Email: 725490 Autolearn: 0 AvgScore: 0.07 AvgScanTime: 12.04 sec Spam: 106013 Autolearn: 0 AvgScore: 12.35 AvgScanTime: 14.53 sec Ham: 619477 Autolearn: 0 AvgScore: -2.04 AvgScanTime: 11.61 sec Time Spent Running SA: 2425.90 hours Time Spent Processing Spam: 427.79 hours Time Spent Processing Ham: 1998.11 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 98833 90.52 93.23 90.06 2 DKIM_SIGNED 86174 69.52 81.29 67.51 3 DCC_CHECK 83710 45.25 78.96 39.48 4 XM_DK_Pass 83662 68.18 78.92 66.34 5 RELAYCOUNTRY_US 81488 81.93 76.87 82.80 6 XM_B_Unicode 78987 73.09 74.51 72.85 7 DKIM_VALID 74806 64.73 70.56 63.73 8 XMListUnsubscribeExists 70455 49.54 66.46 46.65 9 DKIM_VALID_AU 58171 47.12 54.87 45.79 10 XM_B_Unicode3 48166 42.93 45.43 42.51 11 XM_DK_Undo_02 40178 9.06 37.90 4.12 12 LOC_TINY_FONT_1 39419 22.99 37.18 20.56 13 HTML_FONT_LOW_CONTRAST 33224 24.37 31.34 23.18 14 MIME_HTML_ONLY 32317 24.26 30.48 23.19 15 XMSubLong 30581 20.47 28.85 19.03 16 BOTNET 30144 5.61 28.43 1.71 17 DKIM_VALID_EF 28909 24.06 27.27 23.51 18 FVGT_m_MULTI_ODD 28384 20.19 26.77 19.07 19 BAYES_50 27615 23.76 26.05 23.37 20 BOTNET_IPINHOSTNAME 25725 6.59 24.27 3.56 21 T_KAM_HTML_FONT_INVALID 23232 17.71 21.91 16.99 22 RELAYCOUNTRY_META 23138 7.66 21.83 5.24 23 T_TM2_M_HEADER_IN_MSG 20301 24.49 19.15 25.40 24 DCC_CHECK_NEGATIVE 20295 52.91 19.14 58.69 25 XM_Multi_Part_URI 19759 11.69 18.64 10.50 26 XM_Body_Dirty_Words 18634 10.96 17.58 9.82 27 BAYES_99 17069 3.46 16.10 1.29 28 XM_B_Phish_Phrases 16047 10.31 15.14 9.48 29 XM_UncommonTLD01 15573 5.11 14.69 3.47 30 UNTRUSTED_Relay 15558 3.30 14.68 1.35 31 XM_Evil_Numbers_Gen 14376 10.10 13.56 9.50 32 XM_B_Unsub 14363 10.82 13.55 10.36 33 FSL_BULK_SIG 14039 8.91 13.24 8.16 34 TR_DCC_Bayes_99 13625 2.44 12.85 0.66 35 BAYES_999 13378 2.70 12.62 1.01 36 LOTS_OF_MONEY 13102 7.87 12.36 7.10 37 HTML_IMAGE_RATIO_02 12083 6.20 11.40 5.31 38 DKIM_INVALID 11368 4.79 10.72 3.78 39 RCVD_IN_MSPIKE_H2 10342 10.46 9.76 10.58 40 XMSexyCombo_05 9577 3.39 9.03 2.42 41 XM_H_Long_From01 9406 6.04 8.87 5.56 42 MPART_ALT_DIFF 8554 9.70 8.07 9.98 43 LotsOfNums_01 8188 7.95 7.72 7.98 44 TooManyTo_001 7956 7.47 7.50 7.46 45 XM_B_SpammyTLD 7169 2.20 6.76 1.41 46 SpammyFromTLD_02 6786 1.21 6.40 0.32 47 HTML_IMAGE_RATIO_04 6778 11.46 6.39 12.32 48 PDS_OTHER_BAD_TLD 6684 1.08 6.30 0.18 49 RCVD_IN_MSPIKE_BL 6340 2.24 5.98 1.59 50 XMSubMetaSx_00 6277 2.91 5.92 2.39 51 NO_DNS_FOR_FROM 6106 2.01 5.76 1.37 52 RCVD_IN_MSPIKE_L3 5942 1.98 5.60 1.36 53 XMNumbers 5865 4.18 5.53 3.95 54 XM_URI_RBL 5769 0.93 5.44 0.16 55 XM_B_Unsub2 5397 2.26 5.09 1.77 56 XM_UB50 5391 1.11 5.09 0.43 57 XM_SPF_SoftFail 5248 1.98 4.95 1.47 58 FROM_SUSPICIOUS_NTLD 5169 0.74 4.88 0.03 59 RCVD_IN_BL_SPAMCOP_NET 5147 1.63 4.86 1.07 60 FROM_SUSPICIOUS_NTLD_FP 5129 0.73 4.84 0.03 61 MIME_HTML_MOSTLY 5099 2.93 4.81 2.61 62 BOTNET_NORDNS 4863 0.68 4.59 0.01 63 XM_SendGrid 4511 5.46 4.26 5.66 64 XMStrtUSub 4418 7.10 4.17 7.61 65 BAYES_80 4292 1.54 4.05 1.12 66 XM_CamelCaseFrm001 4164 2.18 3.93 1.88 67 RELAYCOUNTRY_CA 4159 2.00 3.92 1.67 68 MIME_HTML_ONLY_MULTI 4151 7.26 3.92 7.83 69 TM2_M_URI_OPT_OUT 4147 4.62 3.91 4.74 70 MIME_QP_LONG_LINE 4122 5.42 3.89 5.68 71 HTML_IMAGE_RATIO_06 4086 3.91 3.85 3.92 72 T_TooManySym_01 4030 3.56 3.80 3.52 73 T_REMOTE_IMAGE 3974 3.62 3.75 3.60 74 RELAYCOUNTRY_FR 3929 0.75 3.71 0.24 75 XMBody_17 3885 0.96 3.66 0.49 76 BAYES_60 3872 2.39 3.65 2.18 77 TR_MetaPhish_Combo_01 3863 1.97 3.64 1.68 78 NORDNS_LOW_CONTRAST 3788 0.53 3.57 0.01 79 KHOP_HELO_FCRDNS 3733 1.87 3.52 1.59 80 T_XMDrugObfuBody_08 3689 1.95 3.48 1.69 81 XM_OfRef6 3685 1.34 3.48 0.97 82 TR_Mismatch_TLD_01 3554 0.70 3.35 0.25 83 ALL_TRUSTED 3541 12.33 3.34 13.87 84 RCVD_IN_RP_SAFE 3536 6.42 3.34 6.95 85 FROM_EXCESS_BASE64 3499 2.57 3.30 2.45 86 SpammyFromTLD_01 3439 1.10 3.24 0.73 87 HTML_MIME_NO_HTML_TAG 3392 2.83 3.20 2.77 88 LongTLD 3266 0.59 3.08 0.16 89 RCVD_IN_RP_RNBL 3173 0.51 2.99 0.09 90 XM_DIRTYINTL 3162 0.95 2.98 0.60 91 DATE_IN_PAST_06_12 3126 4.27 2.95 4.50 92 SUBJ_ALL_CAPS 3115 1.64 2.94 1.42 93 XMPhish30 2920 0.92 2.75 0.61 94 XMNoVowels 2865 1.76 2.70 1.60 95 RCVD_IN_RP_CERTIFIED 2790 5.74 2.63 6.27 96 MISSING_HEADERS 2643 0.83 2.49 0.54 97 RELAYCOUNTRY_DE 2630 0.70 2.48 0.39 98 RCVD_IN_MSPIKE_WL 2597 7.67 2.45 8.56 99 RCVD_IN_MSPIKE_H3 2597 7.67 2.45 8.56 100 RCVD_IN_PSBL 2587 0.40 2.44 0.05 101 DKIM_ADSP_NXDOMAIN 2514 0.67 2.37 0.38 102 BAYES_95 2488 0.91 2.35 0.67 103 TR_XM_PHPDW 2456 0.71 2.32 0.43 104 T_XMDrugObfuBody_14 2440 1.90 2.30 1.83 105 TR_XM_PHPForged 2422 0.69 2.28 0.42 106 TR_XM_FormFill2 2401 0.69 2.26 0.42 107 XM_H_PHPOS 2393 0.68 2.26 0.41 108 XMBdyGiftCard01 2338 1.08 2.21 0.88 109 RELAYCOUNTRY_GB 2170 1.19 2.05 1.04 110 URI_HEX 2110 1.35 1.99 1.24 111 XMDiploma_00 2093 1.68 1.97 1.63 112 HTML_IMAGE_RATIO_08 2018 1.94 1.90 1.95 113 XM_OfRef7 2005 0.38 1.89 0.12 114 REPLYTO_WITHOUT_TO_CC 2002 0.33 1.89 0.07 115 BAYES_40 1992 2.44 1.88 2.53 116 TM2_M_VERY_LONG_WORD 1962 1.15 1.85 1.03 117 T_Symld_Words_02 1959 0.66 1.85 0.46 118 URI_TRY_3LD 1941 1.35 1.83 1.27 119 UNPARSEABLE_RELAY 1910 2.53 1.80 2.65 120 TR_XM_DK_SendGrid 1879 2.74 1.77 2.90 121 XMSexyCombo_01 1848 0.52 1.74 0.31 122 BAYES_20 1827 2.36 1.72 2.47 123 XM_Nigeria_01 1784 0.27 1.68 0.03 124 TR_Sbj_FN_Bdy 1757 0.40 1.66 0.18 125 URIBL_SBL_A 1719 0.42 1.62 0.21 126 TR_Mismatch_TLD_02 1712 0.29 1.61 0.06 127 UNICODE_OBFU_ASC 1710 0.36 1.61 0.14 128 XM_H_PHPMailer 1672 0.64 1.58 0.48 129 RELAYCOUNTRY_IN 1627 0.32 1.53 0.12 130 TR_LOTS_OF_MONEY1 1613 0.25 1.52 0.03 131 T_XMDrugObfuBody_00 1594 0.89 1.50 0.79 132 BAYES_00 1591 9.75 1.50 11.16 133 DKIM_ADSP_CUSTOM_MED 1589 1.08 1.50 1.00 134 XMStockSpam_06 1581 0.72 1.49 0.59 135 XMHTML_After_End 1564 0.79 1.48 0.67 136 TR_XM_RelayPhish 1557 0.40 1.47 0.22 137 XMPhish08 1546 0.70 1.46 0.57 138 T_FILL_THIS_FORM_SHORT 1541 0.79 1.45 0.67 139 TR_Symld_Words 1531 1.03 1.44 0.96 140 XMPhish13 1525 0.26 1.44 0.06 141 MONEY_FRAUD_8 1515 0.21 1.43 0.01 142 XM_H_PHPOS_M 1510 0.35 1.42 0.16 143 RELAYCOUNTRY_AT 1466 0.29 1.38 0.10 144 ADVANCE_FEE_5_NEW_FRM_MNY 1464 0.20 1.38 0.00 145 RCVD_IN_IADB_LISTED 1452 4.86 1.37 5.46 146 FORGED_GMAIL_RCVD 1444 0.64 1.36 0.52 147 BODY_URI_ONLY 1427 0.23 1.35 0.04 148 XM_H_TOP 1391 0.19 1.31 0.00 149 XMGenDplmaNmb 1385 1.12 1.31 1.09 150 MAILING_LIST_MULTI 1368 2.40 1.29 2.59 151 NML_ADSP_CUSTOM_MED 1357 0.81 1.28 0.73 152 RCVD_IN_IADB_SPF 1356 4.18 1.28 4.68 153 FROM_GOV_DKIM_AU 1344 0.73 1.27 0.64 154 RCVD_IN_IADB_SENDERID 1332 3.64 1.26 4.05 155 RCVD_IN_IADB_DK 1331 3.60 1.26 4.00 156 XM_H_BADHELO 1301 0.23 1.23 0.06 157 LONG_IMG_URI 1290 0.22 1.22 0.05 158 XMSubGiftCard1 1287 0.28 1.21 0.12 159 XMPhishDuo 1266 0.20 1.19 0.03 160 XM_B_COPY_HTML 1251 0.65 1.18 0.55 161 SCRIPT_GIBBERISH 1229 0.17 1.16 0.00 162 T_XMHurry_00 1217 0.45 1.15 0.33 163 XM_DK_Undo_01 1216 1.80 1.15 1.91 164 TR_XM_INV_DKIM 1209 0.19 1.14 0.03 165 XM_ProductURIs 1202 1.05 1.13 1.03 166 DEAR_FRIEND 1193 0.26 1.13 0.11 167 TR_XM_DK_Bayes 1190 4.69 1.12 5.30 168 TR_LOTS_OF_MONEY3 1190 0.44 1.12 0.33 169 ANY_BOUNCE_MESSAGE 1180 2.64 1.11 2.90 170 BOUNCE_MESSAGE 1179 2.63 1.11 2.90 171 UPPERCASE_75_100 1173 0.29 1.11 0.15 172 PLING_QUERY 1170 0.61 1.10 0.53 173 AC_SPAMMY_URI_PATTERNS8 1153 0.16 1.09 0.00 174 HTML_SHORT_LINK_IMG_1 1135 0.17 1.07 0.01 175 DATE_IN_PAST_03_06 1123 3.40 1.06 3.80 176 TR_XM_MaxBayes 1113 0.16 1.05 0.00 177 XM_H_Long_From02 1095 1.13 1.03 1.14 178 HDRS_MISSP 1085 0.18 1.02 0.03 179 MONEY_FORM 1061 0.15 1.00 0.01 180 MPART_ALT_DIFF_COUNT 1054 0.44 0.99 0.35 181 XMMoneyMeta_00 1048 0.62 0.99 0.56 182 XMBrknScrpt_02 1046 0.58 0.99 0.51 183 XMSubMetaSxObfu_03 1044 0.42 0.98 0.33 184 HTML_IMAGE_ONLY_04 1041 0.19 0.98 0.05 185 URIBL_BLACK 1032 0.15 0.97 0.01 186 DIET_1 1019 0.53 0.96 0.45 187 XM_UB60 1018 0.17 0.96 0.03 188 TR_XM_DK_Bayes1 999 4.46 0.94 5.06 189 HTTPS_HTTP_MISMATCH 992 0.81 0.94 0.78 190 BAYES_05 968 1.67 0.91 1.80 191 URIBL_DBL_SPAM 966 0.15 0.91 0.02 192 RDNS_DYNAMIC 935 0.37 0.88 0.28 193 HK_SCAM 910 0.15 0.86 0.03 194 XM_UB80 881 0.13 0.83 0.01 195 MIME_HEADER_CTYPE_ONLY 877 0.27 0.83 0.17 196 THIS_AD 865 0.25 0.82 0.16 197 DATE_IN_PAST_12_24 862 0.18 0.81 0.07 198 TR_XM_DK_Bayes2 862 3.96 0.81 4.49 199 NO_FM_NAME_IP_HOSTN 855 0.12 0.81 0.00 200 HTML_TAG_BALANCE_CENTER 855 0.21 0.81 0.10 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 557874 90.52 93.23 90.06 2 RELAYCOUNTRY_US 512927 81.93 76.87 82.80 3 XM_B_Unicode 451262 73.09 74.51 72.85 4 DKIM_SIGNED 418183 69.52 81.29 67.51 5 XM_DK_Pass 410957 68.18 78.92 66.34 6 DKIM_VALID 394779 64.73 70.56 63.73 7 DCC_CHECK_NEGATIVE 363587 52.91 19.14 58.69 8 XMListUnsubscribeExists 288958 49.54 66.46 46.65 9 DKIM_VALID_AU 283680 47.12 54.87 45.79 10 XM_B_Unicode3 263322 42.93 45.43 42.51 11 DCC_CHECK 244545 45.25 78.96 39.48 12 T_TM2_M_HEADER_IN_MSG 157362 24.49 19.15 25.40 13 DKIM_VALID_EF 145652 24.06 27.27 23.51 14 BAYES_50 144767 23.76 26.05 23.37 15 MIME_HTML_ONLY 143676 24.26 30.48 23.19 16 HTML_FONT_LOW_CONTRAST 143569 24.37 31.34 23.18 17 LOC_TINY_FONT_1 127370 22.99 37.18 20.56 18 FVGT_m_MULTI_ODD 118125 20.19 26.77 19.07 19 XMSubLong 117894 20.47 28.85 19.03 20 T_KAM_HTML_FONT_INVALID 105220 17.71 21.91 16.99 21 ALL_TRUSTED 85900 12.33 3.34 13.87 22 HTML_IMAGE_RATIO_04 76345 11.46 6.39 12.32 23 XM_H_Trusted_IP 73420 10.12 0.00 11.85 24 BAYES_00 69130 9.75 1.50 11.16 25 RCVD_IN_MSPIKE_H2 65538 10.46 9.76 10.58 26 XM_Multi_Part_URI 65044 11.69 18.64 10.50 27 XM_B_Unsub 64160 10.82 13.55 10.36 28 MPART_ALT_DIFF 61816 9.70 8.07 9.98 29 XM_Body_Dirty_Words 60861 10.96 17.58 9.82 30 XM_Evil_Numbers_Gen 58868 10.10 13.56 9.50 31 XM_B_Phish_Phrases 58748 10.31 15.14 9.48 32 HTML_FONT_FACE_BAD 58448 8.12 0.44 9.44 33 RCVD_IN_MSPIKE_WL 53052 7.67 2.45 8.56 34 RCVD_IN_MSPIKE_H3 53052 7.67 2.45 8.56 35 FSL_BULK_SIG 50579 8.91 13.24 8.16 36 LotsOfNums_01 49459 7.95 7.72 7.98 37 MIME_HTML_ONLY_MULTI 48499 7.26 3.92 7.83 38 XMStrtUSub 47113 7.10 4.17 7.61 39 TooManyTo_001 46234 7.47 7.50 7.46 40 LOTS_OF_MONEY 43996 7.87 12.36 7.10 41 RCVD_IN_RP_SAFE 43052 6.42 3.34 6.95 42 RCVD_IN_RP_CERTIFIED 38837 5.74 2.63 6.27 43 MIME_QP_LONG_LINE 35211 5.42 3.89 5.68 44 XM_SendGrid 35068 5.46 4.26 5.66 45 XM_H_Long_From01 34415 6.04 8.87 5.56 46 RCVD_IN_IADB_LISTED 33800 4.86 1.37 5.46 47 XM_DKIMWhitelistDomains 33757 4.66 0.02 5.45 48 HTML_IMAGE_RATIO_02 32913 6.20 11.40 5.31 49 TR_XM_DK_Bayes 32859 4.69 1.12 5.30 50 RELAYCOUNTRY_META 32443 7.66 21.83 5.24 51 TR_XM_DK_Bayes1 31366 4.46 0.94 5.06 52 TM2_M_URI_OPT_OUT 29370 4.62 3.91 4.74 53 RCVD_IN_IADB_SPF 28963 4.18 1.28 4.68 54 DATE_IN_PAST_06_12 27858 4.27 2.95 4.50 55 TR_XM_DK_Bayes2 27835 3.96 0.81 4.49 56 XM_DK_Undo_02 25516 9.06 37.90 4.12 57 RCVD_IN_IADB_SENDERID 25068 3.64 1.26 4.05 58 RCVD_IN_IADB_DK 24758 3.60 1.26 4.00 59 XMSubNoVowel 24682 3.51 0.73 3.98 60 XMNumbers 24485 4.18 5.53 3.95 61 HTML_IMAGE_RATIO_06 24254 3.91 3.85 3.92 62 DATE_IN_PAST_03_06 23526 3.40 1.06 3.80 63 DKIM_INVALID 23404 4.79 10.72 3.78 64 T_REMOTE_IMAGE 22323 3.62 3.75 3.60 65 XM_PDF 22254 3.19 0.80 3.59 66 BOTNET_IPINHOSTNAME 22084 6.59 24.27 3.56 67 RCVD_IN_IADB_VOUCHED 21991 3.09 0.40 3.55 68 T_TooManySym_01 21793 3.56 3.80 3.52 69 XM_UncommonTLD01 21494 5.11 14.69 3.47 70 IN_ZIMBRA_NJ_WHITELIST 18165 2.51 0.01 2.93 71 TR_XM_DK_SendGrid 17995 2.74 1.77 2.90 72 ANY_BOUNCE_MESSAGE 17941 2.64 1.11 2.90 73 BOUNCE_MESSAGE 17934 2.63 1.11 2.90 74 HTML_MIME_NO_HTML_TAG 17154 2.83 3.20 2.77 75 UNPARSEABLE_RELAY 16428 2.53 1.80 2.65 76 MIME_HTML_MOSTLY 16183 2.93 4.81 2.61 77 MAILING_LIST_MULTI 16014 2.40 1.29 2.59 78 BAYES_40 15681 2.44 1.88 2.53 79 BAYES_20 15281 2.36 1.72 2.47 80 FROM_EXCESS_BASE64 15158 2.57 3.30 2.45 81 XMSexyCombo_05 14983 3.39 9.03 2.42 82 XMSubMetaSx_00 14836 2.91 5.92 2.39 83 RCVD_IN_IADB_OPTIN 13942 1.97 0.36 2.25 84 BAYES_60 13482 2.39 3.65 2.18 85 TooManyTo_002 12389 1.80 0.65 2.00 86 HTML_IMAGE_RATIO_08 12085 1.94 1.90 1.95 87 XM_DK_Undo_01 11849 1.80 1.15 1.91 88 XM_CamelCaseFrm001 11658 2.18 3.93 1.88 89 T_XMDrugObfuBody_14 11312 1.90 2.30 1.83 90 BAYES_05 11162 1.67 0.91 1.80 91 XM_B_Unsub2 10995 2.26 5.09 1.77 92 BOTNET 10574 5.61 28.43 1.71 93 INVALID_MSGID 10521 1.49 0.28 1.70 94 T_XMDrugObfuBody_08 10447 1.95 3.48 1.69 95 TR_MetaPhish_Combo_01 10431 1.97 3.64 1.68 96 RELAYCOUNTRY_CA 10354 2.00 3.92 1.67 97 T_TooManySym_02 10222 1.50 0.62 1.65 98 XMDiploma_00 10108 1.68 1.97 1.63 99 XMNoVowels 9883 1.76 2.70 1.60 100 RCVD_IN_MSPIKE_BL 9879 2.24 5.98 1.59 101 KHOP_HELO_FCRDNS 9847 1.87 3.52 1.59 102 TO_MALFORMED 9229 1.31 0.27 1.49 103 XM_SPF_SoftFail 9132 1.98 4.95 1.47 104 TVD_RCVD_IP 9077 1.33 0.52 1.47 105 TooManyTo_003 9011 1.32 0.53 1.45 106 SUBJ_ALL_CAPS 8789 1.64 2.94 1.42 107 XM_B_SpammyTLD 8758 2.20 6.76 1.41 108 XM_E_Blogspot 8663 1.21 0.14 1.40 109 IN_HORDE_ADDRESS_BOOK 8656 1.20 0.02 1.40 110 HELO_NODOT 8514 1.27 0.68 1.37 111 HELO_NO_DOMAIN 8513 1.27 0.68 1.37 112 NO_DNS_FOR_FROM 8468 2.01 5.76 1.37 113 RCVD_IN_MSPIKE_L3 8436 1.98 5.60 1.36 114 UNTRUSTED_Relay 8390 3.30 14.68 1.35 115 XM_GoogleGroups 8045 1.19 0.54 1.30 116 BAYES_99 8011 3.46 16.10 1.29 117 URI_TRY_3LD 7851 1.35 1.83 1.27 118 URI_HEX 7677 1.35 1.99 1.24 119 CK_HELO_DYNAMIC_SPLIT_IP 7144 1.02 0.26 1.15 120 HELO_DYNAMIC_IPADDR2 7139 0.99 0.06 1.15 121 XM_H_Long_From02 7093 1.13 1.03 1.14 122 XMSubLongNoVowel 7043 0.99 0.15 1.14 123 TooManyTo_004 7033 1.03 0.45 1.14 124 XMSubGarbage 7011 0.97 0.03 1.13 125 BAYES_80 6916 1.54 4.05 1.12 126 XMGenDplmaNmb 6770 1.12 1.31 1.09 127 RCVD_IN_BL_SPAMCOP_NET 6646 1.63 4.86 1.07 128 XMCapTrack 6646 0.99 0.48 1.07 129 RELAYCOUNTRY_GB 6450 1.19 2.05 1.04 130 XM_ProductURIs 6411 1.05 1.13 1.03 131 TM2_M_VERY_LONG_WORD 6400 1.15 1.85 1.03 132 BAYES_999 6233 2.70 12.62 1.01 133 DKIM_ADSP_CUSTOM_MED 6220 1.08 1.50 1.00 134 TooManyTo_005 6049 0.89 0.36 0.98 135 XM_OfRef6 6036 1.34 3.48 0.97 136 TR_Symld_Words 5948 1.03 1.44 0.96 137 XMBdyGiftCard01 5466 1.08 2.21 0.88 138 T_OBFU_PDF_ATTACH 5296 0.76 0.20 0.85 139 USER_IN_DEF_DKIM_WL 5266 0.73 0.00 0.85 140 XMGappySubj_01 5251 0.78 0.36 0.85 141 T_XMDrugObfuBody_00 4869 0.89 1.50 0.79 142 HTTPS_HTTP_MISMATCH 4852 0.81 0.94 0.78 143 SpammyFromTLD_01 4550 1.10 3.24 0.73 144 NML_ADSP_CUSTOM_MED 4507 0.81 1.28 0.73 145 T_FILL_THIS_FORM_SHORT 4160 0.79 1.45 0.67 146 XMHTML_After_End 4143 0.79 1.48 0.67 147 BAYES_95 4143 0.91 2.35 0.67 148 TR_DCC_Bayes_99 4081 2.44 12.85 0.66 149 FROM_GOV_DKIM_AU 3946 0.73 1.27 0.64 150 XMPhish30 3785 0.92 2.75 0.61 151 XM_DIRTYINTL 3718 0.95 2.98 0.60 152 XMStockSpam_06 3661 0.72 1.49 0.59 153 HTML_IMAGE_ONLY_20 3592 0.57 0.48 0.58 154 XMPhish08 3543 0.70 1.46 0.57 155 XMMoneyMeta_00 3440 0.62 0.99 0.56 156 XM_B_COPY_HTML 3435 0.65 1.18 0.55 157 MISSING_HEADERS 3360 0.83 2.49 0.54 158 XM_SPF_Unknown 3344 0.54 0.57 0.54 159 PLING_QUERY 3278 0.61 1.10 0.53 160 FORGED_GMAIL_RCVD 3197 0.64 1.36 0.52 161 T_TooManySym_03 3178 0.46 0.16 0.51 162 XMBrknScrpt_02 3168 0.58 0.99 0.51 163 XMBody_17 3064 0.96 3.66 0.49 164 XM_H_PHPMailer 2961 0.64 1.58 0.48 165 T_Symld_Words_02 2830 0.66 1.85 0.46 166 DIET_1 2802 0.53 0.96 0.45 167 RELAYCOUNTRY_AU 2761 0.47 0.59 0.45 168 RCVD_IN_SORBS_DUL 2694 0.41 0.26 0.43 169 TR_XM_PHPDW 2672 0.71 2.32 0.43 170 XM_UB50 2666 1.11 5.09 0.43 171 XM_B_REG_HTML 2622 0.44 0.51 0.42 172 XM_ShortIntro_01 2621 0.42 0.38 0.42 173 TR_XM_PHPForged 2610 0.69 2.28 0.42 174 TR_XM_FormFill2 2601 0.69 2.26 0.42 175 XM_H_PHPOS 2564 0.68 2.26 0.41 176 XMLngstWrd_00 2535 0.43 0.56 0.41 177 RELAYCOUNTRY_DE 2424 0.70 2.48 0.39 178 DKIM_ADSP_NXDOMAIN 2330 0.67 2.37 0.38 179 XMHTMLBadTable_001 2327 0.40 0.55 0.38 180 XMLngstWrd_01 2284 0.39 0.53 0.37 181 HTML_IMAGE_ONLY_28 2270 0.36 0.32 0.37 182 XMSubMetaI_00 2247 0.40 0.65 0.36 183 FROM_GOV_SPOOF 2217 0.36 0.40 0.36 184 TM2_M_A_HREF_HREF 2202 0.42 0.80 0.36 185 REMOVE_BEFORE_LINK 2196 0.39 0.61 0.35 186 XMSolicitRefs_0 2177 0.35 0.36 0.35 187 HTML_TAG_BALANCE_BODY 2158 0.37 0.51 0.35 188 MPART_ALT_DIFF_COUNT 2153 0.44 0.99 0.35 189 MY_SERVERS_FOUND 2139 0.31 0.13 0.35 190 URI_NOVOWEL 2091 0.36 0.49 0.34 191 HTML_IMAGE_ONLY_32 2056 0.32 0.23 0.33 192 T_XMHurry_00 2043 0.45 1.15 0.33 193 XMSubMetaSxObfu_03 2019 0.42 0.98 0.33 194 TR_LOTS_OF_MONEY3 2014 0.44 1.12 0.33 195 SpammyFromTLD_02 1988 1.21 6.40 0.32 196 HTML_IMAGE_ONLY_24 1971 0.33 0.42 0.32 197 SHORT_HELO_AND_INLINE_IMAGE 1959 0.27 0.02 0.32 198 XMSexyCombo_01 1925 0.52 1.74 0.31 199 XMBody_78 1914 0.38 0.79 0.31 200 USER_IN_WHITELIST 1908 0.26 0.00 0.31 ----------------------------------------------------------------------