Email: 343638 Autolearn: 0 AvgScore: 1.02 AvgScanTime: 2.07 sec Spam: 57618 Autolearn: 0 AvgScore: 13.22 AvgScanTime: 2.57 sec Ham: 286020 Autolearn: 0 AvgScore: -1.44 AvgScanTime: 1.97 sec Time Spent Running SA: 197.52 hours Time Spent Processing Spam: 41.06 hours Time Spent Processing Ham: 156.46 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 49916 87.02 86.63 87.10 2 DCC_CHECK 44143 58.70 76.61 55.09 3 XM_B_Unicode 41516 74.14 72.05 74.56 4 DKIM_SIGNED 39332 79.78 68.26 82.10 5 XMListUnsubscribeExists 37013 61.06 64.24 60.42 6 XM_DK_Pass 36945 78.12 64.12 80.94 7 DKIM_VALID 34397 74.70 59.70 77.72 8 BAYES_50 31491 51.64 54.65 51.03 9 DKIM_VALID_AU 27284 61.80 47.35 64.70 10 XM_B_Unicode3 27121 47.53 47.07 47.63 11 HTML_FONT_LOW_CONTRAST 21375 35.83 37.10 35.58 12 RELAYCOUNTRY_META 18129 9.77 31.46 5.40 13 MIME_HTML_ONLY 17091 24.62 29.66 23.61 14 XM_DK_Undo_02 16853 10.38 29.25 6.58 15 LOC_TINY_FONT_1 16490 31.68 28.62 32.30 16 BOTNET_IPINHOSTNAME 14147 9.63 24.55 6.62 17 FVGT_m_MULTI_ODD 13963 22.33 24.23 21.94 18 T_TM2_M_HEADER_IN_MSG 13524 23.35 23.47 23.32 19 XM_Body_Dirty_Words 13088 17.45 22.72 16.39 20 DCC_CHECK_NEGATIVE 12461 40.03 21.63 43.73 21 XMSubLong 12421 24.21 21.56 24.74 22 MultiRelay 11520 15.88 19.99 15.05 23 BOTNET 11241 5.54 19.51 2.73 24 FSL_BULK_SIG 11174 12.12 19.39 10.65 25 UNTRUSTED_Relay 11059 4.81 19.19 1.91 26 BAYES_99 10987 6.34 19.07 3.77 27 DKIM_VALID_EF 9980 26.08 17.32 27.85 28 XM_UncommonTLD01 9906 6.06 17.19 3.82 29 T_KAM_HTML_FONT_INVALID 8983 15.63 15.59 15.63 30 BAYES_999 8689 5.14 15.08 3.14 31 TR_DCC_Bayes_99 8632 4.34 14.98 2.19 32 HTML_IMAGE_RATIO_02 8355 14.45 14.50 14.44 33 XM_Multi_Part_URI 8273 13.92 14.36 13.83 34 LOTS_OF_MONEY 7572 9.37 13.14 8.62 35 XMSexyCombo_05 7457 7.03 12.94 5.84 36 XM_UB50 6588 2.57 11.43 0.79 37 XM_Evil_Numbers_Gen 6112 11.00 10.61 11.08 38 XMSubMetaSx_00 5763 5.39 10.00 4.46 39 T_XMDrugObfuBody_14 5666 7.95 9.83 7.57 40 SpammyFromTLD_02 5645 2.18 9.80 0.65 41 RCVD_IN_RP_RNBL 5141 1.64 8.92 0.17 42 TooManyTo_001 5125 6.77 8.89 6.34 43 XMStrtUSub 4971 5.99 8.63 5.46 44 DKIM_INVALID 4935 5.08 8.57 4.37 45 HTML_IMAGE_RATIO_04 4789 7.76 8.31 7.64 46 XM_OfRef6 4691 2.93 8.14 1.88 47 XM_B_SpammyTLD 4388 5.01 7.62 4.49 48 MultiRelay_Combo 4341 1.41 7.53 0.17 49 MultiRelay_CC 4341 1.41 7.53 0.17 50 MPART_ALT_DIFF 4280 4.83 7.43 4.31 51 XM_DIRTYINTL 4097 3.99 7.11 3.36 52 XM_B_Phish_Phrases 3987 7.75 6.92 7.92 53 XM_H_Long_From01 3916 6.61 6.80 6.58 54 KHOP_HELO_FCRDNS 3680 1.87 6.39 0.96 55 FROM_MISSP_REPLYTO 3607 1.05 6.26 0.01 56 RELAYCOUNTRY_FR 3429 1.33 5.95 0.39 57 XMNumbers 3307 4.35 5.74 4.07 58 RCVD_IN_MSPIKE_H2 3292 7.27 5.71 7.58 59 SUBJ_ALL_CAPS 3219 2.36 5.59 1.71 60 LotsOfNums_01 3194 6.94 5.54 7.23 61 BAYES_80 3117 2.82 5.41 2.29 62 MIME_HTML_MOSTLY 2934 3.80 5.09 3.54 63 RELAYCOUNTRY_CA 2915 2.48 5.06 1.96 64 T_FILL_THIS_FORM_SHORT 2896 1.81 5.03 1.16 65 RCVD_IN_BL_SPAMCOP_NET 2879 1.21 5.00 0.45 66 DKIM_ADSP_NXDOMAIN 2777 1.27 4.82 0.55 67 NORDNS_LOW_CONTRAST 2775 0.82 4.82 0.01 68 BAYES_40 2671 5.36 4.64 5.51 69 XM_SPF_SoftFail 2614 1.60 4.54 1.01 70 FROM_EXCESS_BASE64 2481 4.46 4.31 4.49 71 BAYES_60 2465 3.91 4.28 3.84 72 MIME_QP_LONG_LINE 2452 4.01 4.26 3.96 73 HTML_IMAGE_RATIO_06 2433 3.57 4.22 3.44 74 RELAYCOUNTRY_GB 2386 1.09 4.14 0.47 75 XMPhish11 2376 1.46 4.12 0.92 76 XM_OfRef7 2358 0.84 4.09 0.19 77 HTML_MIME_NO_HTML_TAG 2347 1.60 4.07 1.10 78 ALL_TRUSTED 2338 12.44 4.06 14.12 79 BAYES_20 2287 4.17 3.97 4.21 80 TR_Mismatch_TLD_02 2254 0.75 3.91 0.12 81 XM_URI_RBL 2212 0.99 3.84 0.41 82 NO_DNS_FOR_FROM 2132 1.78 3.70 1.39 83 HK_SCAM 2059 0.62 3.57 0.02 84 XMSexyCombo_01 2040 1.25 3.54 0.78 85 XM_CamelCaseFrm001 2023 2.18 3.51 1.91 86 RELAYCOUNTRY_NG 2011 0.59 3.49 0.00 87 MIME_HTML_ONLY_MULTI 1986 2.44 3.45 2.24 88 HTML_IMAGE_RATIO_08 1975 2.35 3.43 2.13 89 FILL_THIS_FORM 1975 1.42 3.43 1.01 90 FILL_THIS_FORM_LONG 1937 1.35 3.36 0.94 91 ADVANCE_FEE_4_NEW 1903 0.56 3.30 0.01 92 URI_HEX 1885 2.52 3.27 2.37 93 TM2_M_URI_OPT_OUT 1852 1.94 3.21 1.68 94 FORM_FRAUD_5 1828 0.53 3.17 0.00 95 RCVD_IN_PSBL 1790 0.58 3.11 0.07 96 XM_Lotto 1768 0.55 3.07 0.05 97 T_REMOTE_IMAGE 1764 2.96 3.06 2.93 98 XM_Nigeria_01 1761 0.54 3.06 0.03 99 BOTNET_NORDNS 1758 0.53 3.05 0.02 100 BAYES_00 1747 21.51 3.03 25.24 101 MONEY_FRAUD_8 1742 0.51 3.02 0.00 102 MONEY_FORM 1730 0.51 3.00 0.01 103 MONEY_ATM_CARD 1699 0.49 2.95 0.00 104 BAYES_95 1655 1.47 2.87 1.18 105 TO_MALFORMED 1626 4.47 2.82 4.80 106 HELO_LH_HOME 1606 0.47 2.79 0.00 107 XM_OfRef8 1600 0.47 2.78 0.01 108 ADVANCE_FEE_5_NEW_FRM_MNY 1572 0.46 2.73 0.00 109 RELAYCOUNTRY_CO 1533 0.45 2.66 0.00 110 DATE_IN_PAST_06_12 1519 0.54 2.64 0.12 111 URIBL_DBL_ABUSE_REDIR 1519 0.47 2.64 0.03 112 BASE64_LENGTH_79_INF 1512 0.63 2.62 0.23 113 XMSubMetaI_00 1499 1.60 2.60 1.40 114 MONEY_FROM_MISSP 1466 0.43 2.54 0.00 115 XM_SendGrid 1462 5.88 2.54 6.55 116 TR_XM_PHPDW 1449 0.79 2.51 0.45 117 TR_XM_PHPForged 1446 0.79 2.51 0.44 118 REPLYTO_WITHOUT_TO_CC 1444 0.47 2.51 0.06 119 T_TooManySym_01 1436 6.74 2.49 7.59 120 TR_XM_FormFill2 1427 0.77 2.48 0.43 121 XM_H_PHPOS 1423 0.77 2.47 0.43 122 T_XMDrugObfuBody_08 1397 1.60 2.42 1.44 123 MISSING_HEADERS 1360 0.65 2.36 0.31 124 XM_H_Long_From02 1322 1.26 2.29 1.05 125 T_XMHurry_00 1255 1.19 2.18 0.99 126 DKIM_ADSP_CUSTOM_MED 1122 1.00 1.95 0.81 127 US_DOLLARS_3 1112 1.54 1.93 1.46 128 SHORT_URI_3 1106 0.35 1.92 0.04 129 NML_ADSP_CUSTOM_MED 1036 0.77 1.80 0.56 130 RCVD_IN_RP_SAFE 1035 13.17 1.80 15.46 131 XM_H_PHPMailer 1030 0.67 1.79 0.45 132 TooManyTo_002 1024 1.47 1.78 1.40 133 BAYES_05 1022 2.53 1.77 2.68 134 FROM_SUSPICIOUS_NTLD 1018 0.31 1.77 0.02 135 TR_XM_RelayPhish 1009 1.08 1.75 0.95 136 XMBody_17 1007 0.98 1.75 0.82 137 URIBL_BLACK 999 0.31 1.73 0.02 138 XMDiploma_00 958 1.39 1.66 1.33 139 SHORT_URI_4 943 0.29 1.64 0.01 140 FORGED_GMAIL_RCVD 938 0.59 1.63 0.38 141 T_XMDrugObfuBody_00 938 0.96 1.63 0.83 142 TooManyTo_003 932 1.14 1.62 1.05 143 RELAYCOUNTRY_IN 929 0.48 1.61 0.25 144 TM2_M_VERY_LONG_WORD 905 1.38 1.57 1.34 145 XM_H_PHPOS_M 878 0.41 1.52 0.19 146 SpammyFromTLD_01 873 0.65 1.52 0.47 147 XMStockSpam_06 854 1.65 1.48 1.68 148 TR_XM_DK_Bayes 843 19.61 1.46 23.26 149 URI_TRY_3LD 837 1.69 1.45 1.74 150 RCVD_IN_IADB_LISTED 826 3.04 1.43 3.36 151 RELAYCOUNTRY_AT 824 0.45 1.43 0.25 152 RELAYCOUNTRY_CN 802 0.27 1.39 0.05 153 RCVD_IN_MSPIKE_WL 788 4.03 1.37 4.57 154 TooManyTo_004 787 0.96 1.37 0.88 155 XM_BadFromFormat 782 0.31 1.36 0.10 156 URIBL_SBL_A 764 0.36 1.33 0.16 157 TR_Symld_Words 756 1.39 1.31 1.41 158 XMPhish30 750 1.15 1.30 1.12 159 FROM_SUSPICIOUS_NTLD_FP 750 0.23 1.30 0.02 160 TR_XM_DK_SendGrid 733 3.30 1.27 3.71 161 TR_Mismatch_TLD_01 724 0.30 1.26 0.10 162 RCVD_IN_IADB_SPF 698 2.63 1.21 2.91 163 XMGppyBdWords 696 0.31 1.21 0.13 164 RCVD_IN_IADB_DK 683 2.27 1.19 2.49 165 RCVD_IN_IADB_SENDERID 682 2.32 1.18 2.55 166 TooManyTo_005 681 0.83 1.18 0.76 167 RDNS_DYNAMIC 679 0.65 1.18 0.54 168 XMBrknScrpt_02 676 0.79 1.17 0.71 169 TR_XM_DK_Bayes1 673 18.79 1.17 22.34 170 T_HTML_TAG_BALANCE_CENTER 672 0.28 1.17 0.10 171 RELAYCOUNTRY_DE 669 0.45 1.16 0.30 172 XMGenDplmaNmb 642 0.86 1.11 0.81 173 DIET_1 634 0.60 1.10 0.50 174 TR_Sbj_FN_Bdy 630 0.30 1.09 0.14 175 MAILING_LIST_MULTI 626 1.62 1.09 1.73 176 HTML_FONT_FACE_BAD 625 0.69 1.08 0.61 177 FORM_FRAUD_3 624 0.18 1.08 0.00 178 XMSexyCombo_04 620 0.37 1.08 0.23 179 RCVD_IN_MSPIKE_H3 617 3.74 1.07 4.27 180 XM_DK_Undo_01 609 1.33 1.06 1.38 181 XMSubMetaSxObfu_03 608 0.58 1.06 0.49 182 URIBL_DBL_SPAM 603 0.23 1.05 0.07 183 XMBdyGiftCard01 590 2.76 1.02 3.11 184 XMMoneyMeta_00 587 0.46 1.02 0.34 185 MPART_ALT_DIFF_COUNT 561 0.50 0.97 0.40 186 UNPARSEABLE_RELAY 558 3.44 0.97 3.94 187 RELAYCOUNTRY_NL 557 0.34 0.97 0.21 188 XMBody_78 543 0.69 0.94 0.63 189 XM_B_COPY_HTML 534 0.71 0.93 0.66 190 TR_XM_SEO3 534 0.32 0.93 0.20 191 MILLION_HUNDRED 528 0.15 0.92 0.00 192 HTML_FONT_SIZE_HUGE 526 0.24 0.91 0.11 193 XM_H_Undi_Recip 525 0.32 0.91 0.20 194 TM2_M_A_HREF_HREF 523 0.70 0.91 0.65 195 ADVANCE_FEE_3_NEW 523 0.15 0.91 0.00 196 TR_XM_DK_Bayes2 501 17.24 0.87 20.54 197 XM_UB60 493 0.18 0.86 0.05 198 HELO_NODOT 481 0.54 0.83 0.49 199 HELO_NO_DOMAIN 481 0.52 0.83 0.45 200 DEAR_SOMETHING 479 0.28 0.83 0.17 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 249120 87.02 86.63 87.10 2 DKIM_SIGNED 234813 79.78 68.26 82.10 3 XM_DK_Pass 231514 78.12 64.12 80.94 4 DKIM_VALID 222300 74.70 59.70 77.72 5 XM_B_Unicode 213256 74.14 72.05 74.56 6 DKIM_VALID_AU 185069 61.80 47.35 64.70 7 XMListUnsubscribeExists 172823 61.06 64.24 60.42 8 DCC_CHECK 157579 58.70 76.61 55.09 9 BAYES_50 145952 51.64 54.65 51.03 10 XM_B_Unicode3 136222 47.53 47.07 47.63 11 DCC_CHECK_NEGATIVE 125083 40.03 21.63 43.73 12 HTML_FONT_LOW_CONTRAST 101763 35.83 37.10 35.58 13 LOC_TINY_FONT_1 92383 31.68 28.62 32.30 14 DKIM_VALID_EF 79657 26.08 17.32 27.85 15 BAYES_00 72180 21.51 3.03 25.24 16 XMSubLong 70766 24.21 21.56 24.74 17 MIME_HTML_ONLY 67524 24.62 29.66 23.61 18 T_TM2_M_HEADER_IN_MSG 66713 23.35 23.47 23.32 19 TR_XM_DK_Bayes 66531 19.61 1.46 23.26 20 TR_XM_DK_Bayes1 63883 18.79 1.17 22.34 21 FVGT_m_MULTI_ODD 62759 22.33 24.23 21.94 22 TR_XM_DK_Bayes2 58756 17.24 0.87 20.54 23 XM_Body_Dirty_Words 46871 17.45 22.72 16.39 24 T_KAM_HTML_FONT_INVALID 44715 15.63 15.59 15.63 25 RCVD_IN_RP_SAFE 44217 13.17 1.80 15.46 26 MultiRelay 43049 15.88 19.99 15.05 27 HTML_IMAGE_RATIO_02 41290 14.45 14.50 14.44 28 ALL_TRUSTED 40395 12.44 4.06 14.12 29 XM_Multi_Part_URI 39558 13.92 14.36 13.83 30 RCVD_IN_RP_CERTIFIED 38250 11.24 0.63 13.37 31 XM_DKIMWhitelistDomains 33177 9.66 0.05 11.60 32 XM_Evil_Numbers_Gen 31680 11.00 10.61 11.08 33 FSL_BULK_SIG 30466 12.12 19.39 10.65 34 LOTS_OF_MONEY 24642 9.37 13.14 8.62 35 XM_B_Phish_Phrases 22640 7.75 6.92 7.92 36 HTML_IMAGE_RATIO_04 21861 7.76 8.31 7.64 37 T_TooManySym_01 21715 6.74 2.49 7.59 38 RCVD_IN_MSPIKE_H2 21694 7.27 5.71 7.58 39 T_XMDrugObfuBody_14 21658 7.95 9.83 7.57 40 LotsOfNums_01 20667 6.94 5.54 7.23 41 BOTNET_IPINHOSTNAME 18942 9.63 24.55 6.62 42 XM_H_Long_From01 18812 6.61 6.80 6.58 43 XM_DK_Undo_02 18812 10.38 29.25 6.58 44 XM_SendGrid 18735 5.88 2.54 6.55 45 TooManyTo_001 18147 6.77 8.89 6.34 46 XMSexyCombo_05 16711 7.03 12.94 5.84 47 BAYES_40 15764 5.36 4.64 5.51 48 XMStrtUSub 15615 5.99 8.63 5.46 49 RELAYCOUNTRY_META 15434 9.77 31.46 5.40 50 TO_MALFORMED 13728 4.47 2.82 4.80 51 RCVD_IN_MSPIKE_WL 13074 4.03 1.37 4.57 52 FROM_EXCESS_BASE64 12831 4.46 4.31 4.49 53 XM_B_SpammyTLD 12831 5.01 7.62 4.49 54 XMSubMetaSx_00 12763 5.39 10.00 4.46 55 DKIM_INVALID 12513 5.08 8.57 4.37 56 MPART_ALT_DIFF 12325 4.83 7.43 4.31 57 RCVD_IN_MSPIKE_H3 12225 3.74 1.07 4.27 58 BAYES_20 12055 4.17 3.97 4.21 59 XMNumbers 11636 4.35 5.74 4.07 60 MIME_QP_LONG_LINE 11331 4.01 4.26 3.96 61 UNPARSEABLE_RELAY 11268 3.44 0.97 3.94 62 BAYES_60 10986 3.91 4.28 3.84 63 XM_UncommonTLD01 10913 6.06 17.19 3.82 64 BAYES_99 10785 6.34 19.07 3.77 65 TR_XM_DK_SendGrid 10603 3.30 1.27 3.71 66 MIME_HTML_MOSTLY 10111 3.80 5.09 3.54 67 HTML_IMAGE_RATIO_06 9844 3.57 4.22 3.44 68 RCVD_IN_IADB_LISTED 9620 3.04 1.43 3.36 69 XM_DIRTYINTL 9610 3.99 7.11 3.36 70 TVD_RCVD_IP 9281 2.82 0.74 3.24 71 BAYES_999 8977 5.14 15.08 3.14 72 IN_ZIMBRA_NJ_WHITELIST 8919 2.60 0.01 3.12 73 XMBdyGiftCard01 8891 2.76 1.02 3.11 74 CK_HELO_DYNAMIC_SPLIT_IP 8472 2.54 0.42 2.96 75 HELO_DYNAMIC_IPADDR2 8446 2.49 0.18 2.95 76 T_REMOTE_IMAGE 8393 2.96 3.06 2.93 77 RCVD_IN_IADB_SPF 8331 2.63 1.21 2.91 78 BOTNET 7801 5.54 19.51 2.73 79 T_TooManySym_02 7741 2.34 0.55 2.71 80 BAYES_05 7666 2.53 1.77 2.68 81 INVALID_MSGID 7360 2.23 0.51 2.57 82 RCVD_IN_IADB_SENDERID 7300 2.32 1.18 2.55 83 RCVD_IN_IADB_DK 7127 2.27 1.19 2.49 84 URI_HEX 6771 2.52 3.27 2.37 85 TR_MetaPhish_Combo_01 6594 2.00 0.47 2.31 86 BAYES_80 6561 2.82 5.41 2.29 87 RCVD_IN_IADB_VOUCHED 6478 1.97 0.52 2.26 88 MIME_HTML_ONLY_MULTI 6415 2.44 3.45 2.24 89 TR_DCC_Bayes_99 6270 4.34 14.98 2.19 90 HTML_IMAGE_RATIO_08 6099 2.35 3.43 2.13 91 RELAYCOUNTRY_CA 5596 2.48 5.06 1.96 92 UNTRUSTED_Relay 5477 4.81 19.19 1.91 93 XM_CamelCaseFrm001 5462 2.18 3.51 1.91 94 XM_OfRef6 5369 2.93 8.14 1.88 95 URI_TRY_3LD 4982 1.69 1.45 1.74 96 MAILING_LIST_MULTI 4953 1.62 1.09 1.73 97 SUBJ_ALL_CAPS 4900 2.36 5.59 1.71 98 TM2_M_URI_OPT_OUT 4816 1.94 3.21 1.68 99 XMStockSpam_06 4816 1.65 1.48 1.68 100 USER_IN_DEF_DKIM_WL 4776 1.39 0.01 1.67 101 IN_HORDE_ADDRESS_BOOK 4695 1.37 0.01 1.64 102 US_DOLLARS_3 4164 1.54 1.93 1.46 103 T_XMDrugObfuBody_08 4116 1.60 2.42 1.44 104 XM_PDF 4064 1.23 0.28 1.42 105 TR_Symld_Words 4025 1.39 1.31 1.41 106 TooManyTo_002 4018 1.47 1.78 1.40 107 RCVD_IN_IADB_OPTIN 4014 1.21 0.24 1.40 108 XMSubMetaI_00 4006 1.60 2.60 1.40 109 NO_DNS_FOR_FROM 3975 1.78 3.70 1.39 110 XM_DK_Undo_01 3960 1.33 1.06 1.38 111 TM2_M_VERY_LONG_WORD 3844 1.38 1.57 1.34 112 XMDiploma_00 3808 1.39 1.66 1.33 113 XMGappySubj_01 3691 1.11 0.20 1.29 114 ANY_BOUNCE_MESSAGE 3666 1.15 0.48 1.28 115 BOUNCE_MESSAGE 3663 1.15 0.47 1.28 116 XM_GoogleGroups 3501 1.10 0.47 1.22 117 BAYES_95 3380 1.47 2.87 1.18 118 T_FILL_THIS_FORM_SHORT 3326 1.81 5.03 1.16 119 XM_B_REG_HTML 3256 1.00 0.29 1.14 120 XMPhish30 3216 1.15 1.30 1.12 121 XM_ProductURIs 3214 1.04 0.62 1.12 122 HTML_MIME_NO_HTML_TAG 3139 1.60 4.07 1.10 123 XM_H_Long_From02 3016 1.26 2.29 1.05 124 TooManyTo_003 3000 1.14 1.62 1.05 125 FILL_THIS_FORM 2900 1.42 3.43 1.01 126 XM_SPF_SoftFail 2880 1.60 4.54 1.01 127 T_XMHurry_00 2828 1.19 2.18 0.99 128 KHOP_HELO_FCRDNS 2734 1.87 6.39 0.96 129 TR_XM_RelayPhish 2713 1.08 1.75 0.95 130 FILL_THIS_FORM_LOAN 2691 0.84 0.36 0.94 131 FILL_THIS_FORM_LONG 2685 1.35 3.36 0.94 132 XMPhish11 2629 1.46 4.12 0.92 133 XMBody_95 2555 0.78 0.22 0.89 134 XMSubMetaSxObfu_02 2536 0.79 0.33 0.89 135 TooManyTo_004 2518 0.96 1.37 0.88 136 T_XMDrugObfuBody_00 2361 0.96 1.63 0.83 137 XMBody_17 2356 0.98 1.75 0.82 138 DKIM_ADSP_CUSTOM_MED 2324 1.00 1.95 0.81 139 XMGenDplmaNmb 2314 0.86 1.11 0.81 140 XM_UB50 2248 2.57 11.43 0.79 141 XMSexyCombo_01 2240 1.25 3.54 0.78 142 XM_RXBody 2221 0.71 0.39 0.78 143 SUBJ_DOLLARS 2212 0.69 0.30 0.77 144 TooManyTo_005 2181 0.83 1.18 0.76 145 USER_IN_WHITELIST 2114 0.62 0.00 0.74 146 XMBrknScrpt_02 2034 0.79 1.17 0.71 147 HTML_TAG_BALANCE_BODY 1910 0.66 0.64 0.67 148 XM_B_COPY_HTML 1894 0.71 0.93 0.66 149 TM2_M_A_HREF_HREF 1872 0.70 0.91 0.65 150 SpammyFromTLD_02 1860 2.18 9.80 0.65 151 XMBody_78 1816 0.69 0.94 0.63 152 HTML_FONT_FACE_BAD 1738 0.69 1.08 0.61 153 XMHTML_After_End 1680 0.60 0.67 0.59 154 T_TooManySym_03 1660 0.49 0.07 0.58 155 XMHTMLBadTable_001 1658 0.59 0.64 0.58 156 PLING_QUERY 1642 0.61 0.81 0.57 157 NML_ADSP_CUSTOM_MED 1615 0.77 1.80 0.56 158 NUMERIC_HTTP_ADDR 1604 0.53 0.40 0.56 159 DKIM_ADSP_NXDOMAIN 1582 1.27 4.82 0.55 160 RDNS_DYNAMIC 1558 0.65 1.18 0.54 161 DIET_1 1437 0.60 1.10 0.50 162 TR_LOTS_OF_MONEY2 1421 0.54 0.77 0.50 163 T_MONEY_PERCENT 1421 0.54 0.77 0.50 164 BODY_ENHANCEMENT 1415 0.41 0.01 0.49 165 T_Symld_Words_02 1394 0.48 0.46 0.49 166 XMSubMetaSxObfu_03 1393 0.58 1.06 0.49 167 HELO_NODOT 1389 0.54 0.83 0.49 168 RELAYCOUNTRY_GB 1358 1.09 4.14 0.47 169 SpammyFromTLD_01 1350 0.65 1.52 0.47 170 XMLngstWrd_00 1311 0.45 0.41 0.46 171 HELO_NO_DOMAIN 1295 0.52 0.83 0.45 172 XM_H_PHPMailer 1284 0.67 1.79 0.45 173 RCVD_IN_BL_SPAMCOP_NET 1282 1.21 5.00 0.45 174 TR_XM_PHPDW 1275 0.79 2.51 0.45 175 XMCapTrack 1263 0.41 0.23 0.44 176 TR_XM_PHPForged 1255 0.79 2.51 0.44 177 TR_XM_FormFill2 1234 0.77 2.48 0.43 178 XM_H_PHPOS 1224 0.77 2.47 0.43 179 XMLngstWrd_01 1215 0.42 0.37 0.42 180 URI_NOVOWEL 1182 0.42 0.48 0.41 181 XM_URI_RBL 1176 0.99 3.84 0.41 182 MPART_ALT_DIFF_COUNT 1153 0.50 0.97 0.40 183 XM_UCStrings02 1152 0.36 0.14 0.40 184 REMOVE_BEFORE_LINK 1151 0.39 0.33 0.40 185 XM_D_tchamptons_WL 1146 0.33 0.00 0.40 186 XMBSHREFv2 1146 0.44 0.64 0.40 187 TR_LOTS_OF_MONEY3 1132 0.46 0.78 0.40 188 RELAYCOUNTRY_FR 1126 1.33 5.95 0.39 189 FSL_THIS_IS_ADV 1095 0.43 0.66 0.38 190 FORGED_GMAIL_RCVD 1085 0.59 1.63 0.38 191 RELAYCOUNTRY_IE 1070 0.36 0.27 0.37 192 XMPhish14 1057 0.42 0.65 0.37 193 URI_PHP_REDIR 1031 0.35 0.32 0.36 194 XM_Walgreens_Forge 1015 0.31 0.08 0.35 195 FROM_EGROUPS 997 0.29 0.00 0.35 196 XMMoneyMeta_00 980 0.46 1.02 0.34 197 LOW_PRICE 967 0.36 0.46 0.34 198 RELAYCOUNTRY_AU 954 0.41 0.77 0.33 199 XMGappySubj_02 949 0.28 0.05 0.33 200 HTTPS_HTTP_MISMATCH 946 0.34 0.36 0.33 ----------------------------------------------------------------------