Email: 421302 Autolearn: 0 AvgScore: 3.22 AvgScanTime: 2.14 sec Spam: 120656 Autolearn: 0 AvgScore: 12.42 AvgScanTime: 2.63 sec Ham: 300646 Autolearn: 0 AvgScore: -0.47 AvgScanTime: 1.95 sec Time Spent Running SA: 250.65 hours Time Spent Processing Spam: 88.02 hours Time Spent Processing Ham: 162.63 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 112025 87.77 92.85 85.74 2 DKIM_SIGNED 98190 81.32 81.38 81.29 3 XMListUnsubscribeExists 95106 64.33 78.82 58.51 4 DCC_CHECK 93508 56.26 77.50 47.73 5 XM_DK_Pass 90424 78.62 74.94 80.09 6 DKIM_VALID 87574 76.00 72.58 77.37 7 DKIM_VALID_AU 68821 60.23 57.04 61.50 8 XM_DK_Undo_02 58587 26.89 48.56 18.20 9 BAYES_99 53337 24.30 44.21 16.31 10 BAYES_999 44975 21.19 37.28 14.73 11 TR_DCC_Bayes_99 41978 15.69 34.79 8.03 12 LOC_TINY_FONT_1 41430 30.61 34.34 29.12 13 HTML_FONT_LOW_CONTRAST 40209 31.69 33.33 31.03 14 BAYES_50 37383 43.64 30.98 48.72 15 MIME_HTML_ONLY 36836 23.84 30.53 21.15 16 FVGT_m_MULTI_ODD 31798 23.63 26.35 22.54 17 RELAYCOUNTRY_META 29467 10.82 24.42 5.36 18 BOTNET 29364 8.74 24.34 2.49 19 XMSubLong 28235 22.33 23.40 21.91 20 XM_Body_Dirty_Words 26169 16.59 21.69 14.54 21 DCC_CHECK_NEGATIVE 25300 42.38 20.97 50.97 22 T_KAM_HTML_FONT_INVALID 22595 17.02 18.73 16.34 23 BOTNET_IPINHOSTNAME 22282 9.74 18.47 6.24 24 DKIM_VALID_EF 21557 25.24 17.87 28.19 25 UNTRUSTED_Relay 20637 6.31 17.10 1.97 26 XM_Multi_Part_URI 20497 15.11 16.99 14.36 27 MultiRelay 19050 16.13 15.79 16.27 28 T_TM2_M_HEADER_IN_MSG 18757 22.52 15.55 25.32 29 HTML_IMAGE_RATIO_02 18672 12.49 15.48 11.29 30 XM_Evil_Numbers_Gen 14736 12.42 12.21 12.51 31 XMSexyCombo_05 14076 6.94 11.67 5.05 32 XM_UncommonTLD01 12616 5.81 10.46 3.94 33 LOTS_OF_MONEY 11921 8.24 9.88 7.58 34 HTML_IMAGE_RATIO_04 11100 8.26 9.20 7.89 35 FSL_BULK_SIG 11041 8.93 9.15 8.84 36 DKIM_INVALID 10616 5.32 8.80 3.92 37 LotsOfNums_01 10271 9.25 8.51 9.55 38 MPART_ALT_DIFF 10262 5.15 8.51 3.80 39 RELAYCOUNTRY_FR 9460 2.59 7.84 0.48 40 T_XMDrugObfuBody_14 8929 7.66 7.40 7.77 41 XM_B_Phish_Phrases 8773 7.05 7.27 6.97 42 XM_H_Long_From01 8590 6.62 7.12 6.42 43 BAYES_80 8230 5.21 6.82 4.56 44 XM_UB50 8126 2.67 6.73 1.04 45 XMSubMetaSx_00 7676 4.32 6.36 3.49 46 HTML_IMAGE_RATIO_06 7664 4.47 6.35 3.71 47 TooManyTo_001 7544 7.00 6.25 7.30 48 DKIM_ADSP_NXDOMAIN 7187 2.17 5.96 0.65 49 XMStrtUSub 7066 5.78 5.86 5.75 50 XM_DIRTYINTL 6978 3.55 5.78 2.66 51 BAYES_60 6804 6.65 5.64 7.05 52 HTML_MIME_NO_HTML_TAG 6707 2.62 5.56 1.44 53 FROM_EXCESS_BASE64 6584 5.75 5.46 5.87 54 BOTNET_NORDNS 6378 1.54 5.29 0.03 55 XM_B_SpammyTLD 6261 4.53 5.19 4.27 56 RCVD_IN_RP_SAFE 5804 12.72 4.81 15.89 57 MIME_QP_LONG_LINE 5774 4.91 4.79 4.96 58 SpammyFromTLD_02 5407 1.46 4.48 0.25 59 BAYES_95 5391 3.44 4.47 3.03 60 MIME_HTML_MOSTLY 5336 3.30 4.42 2.84 61 XMNumbers 5052 3.48 4.19 3.20 62 T_REMOTE_IMAGE 4903 3.48 4.06 3.24 63 RELAYCOUNTRY_CA 4852 2.15 4.02 1.39 64 XMSubMetaI_00 4791 2.58 3.97 2.02 65 XM_SendGrid 4752 6.55 3.94 7.60 66 URI_HEX 4727 2.67 3.92 2.18 67 RCVD_IN_RP_CERTIFIED 4480 11.34 3.71 14.40 68 T_TooManySym_01 4473 5.97 3.71 6.88 69 XM_UB99 4381 1.05 3.63 0.01 70 XMBdyGiftCard01 4211 2.21 3.49 1.69 71 URIBL_DBL_ABUSE_REDIR 4148 1.01 3.44 0.04 72 RCVD_IN_RP_RNBL 4106 1.01 3.40 0.05 73 MultiRelay_Combo 4047 1.15 3.35 0.27 74 MultiRelay_CC 4047 1.15 3.35 0.27 75 NO_DNS_FOR_FROM 3954 1.80 3.28 1.21 76 BAYES_40 3951 3.51 3.27 3.61 77 HTML_IMAGE_RATIO_08 3828 2.66 3.17 2.46 78 MIME_HTML_ONLY_MULTI 3738 2.07 3.10 1.66 79 PDS_TO_EQ_FROM_NAME 3642 1.01 3.02 0.20 80 XM_UB999 3537 0.85 2.93 0.01 81 SUBJ_ALL_CAPS 3320 2.40 2.75 2.26 82 TM2_M_URI_OPT_OUT 3313 1.93 2.75 1.60 83 XM_SPF_SoftFail 3212 1.50 2.66 1.04 84 T_Symld_Words_02 3205 1.03 2.66 0.38 85 XM_URI_RBL 3164 1.13 2.62 0.54 86 TR_XM_PHPDW 3107 1.27 2.58 0.74 87 TR_XM_PHPForged 3059 1.24 2.54 0.72 88 TR_XM_FormFill2 3046 1.23 2.52 0.71 89 XM_H_PHPOS 3027 1.23 2.51 0.71 90 XM_CamelCaseFrm001 3000 2.11 2.49 1.96 91 RCVD_IN_IADB_LISTED 2974 4.04 2.46 4.67 92 RCVD_IN_MSPIKE_H2 2905 4.05 2.41 4.71 93 RCVD_IN_IADB_SPF 2745 3.62 2.28 4.16 94 SpammyFromTLD_01 2717 0.98 2.25 0.47 95 BAYES_20 2646 2.62 2.19 2.79 96 XMSexyCombo_01 2642 1.08 2.19 0.63 97 RCVD_IN_IADB_SENDERID 2624 3.30 2.17 3.75 98 RCVD_IN_IADB_DK 2615 3.24 2.17 3.67 99 XM_ProductURIs 2581 1.29 2.14 0.95 100 XMDiploma_00 2487 1.56 2.06 1.36 101 ALL_TRUSTED 2365 10.30 1.96 13.65 102 XMBody_17 2288 0.97 1.90 0.60 103 T_XMDrugObfuBody_08 2263 1.34 1.88 1.13 104 TR_Mismatch_TLD_02 2210 0.59 1.83 0.09 105 RCVD_IN_PSBL 2195 0.58 1.82 0.08 106 RCVD_IN_BL_SPAMCOP_NET 2145 0.85 1.78 0.47 107 HK_SCAM 2085 0.52 1.73 0.04 108 TR_XM_DK_SendGrid 2000 3.27 1.66 3.92 109 UNPARSEABLE_RELAY 1991 3.16 1.65 3.77 110 T_XMHurry_00 1950 1.46 1.62 1.40 111 DIET_1 1921 0.82 1.59 0.51 112 URI_TRY_3LD 1901 1.63 1.58 1.65 113 RELAYCOUNTRY_DE 1899 0.77 1.57 0.45 114 DATE_IN_PAST_06_12 1863 0.49 1.54 0.07 115 HTML_IMAGE_ONLY_24 1861 0.61 1.54 0.23 116 MAILING_LIST_MULTI 1849 2.10 1.53 2.33 117 TM2_M_VERY_LONG_WORD 1820 1.55 1.51 1.56 118 SUBJ_DOLLARS 1817 0.74 1.51 0.43 119 XM_B_REG_HTML 1815 0.72 1.50 0.41 120 RELAYCOUNTRY_AT 1807 0.63 1.50 0.28 121 XM_H_PHPMailer 1762 0.90 1.46 0.67 122 XM_OfRef6 1737 1.74 1.44 1.86 123 TR_XM_RelayPhish 1656 1.07 1.37 0.95 124 XM_H_Long_From02 1646 1.27 1.36 1.24 125 XMSubMetaSxObfu_03 1628 0.70 1.35 0.44 126 XMBrknScrpt_02 1584 0.92 1.31 0.76 127 XM_DK_Undo_01 1580 1.55 1.31 1.64 128 XM_UB60 1576 0.45 1.31 0.11 129 XMPhish30 1560 0.89 1.29 0.73 130 XM_H_PHPOS_M 1523 0.58 1.26 0.31 131 BAYES_00 1517 8.79 1.26 11.82 132 XMHTMLBadTable_001 1506 0.67 1.25 0.43 133 FROM_SUSPICIOUS_NTLD 1493 0.39 1.24 0.05 134 XMStockSpam_06 1472 1.58 1.22 1.73 135 XMMoneyMeta_00 1440 0.51 1.19 0.24 136 DKIM_ADSP_CUSTOM_MED 1382 1.09 1.15 1.07 137 DATE_IN_PAST_03_06 1370 0.43 1.14 0.15 138 REPLYTO_WITHOUT_TO_CC 1348 0.38 1.12 0.08 139 BODY_ENHANCEMENT 1346 0.36 1.12 0.06 140 TR_Caps_n_Bayes_99 1317 0.79 1.09 0.67 141 XM_E_Blogspot 1289 0.41 1.07 0.14 142 URIBL_BLACK 1283 0.35 1.06 0.06 143 XMGenDplmaNmb 1279 0.86 1.06 0.78 144 DATE_IN_PAST_12_24 1263 0.35 1.05 0.07 145 RELAYCOUNTRY_IT 1253 0.33 1.04 0.05 146 XMPhish11 1243 0.93 1.03 0.89 147 T_TooManySym_02 1237 1.64 1.03 1.89 148 RELAYCOUNTRY_GB 1228 0.89 1.02 0.84 149 SHORT_URI_3 1187 0.41 0.98 0.18 150 FORGED_GMAIL_RCVD 1174 0.62 0.97 0.48 151 XM_HighProb1 1152 0.28 0.95 0.01 152 BAYES_05 1140 1.55 0.94 1.79 153 TR_LOTS_OF_MONEY2 1134 0.76 0.94 0.69 154 T_MONEY_PERCENT 1134 0.76 0.94 0.69 155 MISSING_HEADERS 1128 0.54 0.93 0.38 156 XMSexyCombo_04 1115 0.34 0.92 0.10 157 NML_ADSP_CUSTOM_MED 1103 0.79 0.91 0.74 158 XM_B_COPY_HTML 1102 0.82 0.91 0.78 159 RCVD_IN_IADB_VOUCHED 1099 2.27 0.91 2.81 160 THIS_AD 1082 0.95 0.90 0.97 161 TR_Symld_Words 1064 1.61 0.88 1.90 162 XMHTML_After_End 1059 0.44 0.88 0.27 163 XMSlimDrugH 1045 0.42 0.87 0.25 164 RDNS_DYNAMIC 1045 0.60 0.87 0.50 165 XMNoVowels 1032 0.53 0.86 0.39 166 HTML_IMAGE_ONLY_32 1019 0.44 0.84 0.28 167 RELAYCOUNTRY_IN 1019 0.34 0.84 0.14 168 XM_XX_Yahoo 994 0.39 0.82 0.22 169 URI_NOVOWEL 973 0.47 0.81 0.33 170 T_XMDrugObfuBody_00 964 0.70 0.80 0.65 171 TooManyTo_002 960 1.37 0.80 1.60 172 FROM_DOMAIN_NOVOWEL 937 0.26 0.78 0.06 173 XMSubMetaSSx_00 936 0.30 0.78 0.11 174 XM_UB80 923 0.24 0.76 0.03 175 LONG_JUNK_URI 919 0.31 0.76 0.13 176 RELAYCOUNTRY_RU 892 0.23 0.74 0.02 177 RELAYCOUNTRY_JP 887 0.24 0.74 0.04 178 HELO_NODOT 879 0.67 0.73 0.65 179 XM_RXBody 873 0.46 0.72 0.36 180 HELO_NO_DOMAIN 865 0.67 0.72 0.65 181 URIBL_DBL_SPAM 861 0.22 0.71 0.01 182 PLING_QUERY 844 0.49 0.70 0.41 183 URI_PHP_REDIR 806 0.20 0.67 0.01 184 XMGppyBdWords 806 0.38 0.67 0.26 185 MPART_ALT_DIFF_COUNT 801 0.34 0.66 0.21 186 XMGetyour 798 0.20 0.66 0.02 187 TooManyTo_003 785 1.01 0.65 1.15 188 BASE64_LENGTH_79_INF 785 0.32 0.65 0.19 189 RELAYCOUNTRY_CN 763 0.24 0.63 0.08 190 HTML_FONT_FACE_BAD 761 0.57 0.63 0.55 191 FILL_THIS_FORM 740 1.17 0.61 1.40 192 T_TooManySym_03 739 0.62 0.61 0.62 193 HOSTED_IMG_DIRECT_MX 736 0.17 0.61 0.00 194 XMBody_78 712 0.50 0.59 0.47 195 RCVD_IN_IADB_OPTIN 710 1.50 0.59 1.87 196 TM2_M_A_HREF_HREF 707 0.38 0.59 0.29 197 XMEmptySub 700 0.22 0.58 0.07 198 HTML_TAG_BALANCE_BODY 689 0.65 0.57 0.68 199 RELAYCOUNTRY_CL 686 0.16 0.57 0.00 200 XMUrgent 684 0.39 0.57 0.32 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 257768 87.77 92.85 85.74 2 DKIM_SIGNED 244396 81.32 81.38 81.29 3 XM_DK_Pass 240789 78.62 74.94 80.09 4 DKIM_VALID 232607 76.00 72.58 77.37 5 DKIM_VALID_AU 184911 60.23 57.04 61.50 6 XMListUnsubscribeExists 175920 64.33 78.82 58.51 7 DCC_CHECK_NEGATIVE 153229 42.38 20.97 50.97 8 BAYES_50 146469 43.64 30.98 48.72 9 DCC_CHECK 143511 56.26 77.50 47.73 10 HTML_FONT_LOW_CONTRAST 93284 31.69 33.33 31.03 11 LOC_TINY_FONT_1 87550 30.61 34.34 29.12 12 DKIM_VALID_EF 84762 25.24 17.87 28.19 13 T_TM2_M_HEADER_IN_MSG 76111 22.52 15.55 25.32 14 FVGT_m_MULTI_ODD 67758 23.63 26.35 22.54 15 XMSubLong 65857 22.33 23.40 21.91 16 MIME_HTML_ONLY 63591 23.84 30.53 21.15 17 XM_DK_Undo_02 54713 26.89 48.56 18.20 18 T_KAM_HTML_FONT_INVALID 49123 17.02 18.73 16.34 19 BAYES_99 49048 24.30 44.21 16.31 20 MultiRelay 48904 16.13 15.79 16.27 21 RCVD_IN_RP_SAFE 47772 12.72 4.81 15.89 22 BAYES_999 44296 21.19 37.28 14.73 23 XM_Body_Dirty_Words 43717 16.59 21.69 14.54 24 RCVD_IN_RP_CERTIFIED 43282 11.34 3.71 14.40 25 XM_Multi_Part_URI 43163 15.11 16.99 14.36 26 ALL_TRUSTED 41049 10.30 1.96 13.65 27 XM_Evil_Numbers_Gen 37599 12.42 12.21 12.51 28 XM_DKIMWhitelistDomains 36185 8.59 0.02 12.04 29 BAYES_00 35528 8.79 1.26 11.82 30 HTML_IMAGE_RATIO_02 33947 12.49 15.48 11.29 31 TR_XM_DK_Bayes 31582 7.62 0.44 10.50 32 TR_XM_DK_Bayes1 30614 7.38 0.41 10.18 33 LotsOfNums_01 28705 9.25 8.51 9.55 34 TR_XM_DK_Bayes2 27848 6.71 0.33 9.26 35 FSL_BULK_SIG 26588 8.93 9.15 8.84 36 TR_DCC_Bayes_99 24129 15.69 34.79 8.03 37 HTML_IMAGE_RATIO_04 23719 8.26 9.20 7.89 38 T_XMDrugObfuBody_14 23352 7.66 7.40 7.77 39 XM_SendGrid 22836 6.55 3.94 7.60 40 LOTS_OF_MONEY 22792 8.24 9.88 7.58 41 TooManyTo_001 21962 7.00 6.25 7.30 42 BAYES_60 21197 6.65 5.64 7.05 43 XM_B_Phish_Phrases 20941 7.05 7.27 6.97 44 T_TooManySym_01 20674 5.97 3.71 6.88 45 XM_H_Long_From01 19294 6.62 7.12 6.42 46 BOTNET_IPINHOSTNAME 18757 9.74 18.47 6.24 47 FROM_EXCESS_BASE64 17636 5.75 5.46 5.87 48 XMStrtUSub 17287 5.78 5.86 5.75 49 TO_MALFORMED 16911 4.03 0.05 5.62 50 RELAYCOUNTRY_META 16107 10.82 24.42 5.36 51 XMSexyCombo_05 15168 6.94 11.67 5.05 52 MIME_QP_LONG_LINE 14909 4.91 4.79 4.96 53 RCVD_IN_MSPIKE_H2 14173 4.05 2.41 4.71 54 RCVD_IN_IADB_LISTED 14043 4.04 2.46 4.67 55 BAYES_80 13708 5.21 6.82 4.56 56 XM_B_SpammyTLD 12834 4.53 5.19 4.27 57 RCVD_IN_IADB_SPF 12504 3.62 2.28 4.16 58 XM_UncommonTLD01 11844 5.81 10.46 3.94 59 DKIM_INVALID 11789 5.32 8.80 3.92 60 TR_XM_DK_SendGrid 11784 3.27 1.66 3.92 61 MPART_ALT_DIFF 11431 5.15 8.51 3.80 62 UNPARSEABLE_RELAY 11320 3.16 1.65 3.77 63 RCVD_IN_IADB_SENDERID 11271 3.30 2.17 3.75 64 HTML_IMAGE_RATIO_06 11151 4.47 6.35 3.71 65 IN_ZIMBRA_NJ_WHITELIST 11042 2.63 0.02 3.67 66 RCVD_IN_IADB_DK 11034 3.24 2.17 3.67 67 BAYES_40 10855 3.51 3.27 3.61 68 XMSubMetaSx_00 10504 4.32 6.36 3.49 69 T_REMOTE_IMAGE 9740 3.48 4.06 3.24 70 XMNumbers 9608 3.48 4.19 3.20 71 TVD_RCVD_IP 9431 2.33 0.32 3.14 72 BAYES_95 9121 3.44 4.47 3.03 73 MIME_HTML_MOSTLY 8546 3.30 4.42 2.84 74 RCVD_IN_IADB_VOUCHED 8452 2.27 0.91 2.81 75 BAYES_20 8394 2.62 2.19 2.79 76 XM_DIRTYINTL 7994 3.55 5.78 2.66 77 BOTNET 7477 8.74 24.34 2.49 78 HTML_IMAGE_RATIO_08 7384 2.66 3.17 2.46 79 INVALID_MSGID 7092 1.72 0.13 2.36 80 RCVD_IN_MSPIKE_WL 7053 1.80 0.45 2.35 81 RCVD_IN_MSPIKE_H3 7035 1.80 0.45 2.34 82 MAILING_LIST_MULTI 6998 2.10 1.53 2.33 83 SUBJ_ALL_CAPS 6792 2.40 2.75 2.26 84 URI_HEX 6540 2.67 3.92 2.18 85 XMSubMetaI_00 6062 2.58 3.97 2.02 86 XM_PDF 6018 1.52 0.30 2.00 87 TR_MetaPhish_Combo_01 5944 1.52 0.38 1.98 88 UNTRUSTED_Relay 5928 6.31 17.10 1.97 89 XM_CamelCaseFrm001 5879 2.11 2.49 1.96 90 TR_Symld_Words 5711 1.61 0.88 1.90 91 IN_HORDE_ADDRESS_BOOK 5706 1.37 0.05 1.90 92 T_TooManySym_02 5687 1.64 1.03 1.89 93 RCVD_IN_IADB_OPTIN 5620 1.50 0.59 1.87 94 XM_OfRef6 5597 1.74 1.44 1.86 95 BAYES_05 5396 1.55 0.94 1.79 96 USER_IN_DEF_DKIM_WL 5347 1.28 0.03 1.78 97 XMStockSpam_06 5198 1.58 1.22 1.73 98 XMBdyGiftCard01 5082 2.21 3.49 1.69 99 MIME_HTML_ONLY_MULTI 4991 2.07 3.10 1.66 100 URI_TRY_3LD 4956 1.63 1.58 1.65 101 XM_DK_Undo_01 4931 1.55 1.31 1.64 102 TM2_M_URI_OPT_OUT 4819 1.93 2.75 1.60 103 TooManyTo_002 4816 1.37 0.80 1.60 104 TM2_M_VERY_LONG_WORD 4696 1.55 1.51 1.56 105 HTML_MIME_NO_HTML_TAG 4343 2.62 5.56 1.44 106 ANY_BOUNCE_MESSAGE 4265 1.16 0.52 1.42 107 BOUNCE_MESSAGE 4259 1.16 0.52 1.42 108 FILL_THIS_FORM 4208 1.17 0.61 1.40 109 T_XMHurry_00 4196 1.46 1.62 1.40 110 RELAYCOUNTRY_CA 4191 2.15 4.02 1.39 111 XMDiploma_00 4088 1.56 2.06 1.36 112 XM_GoogleGroups 3888 1.06 0.48 1.29 113 XM_H_Long_From02 3722 1.27 1.36 1.24 114 NO_DNS_FOR_FROM 3637 1.80 3.28 1.21 115 TooManyTo_003 3460 1.01 0.65 1.15 116 T_XMDrugObfuBody_08 3396 1.34 1.88 1.13 117 DKIM_ADSP_CUSTOM_MED 3210 1.09 1.15 1.07 118 XM_UB50 3131 2.67 6.73 1.04 119 XM_SPF_SoftFail 3122 1.50 2.66 1.04 120 THIS_AD 2930 0.95 0.90 0.97 121 XM_ProductURIs 2865 1.29 2.14 0.95 122 TooManyTo_004 2857 0.83 0.54 0.95 123 TR_XM_RelayPhish 2845 1.07 1.37 0.95 124 FILL_THIS_FORM_LONG 2701 0.79 0.53 0.90 125 XMPhish11 2679 0.93 1.03 0.89 126 XMBody_95 2661 0.66 0.11 0.89 127 FILL_THIS_FORM_LOAN 2618 0.70 0.29 0.87 128 RELAYCOUNTRY_GB 2528 0.89 1.02 0.84 129 TooManyTo_005 2466 0.72 0.47 0.82 130 XMGenDplmaNmb 2336 0.86 1.06 0.78 131 XM_B_COPY_HTML 2335 0.82 0.91 0.78 132 XMBrknScrpt_02 2271 0.92 1.31 0.76 133 USER_IN_WHITELIST 2245 0.53 0.00 0.75 134 TR_XM_PHPDW 2225 1.27 2.58 0.74 135 NML_ADSP_CUSTOM_MED 2217 0.79 0.91 0.74 136 XMPhish30 2193 0.89 1.29 0.73 137 XMSubMetaSxObfu_02 2186 0.62 0.37 0.73 138 TR_XM_PHPForged 2160 1.24 2.54 0.72 139 TR_XM_FormFill2 2148 1.23 2.52 0.71 140 XM_H_PHPOS 2143 1.23 2.51 0.71 141 TR_LOTS_OF_MONEY2 2073 0.76 0.94 0.69 142 T_MONEY_PERCENT 2073 0.76 0.94 0.69 143 HTML_TAG_BALANCE_BODY 2048 0.65 0.57 0.68 144 TR_Caps_n_Bayes_99 2027 0.79 1.09 0.67 145 XM_H_PHPMailer 2013 0.90 1.46 0.67 146 T_XMDrugObfuBody_00 1965 0.70 0.80 0.65 147 HELO_NODOT 1949 0.67 0.73 0.65 148 HELO_NO_DOMAIN 1947 0.67 0.72 0.65 149 DKIM_ADSP_NXDOMAIN 1944 2.17 5.96 0.65 150 XMPhish14 1942 0.62 0.56 0.65 151 XMSexyCombo_01 1902 1.08 2.19 0.63 152 T_TooManySym_03 1855 0.62 0.61 0.62 153 T_FILL_THIS_FORM_SHORT 1852 0.58 0.50 0.62 154 XMBody_17 1814 0.97 1.90 0.60 155 XMCapTrack 1795 0.48 0.20 0.60 156 HTML_FONT_FACE_BAD 1660 0.57 0.63 0.55 157 XMLngstWrd_00 1649 0.46 0.25 0.55 158 XM_URI_RBL 1615 1.13 2.62 0.54 159 DIET_1 1544 0.82 1.59 0.51 160 XMLngstWrd_01 1515 0.42 0.20 0.50 161 RDNS_DYNAMIC 1491 0.60 0.87 0.50 162 FORGED_GMAIL_RCVD 1439 0.62 0.97 0.48 163 RELAYCOUNTRY_FR 1436 2.59 7.84 0.48 164 RCVD_IN_BL_SPAMCOP_NET 1424 0.85 1.78 0.47 165 XM_Sft_Brands_C01 1419 0.35 0.06 0.47 166 XMBody_78 1410 0.50 0.59 0.47 167 SpammyFromTLD_01 1402 0.98 2.25 0.47 168 RELAYCOUNTRY_DE 1363 0.77 1.57 0.45 169 XMSubMetaSxObfu_03 1334 0.70 1.35 0.44 170 XMHTMLBadTable_001 1300 0.67 1.25 0.43 171 XM_ShortIntro_01 1294 0.43 0.45 0.43 172 NUMERIC_HTTP_ADDR 1294 0.44 0.47 0.43 173 SUBJ_DOLLARS 1287 0.74 1.51 0.43 174 LOW_PRICE 1271 0.44 0.49 0.42 175 HTTPS_HTTP_MISMATCH 1271 0.42 0.40 0.42 176 XM_B_REG_HTML 1239 0.72 1.50 0.41 177 PLING_QUERY 1229 0.49 0.70 0.41 178 XM_Body_Obfu01 1212 0.42 0.47 0.40 179 RELAYCOUNTRY_AU 1212 0.37 0.30 0.40 180 XMNoVowels 1186 0.53 0.86 0.39 181 T_Symld_Words_02 1141 1.03 2.66 0.38 182 XMRcvdHeader_15 1140 0.27 0.00 0.38 183 XM_Combo_Sbj 1137 0.33 0.22 0.38 184 MISSING_HEADERS 1134 0.54 0.93 0.38 185 AC_DIV_BONANZA 1108 0.29 0.09 0.37 186 XM_RXBody 1070 0.46 0.72 0.36 187 T_OBFU_PDF_ATTACH 1050 0.28 0.12 0.35 188 XM_OverStock_LProb 1019 0.33 0.29 0.34 189 XMLKML 1005 0.24 0.00 0.33 190 URI_NOVOWEL 992 0.47 0.81 0.33 191 XMUrgent 970 0.39 0.57 0.32 192 XMManySubDom_06 966 0.25 0.06 0.32 193 TM2_M_BODY_EMPTY 964 0.30 0.24 0.32 194 XM_H_PHPOS_M 924 0.58 1.26 0.31 195 XMDateMe_00 921 0.28 0.23 0.31 196 T_TooManySym_04 895 0.22 0.03 0.30 197 TM2_M_A_HREF_HREF 886 0.38 0.59 0.29 198 REMOVE_BEFORE_LINK 869 0.28 0.27 0.29 199 XMGappySubj_01 843 0.27 0.23 0.28 200 RELAYCOUNTRY_AT 838 0.63 1.50 0.28 ----------------------------------------------------------------------