Email: 735183 Autolearn: 0 AvgScore: 1.54 AvgScanTime: 1.88 sec Spam: 113794 Autolearn: 0 AvgScore: 11.84 AvgScanTime: 3.77 sec Ham: 621389 Autolearn: 0 AvgScore: -0.35 AvgScanTime: 1.54 sec Time Spent Running SA: 384.57 hours Time Spent Processing Spam: 119.18 hours Time Spent Processing Ham: 265.39 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 105086 90.85 92.35 90.58 2 DKIM_SIGNED 92787 65.65 81.54 62.74 3 XM_DK_Pass 89732 64.37 78.85 61.72 4 RELAYCOUNTRY_US 87233 70.10 76.66 68.90 5 DCC_CHECK 86577 40.30 76.08 33.75 6 XM_B_Unicode 85202 68.82 74.87 67.71 7 XMListUnsubscribeExists 77654 46.11 68.24 42.06 8 DKIM_VALID 76400 59.62 67.14 58.24 9 DKIM_VALID_AU 57745 44.56 50.75 43.42 10 BAYES_50 51734 54.69 45.46 56.38 11 XM_B_Unicode3 51700 41.47 45.43 40.74 12 XM_DK_Undo_02 47303 11.37 41.57 5.83 13 LOC_TINY_FONT_1 40711 21.73 35.78 19.15 14 MIME_HTML_ONLY 39372 24.17 34.60 22.27 15 HTML_FONT_LOW_CONTRAST 35233 27.88 30.96 27.31 16 DKIM_VALID_EF 31014 22.99 27.25 22.20 17 FVGT_m_MULTI_ODD 30936 20.71 27.19 19.53 18 XMSubLong 28793 18.25 25.30 16.96 19 T_KAM_HTML_FONT_INVALID 28749 16.80 25.26 15.25 20 BAYES_99 28509 6.67 25.05 3.31 21 BOTNET 27277 5.74 23.97 2.40 22 RELAYCOUNTRY_META 26806 7.91 23.56 5.04 23 DCC_CHECK_NEGATIVE 25024 57.84 21.99 64.41 24 XM_Body_Dirty_Words 24186 13.75 21.25 12.37 25 T_TM2_M_HEADER_IN_MSG 22780 26.73 20.02 27.96 26 BAYES_999 21936 5.22 19.28 2.65 27 TR_DCC_Bayes_99 21688 4.05 19.06 1.30 28 XM_Multi_Part_URI 21612 13.65 18.99 12.67 29 BOTNET_IPINHOSTNAME 17480 5.23 15.36 3.37 30 UNTRUSTED_Relay 17457 3.63 15.34 1.48 31 DKIM_INVALID 16387 6.03 14.40 4.49 32 XM_B_Unsub 16378 9.52 14.39 8.62 33 HTML_IMAGE_RATIO_02 16156 7.10 14.20 5.80 34 XM_UncommonTLD01 15628 4.38 13.73 2.67 35 LOTS_OF_MONEY 15602 7.90 13.71 6.84 36 FSL_BULK_SIG 13534 7.11 11.89 6.23 37 XMSexyCombo_05 13520 4.69 11.88 3.37 38 XM_Evil_Numbers_Gen 13059 8.19 11.48 7.59 39 NO_DNS_FOR_FROM 12962 4.16 11.39 2.84 40 XM_B_Phish_Phrases 10888 9.57 9.57 9.58 41 LotsOfNums_01 10336 6.90 9.08 6.49 42 XM_UB50 9707 2.01 8.53 0.81 43 MPART_ALT_DIFF 8568 4.87 7.53 4.38 44 BAYES_80 8236 3.11 7.24 2.35 45 XMSubMetaSx_00 8061 4.07 7.08 3.52 46 HTML_IMAGE_RATIO_04 7946 5.20 6.98 4.87 47 XM_H_Long_From01 7780 13.91 6.84 15.21 48 TooManyTo_001 7378 6.79 6.48 6.84 49 BAYES_60 7151 5.14 6.28 4.93 50 MIME_QP_LONG_LINE 6872 7.97 6.04 8.32 51 RCVD_IN_MSPIKE_H2 6710 7.86 5.90 8.22 52 XMNumbers 6478 3.35 5.69 2.93 53 XM_SendGrid 6135 5.59 5.39 5.62 54 PDS_OTHER_BAD_TLD 6088 9.71 5.35 10.51 55 RCVD_IN_BL_SPAMCOP_NET 6045 1.55 5.31 0.86 56 XM_B_SpammyTLD 5771 12.08 5.07 13.36 57 RELAYCOUNTRY_CA 5605 2.06 4.93 1.54 58 RCVD_IN_RP_RNBL 5503 0.85 4.84 0.12 59 SpammyFromTLD_02 5474 1.03 4.81 0.33 60 FROM_SUSPICIOUS_NTLD 5154 0.75 4.53 0.06 61 RCVD_IN_MSPIKE_BL 5114 1.62 4.49 1.09 62 TM2_M_URI_OPT_OUT 5068 5.48 4.45 5.66 63 FROM_SUSPICIOUS_NTLD_FP 5064 0.74 4.45 0.05 64 XM_SPF_SoftFail 4973 1.97 4.37 1.53 65 BAYES_40 4920 5.17 4.32 5.33 66 MIME_HTML_MOSTLY 4879 2.41 4.29 2.06 67 KHOP_HELO_FCRDNS 4777 2.16 4.20 1.79 68 T_XMDrugObfuBody_08 4603 1.96 4.05 1.57 69 BAYES_95 4474 1.82 3.93 1.43 70 XM_B_Unsub2 4427 2.17 3.89 1.85 71 RCVD_IN_MSPIKE_L3 4368 1.24 3.84 0.77 72 MIME_HTML_ONLY_MULTI 4359 2.93 3.83 2.76 73 T_REMOTE_IMAGE 4290 3.32 3.77 3.24 74 HTML_IMAGE_RATIO_06 4229 3.44 3.72 3.39 75 XM_URI_RBL 4215 0.69 3.70 0.14 76 FROM_EXCESS_BASE64 4188 5.32 3.68 5.62 77 RELAYCOUNTRY_FR 4154 0.78 3.65 0.26 78 XM_DIRTYINTL 4080 0.96 3.59 0.47 79 RCVD_IN_MSPIKE_WL 3838 7.70 3.37 8.49 80 RCVD_IN_MSPIKE_H3 3838 7.70 3.37 8.49 81 BAYES_20 3828 4.19 3.36 4.34 82 XM_CamelCaseFrm001 3799 1.93 3.34 1.67 83 XMNoVowels 3756 2.15 3.30 1.94 84 RCVD_IN_PSBL 3635 0.52 3.19 0.03 85 T_TooManySym_01 3627 4.85 3.19 5.15 86 XMStrtUSub 3569 3.83 3.14 3.96 87 LongTLD 3552 0.64 3.12 0.18 88 XM_OfRef6 3288 1.45 2.89 1.19 89 SpammyFromTLD_01 3255 0.97 2.86 0.63 90 HTML_MIME_NO_HTML_TAG 3068 1.90 2.70 1.75 91 URI_HEX 3014 1.26 2.65 1.01 92 XM_BadFromFormat 3005 0.52 2.64 0.13 93 HTML_IMAGE_RATIO_08 2915 2.13 2.56 2.06 94 XMDiploma_00 2876 1.81 2.53 1.68 95 FROM_MISSP_REPLYTO 2789 0.39 2.45 0.02 96 BOTNET_NORDNS 2754 0.42 2.42 0.05 97 BAYES_00 2685 16.42 2.36 19.00 98 URI_TRY_3LD 2636 1.20 2.32 0.99 99 TR_XM_DK_SendGrid 2616 3.11 2.30 3.25 100 ALL_TRUSTED 2587 23.82 2.27 27.76 101 TR_XM_INV_DKIM 2536 0.42 2.23 0.09 102 RELAYCOUNTRY_IN 2526 0.43 2.22 0.10 103 DATE_IN_PAST_03_06 2454 0.41 2.16 0.09 104 XMBody_17 2425 0.76 2.13 0.50 105 TR_XM_PHPDW 2404 1.08 2.11 0.89 106 T_XMHurry_00 2350 0.74 2.07 0.50 107 RCVD_IN_IADB_LISTED 2312 3.98 2.03 4.34 108 T_XMDrugObfuBody_14 2307 1.50 2.03 1.40 109 RCVD_IN_RP_SAFE 2295 6.33 2.02 7.12 110 REMOVE_BEFORE_LINK 2276 0.56 2.00 0.30 111 TM2_M_VERY_LONG_WORD 2249 1.17 1.98 1.02 112 TR_XM_PHPForged 2241 1.03 1.97 0.86 113 TR_Mismatch_TLD_01 2240 0.52 1.97 0.25 114 TR_XM_FormFill2 2219 1.03 1.95 0.86 115 XM_H_PHPOS 2213 1.03 1.94 0.86 116 FROM_MISSP_EH_MATCH 2205 0.32 1.94 0.02 117 TO_NO_BRKTS_FROM_MSSP 2189 0.31 1.92 0.02 118 XMSexyCombo_01 2178 0.78 1.91 0.57 119 RCVD_IN_IADB_SPF 2165 3.47 1.90 3.75 120 RCVD_IN_IADB_DK 2122 2.99 1.86 3.20 121 XMHTML_After_End 2121 3.62 1.86 3.94 122 RCVD_IN_IADB_SENDERID 2101 3.07 1.85 3.29 123 XM_DK_Undo_01 2089 1.45 1.84 1.38 124 XMGenDplmaNmb 2065 1.15 1.81 1.03 125 T_Symld_Words_02 2050 0.68 1.80 0.48 126 RELAYCOUNTRY_GB 2017 0.99 1.77 0.85 127 TR_XM_DK_Bayes 2017 11.35 1.77 13.10 128 URIBL_SBL_A 1910 0.40 1.68 0.16 129 BAYES_05 1906 2.61 1.67 2.78 130 MAILING_LIST_MULTI 1885 2.08 1.66 2.16 131 XM_UB60 1864 0.31 1.64 0.07 132 XMSubMetaI_00 1845 0.61 1.62 0.43 133 XM_H_PHPMailer 1835 3.42 1.61 3.75 134 RCVD_IN_RP_CERTIFIED 1834 5.72 1.61 6.48 135 TR_LOTS_OF_MONEY3 1760 0.44 1.55 0.24 136 BODY_URI_ONLY 1739 0.28 1.53 0.05 137 T_XMDrugObfuBody_00 1727 0.85 1.52 0.72 138 XMStockSpam_06 1718 0.83 1.51 0.70 139 TR_Symld_Words 1701 1.33 1.49 1.29 140 HTML_SHORT_LINK_IMG_1 1679 0.24 1.48 0.01 141 DATE_IN_PAST_06_12 1643 0.26 1.44 0.04 142 SUBJ_ALL_CAPS 1544 1.35 1.36 1.35 143 XMPhish08 1536 0.65 1.35 0.52 144 XM_ProductURIs 1517 0.84 1.33 0.75 145 XM_H_PHPOS_M 1489 0.28 1.31 0.10 146 TR_Mismatch_TLD_02 1483 0.25 1.30 0.06 147 TR_XM_RelayPhish 1482 0.33 1.30 0.15 148 UNPARSEABLE_RELAY 1469 1.75 1.29 1.83 149 RELAYCOUNTRY_RU 1439 0.21 1.26 0.02 150 RDNS_DYNAMIC 1433 0.41 1.26 0.26 151 DKIM_ADSP_CUSTOM_MED 1428 0.97 1.25 0.92 152 RELAYCOUNTRY_DE 1423 0.53 1.25 0.40 153 XMBrknScrpt_02 1402 0.59 1.23 0.47 154 FILL_THIS_FORM_SHORT 1376 0.89 1.21 0.83 155 HTML_TAG_BALANCE_CENTER 1367 0.34 1.20 0.18 156 XM_UB80 1355 0.20 1.19 0.02 157 XMMoneyMeta_00 1348 0.59 1.18 0.49 158 DKIM_ADSP_NXDOMAIN 1341 0.42 1.18 0.28 159 XMBdyGiftCard01 1326 0.99 1.17 0.96 160 XMPhish30 1313 0.81 1.15 0.74 161 XMBody_78 1303 0.44 1.15 0.31 162 MPART_ALT_DIFF_COUNT 1296 0.46 1.14 0.33 163 XM_UB99 1290 0.18 1.13 0.01 164 XM_XX_Yahoo 1274 0.30 1.12 0.15 165 FORGED_GMAIL_RCVD 1253 0.53 1.10 0.42 166 T_MONEY_PERCENT 1252 0.37 1.10 0.24 167 TR_LOTS_OF_MONEY2 1252 0.37 1.10 0.24 168 TR_XM_DK_Bayes1 1245 10.53 1.09 12.26 169 DIET_1 1241 0.47 1.09 0.36 170 XM_H_Long_From02 1211 0.95 1.06 0.92 171 NML_ADSP_CUSTOM_MED 1196 0.73 1.05 0.68 172 SUBJ_DOLLARS 1177 0.34 1.03 0.21 173 RELAYCOUNTRY_IT 1173 0.20 1.03 0.04 174 XMSubMetaSxObfu_03 1166 0.48 1.02 0.38 175 HTML_IMAGE_ONLY_12 1157 0.30 1.02 0.16 176 REPLYTO_WITHOUT_TO_CC 1157 0.22 1.02 0.07 177 HTML_FONT_SIZE_HUGE 1152 0.24 1.01 0.10 178 XM_H_MailChimp 1142 0.28 1.00 0.15 179 HTTPS_HTTP_MISMATCH 1140 0.68 1.00 0.62 180 T_TooManySym_02 1122 2.80 0.99 3.14 181 ANY_BOUNCE_MESSAGE 1116 2.24 0.98 2.47 182 BOUNCE_MESSAGE 1113 2.24 0.98 2.47 183 SHORT_SHORTNER 1108 0.16 0.97 0.01 184 TR_MetaPhish_Combo_01 1079 1.91 0.95 2.08 185 URIBL_BLACK 1071 0.16 0.94 0.01 186 XMLngstWrd_00 1057 0.49 0.93 0.41 187 NUMERIC_HTTP_ADDR 1053 1.36 0.93 1.45 188 TR_XM_MaxBayes 1042 0.14 0.92 0.00 189 XMHTMLBadTable_001 1033 0.60 0.91 0.55 190 HTML_IMAGE_ONLY_28 1022 0.48 0.90 0.41 191 XMLngstWrd_01 1006 0.45 0.88 0.37 192 HK_RANDOM_REPLYTO 994 0.31 0.87 0.20 193 TVD_SPACE_RATIO 980 0.43 0.86 0.35 194 URI_OPTOUT_3LD 975 0.41 0.86 0.33 195 XMPhish14 965 0.42 0.85 0.34 196 HTML_IMAGE_ONLY_08 944 0.22 0.83 0.10 197 SHORT_URI 912 0.14 0.80 0.01 198 XMSexyCombo_04 910 0.25 0.80 0.14 199 XMSlimDrugH 904 0.43 0.79 0.36 200 MIME_HEADER_CTYPE_ONLY 902 0.32 0.79 0.24 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 562856 90.85 92.35 90.58 2 RELAYCOUNTRY_US 428125 70.10 76.66 68.90 3 XM_B_Unicode 420740 68.82 74.87 67.71 4 DCC_CHECK_NEGATIVE 400240 57.84 21.99 64.41 5 DKIM_SIGNED 389831 65.65 81.54 62.74 6 XM_DK_Pass 383534 64.37 78.85 61.72 7 DKIM_VALID 361919 59.62 67.14 58.24 8 BAYES_50 350317 54.69 45.46 56.38 9 DKIM_VALID_AU 269824 44.56 50.75 43.42 10 XMListUnsubscribeExists 261364 46.11 68.24 42.06 11 XM_B_Unicode3 253179 41.47 45.43 40.74 12 DCC_CHECK 209707 40.30 76.08 33.75 13 T_TM2_M_HEADER_IN_MSG 173741 26.73 20.02 27.96 14 ALL_TRUSTED 172503 23.82 2.27 27.76 15 HTML_FONT_LOW_CONTRAST 169710 27.88 30.96 27.31 16 MIME_HTML_ONLY 138353 24.17 34.60 22.27 17 DKIM_VALID_EF 137976 22.99 27.25 22.20 18 FVGT_m_MULTI_ODD 121355 20.71 27.19 19.53 19 LOC_TINY_FONT_1 119021 21.73 35.78 19.15 20 BAYES_00 118051 16.42 2.36 19.00 21 XMSubLong 105388 18.25 25.30 16.96 22 T_KAM_HTML_FONT_INVALID 94748 16.80 25.26 15.25 23 XM_H_Long_From01 94504 13.91 6.84 15.21 24 XM_B_SpammyTLD 83030 12.08 5.07 13.36 25 TR_XM_DK_Bayes 81391 11.35 1.77 13.10 26 XM_Multi_Part_URI 78716 13.65 18.99 12.67 27 XM_Body_Dirty_Words 76868 13.75 21.25 12.37 28 TR_XM_DK_Bayes1 76190 10.53 1.09 12.26 29 TR_XM_DK_Bayes2 66694 9.18 0.70 10.73 30 PDS_OTHER_BAD_TLD 65290 9.71 5.35 10.51 31 XM_B_Phish_Phrases 59501 9.57 9.57 9.58 32 XM_B_Unsub 53594 9.52 14.39 8.62 33 RCVD_IN_MSPIKE_H3 52785 7.70 3.37 8.49 34 RCVD_IN_MSPIKE_WL 52785 7.70 3.37 8.49 35 MIME_QP_LONG_LINE 51690 7.97 6.04 8.32 36 RCVD_IN_MSPIKE_H2 51090 7.86 5.90 8.22 37 XM_Evil_Numbers_Gen 47183 8.19 11.48 7.59 38 RCVD_IN_RP_SAFE 44263 6.33 2.02 7.12 39 TooManyTo_001 42513 6.79 6.48 6.84 40 LOTS_OF_MONEY 42513 7.90 13.71 6.84 41 LotsOfNums_01 40359 6.90 9.08 6.49 42 RCVD_IN_RP_CERTIFIED 40254 5.72 1.61 6.48 43 FSL_BULK_SIG 38707 7.11 11.89 6.23 44 XM_DK_Undo_02 36255 11.37 41.57 5.83 45 HTML_IMAGE_RATIO_02 36052 7.10 14.20 5.80 46 XM_DKIMWhitelistDomains 35453 4.83 0.03 5.71 47 TM2_M_URI_OPT_OUT 35198 5.48 4.45 5.66 48 XM_SendGrid 34953 5.59 5.39 5.62 49 FROM_EXCESS_BASE64 34903 5.32 3.68 5.62 50 BAYES_40 33121 5.17 4.32 5.33 51 T_TooManySym_01 32010 4.85 3.19 5.15 52 RELAYCOUNTRY_META 31324 7.91 23.56 5.04 53 BAYES_60 30644 5.14 6.28 4.93 54 HTML_IMAGE_RATIO_04 30253 5.20 6.98 4.87 55 DKIM_INVALID 27912 6.03 14.40 4.49 56 MPART_ALT_DIFF 27222 4.87 7.53 4.38 57 BAYES_20 26996 4.19 3.36 4.34 58 RCVD_IN_IADB_LISTED 26955 3.98 2.03 4.34 59 XM_PDF 24953 3.51 0.78 4.02 60 XMStrtUSub 24612 3.83 3.14 3.96 61 XMHTML_After_End 24459 3.62 1.86 3.94 62 RCVD_IN_IADB_SPF 23324 3.47 1.90 3.75 63 XM_H_PHPMailer 23305 3.42 1.61 3.75 64 XMSubMetaSx_00 21875 4.07 7.08 3.52 65 HTML_IMAGE_RATIO_06 21052 3.44 3.72 3.39 66 BOTNET_IPINHOSTNAME 20936 5.23 15.36 3.37 67 XMSexyCombo_05 20930 4.69 11.88 3.37 68 IN_ZIMBRA_NJ_WHITELIST 20801 2.83 0.02 3.35 69 BAYES_99 20559 6.67 25.05 3.31 70 RCVD_IN_IADB_SENDERID 20463 3.07 1.85 3.29 71 TR_XM_DK_SendGrid 20224 3.11 2.30 3.25 72 T_REMOTE_IMAGE 20137 3.32 3.77 3.24 73 RCVD_IN_IADB_DK 19893 2.99 1.86 3.20 74 T_TooManySym_02 19487 2.80 0.99 3.14 75 XMNumbers 18181 3.35 5.69 2.93 76 NO_DNS_FOR_FROM 17622 4.16 11.39 2.84 77 RCVD_IN_IADB_VOUCHED 17595 2.49 0.60 2.83 78 BAYES_05 17267 2.61 1.67 2.78 79 MIME_HTML_ONLY_MULTI 17147 2.93 3.83 2.76 80 XM_UncommonTLD01 16568 4.38 13.73 2.67 81 BAYES_999 16457 5.22 19.28 2.65 82 ANY_BOUNCE_MESSAGE 15322 2.24 0.98 2.47 83 BOUNCE_MESSAGE 15319 2.24 0.98 2.47 84 BOTNET 14941 5.74 23.97 2.40 85 BAYES_80 14627 3.11 7.24 2.35 86 MAILING_LIST_MULTI 13397 2.08 1.66 2.16 87 TR_MetaPhish_Combo_01 12935 1.91 0.95 2.08 88 MIME_HTML_MOSTLY 12831 2.41 4.29 2.06 89 HTML_IMAGE_RATIO_08 12777 2.13 2.56 2.06 90 XM_H_Trusted_IP 12123 1.65 0.00 1.95 91 XMNoVowels 12083 2.15 3.30 1.94 92 TVD_RCVD_IP 11557 1.69 0.76 1.86 93 RCVD_IN_IADB_OPTIN 11528 1.64 0.47 1.86 94 XM_B_Unsub2 11505 2.17 3.89 1.85 95 UNPARSEABLE_RELAY 11380 1.75 1.29 1.83 96 TooManyTo_002 11176 1.63 0.71 1.80 97 KHOP_HELO_FCRDNS 11113 2.16 4.20 1.79 98 HTML_MIME_NO_HTML_TAG 10871 1.90 2.70 1.75 99 XMDiploma_00 10439 1.81 2.53 1.68 100 XM_CamelCaseFrm001 10384 1.93 3.34 1.67 101 T_TooManySym_03 10053 1.41 0.26 1.62 102 T_XMDrugObfuBody_08 9776 1.96 4.05 1.57 103 RELAYCOUNTRY_CA 9550 2.06 4.93 1.54 104 XM_SPF_SoftFail 9528 1.97 4.37 1.53 105 HELO_NODOT 9412 1.38 0.62 1.51 106 HELO_NO_DOMAIN 9370 1.37 0.62 1.51 107 UNTRUSTED_Relay 9214 3.63 15.34 1.48 108 NUMERIC_HTTP_ADDR 8981 1.36 0.93 1.45 109 BAYES_95 8883 1.82 3.93 1.43 110 T_XMDrugObfuBody_14 8713 1.50 2.03 1.40 111 XM_DK_Undo_01 8573 1.45 1.84 1.38 112 SUBJ_ALL_CAPS 8382 1.35 1.36 1.35 113 INVALID_MSGID 8070 1.14 0.29 1.30 114 TR_DCC_Bayes_99 8060 4.05 19.06 1.30 115 TR_Symld_Words 8043 1.33 1.49 1.29 116 HTML_TITLE_SUBJ_DIFF 8043 1.12 0.15 1.29 117 NORMAL_HTTP_TO_IP 7951 1.13 0.31 1.28 118 IN_HORDE_ADDRESS_BOOK 7873 1.08 0.04 1.27 119 TooManyTo_003 7454 1.10 0.55 1.20 120 XM_OfRef6 7383 1.45 2.89 1.19 121 XMCapTrack 7323 1.06 0.42 1.18 122 TO_MALFORMED 7176 1.09 0.76 1.15 123 XMSubNoVowel 6939 1.01 0.43 1.12 124 RCVD_IN_MSPIKE_BL 6795 1.62 4.49 1.09 125 CK_HELO_DYNAMIC_SPLIT_IP 6501 0.91 0.16 1.05 126 HELO_DYNAMIC_IPADDR2 6497 0.89 0.04 1.05 127 XMGenDplmaNmb 6426 1.15 1.81 1.03 128 TM2_M_VERY_LONG_WORD 6354 1.17 1.98 1.02 129 URI_HEX 6274 1.26 2.65 1.01 130 URI_TRY_3LD 6168 1.20 2.32 0.99 131 XMBdyGiftCard01 5946 0.99 1.17 0.96 132 XM_GoogleGroups 5902 0.87 0.44 0.95 133 XM_H_Long_From02 5738 0.95 1.06 0.92 134 DKIM_ADSP_CUSTOM_MED 5689 0.97 1.25 0.92 135 TooManyTo_004 5511 0.82 0.45 0.89 136 TR_MSPIKEBAYES00 5511 0.75 0.01 0.89 137 TR_XM_PHPDW 5504 1.08 2.11 0.89 138 TR_XM_PHPForged 5367 1.03 1.97 0.86 139 TR_XM_FormFill2 5342 1.03 1.95 0.86 140 RCVD_IN_BL_SPAMCOP_NET 5339 1.55 5.31 0.86 141 XM_H_PHPOS 5329 1.03 1.94 0.86 142 RELAYCOUNTRY_GB 5289 0.99 1.77 0.85 143 FILL_THIS_FORM_SHORT 5169 0.89 1.21 0.83 144 XMGappySubj_01 5149 0.73 0.21 0.83 145 XM_UB50 5036 2.01 8.53 0.81 146 HTML_FONT_FACE_BAD 4925 0.75 0.52 0.79 147 USER_IN_DEF_DKIM_WL 4772 0.65 0.00 0.77 148 RCVD_IN_MSPIKE_L3 4764 1.24 3.84 0.77 149 XM_ProductURIs 4688 0.84 1.33 0.75 150 TooManyTo_005 4678 0.70 0.42 0.75 151 XMPhish30 4617 0.81 1.15 0.74 152 T_XMDrugObfuBody_00 4487 0.85 1.52 0.72 153 XMStockSpam_06 4379 0.83 1.51 0.70 154 XM_B_COPY_HTML 4209 0.69 0.74 0.68 155 NML_ADSP_CUSTOM_MED 4201 0.73 1.05 0.68 156 TO_NO_BRKTS_HTML_ONLY 3996 0.57 0.17 0.64 157 XMBody_95 3917 0.55 0.12 0.63 158 SpammyFromTLD_01 3888 0.97 2.86 0.63 159 HTTPS_HTTP_MISMATCH 3826 0.68 1.00 0.62 160 XM_SPF_Unknown 3767 0.59 0.51 0.61 161 T_OBFU_PDF_ATTACH 3724 0.54 0.21 0.60 162 XMSexyCombo_01 3570 0.78 1.91 0.57 163 XMHTMLBadTable_001 3402 0.60 0.91 0.55 164 XM_H_SpoofStaff4 3265 0.47 0.15 0.53 165 XMPhish08 3216 0.65 1.35 0.52 166 XMBody_17 3127 0.76 2.13 0.50 167 T_XMHurry_00 3101 0.74 2.07 0.50 168 XMMoneyMeta_00 3024 0.59 1.18 0.49 169 FILL_THIS_FORM 2972 0.48 0.46 0.48 170 XM_ShortIntro_01 2962 0.47 0.43 0.48 171 T_Symld_Words_02 2960 0.68 1.80 0.48 172 XM_DIRTYINTL 2950 0.96 3.59 0.47 173 HTML_TAG_BALANCE_BODY 2941 0.51 0.74 0.47 174 RELAYCOUNTRY_AU 2940 0.51 0.72 0.47 175 FROM_GOV_SPOOF 2921 0.43 0.18 0.47 176 XMBrknScrpt_02 2899 0.59 1.23 0.47 177 MISSING_HEADERS 2888 0.47 0.53 0.46 178 XMSubMetaI_00 2654 0.61 1.62 0.43 179 FORGED_GMAIL_RCVD 2630 0.53 1.10 0.42 180 HTML_IMAGE_ONLY_32 2606 0.39 0.23 0.42 181 FROM_GOV_DKIM_AU 2601 0.38 0.14 0.42 182 HTML_IMAGE_ONLY_20 2565 0.39 0.28 0.41 183 XMSolicitRefs_0 2564 0.41 0.40 0.41 184 XMLngstWrd_00 2562 0.49 0.93 0.41 185 HTML_IMAGE_ONLY_28 2543 0.48 0.90 0.41 186 XM_B_REG_HTML 2507 0.41 0.45 0.40 187 XMSpoofStaff2 2502 0.36 0.16 0.40 188 RELAYCOUNTRY_DE 2499 0.53 1.25 0.40 189 TM2_M_BODY_EMPTY 2467 0.35 0.12 0.40 190 SHORT_HELO_AND_INLINE_IMAGE 2456 0.34 0.05 0.40 191 USER_IN_WHITELIST 2403 0.33 0.00 0.39 192 XMSubMetaSxObfu_03 2386 0.48 1.02 0.38 193 RCVD_IN_SORBS_DUL 2319 0.34 0.14 0.37 194 XMLngstWrd_01 2282 0.45 0.88 0.37 195 XMSlimDrugH 2259 0.43 0.79 0.36 196 TM2_M_A_HREF_HREF 2239 0.41 0.68 0.36 197 DIET_1 2214 0.47 1.09 0.36 198 XM_E_Blogspot 2199 0.32 0.12 0.35 199 TVD_SPACE_RATIO 2196 0.43 0.86 0.35 200 FSL_THIS_IS_ADV 2171 0.37 0.49 0.35 ----------------------------------------------------------------------