Email: 352149 Autolearn: 0 AvgScore: 2.90 AvgScanTime: 2.20 sec Spam: 95255 Autolearn: 0 AvgScore: 12.07 AvgScanTime: 2.61 sec Ham: 256894 Autolearn: 0 AvgScore: -0.50 AvgScanTime: 2.04 sec Time Spent Running SA: 214.93 hours Time Spent Processing Spam: 69.06 hours Time Spent Processing Ham: 145.87 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 89497 86.17 93.96 83.28 2 DKIM_SIGNED 83258 81.67 87.41 79.55 3 XM_DK_Pass 79614 79.58 83.58 78.10 4 DCC_CHECK 76347 55.46 80.15 46.30 5 DKIM_VALID 75402 76.13 79.16 75.01 6 XMListUnsubscribeExists 74264 61.86 77.96 55.88 7 DKIM_VALID_AU 58652 58.20 61.57 56.95 8 XM_DK_Undo_02 51878 28.66 54.46 19.09 9 BAYES_99 45642 25.84 47.92 17.66 10 BAYES_999 38743 22.66 40.67 15.98 11 HTML_FONT_LOW_CONTRAST 36530 34.97 38.35 33.72 12 TR_DCC_Bayes_99 36365 16.07 38.18 7.87 13 LOC_TINY_FONT_1 33007 29.33 34.65 27.35 14 BAYES_50 30495 45.27 32.01 50.18 15 MIME_HTML_ONLY 30071 24.96 31.57 22.51 16 FVGT_m_MULTI_ODD 29476 24.37 30.94 21.94 17 XMSubLong 23545 23.51 24.72 23.07 18 XM_Body_Dirty_Words 22904 17.78 24.04 15.46 19 T_KAM_HTML_FONT_INVALID 19764 17.11 20.75 15.76 20 XM_Multi_Part_URI 18745 16.74 19.68 15.65 21 DCC_CHECK_NEGATIVE 18047 43.49 18.95 52.59 22 DKIM_VALID_EF 17918 27.59 18.81 30.84 23 T_TM2_M_HEADER_IN_MSG 17182 22.54 18.04 24.21 24 BOTNET 15854 5.92 16.64 1.95 25 MultiRelay 15764 16.84 16.55 16.94 26 RELAYCOUNTRY_META 15345 7.42 16.11 4.20 27 HTML_IMAGE_RATIO_02 15242 11.54 16.00 9.89 28 LOTS_OF_MONEY 14336 13.03 15.05 12.28 29 HTML_IMAGE_RATIO_04 12853 8.74 13.49 6.98 30 BOTNET_IPINHOSTNAME 12664 8.14 13.29 6.23 31 XM_Evil_Numbers_Gen 12170 10.49 12.78 9.64 32 XMSexyCombo_05 10681 6.25 11.21 4.40 33 XMSubMetaSx_00 9176 6.47 9.63 5.30 34 FSL_BULK_SIG 8709 9.54 9.14 9.69 35 UNTRUSTED_Relay 8416 3.39 8.84 1.38 36 LotsOfNums_01 8235 7.84 8.65 7.55 37 DKIM_INVALID 7856 5.54 8.25 4.54 38 T_XMDrugObfuBody_14 7802 7.67 8.19 7.48 39 XM_UncommonTLD01 7772 6.09 8.16 5.32 40 TooManyTo_001 6779 6.10 7.12 5.72 41 FROM_EXCESS_BASE64 6473 5.62 6.80 5.18 42 MPART_ALT_DIFF 6422 4.68 6.74 3.92 43 BAYES_80 6197 4.72 6.51 4.05 44 XM_B_Phish_Phrases 6120 6.16 6.42 6.06 45 XM_H_Long_From01 5944 7.34 6.24 7.75 46 RCVD_IN_MSPIKE_BL 5896 3.21 6.19 2.11 47 XM_DIRTYINTL 5399 3.62 5.67 2.86 48 RCVD_IN_RP_SAFE 5398 11.86 5.67 14.16 49 BAYES_60 5352 5.95 5.62 6.07 50 RCVD_IN_MSPIKE_L5 5131 2.11 5.39 0.90 51 US_DOLLARS_3 5129 5.07 5.38 4.96 52 MIME_QP_LONG_LINE 4875 4.41 5.12 4.15 53 XMBdyGiftCard01 4795 2.70 5.03 1.83 54 URI_HEX 4536 3.12 4.76 2.52 55 RCVD_IN_RP_CERTIFIED 4408 10.56 4.63 12.76 56 RELAYCOUNTRY_CA 4325 2.36 4.54 1.55 57 MIME_HTML_ONLY_MULTI 4132 2.67 4.34 2.05 58 HTML_IMAGE_RATIO_06 4083 3.91 4.29 3.77 59 T_REMOTE_IMAGE 4065 4.58 4.27 4.69 60 XM_SendGrid 3852 6.49 4.04 7.40 61 BAYES_95 3788 3.28 3.98 3.03 62 MIME_HTML_MOSTLY 3756 3.10 3.94 2.79 63 RCVD_IN_MSPIKE_H2 3709 6.39 3.89 7.32 64 XM_CamelCaseFrm001 3699 2.31 3.88 1.72 65 XM_ProductURIs 3696 1.82 3.88 1.05 66 XMSexyCombo_01 3676 2.00 3.86 1.31 67 XM_UB50 3595 1.62 3.77 0.82 68 XMStrtUSub 3293 4.40 3.46 4.75 69 XM_B_SpammyTLD 3132 4.17 3.29 4.50 70 XM_URI_RBL 3120 1.41 3.28 0.71 71 BOTNET_NORDNS 3032 0.87 3.18 0.01 72 XM_SPF_SoftFail 2932 1.55 3.08 0.98 73 TR_XM_PHPDW 2905 2.80 3.05 2.71 74 TM2_M_URI_OPT_OUT 2860 1.78 3.00 1.32 75 TR_XM_PHPForged 2846 2.56 2.99 2.40 76 TR_XM_FormFill2 2821 1.29 2.96 0.67 77 XM_H_PHPOS 2802 1.28 2.94 0.67 78 RCVD_IN_IADB_LISTED 2800 4.66 2.94 5.30 79 XMDiploma_00 2741 2.23 2.88 1.99 80 SUBJ_ALL_CAPS 2736 2.53 2.87 2.41 81 HTML_IMAGE_RATIO_08 2704 2.12 2.84 1.85 82 RCVD_IN_MSPIKE_WL 2642 6.00 2.77 7.20 83 T_TooManySym_01 2625 6.14 2.76 7.39 84 RCVD_IN_MSPIKE_H3 2495 5.53 2.62 6.61 85 XMNumbers 2446 2.99 2.57 3.15 86 RCVD_IN_IADB_SPF 2437 3.92 2.56 4.42 87 T_XMDrugObfuBody_08 2380 1.68 2.50 1.38 88 XM_OfRef6 2335 1.76 2.45 1.50 89 RCVD_IN_IADB_SENDERID 2310 3.38 2.43 3.74 90 RCVD_IN_IADB_DK 2287 3.25 2.40 3.56 91 KHOP_HELO_FCRDNS 2215 1.48 2.33 1.16 92 NO_DNS_FOR_FROM 2152 1.56 2.26 1.30 93 SpammyFromTLD_02 2151 0.79 2.26 0.24 94 LOW_PRICE 2132 0.73 2.24 0.18 95 RCVD_IN_PSBL 2091 0.67 2.20 0.11 96 RCVD_IN_BL_SPAMCOP_NET 2077 0.95 2.18 0.49 97 XM_B_REG_HTML 2007 0.90 2.11 0.46 98 ALL_TRUSTED 1996 12.52 2.10 16.38 99 RCVD_IN_RP_RNBL 1965 0.59 2.06 0.04 100 T_XMHurry_00 1948 1.04 2.05 0.66 101 SpammyFromTLD_01 1926 0.82 2.02 0.37 102 MultiRelay_CC 1903 0.64 2.00 0.14 103 MultiRelay_Combo 1903 0.64 2.00 0.14 104 XMSubMetaI_00 1851 1.10 1.94 0.79 105 XMSexyCombo_04 1798 0.65 1.89 0.19 106 DIET_1 1745 0.83 1.83 0.46 107 RELAYCOUNTRY_GB 1706 0.87 1.79 0.53 108 MAILING_LIST_MULTI 1678 1.85 1.76 1.88 109 T_XMDrugObfuBody_00 1671 1.38 1.75 1.24 110 XMBody_17 1659 0.96 1.74 0.67 111 XM_UB99 1617 0.47 1.70 0.01 112 TM2_M_VERY_LONG_WORD 1614 1.42 1.69 1.32 113 XM_HighProb1 1598 0.57 1.68 0.16 114 TR_XM_DK_SendGrid 1594 3.08 1.67 3.60 115 RELAYCOUNTRY_FR 1562 0.64 1.64 0.27 116 HTML_IMAGE_ONLY_16 1543 0.58 1.62 0.19 117 DKIM_ADSP_CUSTOM_MED 1530 2.06 1.61 2.23 118 TR_Symld_Words 1458 2.23 1.53 2.48 119 BAYES_40 1445 2.84 1.52 3.33 120 T_Symld_Words_02 1434 1.18 1.51 1.06 121 XM_H_PHPMailer 1379 2.30 1.45 2.61 122 BODY_ENHANCEMENT 1376 0.44 1.44 0.07 123 XMGenDplmaNmb 1376 0.96 1.44 0.78 124 XM_DrugUnitList 1350 0.39 1.42 0.00 125 ALIBABA_IMG_NOT_RCVD_ALI 1350 0.39 1.42 0.01 126 FROM_SUSPICIOUS_NTLD 1332 0.41 1.40 0.04 127 XMPhish30 1326 0.83 1.39 0.62 128 FROM_SUSPICIOUS_NTLD_FP 1322 0.40 1.39 0.04 129 FORGED_GMAIL_RCVD 1299 1.53 1.36 1.60 130 DKIM_ADSP_NXDOMAIN 1287 0.99 1.35 0.86 131 URI_TRY_3LD 1282 1.58 1.35 1.67 132 NML_ADSP_CUSTOM_MED 1271 1.82 1.33 2.00 133 XM_UB999 1271 0.37 1.33 0.01 134 URIBL_BLACK 1259 0.40 1.32 0.07 135 DATE_IN_PAST_03_06 1254 0.43 1.32 0.10 136 XM_UB60 1238 0.40 1.30 0.07 137 XM_H_Long_From02 1236 1.03 1.30 0.93 138 XMStockSpam_06 1227 1.22 1.29 1.20 139 URIBL_CSS 1225 1.39 1.29 1.42 140 URIBL_CSS_A 1225 1.39 1.29 1.42 141 XMHTMLBadTable_001 1173 0.79 1.23 0.62 142 RELAYCOUNTRY_AT 1169 0.42 1.23 0.12 143 RELAYCOUNTRY_DE 1164 0.55 1.22 0.30 144 HTML_MIME_NO_HTML_TAG 1161 1.37 1.22 1.43 145 BAYES_20 1153 2.08 1.21 2.40 146 XM_H_PHPOS_M 1151 0.54 1.21 0.29 147 TR_XM_RelayPhish 1132 1.02 1.19 0.96 148 TM2_M_A_HREF_HREF 1125 1.62 1.18 1.78 149 HOSTED_IMG_DIRECT_MX 1101 0.31 1.16 0.00 150 UNPARSEABLE_RELAY 1090 3.27 1.14 4.06 151 FILL_THIS_FORM 1055 0.68 1.11 0.53 152 RCVD_IN_IADB_VOUCHED 1054 3.20 1.11 3.98 153 TR_Caps_n_Bayes_99 1033 0.61 1.08 0.43 154 SHORT_URI_3 1031 0.40 1.08 0.15 155 TR_LOTS_OF_MONEY2 1030 0.53 1.08 0.32 156 T_MONEY_PERCENT 1030 0.53 1.08 0.32 157 XMSubMetaSSx_00 1005 0.61 1.06 0.44 158 TR_Mismatch_TLD_02 995 0.34 1.04 0.07 159 XMPhish11 980 1.25 1.03 1.33 160 XMBrknScrpt_02 934 0.66 0.98 0.54 161 XMSlimDrugH 930 0.70 0.98 0.60 162 MISSING_HEADERS 928 0.56 0.97 0.41 163 XM_B_COPY_HTML 891 0.84 0.94 0.80 164 XMSubMetaSx_01 891 0.37 0.94 0.15 165 XM_UB80 884 0.28 0.93 0.04 166 LongTLD 869 0.33 0.91 0.11 167 XMBody_78 837 0.59 0.88 0.48 168 XM_DKIMWhitelistDomains 827 8.38 0.87 11.17 169 XM_RXBody 800 0.41 0.84 0.26 170 XMSubMetaSxObfu_03 799 0.78 0.84 0.75 171 LONG_JUNK_URI 799 0.30 0.84 0.11 172 FILL_THIS_FORM_LONG 787 0.52 0.83 0.40 173 HTML_TAG_BALANCE_BODY 780 0.66 0.82 0.60 174 RDNS_DYNAMIC 775 0.67 0.81 0.61 175 URI_NOVOWEL 745 0.51 0.78 0.41 176 XMHTML_After_End 724 0.46 0.76 0.35 177 XMPhish14 717 0.45 0.75 0.33 178 HK_SCAM 708 0.21 0.74 0.01 179 XM_OfRef7 702 0.36 0.74 0.22 180 URIBL_DBL_SPAM 697 0.21 0.73 0.02 181 HTML_FONT_FACE_BAD 696 0.74 0.73 0.74 182 T_FILL_THIS_FORM_SHORT 687 0.98 0.72 1.08 183 DATE_IN_PAST_06_12 685 0.24 0.72 0.06 184 SUBJ_DOLLARS 685 0.78 0.72 0.81 185 TR_LOTS_OF_MONEY3 681 0.47 0.71 0.38 186 XM_DK_Undo_01 674 1.28 0.71 1.49 187 XM_Combo_Sbj 673 0.33 0.71 0.18 188 BODY_URI_ONLY 663 0.21 0.70 0.04 189 THIS_AD 661 0.29 0.69 0.14 190 RCVD_IN_IADB_OPTIN 616 2.13 0.65 2.68 191 T_TooManySym_02 598 1.61 0.63 1.98 192 TooManyTo_002 584 1.06 0.61 1.23 193 PLING_QUERY 583 0.56 0.61 0.54 194 NUMERIC_HTTP_ADDR 572 0.30 0.60 0.19 195 XMWghtMeta_00 572 0.20 0.60 0.05 196 MPART_ALT_DIFF_COUNT 572 0.41 0.60 0.33 197 URIBL_ABUSE_SURBL 563 0.23 0.59 0.10 198 MONEY_FORM 551 0.16 0.58 0.01 199 BAYES_05 547 1.35 0.57 1.63 200 TVD_SPACE_RATIO_MINFP 540 0.16 0.57 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 213941 86.17 93.96 83.28 2 DKIM_SIGNED 204349 81.67 87.41 79.55 3 XM_DK_Pass 200633 79.58 83.58 78.10 4 DKIM_VALID 192685 76.13 79.16 75.01 5 DKIM_VALID_AU 146300 58.20 61.57 56.95 6 XMListUnsubscribeExists 143558 61.86 77.96 55.88 7 DCC_CHECK_NEGATIVE 135113 43.49 18.95 52.59 8 BAYES_50 128912 45.27 32.01 50.18 9 DCC_CHECK 118949 55.46 80.15 46.30 10 HTML_FONT_LOW_CONTRAST 86618 34.97 38.35 33.72 11 DKIM_VALID_EF 79229 27.59 18.81 30.84 12 LOC_TINY_FONT_1 70263 29.33 34.65 27.35 13 T_TM2_M_HEADER_IN_MSG 62185 22.54 18.04 24.21 14 XMSubLong 59257 23.51 24.72 23.07 15 MIME_HTML_ONLY 57827 24.96 31.57 22.51 16 FVGT_m_MULTI_ODD 56353 24.37 30.94 21.94 17 XM_DK_Undo_02 49035 28.66 54.46 19.09 18 BAYES_99 45362 25.84 47.92 17.66 19 MultiRelay 43523 16.84 16.55 16.94 20 ALL_TRUSTED 42081 12.52 2.10 16.38 21 BAYES_999 41064 22.66 40.67 15.98 22 T_KAM_HTML_FONT_INVALID 40495 17.11 20.75 15.76 23 XM_Multi_Part_URI 40203 16.74 19.68 15.65 24 XM_Body_Dirty_Words 39722 17.78 24.04 15.46 25 RCVD_IN_RP_SAFE 36384 11.86 5.67 14.16 26 RCVD_IN_RP_CERTIFIED 32767 10.56 4.63 12.76 27 LOTS_OF_MONEY 31540 13.03 15.05 12.28 28 BAYES_00 28828 8.31 0.45 11.22 29 XM_DKIMWhitelistDomains 28685 8.38 0.87 11.17 30 TR_XM_DK_Bayes 26629 7.65 0.31 10.37 31 TR_XM_DK_Bayes1 25764 7.38 0.23 10.03 32 HTML_IMAGE_RATIO_02 25404 11.54 16.00 9.89 33 FSL_BULK_SIG 24891 9.54 9.14 9.69 34 XM_Evil_Numbers_Gen 24762 10.49 12.78 9.64 35 TO_MALFORMED 24368 6.95 0.09 9.49 36 TR_XM_DK_Bayes2 21730 6.22 0.17 8.46 37 TR_DCC_Bayes_99 20230 16.07 38.18 7.87 38 XM_H_Long_From01 19913 7.34 6.24 7.75 39 LotsOfNums_01 19385 7.84 8.65 7.55 40 T_XMDrugObfuBody_14 19218 7.67 8.19 7.48 41 XM_SendGrid 19001 6.49 4.04 7.40 42 T_TooManySym_01 18993 6.14 2.76 7.39 43 RCVD_IN_MSPIKE_H2 18810 6.39 3.89 7.32 44 RCVD_IN_MSPIKE_WL 18493 6.00 2.77 7.20 45 HTML_IMAGE_RATIO_04 17924 8.74 13.49 6.98 46 RCVD_IN_MSPIKE_H3 16970 5.53 2.62 6.61 47 BOTNET_IPINHOSTNAME 15996 8.14 13.29 6.23 48 BAYES_60 15589 5.95 5.62 6.07 49 XM_B_Phish_Phrases 15563 6.16 6.42 6.06 50 TooManyTo_001 14689 6.10 7.12 5.72 51 XM_UncommonTLD01 13658 6.09 8.16 5.32 52 XMSubMetaSx_00 13611 6.47 9.63 5.30 53 RCVD_IN_IADB_LISTED 13603 4.66 2.94 5.30 54 FROM_EXCESS_BASE64 13312 5.62 6.80 5.18 55 US_DOLLARS_3 12735 5.07 5.38 4.96 56 XMStrtUSub 12203 4.40 3.46 4.75 57 T_REMOTE_IMAGE 12046 4.58 4.27 4.69 58 DKIM_INVALID 11664 5.54 8.25 4.54 59 XM_B_SpammyTLD 11557 4.17 3.29 4.50 60 RCVD_IN_IADB_SPF 11362 3.92 2.56 4.42 61 XMSexyCombo_05 11316 6.25 11.21 4.40 62 RELAYCOUNTRY_META 10794 7.42 16.11 4.20 63 MIME_QP_LONG_LINE 10651 4.41 5.12 4.15 64 INVALID_MSGID 10624 3.10 0.30 4.14 65 UNPARSEABLE_RELAY 10436 3.27 1.14 4.06 66 BAYES_80 10411 4.72 6.51 4.05 67 RCVD_IN_IADB_VOUCHED 10212 3.20 1.11 3.98 68 MPART_ALT_DIFF 10059 4.68 6.74 3.92 69 HTML_IMAGE_RATIO_06 9675 3.91 4.29 3.77 70 RCVD_IN_IADB_SENDERID 9606 3.38 2.43 3.74 71 IN_ZIMBRA_NJ_WHITELIST 9437 2.68 0.01 3.67 72 TR_XM_DK_SendGrid 9241 3.08 1.67 3.60 73 RCVD_IN_IADB_DK 9142 3.25 2.40 3.56 74 TVD_RCVD_IP 9074 2.67 0.33 3.53 75 BAYES_40 8546 2.84 1.52 3.33 76 XMNumbers 8090 2.99 2.57 3.15 77 BAYES_95 7774 3.28 3.98 3.03 78 XM_DIRTYINTL 7349 3.62 5.67 2.86 79 MIME_HTML_MOSTLY 7169 3.10 3.94 2.79 80 TR_XM_PHPDW 6963 2.80 3.05 2.71 81 RCVD_IN_IADB_OPTIN 6887 2.13 0.65 2.68 82 XM_H_PHPMailer 6703 2.30 1.45 2.61 83 URI_HEX 6461 3.12 4.76 2.52 84 TR_MetaPhish_Combo_01 6457 1.97 0.51 2.51 85 TR_Symld_Words 6380 2.23 1.53 2.48 86 SUBJ_ALL_CAPS 6181 2.53 2.87 2.41 87 TR_XM_PHPForged 6174 2.56 2.99 2.40 88 BAYES_20 6157 2.08 1.21 2.40 89 DKIM_ADSP_CUSTOM_MED 5735 2.06 1.61 2.23 90 RCVD_IN_MSPIKE_BL 5418 3.21 6.19 2.11 91 MIME_HTML_ONLY_MULTI 5268 2.67 4.34 2.05 92 NML_ADSP_CUSTOM_MED 5145 1.82 1.33 2.00 93 XMDiploma_00 5113 2.23 2.88 1.99 94 T_TooManySym_02 5074 1.61 0.63 1.98 95 IN_HORDE_ADDRESS_BOOK 5036 1.44 0.04 1.96 96 XM_PDF 5008 1.51 0.32 1.95 97 BOTNET 5002 5.92 16.64 1.95 98 MAILING_LIST_MULTI 4822 1.85 1.76 1.88 99 HTML_IMAGE_RATIO_08 4757 2.12 2.84 1.85 100 XMBdyGiftCard01 4713 2.70 5.03 1.83 101 USER_IN_DEF_DKIM_WL 4701 1.34 0.01 1.83 102 TM2_M_A_HREF_HREF 4566 1.62 1.18 1.78 103 XM_CamelCaseFrm001 4430 2.31 3.88 1.72 104 URI_TRY_3LD 4289 1.58 1.35 1.67 105 BAYES_05 4192 1.35 0.57 1.63 106 FORGED_GMAIL_RCVD 4104 1.53 1.36 1.60 107 RELAYCOUNTRY_CA 3975 2.36 4.54 1.55 108 XM_OfRef6 3854 1.76 2.45 1.50 109 XM_DK_Undo_01 3825 1.28 0.71 1.49 110 BOUNCE_MESSAGE 3692 1.13 0.29 1.44 111 ANY_BOUNCE_MESSAGE 3692 1.13 0.29 1.44 112 HTML_MIME_NO_HTML_TAG 3667 1.37 1.22 1.43 113 URIBL_CSS_A 3653 1.39 1.29 1.42 114 URIBL_CSS 3653 1.39 1.29 1.42 115 T_XMDrugObfuBody_08 3541 1.68 2.50 1.38 116 UNTRUSTED_Relay 3539 3.39 8.84 1.38 117 XMPhish11 3422 1.25 1.03 1.33 118 TM2_M_URI_OPT_OUT 3392 1.78 3.00 1.32 119 TM2_M_VERY_LONG_WORD 3383 1.42 1.69 1.32 120 XMSexyCombo_01 3362 2.00 3.86 1.31 121 NO_DNS_FOR_FROM 3345 1.56 2.26 1.30 122 T_XMDrugObfuBody_00 3180 1.38 1.75 1.24 123 TooManyTo_002 3156 1.06 0.61 1.23 124 XM_D_tchamptons_WL 3099 0.90 0.06 1.21 125 XM_GoogleGroups 3086 1.00 0.45 1.20 126 XMStockSpam_06 3085 1.22 1.29 1.20 127 KHOP_HELO_FCRDNS 2992 1.48 2.33 1.16 128 T_FILL_THIS_FORM_SHORT 2777 0.98 0.72 1.08 129 T_Symld_Words_02 2730 1.18 1.51 1.06 130 XM_ProductURIs 2702 1.82 3.88 1.05 131 XM_SPF_SoftFail 2516 1.55 3.08 0.98 132 TR_XM_RelayPhish 2468 1.02 1.19 0.96 133 XMBody_95 2443 0.78 0.30 0.95 134 XM_H_Long_From02 2388 1.03 1.30 0.93 135 RCVD_IN_MSPIKE_L5 2300 2.11 5.39 0.90 136 TooManyTo_003 2248 0.77 0.50 0.88 137 DKIM_ADSP_NXDOMAIN 2216 0.99 1.35 0.86 138 USER_IN_WHITELIST 2192 0.62 0.00 0.85 139 XM_UB50 2107 1.62 3.77 0.82 140 SUBJ_DOLLARS 2068 0.78 0.72 0.81 141 XM_B_COPY_HTML 2060 0.84 0.94 0.80 142 XMSubMetaI_00 2019 1.10 1.94 0.79 143 XMGenDplmaNmb 1998 0.96 1.44 0.78 144 RCVD_IN_MSPIKE_L4 1944 0.62 0.26 0.76 145 XMSubMetaSxObfu_03 1932 0.78 0.84 0.75 146 HTML_FONT_FACE_BAD 1901 0.74 0.73 0.74 147 TooManyTo_004 1830 0.64 0.45 0.71 148 XM_URI_RBL 1828 1.41 3.28 0.71 149 XMSubMetaSxObfu_02 1826 0.63 0.40 0.71 150 XMBody_17 1734 0.96 1.74 0.67 151 TR_XM_FormFill2 1723 1.29 2.96 0.67 152 XM_H_PHPOS 1718 1.28 2.94 0.67 153 T_XMHurry_00 1700 1.04 2.05 0.66 154 XMNoVowels 1681 0.61 0.49 0.65 155 TooManyTo_005 1653 0.58 0.40 0.64 156 XMHTMLBadTable_001 1603 0.79 1.23 0.62 157 XMPhish30 1592 0.83 1.39 0.62 158 RDNS_DYNAMIC 1578 0.67 0.81 0.61 159 T_TooManySym_03 1574 0.50 0.21 0.61 160 HELO_NODOT 1566 0.53 0.30 0.61 161 HELO_NO_DOMAIN 1565 0.52 0.29 0.61 162 HTML_TAG_BALANCE_BODY 1553 0.66 0.82 0.60 163 XMSlimDrugH 1533 0.70 0.98 0.60 164 XM_ShortIntro_01 1388 0.54 0.53 0.54 165 PLING_QUERY 1379 0.56 0.61 0.54 166 XMBrknScrpt_02 1378 0.66 0.98 0.54 167 RELAYCOUNTRY_GB 1363 0.87 1.79 0.53 168 FILL_THIS_FORM 1352 0.68 1.11 0.53 169 RCVD_IN_BL_SPAMCOP_NET 1271 0.95 2.18 0.49 170 XMBody_78 1230 0.59 0.88 0.48 171 DIET_1 1184 0.83 1.83 0.46 172 RCVD_IN_MSPIKE_L3 1174 0.48 0.54 0.46 173 XM_B_REG_HTML 1172 0.90 2.11 0.46 174 HTTPS_HTTP_MISMATCH 1142 0.47 0.55 0.44 175 XMSubMetaSSx_00 1135 0.61 1.06 0.44 176 TR_Caps_n_Bayes_99 1107 0.61 1.08 0.43 177 XMBSHREFv2 1060 0.45 0.54 0.41 178 XMCapTrack 1058 0.35 0.17 0.41 179 MISSING_HEADERS 1052 0.56 0.97 0.41 180 RCVD_IN_MSPIKE_H5 1043 0.33 0.12 0.41 181 URI_NOVOWEL 1042 0.51 0.78 0.41 182 FILL_THIS_FORM_LOAN 1037 0.44 0.53 0.40 183 XMLngstWrd_00 1036 0.37 0.27 0.40 184 FILL_THIS_FORM_LONG 1034 0.52 0.83 0.40 185 XMRcvdHeader_15 1020 0.29 0.00 0.40 186 TR_LOTS_OF_MONEY3 981 0.47 0.71 0.38 187 SpammyFromTLD_01 963 0.82 2.02 0.37 188 T_OBFU_PDF_ATTACH 950 0.29 0.07 0.37 189 XMLngstWrd_01 949 0.34 0.25 0.37 190 TM2_M_BODY_EMPTY 945 0.37 0.38 0.37 191 XMSUPPORT 934 0.27 0.00 0.36 192 RELAYCOUNTRY_AU 922 0.35 0.33 0.36 193 XMHTML_After_End 907 0.46 0.76 0.35 194 XM_H_SpoofStaff4 881 0.26 0.02 0.34 195 XM_Akamai 878 0.25 0.01 0.34 196 MPART_ALT_DIFF_COUNT 855 0.41 0.60 0.33 197 XMPhish14 855 0.45 0.75 0.33 198 XMGappySubj_01 846 0.29 0.20 0.33 199 XMSolicitRefs_0 833 0.30 0.24 0.32 200 BASE64_LENGTH_79_INF 826 0.37 0.50 0.32 ----------------------------------------------------------------------