Email: 396314 Autolearn: 0 AvgScore: 2.90 AvgScanTime: 3.09 sec Spam: 108007 Autolearn: 0 AvgScore: 12.83 AvgScanTime: 3.68 sec Ham: 288307 Autolearn: 0 AvgScore: -0.82 AvgScanTime: 2.87 sec Time Spent Running SA: 340.02 hours Time Spent Processing Spam: 110.27 hours Time Spent Processing Ham: 229.74 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 99351 83.58 91.99 80.43 2 DCC_CHECK 78958 53.03 73.10 45.51 3 DKIM_SIGNED 78385 73.93 72.57 74.44 4 XM_DK_Pass 75929 72.55 70.30 73.40 5 DKIM_VALID 72337 69.77 66.97 70.82 6 XMListUnsubscribeExists 70543 57.20 65.31 54.16 7 DKIM_VALID_AU 61967 54.17 57.37 52.97 8 XM_H_QuotedFrom 52632 43.93 48.73 42.13 9 BAYES_50 46445 51.68 43.00 54.93 10 MIME_HTML_ONLY 43432 28.22 40.21 23.73 11 LOC_TINY_FONT_1 36574 27.23 33.86 24.74 12 HTML_FONT_LOW_CONTRAST 36061 31.86 33.39 31.28 13 XM_DK_Undo_02 34233 15.72 31.70 9.74 14 BAYES_99 27534 12.74 25.49 7.97 15 DCC_CHECK_NEGATIVE 27439 45.88 25.40 53.55 16 XMSubLong 25324 21.49 23.45 20.75 17 FVGT_m_MULTI_ODD 23827 20.81 22.06 20.34 18 BAYES_999 22731 10.74 21.05 6.88 19 TR_DCC_Bayes_99 22495 9.10 20.83 4.71 20 FROM_EXCESS_BASE64 21390 8.49 19.80 4.25 21 HTML_IMAGE_RATIO_02 20749 13.26 19.21 11.03 22 XM_UncommonTLD01 20117 7.70 18.63 3.60 23 RELAYCOUNTRY_META 18638 7.81 17.26 4.27 24 XM_Body_Dirty_Words 18552 13.00 17.18 11.44 25 T_TM2_M_HEADER_IN_MSG 18522 20.76 17.15 22.12 26 BOTNET 16848 5.72 15.60 2.03 27 XM_Evil_Numbers_Gen 16632 10.05 15.40 8.04 28 T_REMOTE_IMAGE 16566 6.66 15.34 3.40 29 MultiRelay 16473 14.58 15.25 14.33 30 T_KAM_HTML_FONT_INVALID 16265 15.25 15.06 15.33 31 XM_Multi_Part_URI 16078 13.74 14.89 13.31 32 HTML_MIME_NO_HTML_TAG 15752 5.93 14.58 2.69 33 DKIM_VALID_EF 15379 25.69 14.24 29.99 34 SpammyFromTLD_02 15212 3.94 14.08 0.14 35 HTML_SHORT_LINK_IMG_1 14140 3.60 13.09 0.04 36 BODY_URI_ONLY 13981 3.55 12.94 0.03 37 MISSING_HEADERS 13749 3.59 12.73 0.16 38 MIME_HEADER_CTYPE_ONLY 13307 3.47 12.32 0.16 39 BOTNET_IPINHOSTNAME 13291 8.23 12.31 6.71 40 SHORTENER_SHORT_IMG 12676 3.20 11.74 0.00 41 URI_BUFFLY 12676 3.20 11.74 0.00 42 HTML_IMAGE_ONLY_04 12294 3.12 11.38 0.03 43 BAYES_60 12289 7.96 11.38 6.67 44 FSL_BULK_SIG 11816 8.21 10.94 7.19 45 HTML_SHORT_CENTER 11144 2.81 10.32 0.00 46 BAYES_80 10153 4.76 9.40 3.02 47 UNTRUSTED_Relay 10150 3.47 9.40 1.24 48 XMSexyCombo_05 10135 5.75 9.38 4.39 49 HTML_IMAGE_RATIO_04 10101 7.01 9.35 6.13 50 LOTS_OF_MONEY 9026 9.68 8.36 10.18 51 XMNumbers 8742 5.01 8.09 3.85 52 MPART_ALT_DIFF 8707 4.60 8.06 3.31 53 XMSubMetaSx_00 8672 5.36 8.03 4.37 54 T_XMDrugObfuBody_14 7679 6.51 7.11 6.29 55 TR_XM_DocInvoice 7600 4.40 7.04 3.42 56 TooManyTo_001 7194 5.86 6.66 5.56 57 XM_H_Long_From01 7061 6.01 6.54 5.81 58 DKIM_INVALID 6048 4.16 5.60 3.62 59 RCVD_IN_RP_RNBL 5955 1.53 5.51 0.03 60 LotsOfNums_01 5902 7.45 5.46 8.20 61 XM_UB50 5379 1.85 4.98 0.67 62 MIME_HTML_MOSTLY 5271 3.60 4.88 3.12 63 XM_B_Phish_Phrases 5236 5.93 4.85 6.34 64 RCVD_IN_RP_SAFE 4689 10.37 4.34 12.62 65 DIET_1 4649 1.48 4.30 0.43 66 BAYES_95 4494 2.44 4.16 1.79 67 HTML_IMAGE_RATIO_06 4436 3.71 4.11 3.57 68 MIME_HTML_ONLY_MULTI 4355 2.31 4.03 1.66 69 HTML_IMAGE_RATIO_08 4041 2.35 3.74 1.83 70 XMStrtUSub 4027 4.10 3.73 4.24 71 XMBdyGiftCard01 3917 2.27 3.63 1.76 72 T_TooManySym_01 3771 5.87 3.49 6.76 73 XMSubMetaI_00 3693 1.91 3.42 1.35 74 XM_DIRTYINTL 3660 2.31 3.39 1.91 75 MultiRelay_CC 3638 0.99 3.37 0.10 76 MultiRelay_Combo 3638 0.99 3.37 0.10 77 BOTNET_NORDNS 3483 0.88 3.22 0.01 78 RELAYCOUNTRY_CA 3399 2.03 3.15 1.61 79 URI_HEX 3299 2.27 3.05 1.98 80 SUBJ_ALL_CAPS 3095 2.85 2.87 2.85 81 TM2_M_URI_OPT_OUT 3075 1.90 2.85 1.55 82 ALL_TRUSTED 3031 15.83 2.81 20.71 83 RCVD_IN_RP_CERTIFIED 2984 8.86 2.76 11.14 84 RCVD_IN_MSPIKE_H2 2956 4.04 2.74 4.52 85 XM_SendGrid 2921 5.04 2.70 5.92 86 XMSlimDrugH 2898 0.98 2.68 0.35 87 XM_CamelCaseFrm001 2836 2.01 2.63 1.78 88 XMSexyCombo_01 2745 1.08 2.54 0.53 89 XM_H_Undi_Recip 2660 0.78 2.46 0.14 90 XM_H_Long_From02 2598 1.37 2.41 0.99 91 RCVD_IN_BL_SPAMCOP_NET 2448 0.93 2.27 0.43 92 XM_SPF_SoftFail 2428 1.36 2.25 1.03 93 XM_RXBody 2395 1.56 2.22 1.31 94 UNPARSEABLE_RELAY 2192 3.66 2.03 4.27 95 BAYES_40 2132 3.29 1.97 3.78 96 XMWghtMeta_00 2123 0.55 1.97 0.01 97 BAYES_00 2116 12.84 1.96 16.91 98 TR_Mismatch_TLD_02 1900 0.52 1.76 0.05 99 URI_TRY_3LD 1870 1.63 1.73 1.59 100 XM_OfRef6 1858 1.43 1.72 1.32 101 MIME_QP_LONG_LINE 1834 3.92 1.70 4.75 102 URIBL_BLACK 1791 0.54 1.66 0.12 103 XMStockSpam_06 1771 1.10 1.64 0.90 104 TR_XM_DK_Bayes 1727 10.73 1.60 14.14 105 XPRIO_SHORT_SUBJ 1726 0.44 1.60 0.00 106 RELAYCOUNTRY_CO 1721 0.44 1.59 0.00 107 ADVANCE_FEE_4_NEW 1714 0.43 1.59 0.00 108 HTML_FONT_FACE_BAD 1692 0.86 1.57 0.59 109 BAYES_20 1676 2.46 1.55 2.81 110 URI_WP_HACKED_2 1672 2.82 1.55 3.30 111 RELAYCOUNTRY_CN 1671 0.45 1.55 0.03 112 RELAYCOUNTRY_GB 1653 0.86 1.53 0.61 113 TR_XM_DK_Bayes1 1641 10.42 1.52 13.75 114 XMDiploma_00 1636 1.33 1.51 1.26 115 MAILING_LIST_MULTI 1624 1.55 1.50 1.56 116 T_XMDrugObfuBody_08 1615 1.09 1.50 0.94 117 TM2_M_VERY_LONG_WORD 1614 1.25 1.49 1.16 118 T_XMDrugObfuBody_00 1612 1.17 1.49 1.05 119 XMSexyCombo_04 1603 0.55 1.48 0.20 120 RELAYCOUNTRY_AT 1598 0.63 1.48 0.31 121 XM_URI_RBL 1593 0.72 1.47 0.44 122 RELAYCOUNTRY_DE 1574 0.59 1.46 0.27 123 XMPhish30 1557 0.76 1.44 0.50 124 SUBJ_DOLLARS 1552 0.84 1.44 0.61 125 XM_UB60 1501 0.43 1.39 0.07 126 XMBody_17 1495 0.98 1.38 0.82 127 XM_ProductURIs 1494 1.21 1.38 1.14 128 PLING_QUERY 1492 0.58 1.38 0.28 129 BODY_ENHANCEMENT 1483 0.41 1.37 0.05 130 US_DOLLARS_3 1478 2.78 1.37 3.31 131 SpammyFromTLD_01 1464 0.62 1.36 0.34 132 HTML_IMAGE_ONLY_08 1455 0.42 1.35 0.08 133 T_XMHurry_00 1431 0.84 1.32 0.65 134 URIBL_DBL_SPAM 1386 0.39 1.28 0.06 135 XMGppyBdWords 1369 0.47 1.27 0.17 136 RELAYCOUNTRY_FR 1350 0.52 1.25 0.24 137 XMMoneyMeta_00 1332 0.49 1.23 0.22 138 XMSlimDrugs 1306 0.39 1.21 0.08 139 NO_PRESCRIPTION 1272 0.34 1.18 0.03 140 TM2_M_A_HREF_HREF 1249 1.01 1.16 0.95 141 DKIM_ADSP_CUSTOM_MED 1247 0.81 1.15 0.68 142 HTML_TAG_BALANCE_BODY 1221 0.65 1.13 0.47 143 T_TooManySym_02 1218 2.07 1.13 2.43 144 NML_ADSP_CUSTOM_MED 1210 0.64 1.12 0.46 145 T_TVD_MIME_EPI 1205 0.31 1.12 0.01 146 XMSubMetaI_01 1191 0.35 1.10 0.07 147 BAYES_05 1168 1.83 1.08 2.12 148 TR_XM_DK_Bayes2 1167 7.98 1.08 10.57 149 HK_RANDOM_FROM 1160 0.49 1.07 0.27 150 RCVD_IN_IADB_LISTED 1144 3.87 1.06 4.93 151 HTML_FONT_SIZE_LARGE 1135 0.41 1.05 0.18 152 XMBody_78 1129 0.72 1.05 0.59 153 XM_B_REG_HTML 1128 0.92 1.04 0.88 154 XMSubMetaSxObfu_03 1113 0.55 1.03 0.37 155 FROM_SUSPICIOUS_NTLD 1110 0.33 1.03 0.06 156 DKIM_ADSP_NXDOMAIN 1098 0.75 1.02 0.64 157 TR_Symld_Words 1056 1.90 0.98 2.24 158 GUARANTEED_100_PERCENT 1056 0.28 0.98 0.01 159 RDNS_DYNAMIC 1049 0.65 0.97 0.53 160 BANG_GUAR 1048 0.29 0.97 0.03 161 TR_XM_RelayPhish 1027 0.63 0.95 0.50 162 XMSubMetaSx_01 1015 0.37 0.94 0.16 163 TO_MALFORMED 1005 3.54 0.93 4.52 164 XM_Body_Obfu01 1004 0.37 0.93 0.16 165 XMSubject_09 994 0.26 0.92 0.01 166 XMSubMetaI_02 987 0.25 0.91 0.00 167 XMWarranty1 985 0.25 0.91 0.00 168 XMGenDplmaNmb 981 0.71 0.91 0.63 169 LongTLD 977 0.33 0.90 0.11 170 RCVD_IN_IADB_SPF 971 3.41 0.90 4.35 171 XMHTMLBadTable_001 970 0.72 0.90 0.66 172 FORGED_GMAIL_RCVD 963 0.53 0.89 0.39 173 XM_UB80 955 0.25 0.88 0.02 174 HTML_IMAGE_ONLY_12 949 0.37 0.88 0.18 175 TR_LOTS_OF_MONEY2 935 0.45 0.87 0.29 176 T_MONEY_PERCENT 935 0.45 0.87 0.29 177 RCVD_IN_IADB_DK 928 3.03 0.86 3.84 178 RCVD_IN_IADB_SENDERID 926 3.07 0.86 3.90 179 RELAYCOUNTRY_BE 908 0.26 0.84 0.05 180 XMPhish11 884 0.84 0.82 0.84 181 RCVD_IN_MSPIKE_WL 880 1.62 0.81 1.92 182 XM_B_COPY_HTML 878 0.70 0.81 0.65 183 XM_UB99 874 0.23 0.81 0.01 184 RCVD_IN_MSPIKE_H3 870 1.61 0.81 1.91 185 HTML_FONT_SIZE_HUGE 847 1.17 0.78 1.32 186 XM_ShortIntro_01 838 0.62 0.78 0.56 187 T_HTML_TAG_BALANCE_CENTER 833 0.30 0.77 0.13 188 NUMERIC_HTTP_ADDR 828 0.29 0.77 0.11 189 XM_H_PHPOS 827 0.83 0.77 0.86 190 XM_XX_Yahoo 823 0.30 0.76 0.13 191 MPART_ALT_DIFF_COUNT 819 0.49 0.76 0.39 192 XMSubMetaSSx_00 804 0.37 0.74 0.24 193 NO_DNS_FOR_FROM 792 0.56 0.73 0.50 194 T_Symld_Words_02 767 0.57 0.71 0.52 195 RCVD_IN_IADB_VOUCHED 764 2.31 0.71 2.90 196 XM_salutation 723 0.26 0.67 0.11 197 SHORT_URI 718 0.27 0.66 0.12 198 T_FILL_THIS_FORM_SHORT 708 0.54 0.66 0.50 199 REMOVE_BEFORE_LINK 705 0.55 0.65 0.51 200 TR_LOTS_OF_MONEY3 683 0.34 0.63 0.23 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 231888 83.58 91.99 80.43 2 DKIM_SIGNED 214618 73.93 72.57 74.44 3 XM_DK_Pass 211612 72.55 70.30 73.40 4 DKIM_VALID 204172 69.77 66.97 70.82 5 BAYES_50 158366 51.68 43.00 54.93 6 XMListUnsubscribeExists 156134 57.20 65.31 54.16 7 DCC_CHECK_NEGATIVE 154380 45.88 25.40 53.55 8 DKIM_VALID_AU 152715 54.17 57.37 52.97 9 DCC_CHECK 131210 53.03 73.10 45.51 10 XM_H_QuotedFrom 121463 43.93 48.73 42.13 11 HTML_FONT_LOW_CONTRAST 90195 31.86 33.39 31.28 12 DKIM_VALID_EF 86453 25.69 14.24 29.99 13 LOC_TINY_FONT_1 71323 27.23 33.86 24.74 14 MIME_HTML_ONLY 68418 28.22 40.21 23.73 15 T_TM2_M_HEADER_IN_MSG 63769 20.76 17.15 22.12 16 XMSubLong 59826 21.49 23.45 20.75 17 ALL_TRUSTED 59721 15.83 2.81 20.71 18 FVGT_m_MULTI_ODD 58646 20.81 22.06 20.34 19 BAYES_00 48760 12.84 1.96 16.91 20 T_KAM_HTML_FONT_INVALID 44186 15.25 15.06 15.33 21 XM_DKIMWhitelistDomains 42496 10.73 0.02 14.74 22 MultiRelay 41324 14.58 15.25 14.33 23 TR_XM_DK_Bayes 40779 10.73 1.60 14.14 24 TR_XM_DK_Bayes1 39643 10.42 1.52 13.75 25 XM_Multi_Part_URI 38383 13.74 14.89 13.31 26 RCVD_IN_RP_SAFE 36389 10.37 4.34 12.62 27 XM_Body_Dirty_Words 32976 13.00 17.18 11.44 28 RCVD_IN_RP_CERTIFIED 32111 8.86 2.76 11.14 29 HTML_IMAGE_RATIO_02 31813 13.26 19.21 11.03 30 TR_XM_DK_Bayes2 30471 7.98 1.08 10.57 31 LOTS_OF_MONEY 29350 9.68 8.36 10.18 32 XM_DK_Undo_02 28067 15.72 31.70 9.74 33 LotsOfNums_01 23635 7.45 5.46 8.20 34 XM_Evil_Numbers_Gen 23192 10.05 15.40 8.04 35 BAYES_99 22964 12.74 25.49 7.97 36 FSL_BULK_SIG 20724 8.21 10.94 7.19 37 BAYES_999 19826 10.74 21.05 6.88 38 T_TooManySym_01 19488 5.87 3.49 6.76 39 BOTNET_IPINHOSTNAME 19333 8.23 12.31 6.71 40 BAYES_60 19242 7.96 11.38 6.67 41 XM_B_Phish_Phrases 18279 5.93 4.85 6.34 42 T_XMDrugObfuBody_14 18126 6.51 7.11 6.29 43 HTML_IMAGE_RATIO_04 17665 7.01 9.35 6.13 44 XM_SendGrid 17063 5.04 2.70 5.92 45 XM_H_Long_From01 16742 6.01 6.54 5.81 46 TooManyTo_001 16027 5.86 6.66 5.56 47 RCVD_IN_IADB_LISTED 14203 3.87 1.06 4.93 48 MIME_QP_LONG_LINE 13706 3.92 1.70 4.75 49 TR_DCC_Bayes_99 13583 9.10 20.83 4.71 50 TO_MALFORMED 13042 3.54 0.93 4.52 51 RCVD_IN_MSPIKE_H2 13039 4.04 2.74 4.52 52 XMSexyCombo_05 12654 5.75 9.38 4.39 53 XMSubMetaSx_00 12590 5.36 8.03 4.37 54 RCVD_IN_IADB_SPF 12552 3.41 0.90 4.35 55 UNPARSEABLE_RELAY 12315 3.66 2.03 4.27 56 RELAYCOUNTRY_META 12311 7.81 17.26 4.27 57 FROM_EXCESS_BASE64 12241 8.49 19.80 4.25 58 XMStrtUSub 12228 4.10 3.73 4.24 59 RCVD_IN_IADB_SENDERID 11233 3.07 0.86 3.90 60 XMNumbers 11114 5.01 8.09 3.85 61 RCVD_IN_IADB_DK 11074 3.03 0.86 3.84 62 BAYES_40 10906 3.29 1.97 3.78 63 TVD_RCVD_IP 10887 2.84 0.33 3.78 64 DKIM_INVALID 10446 4.16 5.60 3.62 65 XM_UncommonTLD01 10387 7.70 18.63 3.60 66 HTML_IMAGE_RATIO_06 10286 3.71 4.11 3.57 67 TR_XM_DocInvoice 9856 4.40 7.04 3.42 68 T_REMOTE_IMAGE 9809 6.66 15.34 3.40 69 US_DOLLARS_3 9550 2.78 1.37 3.31 70 MPART_ALT_DIFF 9531 4.60 8.06 3.31 71 URI_WP_HACKED_2 9509 2.82 1.55 3.30 72 MIME_HTML_MOSTLY 9002 3.60 4.88 3.12 73 IN_ZIMBRA_NJ_WHITELIST 8963 2.27 0.02 3.11 74 BAYES_80 8708 4.76 9.40 3.02 75 RCVD_IN_IADB_VOUCHED 8372 2.31 0.71 2.90 76 SUBJ_ALL_CAPS 8218 2.85 2.87 2.85 77 BAYES_20 8092 2.46 1.55 2.81 78 HTML_MIME_NO_HTML_TAG 7762 5.93 14.58 2.69 79 ANY_BOUNCE_MESSAGE 7337 1.93 0.28 2.54 80 BOUNCE_MESSAGE 7337 1.93 0.28 2.54 81 T_TooManySym_02 7001 2.07 1.13 2.43 82 INVALID_MSGID 6968 1.79 0.10 2.42 83 TR_Symld_Words 6466 1.90 0.98 2.24 84 BAYES_05 6101 1.83 1.08 2.12 85 BOTNET 5839 5.72 15.60 2.03 86 URI_HEX 5701 2.27 3.05 1.98 87 RCVD_IN_MSPIKE_WL 5534 1.62 0.81 1.92 88 RCVD_IN_MSPIKE_H3 5510 1.61 0.81 1.91 89 XM_DIRTYINTL 5507 2.31 3.39 1.91 90 XMSubEmpty 5488 1.54 0.58 1.90 91 XM_PDF 5417 1.43 0.22 1.88 92 RCVD_IN_IADB_OPTIN 5399 1.52 0.58 1.87 93 HTML_IMAGE_RATIO_08 5263 2.35 3.74 1.83 94 XMNoSubject 5238 1.46 0.51 1.82 95 MISSING_SUBJECT 5238 1.46 0.51 1.82 96 BAYES_95 5168 2.44 4.16 1.79 97 XM_CamelCaseFrm001 5120 2.01 2.63 1.78 98 XMBdyGiftCard01 5068 2.27 3.63 1.76 99 TR_MetaPhish_Combo_01 5057 1.39 0.40 1.75 100 USER_IN_DEF_DKIM_WL 4898 1.26 0.07 1.70 101 TooManyTo_002 4886 1.40 0.61 1.69 102 MIME_HTML_ONLY_MULTI 4796 2.31 4.03 1.66 103 IN_HORDE_ADDRESS_BOOK 4639 1.18 0.02 1.61 104 RELAYCOUNTRY_CA 4633 2.03 3.15 1.61 105 URI_TRY_3LD 4591 1.63 1.73 1.59 106 MAILING_LIST_MULTI 4512 1.55 1.50 1.56 107 TM2_M_URI_OPT_OUT 4474 1.90 2.85 1.55 108 XMSubMetaI_00 3880 1.91 3.42 1.35 109 XM_OfRef6 3813 1.43 1.72 1.32 110 HTML_FONT_SIZE_HUGE 3804 1.17 0.78 1.32 111 XM_RXBody 3770 1.56 2.22 1.31 112 XMDiploma_00 3644 1.33 1.51 1.26 113 XM_DK_Undo_01 3634 1.06 0.52 1.26 114 UNTRUSTED_Relay 3585 3.47 9.40 1.24 115 HTTP_ESCAPED_HOST 3336 0.92 0.27 1.16 116 TM2_M_VERY_LONG_WORD 3335 1.25 1.49 1.16 117 XM_ProductURIs 3294 1.21 1.38 1.14 118 XM_GoogleGroups 3175 0.93 0.49 1.10 119 T_XMDrugObfuBody_00 3036 1.17 1.49 1.05 120 XM_SPF_SoftFail 2961 1.36 2.25 1.03 121 XM_H_Long_From02 2850 1.37 2.41 0.99 122 TM2_M_A_HREF_HREF 2751 1.01 1.16 0.95 123 T_XMDrugObfuBody_08 2698 1.09 1.50 0.94 124 XMStockSpam_06 2584 1.10 1.64 0.90 125 XM_B_REG_HTML 2532 0.92 1.04 0.88 126 XM_H_PHPOS 2475 0.83 0.77 0.86 127 XMPhish11 2429 0.84 0.82 0.84 128 T_TooManySym_03 2402 0.63 0.08 0.83 129 USER_IN_WHITELIST 2396 0.60 0.00 0.83 130 XMBody_17 2370 0.98 1.38 0.82 131 TooManyTo_003 2003 0.65 0.52 0.69 132 XMBody_95 1991 0.52 0.08 0.69 133 DKIM_ADSP_CUSTOM_MED 1955 0.81 1.15 0.68 134 XM_UB50 1943 1.85 4.98 0.67 135 XMHTMLBadTable_001 1902 0.72 0.90 0.66 136 XMSubMetaSxObfu_02 1897 0.56 0.29 0.66 137 T_XMHurry_00 1881 0.84 1.32 0.65 138 XM_B_COPY_HTML 1878 0.70 0.81 0.65 139 DKIM_ADSP_NXDOMAIN 1856 0.75 1.02 0.64 140 XMGenDplmaNmb 1824 0.71 0.91 0.63 141 XM_H_PHPMailer 1792 0.60 0.55 0.62 142 RELAYCOUNTRY_GB 1772 0.86 1.53 0.61 143 SUBJ_DOLLARS 1766 0.84 1.44 0.61 144 TM2_M_BODY_EMPTY 1717 0.45 0.06 0.60 145 HTML_FONT_FACE_BAD 1712 0.86 1.57 0.59 146 XMBody_78 1707 0.72 1.05 0.59 147 URI_NOVOWEL 1701 0.59 0.59 0.59 148 XM_D_tchamptons_WL 1675 0.42 0.00 0.58 149 XMBrknScrpt_02 1618 0.52 0.42 0.56 150 XM_ShortIntro_01 1614 0.62 0.78 0.56 151 HELO_NODOT 1608 0.50 0.34 0.56 152 TooManyTo_004 1584 0.50 0.38 0.55 153 XMSexyCombo_01 1532 1.08 2.54 0.53 154 RDNS_DYNAMIC 1526 0.65 0.97 0.53 155 T_Symld_Words_02 1503 0.57 0.71 0.52 156 REMOVE_BEFORE_LINK 1476 0.55 0.65 0.51 157 FILL_THIS_FORM 1460 0.44 0.28 0.51 158 TR_XM_RelayPhish 1455 0.63 0.95 0.50 159 XMPhish30 1452 0.76 1.44 0.50 160 NO_DNS_FOR_FROM 1446 0.56 0.73 0.50 161 T_FILL_THIS_FORM_SHORT 1430 0.54 0.66 0.50 162 MSGID_RANDY 1420 0.51 0.54 0.49 163 TooManyTo_005 1366 0.43 0.33 0.47 164 HTML_TAG_BALANCE_BODY 1351 0.65 1.13 0.47 165 XMHTML_After_End 1341 0.50 0.59 0.47 166 NML_ADSP_CUSTOM_MED 1317 0.64 1.12 0.46 167 T_FILL_THIS_FORM_LONG 1309 0.37 0.14 0.45 168 XMEmptyBody_01 1268 0.33 0.04 0.44 169 XM_URI_RBL 1266 0.72 1.47 0.44 170 RCVD_IN_BL_SPAMCOP_NET 1247 0.93 2.27 0.43 171 XM_H_PHPOS_M 1245 0.40 0.32 0.43 172 DIET_1 1236 1.48 4.30 0.43 173 T_FILL_THIS_FORM_LOAN 1233 0.39 0.28 0.43 174 XMNoVowels 1126 0.39 0.38 0.39 175 FORGED_GMAIL_RCVD 1124 0.53 0.89 0.39 176 MPART_ALT_DIFF_COUNT 1114 0.49 0.76 0.39 177 XMSubGiftCard1 1108 0.28 0.02 0.38 178 XMSubMetaSxObfu_03 1066 0.55 1.03 0.37 179 XMSlimDrugH 999 0.98 2.68 0.35 180 HTTPS_HTTP_MISMATCH 993 0.35 0.37 0.34 181 SpammyFromTLD_01 989 0.62 1.36 0.34 182 RELAYCOUNTRY_AU 966 0.40 0.57 0.34 183 XMCapTrack 959 0.31 0.25 0.33 184 URIBL_DBL_ABUSE_SPAM 959 0.36 0.45 0.33 185 IMPOTENCE 949 0.40 0.59 0.33 186 XM_Akamai 944 0.24 0.01 0.33 187 T_TooManySym_04 937 0.24 0.01 0.33 188 RELAYCOUNTRY_AT 903 0.63 1.48 0.31 189 UPPERCASE_50_75 886 0.24 0.06 0.31 190 URIBL_SBL_A 870 0.30 0.28 0.30 191 XMDateMe_00 852 0.28 0.22 0.30 192 T_MONEY_PERCENT 850 0.45 0.87 0.29 193 TR_LOTS_OF_MONEY2 850 0.45 0.87 0.29 194 TVD_SPACE_RATIO 827 0.26 0.20 0.29 195 XMRcvdHeader_15 814 0.21 0.00 0.28 196 XMLngstWrd_00 806 0.34 0.49 0.28 197 PLING_QUERY 795 0.58 1.38 0.28 198 RELAYCOUNTRY_DE 784 0.59 1.46 0.27 199 T_OBFU_PDF_ATTACH 781 0.21 0.05 0.27 200 HK_RANDOM_FROM 772 0.49 1.07 0.27 ----------------------------------------------------------------------