Email: 368496 Autolearn: 0 AvgScore: 1.69 AvgScanTime: 2.19 sec Spam: 93861 Autolearn: 0 AvgScore: 15.64 AvgScanTime: 2.78 sec Ham: 274635 Autolearn: 0 AvgScore: -3.08 AvgScanTime: 1.99 sec Time Spent Running SA: 224.42 hours Time Spent Processing Spam: 72.42 hours Time Spent Processing Ham: 152.00 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 85352 86.90 90.93 85.52 2 DCC_CHECK 75134 55.96 80.05 47.72 3 DKIM_SIGNED 55205 74.68 58.82 80.10 4 XM_B_Unicode 54202 68.13 57.75 71.67 5 XM_DK_Pass 52471 73.28 55.90 79.22 6 DKIM_VALID 48456 69.69 51.63 75.86 7 XMListUnsubscribeExists 46515 56.32 49.56 58.64 8 MIME_HTML_ONLY 42921 29.54 45.73 24.01 9 BAYES_50 40200 50.27 42.83 52.81 10 DKIM_VALID_AU 37089 55.64 39.51 61.16 11 XM_B_Unicode3 35118 42.99 37.41 44.90 12 RELAYCOUNTRY_META 31986 12.55 34.08 5.20 13 XM_UncommonTLD01 30770 11.83 32.78 4.67 14 FSL_BULK_SIG 28670 13.16 30.55 7.22 15 HTML_FONT_LOW_CONTRAST 25931 31.26 27.63 32.50 16 XM_DK_Undo_02 25687 13.32 27.37 8.51 17 LOC_TINY_FONT_1 25070 28.72 26.71 29.41 18 BOTNET 24632 8.24 26.24 2.08 19 UNTRUSTED_Relay 23935 7.62 25.50 1.51 20 XMSubLong 22637 22.76 24.12 22.30 21 BAYES_99 21945 9.65 23.38 4.96 22 XM_Body_Dirty_Words 20609 16.60 21.96 14.77 23 XM_B_Unsub 19927 12.90 21.23 10.06 24 MultiRelay 19434 17.20 20.71 16.00 25 BOTNET_IPINHOSTNAME 17935 9.43 19.11 6.13 26 DKIM_VALID_EF 17721 26.41 18.88 28.99 27 BAYES_999 17400 7.80 18.54 4.13 28 RCVD_IN_BL_SPAMCOP_NET 16717 5.78 17.81 1.67 29 FVGT_m_MULTI_ODD 16697 20.63 17.79 21.61 30 TR_DCC_Bayes_99 16687 6.30 17.78 2.37 31 DCC_CHECK_NEGATIVE 16590 42.57 17.68 51.08 32 HTML_IMAGE_RATIO_02 16316 12.49 17.38 10.82 33 SpammyFromTLD_02 16220 4.51 17.28 0.15 34 KHOP_HELO_FCRDNS 16012 6.17 17.06 2.45 35 XMSexyCombo_05 13854 7.61 14.76 5.17 36 T_TM2_M_HEADER_IN_MSG 13768 22.33 14.67 24.95 37 HTML_MIME_NO_HTML_TAG 12773 4.77 13.61 1.75 38 T_KAM_HTML_FONT_INVALID 12643 16.16 13.47 17.08 39 XM_Multi_Part_URI 12147 13.75 12.94 14.02 40 XM_H_Long_From01 12081 7.85 12.87 6.14 41 XM_UB50 11998 3.90 12.78 0.87 42 HTML_SHORT_LINK_IMG_1 11480 3.15 12.23 0.05 43 XM_DIRTYINTL 11455 5.13 12.20 2.71 44 RCVD_IN_RP_RNBL 11088 3.08 11.81 0.10 45 LOTS_OF_MONEY 10863 10.73 11.57 10.44 46 T_REMOTE_IMAGE 10423 6.04 11.10 4.31 47 FROM_SUSPICIOUS_NTLD 9768 2.67 10.41 0.03 48 FROM_SUSPICIOUS_NTLD_FP 9741 2.66 10.38 0.02 49 HTML_IMAGE_ONLY_12 9516 2.68 10.14 0.14 50 RDNS_DYNAMIC 8482 2.64 9.04 0.45 51 RCVD_IN_MSPIKE_BL 8375 3.12 8.92 1.14 52 RCVD_IN_PSBL 8147 2.28 8.68 0.09 53 BOTNET_NORDNS 7938 2.17 8.46 0.02 54 MIME_HEADER_CTYPE_ONLY 7839 2.20 8.35 0.10 55 MPART_ALT_DIFF 7832 5.95 8.34 5.13 56 T_XMDrugObfuBody_14 7669 8.07 8.17 8.04 57 TooManyTo_001 7426 6.87 7.91 6.51 58 XMBdyGiftCard01 7372 3.67 7.85 2.24 59 HDRS_LCASE_IMGONLY 7354 2.01 7.83 0.02 60 XM_B_SpammyTLD 7294 3.44 7.77 1.96 61 XMNumbers 7246 5.17 7.72 4.30 62 BAYES_60 6894 5.70 7.34 5.14 63 TR_Mismatch_TLD_02 6867 1.90 7.32 0.05 64 DKIM_INVALID 6749 4.99 7.19 4.24 65 DKIM_ADSP_NXDOMAIN 6741 2.74 7.18 1.22 66 XM_Evil_Numbers_Gen 6633 9.02 7.07 9.68 67 BAYES_80 6548 3.90 6.98 2.86 68 XMSubMetaSx_00 6365 5.87 6.78 5.55 69 XM_SPF_SoftFail 6322 3.63 6.74 2.57 70 FROM_EXCESS_BASE64 5922 4.88 6.31 4.40 71 XMSubGiftCard1 5834 1.66 6.22 0.10 72 XMSubGiftCard2 5728 1.57 6.10 0.02 73 RCVD_IN_MSPIKE_L5 5640 1.72 6.01 0.25 74 RCVD_IN_MSPIKE_H2 5454 8.29 5.81 9.14 75 BODY_URI_ONLY 5444 1.51 5.80 0.05 76 MIME_HTML_MOSTLY 5231 3.60 5.57 2.92 77 REPLYTO_WITHOUT_TO_CC 5207 1.44 5.55 0.03 78 BAYES_40 5101 5.26 5.43 5.20 79 RELAYCOUNTRY_DE 4811 1.56 5.13 0.34 80 LotsOfNums_01 4776 7.16 5.09 7.87 81 HTML_IMAGE_RATIO_04 4704 5.96 5.01 6.28 82 XM_B_Phish_Phrases 4564 6.20 4.86 6.66 83 SpammyFromTLD_01 4506 1.59 4.80 0.50 84 RELAYCOUNTRY_CA 4468 2.77 4.76 2.09 85 RELAYCOUNTRY_FR 4256 1.41 4.53 0.34 86 SHORT_IMG_SUSP_NTLD 4128 1.12 4.40 0.00 87 BAYES_20 3955 4.10 4.21 4.07 88 DATE_IN_PAST_03_06 3928 1.13 4.18 0.09 89 HDRS_MISSP 3905 1.07 4.16 0.01 90 BODY_SINGLE_WORD 3812 1.04 4.06 0.01 91 XMStrtUSub 3797 4.42 4.05 4.55 92 XM_SendGrid 3770 5.96 4.02 6.63 93 BODY_SINGLE_URI 3750 1.02 4.00 0.00 94 BAYES_95 3679 2.42 3.92 1.91 95 TO_EQ_FM_DOM_HTML_IMG 3532 0.96 3.76 0.01 96 MIME_HTML_ONLY_MULTI 3524 3.22 3.75 3.04 97 MultiRelay_CC 3447 1.05 3.67 0.15 98 MultiRelay_Combo 3447 1.05 3.67 0.15 99 BAYES_00 3368 15.92 3.59 20.13 100 XM_CamelCaseFrm001 3328 2.97 3.55 2.78 101 NO_DNS_FOR_FROM 3287 2.49 3.50 2.14 102 URI_NOVOWEL 3269 1.09 3.48 0.27 103 RELAYCOUNTRY_CN 3257 0.91 3.47 0.04 104 T_TooManySym_01 3120 5.92 3.32 6.80 105 XM_UB99 2990 0.82 3.19 0.01 106 XM_H_TOP 2889 0.78 3.08 0.00 107 XMSexyCombo_01 2884 1.93 3.07 1.53 108 HTML_IMAGE_RATIO_06 2803 3.74 2.99 4.00 109 MIME_QP_LONG_LINE 2698 4.34 2.87 4.84 110 DIET_1 2693 1.60 2.87 1.16 111 NORDNS_LOW_CONTRAST 2624 0.71 2.80 0.00 112 XM_UB999 2556 0.70 2.72 0.01 113 UNPARSEABLE_RELAY 2450 3.58 2.61 3.92 114 TVD_SPACE_RATIO_MINFP 2436 0.67 2.60 0.01 115 FROM_NTLD_LINKBAIT 2408 0.65 2.57 0.00 116 FVGT_m_MULTI_ODD_EMAIL 2396 0.67 2.55 0.03 117 CHARSET_FARAWAY_HEADER 2360 0.66 2.51 0.03 118 T_Symld_Words_02 2314 1.20 2.47 0.77 119 T_HTML_TAG_BALANCE_CENTER 2308 0.72 2.46 0.13 120 TR_XM_RelayPhish 2250 1.36 2.40 1.00 121 RCVD_IN_MSPIKE_L3 2215 1.05 2.36 0.60 122 TR_XM_DK_SendGrid 2144 3.41 2.28 3.79 123 SERGIO_SUBJECT_PORN014 2133 0.58 2.27 0.00 124 XMSlimDrugH 2116 0.94 2.25 0.49 125 MIME_CHARSET_FARAWAY 2113 0.64 2.25 0.09 126 MISSING_MIMEOLE 2049 0.62 2.18 0.09 127 URI_HEX 2028 1.57 2.16 1.37 128 HTML_IMAGE_ONLY_08 1982 0.62 2.11 0.10 129 RCVD_IN_MSPIKE_H3 1970 8.46 2.10 10.64 130 RCVD_IN_MSPIKE_WL 1970 8.47 2.10 10.65 131 XMSexyCombo_04 1925 0.83 2.05 0.41 132 XM_URI_RBL 1867 0.72 1.99 0.28 133 BAYES_05 1860 2.45 1.98 2.61 134 XM_UB60 1800 0.53 1.92 0.06 135 HTML_IMAGE_RATIO_08 1749 2.10 1.86 2.18 136 XM_OfRef6 1719 1.47 1.83 1.34 137 TR_Symld_Words 1718 1.72 1.83 1.69 138 TVD_RCVD_SPACE_BRACKET 1686 0.46 1.80 0.00 139 SUBJECT_NEEDS_ENCODING 1677 0.46 1.79 0.01 140 SUBJ_ILLEGAL_CHARS 1669 0.46 1.78 0.01 141 HK_RANDOM_FROM 1665 0.54 1.77 0.11 142 SUBJ_ALL_CAPS 1659 1.78 1.77 1.79 143 RELAYCOUNTRY_NL 1641 0.54 1.75 0.13 144 TM2_M_URI_OPT_OUT 1579 1.53 1.68 1.48 145 HK_RANDOM_REPLYTO 1568 0.61 1.67 0.25 146 DATE_IN_PAST_06_12 1566 0.47 1.67 0.07 147 RCVD_IN_RP_SAFE 1565 10.68 1.67 13.76 148 TR_XM_PHPDW 1564 0.79 1.67 0.50 149 HTML_IMAGE_ONLY_04 1533 0.44 1.63 0.04 150 T_XMDrugObfuBody_08 1526 1.67 1.63 1.69 151 LongTLD 1519 0.52 1.62 0.14 152 TO_MALFORMED 1517 2.20 1.62 2.39 153 HTML_SHORT_CENTER 1507 0.41 1.61 0.01 154 TR_XM_PHPForged 1483 0.75 1.58 0.46 155 XMMoneyMeta_00 1479 0.55 1.58 0.20 156 RELAYCOUNTRY_TR 1470 0.41 1.57 0.01 157 TR_XM_FormFill2 1465 0.74 1.56 0.46 158 XMDiploma_00 1460 1.47 1.56 1.44 159 XM_H_PHPOS 1458 0.73 1.55 0.45 160 XM_B_Unsub2 1452 1.25 1.55 1.15 161 XMSubMetaSx_01 1439 0.48 1.53 0.11 162 RELAYCOUNTRY_GB 1425 0.76 1.52 0.50 163 XMWghtMeta_00 1394 0.43 1.49 0.06 164 TVD_SPACE_RATIO 1382 0.61 1.47 0.32 165 XMSlimDrugs 1378 0.39 1.47 0.03 166 HTML_SHORT_LINK_IMG_2 1375 0.40 1.46 0.03 167 XMBody_17 1369 1.03 1.46 0.89 168 XMStockSpam_06 1361 1.14 1.45 1.03 169 RCVD_IN_IADB_LISTED 1343 3.32 1.43 3.97 170 DATE_IN_PAST_12_24 1341 0.44 1.43 0.10 171 RELAYCOUNTRY_RU 1330 0.37 1.42 0.01 172 TM2_M_VERY_LONG_WORD 1305 1.41 1.39 1.42 173 XMPhish11 1300 1.12 1.39 1.02 174 TR_XM_INV_DKIM 1297 0.55 1.38 0.26 175 CHARSET_FARAWAY 1290 0.35 1.37 0.00 176 URI_TRY_3LD 1277 1.62 1.36 1.71 177 RCVD_IN_RP_CERTIFIED 1245 9.54 1.33 12.34 178 XMSexyCombo_02 1243 0.35 1.32 0.02 179 RCVD_IN_IADB_SPF 1240 2.83 1.32 3.34 180 RCVD_IN_IADB_SENDERID 1217 2.50 1.30 2.90 181 RCVD_IN_IADB_DK 1215 2.41 1.29 2.79 182 XMSubNoVowel 1206 0.98 1.28 0.87 183 XMSubject_09 1200 0.33 1.28 0.01 184 RELAYCOUNTRY_BR 1195 0.33 1.27 0.01 185 T_MONEY_PERCENT 1185 0.65 1.26 0.45 186 TR_LOTS_OF_MONEY2 1185 0.65 1.26 0.45 187 NO_MEDICAL 1169 0.32 1.25 0.00 188 INVALID_MSGID 1162 2.32 1.24 2.69 189 XMSubMetaSSx_00 1154 0.44 1.23 0.17 190 TooManyTo_002 1148 1.68 1.22 1.84 191 SUBJ_OBFU_PUNCT_FEW 1139 0.35 1.21 0.05 192 ALL_TRUSTED 1134 10.15 1.21 13.21 193 XMHTML_After_End 1122 0.92 1.20 0.83 194 XMSubMetaI_00 1110 0.87 1.18 0.76 195 RELAYCOUNTRY_LT 1086 0.32 1.16 0.04 196 MAILING_LIST_MULTI 1078 1.98 1.15 2.26 197 URI_NO_WWW_INFO_CGI 1077 0.34 1.15 0.07 198 DATE_IN_FUTURE_06_12 1071 0.29 1.14 0.00 199 XMGenDplmaNmb 1060 0.97 1.13 0.92 200 RELAYCOUNTRY_IN 1059 0.31 1.13 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 234874 86.90 90.93 85.52 2 DKIM_SIGNED 219994 74.68 58.82 80.10 3 XM_DK_Pass 217564 73.28 55.90 79.22 4 DKIM_VALID 208338 69.69 51.63 75.86 5 XM_B_Unicode 196836 68.13 57.75 71.67 6 DKIM_VALID_AU 167955 55.64 39.51 61.16 7 XMListUnsubscribeExists 161034 56.32 49.56 58.64 8 BAYES_50 145035 50.27 42.83 52.81 9 DCC_CHECK_NEGATIVE 140290 42.57 17.68 51.08 10 DCC_CHECK 131068 55.96 80.05 47.72 11 XM_B_Unicode3 123308 42.99 37.41 44.90 12 HTML_FONT_LOW_CONTRAST 89265 31.26 27.63 32.50 13 LOC_TINY_FONT_1 80770 28.72 26.71 29.41 14 DKIM_VALID_EF 79617 26.41 18.88 28.99 15 T_TM2_M_HEADER_IN_MSG 68534 22.33 14.67 24.95 16 MIME_HTML_ONLY 65937 29.54 45.73 24.01 17 XMSubLong 61244 22.76 24.12 22.30 18 FVGT_m_MULTI_ODD 59338 20.63 17.79 21.61 19 BAYES_00 55288 15.92 3.59 20.13 20 T_KAM_HTML_FONT_INVALID 46899 16.16 13.47 17.08 21 TR_XM_DK_Bayes 45183 12.52 1.01 16.45 22 MultiRelay 43945 17.20 20.71 16.00 23 TR_XM_DK_Bayes1 43452 12.00 0.84 15.82 24 TR_XM_DK_Bayes2 40890 11.26 0.63 14.89 25 XM_Body_Dirty_Words 40550 16.60 21.96 14.77 26 XM_Multi_Part_URI 38505 13.75 12.94 14.02 27 RCVD_IN_RP_SAFE 37792 10.68 1.67 13.76 28 ALL_TRUSTED 36270 10.15 1.21 13.21 29 RCVD_IN_RP_CERTIFIED 33900 9.54 1.33 12.34 30 HTML_IMAGE_RATIO_02 29723 12.49 17.38 10.82 31 XM_DKIMWhitelistDomains 29482 8.00 0.01 10.73 32 RCVD_IN_MSPIKE_WL 29247 8.47 2.10 10.65 33 RCVD_IN_MSPIKE_H3 29223 8.46 2.10 10.64 34 LOTS_OF_MONEY 28669 10.73 11.57 10.44 35 XM_B_Unsub 27625 12.90 21.23 10.06 36 XM_Evil_Numbers_Gen 26598 9.02 7.07 9.68 37 RCVD_IN_MSPIKE_H2 25104 8.29 5.81 9.14 38 XM_DK_Undo_02 23382 13.32 27.37 8.51 39 T_XMDrugObfuBody_14 22068 8.07 8.17 8.04 40 LotsOfNums_01 21613 7.16 5.09 7.87 41 FSL_BULK_SIG 19828 13.16 30.55 7.22 42 T_TooManySym_01 18686 5.92 3.32 6.80 43 XM_B_Phish_Phrases 18284 6.20 4.86 6.66 44 XM_SendGrid 18200 5.96 4.02 6.63 45 TooManyTo_001 17881 6.87 7.91 6.51 46 HTML_IMAGE_RATIO_04 17241 5.96 5.01 6.28 47 XM_H_Long_From01 16857 7.85 12.87 6.14 48 BOTNET_IPINHOSTNAME 16832 9.43 19.11 6.13 49 XMSubMetaSx_00 15252 5.87 6.78 5.55 50 BAYES_40 14277 5.26 5.43 5.20 51 RELAYCOUNTRY_META 14274 12.55 34.08 5.20 52 XMSexyCombo_05 14198 7.61 14.76 5.17 53 BAYES_60 14103 5.70 7.34 5.14 54 MPART_ALT_DIFF 14100 5.95 8.34 5.13 55 BAYES_99 13626 9.65 23.38 4.96 56 MIME_QP_LONG_LINE 13283 4.34 2.87 4.84 57 XM_UncommonTLD01 12816 11.83 32.78 4.67 58 XMStrtUSub 12496 4.42 4.05 4.55 59 FROM_EXCESS_BASE64 12073 4.88 6.31 4.40 60 T_REMOTE_IMAGE 11832 6.04 11.10 4.31 61 TVD_RCVD_IP 11811 3.38 0.69 4.30 62 XMNumbers 11799 5.17 7.72 4.30 63 DKIM_INVALID 11656 4.99 7.19 4.24 64 BAYES_999 11338 7.80 18.54 4.13 65 BAYES_20 11168 4.10 4.21 4.07 66 HTML_IMAGE_RATIO_06 10978 3.74 2.99 4.00 67 RCVD_IN_IADB_LISTED 10906 3.32 1.43 3.97 68 UNPARSEABLE_RELAY 10757 3.58 2.61 3.92 69 TR_XM_DK_SendGrid 10408 3.41 2.28 3.79 70 T_TooManySym_02 10220 3.06 1.11 3.72 71 IN_ZIMBRA_NJ_WHITELIST 9683 2.63 0.01 3.53 72 RCVD_IN_IADB_SPF 9180 2.83 1.32 3.34 73 MIME_HTML_ONLY_MULTI 8355 3.22 3.75 3.04 74 MIME_HTML_MOSTLY 8018 3.60 5.57 2.92 75 RCVD_IN_IADB_SENDERID 7977 2.50 1.30 2.90 76 BAYES_80 7841 3.90 6.98 2.86 77 RCVD_IN_IADB_DK 7658 2.41 1.29 2.79 78 XM_CamelCaseFrm001 7631 2.97 3.55 2.78 79 RCVD_IN_IADB_VOUCHED 7490 2.11 0.30 2.73 80 XM_DIRTYINTL 7453 5.13 12.20 2.71 81 INVALID_MSGID 7392 2.32 1.24 2.69 82 CK_HELO_DYNAMIC_SPLIT_IP 7214 2.20 0.95 2.63 83 HELO_DYNAMIC_IPADDR2 7211 2.08 0.47 2.63 84 BAYES_05 7167 2.45 1.98 2.61 85 XM_SPF_SoftFail 7047 3.63 6.74 2.57 86 KHOP_HELO_FCRDNS 6739 6.17 17.06 2.45 87 XM_PDF 6700 1.92 0.38 2.44 88 TO_MALFORMED 6574 2.20 1.62 2.39 89 TR_DCC_Bayes_99 6510 6.30 17.78 2.37 90 MAILING_LIST_MULTI 6216 1.98 1.15 2.26 91 XMBdyGiftCard01 6152 3.67 7.85 2.24 92 HTML_IMAGE_RATIO_08 5984 2.10 1.86 2.18 93 NO_DNS_FOR_FROM 5881 2.49 3.50 2.14 94 RELAYCOUNTRY_CA 5739 2.77 4.76 2.09 95 BOTNET 5715 8.24 26.24 2.08 96 XM_B_SpammyTLD 5376 3.44 7.77 1.96 97 BAYES_95 5232 2.42 3.92 1.91 98 USER_IN_DEF_DKIM_WL 5055 1.37 0.01 1.84 99 TooManyTo_002 5054 1.68 1.22 1.84 100 XMGappySubj_01 4932 1.41 0.29 1.80 101 SUBJ_ALL_CAPS 4906 1.78 1.77 1.79 102 HTML_MIME_NO_HTML_TAG 4817 4.77 13.61 1.75 103 RCVD_IN_IADB_OPTIN 4815 1.38 0.28 1.75 104 URI_TRY_3LD 4685 1.62 1.36 1.71 105 T_XMDrugObfuBody_08 4640 1.67 1.63 1.69 106 TR_Symld_Words 4637 1.72 1.83 1.69 107 RCVD_IN_BL_SPAMCOP_NET 4594 5.78 17.81 1.67 108 IN_HORDE_ADDRESS_BOOK 4501 1.23 0.04 1.64 109 XMSexyCombo_01 4212 1.93 3.07 1.53 110 BOUNCE_MESSAGE 4160 1.19 0.25 1.51 111 ANY_BOUNCE_MESSAGE 4160 1.19 0.25 1.51 112 UNTRUSTED_Relay 4155 7.62 25.50 1.51 113 TM2_M_URI_OPT_OUT 4067 1.53 1.68 1.48 114 XM_H_Trusted_IP 4033 1.09 0.00 1.47 115 XM_shorewaves_Whitelist 3991 1.08 0.00 1.45 116 XMDiploma_00 3962 1.47 1.56 1.44 117 XM_H_Long_From02 3953 1.23 0.61 1.44 118 TM2_M_VERY_LONG_WORD 3892 1.41 1.39 1.42 119 XM_ProductURIs 3834 1.27 0.90 1.40 120 TooManyTo_003 3789 1.28 0.99 1.38 121 URI_HEX 3751 1.57 2.16 1.37 122 XM_OfRef6 3691 1.47 1.83 1.34 123 XM_DK_Undo_01 3685 1.19 0.74 1.34 124 DKIM_ADSP_NXDOMAIN 3343 2.74 7.18 1.22 125 DIET_1 3192 1.60 2.87 1.16 126 XM_B_Unsub2 3155 1.25 1.55 1.15 127 XM_GoogleGroups 3141 0.93 0.30 1.14 128 RCVD_IN_MSPIKE_BL 3136 3.12 8.92 1.14 129 XMBody_95 2998 0.83 0.08 1.09 130 TooManyTo_004 2920 0.99 0.78 1.06 131 XMStockSpam_06 2826 1.14 1.45 1.03 132 XMPhish11 2814 1.12 1.39 1.02 133 TR_XM_RelayPhish 2758 1.36 2.40 1.00 134 XM_B_REG_HTML 2601 0.78 0.30 0.95 135 USER_IN_WHITELIST 2579 0.70 0.00 0.94 136 XMGenDplmaNmb 2525 0.97 1.13 0.92 137 XMBody_17 2443 1.03 1.46 0.89 138 TR_MetaPhish_Combo_01 2417 0.77 0.43 0.88 139 XMSubNoVowel 2387 0.98 1.28 0.87 140 XM_UB50 2382 3.90 12.78 0.87 141 T_FILL_THIS_FORM_SHORT 2365 0.89 0.96 0.86 142 DKIM_ADSP_CUSTOM_MED 2337 0.89 1.01 0.85 143 T_XMHurry_00 2321 0.89 1.03 0.85 144 TooManyTo_005 2308 0.78 0.62 0.84 145 XMHTML_After_End 2277 0.92 1.20 0.83 146 AC_FROM_MANY_DOTS 2221 0.61 0.01 0.81 147 HTML_TAG_BALANCE_BODY 2205 0.70 0.39 0.80 148 T_XMDrugObfuBody_00 2168 0.75 0.65 0.79 149 T_Symld_Words_02 2113 1.20 2.47 0.77 150 XMBrknScrpt_02 2101 0.77 0.79 0.77 151 XMSubMetaSxObfu_03 2092 0.79 0.89 0.76 152 XMSubMetaI_00 2079 0.87 1.18 0.76 153 XMPhish30 2062 0.76 0.78 0.75 154 HTML_FONT_FACE_BAD 2062 0.70 0.56 0.75 155 XMGappySubj_02 2035 0.57 0.06 0.74 156 XMNoVowels 1857 0.55 0.19 0.68 157 T_TooManySym_03 1802 0.52 0.12 0.66 158 HELO_NODOT 1695 0.60 0.55 0.62 159 HELO_NO_DOMAIN 1692 0.60 0.53 0.62 160 XMBody_78 1681 0.64 0.71 0.61 161 THIS_AD 1658 0.57 0.48 0.60 162 XMSubMetaSxObfu_02 1656 0.53 0.30 0.60 163 RCVD_IN_MSPIKE_L3 1643 1.05 2.36 0.60 164 NML_ADSP_CUSTOM_MED 1625 0.67 0.91 0.59 165 TM2_M_A_HREF_HREF 1616 0.69 1.00 0.59 166 XM_D_tchamptons_WL 1575 0.43 0.00 0.57 167 HTML_IMAGE_ONLY_20 1573 0.48 0.19 0.57 168 XMHTMLBadTable_001 1565 0.62 0.77 0.57 169 XM_H_PHPMailer 1559 0.71 1.11 0.57 170 SUBJ_DOLLARS 1502 0.53 0.48 0.55 171 RELAYCOUNTRY_GB 1385 0.76 1.52 0.50 172 FORGED_GMAIL_RCVD 1383 0.57 0.77 0.50 173 SpammyFromTLD_01 1366 1.59 4.80 0.50 174 TR_XM_PHPDW 1363 0.79 1.67 0.50 175 XMSlimDrugH 1339 0.94 2.25 0.49 176 FILL_THIS_FORM 1279 0.62 1.06 0.47 177 TR_XM_PHPForged 1267 0.75 1.58 0.46 178 TR_XM_FormFill2 1254 0.74 1.56 0.46 179 RDNS_DYNAMIC 1247 2.64 9.04 0.45 180 XM_B_COPY_HTML 1243 0.52 0.71 0.45 181 XM_H_PHPOS 1241 0.73 1.55 0.45 182 TR_LOTS_OF_MONEY2 1225 0.65 1.26 0.45 183 T_MONEY_PERCENT 1225 0.65 1.26 0.45 184 PLING_QUERY 1206 0.47 0.55 0.44 185 XMCapTrack 1185 0.40 0.30 0.43 186 T_TooManySym_04 1144 0.32 0.04 0.42 187 XMRcvdHeader_15 1134 0.31 0.00 0.41 188 XMSexyCombo_04 1129 0.83 2.05 0.41 189 FSL_HELO_FAKE 1091 0.38 0.34 0.40 190 XM_SPF_Unknown 1085 0.54 0.95 0.40 191 MPART_ALT_DIFF_COUNT 1040 0.44 0.62 0.38 192 XM_RXBody 1035 0.35 0.26 0.38 193 RELAYCOUNTRY_AU 1026 0.36 0.33 0.37 194 XM_Body_Obfu01 1016 0.33 0.21 0.37 195 XMBSHREFv2 974 0.40 0.53 0.35 196 RELAYCOUNTRY_SE 974 0.29 0.11 0.35 197 XM_Akamai 957 0.26 0.01 0.35 198 RELAYCOUNTRY_DE 945 1.56 5.13 0.34 199 FROM_GOV_DKIM_AU 945 0.27 0.06 0.34 200 FILL_THIS_FORM_LONG 936 0.51 0.99 0.34 ----------------------------------------------------------------------