Email: 682875 Autolearn: 0 AvgScore: 0.14 AvgScanTime: 2.05 sec Spam: 122645 Autolearn: 0 AvgScore: 12.31 AvgScanTime: 3.75 sec Ham: 560230 Autolearn: 0 AvgScore: -2.52 AvgScanTime: 1.67 sec Time Spent Running SA: 388.31 hours Time Spent Processing Spam: 127.76 hours Time Spent Processing Ham: 260.54 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 115459 90.85 94.14 90.13 2 DCC_CHECK 96057 44.43 78.32 37.01 3 DKIM_SIGNED 95689 70.30 78.02 68.61 4 XM_DK_Pass 92886 68.90 75.74 67.40 5 XM_B_Unicode 92605 73.85 75.51 73.48 6 RELAYCOUNTRY_US 89775 81.86 73.20 83.75 7 XMListUnsubscribeExists 82517 50.13 67.28 46.37 8 DKIM_VALID 77838 63.38 63.47 63.36 9 DKIM_VALID_AU 58593 46.77 47.77 46.55 10 BAYES_50 53348 48.83 43.50 50.00 11 XM_DK_Undo_02 52727 13.21 42.99 6.68 12 XM_B_Unicode3 51074 43.01 41.64 43.31 13 LOC_TINY_FONT_1 42471 23.47 34.63 21.03 14 HTML_FONT_LOW_CONTRAST 41336 26.32 33.70 24.71 15 MIME_HTML_ONLY 40153 24.00 32.74 22.08 16 BAYES_99 33189 7.35 27.06 3.04 17 DKIM_VALID_EF 32100 23.61 26.17 23.05 18 FVGT_m_MULTI_ODD 31867 20.96 25.98 19.86 19 T_KAM_HTML_FONT_INVALID 31657 17.57 25.81 15.76 20 XMSubLong 29584 21.28 24.12 20.65 21 RELAYCOUNTRY_META 29421 8.53 23.99 5.15 22 BOTNET 28228 6.36 23.02 2.71 23 TR_DCC_Bayes_99 25729 4.97 20.98 1.46 24 BAYES_999 25137 5.55 20.50 2.28 25 DCC_CHECK_NEGATIVE 24461 53.55 19.94 60.90 26 XM_UncommonTLD01 22996 5.93 18.75 3.12 27 XM_Body_Dirty_Words 22921 11.88 18.69 10.39 28 T_TM2_M_HEADER_IN_MSG 21596 24.62 17.61 26.15 29 UNTRUSTED_Relay 20890 4.32 17.03 1.54 30 BOTNET_IPINHOSTNAME 20525 6.58 16.74 4.36 31 XM_Multi_Part_URI 20326 11.29 16.57 10.13 32 DKIM_INVALID 17851 6.92 14.56 5.25 33 XM_B_Unsub 17480 10.07 14.25 9.16 34 FSL_BULK_SIG 15710 8.17 12.81 7.15 35 LOTS_OF_MONEY 15020 8.23 12.25 7.35 36 XMSexyCombo_05 13651 4.74 11.13 3.34 37 NO_DNS_FOR_FROM 13615 4.50 11.10 3.05 38 XM_Evil_Numbers_Gen 13440 9.56 10.96 9.25 39 HTML_IMAGE_RATIO_02 13387 6.76 10.92 5.85 40 XM_B_Phish_Phrases 13194 7.90 10.76 7.28 41 RCVD_IN_MSPIKE_H2 12923 11.79 10.54 12.06 42 XM_UB50 12361 2.56 10.08 0.91 43 TooManyTo_001 12203 8.62 9.95 8.33 44 LotsOfNums_01 11425 8.28 9.32 8.05 45 BAYES_80 10243 3.90 8.35 2.92 46 XM_H_Long_From01 8916 5.22 7.27 4.77 47 BAYES_60 8677 5.53 7.07 5.19 48 XM_CamelCaseFrm001 8593 2.59 7.01 1.63 49 HTML_IMAGE_RATIO_04 7995 13.00 6.52 14.42 50 SpammyFromTLD_02 7854 1.38 6.40 0.27 51 XMNumbers 7804 3.55 6.36 2.93 52 MPART_ALT_DIFF 7804 7.83 6.36 8.15 53 XMSubMetaSx_00 7789 3.97 6.35 3.45 54 RELAYCOUNTRY_DE 7174 1.46 5.85 0.49 55 RCVD_IN_MSPIKE_BL 7068 2.57 5.76 1.87 56 FROM_SUSPICIOUS_NTLD 7012 1.08 5.72 0.06 57 FROM_SUSPICIOUS_NTLD_FP 6970 1.07 5.68 0.06 58 XM_B_SpammyTLD 6857 2.20 5.59 1.46 59 RCVD_IN_MSPIKE_L3 6731 2.49 5.49 1.83 60 MIME_QP_LONG_LINE 6711 5.45 5.47 5.44 61 RCVD_IN_RP_RNBL 6669 1.02 5.44 0.05 62 XM_B_Unsub2 6625 2.37 5.40 1.71 63 UNPARSEABLE_RELAY 6397 7.23 5.22 7.68 64 KHOP_HELO_FCRDNS 6176 2.38 5.04 1.80 65 RCVD_IN_BL_SPAMCOP_NET 6014 1.80 4.90 1.13 66 XM_SPF_SoftFail 5947 2.15 4.85 1.55 67 PDS_OTHER_BAD_TLD 5936 0.99 4.84 0.15 68 BAYES_95 5831 2.25 4.75 1.70 69 T_REMOTE_IMAGE 5829 3.90 4.75 3.71 70 ALL_TRUSTED 5495 11.34 4.48 12.84 71 RELAYCOUNTRY_CA 5432 2.09 4.43 1.58 72 XM_SendGrid 5415 5.48 4.42 5.71 73 XM_DIRTYINTL 5017 1.09 4.09 0.43 74 TM2_M_URI_OPT_OUT 4960 2.72 4.04 2.44 75 HTML_MIME_NO_HTML_TAG 4783 2.55 3.90 2.26 76 MIME_HTML_MOSTLY 4572 2.53 3.73 2.27 77 XMStrtUSub 4545 7.49 3.71 8.32 78 SpammyFromTLD_01 4499 1.32 3.67 0.81 79 T_XMDrugObfuBody_08 4434 1.91 3.62 1.54 80 XM_URI_RBL 4325 0.81 3.53 0.22 81 XM_OfRef6 4285 1.61 3.49 1.20 82 HTML_IMAGE_RATIO_06 4235 4.33 3.45 4.53 83 NORDNS_LOW_CONTRAST 4194 0.62 3.42 0.01 84 RCVD_IN_MSPIKE_WL 3824 7.61 3.12 8.59 85 RCVD_IN_MSPIKE_H3 3824 7.61 3.12 8.59 86 LONG_IMG_URI 3796 0.60 3.10 0.05 87 BAYES_40 3694 5.29 3.01 5.79 88 URIBL_SBL_A 3690 0.64 3.01 0.13 89 RELAYCOUNTRY_FR 3668 0.75 2.99 0.26 90 AC_SPAMMY_URI_PATTERNS8 3665 0.54 2.99 0.00 91 FROM_EXCESS_BASE64 3638 2.87 2.97 2.85 92 DKIM_ADSP_NXDOMAIN 3487 0.83 2.84 0.39 93 MIME_HTML_ONLY_MULTI 3436 5.71 2.80 6.35 94 T_XMDrugObfuBody_14 3367 1.60 2.75 1.35 95 TooManyTo_002 3336 2.45 2.72 2.39 96 BAYES_20 3247 5.16 2.65 5.72 97 XM_UB60 3245 0.53 2.65 0.07 98 LongTLD 3223 0.65 2.63 0.22 99 T_XMHurry_00 3175 0.91 2.59 0.54 100 XMNoVowels 3147 1.82 2.57 1.66 101 TR_XM_INV_DKIM 3006 0.49 2.45 0.07 102 TR_LOTS_OF_MONEY3 3004 0.91 2.45 0.58 103 DATE_IN_PAST_03_06 2965 0.50 2.42 0.08 104 TR_XM_MaxBayes 2951 0.45 2.41 0.02 105 HTML_IMAGE_RATIO_08 2913 2.05 2.38 1.98 106 T_TooManySym_01 2911 3.47 2.37 3.71 107 XMBody_17 2889 0.87 2.36 0.55 108 URI_NOVOWEL 2822 0.67 2.30 0.31 109 TooManyTo_003 2723 1.81 2.22 1.72 110 TR_XM_PHPDW 2658 0.75 2.17 0.44 111 URI_HEX 2657 1.51 2.17 1.36 112 RCVD_IN_RP_SAFE 2645 6.85 2.16 7.88 113 TR_XM_PHPForged 2631 0.74 2.15 0.43 114 BAYES_00 2615 17.82 2.13 21.25 115 TR_XM_FormFill2 2598 0.73 2.12 0.43 116 XM_H_PHPOS 2585 0.73 2.11 0.42 117 HDRS_MISSP 2564 0.40 2.09 0.03 118 RCVD_IN_IADB_LISTED 2470 4.34 2.01 4.85 119 HTML_SHORT_LINK_IMG_1 2412 0.36 1.97 0.01 120 BOTNET_NORDNS 2407 0.37 1.96 0.02 121 RCVD_IN_PSBL 2405 0.39 1.96 0.05 122 XM_BadFromFormat 2403 0.45 1.96 0.12 123 ANY_BOUNCE_MESSAGE 2384 2.74 1.94 2.91 124 BOUNCE_MESSAGE 2375 2.73 1.94 2.91 125 XMDiploma_00 2363 1.48 1.93 1.38 126 RCVD_IN_IADB_SPF 2349 3.76 1.92 4.17 127 RCVD_IN_IADB_DK 2305 3.28 1.88 3.58 128 RCVD_IN_IADB_SENDERID 2302 3.30 1.88 3.61 129 SHORT_IMG_SUSP_NTLD 2207 0.32 1.80 0.00 130 TM2_M_VERY_LONG_WORD 2142 1.25 1.75 1.14 131 XMSexyCombo_01 2138 0.88 1.74 0.70 132 TooManyTo_004 2120 1.41 1.73 1.34 133 HK_RANDOM_FROM 2110 0.46 1.72 0.18 134 RELAYCOUNTRY_GB 2092 1.15 1.71 1.03 135 XMHTML_After_End 2072 0.77 1.69 0.57 136 TR_Mismatch_TLD_02 2047 0.35 1.67 0.07 137 TR_XM_DK_SendGrid 2014 2.75 1.64 2.99 138 HTML_IMAGE_ONLY_04 1995 0.34 1.63 0.06 139 TR_Mismatch_TLD_01 1986 0.49 1.62 0.25 140 TR_XM_RelayPhish 1968 0.47 1.60 0.23 141 SUBJ_YOUR_FAMILY 1966 0.34 1.60 0.06 142 TR_XM_DK_Bayes 1956 9.87 1.59 11.68 143 TR_Symld_Words 1953 1.31 1.59 1.24 144 DKIM_ADSP_CUSTOM_MED 1923 1.23 1.57 1.16 145 XMStockSpam_06 1913 1.06 1.56 0.95 146 XMBounce_01 1898 0.31 1.55 0.04 147 MAILING_LIST_MULTI 1882 2.38 1.53 2.56 148 HDRS_LCASE_IMGONLY 1875 0.28 1.53 0.00 149 URI_WP_HACKED_2 1844 0.30 1.50 0.03 150 BAYES_05 1800 3.87 1.47 4.39 151 TR_LOTS_OF_MONEY2 1743 0.50 1.42 0.30 152 T_MONEY_PERCENT 1743 0.50 1.42 0.30 153 FORGED_GMAIL_RCVD 1739 0.68 1.42 0.51 154 SUBJ_ALL_CAPS 1697 1.35 1.38 1.34 155 XMGenDplmaNmb 1693 1.03 1.38 0.95 156 XM_SPF_Unknown 1691 0.73 1.38 0.59 157 NML_ADSP_CUSTOM_MED 1676 0.95 1.37 0.86 158 XM_UB80 1610 0.26 1.31 0.02 159 XM_DK_Undo_01 1590 1.70 1.30 1.79 160 XMGppyBdWords 1560 0.33 1.27 0.12 161 XMPhish30 1550 0.68 1.26 0.56 162 RDNS_DYNAMIC 1541 0.47 1.26 0.30 163 XM_H_TOP 1536 0.23 1.25 0.00 164 RCVD_IN_RP_CERTIFIED 1519 5.96 1.24 6.99 165 TR_XM_MaxSPIKE 1469 0.27 1.20 0.06 166 RELAYCOUNTRY_IN 1439 0.27 1.17 0.07 167 TooManyTo_005 1436 1.15 1.17 1.15 168 TR_XM_DK_Bayes1 1400 9.15 1.14 10.90 169 REMOVE_BEFORE_LINK 1360 0.45 1.11 0.30 170 XM_H_Long_From02 1332 0.93 1.09 0.89 171 XMMoneyMeta_00 1311 0.62 1.07 0.53 172 XMDateMe_00 1310 0.45 1.07 0.32 173 XM_ProductURIs 1303 1.01 1.06 0.99 174 DATE_IN_PAST_06_12 1294 0.31 1.06 0.14 175 URI_TRY_3LD 1273 1.36 1.04 1.44 176 XM_UB99 1254 0.19 1.02 0.01 177 TR_XM_DK_Bayes2 1240 8.03 1.01 9.56 178 XM_H_PHPMailer 1230 0.55 1.00 0.45 179 XMSubMetaSSx_00 1225 0.45 1.00 0.33 180 XM_H_MailChimp 1210 0.34 0.99 0.20 181 T_FILL_THIS_FORM_SHORT 1201 0.86 0.98 0.84 182 XMPhish08 1174 0.49 0.96 0.39 183 TR_MetaPhish_Combo_01 1171 0.83 0.95 0.81 184 SUBJECT_NEEDS_ENCODING 1105 0.16 0.90 0.00 185 SUBJ_ILLEGAL_CHARS 1103 0.16 0.90 0.00 186 T_XMDrugObfuBody_00 1089 0.69 0.89 0.64 187 MPART_ALT_DIFF_COUNT 1076 0.44 0.88 0.35 188 XM_B_COPY_HTML 1060 0.37 0.86 0.26 189 TM2_M_A_HREF_HREF 1059 0.37 0.86 0.26 190 XM_PDF 1041 3.65 0.85 4.26 191 HK_RANDOM_REPLYTO 1033 0.41 0.84 0.31 192 URIBL_BLACK 1019 0.16 0.83 0.01 193 XM_H_PHPOS_M 1015 0.26 0.83 0.13 194 XM_OfRef7 1011 0.26 0.82 0.13 195 XMSexyCombo_04 1008 0.54 0.82 0.48 196 XM_HighProb1 991 0.15 0.81 0.00 197 FVGT_m_MULTI_ODD_EMAIL 981 0.16 0.80 0.02 198 XMSubMetaI_00 974 0.45 0.79 0.38 199 SUSPICIOUS_RECIPS 974 0.15 0.79 0.00 200 XMSlimDrugH 954 0.36 0.78 0.27 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 504912 90.85 94.14 90.13 2 RELAYCOUNTRY_US 469193 81.86 73.20 83.75 3 XM_B_Unicode 411680 73.85 75.51 73.48 4 DKIM_SIGNED 384400 70.30 78.02 68.61 5 XM_DK_Pass 377605 68.90 75.74 67.40 6 DKIM_VALID 354989 63.38 63.47 63.36 7 DCC_CHECK_NEGATIVE 341195 53.55 19.94 60.90 8 BAYES_50 280091 48.83 43.50 50.00 9 DKIM_VALID_AU 260806 46.77 47.77 46.55 10 XMListUnsubscribeExists 259780 50.13 67.28 46.37 11 XM_B_Unicode3 242659 43.01 41.64 43.31 12 DCC_CHECK 207341 44.43 78.32 37.01 13 T_TM2_M_HEADER_IN_MSG 146499 24.62 17.61 26.15 14 HTML_FONT_LOW_CONTRAST 138413 26.32 33.70 24.71 15 DKIM_VALID_EF 129113 23.61 26.17 23.05 16 MIME_HTML_ONLY 123712 24.00 32.74 22.08 17 BAYES_00 119061 17.82 2.13 21.25 18 LOC_TINY_FONT_1 117816 23.47 34.63 21.03 19 XMSubLong 115704 21.28 24.12 20.65 20 FVGT_m_MULTI_ODD 111234 20.96 25.98 19.86 21 T_KAM_HTML_FONT_INVALID 88304 17.57 25.81 15.76 22 HTML_IMAGE_RATIO_04 80776 13.00 6.52 14.42 23 ALL_TRUSTED 71944 11.34 4.48 12.84 24 RCVD_IN_MSPIKE_H2 67560 11.79 10.54 12.06 25 HTML_FONT_FACE_BAD 65960 9.76 0.56 11.77 26 TR_XM_DK_Bayes 65452 9.87 1.59 11.68 27 XM_H_Trusted_IP 65170 9.54 0.00 11.63 28 TR_XM_DK_Bayes1 61054 9.15 1.14 10.90 29 XM_Body_Dirty_Words 58232 11.88 18.69 10.39 30 XM_Multi_Part_URI 56746 11.29 16.57 10.13 31 TR_XM_DK_Bayes2 53585 8.03 1.01 9.56 32 XM_Evil_Numbers_Gen 51844 9.56 10.96 9.25 33 XM_B_Unsub 51294 10.07 14.25 9.16 34 RCVD_IN_MSPIKE_WL 48115 7.61 3.12 8.59 35 RCVD_IN_MSPIKE_H3 48115 7.61 3.12 8.59 36 TooManyTo_001 46651 8.62 9.95 8.33 37 XMStrtUSub 46586 7.49 3.71 8.32 38 MPART_ALT_DIFF 45670 7.83 6.36 8.15 39 LotsOfNums_01 45104 8.28 9.32 8.05 40 RCVD_IN_RP_SAFE 44151 6.85 2.16 7.88 41 UNPARSEABLE_RELAY 42998 7.23 5.22 7.68 42 LOTS_OF_MONEY 41164 8.23 12.25 7.35 43 XM_B_Phish_Phrases 40774 7.90 10.76 7.28 44 FSL_BULK_SIG 40060 8.17 12.81 7.15 45 RCVD_IN_RP_CERTIFIED 39176 5.96 1.24 6.99 46 XM_DK_Undo_02 37449 13.21 42.99 6.68 47 MIME_HTML_ONLY_MULTI 35584 5.71 2.80 6.35 48 XM_DKIMWhitelistDomains 33588 4.93 0.04 6.00 49 HTML_IMAGE_RATIO_02 32790 6.76 10.92 5.85 50 BAYES_40 32442 5.29 3.01 5.79 51 BAYES_20 32023 5.16 2.65 5.72 52 XM_SendGrid 31995 5.48 4.42 5.71 53 MIME_QP_LONG_LINE 30483 5.45 5.47 5.44 54 DKIM_INVALID 29411 6.92 14.56 5.25 55 BAYES_60 29083 5.53 7.07 5.19 56 RELAYCOUNTRY_META 28851 8.53 23.99 5.15 57 RCVD_IN_IADB_LISTED 27146 4.34 2.01 4.85 58 XM_H_Long_From01 26734 5.22 7.27 4.77 59 HTML_IMAGE_RATIO_06 25363 4.33 3.45 4.53 60 BAYES_05 24612 3.87 1.47 4.39 61 BOTNET_IPINHOSTNAME 24435 6.58 16.74 4.36 62 XMSubNoVowel 24221 3.67 0.67 4.32 63 XM_PDF 23853 3.65 0.85 4.26 64 RCVD_IN_IADB_SPF 23348 3.76 1.92 4.17 65 T_TooManySym_01 20790 3.47 2.37 3.71 66 T_REMOTE_IMAGE 20780 3.90 4.75 3.71 67 RCVD_IN_IADB_SENDERID 20230 3.30 1.88 3.61 68 RCVD_IN_IADB_DK 20065 3.28 1.88 3.58 69 XMSubMetaSx_00 19350 3.97 6.35 3.45 70 XMSexyCombo_05 18726 4.74 11.13 3.34 71 RCVD_IN_IADB_VOUCHED 17747 2.71 0.60 3.17 72 IN_ZIMBRA_NJ_WHITELIST 17598 2.58 0.01 3.14 73 XM_UncommonTLD01 17472 5.93 18.75 3.12 74 NO_DNS_FOR_FROM 17113 4.50 11.10 3.05 75 BAYES_99 17009 7.35 27.06 3.04 76 TR_XM_DK_SendGrid 16742 2.75 1.64 2.99 77 XMNumbers 16407 3.55 6.36 2.93 78 BAYES_80 16357 3.90 8.35 2.92 79 ANY_BOUNCE_MESSAGE 16322 2.74 1.94 2.91 80 BOUNCE_MESSAGE 16278 2.73 1.94 2.91 81 FROM_EXCESS_BASE64 15955 2.87 2.97 2.85 82 BOTNET 15174 6.36 23.02 2.71 83 MAILING_LIST_MULTI 14367 2.38 1.53 2.56 84 TM2_M_URI_OPT_OUT 13645 2.72 4.04 2.44 85 TooManyTo_002 13412 2.45 2.72 2.39 86 BAYES_999 12768 5.55 20.50 2.28 87 MIME_HTML_MOSTLY 12730 2.53 3.73 2.27 88 HTML_MIME_NO_HTML_TAG 12654 2.55 3.90 2.26 89 RCVD_IN_IADB_OPTIN 11168 1.70 0.38 1.99 90 HTML_IMAGE_RATIO_08 11075 2.05 2.38 1.98 91 T_TooManySym_02 10639 1.67 0.62 1.90 92 RCVD_IN_MSPIKE_BL 10471 2.57 5.76 1.87 93 RCVD_IN_MSPIKE_L3 10241 2.49 5.49 1.83 94 KHOP_HELO_FCRDNS 10082 2.38 5.04 1.80 95 XM_DK_Undo_01 10040 1.70 1.30 1.79 96 XMSubLongNoVowel 9651 1.43 0.10 1.72 97 TooManyTo_003 9642 1.81 2.22 1.72 98 XMSubGarbage 9636 1.42 0.04 1.72 99 TVD_RCVD_IP 9590 1.49 0.50 1.71 100 XM_B_Unsub2 9553 2.37 5.40 1.71 101 BAYES_95 9546 2.25 4.75 1.70 102 XMNoVowels 9285 1.82 2.57 1.66 103 XM_CamelCaseFrm001 9110 2.59 7.01 1.63 104 HELO_NODOT 9038 1.44 0.64 1.61 105 HELO_NO_DOMAIN 9037 1.44 0.64 1.61 106 RELAYCOUNTRY_CA 8873 2.09 4.43 1.58 107 XM_SPF_SoftFail 8711 2.15 4.85 1.55 108 T_XMDrugObfuBody_08 8638 1.91 3.62 1.54 109 UNTRUSTED_Relay 8602 4.32 17.03 1.54 110 IN_HORDE_ADDRESS_BOOK 8438 1.24 0.03 1.51 111 XM_GoogleGroups 8225 1.29 0.50 1.47 112 XM_B_SpammyTLD 8189 2.20 5.59 1.46 113 TR_DCC_Bayes_99 8186 4.97 20.98 1.46 114 URI_TRY_3LD 8040 1.36 1.04 1.44 115 INVALID_MSGID 7900 1.19 0.19 1.41 116 CK_HELO_DYNAMIC_SPLIT_IP 7799 1.17 0.18 1.39 117 HELO_DYNAMIC_IPADDR2 7789 1.15 0.04 1.39 118 XMDiploma_00 7731 1.48 1.93 1.38 119 URI_HEX 7633 1.51 2.17 1.36 120 T_XMDrugObfuBody_14 7569 1.60 2.75 1.35 121 TooManyTo_004 7531 1.41 1.73 1.34 122 SUBJ_ALL_CAPS 7499 1.35 1.38 1.34 123 XMCapTrack 7383 1.16 0.45 1.32 124 TR_Symld_Words 6965 1.31 1.59 1.24 125 TO_MALFORMED 6927 1.02 0.04 1.24 126 XM_OfRef6 6734 1.61 3.49 1.20 127 DKIM_ADSP_CUSTOM_MED 6504 1.23 1.57 1.16 128 TooManyTo_005 6416 1.15 1.17 1.15 129 TM2_M_VERY_LONG_WORD 6379 1.25 1.75 1.14 130 RCVD_IN_BL_SPAMCOP_NET 6310 1.80 4.90 1.13 131 RELAYCOUNTRY_GB 5784 1.15 1.71 1.03 132 XM_ProductURIs 5565 1.01 1.06 0.99 133 XMGappySubj_01 5450 0.83 0.20 0.97 134 XM_E_Blogspot 5433 0.82 0.12 0.97 135 XMGenDplmaNmb 5340 1.03 1.38 0.95 136 XMStockSpam_06 5317 1.06 1.56 0.95 137 HTTPS_HTTP_MISMATCH 5148 0.89 0.78 0.92 138 XM_UB50 5104 2.56 10.08 0.91 139 XM_H_Long_From02 5010 0.93 1.09 0.89 140 NML_ADSP_CUSTOM_MED 4825 0.95 1.37 0.86 141 T_FILL_THIS_FORM_SHORT 4696 0.86 0.98 0.84 142 USER_IN_DEF_DKIM_WL 4598 0.67 0.00 0.82 143 TR_MetaPhish_Combo_01 4525 0.83 0.95 0.81 144 SpammyFromTLD_01 4521 1.32 3.67 0.81 145 FROM_GOV_DKIM_AU 4173 0.65 0.24 0.74 146 XMBdyGiftCard01 3929 0.69 0.62 0.70 147 XMSexyCombo_01 3898 0.88 1.74 0.70 148 T_XMDrugObfuBody_00 3602 0.69 0.89 0.64 149 XM_SPF_Unknown 3316 0.73 1.38 0.59 150 TR_MSPIKEBAYES00 3316 0.49 0.01 0.59 151 TR_LOTS_OF_MONEY3 3232 0.91 2.45 0.58 152 XMHTML_After_End 3201 0.77 1.69 0.57 153 MISSING_HEADERS 3187 0.55 0.48 0.57 154 T_TooManySym_03 3161 0.51 0.27 0.56 155 XMPhish30 3114 0.68 1.26 0.56 156 XMBody_17 3077 0.87 2.36 0.55 157 RCVD_IN_SORBS_DUL 3056 0.47 0.13 0.55 158 T_XMHurry_00 3009 0.91 2.59 0.54 159 T_OBFU_PDF_ATTACH 2963 0.47 0.17 0.53 160 XMMoneyMeta_00 2951 0.62 1.07 0.53 161 FORGED_GMAIL_RCVD 2885 0.68 1.42 0.51 162 RELAYCOUNTRY_DE 2773 1.46 5.85 0.49 163 XM_ShortIntro_01 2754 0.45 0.24 0.49 164 XM_B_REG_HTML 2683 0.45 0.31 0.48 165 XMSexyCombo_04 2672 0.54 0.82 0.48 166 XM_H_PHPMailer 2522 0.55 1.00 0.45 167 XM_Body_Obfu01 2487 0.47 0.60 0.44 168 MY_SERVERS_FOUND 2482 0.40 0.21 0.44 169 TR_XM_PHPDW 2473 0.75 2.17 0.44 170 T_Symld_Words_02 2457 0.49 0.70 0.44 171 XMBrknScrpt_02 2430 0.48 0.71 0.43 172 HTML_IMAGE_ONLY_20 2417 0.45 0.55 0.43 173 TR_XM_PHPForged 2410 0.74 2.15 0.43 174 TR_XM_FormFill2 2407 0.73 2.12 0.43 175 RELAYCOUNTRY_AU 2398 0.46 0.60 0.43 176 XM_DIRTYINTL 2394 1.09 4.09 0.43 177 XMHTMLBadTable_001 2393 0.48 0.70 0.43 178 XM_H_PHPOS 2378 0.73 2.11 0.42 179 HTML_TAG_BALANCE_BODY 2205 0.43 0.58 0.39 180 XMPhish08 2200 0.49 0.96 0.39 181 LOW_PRICE 2192 0.43 0.62 0.39 182 SHORT_HELO_AND_INLINE_IMAGE 2190 0.33 0.03 0.39 183 PLING_QUERY 2183 0.41 0.48 0.39 184 DKIM_ADSP_NXDOMAIN 2169 0.83 2.84 0.39 185 XMSubMetaI_00 2103 0.45 0.79 0.38 186 FROM_GOV_SPOOF 2074 0.34 0.21 0.37 187 HTML_IMAGE_ONLY_28 2039 0.40 0.59 0.36 188 XMSolicitRefs_0 2000 0.37 0.45 0.36 189 USER_IN_WHITELIST 1999 0.29 0.00 0.36 190 TM2_M_BODY_EMPTY 1949 0.32 0.19 0.35 191 MPART_ALT_DIFF_COUNT 1942 0.44 0.88 0.35 192 AC_DIV_BONANZA 1923 0.30 0.10 0.34 193 DIET_1 1914 0.41 0.74 0.34 194 XMSubMetaSxObfu_03 1882 0.40 0.68 0.34 195 MSGID_FROM_MTA_HEADER 1874 0.32 0.25 0.33 196 HTML_IMAGE_ONLY_32 1847 0.32 0.28 0.33 197 XMSubMetaSSx_00 1829 0.45 1.00 0.33 198 XMDateMe_00 1791 0.45 1.07 0.32 199 XMPhish14 1788 0.35 0.51 0.32 200 HK_RANDOM_REPLYTO 1750 0.41 0.84 0.31 ----------------------------------------------------------------------