooManyTo_004 8705 1.39 0.52 1.58 108 RCVD_IN_MSPIKE_BL 8577 2.04 4.31 1.55 109 IN_HORDE_ADDRESS_BOOK 8501 1.27 0.03 1.54 110 TVD_RCVD_IP 8481 1.36 0.52 1.54 111 RELAYCOUNTRY_CA 8464 2.05 4.48 1.53 112 T_XMDrugObfuBody_08 8179 1.81 3.34 1.48 113 SUBJ_ALL_CAPS 8118 1.62 2.30 1.47 114 XMCapTrack 7909 1.29 0.62 1.43 115 XM_GoogleGroups 7826 1.25 0.47 1.42 116 INVALID_MSGID 7744 1.20 0.26 1.40 117 XM_H_Long_From02 7553 1.30 0.97 1.37 118 TooManyTo_005 7526 1.21 0.47 1.36 119 DKIM_ADSP_CUSTOM_MED 7162 1.35 1.61 1.30 120 TO_MALFORMED 7115 1.06 0.01 1.29 121 TR_MetaPhish_Combo_01 7101 1.29 1.31 1.29 122 URI_HEX 6988 1.46 2.39 1.26 123 RELAYCOUNTRY_GB 6770 1.35 1.95 1.23 124 TR_Symld_Words 6734 1.27 1.50 1.22 125 XMSubNoVowel 6662 1.13 0.78 1.21 126 CK_HELO_DYNAMIC_SPLIT_IP 6556 1.03 0.29 1.19 127 URI_TRY_3LD 6551 1.18 1.16 1.19 128 HELO_DYNAMIC_IPADDR2 6548 0.99 0.07 1.19 129 TM2_M_VERY_LONG_WORD 6525 1.29 1.81 1.18 130 RCVD_IN_MSPIKE_L3 6455 1.68 4.10 1.17 131 XM_OfRef6 6409 1.40 2.54 1.16 132 XMBdyGiftCard01 6325 1.12 1.00 1.14 133 XMGenDplmaNmb 5920 1.12 1.37 1.07 134 T_FILL_THIS_FORM_SHORT 5759 1.03 0.98 1.04 135 USER_IN_DEF_DKIM_WL 5723 0.85 0.00 1.04 136 XMStockSpam_06 5379 1.09 1.66 0.97 137 XMBrknScrpt_02 5314 1.01 1.22 0.96 138 HTML_FONT_FACE_BAD 5250 0.86 0.46 0.95 139 MISSING_HEADERS 5209 1.38 3.43 0.94 140 HTTPS_HTTP_MISMATCH 5208 0.96 1.02 0.94 141 RCVD_IN_BL_SPAMCOP_NET 5174 1.42 3.67 0.94 142 XM_UB50 5173 1.83 6.03 0.94 143 NML_ADSP_CUSTOM_MED 4921 0.97 1.35 0.89 144 XMGappySubj_01 4911 0.76 0.18 0.89 145 XM_E_Blogspot 4654 0.71 0.11 0.84 146 XM_RXBody 4372 0.86 1.17 0.79 147 SpammyFromTLD_01 4304 1.08 2.52 0.78 148 TR_MSPIKEBAYES00 4278 0.64 0.00 0.77 149 XMHTML_After_End 4085 0.93 1.85 0.74 150 FORGED_GMAIL_RCVD 3900 0.83 1.43 0.71 151 T_TooManySym_03 3828 0.62 0.27 0.69 152 XM_ProductURIs 3803 0.78 1.19 0.69 153 XMPhish30 3732 0.76 1.15 0.68 154 XM_SPF_Unknown 3691 0.68 0.74 0.67 155 XM_ShortIntro_01 3634 0.69 0.83 0.66 156 XMBody_17 3605 1.01 2.68 0.65 157 T_XMDrugObfuBody_00 3503 0.79 1.55 0.63 158 T_MONEY_PERCENT 3345 0.74 1.35 0.61 159 TR_LOTS_OF_MONEY2 3345 0.74 1.35 0.61 160 XM_B_REG_HTML 3273 0.57 0.44 0.59 161 XMMoneyMeta_00 2915 0.56 0.70 0.53 162 T_OBFU_PDF_ATTACH 2903 0.46 0.15 0.53 163 RELAYCOUNTRY_AU 2863 0.53 0.57 0.52 164 FILL_THIS_FORM 2829 0.46 0.24 0.51 165 XM_DIRTYINTL 2790 1.05 3.60 0.51 166 FROM_GOV_SPOOF 2744 0.47 0.36 0.50 167 T_XMHurry_00 2714 0.63 1.28 0.49 168 T_Symld_Words_02 2697 0.54 0.79 0.49 169 PDS_OTHER_BAD_TLD 2680 1.18 4.43 0.49 170 RELAYCOUNTRY_DE 2655 0.52 0.70 0.48 171 RCVD_IN_SORBS_DUL 2622 0.42 0.18 0.47 172 XMSubMetaI_00 2603 0.70 1.75 0.47 173 FROM_GOV_DKIM_AU 2566 0.42 0.21 0.46 174 HTML_IMAGE_ONLY_28 2533 0.48 0.60 0.46 175 HTML_TAG_BALANCE_BODY 2496 0.46 0.52 0.45 176 XMHTMLBadTable_001 2482 0.54 0.97 0.45 177 HTML_IMAGE_ONLY_20 2442 0.47 0.62 0.44 178 XM_H_PHPMailer 2419 0.64 1.60 0.44 179 MSGID_FROM_MTA_HEADER 2376 0.40 0.26 0.43 180 TR_XM_PHPDW 2349 0.86 2.91 0.43 181 TM2_M_BODY_EMPTY 2342 0.40 0.29 0.42 182 HTML_IMAGE_ONLY_32 2331 0.38 0.20 0.42 183 SHORT_HELO_AND_INLINE_IMAGE 2305 0.35 0.02 0.42 184 XMPhish08 2294 0.55 1.16 0.42 185 TR_XM_FormFill2 2278 0.84 2.85 0.41 186 TR_XM_PHPForged 2274 0.84 2.86 0.41 187 XMSexyCombo_01 2272 0.61 1.56 0.41 188 XM_H_PHPOS 2239 0.83 2.84 0.41 189 XM_H_Undi_Recip 2194 0.43 0.61 0.40 190 PLING_QUERY 2193 0.45 0.68 0.40 191 MPART_ALT_DIFF_COUNT 2193 0.48 0.84 0.40 192 REMOVE_BEFORE_LINK 2191 0.58 1.42 0.40 193 HTML_IMAGE_ONLY_24 2143 0.37 0.31 0.39 194 RCVD_IN_MSPIKE_L4 2122 0.34 0.12 0.38 195 DIET_1 2103 0.47 0.90 0.38 196 USER_IN_WHITELIST 1993 0.30 0.00 0.36 197 XMBody_95 1957 0.31 0.09 0.35 198 XMSubMetaSxObfu_03 1955 0.42 0.74 0.35 199 XMSlimDrugH 1949 0.39 0.56 0.35 200 TVD_SPACE_RATIO 1875 0.30 0.14 0.34 ----------------------------------------------------------------------