Email: 751003 Autolearn: 0 AvgScore: 0.23 AvgScanTime: 1.99 sec Spam: 125091 Autolearn: 0 AvgScore: 11.80 AvgScanTime: 3.82 sec Ham: 625912 Autolearn: 0 AvgScore: -2.08 AvgScanTime: 1.63 sec Time Spent Running SA: 416.05 hours Time Spent Processing Spam: 132.78 hours Time Spent Processing Ham: 283.27 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 119067 88.56 95.18 87.23 2 DKIM_SIGNED 99794 65.10 79.78 62.16 3 DCC_CHECK 97352 46.15 77.82 39.82 4 XM_DK_Pass 96689 63.80 77.29 61.11 5 XM_B_Unicode 94866 67.66 75.84 66.03 6 XMListUnsubscribeExists 82517 46.65 65.97 42.79 7 DKIM_VALID 82198 59.01 65.71 57.67 8 DKIM_VALID_AU 61015 44.27 48.78 43.37 9 XM_B_Unicode3 58962 41.12 47.14 39.92 10 BAYES_50 56159 46.94 44.89 47.35 11 XM_DK_Undo_02 47695 11.47 38.13 6.14 12 MIME_HTML_ONLY 43322 22.41 34.63 19.97 13 HTML_FONT_LOW_CONTRAST 40361 24.67 32.27 23.15 14 LOC_TINY_FONT_1 39674 21.23 31.72 19.13 15 FVGT_m_MULTI_ODD 33757 22.77 26.99 21.92 16 XMSubLong 32536 19.68 26.01 18.41 17 DKIM_VALID_EF 30699 21.81 24.54 21.26 18 T_KAM_HTML_FONT_INVALID 30042 16.01 24.02 14.40 19 BAYES_99 29775 6.25 23.80 2.74 20 T_TM2_M_HEADER_IN_MSG 28555 26.49 22.83 27.23 21 BOTNET 28101 5.96 22.46 2.66 22 DCC_CHECK_NEGATIVE 25304 52.12 20.23 58.50 23 XM_Body_Dirty_Words 25195 12.26 20.14 10.68 24 RELAYCOUNTRY_META 24071 7.29 19.24 4.91 25 BAYES_999 22922 4.91 18.32 2.23 26 TR_DCC_Bayes_99 22294 4.21 17.82 1.49 27 XM_Multi_Part_URI 21817 12.62 17.44 11.66 28 XM_B_Unsub 21746 10.01 17.38 8.53 29 FSL_BULK_SIG 20722 12.66 16.57 11.88 30 MultiRelay 20554 13.59 16.43 13.02 31 DKIM_INVALID 17596 6.09 14.07 4.50 32 BOTNET_IPINHOSTNAME 17344 5.47 13.87 3.79 33 LOTS_OF_MONEY 17088 8.52 13.66 7.49 34 XM_UncommonTLD01 17030 4.48 13.61 2.66 35 RELAYCOUNTRY_US 15139 11.17 12.10 10.99 36 UNTRUSTED_Relay 14885 3.10 11.90 1.34 37 XM_Evil_Numbers_Gen 14715 8.77 11.76 8.17 38 HTML_IMAGE_RATIO_02 14383 7.00 11.50 6.10 39 NO_DNS_FOR_FROM 13636 4.15 10.90 2.80 40 XMSexyCombo_05 13463 4.76 10.76 3.56 41 LotsOfNums_01 11379 7.29 9.10 6.93 42 RCVD_IN_MSPIKE_H2 10980 9.65 8.78 9.82 43 XMSubMetaSx_00 10899 5.10 8.71 4.38 44 BAYES_80 10813 3.37 8.64 2.32 45 XM_H_Long_From01 10608 5.71 8.48 5.16 46 HTML_IMAGE_RATIO_04 10327 11.53 8.26 12.18 47 MPART_ALT_DIFF 9783 7.34 7.82 7.24 48 XM_B_Phish_Phrases 9739 5.80 7.79 5.41 49 XMPhish08 8960 2.46 7.16 1.52 50 XM_UB50 8934 1.80 7.14 0.74 51 BAYES_60 8377 5.90 6.70 5.74 52 XM_DIRTYINTL 7975 2.65 6.38 1.90 53 XMNumbers 7731 7.40 6.18 7.65 54 TooManyTo_001 7535 6.48 6.02 6.57 55 KHOP_HELO_FCRDNS 7384 2.43 5.90 1.73 56 HTML_IMAGE_RATIO_06 6986 4.90 5.58 4.77 57 XM_SendGrid 6506 4.96 5.20 4.92 58 MIME_QP_LONG_LINE 6404 4.58 5.12 4.47 59 XM_SPF_SoftFail 5933 2.08 4.74 1.54 60 HTML_MIME_NO_HTML_TAG 5847 2.26 4.67 1.78 61 RELAYCOUNTRY_CA 5526 1.99 4.42 1.50 62 RDNS_DYNAMIC 5466 0.95 4.37 0.26 63 TM2_M_URI_OPT_OUT 5450 6.29 4.36 6.67 64 MIME_HTML_MOSTLY 5350 2.59 4.28 2.25 65 MIME_HTML_ONLY_MULTI 5215 5.48 4.17 5.74 66 RCVD_IN_BL_SPAMCOP_NET 4943 1.42 3.95 0.92 67 XM_URI_RBL 4798 0.81 3.84 0.20 68 BAYES_95 4791 1.70 3.83 1.27 69 XM_CamelCaseFrm001 4761 2.11 3.81 1.77 70 XM_OfRef6 4760 1.66 3.81 1.24 71 T_REMOTE_IMAGE 4711 3.29 3.77 3.19 72 BAYES_40 4672 5.05 3.73 5.32 73 ALL_TRUSTED 4614 18.99 3.69 22.04 74 PDS_OTHER_BAD_TLD 4573 0.96 3.66 0.42 75 SpammyFromTLD_02 4541 0.82 3.63 0.26 76 XM_B_Unsub2 4484 2.23 3.58 1.96 77 XM_B_SpammyTLD 4476 1.82 3.58 1.47 78 TR_Mismatch_TLD_02 4473 0.64 3.58 0.05 79 XMStrtUSub 4431 7.12 3.54 7.83 80 XMHTML_After_End 4388 1.31 3.51 0.87 81 T_XMDrugObfuBody_08 4296 1.77 3.43 1.43 82 RCVD_IN_MSPIKE_WL 4233 7.23 3.38 8.00 83 RCVD_IN_MSPIKE_H3 4233 7.23 3.38 8.00 84 DATE_IN_PAST_03_06 4163 0.66 3.33 0.12 85 XMDiploma_00 4137 1.65 3.31 1.32 86 RCVD_IN_MSPIKE_BL 4056 1.34 3.24 0.96 87 RELAYCOUNTRY_FR 4016 0.76 3.21 0.27 88 T_TooManySym_01 3883 3.71 3.10 3.83 89 BAYES_20 3812 4.76 3.05 5.11 90 BAYES_00 3798 21.97 3.04 25.75 91 URI_HEX 3697 1.62 2.96 1.35 92 FROM_SUSPICIOUS_NTLD 3483 0.49 2.78 0.04 93 FROM_SUSPICIOUS_NTLD_FP 3440 0.49 2.75 0.04 94 RCVD_IN_RP_RNBL 3439 0.53 2.75 0.09 95 T_XMDrugObfuBody_14 3427 2.01 2.74 1.86 96 HTML_IMAGE_RATIO_08 3367 2.30 2.69 2.23 97 TR_XM_INV_DKIM 3280 0.51 2.62 0.09 98 RCVD_IN_MSPIKE_L3 3232 0.88 2.58 0.54 99 FROM_EXCESS_BASE64 3142 2.68 2.51 2.71 100 XMSexyCombo_01 3139 1.05 2.51 0.76 101 SpammyFromTLD_01 3128 0.94 2.50 0.63 102 TR_XM_DK_Bayes 3095 11.70 2.47 13.54 103 BOTNET_NORDNS 3049 0.44 2.44 0.04 104 XMSolicitRefs_0 2944 0.63 2.35 0.28 105 TR_XM_DK_SendGrid 2774 2.66 2.22 2.74 106 TONOM_EQ_TOLOC_SHRT_SHRTNER 2674 4.36 2.14 4.80 107 MultiRelay_CC 2527 0.45 2.02 0.13 108 XMStockSpam_06 2513 0.99 2.01 0.78 109 MultiRelay_Combo 2506 0.44 2.00 0.13 110 XMGenDplmaNmb 2468 1.08 1.97 0.90 111 BAYES_05 2468 3.87 1.97 4.25 112 RCVD_IN_RP_SAFE 2427 6.67 1.94 7.62 113 T_XMHurry_00 2424 0.70 1.94 0.45 114 XM_H_Long_From02 2368 1.13 1.89 0.98 115 LongTLD 2346 0.44 1.88 0.16 116 URIBL_DBL_ABUSE_REDIR 2343 2.37 1.87 2.47 117 XMBody_17 2343 0.81 1.87 0.60 118 TR_LOTS_OF_MONEY3 2293 0.55 1.83 0.29 119 TM2_M_VERY_LONG_WORD 2254 1.17 1.80 1.04 120 RCVD_IN_RP_CERTIFIED 2249 6.22 1.80 7.10 121 RCVD_IN_IADB_LISTED 2218 3.63 1.77 4.00 122 SUBJ_ALL_CAPS 2196 1.38 1.76 1.30 123 TR_XM_PHPDW 2164 0.91 1.73 0.74 124 TR_XM_PHPForged 2144 0.89 1.71 0.73 125 TR_Symld_Words 2116 1.26 1.69 1.18 126 TR_XM_FormFill2 2115 0.89 1.69 0.73 127 XM_H_PHPOS 2105 0.89 1.68 0.73 128 RCVD_IN_IADB_SPF 2068 3.15 1.65 3.45 129 RELAYCOUNTRY_GB 2024 1.25 1.62 1.17 130 RCVD_IN_IADB_DK 2022 2.72 1.62 2.93 131 RCVD_IN_IADB_SENDERID 2021 2.74 1.62 2.97 132 TR_XM_DK_Bayes1 2009 10.86 1.61 12.71 133 MAILING_LIST_MULTI 1976 2.05 1.58 2.15 134 REPLYTO_WITHOUT_TO_CC 1970 0.30 1.57 0.04 135 URI_TRY_3LD 1925 1.05 1.54 0.95 136 DKIM_ADSP_NXDOMAIN 1893 0.64 1.51 0.46 137 T_FILL_THIS_FORM_SHORT 1892 0.87 1.51 0.74 138 XMBdyGiftCard01 1890 1.10 1.51 1.01 139 MPART_ALT_DIFF_COUNT 1848 0.51 1.48 0.31 140 T_MONEY_PERCENT 1824 0.56 1.46 0.38 141 TR_LOTS_OF_MONEY2 1824 0.56 1.46 0.38 142 XMSlimDrugH 1771 0.57 1.42 0.40 143 DIET_1 1676 0.54 1.34 0.38 144 TR_XM_DK_Bayes2 1674 9.45 1.34 11.07 145 T_XMDrugObfuBody_00 1651 0.69 1.32 0.57 146 DATE_IN_PAST_06_12 1647 0.26 1.32 0.05 147 XM_DK_Undo_01 1635 1.30 1.31 1.30 148 HTML_SHORT_LINK_IMG_1 1606 0.22 1.28 0.01 149 DKIM_ADSP_CUSTOM_MED 1586 0.96 1.27 0.90 150 MIME_HEADER_CTYPE_ONLY 1579 0.38 1.26 0.20 151 XMPhish11 1545 0.85 1.24 0.77 152 XM_ProductURIs 1521 0.72 1.22 0.63 153 HDRS_LCASE_IMGONLY 1519 0.21 1.21 0.01 154 HTML_IMAGE_ONLY_12 1510 0.31 1.21 0.13 155 FROM_MISSP_REPLYTO 1508 0.20 1.21 0.00 156 XM_UB60 1454 0.23 1.16 0.05 157 XM_BadFromFormat 1453 0.26 1.16 0.08 158 HTTPS_HTTP_MISMATCH 1443 0.68 1.15 0.58 159 TR_Mismatch_TLD_01 1430 0.36 1.14 0.20 160 REMOVE_BEFORE_LINK 1408 0.45 1.13 0.31 161 HTML_IMAGE_ONLY_20 1403 0.50 1.12 0.38 162 XMSubMetaI_00 1379 0.54 1.10 0.42 163 THIS_AD 1367 0.29 1.09 0.13 164 HTML_IMAGE_ONLY_08 1363 0.26 1.09 0.09 165 FORGED_GMAIL_RCVD 1359 0.58 1.09 0.48 166 RELAYCOUNTRY_IN 1351 0.27 1.08 0.11 167 NML_ADSP_CUSTOM_MED 1337 0.73 1.07 0.66 168 FROM_MISSP_DYNIP 1335 0.18 1.07 0.00 169 XMBrknScrpt_02 1330 0.60 1.06 0.51 170 XMMoneyMeta_00 1314 0.54 1.05 0.44 171 HTML_COMMENT_SAVED_URL 1299 0.21 1.04 0.05 172 RCVD_IN_PSBL 1296 0.17 1.04 0.00 173 XMBody_78 1281 0.41 1.02 0.29 174 RELAYCOUNTRY_IE 1265 0.33 1.01 0.19 175 XM_UB99 1259 0.17 1.01 0.00 176 XM_H_PHPMailer 1259 0.52 1.01 0.43 177 XMPhish14 1244 0.47 0.99 0.37 178 XMSexyCombo_04 1235 0.30 0.99 0.17 179 XM_H_MailChimp 1218 0.31 0.97 0.18 180 XMSubMetaSxObfu_03 1197 0.49 0.96 0.40 181 URI_NOVOWEL 1189 0.37 0.95 0.26 182 XMPhish30 1164 0.63 0.93 0.57 183 XM_PDF 1161 3.09 0.93 3.53 184 HTML_SHORT_LINK_IMG_3 1125 0.20 0.90 0.06 185 BODY_URI_ONLY 1116 0.21 0.89 0.07 186 XMSubMetaSSx_00 1104 0.30 0.88 0.18 187 MISSING_HEADERS 1102 0.44 0.88 0.35 188 UNPARSEABLE_RELAY 1101 1.58 0.88 1.72 189 TR_XM_RelayPhish 1098 0.24 0.88 0.12 190 TO_EQ_FM_DOM_HTML_IMG 1089 0.16 0.87 0.02 191 TooManyTo_002 1088 1.54 0.87 1.67 192 HTML_FONT_SIZE_HUGE 1081 0.22 0.86 0.09 193 URIBL_SBL_A 1071 0.33 0.86 0.22 194 RELAYCOUNTRY_DE 1068 0.43 0.85 0.35 195 XM_H_PHPOS_M 1052 0.53 0.84 0.47 196 HTML_FONT_FACE_BAD 1051 8.17 0.84 9.63 197 HTML_TAG_BALANCE_CENTER 1050 0.19 0.84 0.06 198 XM_B_COPY_HTML 1034 0.44 0.83 0.36 199 TR_MetaPhish_Combo_01 1033 0.70 0.83 0.68 200 NUMERIC_HTTP_ADDR 1010 0.36 0.81 0.27 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 546009 88.56 95.18 87.23 2 XM_B_Unicode 413292 67.66 75.84 66.03 3 DKIM_SIGNED 389082 65.10 79.78 62.16 4 XM_DK_Pass 382485 63.80 77.29 61.11 5 DCC_CHECK_NEGATIVE 366149 52.12 20.23 58.50 6 DKIM_VALID 360934 59.01 65.71 57.67 7 BAYES_50 296379 46.94 44.89 47.35 8 DKIM_VALID_AU 271469 44.27 48.78 43.37 9 XMListUnsubscribeExists 267841 46.65 65.97 42.79 10 XM_B_Unicode3 249844 41.12 47.14 39.92 11 DCC_CHECK 249210 46.15 77.82 39.82 12 T_TM2_M_HEADER_IN_MSG 170417 26.49 22.83 27.23 13 BAYES_00 161173 21.97 3.04 25.75 14 HTML_FONT_LOW_CONTRAST 144883 24.67 32.27 23.15 15 ALL_TRUSTED 137972 18.99 3.69 22.04 16 FVGT_m_MULTI_ODD 137231 22.77 26.99 21.92 17 DKIM_VALID_EF 133089 21.81 24.54 21.26 18 MIME_HTML_ONLY 124977 22.41 34.63 19.97 19 LOC_TINY_FONT_1 119729 21.23 31.72 19.13 20 XMSubLong 115250 19.68 26.01 18.41 21 T_KAM_HTML_FONT_INVALID 90157 16.01 24.02 14.40 22 TR_XM_DK_Bayes 84766 11.70 2.47 13.54 23 MultiRelay 81480 13.59 16.43 13.02 24 TR_XM_DK_Bayes1 79582 10.86 1.61 12.71 25 HTML_IMAGE_RATIO_04 76262 11.53 8.26 12.18 26 FSL_BULK_SIG 74333 12.66 16.57 11.88 27 XM_Multi_Part_URI 72977 12.62 17.44 11.66 28 TR_XM_DK_Bayes2 69307 9.45 1.34 11.07 29 RELAYCOUNTRY_US 68767 11.17 12.10 10.99 30 XM_Body_Dirty_Words 66850 12.26 20.14 10.68 31 RCVD_IN_MSPIKE_H2 61455 9.65 8.78 9.82 32 HTML_FONT_FACE_BAD 60286 8.17 0.84 9.63 33 XM_H_Trusted_IP 59759 7.96 0.00 9.55 34 XM_B_Unsub 53417 10.01 17.38 8.53 35 XM_Evil_Numbers_Gen 51136 8.77 11.76 8.17 36 RCVD_IN_MSPIKE_WL 50090 7.23 3.38 8.00 37 RCVD_IN_MSPIKE_H3 50090 7.23 3.38 8.00 38 XMStrtUSub 49023 7.12 3.54 7.83 39 XMNumbers 47871 7.40 6.18 7.65 40 RCVD_IN_RP_SAFE 47688 6.67 1.94 7.62 41 LOTS_OF_MONEY 46898 8.52 13.66 7.49 42 ANY_BOUNCE_MESSAGE 45707 6.21 0.77 7.30 43 BOUNCE_MESSAGE 45705 6.21 0.75 7.30 44 MPART_ALT_DIFF 45335 7.34 7.82 7.24 45 RCVD_IN_RP_CERTIFIED 44427 6.22 1.80 7.10 46 LotsOfNums_01 43345 7.29 9.10 6.93 47 TM2_M_URI_OPT_OUT 41761 6.29 4.36 6.67 48 TooManyTo_001 41102 6.48 6.02 6.57 49 XM_DK_Undo_02 38427 11.47 38.13 6.14 50 HTML_IMAGE_RATIO_02 38164 7.00 11.50 6.10 51 MIME_HTML_ONLY_MULTI 35955 5.48 4.17 5.74 52 BAYES_60 35921 5.90 6.70 5.74 53 XM_DKIMWhitelistDomains 35080 4.68 0.02 5.60 54 XM_B_Phish_Phrases 33837 5.80 7.79 5.41 55 BAYES_40 33277 5.05 3.73 5.32 56 XM_H_Long_From01 32309 5.71 8.48 5.16 57 BAYES_20 31954 4.76 3.05 5.11 58 XM_SendGrid 30781 4.96 5.20 4.92 59 RELAYCOUNTRY_META 30713 7.29 19.24 4.91 60 TONOM_EQ_TOLOC_SHRT_SHRTNER 30062 4.36 2.14 4.80 61 HTML_IMAGE_RATIO_06 29830 4.90 5.58 4.77 62 DKIM_INVALID 28148 6.09 14.07 4.50 63 MIME_QP_LONG_LINE 28002 4.58 5.12 4.47 64 XMSubMetaSx_00 27400 5.10 8.71 4.38 65 BAYES_05 26575 3.87 1.97 4.25 66 RCVD_IN_IADB_LISTED 25044 3.63 1.77 4.00 67 T_TooManySym_01 23990 3.71 3.10 3.83 68 BOTNET_IPINHOSTNAME 23736 5.47 13.87 3.79 69 XMSexyCombo_05 22305 4.76 10.76 3.56 70 XM_PDF 22068 3.09 0.93 3.53 71 XMSubNoVowel 21709 2.94 0.28 3.47 72 RCVD_IN_IADB_SPF 21608 3.15 1.65 3.45 73 T_REMOTE_IMAGE 19980 3.29 3.77 3.19 74 IN_ZIMBRA_NJ_WHITELIST 19575 2.61 0.02 3.13 75 RCVD_IN_IADB_SENDERID 18587 2.74 1.62 2.97 76 RCVD_IN_IADB_DK 18369 2.72 1.62 2.93 77 NO_DNS_FOR_FROM 17509 4.15 10.90 2.80 78 TR_XM_DK_SendGrid 17177 2.66 2.22 2.74 79 BAYES_99 17152 6.25 23.80 2.74 80 FROM_EXCESS_BASE64 16984 2.68 2.51 2.71 81 RCVD_IN_IADB_VOUCHED 16960 2.33 0.46 2.71 82 BOTNET 16637 5.96 22.46 2.66 83 XM_UncommonTLD01 16622 4.48 13.61 2.66 84 URIBL_DBL_ABUSE_REDIR 15437 2.37 1.87 2.47 85 BAYES_80 14515 3.37 8.64 2.32 86 MIME_HTML_MOSTLY 14104 2.59 4.28 2.25 87 BAYES_999 13967 4.91 18.32 2.23 88 HTML_IMAGE_RATIO_08 13934 2.30 2.69 2.23 89 MAILING_LIST_MULTI 13457 2.05 1.58 2.15 90 XM_B_Unsub2 12280 2.23 3.58 1.96 91 T_TooManySym_02 12004 1.73 0.78 1.92 92 XM_DIRTYINTL 11917 2.65 6.38 1.90 93 T_XMDrugObfuBody_14 11641 2.01 2.74 1.86 94 HTML_MIME_NO_HTML_TAG 11150 2.26 4.67 1.78 95 XM_CamelCaseFrm001 11091 2.11 3.81 1.77 96 RCVD_IN_IADB_OPTIN 10871 1.51 0.35 1.74 97 KHOP_HELO_FCRDNS 10833 2.43 5.90 1.73 98 UNPARSEABLE_RELAY 10753 1.58 0.88 1.72 99 TooManyTo_002 10454 1.54 0.87 1.67 100 XM_SPF_SoftFail 9654 2.08 4.74 1.54 101 XMPhish08 9536 2.46 7.16 1.52 102 RELAYCOUNTRY_CA 9389 1.99 4.42 1.50 103 TR_DCC_Bayes_99 9299 4.21 17.82 1.49 104 XM_B_SpammyTLD 9225 1.82 3.58 1.47 105 T_XMDrugObfuBody_08 8964 1.77 3.43 1.43 106 TVD_RCVD_IP 8798 1.22 0.31 1.41 107 URI_HEX 8459 1.62 2.96 1.35 108 HELO_NODOT 8396 1.22 0.59 1.34 109 UNTRUSTED_Relay 8387 3.10 11.90 1.34 110 HELO_NO_DOMAIN 8365 1.21 0.58 1.34 111 XMDiploma_00 8262 1.65 3.31 1.32 112 XM_DK_Undo_01 8153 1.30 1.31 1.30 113 SUBJ_ALL_CAPS 8136 1.38 1.76 1.30 114 INVALID_MSGID 8022 1.11 0.26 1.28 115 BAYES_95 7942 1.70 3.83 1.27 116 XM_OfRef6 7734 1.66 3.81 1.24 117 IN_HORDE_ADDRESS_BOOK 7731 1.04 0.04 1.24 118 TR_Symld_Words 7374 1.26 1.69 1.18 119 USER_IN_DEF_DKIM_WL 7328 0.98 0.02 1.17 120 RELAYCOUNTRY_GB 7328 1.25 1.62 1.17 121 XMSubLongNoVowel 7250 0.98 0.06 1.16 122 XMSubGarbage 7198 0.96 0.02 1.15 123 TooManyTo_003 6946 1.04 0.71 1.11 124 TO_MALFORMED 6910 0.93 0.06 1.10 125 XMCapTrack 6833 1.00 0.56 1.09 126 TM2_M_VERY_LONG_WORD 6528 1.17 1.80 1.04 127 XMBdyGiftCard01 6342 1.10 1.51 1.01 128 CK_HELO_DYNAMIC_SPLIT_IP 6316 0.86 0.10 1.01 129 HELO_DYNAMIC_IPADDR2 6312 0.85 0.03 1.01 130 XM_H_Long_From02 6155 1.13 1.89 0.98 131 XM_GoogleGroups 6153 0.91 0.57 0.98 132 RCVD_IN_MSPIKE_BL 6014 1.34 3.24 0.96 133 URI_TRY_3LD 5933 1.05 1.54 0.95 134 RCVD_IN_BL_SPAMCOP_NET 5728 1.42 3.95 0.92 135 DKIM_ADSP_CUSTOM_MED 5650 0.96 1.27 0.90 136 XMGenDplmaNmb 5633 1.08 1.97 0.90 137 XMHTML_After_End 5442 1.31 3.51 0.87 138 XM_E_Blogspot 5310 0.72 0.09 0.85 139 XMGappySubj_01 5228 0.73 0.18 0.84 140 TooManyTo_004 5090 0.78 0.62 0.81 141 XMStockSpam_06 4912 0.99 2.01 0.78 142 XMPhish11 4846 0.85 1.24 0.77 143 XMSexyCombo_01 4773 1.05 2.51 0.76 144 T_FILL_THIS_FORM_SHORT 4651 0.87 1.51 0.74 145 TR_XM_PHPDW 4651 0.91 1.73 0.74 146 XM_UB50 4608 1.80 7.14 0.74 147 TR_XM_PHPForged 4577 0.89 1.71 0.73 148 TR_XM_FormFill2 4573 0.89 1.69 0.73 149 TO_IN_SUBJ 4564 0.64 0.17 0.73 150 XM_H_PHPOS 4545 0.89 1.68 0.73 151 PDS_TINYSUBJ_URISHRT 4500 0.70 0.61 0.72 152 TooManyTo_005 4284 0.66 0.53 0.68 153 TR_MetaPhish_Combo_01 4234 0.70 0.83 0.68 154 NML_ADSP_CUSTOM_MED 4153 0.73 1.07 0.66 155 SpammyFromTLD_01 3933 0.94 2.50 0.63 156 XM_ProductURIs 3914 0.72 1.22 0.63 157 XMNoVowels 3881 0.64 0.75 0.62 158 XMBody_17 3775 0.81 1.87 0.60 159 HTTPS_HTTP_MISMATCH 3632 0.68 1.15 0.58 160 T_XMDrugObfuBody_00 3555 0.69 1.32 0.57 161 XMPhish30 3539 0.63 0.93 0.57 162 FROM_GOV_DKIM_AU 3530 0.50 0.18 0.56 163 RCVD_IN_MSPIKE_L3 3394 0.88 2.58 0.54 164 PLING_QUERY 3293 0.53 0.57 0.53 165 T_Symld_Words_02 3261 0.55 0.72 0.52 166 T_OBFU_PDF_ATTACH 3215 0.47 0.23 0.51 167 XMBrknScrpt_02 3177 0.60 1.06 0.51 168 XM_B_REG_HTML 3107 0.50 0.52 0.50 169 SHORT_SHORTNER 3088 0.44 0.19 0.49 170 XM_SPF_Unknown 3038 0.53 0.75 0.49 171 FORGED_GMAIL_RCVD 3027 0.58 1.09 0.48 172 T_TooManySym_03 3003 0.46 0.37 0.48 173 XMBody_95 2962 0.42 0.18 0.47 174 FILL_THIS_FORM 2938 0.49 0.58 0.47 175 XM_H_PHPOS_M 2914 0.53 0.84 0.47 176 DKIM_ADSP_NXDOMAIN 2899 0.64 1.51 0.46 177 T_XMHurry_00 2797 0.70 1.94 0.45 178 XMMoneyMeta_00 2750 0.54 1.05 0.44 179 URI_OPTOUT_3LD 2706 0.41 0.31 0.43 180 XM_ShortIntro_01 2697 0.43 0.45 0.43 181 XM_H_PHPMailer 2675 0.52 1.01 0.43 182 HTML_TAG_BALANCE_BODY 2661 0.48 0.74 0.43 183 XMSubMetaI_00 2642 0.54 1.10 0.42 184 PDS_OTHER_BAD_TLD 2627 0.96 3.66 0.42 185 XMSlimDrugH 2530 0.57 1.42 0.40 186 XMSubMetaSxObfu_03 2517 0.49 0.96 0.40 187 TM2_M_A_HREF_HREF 2462 0.43 0.59 0.39 188 T_MONEY_PERCENT 2388 0.56 1.46 0.38 189 TR_LOTS_OF_MONEY2 2388 0.56 1.46 0.38 190 HTML_IMAGE_ONLY_20 2383 0.50 1.12 0.38 191 HTML_IMAGE_ONLY_28 2368 0.41 0.58 0.38 192 TM2_M_BODY_EMPTY 2359 0.33 0.09 0.38 193 DIET_1 2359 0.54 1.34 0.38 194 USER_IN_WHITELIST 2346 0.31 0.00 0.37 195 AC_DIV_BONANZA 2322 0.34 0.19 0.37 196 XMPhish14 2291 0.47 0.99 0.37 197 FILL_THIS_FORM_LONG 2282 0.37 0.40 0.36 198 XM_B_COPY_HTML 2272 0.44 0.83 0.36 199 SHORT_HELO_AND_INLINE_IMAGE 2228 0.30 0.03 0.36 200 XMLngstWrd_00 2216 0.37 0.45 0.35 ----------------------------------------------------------------------