Email: 340080 Autolearn: 0 AvgScore: 1.34 AvgScanTime: 1.95 sec Spam: 72990 Autolearn: 0 AvgScore: 13.02 AvgScanTime: 2.38 sec Ham: 267090 Autolearn: 0 AvgScore: -1.85 AvgScanTime: 1.84 sec Time Spent Running SA: 184.50 hours Time Spent Processing Spam: 48.22 hours Time Spent Processing Ham: 136.28 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 66747 88.75 91.45 88.01 2 DKIM_SIGNED 56047 80.70 76.79 81.77 3 DCC_CHECK 55224 55.54 75.66 50.05 4 XM_DK_Pass 54771 79.45 75.04 80.66 5 DKIM_VALID 51796 75.93 70.96 77.29 6 XMListUnsubscribeExists 47323 61.14 64.83 60.13 7 DKIM_VALID_AU 42263 59.80 57.90 60.32 8 XM_H_QuotedFrom 33724 41.37 46.20 40.04 9 BAYES_50 31760 52.68 43.51 55.18 10 HTML_FONT_LOW_CONTRAST 26261 35.03 35.98 34.78 11 LOC_TINY_FONT_1 25754 29.75 35.28 28.23 12 XM_DK_Undo_02 24930 15.13 34.16 9.93 13 MIME_HTML_ONLY 24854 26.21 34.05 24.06 14 BAYES_99 19058 11.76 26.11 7.84 15 FVGT_m_MULTI_ODD 17562 22.36 24.06 21.89 16 XMSubLong 17184 23.80 23.54 23.87 17 DCC_CHECK_NEGATIVE 16421 43.25 22.50 48.92 18 BOTNET 15916 6.43 21.81 2.23 19 BAYES_999 15467 9.80 21.19 6.69 20 XM_UncommonTLD01 15259 7.48 20.91 3.82 21 XM_Body_Dirty_Words 15020 15.21 20.58 13.74 22 TR_DCC_Bayes_99 14953 7.84 20.49 4.38 23 BOTNET_IPINHOSTNAME 14860 9.61 20.36 6.67 24 DKIM_VALID_EF 14770 28.55 20.24 30.82 25 RELAYCOUNTRY_META 13873 9.01 19.01 6.28 26 MultiRelay 11759 15.02 16.11 14.72 27 T_KAM_HTML_FONT_INVALID 11605 17.05 15.90 17.36 28 FSL_BULK_SIG 10790 8.84 14.78 7.22 29 HTML_IMAGE_RATIO_02 10699 12.83 14.66 12.33 30 XM_Multi_Part_URI 10388 14.88 14.23 15.06 31 T_TM2_M_HEADER_IN_MSG 10327 22.59 14.15 24.89 32 TooManyTo_001 9096 8.53 12.46 7.46 33 LOTS_OF_MONEY 9086 11.38 12.45 11.09 34 UNTRUSTED_Relay 8819 4.96 12.08 3.01 35 XM_Evil_Numbers_Gen 8654 10.00 11.86 9.49 36 XMNumbers 7737 4.30 10.60 2.58 37 XMSexyCombo_05 7449 6.28 10.21 5.21 38 HTML_MIME_NO_HTML_TAG 7255 3.38 9.94 1.59 39 BAYES_80 7254 4.62 9.94 3.17 40 BAYES_60 6951 6.61 9.52 5.82 41 FROM_SUSPICIOUS_NTLD 6584 1.97 9.02 0.04 42 XMSubMetaSx_00 6266 6.10 8.58 5.42 43 T_REMOTE_IMAGE 6236 4.42 8.54 3.29 44 T_XMDrugObfuBody_14 6038 7.45 8.27 7.22 45 RCVD_IN_RP_RNBL 5968 1.79 8.18 0.05 46 HTML_IMAGE_RATIO_04 5828 7.29 7.98 7.10 47 SpammyFromTLD_02 5617 1.87 7.70 0.27 48 MISSING_HEADERS 5569 1.79 7.63 0.20 49 XM_H_Long_From01 5250 6.42 7.19 6.20 50 MPART_ALT_DIFF 5085 4.74 6.97 4.14 51 HTML_SHORT_LINK_IMG_1 4994 1.52 6.84 0.06 52 MIME_HEADER_CTYPE_ONLY 4960 1.55 6.80 0.11 53 FROM_EXCESS_BASE64 4884 5.86 6.69 5.64 54 XM_UB50 4656 3.22 6.38 2.35 55 XM_SPF_SoftFail 4445 2.40 6.09 1.40 56 BODY_URI_ONLY 4425 1.33 6.06 0.04 57 HTML_IMAGE_ONLY_04 4313 1.30 5.91 0.04 58 MIME_HTML_MOSTLY 4282 4.14 5.87 3.67 59 SHORTENER_SHORT_IMG 4281 1.26 5.87 0.00 60 HTML_SHORT_CENTER 4259 1.26 5.84 0.01 61 DKIM_INVALID 4251 4.77 5.82 4.48 62 HTML_IMAGE_RATIO_06 4194 4.30 5.75 3.90 63 BAYES_95 3758 2.59 5.15 1.89 64 XM_DIRTYINTL 3541 2.64 4.85 2.03 65 XM_H_TOP 3472 1.02 4.76 0.00 66 XMStrtUSub 3187 4.83 4.37 4.96 67 XM_B_Phish_Phrases 3026 6.16 4.15 6.71 68 MIME_HTML_ONLY_MULTI 3024 2.47 4.14 2.01 69 LotsOfNums_01 2906 7.44 3.98 8.38 70 TR_Mismatch_TLD_02 2856 0.90 3.91 0.07 71 MultiRelay_Combo 2731 0.89 3.74 0.12 72 MultiRelay_CC 2731 0.89 3.74 0.12 73 XMBdyGiftCard01 2714 2.25 3.72 1.85 74 XM_CamelCaseFrm001 2646 2.29 3.63 1.93 75 DATE_IN_PAST_12_24 2567 0.85 3.52 0.12 76 RELAYCOUNTRY_CA 2559 2.34 3.51 2.02 77 REPLYTO_WITHOUT_TO_CC 2486 0.75 3.41 0.02 78 URI_HEX 2469 2.32 3.38 2.03 79 T_XMDrugObfuBody_08 2404 1.94 3.29 1.57 80 TR_LOTS_OF_MONEY1 2358 0.70 3.23 0.01 81 LongTLD 2288 0.76 3.13 0.12 82 NO_DNS_FOR_FROM 2213 1.84 3.03 1.52 83 XMSexyCombo_01 2137 1.43 2.93 1.02 84 BOTNET_NORDNS 2089 0.62 2.86 0.01 85 RCVD_IN_RP_SAFE 2076 11.89 2.84 14.36 86 T_TooManySym_01 2028 5.50 2.78 6.24 87 XM_OfRef6 1964 1.74 2.69 1.48 88 T_FILL_THIS_FORM_SHORT 1941 1.01 2.66 0.56 89 TM2_M_URI_OPT_OUT 1928 1.91 2.64 1.71 90 RELAYCOUNTRY_CN 1841 0.56 2.52 0.03 91 RCVD_IN_BL_SPAMCOP_NET 1826 0.74 2.50 0.25 92 RCVD_IN_PSBL 1821 0.61 2.49 0.10 93 XM_URI_RBL 1793 1.05 2.46 0.67 94 DKIM_ADSP_CUSTOM_MED 1778 1.08 2.44 0.71 95 XMSubMetaI_00 1750 1.33 2.40 1.04 96 UNPARSEABLE_RELAY 1723 3.94 2.36 4.38 97 NML_ADSP_CUSTOM_MED 1713 0.84 2.35 0.43 98 RCVD_IN_RP_CERTIFIED 1712 10.29 2.35 12.46 99 RCVD_IN_MSPIKE_H2 1707 3.99 2.34 4.45 100 T_Symld_Words_02 1646 0.90 2.26 0.52 101 MONEY_FRAUD_8 1645 0.48 2.25 0.00 102 ADVANCE_FEE_5_NEW_MONEY 1632 0.48 2.24 0.00 103 XM_UB60 1600 0.52 2.19 0.06 104 XM_SendGrid 1530 5.33 2.10 6.21 105 URIBL_BLACK 1519 0.51 2.08 0.08 106 RELAYCOUNTRY_DE 1440 0.69 1.97 0.33 107 MIME_QP_LONG_LINE 1405 3.96 1.92 4.52 108 DIET_1 1378 0.87 1.89 0.59 109 SUBJ_ALL_CAPS 1368 1.90 1.87 1.91 110 BODY_ENHANCEMENT 1360 0.44 1.86 0.05 111 HTML_IMAGE_RATIO_08 1342 2.32 1.84 2.45 112 MAILING_LIST_MULTI 1341 1.66 1.84 1.61 113 DATE_IN_PAST_06_12 1318 0.43 1.81 0.05 114 XMSexyCombo_04 1314 0.74 1.80 0.45 115 FORGED_GMAIL_RCVD 1295 0.67 1.77 0.37 116 BAYES_40 1285 3.32 1.76 3.75 117 SpammyFromTLD_01 1281 0.73 1.76 0.45 118 XMPhish11 1262 1.01 1.73 0.81 119 XM_salutation2 1228 0.86 1.68 0.64 120 XMDiploma_00 1180 1.37 1.62 1.31 121 XMMoneyMeta_00 1175 0.56 1.61 0.27 122 NORMAL_HTTP_TO_IP 1145 0.40 1.57 0.08 123 BAYES_20 1138 2.64 1.56 2.94 124 TVD_SPACE_RATIO_MINFP 1138 0.34 1.56 0.00 125 XMBody_17 1086 1.00 1.49 0.87 126 XMSubMetaSSx_00 1066 0.79 1.46 0.60 127 LONG_JUNK_URI 1040 0.38 1.42 0.10 128 XMSlimDrugH 1025 0.66 1.40 0.46 129 TR_Symld_Words 1023 1.61 1.40 1.66 130 TM2_M_VERY_LONG_WORD 1009 1.09 1.38 1.01 131 RDNS_DYNAMIC 986 0.78 1.35 0.62 132 RELAYCOUNTRY_GB 976 0.61 1.34 0.41 133 XMStockSpam_06 968 0.99 1.33 0.90 134 XM_H_Long_From02 959 2.40 1.31 2.69 135 NORDNS_LOW_CONTRAST 940 0.28 1.29 0.00 136 XM_UB99 933 0.28 1.28 0.01 137 XM_PDF 926 1.80 1.27 1.94 138 BAYES_00 925 13.88 1.27 17.33 139 XMPhish30 920 0.81 1.26 0.69 140 LONG_IMG_URI 916 0.33 1.25 0.07 141 FILL_THIS_FORM 909 0.63 1.25 0.47 142 TM2_M_BODY_EMPTY 907 0.49 1.24 0.28 143 TR_XM_RelayPhish 888 0.70 1.22 0.56 144 RCVD_IN_IADB_LISTED 878 3.83 1.20 4.55 145 XM_H_PHPOS 868 0.93 1.19 0.85 146 URI_TRY_3LD 866 1.55 1.19 1.65 147 RELAYCOUNTRY_FR 866 0.40 1.19 0.18 148 XMEmptyBody_01 864 0.35 1.18 0.13 149 RELAYCOUNTRY_AT 862 0.55 1.18 0.37 150 XM_BadFromFormat 857 0.35 1.17 0.12 151 ALL_TRUSTED 838 9.95 1.15 12.35 152 XMSubMetaI_01 832 0.37 1.14 0.16 153 XMGenDplmaNmb 821 0.89 1.12 0.83 154 XM_LoanWordsFrm 786 0.25 1.08 0.03 155 XMSubNoVowel 777 0.39 1.06 0.20 156 FILL_THIS_FORM_LOAN 769 0.55 1.05 0.42 157 HDRS_LCASE_IMGONLY 760 0.25 1.04 0.04 158 XMPhish14 748 0.42 1.02 0.26 159 HTML_TAG_BALANCE_BODY 736 0.60 1.01 0.48 160 XM_H_PHPMailer 732 0.73 1.00 0.65 161 BAYES_05 730 1.69 1.00 1.88 162 TR_LOTS_OF_MONEY2 729 0.57 1.00 0.46 163 T_MONEY_PERCENT 729 0.57 1.00 0.46 164 SUBJ_DOLLARS 727 0.95 1.00 0.93 165 HK_RANDOM_FROM 722 0.35 0.99 0.18 166 XMHTMLBadTable_001 715 0.77 0.98 0.71 167 RCVD_IN_IADB_SPF 711 3.34 0.97 3.98 168 MIME_CHARSET_FARAWAY 710 0.27 0.97 0.08 169 XM_ProductURIs 702 1.03 0.96 1.04 170 GMD_PDF_EMPTY_BODY 698 0.27 0.96 0.08 171 URIBL_DBL_SPAM 698 0.22 0.96 0.02 172 SUBJECT_NEEDS_ENCODING 694 0.21 0.95 0.01 173 RELAYCOUNTRY_IN 694 0.27 0.95 0.08 174 SUBJ_ILLEGAL_CHARS 693 0.21 0.95 0.01 175 CHARSET_FARAWAY_HEADER 690 0.23 0.95 0.03 176 T_HK_SPAMMY_FILENAME 686 0.20 0.94 0.00 177 HTML_IMAGE_ONLY_08 681 0.28 0.93 0.10 178 XM_UB999 648 0.20 0.89 0.01 179 FILL_THIS_FORM_LONG 645 0.52 0.88 0.42 180 RCVD_IN_IADB_SENDERID 644 2.98 0.88 3.56 181 XM_XX_Yahoo 637 0.24 0.87 0.06 182 XMSubMetaSxObfu_03 637 0.79 0.87 0.77 183 LOW_PRICE 636 0.60 0.87 0.52 184 T_XMHurry_00 631 0.91 0.86 0.93 185 TR_XM_DK_Bayes 631 12.64 0.86 15.86 186 HTTP_ESCAPED_HOST 631 0.25 0.86 0.08 187 RCVD_IN_IADB_DK 618 2.93 0.85 3.50 188 XM_OfRef7 603 0.39 0.83 0.27 189 T_TooManySym_02 600 1.78 0.82 2.05 190 XM_B_COPY_HTML 587 0.70 0.80 0.67 191 TO_NO_BRKTS_DYNIP 577 0.18 0.79 0.01 192 URI_NOVOWEL 576 0.59 0.79 0.53 193 RELAYCOUNTRY_NL 566 0.27 0.78 0.14 194 TooManyTo_002 565 1.01 0.77 1.07 195 RCVD_IN_IADB_VOUCHED 564 2.24 0.77 2.64 196 XMWhlSbjSex 545 0.22 0.75 0.08 197 HTML_SHORT_LINK_IMG_2 536 0.21 0.73 0.07 198 TR_XM_DK_Bayes1 535 12.21 0.73 15.34 199 XM_RXBody 525 0.54 0.72 0.49 200 RELAYCOUNTRY_JP 525 0.16 0.72 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 235066 88.75 91.45 88.01 2 DKIM_SIGNED 218402 80.70 76.79 81.77 3 XM_DK_Pass 215432 79.45 75.04 80.66 4 DKIM_VALID 206427 75.93 70.96 77.29 5 DKIM_VALID_AU 161120 59.80 57.90 60.32 6 XMListUnsubscribeExists 160606 61.14 64.83 60.13 7 BAYES_50 147389 52.68 43.51 55.18 8 DCC_CHECK 133673 55.54 75.66 50.05 9 DCC_CHECK_NEGATIVE 130650 43.25 22.50 48.92 10 XM_H_QuotedFrom 106952 41.37 46.20 40.04 11 HTML_FONT_LOW_CONTRAST 92881 35.03 35.98 34.78 12 DKIM_VALID_EF 82318 28.55 20.24 30.82 13 LOC_TINY_FONT_1 75412 29.75 35.28 28.23 14 T_TM2_M_HEADER_IN_MSG 66482 22.59 14.15 24.89 15 MIME_HTML_ONLY 64275 26.21 34.05 24.06 16 XMSubLong 63748 23.80 23.54 23.87 17 FVGT_m_MULTI_ODD 58476 22.36 24.06 21.89 18 T_KAM_HTML_FONT_INVALID 46377 17.05 15.90 17.36 19 BAYES_00 46289 13.88 1.27 17.33 20 TR_XM_DK_Bayes 42352 12.64 0.86 15.86 21 TR_XM_DK_Bayes1 40974 12.21 0.73 15.34 22 XM_Multi_Part_URI 40211 14.88 14.23 15.06 23 MultiRelay 39305 15.02 16.11 14.72 24 XM_DKIMWhitelistDomains 38474 11.32 0.02 14.40 25 RCVD_IN_RP_SAFE 38345 11.89 2.84 14.36 26 XM_Body_Dirty_Words 36705 15.21 20.58 13.74 27 TR_XM_DK_Bayes2 34056 10.15 0.63 12.75 28 RCVD_IN_RP_CERTIFIED 33291 10.29 2.35 12.46 29 ALL_TRUSTED 32998 9.95 1.15 12.35 30 HTML_IMAGE_RATIO_02 32926 12.83 14.66 12.33 31 LOTS_OF_MONEY 29622 11.38 12.45 11.09 32 XM_DK_Undo_02 26531 15.13 34.16 9.93 33 XM_Evil_Numbers_Gen 25350 10.00 11.86 9.49 34 LotsOfNums_01 22381 7.44 3.98 8.38 35 BAYES_99 20928 11.76 26.11 7.84 36 TooManyTo_001 19928 8.53 12.46 7.46 37 T_XMDrugObfuBody_14 19294 7.45 8.27 7.22 38 FSL_BULK_SIG 19288 8.84 14.78 7.22 39 HTML_IMAGE_RATIO_04 18967 7.29 7.98 7.10 40 XM_B_Phish_Phrases 17914 6.16 4.15 6.71 41 BAYES_999 17866 9.80 21.19 6.69 42 BOTNET_IPINHOSTNAME 17809 9.61 20.36 6.67 43 RELAYCOUNTRY_META 16784 9.01 19.01 6.28 44 T_TooManySym_01 16679 5.50 2.78 6.24 45 XM_SendGrid 16583 5.33 2.10 6.21 46 XM_H_Long_From01 16571 6.42 7.19 6.20 47 BAYES_60 15544 6.61 9.52 5.82 48 FROM_EXCESS_BASE64 15060 5.86 6.69 5.64 49 XMSubMetaSx_00 14476 6.10 8.58 5.42 50 XMSexyCombo_05 13914 6.28 10.21 5.21 51 XMStrtUSub 13251 4.83 4.37 4.96 52 RCVD_IN_IADB_LISTED 12147 3.83 1.20 4.55 53 MIME_QP_LONG_LINE 12063 3.96 1.92 4.52 54 DKIM_INVALID 11975 4.77 5.82 4.48 55 RCVD_IN_MSPIKE_H2 11875 3.99 2.34 4.45 56 TR_DCC_Bayes_99 11711 7.84 20.49 4.38 57 TO_MALFORMED 11690 3.47 0.13 4.38 58 UNPARSEABLE_RELAY 11688 3.94 2.36 4.38 59 MPART_ALT_DIFF 11050 4.74 6.97 4.14 60 RCVD_IN_IADB_SPF 10634 3.34 0.97 3.98 61 TVD_RCVD_IP 10555 3.17 0.30 3.95 62 HTML_IMAGE_RATIO_06 10419 4.30 5.75 3.90 63 XM_UncommonTLD01 10195 7.48 20.91 3.82 64 BAYES_40 10013 3.32 1.76 3.75 65 MIME_HTML_MOSTLY 9808 4.14 5.87 3.67 66 RCVD_IN_IADB_SENDERID 9501 2.98 0.88 3.56 67 RCVD_IN_IADB_DK 9338 2.93 0.85 3.50 68 IN_ZIMBRA_NJ_WHITELIST 9202 2.71 0.02 3.45 69 T_REMOTE_IMAGE 8786 4.42 8.54 3.29 70 BAYES_80 8454 4.62 9.94 3.17 71 UNTRUSTED_Relay 8046 4.96 12.08 3.01 72 BAYES_20 7845 2.64 1.56 2.94 73 XM_H_Long_From02 7194 2.40 1.31 2.69 74 RCVD_IN_IADB_VOUCHED 7059 2.24 0.77 2.64 75 INVALID_MSGID 6972 2.10 0.23 2.61 76 XMNumbers 6890 4.30 10.60 2.58 77 HTML_IMAGE_RATIO_08 6550 2.32 1.84 2.45 78 XM_UB50 6282 3.22 6.38 2.35 79 RCVD_IN_MSPIKE_WL 6188 1.93 0.50 2.32 80 RCVD_IN_MSPIKE_H3 6186 1.93 0.50 2.32 81 USER_IN_DEF_DKIM_WL 6039 1.79 0.05 2.26 82 BOTNET 5950 6.43 21.81 2.23 83 T_TooManySym_02 5466 1.78 0.82 2.05 84 URI_HEX 5428 2.32 3.38 2.03 85 XM_DIRTYINTL 5424 2.64 4.85 2.03 86 RELAYCOUNTRY_CA 5399 2.34 3.51 2.02 87 MIME_HTML_ONLY_MULTI 5363 2.47 4.14 2.01 88 XM_PDF 5180 1.80 1.27 1.94 89 TR_MetaPhish_Combo_01 5176 1.60 0.34 1.94 90 XM_CamelCaseFrm001 5143 2.29 3.63 1.93 91 SUBJ_ALL_CAPS 5102 1.90 1.87 1.91 92 BAYES_95 5035 2.59 5.15 1.89 93 BAYES_05 5029 1.69 1.00 1.88 94 XMBdyGiftCard01 4944 2.25 3.72 1.85 95 IN_HORDE_ADDRESS_BOOK 4824 1.43 0.06 1.81 96 RELAYCOUNTRY_PH 4615 1.37 0.04 1.73 97 TM2_M_URI_OPT_OUT 4556 1.91 2.64 1.71 98 TR_Symld_Words 4436 1.61 1.40 1.66 99 URI_TRY_3LD 4402 1.55 1.19 1.65 100 RCVD_IN_IADB_OPTIN 4375 1.42 0.64 1.64 101 MAILING_LIST_MULTI 4311 1.66 1.84 1.61 102 ANY_BOUNCE_MESSAGE 4248 1.29 0.18 1.59 103 BOUNCE_MESSAGE 4248 1.29 0.18 1.59 104 HTML_MIME_NO_HTML_TAG 4242 3.38 9.94 1.59 105 T_XMDrugObfuBody_08 4186 1.94 3.29 1.57 106 NO_DNS_FOR_FROM 4056 1.84 3.03 1.52 107 XM_OfRef6 3962 1.74 2.69 1.48 108 XM_SPF_SoftFail 3733 2.40 6.09 1.40 109 XM_DK_Undo_01 3695 1.23 0.66 1.38 110 XMDiploma_00 3492 1.37 1.62 1.31 111 XM_GoogleGroups 2943 0.97 0.50 1.10 112 TooManyTo_002 2857 1.01 0.77 1.07 113 XM_B_REG_HTML 2841 0.97 0.63 1.06 114 USER_IN_WHITELIST 2833 0.83 0.00 1.06 115 XM_ProductURIs 2791 1.03 0.96 1.04 116 XMSubMetaI_00 2783 1.33 2.40 1.04 117 XMSexyCombo_01 2715 1.43 2.93 1.02 118 TM2_M_VERY_LONG_WORD 2705 1.09 1.38 1.01 119 TM2_M_A_HREF_HREF 2653 0.86 0.36 0.99 120 SUBJ_DOLLARS 2492 0.95 1.00 0.93 121 T_XMHurry_00 2480 0.91 0.86 0.93 122 XMStockSpam_06 2393 0.99 1.33 0.90 123 XMBody_95 2352 0.71 0.09 0.88 124 XMBody_17 2329 1.00 1.49 0.87 125 XM_H_PHPOS 2283 0.93 1.19 0.85 126 XMGenDplmaNmb 2212 0.89 1.12 0.83 127 XMPhish11 2167 1.01 1.73 0.81 128 XMBrknScrpt_02 2151 0.76 0.57 0.81 129 XMSubMetaSxObfu_02 2135 0.78 0.71 0.80 130 XMSubMetaSxObfu_03 2045 0.79 0.87 0.77 131 XMBody_78 1974 0.73 0.68 0.74 132 TooManyTo_003 1959 0.72 0.65 0.73 133 XMHTMLBadTable_001 1900 0.77 0.98 0.71 134 DKIM_ADSP_CUSTOM_MED 1894 1.08 2.44 0.71 135 T_TooManySym_03 1886 0.59 0.16 0.71 136 XMPhish30 1851 0.81 1.26 0.69 137 PLING_QUERY 1801 0.64 0.53 0.67 138 XM_URI_RBL 1784 1.05 2.46 0.67 139 XM_B_COPY_HTML 1778 0.70 0.80 0.67 140 REMOVE_BEFORE_LINK 1749 0.60 0.40 0.65 141 XM_H_PHPMailer 1739 0.73 1.00 0.65 142 XM_salutation2 1711 0.86 1.68 0.64 143 RDNS_DYNAMIC 1661 0.78 1.35 0.62 144 XMSubMetaSSx_00 1607 0.79 1.46 0.60 145 HTML_FONT_FACE_BAD 1604 0.58 0.51 0.60 146 DIET_1 1587 0.87 1.89 0.59 147 TooManyTo_004 1510 0.56 0.53 0.57 148 T_FILL_THIS_FORM_SHORT 1509 1.01 2.66 0.56 149 TR_XM_RelayPhish 1488 0.70 1.22 0.56 150 URI_NOVOWEL 1418 0.59 0.79 0.53 151 HELO_NODOT 1410 0.49 0.33 0.53 152 LOW_PRICE 1402 0.60 0.87 0.52 153 T_Symld_Words_02 1401 0.90 2.26 0.52 154 T_XMDrugObfuBody_00 1397 0.55 0.66 0.52 155 DKIM_ADSP_NXDOMAIN 1380 0.53 0.60 0.52 156 XM_D_tchamptons_WL 1310 0.39 0.00 0.49 157 XM_RXBody 1297 0.54 0.72 0.49 158 TooManyTo_005 1292 0.48 0.46 0.48 159 HTML_TAG_BALANCE_BODY 1288 0.60 1.01 0.48 160 FILL_THIS_FORM 1246 0.63 1.25 0.47 161 XMSlimDrugH 1234 0.66 1.40 0.46 162 TR_LOTS_OF_MONEY2 1221 0.57 1.00 0.46 163 T_MONEY_PERCENT 1221 0.57 1.00 0.46 164 SpammyFromTLD_01 1208 0.73 1.76 0.45 165 XMSexyCombo_04 1193 0.74 1.80 0.45 166 NML_ADSP_CUSTOM_MED 1146 0.84 2.35 0.43 167 FILL_THIS_FORM_LONG 1121 0.52 0.88 0.42 168 RELAYCOUNTRY_AU 1109 0.41 0.40 0.42 169 FILL_THIS_FORM_LOAN 1109 0.55 1.05 0.42 170 XMHTML_After_End 1099 0.44 0.56 0.41 171 RELAYCOUNTRY_GB 1094 0.61 1.34 0.41 172 XM_H_PHPOS_M 1063 0.44 0.60 0.40 173 TR_LOTS_OF_MONEY3 1056 0.44 0.59 0.40 174 XMNoVowels 1051 0.37 0.27 0.39 175 XMLngstWrd_00 1044 0.34 0.15 0.39 176 XMCapTrack 1034 0.34 0.19 0.39 177 XM_shorewaves_Whitelist 1031 0.30 0.00 0.39 178 RELAYCOUNTRY_AT 995 0.55 1.18 0.37 179 FORGED_GMAIL_RCVD 992 0.67 1.77 0.37 180 T_TooManySym_04 965 0.30 0.06 0.36 181 XM_Body_Obfu01 962 0.34 0.28 0.36 182 XMLngstWrd_01 936 0.30 0.13 0.35 183 RELAYCOUNTRY_DE 894 0.69 1.97 0.33 184 XM_Akamai 888 0.26 0.01 0.33 185 BASE64_LENGTH_79_INF 876 0.28 0.11 0.33 186 HTTPS_HTTP_MISMATCH 834 0.38 0.62 0.31 187 T_OBFU_PDF_ATTACH 826 0.25 0.05 0.31 188 XMRcvdHeader_15 782 0.23 0.00 0.29 189 XM_H_Undi_Recip 772 0.28 0.25 0.29 190 BAD_CREDIT 763 0.26 0.15 0.29 191 TM2_M_BODY_EMPTY 760 0.49 1.24 0.28 192 NUMERIC_HTTP_ADDR 739 0.30 0.36 0.28 193 SpammyFromTLD_02 734 1.87 7.70 0.27 194 XM_OfRef7 729 0.39 0.83 0.27 195 XM_Sams_Club_Forge 721 0.21 0.01 0.27 196 XMMoneyMeta_00 720 0.56 1.61 0.27 197 XMPhish14 694 0.42 1.02 0.26 198 RCVD_IN_BL_SPAMCOP_NET 676 0.74 2.50 0.25 199 XM_S_JOY_D 670 0.29 0.45 0.25 200 XM_RedBox 670 0.20 0.00 0.25 ----------------------------------------------------------------------