Email: 646918 Autolearn: 0 AvgScore: 1.32 AvgScanTime: 2.18 sec Spam: 104267 Autolearn: 0 AvgScore: 12.48 AvgScanTime: 2.84 sec Ham: 542651 Autolearn: 0 AvgScore: -0.83 AvgScanTime: 2.05 sec Time Spent Running SA: 391.33 hours Time Spent Processing Spam: 82.38 hours Time Spent Processing Ham: 308.95 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 97203 87.85 93.23 86.81 2 DCC_CHECK 83650 50.10 80.23 44.31 3 DKIM_SIGNED 76785 75.82 73.64 76.24 4 XM_DK_Pass 72691 74.19 69.72 75.05 5 XM_B_Unicode 71222 69.69 68.31 69.95 6 XMListUnsubscribeExists 70020 55.64 67.15 53.43 7 DKIM_VALID 68213 70.64 65.42 71.64 8 BAYES_50 52725 52.89 50.57 53.33 9 DKIM_VALID_AU 51353 53.08 49.25 53.82 10 XM_B_Unicode3 45584 41.59 43.72 41.18 11 MIME_HTML_ONLY 39750 23.04 38.12 20.15 12 HTML_FONT_LOW_CONTRAST 35623 29.84 34.17 29.01 13 LOC_TINY_FONT_1 33776 25.70 32.39 24.41 14 XM_DK_Undo_02 31050 9.34 29.78 5.41 15 XMSubLong 28141 24.06 26.99 23.50 16 RELAYCOUNTRY_META 26414 8.73 25.33 5.54 17 FVGT_m_MULTI_ODD 25227 22.72 24.19 22.44 18 XM_Body_Dirty_Words 24159 15.85 23.17 14.44 19 DKIM_VALID_EF 22907 26.25 21.97 27.07 20 BOTNET 21743 5.36 20.85 2.38 21 MultiRelay 21738 18.91 20.85 18.54 22 T_KAM_HTML_FONT_INVALID 21251 18.70 20.38 18.38 23 T_TM2_M_HEADER_IN_MSG 21202 28.68 20.33 30.28 24 BAYES_99 19908 5.02 19.09 2.31 25 XM_Multi_Part_URI 18837 13.53 18.07 12.65 26 BOTNET_IPINHOSTNAME 18814 6.87 18.04 4.73 27 FSL_BULK_SIG 18427 8.27 17.67 6.46 28 XM_UncommonTLD01 18131 5.95 17.39 3.76 29 DCC_CHECK_NEGATIVE 17978 47.90 17.24 53.79 30 TR_DCC_Bayes_99 15651 3.35 15.01 1.11 31 BAYES_999 15249 3.88 14.62 1.82 32 LOTS_OF_MONEY 14899 9.27 14.29 8.31 33 HTML_IMAGE_RATIO_02 13906 9.36 13.34 8.60 34 XM_Evil_Numbers_Gen 13625 9.71 13.07 9.06 35 XMSexyCombo_05 13437 5.29 12.89 3.83 36 UNTRUSTED_Relay 12124 3.46 11.63 1.90 37 TooManyTo_001 10010 8.41 9.60 8.18 38 XMSubMetaSx_00 9779 4.26 9.38 3.28 39 KHOP_HELO_FCRDNS 9739 3.25 9.34 2.08 40 MPART_ALT_DIFF 9578 4.77 9.19 3.92 41 XM_H_Long_From01 9180 6.67 8.80 6.26 42 T_XMDrugObfuBody_14 9126 9.18 8.75 9.27 43 HTML_MIME_NO_HTML_TAG 8638 3.28 8.28 2.32 44 DKIM_INVALID 8572 5.18 8.22 4.60 45 LotsOfNums_01 8464 8.27 8.12 8.30 46 SpammyFromTLD_02 8046 1.64 7.72 0.47 47 XM_B_Phish_Phrases 7802 6.59 7.48 6.41 48 XM_DIRTYINTL 7461 3.65 7.16 2.98 49 XM_UB50 7114 1.94 6.82 1.00 50 HTML_IMAGE_RATIO_04 6580 6.18 6.31 6.16 51 XMNumbers 6132 4.03 5.88 3.68 52 XM_SPF_SoftFail 6097 2.76 5.85 2.17 53 BAYES_60 5948 4.06 5.70 3.74 54 TR_Mismatch_TLD_02 5862 0.97 5.62 0.08 55 BAYES_80 5741 2.61 5.51 2.05 56 RELAYCOUNTRY_GB 5633 1.85 5.40 1.17 57 XM_B_SpammyTLD 5623 4.19 5.39 3.96 58 BAYES_40 5575 6.51 5.35 6.74 59 MIME_HTML_ONLY_MULTI 5410 2.64 5.19 2.16 60 XM_URI_RBL 5315 1.10 5.10 0.34 61 MIME_QP_LONG_LINE 5148 5.74 4.94 5.90 62 HTML_IMAGE_RATIO_06 5024 3.65 4.82 3.43 63 MultiRelay_Combo 4926 0.96 4.72 0.24 64 MultiRelay_CC 4926 0.96 4.72 0.24 65 RCVD_IN_MSPIKE_H2 4844 6.57 4.65 6.93 66 MIME_HTML_MOSTLY 4828 2.80 4.63 2.44 67 T_REMOTE_IMAGE 4824 4.01 4.63 3.89 68 RCVD_IN_BL_SPAMCOP_NET 4778 1.37 4.58 0.75 69 HTML_SHORT_LINK_IMG_1 4660 0.74 4.47 0.02 70 RDNS_DYNAMIC 4557 0.97 4.37 0.32 71 BAYES_20 4545 5.12 4.36 5.27 72 T_TooManySym_01 4492 5.61 4.31 5.86 73 BOTNET_NORDNS 4473 0.76 4.29 0.09 74 TM2_M_URI_OPT_OUT 4439 2.21 4.26 1.81 75 RCVD_IN_RP_RNBL 4363 0.72 4.18 0.06 76 RELAYCOUNTRY_CA 4349 1.85 4.17 1.41 77 XMSexyCombo_01 4312 1.06 4.14 0.47 78 XMStrtUSub 4261 3.95 4.09 3.93 79 BAYES_00 4216 18.91 4.04 21.77 80 URI_HEX 3942 2.31 3.78 2.03 81 FROM_MISSP_DYNIP 3885 0.60 3.73 0.00 82 XMBody_17 3737 1.27 3.58 0.83 83 XM_OfRef6 3702 1.93 3.55 1.62 84 XM_BadFromFormat 3684 0.65 3.53 0.10 85 FROM_SUSPICIOUS_NTLD 3546 0.59 3.40 0.05 86 FROM_MISSP_REPLYTO 3535 0.55 3.39 0.00 87 FROM_SUSPICIOUS_NTLD_FP 3486 0.58 3.34 0.04 88 FROM_EXCESS_BASE64 3461 3.31 3.32 3.31 89 SpammyFromTLD_01 3382 1.69 3.24 1.39 90 XM_SendGrid 3322 6.42 3.19 7.04 91 RELAYCOUNTRY_FR 3077 0.83 2.95 0.42 92 XMBdyGiftCard01 3057 1.49 2.93 1.21 93 XMDiploma_00 3045 1.82 2.92 1.60 94 HTML_IMAGE_RATIO_08 2990 2.36 2.87 2.27 95 NO_DNS_FOR_FROM 2906 1.35 2.79 1.07 96 TR_XM_PHPDW 2886 0.99 2.77 0.65 97 HTML_IMAGE_ONLY_12 2832 0.57 2.72 0.15 98 BAYES_95 2827 1.44 2.71 1.19 99 TR_XM_PHPForged 2777 0.97 2.66 0.65 100 TR_XM_FormFill2 2758 0.96 2.65 0.63 101 XM_H_PHPOS 2751 0.95 2.64 0.63 102 T_XMDrugObfuBody_08 2708 1.71 2.60 1.54 103 REPLYTO_WITHOUT_TO_CC 2673 0.44 2.56 0.03 104 XM_CamelCaseFrm001 2656 2.09 2.55 2.00 105 TR_LOTS_OF_MONEY3 2637 0.88 2.53 0.56 106 MIME_HEADER_CTYPE_ONLY 2634 0.50 2.53 0.11 107 HDRS_LCASE_IMGONLY 2584 0.43 2.48 0.04 108 ALL_TRUSTED 2565 13.65 2.46 15.80 109 DKIM_ADSP_NXDOMAIN 2492 1.33 2.39 1.13 110 BAYES_05 2463 3.13 2.36 3.28 111 DATE_IN_PAST_06_12 2439 0.46 2.34 0.10 112 TO_EQ_FM_DOM_HTML_IMG 2438 0.39 2.34 0.01 113 T_HTML_TAG_BALANCE_CENTER 2378 0.49 2.28 0.15 114 XMSexyCombo_04 2370 0.43 2.27 0.08 115 HTML_IMAGE_ONLY_08 2279 0.43 2.19 0.09 116 XMGenDplmaNmb 2273 1.21 2.18 1.03 117 DIET_1 2130 0.72 2.04 0.46 118 TM2_M_VERY_LONG_WORD 2124 1.72 2.04 1.66 119 BODY_URI_ONLY 2084 0.41 2.00 0.10 120 TR_Symld_Words 2071 1.82 1.99 1.79 121 XM_H_TOP 2039 0.32 1.96 0.00 122 RCVD_IN_IADB_LISTED 2011 4.32 1.93 4.78 123 T_XMDrugObfuBody_00 1995 1.11 1.91 0.96 124 XM_H_Long_From02 1986 1.15 1.90 1.01 125 RELAYCOUNTRY_DE 1960 0.71 1.88 0.48 126 DKIM_ADSP_CUSTOM_MED 1952 1.06 1.87 0.90 127 HDRS_MISSP 1887 0.30 1.81 0.01 128 XMBrknScrpt_02 1879 0.88 1.80 0.70 129 DOS_RCVD_IP_TWICE_B 1872 0.35 1.80 0.07 130 TR_XM_RelayPhish 1845 1.43 1.77 1.36 131 XM_H_PHPMailer 1841 0.76 1.77 0.57 132 FORGED_GMAIL_RCVD 1808 0.66 1.73 0.45 133 RCVD_IN_IADB_SPF 1795 3.79 1.72 4.18 134 RCVD_IN_PSBL 1749 0.32 1.68 0.06 135 URI_TRY_3LD 1747 1.34 1.68 1.28 136 FILL_THIS_FORM 1743 0.67 1.67 0.48 137 RCVD_IN_IADB_DK 1737 3.32 1.67 3.64 138 RCVD_IN_IADB_SENDERID 1725 3.37 1.65 3.70 139 NML_ADSP_CUSTOM_MED 1724 0.82 1.65 0.66 140 TR_XM_INV_DKIM 1722 0.31 1.65 0.05 141 RCVD_IN_RP_SAFE 1708 9.66 1.64 11.20 142 TR_XM_DK_Bayes 1676 15.19 1.61 17.80 143 FILL_THIS_FORM_LONG 1668 0.59 1.60 0.40 144 TooManyTo_002 1653 2.17 1.59 2.28 145 XMPhish11 1648 1.21 1.58 1.14 146 XMStockSpam_06 1631 0.97 1.56 0.86 147 SUBJ_ALL_CAPS 1622 1.56 1.56 1.56 148 T_TooManySym_02 1617 2.21 1.55 2.33 149 RCVD_IN_MSPIKE_WL 1616 4.46 1.55 5.02 150 XM_H_PHPOS_M 1597 0.46 1.53 0.25 151 BILLION_DOLLARS 1586 0.29 1.52 0.06 152 TR_Mismatch_TLD_01 1582 0.46 1.52 0.26 153 XMSlimDrugH 1500 0.53 1.44 0.36 154 XMHTML_After_End 1479 1.08 1.42 1.02 155 XMSubMetaI_00 1476 0.76 1.42 0.63 156 TR_XM_DK_Bayes1 1471 14.48 1.41 16.99 157 TR_XM_DK_SendGrid 1465 3.39 1.41 3.77 158 DATE_IN_PAST_03_06 1427 0.39 1.37 0.21 159 MAILING_LIST_MULTI 1404 2.19 1.35 2.35 160 RELAYCOUNTRY_AU 1403 0.64 1.35 0.50 161 TooManyTo_003 1401 1.52 1.34 1.56 162 RCVD_IN_MSPIKE_H3 1348 3.77 1.29 4.25 163 DEAR_FRIEND 1333 0.29 1.28 0.10 164 T_FILL_THIS_FORM_SHORT 1314 0.93 1.26 0.87 165 HK_RANDOM_REPLYTO 1296 0.44 1.24 0.29 166 HK_SCAM 1263 0.24 1.21 0.05 167 RELAYCOUNTRY_IN 1261 0.30 1.21 0.13 168 MONEY_FORM 1247 0.21 1.20 0.02 169 SUBJ_OBFU_PUNCT_FEW 1245 0.28 1.19 0.10 170 XMSubGiftCard1 1245 0.26 1.19 0.08 171 XMSubGiftCard2 1216 0.23 1.17 0.05 172 TO_NO_BRKTS_DYNIP 1206 0.19 1.16 0.01 173 T_MONEY_PERCENT 1194 0.63 1.15 0.54 174 TR_LOTS_OF_MONEY2 1194 0.63 1.15 0.54 175 T_XMHurry_00 1190 0.70 1.14 0.61 176 HELO_NODOT 1176 1.44 1.13 1.50 177 XMMoneyMeta_00 1170 0.72 1.12 0.64 178 HELO_NO_DOMAIN 1169 1.44 1.12 1.50 179 XMSubMetaSxObfu_03 1162 0.52 1.11 0.41 180 XMPhish30 1154 0.63 1.11 0.54 181 TooManyTo_004 1148 1.13 1.10 1.13 182 INVALID_MSGID 1139 1.32 1.09 1.37 183 URI_NOVOWEL 1120 0.57 1.07 0.47 184 UNPARSEABLE_RELAY 1062 2.05 1.02 2.24 185 XM_DK_Undo_01 1047 1.45 1.00 1.54 186 RELAYCOUNTRY_AT 1041 0.34 1.00 0.21 187 HTML_FONT_FACE_BAD 1029 0.67 0.99 0.60 188 T_Symld_Words_02 1023 0.82 0.98 0.79 189 NORDNS_LOW_CONTRAST 1015 0.16 0.97 0.01 190 PLING_QUERY 1014 0.51 0.97 0.43 191 FSL_THIS_IS_ADV 1006 0.40 0.96 0.29 192 FROM_LOCAL_HEX 1002 0.27 0.96 0.13 193 FORM_FRAUD 1002 0.16 0.96 0.01 194 URIBL_DBL_ABUSE_REDIR 993 0.16 0.95 0.00 195 XM_UB60 984 0.20 0.94 0.06 196 XM_PDF 977 3.68 0.94 4.20 197 J_WEEDS_Y 976 0.17 0.94 0.02 198 FROM_LOCAL_DIGITS 968 0.18 0.93 0.04 199 J_WEEDS_A 966 0.15 0.93 0.00 200 J_WEEDS_E 963 0.15 0.92 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 471087 87.85 93.23 86.81 2 DKIM_SIGNED 413735 75.82 73.64 76.24 3 XM_DK_Pass 407239 74.19 69.72 75.05 4 DKIM_VALID 388769 70.64 65.42 71.64 5 XM_B_Unicode 379584 69.69 68.31 69.95 6 DKIM_VALID_AU 292045 53.08 49.25 53.82 7 DCC_CHECK_NEGATIVE 291882 47.90 17.24 53.79 8 XMListUnsubscribeExists 289923 55.64 67.15 53.43 9 BAYES_50 289408 52.89 50.57 53.33 10 DCC_CHECK 240454 50.10 80.23 44.31 11 XM_B_Unicode3 223463 41.59 43.72 41.18 12 T_TM2_M_HEADER_IN_MSG 164338 28.68 20.33 30.28 13 HTML_FONT_LOW_CONTRAST 157438 29.84 34.17 29.01 14 DKIM_VALID_EF 146921 26.25 21.97 27.07 15 LOC_TINY_FONT_1 132453 25.70 32.39 24.41 16 XMSubLong 127505 24.06 26.99 23.50 17 FVGT_m_MULTI_ODD 121781 22.72 24.19 22.44 18 BAYES_00 118117 18.91 4.04 21.77 19 MIME_HTML_ONLY 109323 23.04 38.12 20.15 20 MultiRelay 100588 18.91 20.85 18.54 21 T_KAM_HTML_FONT_INVALID 99727 18.70 20.38 18.38 22 TR_XM_DK_Bayes 96614 15.19 1.61 17.80 23 TR_XM_DK_Bayes1 92215 14.48 1.41 16.99 24 ALL_TRUSTED 85752 13.65 2.46 15.80 25 TR_XM_DK_Bayes2 78794 12.31 0.81 14.52 26 XM_Body_Dirty_Words 78375 15.85 23.17 14.44 27 XM_Multi_Part_URI 68662 13.53 18.07 12.65 28 RCVD_IN_RP_SAFE 60770 9.66 1.64 11.20 29 RCVD_IN_RP_CERTIFIED 53969 8.46 0.73 9.95 30 T_XMDrugObfuBody_14 50291 9.18 8.75 9.27 31 XM_Evil_Numbers_Gen 49167 9.71 13.07 9.06 32 HTML_IMAGE_RATIO_02 46670 9.36 13.34 8.60 33 LOTS_OF_MONEY 45070 9.27 14.29 8.31 34 LotsOfNums_01 45019 8.27 8.12 8.30 35 TooManyTo_001 44369 8.41 9.60 8.18 36 XM_SendGrid 38195 6.42 3.19 7.04 37 RCVD_IN_MSPIKE_H2 37631 6.57 4.65 6.93 38 BAYES_40 36558 6.51 5.35 6.74 39 XM_DKIMWhitelistDomains 35819 5.54 0.03 6.60 40 FSL_BULK_SIG 35075 8.27 17.67 6.46 41 XM_B_Phish_Phrases 34810 6.59 7.48 6.41 42 XM_H_Long_From01 33992 6.67 8.80 6.26 43 HTML_IMAGE_RATIO_04 33424 6.18 6.31 6.16 44 MIME_QP_LONG_LINE 32000 5.74 4.94 5.90 45 T_TooManySym_01 31810 5.61 4.31 5.86 46 RELAYCOUNTRY_META 30069 8.73 25.33 5.54 47 XM_DK_Undo_02 29382 9.34 29.78 5.41 48 BAYES_20 28590 5.12 4.36 5.27 49 RCVD_IN_MSPIKE_WL 27223 4.46 1.55 5.02 50 RCVD_IN_IADB_LISTED 25945 4.32 1.93 4.78 51 BOTNET_IPINHOSTNAME 25648 6.87 18.04 4.73 52 DKIM_INVALID 24966 5.18 8.22 4.60 53 RCVD_IN_MSPIKE_H3 23049 3.77 1.29 4.25 54 XM_PDF 22804 3.68 0.94 4.20 55 RCVD_IN_IADB_SPF 22704 3.79 1.72 4.18 56 XM_B_SpammyTLD 21510 4.19 5.39 3.96 57 XMStrtUSub 21313 3.95 4.09 3.93 58 MPART_ALT_DIFF 21288 4.77 9.19 3.92 59 T_REMOTE_IMAGE 21126 4.01 4.63 3.89 60 XMSexyCombo_05 20802 5.29 12.89 3.83 61 TR_XM_DK_SendGrid 20446 3.39 1.41 3.77 62 XM_UncommonTLD01 20381 5.95 17.39 3.76 63 BAYES_60 20289 4.06 5.70 3.74 64 RCVD_IN_IADB_SENDERID 20064 3.37 1.65 3.70 65 XMNumbers 19953 4.03 5.88 3.68 66 RCVD_IN_IADB_DK 19745 3.32 1.67 3.64 67 IN_ZIMBRA_NJ_WHITELIST 18786 2.91 0.02 3.46 68 HTML_IMAGE_RATIO_06 18596 3.65 4.82 3.43 69 FROM_EXCESS_BASE64 17980 3.31 3.32 3.31 70 BAYES_05 17811 3.13 2.36 3.28 71 XMSubMetaSx_00 17801 4.26 9.38 3.28 72 XM_DIRTYINTL 16148 3.65 7.16 2.98 73 RCVD_IN_IADB_VOUCHED 16125 2.60 0.67 2.97 74 TO_MALFORMED 14414 2.24 0.06 2.66 75 ANY_BOUNCE_MESSAGE 14125 2.32 0.83 2.60 76 BOUNCE_MESSAGE 14121 2.32 0.82 2.60 77 MIME_HTML_MOSTLY 13260 2.80 4.63 2.44 78 BOTNET 12902 5.36 20.85 2.38 79 MAILING_LIST_MULTI 12755 2.19 1.35 2.35 80 T_TooManySym_02 12653 2.21 1.55 2.33 81 HTML_MIME_NO_HTML_TAG 12603 3.28 8.28 2.32 82 BAYES_99 12557 5.02 19.09 2.31 83 TooManyTo_002 12397 2.17 1.59 2.28 84 HTML_IMAGE_RATIO_08 12295 2.36 2.87 2.27 85 UNPARSEABLE_RELAY 12175 2.05 1.02 2.24 86 XM_SPF_SoftFail 11770 2.76 5.85 2.17 87 MIME_HTML_ONLY_MULTI 11699 2.64 5.19 2.16 88 TVD_RCVD_IP 11377 1.84 0.49 2.10 89 KHOP_HELO_FCRDNS 11305 3.25 9.34 2.08 90 BAYES_80 11140 2.61 5.51 2.05 91 URI_HEX 11011 2.31 3.78 2.03 92 XM_CamelCaseFrm001 10853 2.09 2.55 2.00 93 UNTRUSTED_Relay 10290 3.46 11.63 1.90 94 RCVD_IN_IADB_OPTIN 10274 1.67 0.50 1.89 95 BAYES_999 9858 3.88 14.62 1.82 96 TM2_M_URI_OPT_OUT 9836 2.21 4.26 1.81 97 TR_Symld_Words 9696 1.82 1.99 1.79 98 TR_MetaPhish_Combo_01 9102 1.51 0.65 1.68 99 TM2_M_VERY_LONG_WORD 9025 1.72 2.04 1.66 100 XM_OfRef6 8767 1.93 3.55 1.62 101 XMDiploma_00 8698 1.82 2.92 1.60 102 SUBJ_ALL_CAPS 8482 1.56 1.56 1.56 103 TooManyTo_003 8453 1.52 1.34 1.56 104 T_XMDrugObfuBody_08 8364 1.71 2.60 1.54 105 XM_DK_Undo_01 8330 1.45 1.00 1.54 106 CK_HELO_DYNAMIC_SPLIT_IP 8173 1.36 0.60 1.51 107 HELO_NODOT 8142 1.44 1.13 1.50 108 HELO_NO_DOMAIN 8141 1.44 1.12 1.50 109 HELO_DYNAMIC_IPADDR2 8140 1.28 0.13 1.50 110 IN_HORDE_ADDRESS_BOOK 7933 1.23 0.03 1.46 111 RELAYCOUNTRY_CA 7637 1.85 4.17 1.41 112 SpammyFromTLD_01 7534 1.69 3.24 1.39 113 INVALID_MSGID 7421 1.32 1.09 1.37 114 TR_XM_RelayPhish 7388 1.43 1.77 1.36 115 USER_IN_DEF_DKIM_WL 7104 1.10 0.02 1.31 116 XMCapTrack 7089 1.14 0.30 1.31 117 URI_TRY_3LD 6939 1.34 1.68 1.28 118 XMBdyGiftCard01 6555 1.49 2.93 1.21 119 BAYES_95 6474 1.44 2.71 1.19 120 RELAYCOUNTRY_GB 6343 1.85 5.40 1.17 121 XMPhish11 6204 1.21 1.58 1.14 122 TooManyTo_004 6157 1.13 1.10 1.13 123 DKIM_ADSP_NXDOMAIN 6141 1.33 2.39 1.13 124 TR_DCC_Bayes_99 6021 3.35 15.01 1.11 125 XM_GoogleGroups 5846 0.99 0.53 1.08 126 NO_DNS_FOR_FROM 5815 1.35 2.79 1.07 127 XMGenDplmaNmb 5587 1.21 2.18 1.03 128 XMHTML_After_End 5529 1.08 1.42 1.02 129 XM_H_Long_From02 5471 1.15 1.90 1.01 130 XM_UB50 5445 1.94 6.82 1.00 131 XMGappySubj_01 5432 0.90 0.38 1.00 132 T_XMDrugObfuBody_00 5194 1.11 1.91 0.96 133 TooManyTo_005 5050 0.93 0.90 0.93 134 DKIM_ADSP_CUSTOM_MED 4902 1.06 1.87 0.90 135 T_FILL_THIS_FORM_SHORT 4717 0.93 1.26 0.87 136 XMStockSpam_06 4643 0.97 1.56 0.86 137 XMBody_17 4508 1.27 3.58 0.83 138 T_Symld_Words_02 4305 0.82 0.98 0.79 139 RCVD_IN_BL_SPAMCOP_NET 4070 1.37 4.58 0.75 140 XM_SPF_Unknown 3865 0.71 0.70 0.71 141 XMBrknScrpt_02 3793 0.88 1.80 0.70 142 XM_ProductURIs 3601 0.70 0.87 0.66 143 NML_ADSP_CUSTOM_MED 3595 0.82 1.65 0.66 144 TR_XM_PHPDW 3539 0.99 2.77 0.65 145 TR_XM_PHPForged 3525 0.97 2.66 0.65 146 XM_B_REG_HTML 3516 0.62 0.50 0.65 147 TM2_M_BODY_EMPTY 3504 0.56 0.09 0.65 148 XMMoneyMeta_00 3494 0.72 1.12 0.64 149 TR_XM_FormFill2 3441 0.96 2.65 0.63 150 XMNoVowels 3437 0.63 0.61 0.63 151 T_OBFU_PDF_ATTACH 3436 0.57 0.27 0.63 152 XMSubMetaI_00 3436 0.76 1.42 0.63 153 XM_H_PHPOS 3420 0.95 2.64 0.63 154 HTML_TAG_BALANCE_BODY 3394 0.66 0.87 0.63 155 T_XMHurry_00 3330 0.70 1.14 0.61 156 HTML_FONT_FACE_BAD 3279 0.67 0.99 0.60 157 XMBody_78 3224 0.61 0.70 0.59 158 FROM_GOV_DKIM_AU 3196 0.52 0.16 0.59 159 TM2_M_A_HREF_HREF 3095 0.59 0.69 0.57 160 XM_H_PHPMailer 3089 0.76 1.77 0.57 161 HTTPS_HTTP_MISMATCH 3070 0.62 0.89 0.57 162 TR_LOTS_OF_MONEY3 3047 0.88 2.53 0.56 163 SUBJ_DOLLARS 3008 0.58 0.69 0.55 164 XM_ShortIntro_01 3003 0.52 0.37 0.55 165 XMBody_95 2991 0.50 0.23 0.55 166 XMOemUri 2956 0.48 0.14 0.54 167 XMPhish30 2935 0.63 1.11 0.54 168 TR_LOTS_OF_MONEY2 2907 0.63 1.15 0.54 169 T_MONEY_PERCENT 2907 0.63 1.15 0.54 170 RCVD_IN_MSPIKE_H5 2788 0.45 0.09 0.51 171 RELAYCOUNTRY_AU 2732 0.64 1.35 0.50 172 T_TooManySym_03 2671 0.48 0.44 0.49 173 XMHTMLBadTable_001 2664 0.53 0.71 0.49 174 RELAYCOUNTRY_DE 2610 0.71 1.88 0.48 175 XM_B_COPY_HTML 2594 0.52 0.71 0.48 176 FILL_THIS_FORM 2590 0.67 1.67 0.48 177 URI_NOVOWEL 2575 0.57 1.07 0.47 178 XMSexyCombo_01 2564 1.06 4.14 0.47 179 SpammyFromTLD_02 2560 1.64 7.72 0.47 180 USER_IN_WHITELIST 2556 0.40 0.00 0.47 181 DIET_1 2517 0.72 2.04 0.46 182 AC_DIV_BONANZA 2490 0.40 0.12 0.46 183 XMLngstWrd_00 2458 0.45 0.42 0.45 184 XMPhish14 2447 0.51 0.85 0.45 185 FORGED_GMAIL_RCVD 2437 0.66 1.73 0.45 186 FROM_GOV_SPOOF 2413 0.47 0.59 0.44 187 MISSING_HEADERS 2410 0.49 0.75 0.44 188 HTML_IMAGE_ONLY_28 2335 0.43 0.45 0.43 189 PLING_QUERY 2309 0.51 0.97 0.43 190 XMLngstWrd_01 2285 0.42 0.39 0.42 191 RELAYCOUNTRY_FR 2271 0.83 2.95 0.42 192 XMSubMetaSxObfu_03 2230 0.52 1.11 0.41 193 FILL_THIS_FORM_LONG 2173 0.59 1.60 0.40 194 REMOVE_BEFORE_LINK 2171 0.42 0.49 0.40 195 HTML_IMAGE_ONLY_32 2151 0.37 0.26 0.40 196 XMSolicitRefs_0 2149 0.45 0.74 0.40 197 URIBL_SBL_A 2126 0.44 0.72 0.39 198 SHORT_HELO_AND_INLINE_IMAGE 2125 0.35 0.12 0.39 199 XM_Combo_Sbj 2109 0.42 0.59 0.39 200 XMDateMe_00 2078 0.40 0.50 0.38 ----------------------------------------------------------------------