Email: 710784 Autolearn: 0 AvgScore: -1.18 AvgScanTime: 2.07 sec Spam: 110198 Autolearn: 0 AvgScore: 12.52 AvgScanTime: 3.28 sec Ham: 600586 Autolearn: 0 AvgScore: -3.69 AvgScanTime: 1.85 sec Time Spent Running SA: 408.22 hours Time Spent Processing Spam: 100.38 hours Time Spent Processing Ham: 307.84 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 103240 91.19 93.69 90.73 2 DKIM_SIGNED 86540 66.07 78.53 63.78 3 DCC_CHECK 86439 42.17 78.44 35.51 4 XM_DK_Pass 83467 64.78 75.74 62.76 5 XM_B_Unicode 82068 73.82 74.47 73.71 6 RELAYCOUNTRY_US 81377 82.11 73.85 83.63 7 XMListUnsubscribeExists 73946 47.07 67.10 43.40 8 DKIM_VALID 73814 60.71 66.98 59.55 9 DKIM_VALID_AU 53899 45.66 48.91 45.06 10 BAYES_50 51689 44.87 46.91 44.50 11 XM_B_Unicode3 45854 45.48 41.61 46.20 12 MIME_HTML_ONLY 42783 26.40 38.82 24.12 13 XM_DK_Undo_02 42113 11.05 38.22 6.07 14 LOC_TINY_FONT_1 35684 22.03 32.38 20.13 15 HTML_FONT_LOW_CONTRAST 34084 25.06 30.93 23.98 16 DKIM_VALID_EF 31923 22.90 28.97 21.79 17 XMSubLong 31807 21.98 28.86 20.71 18 BAYES_99 29232 6.59 26.53 2.93 19 FVGT_m_MULTI_ODD 26961 19.78 24.47 18.92 20 RELAYCOUNTRY_META 25749 7.55 23.37 4.64 21 T_KAM_HTML_FONT_INVALID 25369 15.92 23.02 14.62 22 BOTNET 24347 5.43 22.09 2.37 23 XM_Body_Dirty_Words 24202 13.28 21.96 11.68 24 BAYES_999 23199 5.29 21.05 2.40 25 TR_DCC_Bayes_99 22653 4.60 20.56 1.68 26 T_TM2_M_HEADER_IN_MSG 22000 23.82 19.96 24.53 27 DCC_CHECK_NEGATIVE 21663 56.03 19.66 62.70 28 UNTRUSTED_Relay 19699 3.92 17.88 1.36 29 XM_UncommonTLD01 19562 5.06 17.75 2.73 30 XM_Multi_Part_URI 19124 10.94 17.35 9.76 31 BOTNET_IPINHOSTNAME 17892 5.59 16.24 3.63 32 XM_B_Unsub 17574 9.82 15.95 8.69 33 FSL_BULK_SIG 17087 8.44 15.51 7.15 34 URIBL_RHS_DOB 15739 6.54 14.28 5.12 35 XMSexyCombo_05 15199 5.54 13.79 4.03 36 HTML_IMAGE_RATIO_02 14858 6.96 13.48 5.76 37 LOTS_OF_MONEY 13740 8.95 12.47 8.30 38 DKIM_INVALID 12726 5.36 11.55 4.23 39 XM_Evil_Numbers_Gen 11957 9.81 10.85 9.62 40 XM_UB50 11866 2.28 10.77 0.72 41 LotsOfNums_01 10121 7.17 9.18 6.81 42 XM_H_Long_From01 10072 5.92 9.14 5.33 43 XM_B_Phish_Phrases 9456 6.65 8.58 6.30 44 XMSubMetaSx_00 9092 3.69 8.25 2.86 45 NO_DNS_FOR_FROM 8758 3.40 7.95 2.56 46 KHOP_HELO_FCRDNS 8701 2.55 7.90 1.57 47 TooManyTo_001 8504 6.94 7.72 6.80 48 MPART_ALT_DIFF 8432 10.01 7.65 10.45 49 HTML_MIME_NO_HTML_TAG 8092 3.06 7.34 2.28 50 BAYES_80 7270 2.57 6.60 1.83 51 SpammyFromTLD_02 7086 1.26 6.43 0.31 52 PDS_OTHER_BAD_TLD 6896 1.32 6.26 0.41 53 TR_Mismatch_TLD_02 6821 1.00 6.19 0.05 54 BAYES_60 6771 4.21 6.14 3.85 55 HTML_IMAGE_RATIO_06 6627 5.89 6.01 5.86 56 T_REMOTE_IMAGE 6584 3.53 5.97 3.08 57 XM_SPF_SoftFail 6581 2.18 5.97 1.48 58 RCVD_IN_MSPIKE_H2 6512 8.01 5.91 8.39 59 XMNumbers 6411 3.38 5.82 2.93 60 RCVD_IN_MSPIKE_BL 6370 1.56 5.78 0.79 61 HTML_IMAGE_RATIO_04 6148 16.97 5.58 19.06 62 MIME_QP_LONG_LINE 6049 4.72 5.49 4.58 63 RDNS_DYNAMIC 5813 1.05 5.28 0.28 64 RELAYCOUNTRY_FR 5416 0.98 4.91 0.26 65 FROM_SUSPICIOUS_NTLD 5338 0.78 4.84 0.03 66 FROM_SUSPICIOUS_NTLD_FP 5216 0.76 4.73 0.03 67 RELAYCOUNTRY_CA 5173 1.99 4.69 1.49 68 RCVD_IN_BL_SPAMCOP_NET 5159 1.46 4.68 0.87 69 RCVD_IN_MSPIKE_L3 5128 1.19 4.65 0.55 70 XM_B_SpammyTLD 5025 2.36 4.56 1.96 71 HTML_IMAGE_ONLY_08 4774 0.76 4.33 0.10 72 MIME_HTML_MOSTLY 4695 2.47 4.26 2.14 73 BOTNET_NORDNS 4584 0.69 4.16 0.06 74 DATE_IN_PAST_03_06 4574 0.74 4.15 0.12 75 XM_CamelCaseFrm001 4552 2.15 4.13 1.78 76 XM_SendGrid 4534 5.15 4.11 5.34 77 XMStrtUSub 4530 9.83 4.11 10.88 78 BODY_URI_ONLY 4520 0.70 4.10 0.08 79 RCVD_IN_RP_RNBL 4487 0.75 4.07 0.14 80 BAYES_95 4117 1.51 3.74 1.10 81 XM_DIRTYINTL 4017 0.94 3.65 0.44 82 TM2_M_URI_OPT_OUT 4000 2.56 3.63 2.37 83 XM_URI_RBL 3973 0.72 3.61 0.19 84 XM_B_Unsub2 3765 2.13 3.42 1.89 85 URI_HEX 3725 1.57 3.38 1.23 86 RCVD_IN_MSPIKE_H3 3724 7.71 3.38 8.51 87 RCVD_IN_MSPIKE_WL 3724 7.71 3.38 8.51 88 MIME_HTML_ONLY_MULTI 3722 7.70 3.38 8.50 89 BAYES_40 3602 5.99 3.27 6.49 90 T_XMDrugObfuBody_08 3489 1.54 3.17 1.24 91 FROM_MISSP_REPLYTO 3405 0.49 3.09 0.01 92 FROM_EXCESS_BASE64 3234 2.81 2.93 2.78 93 XMSexyCombo_01 3191 0.80 2.90 0.41 94 T_TooManySym_01 3050 3.69 2.77 3.85 95 XMDiploma_00 3006 1.71 2.73 1.53 96 BAYES_20 2928 6.37 2.66 7.05 97 DATE_IN_PAST_06_12 2890 0.54 2.62 0.15 98 HTML_IMAGE_RATIO_08 2811 2.30 2.55 2.26 99 BAYES_00 2711 22.45 2.46 26.11 100 RCVD_IN_IADB_LISTED 2643 3.95 2.40 4.24 101 ALL_TRUSTED 2633 11.59 2.39 13.28 102 SpammyFromTLD_01 2620 0.89 2.38 0.62 103 XM_BadFromFormat 2597 0.44 2.36 0.09 104 FROM_MISSP_DYNIP 2581 0.36 2.34 0.00 105 HTML_SHORT_LINK_IMG_1 2567 0.38 2.33 0.02 106 LongTLD 2567 0.51 2.33 0.18 107 XM_OfRef6 2513 1.42 2.28 1.26 108 TR_XM_PHPDW 2506 0.75 2.27 0.48 109 RCVD_IN_IADB_SPF 2497 3.48 2.27 3.70 110 XM_UB99 2481 0.35 2.25 0.00 111 TR_XM_PHPForged 2472 0.74 2.24 0.46 112 RCVD_IN_IADB_SENDERID 2456 3.11 2.23 3.27 113 RCVD_IN_IADB_DK 2455 3.08 2.23 3.24 114 TR_XM_FormFill2 2437 0.73 2.21 0.46 115 XM_H_PHPOS 2429 0.72 2.20 0.45 116 NORDNS_LOW_CONTRAST 2427 0.35 2.20 0.01 117 HDRS_LCASE_IMGONLY 2409 0.35 2.19 0.02 118 HTML_TAG_BALANCE_CENTER 2358 0.38 2.14 0.06 119 RELAYCOUNTRY_IN 2282 0.41 2.07 0.10 120 XMBody_17 2277 0.82 2.07 0.60 121 DATE_IN_PAST_12_24 2273 0.36 2.06 0.05 122 XMCapTrack 2239 1.26 2.03 1.12 123 TR_XM_DK_Bayes 2172 12.15 1.97 14.02 124 XMGenDplmaNmb 2096 1.16 1.90 1.02 125 XMHTML_After_End 2084 0.86 1.89 0.67 126 XM_UB999 2068 0.29 1.88 0.00 127 URIBL_SBL_A 2062 0.53 1.87 0.28 128 TM2_M_VERY_LONG_WORD 2055 1.23 1.86 1.12 129 XMStockSpam_06 2048 1.59 1.86 1.54 130 RCVD_IN_RP_SAFE 2040 6.80 1.85 7.70 131 T_XMDrugObfuBody_14 2027 1.50 1.84 1.43 132 XM_DK_Undo_01 2013 1.60 1.83 1.56 133 URI_NOVOWEL 1986 0.54 1.80 0.30 134 XMSexyCombo_04 1959 0.36 1.78 0.10 135 TR_XM_INV_DKIM 1898 0.34 1.72 0.09 136 TR_Symld_Words 1862 1.29 1.69 1.22 137 TR_XM_DK_SendGrid 1854 2.75 1.68 2.95 138 XM_UB60 1837 0.29 1.67 0.03 139 URIBL_CSS 1735 0.26 1.57 0.01 140 URIBL_CSS_A 1735 0.26 1.57 0.01 141 DKIM_ADSP_CUSTOM_MED 1732 1.04 1.57 0.94 142 XM_H_Long_From02 1729 1.11 1.57 1.03 143 RCVD_IN_PSBL 1688 0.27 1.53 0.03 144 XM_H_PHPMailer 1683 0.68 1.53 0.52 145 T_XMHurry_00 1660 0.70 1.51 0.55 146 TR_XM_DK_Bayes1 1643 11.43 1.49 13.26 147 XMNoVowels 1606 0.96 1.46 0.86 148 FORGED_GMAIL_RCVD 1596 0.59 1.45 0.44 149 TR_LOTS_OF_MONEY3 1575 0.63 1.43 0.48 150 BAYES_05 1567 5.27 1.42 5.97 151 XM_H_PHPOS_M 1550 0.36 1.41 0.17 152 DKIM_ADSP_NXDOMAIN 1546 0.66 1.40 0.53 153 SUBJ_ALL_CAPS 1543 1.31 1.40 1.29 154 RELAYCOUNTRY_GB 1533 0.92 1.39 0.84 155 XMMoneyMeta_00 1526 0.60 1.38 0.46 156 T_XMDrugObfuBody_00 1520 0.81 1.38 0.71 157 XMSubMetaSx_01 1505 0.26 1.37 0.06 158 FILL_THIS_FORM_SHORT 1448 0.93 1.31 0.86 159 MAILING_LIST_MULTI 1437 1.97 1.30 2.10 160 RCVD_IN_RP_CERTIFIED 1430 6.20 1.30 7.10 161 XMPhish14 1419 0.57 1.29 0.44 162 XMBrknScrpt_02 1409 0.64 1.28 0.53 163 XMSlimDrugH 1389 0.56 1.26 0.43 164 URIBL_ABUSE_SURBL 1379 0.24 1.25 0.06 165 DIET_1 1352 0.50 1.23 0.37 166 URIBL_DBL_SPAM 1349 0.21 1.22 0.02 167 TR_Mismatch_TLD_01 1343 0.35 1.22 0.19 168 XM_H_TOP 1333 0.19 1.21 0.00 169 NML_ADSP_CUSTOM_MED 1323 0.78 1.20 0.70 170 TR_XM_MaxBayes 1263 0.18 1.15 0.01 171 RELAYCOUNTRY_DE 1252 0.48 1.14 0.35 172 REMOVE_BEFORE_LINK 1247 0.43 1.13 0.30 173 XMSubMetaSxObfu_03 1233 0.49 1.12 0.37 174 UNPARSEABLE_RELAY 1214 1.78 1.10 1.90 175 XMSubMetaI_00 1211 0.66 1.10 0.58 176 TR_XM_RelayPhish 1199 0.29 1.09 0.14 177 TR_XM_DK_Bayes2 1145 10.05 1.04 11.70 178 TR_LOTS_OF_MONEY2 1143 0.45 1.04 0.34 179 T_MONEY_PERCENT 1143 0.45 1.04 0.34 180 TR_MetaPhish_Combo_01 1110 0.82 1.01 0.79 181 HTTPS_HTTP_MISMATCH 1098 0.65 1.00 0.58 182 RELAYCOUNTRY_NL 1096 0.26 0.99 0.12 183 XM_UB80 1074 0.16 0.97 0.01 184 T_Symld_Words_02 1055 0.85 0.96 0.83 185 XMSexyCombo_02 1043 0.16 0.95 0.01 186 XM_ProductURIs 1034 0.49 0.94 0.41 187 PLING_QUERY 1034 0.33 0.94 0.21 188 HTML_TAG_BALANCE_BODY 1026 0.45 0.93 0.36 189 XM_B_COPY_HTML 1024 0.43 0.93 0.34 190 URI_TRY_3LD 1023 1.19 0.93 1.24 191 SUBJECT_NEEDS_ENCODING 1011 0.15 0.92 0.00 192 SUBJ_ILLEGAL_CHARS 1009 0.15 0.92 0.00 193 MPART_ALT_DIFF_COUNT 1007 0.43 0.91 0.35 194 XMPhish30 984 0.44 0.89 0.36 195 T_TooManySym_02 951 1.66 0.86 1.80 196 THIS_AD 941 0.39 0.85 0.30 197 RCVD_IN_MSPIKE_L5 934 0.15 0.85 0.02 198 XM_SPF_Unknown 923 0.60 0.84 0.55 199 RELAYCOUNTRY_AU 922 0.46 0.84 0.39 200 XM_PDF 892 3.60 0.81 4.11 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 544919 91.19 93.69 90.73 2 RELAYCOUNTRY_US 502246 82.11 73.85 83.63 3 XM_B_Unicode 442668 73.82 74.47 73.71 4 DKIM_SIGNED 383068 66.07 78.53 63.78 5 XM_DK_Pass 376948 64.78 75.74 62.76 6 DCC_CHECK_NEGATIVE 376570 56.03 19.66 62.70 7 DKIM_VALID 357677 60.71 66.98 59.55 8 XM_B_Unicode3 277443 45.48 41.61 46.20 9 DKIM_VALID_AU 270632 45.66 48.91 45.06 10 BAYES_50 267263 44.87 46.91 44.50 11 XMListUnsubscribeExists 260655 47.07 67.10 43.40 12 DCC_CHECK 213282 42.17 78.44 35.51 13 BAYES_00 156836 22.45 2.46 26.11 14 T_TM2_M_HEADER_IN_MSG 147311 23.82 19.96 24.53 15 MIME_HTML_ONLY 144867 26.40 38.82 24.12 16 HTML_FONT_LOW_CONTRAST 144026 25.06 30.93 23.98 17 DKIM_VALID_EF 130873 22.90 28.97 21.79 18 XMSubLong 124400 21.98 28.86 20.71 19 LOC_TINY_FONT_1 120872 22.03 32.38 20.13 20 HTML_IMAGE_RATIO_04 114484 16.97 5.58 19.06 21 FVGT_m_MULTI_ODD 113639 19.78 24.47 18.92 22 HTML_FONT_FACE_BAD 102502 14.52 0.66 17.07 23 XM_H_Trusted_IP 98571 13.87 0.00 16.41 24 T_KAM_HTML_FONT_INVALID 87802 15.92 23.02 14.62 25 TR_XM_DK_Bayes 84198 12.15 1.97 14.02 26 ALL_TRUSTED 79781 11.59 2.39 13.28 27 TR_XM_DK_Bayes1 79630 11.43 1.49 13.26 28 TR_XM_DK_Bayes2 70293 10.05 1.04 11.70 29 XM_Body_Dirty_Words 70174 13.28 21.96 11.68 30 XMStrtUSub 65339 9.83 4.11 10.88 31 MPART_ALT_DIFF 62737 10.01 7.65 10.45 32 XM_Multi_Part_URI 58638 10.94 17.35 9.76 33 XM_Evil_Numbers_Gen 57777 9.81 10.85 9.62 34 XM_B_Unsub 52204 9.82 15.95 8.69 35 RCVD_IN_MSPIKE_H3 51102 7.71 3.38 8.51 36 RCVD_IN_MSPIKE_WL 51102 7.71 3.38 8.51 37 MIME_HTML_ONLY_MULTI 51030 7.70 3.38 8.50 38 RCVD_IN_MSPIKE_H2 50412 8.01 5.91 8.39 39 LOTS_OF_MONEY 49871 8.95 12.47 8.30 40 RCVD_IN_RP_SAFE 46275 6.80 1.85 7.70 41 FSL_BULK_SIG 42919 8.44 15.51 7.15 42 RCVD_IN_RP_CERTIFIED 42639 6.20 1.30 7.10 43 BAYES_20 42329 6.37 2.66 7.05 44 LotsOfNums_01 40875 7.17 9.18 6.81 45 TooManyTo_001 40818 6.94 7.72 6.80 46 XM_DKIMWhitelistDomains 39322 5.54 0.04 6.55 47 XMSubNoVowel 39162 5.59 0.54 6.52 48 BAYES_40 38973 5.99 3.27 6.49 49 XM_B_Phish_Phrases 37837 6.65 8.58 6.30 50 XM_DK_Undo_02 36431 11.05 38.22 6.07 51 BAYES_05 35870 5.27 1.42 5.97 52 HTML_IMAGE_RATIO_06 35216 5.89 6.01 5.86 53 HTML_IMAGE_RATIO_02 34613 6.96 13.48 5.76 54 XM_SendGrid 32063 5.15 4.11 5.34 55 XM_H_Long_From01 31987 5.92 9.14 5.33 56 URIBL_RHS_DOB 30752 6.54 14.28 5.12 57 RELAYCOUNTRY_META 27884 7.55 23.37 4.64 58 MIME_QP_LONG_LINE 27526 4.72 5.49 4.58 59 RCVD_IN_IADB_LISTED 25440 3.95 2.40 4.24 60 DKIM_INVALID 25391 5.36 11.55 4.23 61 XM_PDF 24677 3.60 0.81 4.11 62 XMSexyCombo_05 24203 5.54 13.79 4.03 63 T_TooManySym_01 23149 3.69 2.77 3.85 64 BAYES_60 23125 4.21 6.14 3.85 65 RCVD_IN_IADB_SPF 22235 3.48 2.27 3.70 66 BOTNET_IPINHOSTNAME 21820 5.59 16.24 3.63 67 RCVD_IN_IADB_SENDERID 19641 3.11 2.23 3.27 68 RCVD_IN_IADB_DK 19441 3.08 2.23 3.24 69 IN_ZIMBRA_NJ_WHITELIST 19305 2.72 0.02 3.21 70 ANY_BOUNCE_MESSAGE 18651 2.74 0.74 3.11 71 BOUNCE_MESSAGE 18646 2.74 0.73 3.10 72 T_REMOTE_IMAGE 18519 3.53 5.97 3.08 73 TR_XM_DK_SendGrid 17717 2.75 1.68 2.95 74 XMNumbers 17592 3.38 5.82 2.93 75 BAYES_99 17589 6.59 26.53 2.93 76 XMSubMetaSx_00 17158 3.69 8.25 2.86 77 FROM_EXCESS_BASE64 16720 2.81 2.93 2.78 78 XM_UncommonTLD01 16370 5.06 17.75 2.73 79 NO_DNS_FOR_FROM 15400 3.40 7.95 2.56 80 XMSubLongNoVowel 14937 2.12 0.14 2.49 81 XMSubGarbage 14885 2.10 0.04 2.48 82 RCVD_IN_IADB_VOUCHED 14741 2.18 0.66 2.45 83 BAYES_999 14422 5.29 21.05 2.40 84 BOTNET 14245 5.43 22.09 2.37 85 TM2_M_URI_OPT_OUT 14223 2.56 3.63 2.37 86 HTML_MIME_NO_HTML_TAG 13673 3.06 7.34 2.28 87 HTML_IMAGE_RATIO_08 13546 2.30 2.55 2.26 88 MIME_HTML_MOSTLY 12874 2.47 4.26 2.14 89 MAILING_LIST_MULTI 12590 1.97 1.30 2.10 90 XM_B_SpammyTLD 11750 2.36 4.56 1.96 91 UNPARSEABLE_RELAY 11431 1.78 1.10 1.90 92 XM_B_Unsub2 11351 2.13 3.42 1.89 93 BAYES_80 11002 2.57 6.60 1.83 94 T_TooManySym_02 10825 1.66 0.86 1.80 95 TooManyTo_002 10762 1.60 0.58 1.79 96 XM_CamelCaseFrm001 10712 2.15 4.13 1.78 97 TR_DCC_Bayes_99 10060 4.60 20.56 1.68 98 KHOP_HELO_FCRDNS 9408 2.55 7.90 1.57 99 XM_DK_Undo_01 9366 1.60 1.83 1.56 100 XMStockSpam_06 9275 1.59 1.86 1.54 101 RCVD_IN_IADB_OPTIN 9257 1.37 0.41 1.54 102 XMDiploma_00 9173 1.71 2.73 1.53 103 HELO_NODOT 9014 1.37 0.65 1.50 104 HELO_NO_DOMAIN 8970 1.36 0.65 1.49 105 RELAYCOUNTRY_CA 8938 1.99 4.69 1.49 106 XM_SPF_SoftFail 8890 2.18 5.97 1.48 107 T_XMDrugObfuBody_14 8617 1.50 1.84 1.43 108 UNTRUSTED_Relay 8178 3.92 17.88 1.36 109 TVD_RCVD_IP 7891 1.21 0.67 1.31 110 SUBJ_ALL_CAPS 7734 1.31 1.40 1.29 111 INVALID_MSGID 7729 1.13 0.28 1.29 112 XM_OfRef6 7567 1.42 2.28 1.26 113 URI_TRY_3LD 7442 1.19 0.93 1.24 114 T_XMDrugObfuBody_08 7426 1.54 3.17 1.24 115 URI_HEX 7406 1.57 3.38 1.23 116 IN_HORDE_ADDRESS_BOOK 7354 1.04 0.04 1.22 117 TR_Symld_Words 7328 1.29 1.69 1.22 118 TooManyTo_003 7265 1.09 0.42 1.21 119 TO_MALFORMED 6989 0.99 0.01 1.16 120 XMCapTrack 6723 1.26 2.03 1.12 121 XM_E_Blogspot 6709 0.96 0.11 1.12 122 TM2_M_VERY_LONG_WORD 6703 1.23 1.86 1.12 123 BAYES_95 6617 1.51 3.74 1.10 124 CK_HELO_DYNAMIC_SPLIT_IP 6464 0.94 0.17 1.08 125 HELO_DYNAMIC_IPADDR2 6460 0.92 0.04 1.08 126 XM_GoogleGroups 6209 0.94 0.43 1.03 127 XM_H_Long_From02 6173 1.11 1.57 1.03 128 XMGenDplmaNmb 6115 1.16 1.90 1.02 129 DKIM_ADSP_CUSTOM_MED 5644 1.04 1.57 0.94 130 USER_IN_DEF_DKIM_WL 5621 0.79 0.02 0.94 131 TR_MSPIKEBAYES00 5588 0.79 0.01 0.93 132 XMBdyGiftCard01 5434 0.86 0.61 0.90 133 TooManyTo_004 5397 0.81 0.35 0.90 134 RCVD_IN_BL_SPAMCOP_NET 5245 1.46 4.68 0.87 135 XMNoVowels 5189 0.96 1.46 0.86 136 FILL_THIS_FORM_SHORT 5137 0.93 1.31 0.86 137 XMGappySubj_01 5127 0.75 0.16 0.85 138 RELAYCOUNTRY_GB 5041 0.92 1.39 0.84 139 T_Symld_Words_02 5003 0.85 0.96 0.83 140 TR_MetaPhish_Combo_01 4752 0.82 1.01 0.79 141 RCVD_IN_MSPIKE_BL 4718 1.56 5.78 0.79 142 TooManyTo_005 4487 0.68 0.30 0.75 143 XM_UB50 4346 2.28 10.77 0.72 144 T_XMDrugObfuBody_00 4254 0.81 1.38 0.71 145 NML_ADSP_CUSTOM_MED 4226 0.78 1.20 0.70 146 MY_SERVERS_FOUND 4036 0.59 0.12 0.67 147 XMHTML_After_End 4031 0.86 1.89 0.67 148 SpammyFromTLD_01 3722 0.89 2.38 0.62 149 FROM_GOV_DKIM_AU 3652 0.55 0.23 0.61 150 XMBody_17 3580 0.82 2.07 0.60 151 HTTPS_HTTP_MISMATCH 3508 0.65 1.00 0.58 152 XMSubMetaI_00 3507 0.66 1.10 0.58 153 XMBody_95 3394 0.49 0.08 0.57 154 XM_SPF_Unknown 3322 0.60 0.84 0.55 155 RCVD_IN_MSPIKE_L3 3319 1.19 4.65 0.55 156 T_XMHurry_00 3295 0.70 1.51 0.55 157 BASE64_LENGTH_79_INF 3278 0.50 0.26 0.55 158 XMBrknScrpt_02 3175 0.64 1.28 0.53 159 DKIM_ADSP_NXDOMAIN 3168 0.66 1.40 0.53 160 XM_H_PHPMailer 3125 0.68 1.53 0.52 161 T_OBFU_PDF_ATTACH 3024 0.46 0.22 0.50 162 XMHTMLBadTable_001 3023 0.50 0.49 0.50 163 XM_B_REG_HTML 2919 0.48 0.42 0.49 164 TR_LOTS_OF_MONEY3 2885 0.63 1.43 0.48 165 FILL_THIS_FORM 2868 0.45 0.27 0.48 166 TR_XM_PHPDW 2860 0.75 2.27 0.48 167 XM_ShortIntro_01 2778 0.46 0.43 0.46 168 TR_XM_PHPForged 2758 0.74 2.24 0.46 169 XMMoneyMeta_00 2740 0.60 1.38 0.46 170 TR_XM_FormFill2 2736 0.73 2.21 0.46 171 XM_H_PHPOS 2717 0.72 2.20 0.45 172 XMLngstWrd_00 2666 0.44 0.42 0.44 173 XMPhish14 2663 0.57 1.29 0.44 174 XM_DIRTYINTL 2637 0.94 3.65 0.44 175 FORGED_GMAIL_RCVD 2630 0.59 1.45 0.44 176 SUBJ_DOLLARS 2622 0.44 0.45 0.44 177 MISSING_HEADERS 2571 0.46 0.66 0.43 178 XMSlimDrugH 2561 0.56 1.26 0.43 179 PDS_OTHER_BAD_TLD 2485 1.32 6.26 0.41 180 HTML_IMAGE_ONLY_20 2480 0.39 0.30 0.41 181 XMSexyCombo_01 2474 0.80 2.90 0.41 182 XM_ProductURIs 2454 0.49 0.94 0.41 183 FROM_GOV_SPOOF 2445 0.38 0.21 0.41 184 XMLngstWrd_01 2378 0.39 0.38 0.40 185 AC_DIV_BONANZA 2374 0.35 0.12 0.40 186 TM2_M_BODY_EMPTY 2357 0.35 0.11 0.39 187 TM2_M_A_HREF_HREF 2356 0.43 0.63 0.39 188 RELAYCOUNTRY_AU 2344 0.46 0.84 0.39 189 T_TooManySym_03 2335 0.38 0.33 0.39 190 HTML_IMAGE_ONLY_28 2318 0.40 0.49 0.39 191 FILL_THIS_FORM_LONG 2272 0.36 0.24 0.38 192 XMSubMetaSxObfu_03 2247 0.49 1.12 0.37 193 USER_IN_WHITELIST 2224 0.31 0.00 0.37 194 HTML_IMAGE_ONLY_32 2215 0.34 0.19 0.37 195 DIET_1 2213 0.50 1.23 0.37 196 XMPhish30 2163 0.44 0.89 0.36 197 SHORT_HELO_AND_INLINE_IMAGE 2148 0.31 0.03 0.36 198 HTML_TAG_BALANCE_BODY 2138 0.45 0.93 0.36 199 RELAYCOUNTRY_DE 2126 0.48 1.14 0.35 200 MPART_ALT_DIFF_COUNT 2081 0.43 0.91 0.35 ----------------------------------------------------------------------