Email: 706687 Autolearn: 0 AvgScore: 1.83 AvgScanTime: 2.03 sec Spam: 125568 Autolearn: 0 AvgScore: 12.16 AvgScanTime: 3.72 sec Ham: 581119 Autolearn: 0 AvgScore: -0.41 AvgScanTime: 1.66 sec Time Spent Running SA: 398.26 hours Time Spent Processing Spam: 129.85 hours Time Spent Processing Ham: 268.40 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 121260 90.91 96.57 89.69 2 DKIM_SIGNED 101149 69.61 80.55 67.25 3 RELAYCOUNTRY_US 100157 74.17 79.76 72.96 4 DCC_CHECK 99528 43.49 79.26 35.76 5 XM_DK_Pass 97714 68.31 77.82 66.25 6 XM_B_Unicode 93394 73.49 74.38 73.29 7 XMListUnsubscribeExists 83510 49.22 66.51 45.49 8 DKIM_VALID 82527 63.05 65.72 62.47 9 DKIM_VALID_AU 62366 47.16 49.67 46.61 10 XM_B_Unicode3 57649 46.42 45.91 46.53 11 BAYES_50 55148 54.52 43.92 56.81 12 XM_DK_Undo_02 53160 13.43 42.34 7.18 13 MIME_HTML_ONLY 47888 22.32 38.14 18.91 14 LOC_TINY_FONT_1 45418 32.19 36.17 31.33 15 HTML_FONT_LOW_CONTRAST 39420 25.31 31.39 24.00 16 BAYES_99 33995 7.85 27.07 3.70 17 FVGT_m_MULTI_ODD 33494 20.51 26.67 19.18 18 BOTNET 31564 6.65 25.14 2.66 19 XMSubLong 31474 19.35 25.07 18.11 20 DKIM_VALID_EF 31153 23.06 24.81 22.68 21 T_KAM_HTML_FONT_INVALID 27529 16.81 21.92 15.70 22 TR_DCC_Bayes_99 26561 5.26 21.15 1.83 23 BAYES_999 25904 6.12 20.63 2.98 24 T_TM2_M_HEADER_IN_MSG 25644 25.81 20.42 26.97 25 XM_Body_Dirty_Words 25114 12.54 20.00 10.93 26 DCC_CHECK_NEGATIVE 24057 54.67 19.16 62.34 27 RELAYCOUNTRY_META 23912 7.76 19.04 5.32 28 XM_Multi_Part_URI 22273 19.93 17.74 20.40 29 XM_UncommonTLD01 21174 5.29 16.86 2.79 30 FSL_BULK_SIG 21038 7.94 16.75 6.04 31 BOTNET_IPINHOSTNAME 18695 5.99 14.89 4.07 32 DKIM_INVALID 18622 6.57 14.83 4.78 33 HTML_IMAGE_RATIO_02 17290 7.65 13.77 6.33 34 LOTS_OF_MONEY 17050 8.29 13.58 7.15 35 XM_B_Unsub 16878 10.20 13.44 9.50 36 UNTRUSTED_Relay 16457 3.49 13.11 1.42 37 XM_Evil_Numbers_Gen 15128 8.64 12.05 7.90 38 NO_DNS_FOR_FROM 14024 4.57 11.17 3.14 39 XM_B_Phish_Phrases 13325 7.78 10.61 7.17 40 XMSexyCombo_05 12729 4.26 10.14 2.99 41 SpammyFromTLD_02 12239 2.01 9.75 0.34 42 T_REMOTE_IMAGE 11835 4.90 9.43 3.92 43 LotsOfNums_01 11709 7.60 9.32 7.22 44 BAYES_80 10053 3.42 8.01 2.43 45 RCVD_IN_MSPIKE_H2 9331 8.82 7.43 9.12 46 XMNumbers 9164 3.89 7.30 3.15 47 RCVD_IN_MSPIKE_BL 8815 2.19 7.02 1.15 48 XMSubMetaSx_00 8448 3.46 6.73 2.75 49 TooManyTo_001 8400 7.67 6.69 7.88 50 XM_UB50 8132 1.84 6.48 0.84 51 BAYES_60 8039 5.22 6.40 4.96 52 MPART_ALT_DIFF 8037 4.72 6.40 4.36 53 HTML_IMAGE_RATIO_04 7837 5.14 6.24 4.90 54 XM_H_Long_From01 7837 5.83 6.24 5.74 55 FROM_EXCESS_BASE64 7610 3.49 6.06 2.93 56 MIME_QP_LONG_LINE 7358 5.21 5.86 5.07 57 RCVD_IN_BL_SPAMCOP_NET 6890 1.79 5.49 0.99 58 HTML_SHORT_LINK_IMG_1 6733 0.97 5.36 0.02 59 KHOP_HELO_FCRDNS 6666 2.38 5.31 1.75 60 HDRS_LCASE_IMGONLY 6625 0.95 5.28 0.02 61 XM_SendGrid 6622 5.76 5.27 5.86 62 RCVD_IN_MSPIKE_L3 6133 1.57 4.88 0.85 63 RCVD_IN_RP_RNBL 5935 0.95 4.73 0.14 64 REPLYTO_WITHOUT_TO_CC 5921 0.90 4.72 0.07 65 BAYES_95 5619 2.00 4.47 1.46 66 MIME_HTML_MOSTLY 5478 2.67 4.36 2.31 67 MIME_HEADER_CTYPE_ONLY 5467 0.97 4.35 0.24 68 T_Symld_Words_02 5347 1.18 4.26 0.51 69 XM_CamelCaseFrm001 5204 2.34 4.14 1.95 70 RELAYCOUNTRY_CA 5133 2.05 4.09 1.62 71 HTML_IMAGE_RATIO_06 5072 4.12 4.04 4.14 72 TM2_M_URI_OPT_OUT 5032 2.81 4.01 2.55 73 XM_B_SpammyTLD 4891 4.23 3.90 4.30 74 XM_SPF_SoftFail 4746 1.96 3.78 1.57 75 RCVD_IN_MSPIKE_H3 4634 7.77 3.69 8.65 76 RCVD_IN_MSPIKE_WL 4634 7.77 3.69 8.65 77 XM_URI_RBL 4443 0.79 3.54 0.20 78 T_XMDrugObfuBody_08 4396 1.75 3.50 1.37 79 PDS_OTHER_BAD_TLD 4248 0.94 3.38 0.41 80 BODY_URI_ONLY 4188 0.64 3.34 0.06 81 XMNoVowels 3935 2.28 3.13 2.10 82 XMStrtUSub 3935 3.55 3.13 3.64 83 BAYES_40 3918 4.95 3.12 5.35 84 XM_DIRTYINTL 3904 0.96 3.11 0.50 85 MIME_HTML_ONLY_MULTI 3826 2.84 3.05 2.79 86 RELAYCOUNTRY_FR 3799 0.76 3.03 0.27 87 HTML_IMAGE_RATIO_08 3763 2.50 3.00 2.39 88 HTML_MIME_NO_HTML_TAG 3747 2.60 2.98 2.51 89 RCVD_IN_PSBL 3734 0.56 2.97 0.03 90 HTML_IMAGE_ONLY_08 3667 0.60 2.92 0.10 91 TO_EQ_FM_DOM_HTML_IMG 3645 0.53 2.90 0.02 92 XM_OfRef6 3627 1.67 2.89 1.41 93 XM_B_Unsub2 3490 2.02 2.78 1.86 94 HTML_IMAGE_ONLY_12 3394 0.64 2.70 0.19 95 BAYES_20 3347 3.98 2.67 4.26 96 TR_XM_INV_DKIM 3206 0.55 2.55 0.12 97 T_TooManySym_01 3163 4.09 2.52 4.43 98 BAYES_00 3111 15.32 2.48 18.09 99 URI_HEX 3094 1.47 2.46 1.26 100 TR_XM_DK_SendGrid 3037 3.10 2.42 3.25 101 FROM_SUSPICIOUS_NTLD 2986 0.44 2.38 0.03 102 XMDiploma_00 2983 1.90 2.38 1.80 103 T_XMDrugObfuBody_14 2981 1.80 2.37 1.68 104 FROM_SUSPICIOUS_NTLD_FP 2925 0.43 2.33 0.02 105 SUBJ_DOLLARS 2818 0.63 2.24 0.29 106 SpammyFromTLD_01 2772 0.96 2.21 0.69 107 XMSubGiftCard1 2761 0.43 2.20 0.05 108 MAILING_LIST_MULTI 2760 2.47 2.20 2.52 109 T_XMDrugObfuBody_00 2758 0.80 2.20 0.50 110 MSGID_FROM_MTA_HEADER 2758 0.65 2.20 0.31 111 URIBL_SBL_A 2745 0.51 2.19 0.14 112 RCVD_IN_RP_SAFE 2718 6.76 2.16 7.76 113 RCVD_IN_IADB_LISTED 2698 4.17 2.15 4.61 114 XMHTML_After_End 2692 1.12 2.14 0.90 115 SUBJ_ALL_CAPS 2678 1.54 2.13 1.41 116 T_XMHurry_00 2628 0.85 2.09 0.58 117 TR_XM_PHPDW 2610 1.16 2.08 0.97 118 BOTNET_NORDNS 2605 0.40 2.07 0.03 119 TR_XM_PHPForged 2570 1.14 2.05 0.95 120 XMSexyCombo_01 2566 0.67 2.04 0.38 121 TR_XM_FormFill2 2550 1.14 2.03 0.95 122 XM_H_PHPOS 2546 1.14 2.03 0.94 123 TM2_M_VERY_LONG_WORD 2536 1.27 2.02 1.11 124 TR_Mismatch_TLD_01 2510 0.55 2.00 0.24 125 RCVD_IN_IADB_SPF 2498 3.62 1.99 3.98 126 RCVD_IN_IADB_SENDERID 2440 3.19 1.94 3.45 127 RCVD_IN_IADB_DK 2436 3.17 1.94 3.43 128 XMBody_17 2431 0.76 1.94 0.51 129 TR_XM_DK_Bayes 2417 10.75 1.92 12.65 130 LOADSA_MONEY_COMBO 2347 0.35 1.87 0.02 131 XM_DK_Undo_01 2303 1.65 1.83 1.61 132 REMOVE_BEFORE_LINK 2291 0.54 1.82 0.26 133 TR_XM_MaxBayes 2280 0.33 1.82 0.01 134 ALL_TRUSTED 2254 19.79 1.80 23.68 135 RELAYCOUNTRY_GB 2246 1.13 1.79 0.98 136 TR_Symld_Words 2216 2.78 1.76 2.99 137 XMStockSpam_06 2196 0.97 1.75 0.80 138 DIET_1 2177 0.72 1.73 0.51 139 XM_ProductURIs 2089 0.84 1.66 0.66 140 RCVD_IN_RP_CERTIFIED 2071 6.07 1.65 7.02 141 BAYES_05 2040 2.60 1.62 2.81 142 XMGenDplmaNmb 1994 1.18 1.59 1.09 143 UNICODE_OBFU_ASC 1936 8.88 1.54 10.46 144 XMMoneyMeta_00 1920 0.68 1.53 0.50 145 URI_TRY_3LD 1903 1.12 1.52 1.03 146 XM_UB99 1896 0.27 1.51 0.01 147 BOUNCE_MESSAGE 1868 2.28 1.49 2.46 148 ANY_BOUNCE_MESSAGE 1868 2.29 1.49 2.46 149 HTML_TAG_BALANCE_CENTER 1805 0.35 1.44 0.12 150 XM_UB80 1804 0.27 1.44 0.02 151 XM_UB60 1733 0.29 1.38 0.06 152 HK_RANDOM_REPLYTO 1708 0.45 1.36 0.25 153 XMBdyGiftCard01 1688 1.00 1.34 0.93 154 XMCapTrack 1686 1.26 1.34 1.24 155 XMSubMetaI_00 1637 0.73 1.30 0.61 156 RCVD_IN_MSPIKE_L4 1610 0.46 1.28 0.29 157 TR_XM_DK_Bayes1 1601 10.00 1.28 11.89 158 TR_LOTS_OF_MONEY3 1590 0.46 1.27 0.29 159 TR_Mismatch_TLD_02 1575 0.27 1.25 0.06 160 LongTLD 1567 0.34 1.25 0.14 161 DATE_IN_PAST_03_06 1557 0.29 1.24 0.09 162 URI_OPTOUT_3LD 1510 0.46 1.20 0.30 163 RDNS_DYNAMIC 1493 0.47 1.19 0.31 164 TR_XM_MaxSPIKE 1474 0.23 1.17 0.03 165 TR_XM_DK_Bayes2 1450 8.92 1.15 10.59 166 XM_H_MailChimp 1438 0.34 1.15 0.17 167 DATE_IN_PAST_06_12 1430 0.35 1.14 0.18 168 TR_XM_RelayPhish 1428 0.35 1.14 0.18 169 XM_BadFromFormat 1373 0.30 1.09 0.13 170 RELAYCOUNTRY_DE 1361 0.50 1.08 0.38 171 XM_H_PHPMailer 1336 0.57 1.06 0.47 172 DKIM_ADSP_CUSTOM_MED 1320 0.99 1.05 0.98 173 XMBody_78 1301 0.51 1.04 0.40 174 MPART_ALT_DIFF_COUNT 1297 0.48 1.03 0.36 175 RELAYCOUNTRY_IN 1283 0.24 1.02 0.07 176 XM_UB95 1280 0.19 1.02 0.01 177 XMLngstWrd_00 1274 0.49 1.01 0.38 178 XMPhish08 1268 0.57 1.01 0.47 179 XMPhish30 1259 0.58 1.00 0.48 180 T_FILL_THIS_FORM_SHORT 1257 1.03 1.00 1.03 181 T_MONEY_PERCENT 1250 0.48 1.00 0.37 182 TR_LOTS_OF_MONEY2 1250 0.48 1.00 0.37 183 XMLngstWrd_01 1245 0.45 0.99 0.33 184 XM_H_PHPOS_M 1216 0.29 0.97 0.14 185 XMHTMLBadTable_001 1208 0.57 0.96 0.48 186 T_TooManySym_02 1190 2.03 0.95 2.26 187 XMSlimDrugH 1166 0.37 0.93 0.25 188 XM_XX_Yahoo 1151 0.24 0.92 0.09 189 THIS_AD 1134 0.28 0.90 0.14 190 TR_MetaPhish_Combo_01 1127 0.83 0.90 0.81 191 DKIM_ADSP_NXDOMAIN 1123 0.34 0.89 0.22 192 XMSubMetaSxObfu_03 1121 0.42 0.89 0.32 193 XM_H_Long_From02 1089 0.98 0.87 1.00 194 XMGppyBdWords 1087 0.27 0.87 0.15 195 XMPhish14 1080 0.55 0.86 0.49 196 FORGED_GMAIL_RCVD 1077 0.54 0.86 0.48 197 RCVD_IN_MSPIKE_L5 1072 0.16 0.85 0.01 198 UNPARSEABLE_RELAY 1058 1.71 0.84 1.90 199 RELAYCOUNTRY_AU 1042 0.56 0.83 0.50 200 XM_UB999 1023 0.15 0.81 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 521190 90.91 96.57 89.69 2 XM_B_Unicode 425923 73.49 74.38 73.29 3 RELAYCOUNTRY_US 423965 74.17 79.76 72.96 4 DKIM_SIGNED 390793 69.61 80.55 67.25 5 XM_DK_Pass 384990 68.31 77.82 66.25 6 DKIM_VALID 363009 63.05 65.72 62.47 7 DCC_CHECK_NEGATIVE 362294 54.67 19.16 62.34 8 BAYES_50 330110 54.52 43.92 56.81 9 DKIM_VALID_AU 270887 47.16 49.67 46.61 10 XM_B_Unicode3 270389 46.42 45.91 46.53 11 XMListUnsubscribeExists 264346 49.22 66.51 45.49 12 DCC_CHECK 207787 43.49 79.26 35.76 13 LOC_TINY_FONT_1 182084 32.19 36.17 31.33 14 T_TM2_M_HEADER_IN_MSG 156756 25.81 20.42 26.97 15 HTML_FONT_LOW_CONTRAST 139442 25.31 31.39 24.00 16 ALL_TRUSTED 137615 19.79 1.80 23.68 17 DKIM_VALID_EF 131806 23.06 24.81 22.68 18 XM_Multi_Part_URI 118553 19.93 17.74 20.40 19 FVGT_m_MULTI_ODD 111432 20.51 26.67 19.18 20 MIME_HTML_ONLY 109868 22.32 38.14 18.91 21 XMSubLong 105247 19.35 25.07 18.11 22 BAYES_00 105153 15.32 2.48 18.09 23 T_KAM_HTML_FONT_INVALID 91260 16.81 21.92 15.70 24 TR_XM_DK_Bayes 73525 10.75 1.92 12.65 25 TR_XM_DK_Bayes1 69078 10.00 1.28 11.89 26 XM_Body_Dirty_Words 63512 12.54 20.00 10.93 27 TR_XM_DK_Bayes2 61557 8.92 1.15 10.59 28 UNICODE_OBFU_ASC 60811 8.88 1.54 10.46 29 UPPERCASE_75_100 60148 8.58 0.40 10.35 30 XM_B_Unsub 55195 10.20 13.44 9.50 31 RCVD_IN_MSPIKE_H2 52989 8.82 7.43 9.12 32 RCVD_IN_MSPIKE_WL 50250 7.77 3.69 8.65 33 RCVD_IN_MSPIKE_H3 50250 7.77 3.69 8.65 34 XM_Evil_Numbers_Gen 45903 8.64 12.05 7.90 35 TooManyTo_001 45797 7.67 6.69 7.88 36 RCVD_IN_RP_SAFE 45085 6.76 2.16 7.76 37 LotsOfNums_01 41971 7.60 9.32 7.22 38 XM_DK_Undo_02 41716 13.43 42.34 7.18 39 XM_B_Phish_Phrases 41664 7.78 10.61 7.17 40 LOTS_OF_MONEY 41549 8.29 13.58 7.15 41 RCVD_IN_RP_CERTIFIED 40816 6.07 1.65 7.02 42 HTML_IMAGE_RATIO_02 36758 7.65 13.77 6.33 43 FSL_BULK_SIG 35107 7.94 16.75 6.04 44 XM_DKIMWhitelistDomains 34885 4.94 0.02 6.00 45 XM_SendGrid 34077 5.76 5.27 5.86 46 XM_H_Long_From01 33335 5.83 6.24 5.74 47 BAYES_40 31079 4.95 3.12 5.35 48 RELAYCOUNTRY_META 30937 7.76 19.04 5.32 49 MIME_QP_LONG_LINE 29434 5.21 5.86 5.07 50 BAYES_60 28817 5.22 6.40 4.96 51 HTML_IMAGE_RATIO_04 28455 5.14 6.24 4.90 52 DKIM_INVALID 27784 6.57 14.83 4.78 53 RCVD_IN_IADB_LISTED 26769 4.17 2.15 4.61 54 T_TooManySym_01 25744 4.09 2.52 4.43 55 MPART_ALT_DIFF 25348 4.72 6.40 4.36 56 XM_B_SpammyTLD 24970 4.23 3.90 4.30 57 BAYES_20 24773 3.98 2.67 4.26 58 HTML_IMAGE_RATIO_06 24057 4.12 4.04 4.14 59 BOTNET_IPINHOSTNAME 23630 5.99 14.89 4.07 60 RCVD_IN_IADB_SPF 23109 3.62 1.99 3.98 61 T_REMOTE_IMAGE 22782 4.90 9.43 3.92 62 XM_PDF 22663 3.35 0.80 3.90 63 BAYES_99 21502 7.85 27.07 3.70 64 XMStrtUSub 21171 3.55 3.13 3.64 65 RCVD_IN_IADB_SENDERID 20071 3.19 1.94 3.45 66 RCVD_IN_IADB_DK 19958 3.17 1.94 3.43 67 IN_ZIMBRA_NJ_WHITELIST 18978 2.69 0.01 3.27 68 TR_XM_DK_SendGrid 18883 3.10 2.42 3.25 69 XMNumbers 18322 3.89 7.30 3.15 70 NO_DNS_FOR_FROM 18258 4.57 11.17 3.14 71 RCVD_IN_IADB_VOUCHED 17547 2.59 0.62 3.02 72 TR_Symld_Words 17399 2.78 1.76 2.99 73 XMSexyCombo_05 17391 4.26 10.14 2.99 74 BAYES_999 17335 6.12 20.63 2.98 75 FROM_EXCESS_BASE64 17046 3.49 6.06 2.93 76 BAYES_05 16311 2.60 1.62 2.81 77 MIME_HTML_ONLY_MULTI 16235 2.84 3.05 2.79 78 XM_UncommonTLD01 16233 5.29 16.86 2.79 79 XMSubMetaSx_00 15980 3.46 6.73 2.75 80 BOTNET 15429 6.65 25.14 2.66 81 TM2_M_URI_OPT_OUT 14819 2.81 4.01 2.55 82 MAILING_LIST_MULTI 14667 2.47 2.20 2.52 83 HTML_MIME_NO_HTML_TAG 14593 2.60 2.98 2.51 84 ANY_BOUNCE_MESSAGE 14291 2.29 1.49 2.46 85 BOUNCE_MESSAGE 14279 2.28 1.49 2.46 86 BAYES_80 14098 3.42 8.01 2.43 87 HTML_IMAGE_RATIO_08 13892 2.50 3.00 2.39 88 MIME_HTML_MOSTLY 13413 2.67 4.36 2.31 89 XM_H_Trusted_IP 13186 1.87 0.00 2.27 90 T_TooManySym_02 13155 2.03 0.95 2.26 91 XMNoVowels 12210 2.28 3.13 2.10 92 TooManyTo_002 11411 1.71 0.52 1.96 93 XM_CamelCaseFrm001 11317 2.34 4.14 1.95 94 RCVD_IN_IADB_OPTIN 11139 1.65 0.44 1.92 95 UNPARSEABLE_RELAY 11061 1.71 0.84 1.90 96 XM_B_Unsub2 10803 2.02 2.78 1.86 97 TR_DCC_Bayes_99 10630 5.26 21.15 1.83 98 XMDiploma_00 10456 1.90 2.38 1.80 99 KHOP_HELO_FCRDNS 10145 2.38 5.31 1.75 100 T_XMDrugObfuBody_14 9747 1.80 2.37 1.68 101 RELAYCOUNTRY_CA 9388 2.05 4.09 1.62 102 XM_DK_Undo_01 9355 1.65 1.83 1.61 103 XM_SPF_SoftFail 9114 1.96 3.78 1.57 104 HELO_NODOT 8785 1.34 0.54 1.51 105 HELO_NO_DOMAIN 8782 1.34 0.54 1.51 106 TVD_RCVD_IP 8631 1.31 0.52 1.49 107 BAYES_95 8499 2.00 4.47 1.46 108 UNTRUSTED_Relay 8228 3.49 13.11 1.42 109 XM_OfRef6 8205 1.67 2.89 1.41 110 SUBJ_ALL_CAPS 8172 1.54 2.13 1.41 111 T_XMDrugObfuBody_08 7966 1.75 3.50 1.37 112 IN_HORDE_ADDRESS_BOOK 7909 1.12 0.03 1.36 113 INVALID_MSGID 7814 1.16 0.29 1.34 114 TooManyTo_003 7803 1.18 0.42 1.34 115 URI_HEX 7329 1.47 2.46 1.26 116 XMCapTrack 7201 1.26 1.34 1.24 117 XM_GoogleGroups 7105 1.10 0.52 1.22 118 TO_MALFORMED 7087 1.01 0.05 1.22 119 RCVD_IN_MSPIKE_BL 6680 2.19 7.02 1.15 120 CK_HELO_DYNAMIC_SPLIT_IP 6493 0.97 0.28 1.12 121 HELO_DYNAMIC_IPADDR2 6486 0.93 0.06 1.12 122 TM2_M_VERY_LONG_WORD 6444 1.27 2.02 1.11 123 XMGenDplmaNmb 6314 1.18 1.59 1.09 124 T_FILL_THIS_FORM_SHORT 6006 1.03 1.00 1.03 125 XMSubNoVowel 6002 0.90 0.30 1.03 126 URI_TRY_3LD 5997 1.12 1.52 1.03 127 TooManyTo_004 5955 0.91 0.36 1.02 128 XM_H_Long_From02 5825 0.98 0.87 1.00 129 HTML_IMAGE_ONLY_20 5792 0.88 0.36 1.00 130 RCVD_IN_BL_SPAMCOP_NET 5753 1.79 5.49 0.99 131 XMGappySubj_01 5740 0.85 0.23 0.99 132 RELAYCOUNTRY_GB 5714 1.13 1.79 0.98 133 DKIM_ADSP_CUSTOM_MED 5708 0.99 1.05 0.98 134 TR_XM_PHPDW 5614 1.16 2.08 0.97 135 TR_XM_PHPForged 5518 1.14 2.05 0.95 136 TR_XM_FormFill2 5515 1.14 2.03 0.95 137 XM_H_PHPOS 5475 1.14 2.03 0.94 138 XMBdyGiftCard01 5380 1.00 1.34 0.93 139 XMHTML_After_End 5224 1.12 2.14 0.90 140 USER_IN_DEF_DKIM_WL 5076 0.72 0.00 0.87 141 TooManyTo_005 4999 0.76 0.31 0.86 142 RCVD_IN_MSPIKE_L3 4945 1.57 4.88 0.85 143 XM_UB50 4863 1.84 6.48 0.84 144 TR_MetaPhish_Combo_01 4733 0.83 0.90 0.81 145 XMStockSpam_06 4673 0.97 1.75 0.80 146 HTML_FONT_FACE_BAD 4599 0.76 0.62 0.79 147 FROM_GOV_DKIM_AU 4532 0.69 0.26 0.78 148 NML_ADSP_CUSTOM_MED 4154 0.73 0.79 0.71 149 TR_MSPIKEBAYES00 4145 0.59 0.00 0.71 150 SpammyFromTLD_01 4031 0.96 2.21 0.69 151 XMBody_95 3897 0.57 0.10 0.67 152 XM_ProductURIs 3847 0.84 1.66 0.66 153 TO_NO_BRKTS_HTML_ONLY 3588 0.55 0.24 0.62 154 XMSubMetaI_00 3516 0.73 1.30 0.61 155 FILL_THIS_FORM 3506 0.54 0.25 0.60 156 HTTPS_HTTP_MISMATCH 3430 0.61 0.73 0.59 157 T_XMHurry_00 3382 0.85 2.09 0.58 158 T_TooManySym_03 3353 0.52 0.26 0.58 159 XM_SPF_Unknown 3244 0.56 0.59 0.56 160 XMBrknScrpt_02 3215 0.60 0.80 0.55 161 MISSING_HEADERS 3046 0.49 0.36 0.52 162 XM_ShortIntro_01 3036 0.55 0.66 0.52 163 T_Symld_Words_02 2988 1.18 4.26 0.51 164 HTML_TAG_BALANCE_BODY 2980 0.54 0.65 0.51 165 DIET_1 2945 0.72 1.73 0.51 166 XMBody_17 2945 0.76 1.94 0.51 167 T_XMDrugObfuBody_00 2928 0.80 2.20 0.50 168 XMMoneyMeta_00 2913 0.68 1.53 0.50 169 XM_DIRTYINTL 2911 0.96 3.11 0.50 170 RELAYCOUNTRY_AU 2890 0.56 0.83 0.50 171 XMPhish14 2823 0.55 0.86 0.49 172 T_OBFU_PDF_ATTACH 2822 0.43 0.18 0.49 173 XMPhish30 2808 0.58 1.00 0.48 174 XMHTMLBadTable_001 2792 0.57 0.96 0.48 175 FILL_THIS_FORM_LONG 2790 0.43 0.19 0.48 176 FORGED_GMAIL_RCVD 2770 0.54 0.86 0.48 177 XMPhish08 2743 0.57 1.01 0.47 178 XM_H_PHPMailer 2718 0.57 1.06 0.47 179 FROM_GOV_SPOOF 2655 0.41 0.21 0.46 180 XM_B_REG_HTML 2540 0.46 0.56 0.44 181 T_FILL_THIS_FORM_LOAN 2493 0.36 0.06 0.43 182 HTML_IMAGE_ONLY_32 2484 0.40 0.30 0.43 183 RELAYCOUNTRY_NL 2473 0.44 0.48 0.43 184 TM2_M_BODY_EMPTY 2374 0.36 0.12 0.41 185 PDS_OTHER_BAD_TLD 2371 0.94 3.38 0.41 186 XMBody_78 2319 0.51 1.04 0.40 187 SHORT_HELO_AND_INLINE_IMAGE 2319 0.33 0.03 0.40 188 USER_IN_WHITELIST 2303 0.33 0.00 0.40 189 PLING_QUERY 2277 0.44 0.64 0.39 190 HTML_IMAGE_ONLY_28 2272 0.45 0.73 0.39 191 XMLngstWrd_00 2207 0.49 1.01 0.38 192 RELAYCOUNTRY_DE 2204 0.50 1.08 0.38 193 XMSexyCombo_01 2190 0.67 2.04 0.38 194 XMDateMe_00 2188 0.37 0.33 0.38 195 T_MONEY_PERCENT 2142 0.48 1.00 0.37 196 TR_LOTS_OF_MONEY2 2142 0.48 1.00 0.37 197 XMLKML 2140 0.30 0.00 0.37 198 MPART_ALT_DIFF_COUNT 2066 0.48 1.03 0.36 199 RCVD_IN_SORBS_DUL 1997 0.32 0.23 0.34 200 SpammyFromTLD_02 1989 2.01 9.75 0.34 ----------------------------------------------------------------------