Email: 376446 Autolearn: 0 AvgScore: 3.49 AvgScanTime: 2.10 sec Spam: 119552 Autolearn: 0 AvgScore: 12.95 AvgScanTime: 2.48 sec Ham: 256894 Autolearn: 0 AvgScore: -0.91 AvgScanTime: 1.92 sec Time Spent Running SA: 219.70 hours Time Spent Processing Spam: 82.43 hours Time Spent Processing Ham: 137.27 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 114679 89.29 95.92 86.20 2 DCC_CHECK 96629 58.78 80.83 48.52 3 XMListUnsubscribeExists 93886 65.28 78.53 59.12 4 DKIM_SIGNED 91920 80.26 76.89 81.82 5 XM_DK_Pass 86415 77.87 72.28 80.46 6 DKIM_VALID 84944 76.09 71.05 78.43 7 DKIM_VALID_AU 69401 59.73 58.05 60.52 8 XM_DK_Undo_02 57593 28.60 48.17 19.48 9 BAYES_99 51386 25.72 42.98 17.69 10 HTML_FONT_LOW_CONTRAST 44624 34.91 37.33 33.78 11 BAYES_999 43617 22.51 36.48 16.01 12 TR_DCC_Bayes_99 41825 16.81 34.98 8.35 13 LOC_TINY_FONT_1 40968 29.27 34.27 26.95 14 BAYES_50 38924 42.88 32.56 47.69 15 MIME_HTML_ONLY 38533 25.99 32.23 23.09 16 FVGT_m_MULTI_ODD 31129 23.34 26.04 22.09 17 BOTNET 28169 9.25 23.56 2.59 18 XMSubLong 26688 21.77 22.32 21.51 19 BOTNET_IPINHOSTNAME 24685 11.33 20.65 6.99 20 RELAYCOUNTRY_META 24261 9.59 20.29 4.61 21 DKIM_VALID_EF 23257 27.06 19.45 30.61 22 XM_Body_Dirty_Words 22380 15.35 18.72 13.79 23 DCC_CHECK_NEGATIVE 21299 40.05 17.82 50.40 24 T_KAM_HTML_FONT_INVALID 20796 16.35 17.39 15.87 25 XM_Multi_Part_URI 19382 15.18 16.21 14.71 26 XM_UncommonTLD01 18824 7.79 15.75 4.09 27 T_TM2_M_HEADER_IN_MSG 18710 21.58 15.65 24.34 28 UNTRUSTED_Relay 18212 6.17 15.23 1.95 29 LOTS_OF_MONEY 17626 12.47 14.74 11.41 30 HTML_IMAGE_RATIO_02 16957 12.67 14.18 11.96 31 XM_Evil_Numbers_Gen 15449 10.97 12.92 10.07 32 FSL_BULK_SIG 14447 9.82 12.08 8.76 33 MultiRelay 13565 14.88 11.35 16.52 34 TooManyTo_001 11173 6.98 9.35 5.87 35 LotsOfNums_01 11104 8.59 9.29 8.27 36 HTML_IMAGE_RATIO_04 11061 7.21 9.25 6.26 37 XMSexyCombo_05 10695 5.70 8.95 4.19 38 XM_B_SpammyTLD 10541 5.90 8.82 4.54 39 FROM_SUSPICIOUS_NTLD 10265 2.83 8.59 0.15 40 DKIM_ADSP_NXDOMAIN 9545 3.29 7.98 1.10 41 SpammyFromTLD_02 9178 2.58 7.68 0.21 42 XMSubMetaSx_00 8681 5.15 7.26 4.17 43 T_XMDrugObfuBody_14 8488 7.62 7.10 7.86 44 BAYES_80 8325 5.35 6.96 4.59 45 XM_B_Phish_Phrases 7974 7.04 6.67 7.21 46 MPART_ALT_DIFF 7886 4.88 6.60 4.07 47 BAYES_60 7562 6.53 6.33 6.63 48 T_REMOTE_IMAGE 7179 4.47 6.00 3.75 49 XM_H_Long_From01 7108 6.48 5.95 6.73 50 XM_UB50 7001 2.62 5.86 1.12 51 DKIM_INVALID 6976 4.17 5.84 3.39 52 RELAYCOUNTRY_FR 6671 2.09 5.58 0.47 53 HTML_MIME_NO_HTML_TAG 6661 3.02 5.57 1.83 54 RCVD_IN_PSBL 6487 1.78 5.43 0.09 55 RCVD_IN_BL_SPAMCOP_NET 6182 1.97 5.17 0.49 56 RCVD_IN_RP_SAFE 5572 12.07 4.66 15.51 57 XM_DIRTYINTL 5303 3.42 4.44 2.94 58 FROM_EXCESS_BASE64 5213 5.17 4.36 5.55 59 HTML_IMAGE_RATIO_06 5169 3.87 4.32 3.66 60 DATE_IN_PAST_12_24 5155 1.44 4.31 0.10 61 RELAYCOUNTRY_DE 4962 1.61 4.15 0.42 62 BAYES_95 4866 3.31 4.07 2.95 63 NUMERIC_HTTP_ADDR 4736 1.43 3.96 0.25 64 XM_H_TOP 4669 1.24 3.91 0.00 65 XMBdyGiftCard01 4647 2.21 3.89 1.44 66 PDS_TO_EQ_FROM_NAME 4607 1.37 3.85 0.22 67 BOTNET_NORDNS 4411 1.19 3.69 0.03 68 MIME_QP_LONG_LINE 4410 4.40 3.69 4.73 69 NORMAL_HTTP_TO_IP 4407 1.20 3.69 0.04 70 SUBJ_ALL_CAPS 4362 3.15 3.65 2.92 71 MIME_HTML_ONLY_MULTI 4297 2.57 3.59 2.10 72 TR_M_TOP_BAYES 4251 1.13 3.56 0.00 73 URI_HEX 4237 2.58 3.54 2.13 74 RELAYCOUNTRY_CA 4189 2.16 3.50 1.54 75 MIME_HEADER_CTYPE_ONLY 4142 1.21 3.46 0.16 76 XMStrtUSub 4132 4.45 3.46 4.92 77 MIME_HTML_MOSTLY 4095 2.92 3.43 2.68 78 RCVD_IN_RP_CERTIFIED 3857 10.74 3.23 14.23 79 TR_LOTS_OF_MONEY3 3756 1.52 3.14 0.76 80 NORDNS_LOW_CONTRAST 3748 1.00 3.14 0.01 81 XM_SendGrid 3681 6.35 3.08 7.88 82 XM_CamelCaseFrm001 3613 2.12 3.02 1.71 83 XMSubMetaI_00 3567 2.02 2.98 1.57 84 NO_DNS_FOR_FROM 3550 1.89 2.97 1.39 85 URIBL_DBL_ABUSE_REDIR 3486 0.96 2.92 0.06 86 URI_TRY_3LD 3392 2.13 2.84 1.81 87 BAYES_40 3363 3.03 2.81 3.13 88 XMDiploma_00 3326 2.05 2.78 1.71 89 XMBody_17 3320 1.40 2.78 0.76 90 XM_URI_RBL 3273 1.31 2.74 0.64 91 T_MONEY_PERCENT 3222 1.26 2.70 0.59 92 TR_LOTS_OF_MONEY2 3222 1.26 2.70 0.59 93 T_TooManySym_01 2971 5.56 2.49 6.99 94 RCVD_IN_MSPIKE_H2 2871 3.84 2.40 4.51 95 TR_XM_PHPDW 2826 1.22 2.36 0.69 96 TR_XM_PHPForged 2767 1.20 2.31 0.68 97 XMSexyCombo_01 2764 1.22 2.31 0.71 98 HTML_IMAGE_RATIO_08 2754 2.27 2.30 2.25 99 TR_XM_FormFill2 2742 1.19 2.29 0.67 100 XM_H_PHPOS 2713 1.18 2.27 0.67 101 DIET_1 2686 1.03 2.25 0.47 102 XMNumbers 2680 3.01 2.24 3.37 103 T_XMDrugObfuBody_08 2668 1.48 2.23 1.14 104 XM_H_Long_From02 2653 1.49 2.22 1.15 105 TM2_M_URI_OPT_OUT 2499 1.55 2.09 1.31 106 XM_SPF_SoftFail 2453 1.33 2.05 0.99 107 T_HTML_TAG_BALANCE_CENTER 2442 0.72 2.04 0.10 108 HTML_IMAGE_ONLY_20 2360 0.79 1.97 0.24 109 RCVD_IN_IADB_LISTED 2343 4.00 1.96 4.96 110 XMBody_78 2333 0.96 1.95 0.49 111 XM_UB60 2223 0.65 1.86 0.09 112 T_XMHurry_00 2215 1.48 1.85 1.31 113 BODY_URI_ONLY 2209 0.61 1.85 0.04 114 ALL_TRUSTED 2185 9.73 1.83 13.41 115 XM_OfRef6 2162 1.80 1.81 1.80 116 RCVD_IN_IADB_SPF 2153 3.44 1.80 4.21 117 SpammyFromTLD_01 2148 0.84 1.80 0.40 118 HTML_IMAGE_ONLY_12 2135 0.69 1.79 0.19 119 BAYES_20 2111 2.35 1.77 2.62 120 HTML_FONT_SIZE_LARGE 2087 0.67 1.75 0.17 121 RCVD_IN_RP_RNBL 2076 0.61 1.74 0.09 122 RCVD_IN_IADB_SENDERID 2066 3.07 1.73 3.69 123 RCVD_IN_IADB_DK 2066 2.97 1.73 3.55 124 TR_Caps_n_Bayes_99 2039 0.97 1.71 0.63 125 MultiRelay_Combo 2037 0.66 1.70 0.17 126 MultiRelay_CC 2037 0.66 1.70 0.17 127 HDRS_LCASE_IMGONLY 2019 0.57 1.69 0.04 128 HTML_SHORT_LINK_IMG_2 2012 0.57 1.68 0.06 129 XM_UB99 1905 0.51 1.59 0.01 130 DATE_IN_PAST_06_12 1860 0.53 1.56 0.06 131 BAYES_00 1850 9.15 1.55 12.69 132 XMGetyour 1728 0.48 1.45 0.03 133 MAILING_LIST_MULTI 1703 1.77 1.42 1.93 134 XM_HighProb1 1677 0.50 1.40 0.08 135 TR_XM_DK_SendGrid 1671 3.26 1.40 4.12 136 XM_ProductURIs 1667 1.06 1.39 0.91 137 RELAYCOUNTRY_AT 1619 0.59 1.35 0.23 138 XMMoneyMeta_00 1592 0.59 1.33 0.25 139 XM_H_PHPMailer 1589 0.81 1.33 0.57 140 XM_B_REG_HTML 1585 0.79 1.33 0.54 141 XM_UB80 1525 0.42 1.28 0.03 142 XM_H_PHPOS_M 1448 0.62 1.21 0.35 143 XMGenDplmaNmb 1420 0.86 1.19 0.70 144 XMSexyCombo_04 1416 0.50 1.18 0.19 145 BODY_ENHANCEMENT 1391 0.42 1.16 0.07 146 XMSlimDrugH 1371 0.49 1.15 0.19 147 T_XMDrugObfuBody_00 1360 0.96 1.14 0.88 148 TR_XM_RelayPhish 1333 1.17 1.11 1.19 149 TM2_M_VERY_LONG_WORD 1325 1.53 1.11 1.72 150 XMHTML_After_End 1287 0.52 1.08 0.27 151 XMStockSpam_06 1266 1.31 1.06 1.43 152 UNPARSEABLE_RELAY 1237 3.22 1.03 4.24 153 XMClaimOffer 1236 0.41 1.03 0.12 154 LONG_IMG_URI 1224 0.36 1.02 0.05 155 URIBL_BLACK 1209 0.37 1.01 0.07 156 HTML_IMAGE_ONLY_32 1207 0.52 1.01 0.30 157 T_Symld_Words_02 1200 0.69 1.00 0.54 158 XMPhish11 1197 1.07 1.00 1.10 159 XMPhish30 1189 0.73 0.99 0.61 160 DATE_IN_PAST_03_06 1162 0.36 0.97 0.07 161 HTML_FONT_FACE_BAD 1160 0.73 0.97 0.62 162 XMSubMetaSxObfu_03 1160 0.72 0.97 0.61 163 XM_UB999 1157 0.31 0.97 0.01 164 SUBJ_DOLLARS 1110 0.80 0.93 0.75 165 DKIM_ADSP_CUSTOM_MED 1094 0.82 0.92 0.78 166 XMBrknScrpt_02 1043 0.78 0.87 0.74 167 XMNoVowels 1032 0.56 0.86 0.42 168 XMWghtMeta_00 1032 0.28 0.86 0.01 169 RELAYCOUNTRY_IN 1014 0.32 0.85 0.08 170 THIS_AD 984 0.82 0.82 0.81 171 XM_UB95 982 0.27 0.82 0.02 172 FROM_DOMAIN_NOVOWEL 978 0.31 0.82 0.08 173 BASE64_LENGTH_79_INF 973 0.43 0.81 0.25 174 HTML_OFF_PAGE 962 0.26 0.80 0.00 175 NML_ADSP_CUSTOM_MED 945 0.61 0.79 0.53 176 XMSubMetaD_03 940 0.34 0.79 0.13 177 RELAYCOUNTRY_GB 937 0.63 0.78 0.55 178 HTML_TAG_BALANCE_BODY 928 0.82 0.78 0.84 179 SHORT_URI_3 928 0.36 0.78 0.17 180 BAYES_05 925 1.43 0.77 1.73 181 MPART_ALT_DIFF_COUNT 920 0.47 0.77 0.34 182 XMHTMLBadTable_001 917 0.53 0.77 0.42 183 URI_PHP_REDIR 914 0.25 0.76 0.00 184 FORGED_GMAIL_RCVD 912 0.53 0.76 0.42 185 URI_NOVOWEL 896 0.52 0.75 0.42 186 HOSTED_IMG_DIRECT_MX 887 0.24 0.74 0.00 187 XM_XX_Yahoo 866 0.34 0.72 0.15 188 LONG_JUNK_URI 858 0.32 0.72 0.13 189 XMSubMetaI_01 851 0.29 0.71 0.09 190 XMGppyBdWords 842 0.38 0.70 0.24 191 EBAY_IMG_NOT_RCVD_EBAY 838 0.22 0.70 0.00 192 TM2_M_A_HREF_HREF 831 1.07 0.70 1.24 193 XMSubMetaSSx_00 826 0.38 0.69 0.23 194 T_TooManySym_02 815 1.58 0.68 2.00 195 HK_RANDOM_FROM 812 0.30 0.68 0.12 196 RCVD_IN_IADB_VOUCHED 810 2.51 0.68 3.36 197 XM_E_Blogspot 809 0.30 0.68 0.12 198 TR_Symld_Words 803 1.47 0.67 1.85 199 TR_XM_DK_Bayes 801 8.13 0.67 11.61 200 RDNS_DYNAMIC 793 0.60 0.66 0.58 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 221454 89.29 95.92 86.20 2 DKIM_SIGNED 210200 80.26 76.89 81.82 3 XM_DK_Pass 206707 77.87 72.28 80.46 4 DKIM_VALID 201492 76.09 71.05 78.43 5 DKIM_VALID_AU 155462 59.73 58.05 60.52 6 XMListUnsubscribeExists 151871 65.28 78.53 59.12 7 DCC_CHECK_NEGATIVE 129470 40.05 17.82 50.40 8 DCC_CHECK 124647 58.78 80.83 48.52 9 BAYES_50 122510 42.88 32.56 47.69 10 HTML_FONT_LOW_CONTRAST 86775 34.91 37.33 33.78 11 DKIM_VALID_EF 78626 27.06 19.45 30.61 12 LOC_TINY_FONT_1 69230 29.27 34.27 26.95 13 T_TM2_M_HEADER_IN_MSG 62540 21.58 15.65 24.34 14 MIME_HTML_ONLY 59318 25.99 32.23 23.09 15 FVGT_m_MULTI_ODD 56737 23.34 26.04 22.09 16 XMSubLong 55246 21.77 22.32 21.51 17 XM_DK_Undo_02 50053 28.60 48.17 19.48 18 BAYES_99 45435 25.72 42.98 17.69 19 MultiRelay 42446 14.88 11.35 16.52 20 BAYES_999 41136 22.51 36.48 16.01 21 T_KAM_HTML_FONT_INVALID 40761 16.35 17.39 15.87 22 RCVD_IN_RP_SAFE 39851 12.07 4.66 15.51 23 XM_Multi_Part_URI 37780 15.18 16.21 14.71 24 RCVD_IN_RP_CERTIFIED 36560 10.74 3.23 14.23 25 XM_Body_Dirty_Words 35413 15.35 18.72 13.79 26 ALL_TRUSTED 34449 9.73 1.83 13.41 27 BAYES_00 32599 9.15 1.55 12.69 28 HTML_IMAGE_RATIO_02 30720 12.67 14.18 11.96 29 TR_XM_DK_Bayes 29818 8.13 0.67 11.61 30 XM_DKIMWhitelistDomains 29540 8.06 0.66 11.50 31 LOTS_OF_MONEY 29307 12.47 14.74 11.41 32 TR_XM_DK_Bayes1 29225 7.97 0.66 11.38 33 TR_XM_DK_Bayes2 25879 7.07 0.62 10.07 34 XM_Evil_Numbers_Gen 25861 10.97 12.92 10.07 35 FSL_BULK_SIG 22504 9.82 12.08 8.76 36 TR_DCC_Bayes_99 21444 16.81 34.98 8.35 37 LotsOfNums_01 21240 8.59 9.29 8.27 38 XM_SendGrid 20241 6.35 3.08 7.88 39 T_XMDrugObfuBody_14 20193 7.62 7.10 7.86 40 XM_B_Phish_Phrases 18518 7.04 6.67 7.21 41 BOTNET_IPINHOSTNAME 17962 11.33 20.65 6.99 42 T_TooManySym_01 17950 5.56 2.49 6.99 43 XM_H_Long_From01 17291 6.48 5.95 6.73 44 BAYES_60 17034 6.53 6.33 6.63 45 TO_MALFORMED 16795 4.48 0.04 6.54 46 HTML_IMAGE_RATIO_04 16089 7.21 9.25 6.26 47 TooManyTo_001 15085 6.98 9.35 5.87 48 FROM_EXCESS_BASE64 14251 5.17 4.36 5.55 49 RCVD_IN_IADB_LISTED 12731 4.00 1.96 4.96 50 XMStrtUSub 12637 4.45 3.46 4.92 51 MIME_QP_LONG_LINE 12152 4.40 3.69 4.73 52 RELAYCOUNTRY_META 11852 9.59 20.29 4.61 53 BAYES_80 11799 5.35 6.96 4.59 54 XM_B_SpammyTLD 11671 5.90 8.82 4.54 55 RCVD_IN_MSPIKE_H2 11589 3.84 2.40 4.51 56 UNPARSEABLE_RELAY 10897 3.22 1.03 4.24 57 RCVD_IN_IADB_SPF 10810 3.44 1.80 4.21 58 XMSexyCombo_05 10753 5.70 8.95 4.19 59 XMSubMetaSx_00 10709 5.15 7.26 4.17 60 TR_XM_DK_SendGrid 10587 3.26 1.40 4.12 61 XM_UncommonTLD01 10511 7.79 15.75 4.09 62 MPART_ALT_DIFF 10468 4.88 6.60 4.07 63 IN_ZIMBRA_NJ_WHITELIST 9870 2.63 0.01 3.84 64 T_REMOTE_IMAGE 9645 4.47 6.00 3.75 65 RCVD_IN_IADB_SENDERID 9478 3.07 1.73 3.69 66 HTML_IMAGE_RATIO_06 9401 3.87 4.32 3.66 67 RCVD_IN_IADB_DK 9121 2.97 1.73 3.55 68 TVD_RCVD_IP 9120 2.51 0.28 3.55 69 DKIM_INVALID 8708 4.17 5.84 3.39 70 XMNumbers 8645 3.01 2.24 3.37 71 RCVD_IN_IADB_VOUCHED 8625 2.51 0.68 3.36 72 BAYES_40 8045 3.03 2.81 3.13 73 BAYES_95 7590 3.31 4.07 2.95 74 XM_DIRTYINTL 7554 3.42 4.44 2.94 75 SUBJ_ALL_CAPS 7496 3.15 3.65 2.92 76 INVALID_MSGID 7231 2.02 0.33 2.81 77 RCVD_IN_MSPIKE_WL 7144 2.00 0.32 2.78 78 RCVD_IN_MSPIKE_H3 7144 2.00 0.32 2.78 79 MIME_HTML_MOSTLY 6888 2.92 3.43 2.68 80 BAYES_20 6721 2.35 1.77 2.62 81 BOTNET 6660 9.25 23.56 2.59 82 XM_PDF 6310 1.74 0.20 2.46 83 TR_MetaPhish_Combo_01 5904 1.69 0.40 2.30 84 HTML_IMAGE_RATIO_08 5792 2.27 2.30 2.25 85 RCVD_IN_IADB_OPTIN 5741 1.67 0.45 2.23 86 URI_HEX 5463 2.58 3.54 2.13 87 MIME_HTML_ONLY_MULTI 5384 2.57 3.59 2.10 88 IN_HORDE_ADDRESS_BOOK 5162 1.39 0.04 2.01 89 T_TooManySym_02 5135 1.58 0.68 2.00 90 UNTRUSTED_Relay 5012 6.17 15.23 1.95 91 MAILING_LIST_MULTI 4953 1.77 1.42 1.93 92 USER_IN_DEF_DKIM_WL 4791 1.28 0.02 1.86 93 TR_Symld_Words 4745 1.47 0.67 1.85 94 HTML_MIME_NO_HTML_TAG 4712 3.02 5.57 1.83 95 URI_TRY_3LD 4638 2.13 2.84 1.81 96 XM_OfRef6 4626 1.80 1.81 1.80 97 ANY_BOUNCE_MESSAGE 4473 1.26 0.22 1.74 98 BOUNCE_MESSAGE 4469 1.26 0.21 1.74 99 BAYES_05 4447 1.43 0.77 1.73 100 TM2_M_VERY_LONG_WORD 4427 1.53 1.11 1.72 101 XMDiploma_00 4382 2.05 2.78 1.71 102 XM_CamelCaseFrm001 4381 2.12 3.02 1.71 103 XMSubMetaI_00 4040 2.02 2.98 1.57 104 RELAYCOUNTRY_CA 3953 2.16 3.50 1.54 105 XMBdyGiftCard01 3690 2.21 3.89 1.44 106 XMStockSpam_06 3681 1.31 1.06 1.43 107 XM_DK_Undo_01 3625 1.17 0.66 1.41 108 NO_DNS_FOR_FROM 3564 1.89 2.97 1.39 109 FILL_THIS_FORM 3430 1.04 0.40 1.34 110 T_XMHurry_00 3371 1.48 1.85 1.31 111 TM2_M_URI_OPT_OUT 3353 1.55 2.09 1.31 112 TM2_M_A_HREF_HREF 3191 1.07 0.70 1.24 113 TR_XM_RelayPhish 3066 1.17 1.11 1.19 114 XM_GoogleGroups 3048 1.00 0.59 1.19 115 XM_H_Long_From02 2946 1.49 2.22 1.15 116 TooManyTo_002 2920 0.94 0.51 1.14 117 T_XMDrugObfuBody_08 2917 1.48 2.23 1.14 118 XM_UB50 2870 2.62 5.86 1.12 119 DKIM_ADSP_NXDOMAIN 2833 3.29 7.98 1.10 120 XMPhish11 2816 1.07 1.00 1.10 121 XM_SPF_SoftFail 2553 1.33 2.05 0.99 122 XMBody_95 2503 0.70 0.10 0.97 123 USER_IN_WHITELIST 2395 0.64 0.00 0.93 124 XM_ProductURIs 2334 1.06 1.39 0.91 125 T_XMDrugObfuBody_00 2268 0.96 1.14 0.88 126 XM_D_tchamptons_WL 2159 0.57 0.00 0.84 127 HTML_TAG_BALANCE_BODY 2149 0.82 0.78 0.84 128 THIS_AD 2089 0.82 0.82 0.81 129 TooManyTo_003 2056 0.67 0.40 0.80 130 DKIM_ADSP_CUSTOM_MED 2006 0.82 0.92 0.78 131 TR_LOTS_OF_MONEY3 1952 1.52 3.14 0.76 132 XMBody_17 1948 1.40 2.78 0.76 133 SUBJ_DOLLARS 1918 0.80 0.93 0.75 134 XMBrknScrpt_02 1893 0.78 0.87 0.74 135 XM_B_COPY_HTML 1866 0.68 0.58 0.73 136 XMSexyCombo_01 1824 1.22 2.31 0.71 137 XMGenDplmaNmb 1811 0.86 1.19 0.70 138 TR_XM_PHPDW 1768 1.22 2.36 0.69 139 T_TooManySym_03 1764 0.53 0.19 0.69 140 TR_XM_PHPForged 1744 1.20 2.31 0.68 141 TR_XM_FormFill2 1719 1.19 2.29 0.67 142 XM_H_PHPOS 1716 1.18 2.27 0.67 143 XMSubMetaSxObfu_02 1715 0.58 0.38 0.67 144 TooManyTo_004 1690 0.55 0.33 0.66 145 XM_URI_RBL 1650 1.31 2.74 0.64 146 TR_Caps_n_Bayes_99 1613 0.97 1.71 0.63 147 HTML_FONT_FACE_BAD 1587 0.73 0.97 0.62 148 XMPhish30 1574 0.73 0.99 0.61 149 XMSubMetaSxObfu_03 1556 0.72 0.97 0.61 150 T_MONEY_PERCENT 1522 1.26 2.70 0.59 151 TR_LOTS_OF_MONEY2 1522 1.26 2.70 0.59 152 PLING_QUERY 1517 0.54 0.42 0.59 153 TooManyTo_005 1490 0.48 0.27 0.58 154 RDNS_DYNAMIC 1479 0.60 0.66 0.58 155 XM_H_PHPMailer 1460 0.81 1.33 0.57 156 RELAYCOUNTRY_GB 1425 0.63 0.78 0.55 157 XM_B_REG_HTML 1394 0.79 1.33 0.54 158 HTTPS_HTTP_MISMATCH 1392 0.49 0.38 0.54 159 T_Symld_Words_02 1386 0.69 1.00 0.54 160 NML_ADSP_CUSTOM_MED 1370 0.61 0.79 0.53 161 XMRcvdHeader_15 1331 0.35 0.00 0.52 162 HELO_NODOT 1297 0.42 0.25 0.50 163 HELO_NO_DOMAIN 1296 0.42 0.24 0.50 164 XMBody_78 1267 0.96 1.95 0.49 165 RCVD_IN_BL_SPAMCOP_NET 1248 1.97 5.17 0.49 166 XM_Body_Obfu01 1228 0.40 0.22 0.48 167 T_FILL_THIS_FORM_SHORT 1213 0.49 0.53 0.47 168 FILL_THIS_FORM_LONG 1209 0.41 0.27 0.47 169 RELAYCOUNTRY_FR 1203 2.09 5.58 0.47 170 DIET_1 1197 1.03 2.25 0.47 171 XMLngstWrd_00 1168 0.45 0.45 0.45 172 T_OBFU_PDF_ATTACH 1132 0.33 0.08 0.44 173 FILL_THIS_FORM_LOAN 1118 0.35 0.17 0.44 174 RELAYCOUNTRY_AU 1112 0.46 0.51 0.43 175 XMNoVowels 1088 0.56 0.86 0.42 176 XMHTMLBadTable_001 1087 0.53 0.77 0.42 177 FORGED_GMAIL_RCVD 1086 0.53 0.76 0.42 178 RELAYCOUNTRY_DE 1084 1.61 4.15 0.42 179 LOW_PRICE 1076 0.38 0.29 0.42 180 URI_NOVOWEL 1067 0.52 0.75 0.42 181 XMLngstWrd_01 1064 0.42 0.42 0.41 182 SpammyFromTLD_01 1023 0.84 1.80 0.40 183 FSL_THIS_IS_ADV 1002 0.37 0.33 0.39 184 XMCapTrack 979 0.32 0.18 0.38 185 XM_Akamai 973 0.26 0.00 0.38 186 XM_RXBody 967 0.44 0.58 0.38 187 XMSUPPORT 958 0.25 0.00 0.37 188 XMGappySubj_01 944 0.35 0.31 0.37 189 XMSolicitRefs_0 907 0.42 0.55 0.35 190 XM_ShortIntro_01 901 0.31 0.22 0.35 191 XM_H_PHPOS_M 898 0.62 1.21 0.35 192 TM2_M_BODY_EMPTY 897 0.28 0.14 0.35 193 T_TooManySym_04 877 0.25 0.06 0.34 194 XM_H_SpoofStaff4 875 0.24 0.02 0.34 195 MPART_ALT_DIFF_COUNT 867 0.47 0.77 0.34 196 GAPPY_SUBJECT 819 0.39 0.53 0.32 197 REMOVE_BEFORE_LINK 772 0.34 0.42 0.30 198 XM_Walgreens_Forge 767 0.29 0.26 0.30 199 HTML_IMAGE_ONLY_32 764 0.52 1.01 0.30 200 XMBSHREFv2 763 0.23 0.08 0.30 ----------------------------------------------------------------------