Email: 652292 Autolearn: 0 AvgScore: 3.07 AvgScanTime: 2.18 sec Spam: 164451 Autolearn: 0 AvgScore: 12.05 AvgScanTime: 2.64 sec Ham: 487841 Autolearn: 0 AvgScore: 0.04 AvgScanTime: 2.02 sec Time Spent Running SA: 394.51 hours Time Spent Processing Spam: 120.53 hours Time Spent Processing Ham: 273.98 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 149677 87.06 91.02 85.72 2 DKIM_SIGNED 133338 76.05 81.08 74.35 3 XM_DK_Pass 127953 74.21 77.81 73.00 4 DKIM_VALID 124975 71.93 76.00 70.56 5 XM_B_Unicode 124523 70.32 75.72 68.50 6 DCC_CHECK 123844 49.72 75.31 41.10 7 XMListUnsubscribeExists 121085 56.41 73.63 50.61 8 DKIM_VALID_AU 94930 52.69 57.73 51.00 9 XM_DK_Undo_02 76836 21.73 46.72 13.31 10 BAYES_99 71648 19.64 43.57 11.58 11 HTML_FONT_LOW_CONTRAST 59533 30.20 36.20 28.17 12 BAYES_999 58275 16.52 35.44 10.14 13 TR_DCC_Bayes_99 56300 12.59 34.24 5.29 14 LOC_TINY_FONT_1 54441 24.98 33.10 22.24 15 BAYES_50 52418 47.26 31.87 52.44 16 FVGT_m_MULTI_ODD 48083 23.24 29.24 21.21 17 MIME_HTML_ONLY 48045 22.64 29.22 20.43 18 XMSubLong 42585 23.78 25.90 23.07 19 XM_Body_Dirty_Words 41291 16.75 25.11 13.93 20 T_KAM_HTML_FONT_INVALID 37922 19.21 23.06 17.91 21 DCC_CHECK_NEGATIVE 37859 48.24 23.02 56.74 22 DKIM_VALID_EF 37056 26.09 22.53 27.29 23 T_TM2_M_HEADER_IN_MSG 35291 28.08 21.46 30.31 24 XM_Multi_Part_URI 29833 12.90 18.14 11.14 25 RELAYCOUNTRY_META 28711 8.20 17.46 5.07 26 RCVD_IN_MSPIKE_H2 28469 16.68 17.31 16.47 27 MultiRelay 25941 18.21 15.77 19.02 28 BOTNET 25624 5.31 15.58 1.85 29 BOTNET_IPINHOSTNAME 22309 6.58 13.57 4.22 30 HTML_IMAGE_RATIO_02 22046 9.57 13.41 8.28 31 LOTS_OF_MONEY 21132 10.85 12.85 10.17 32 XM_Evil_Numbers_Gen 20696 9.19 12.58 8.05 33 UNTRUSTED_Relay 17846 3.85 10.85 1.49 34 XMSexyCombo_05 16282 5.33 9.90 3.79 35 T_XMDrugObfuBody_14 15139 8.43 9.21 8.17 36 FSL_BULK_SIG 14961 8.10 9.10 7.76 37 XMSubMetaSx_00 14921 5.44 9.07 4.21 38 BAYES_80 14249 5.57 8.66 4.52 39 LotsOfNums_01 13884 7.98 8.44 7.83 40 XM_B_Phish_Phrases 13535 6.06 8.23 5.33 41 HTML_IMAGE_RATIO_04 12893 5.76 7.84 5.05 42 TooManyTo_001 11914 8.29 7.24 8.64 43 XM_H_Long_From01 10992 6.28 6.68 6.15 44 MIME_QP_LONG_LINE 10290 5.99 6.26 5.90 45 BAYES_60 10092 6.79 6.14 7.01 46 XM_UncommonTLD01 10059 4.51 6.12 3.96 47 XM_DIRTYINTL 10010 3.66 6.09 2.84 48 ALL_TRUSTED 9784 14.60 5.95 17.52 49 MPART_ALT_DIFF 9535 3.94 5.80 3.32 50 XM_UB50 8625 2.07 5.24 1.00 51 DKIM_INVALID 8363 4.11 5.09 3.78 52 XMNumbers 8217 3.71 5.00 3.27 53 BAYES_95 8213 3.55 4.99 3.06 54 XM_SPF_SoftFail 7487 2.50 4.55 1.81 55 HTML_IMAGE_RATIO_06 7198 3.69 4.38 3.46 56 XMSexyCombo_01 6988 1.80 4.25 0.98 57 FROM_EXCESS_BASE64 6846 3.98 4.16 3.92 58 TM2_M_URI_OPT_OUT 6476 2.23 3.94 1.66 59 XM_B_SpammyTLD 6059 3.64 3.68 3.63 60 XMBdyGiftCard01 5893 1.56 3.58 0.87 61 HTML_MIME_NO_HTML_TAG 5868 2.79 3.57 2.53 62 MIME_HTML_MOSTLY 5827 2.44 3.54 2.07 63 MIME_HTML_ONLY_MULTI 5812 2.37 3.53 1.98 64 XM_SendGrid 5742 5.59 3.49 6.29 65 URI_HEX 5720 2.11 3.48 1.65 66 RELAYCOUNTRY_CA 5634 1.95 3.43 1.46 67 XM_OfRef6 5603 2.40 3.41 2.06 68 RCVD_IN_RP_SAFE 5585 7.76 3.40 9.24 69 DKIM_ADSP_NXDOMAIN 5449 1.22 3.31 0.51 70 SpammyFromTLD_02 5379 1.06 3.27 0.31 71 T_TooManySym_01 5308 4.75 3.23 5.26 72 US_DOLLARS_3 5288 2.31 3.22 2.00 73 RELAYCOUNTRY_FR 5240 1.01 3.19 0.28 74 RCVD_IN_BL_SPAMCOP_NET 5237 1.52 3.18 0.97 75 RCVD_IN_IADB_LISTED 5163 5.23 3.14 5.93 76 XM_URI_RBL 5140 1.05 3.13 0.35 77 URI_WP_HACKED_2 5080 1.55 3.09 1.03 78 T_REMOTE_IMAGE 4848 3.90 2.95 4.22 79 HTML_IMAGE_RATIO_08 4838 2.30 2.94 2.09 80 XM_CamelCaseFrm001 4600 2.39 2.80 2.25 81 RCVD_IN_IADB_SPF 4479 4.53 2.72 5.14 82 RCVD_IN_IADB_DK 4326 3.91 2.63 4.34 83 RCVD_IN_IADB_SENDERID 4313 4.00 2.62 4.46 84 XMHTML_After_End 4198 0.92 2.55 0.37 85 T_XMDrugObfuBody_08 4177 1.79 2.54 1.54 86 XMStrtUSub 4134 3.64 2.51 4.02 87 BOTNET_NORDNS 4045 0.63 2.46 0.02 88 URI_TRY_3LD 4025 1.62 2.45 1.34 89 XMSubMetaI_00 4002 1.01 2.43 0.53 90 RCVD_IN_RP_CERTIFIED 4000 6.85 2.43 8.33 91 SUBJ_ALL_CAPS 3995 2.32 2.43 2.28 92 IMPOTENCE 3848 1.16 2.34 0.76 93 XMDiploma_00 3827 1.97 2.33 1.85 94 RCVD_IN_MSPIKE_BL 3754 2.09 2.28 2.03 95 NO_DNS_FOR_FROM 3499 1.22 2.13 0.92 96 TR_Symld_Words 3473 1.81 2.11 1.71 97 THIS_AD 3460 0.65 2.10 0.16 98 RCVD_IN_PSBL 3449 0.56 2.10 0.04 99 XM_UB99 3370 0.52 2.05 0.01 100 MultiRelay_CC 3246 0.67 1.97 0.24 101 MultiRelay_Combo 3246 0.67 1.97 0.24 102 TM2_M_VERY_LONG_WORD 3195 1.24 1.94 1.01 103 XMSlimDrugH 3036 0.84 1.85 0.50 104 RCVD_IN_RP_RNBL 3017 0.49 1.83 0.04 105 XM_ProductURIs 3007 1.09 1.83 0.84 106 TR_XM_PHPDW 2947 0.99 1.79 0.73 107 TR_XM_PHPForged 2898 0.97 1.76 0.70 108 XMGenDplmaNmb 2891 1.37 1.76 1.24 109 TR_XM_FormFill2 2875 0.96 1.75 0.69 110 XM_H_PHPOS 2847 0.95 1.73 0.69 111 RELAYCOUNTRY_RO 2826 0.44 1.72 0.00 112 KHOP_HELO_FCRDNS 2787 1.89 1.69 1.96 113 NUMERIC_HTTP_ADDR 2775 0.74 1.69 0.42 114 BAYES_40 2744 3.36 1.67 3.93 115 TR_LOTS_OF_MONEY3 2708 0.87 1.65 0.61 116 XMBody_17 2630 0.89 1.60 0.66 117 DIET_1 2589 0.62 1.57 0.30 118 TR_XM_DK_SendGrid 2589 2.72 1.57 3.10 119 SpammyFromTLD_01 2574 0.90 1.57 0.68 120 TR_XM_RelayPhish 2568 0.92 1.56 0.70 121 BAYES_20 2552 2.66 1.55 3.04 122 XM_UB999 2546 0.40 1.55 0.01 123 XMBody_78 2526 0.97 1.54 0.78 124 TR_LOTS_OF_MONEY2 2519 0.76 1.53 0.50 125 T_MONEY_PERCENT 2519 0.76 1.53 0.50 126 TM2_M_A_HREF_HREF 2500 0.85 1.52 0.62 127 XMSubMetaSSx_00 2443 0.58 1.49 0.28 128 REMOVE_BEFORE_LINK 2440 0.62 1.48 0.33 129 URIBL_DBL_ABUSE_REDIR 2415 0.41 1.47 0.05 130 MAILING_LIST_MULTI 2349 1.95 1.43 2.13 131 XMMoneyMeta_00 2337 0.71 1.42 0.48 132 ONLINE_PHARMACY 2287 0.72 1.39 0.50 133 XMSexyCombo_04 2220 0.41 1.35 0.09 134 MIME_HEADER_CTYPE_ONLY 2204 0.44 1.34 0.13 135 DKIM_ADSP_CUSTOM_MED 2197 1.06 1.34 0.97 136 FROM_SUSPICIOUS_NTLD 2186 0.36 1.33 0.04 137 T_XMDrugObfuBody_00 2185 1.13 1.33 1.07 138 RCVD_IN_IADB_VOUCHED 2158 3.36 1.31 4.05 139 XM_DK_Undo_01 2122 1.48 1.29 1.55 140 XM_H_Long_From02 2085 1.33 1.27 1.36 141 FROM_SUSPICIOUS_NTLD_FP 2083 0.34 1.27 0.03 142 T_XMHurry_00 2067 0.86 1.26 0.72 143 TVD_VISIT_PHARMA 2058 0.59 1.25 0.37 144 RCVD_IN_MSPIKE_L5 1994 1.04 1.21 0.98 145 XMPhish11 1975 1.12 1.20 1.09 146 XMStockSpam_06 1965 1.30 1.19 1.33 147 XMBrknScrpt_02 1962 0.80 1.19 0.67 148 URIBL_BLACK 1951 0.35 1.19 0.07 149 NML_ADSP_CUSTOM_MED 1916 0.83 1.17 0.71 150 XM_UB60 1901 0.35 1.16 0.08 151 RCVD_IN_MSPIKE_WL 1894 4.20 1.15 5.22 152 RELAYCOUNTRY_DE 1867 0.60 1.14 0.42 153 PDS_TO_EQ_FROM_NAME 1859 0.30 1.13 0.02 154 HDRS_LCASE_IMGONLY 1821 0.32 1.11 0.06 155 DATE_IN_PAST_03_06 1797 0.38 1.09 0.14 156 RCVD_IN_MSPIKE_H3 1758 3.78 1.07 4.69 157 HTML_FONT_SIZE_LARGE 1712 0.43 1.04 0.22 158 RELAYCOUNTRY_IN 1700 0.35 1.03 0.12 159 T_HTML_TAG_BALANCE_CENTER 1695 0.33 1.03 0.09 160 XMPhish30 1694 0.60 1.03 0.46 161 XM_H_PHPMailer 1689 0.75 1.03 0.66 162 NORMAL_HTTP_TO_IP 1652 0.29 1.00 0.04 163 XMSlimDrugs 1630 0.35 0.99 0.14 164 XMHTMLBadTable_001 1624 0.61 0.99 0.48 165 HTML_FONT_FACE_BAD 1616 0.67 0.98 0.57 166 TooManyTo_002 1583 1.98 0.96 2.32 167 XM_RXBody 1573 0.68 0.96 0.59 168 XMSubMetaSxObfu_03 1566 0.57 0.95 0.44 169 XM_B_REG_HTML 1527 0.47 0.93 0.32 170 HK_RANDOM_REPLYTO 1519 0.40 0.92 0.22 171 T_FILL_THIS_FORM_SHORT 1510 0.96 0.92 0.97 172 XM_UB80 1435 0.24 0.87 0.02 173 BODY_QUOTE_MALF_MSGID 1426 0.70 0.87 0.64 174 SUBJ_DOLLARS 1421 0.53 0.86 0.42 175 TooManyTo_003 1398 1.38 0.85 1.56 176 XM_HighProb1 1377 0.22 0.84 0.01 177 RELAYCOUNTRY_AT 1376 0.33 0.84 0.16 178 RELAYCOUNTRY_GB 1375 1.00 0.84 1.05 179 RCVD_IN_MSPIKE_L3 1369 0.54 0.83 0.45 180 UNPARSEABLE_RELAY 1368 1.96 0.83 2.34 181 T_Symld_Words_02 1368 0.65 0.83 0.59 182 XM_H_PHPOS_M 1366 0.33 0.83 0.16 183 FORGED_GMAIL_RCVD 1362 0.53 0.83 0.42 184 EXCUSE_4 1354 0.21 0.82 0.01 185 HTML_TAG_BALANCE_BODY 1351 0.63 0.82 0.57 186 BODY_ENHANCEMENT 1335 0.22 0.81 0.02 187 TR_Mismatch_TLD_02 1334 0.25 0.81 0.06 188 TR_Caps_n_Bayes_99 1327 0.32 0.81 0.15 189 LONG_HEX_URI 1319 0.37 0.80 0.23 190 LongTLD 1319 0.31 0.80 0.15 191 HTML_IMAGE_ONLY_32 1291 0.49 0.79 0.38 192 XMSubGiftCard1 1288 0.22 0.78 0.03 193 TooManyTo_004 1278 1.07 0.78 1.17 194 XM_B_COPY_HTML 1273 0.57 0.77 0.50 195 HTML_IMAGE_ONLY_12 1245 0.33 0.76 0.19 196 T_TooManySym_02 1236 1.42 0.75 1.65 197 XM_OfRef7 1192 0.35 0.72 0.23 198 URIBL_ABUSE_SURBL 1186 0.29 0.72 0.14 199 BAYES_05 1184 1.70 0.72 2.03 200 RDNS_DYNAMIC 1180 0.47 0.72 0.38 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 418181 87.06 91.02 85.72 2 DKIM_SIGNED 362701 76.05 81.08 74.35 3 XM_DK_Pass 356137 74.21 77.81 73.00 4 DKIM_VALID 344238 71.93 76.00 70.56 5 XM_B_Unicode 334190 70.32 75.72 68.50 6 DCC_CHECK_NEGATIVE 276817 48.24 23.02 56.74 7 BAYES_50 255823 47.26 31.87 52.44 8 DKIM_VALID_AU 248780 52.69 57.73 51.00 9 XMListUnsubscribeExists 246892 56.41 73.63 50.61 10 DCC_CHECK 200496 49.72 75.31 41.10 11 T_TM2_M_HEADER_IN_MSG 147844 28.08 21.46 30.31 12 HTML_FONT_LOW_CONTRAST 137447 30.20 36.20 28.17 13 DKIM_VALID_EF 133139 26.09 22.53 27.29 14 XMSubLong 112557 23.78 25.90 23.07 15 LOC_TINY_FONT_1 108475 24.98 33.10 22.24 16 FVGT_m_MULTI_ODD 103490 23.24 29.24 21.21 17 MIME_HTML_ONLY 99655 22.64 29.22 20.43 18 MultiRelay 92809 18.21 15.77 19.02 19 T_KAM_HTML_FONT_INVALID 87373 19.21 23.06 17.91 20 ALL_TRUSTED 85459 14.60 5.95 17.52 21 RCVD_IN_MSPIKE_H2 80333 16.68 17.31 16.47 22 XM_Body_Dirty_Words 67969 16.75 25.11 13.93 23 XM_DK_Undo_02 64932 21.73 46.72 13.31 24 BAYES_00 58813 9.17 0.62 12.06 25 BAYES_99 56486 19.64 43.57 11.58 26 XM_Multi_Part_URI 54339 12.90 18.14 11.14 27 LOTS_OF_MONEY 49633 10.85 12.85 10.17 28 BAYES_999 49482 16.52 35.44 10.14 29 TR_XM_DK_Bayes 47763 7.41 0.34 9.79 30 TR_XM_DK_Bayes1 46334 7.19 0.33 9.50 31 RCVD_IN_RP_SAFE 45065 7.76 3.40 9.24 32 TooManyTo_001 42173 8.29 7.24 8.64 33 RCVD_IN_RP_CERTIFIED 40651 6.85 2.43 8.33 34 HTML_IMAGE_RATIO_02 40406 9.57 13.41 8.28 35 T_XMDrugObfuBody_14 39877 8.43 9.21 8.17 36 TR_XM_DK_Bayes2 39772 6.16 0.26 8.15 37 XM_Evil_Numbers_Gen 39256 9.19 12.58 8.05 38 XM_DKIMWhitelistDomains 38176 5.89 0.13 7.83 39 LotsOfNums_01 38175 7.98 8.44 7.83 40 FSL_BULK_SIG 37867 8.10 9.10 7.76 41 BAYES_60 34175 6.79 6.14 7.01 42 XM_SendGrid 30690 5.59 3.49 6.29 43 XM_H_Long_From01 30003 6.28 6.68 6.15 44 RCVD_IN_IADB_LISTED 28920 5.23 3.14 5.93 45 MIME_QP_LONG_LINE 28767 5.99 6.26 5.90 46 XM_B_Phish_Phrases 26015 6.06 8.23 5.33 47 TR_DCC_Bayes_99 25825 12.59 34.24 5.29 48 T_TooManySym_01 25677 4.75 3.23 5.26 49 RCVD_IN_MSPIKE_WL 25479 4.20 1.15 5.22 50 RCVD_IN_IADB_SPF 25058 4.53 2.72 5.14 51 RELAYCOUNTRY_META 24749 8.20 17.46 5.07 52 HTML_IMAGE_RATIO_04 24656 5.76 7.84 5.05 53 TO_MALFORMED 23920 3.69 0.11 4.90 54 XM_PDF 23351 3.73 0.60 4.79 55 RCVD_IN_MSPIKE_H3 22888 3.78 1.07 4.69 56 BAYES_80 22053 5.57 8.66 4.52 57 RCVD_IN_IADB_SENDERID 21762 4.00 2.62 4.46 58 RCVD_IN_IADB_DK 21151 3.91 2.63 4.34 59 BOTNET_IPINHOSTNAME 20592 6.58 13.57 4.22 60 T_REMOTE_IMAGE 20563 3.90 2.95 4.22 61 XMSubMetaSx_00 20534 5.44 9.07 4.21 62 IN_ZIMBRA_NJ_WHITELIST 19769 3.03 0.01 4.05 63 RCVD_IN_IADB_VOUCHED 19755 3.36 1.31 4.05 64 XMStrtUSub 19612 3.64 2.51 4.02 65 XM_UncommonTLD01 19327 4.51 6.12 3.96 66 BAYES_40 19166 3.36 1.67 3.93 67 FROM_EXCESS_BASE64 19119 3.98 4.16 3.92 68 XMSexyCombo_05 18502 5.33 9.90 3.79 69 DKIM_INVALID 18463 4.11 5.09 3.78 70 XM_B_SpammyTLD 17716 3.64 3.68 3.63 71 HTML_IMAGE_RATIO_06 16895 3.69 4.38 3.46 72 MPART_ALT_DIFF 16197 3.94 5.80 3.32 73 XMNumbers 15970 3.71 5.00 3.27 74 TR_XM_DK_SendGrid 15131 2.72 1.57 3.10 75 BAYES_95 14922 3.55 4.99 3.06 76 BAYES_20 14831 2.66 1.55 3.04 77 XM_DIRTYINTL 13854 3.66 6.09 2.84 78 RCVD_IN_IADB_OPTIN 12879 2.15 0.69 2.64 79 HTML_MIME_NO_HTML_TAG 12359 2.79 3.57 2.53 80 UNPARSEABLE_RELAY 11424 1.96 0.83 2.34 81 TooManyTo_002 11300 1.98 0.96 2.32 82 SUBJ_ALL_CAPS 11120 2.32 2.43 2.28 83 INVALID_MSGID 11020 1.71 0.09 2.26 84 XM_CamelCaseFrm001 10982 2.39 2.80 2.25 85 MAILING_LIST_MULTI 10386 1.95 1.43 2.13 86 HTML_IMAGE_RATIO_08 10176 2.30 2.94 2.09 87 MIME_HTML_MOSTLY 10121 2.44 3.54 2.07 88 XM_OfRef6 10036 2.40 3.41 2.06 89 BAYES_05 9926 1.70 0.72 2.03 90 RCVD_IN_MSPIKE_BL 9888 2.09 2.28 2.03 91 TVD_RCVD_IP 9794 1.59 0.36 2.01 92 US_DOLLARS_3 9760 2.31 3.22 2.00 93 MIME_HTML_ONLY_MULTI 9663 2.37 3.53 1.98 94 KHOP_HELO_FCRDNS 9565 1.89 1.69 1.96 95 BOTNET 9029 5.31 15.58 1.85 96 XMDiploma_00 9012 1.97 2.33 1.85 97 XM_SPF_SoftFail 8846 2.50 4.55 1.81 98 TR_Symld_Words 8353 1.81 2.11 1.71 99 IN_HORDE_ADDRESS_BOOK 8232 1.27 0.04 1.69 100 TM2_M_URI_OPT_OUT 8087 2.23 3.94 1.66 101 URI_HEX 8073 2.11 3.48 1.65 102 T_TooManySym_02 8034 1.42 0.75 1.65 103 HELO_NODOT 7928 1.36 0.57 1.63 104 HELO_NO_DOMAIN 7927 1.36 0.56 1.62 105 ANY_BOUNCE_MESSAGE 7883 1.35 0.58 1.62 106 BOUNCE_MESSAGE 7843 1.35 0.58 1.61 107 TooManyTo_003 7603 1.38 0.85 1.56 108 XM_DK_Undo_01 7563 1.48 1.29 1.55 109 T_XMDrugObfuBody_08 7491 1.79 2.54 1.54 110 TR_MetaPhish_Combo_01 7404 1.31 0.70 1.52 111 UNTRUSTED_Relay 7245 3.85 10.85 1.49 112 RELAYCOUNTRY_CA 7104 1.95 3.43 1.46 113 XMCapTrack 6754 1.12 0.34 1.38 114 XM_H_Long_From02 6617 1.33 1.27 1.36 115 USER_IN_DEF_DKIM_WL 6574 1.02 0.04 1.35 116 URI_TRY_3LD 6560 1.62 2.45 1.34 117 XMStockSpam_06 6509 1.30 1.19 1.33 118 XMGenDplmaNmb 6061 1.37 1.76 1.24 119 TooManyTo_004 5727 1.07 0.78 1.17 120 XM_GoogleGroups 5426 0.95 0.47 1.11 121 XMPhish11 5336 1.12 1.20 1.09 122 T_XMDrugObfuBody_00 5216 1.13 1.33 1.07 123 RELAYCOUNTRY_GB 5135 1.00 0.84 1.05 124 URI_WP_HACKED_2 5034 1.55 3.09 1.03 125 TM2_M_VERY_LONG_WORD 4918 1.24 1.94 1.01 126 XM_UB50 4895 2.07 5.24 1.00 127 RCVD_IN_MSPIKE_L5 4804 1.04 1.21 0.98 128 XMSexyCombo_01 4776 1.80 4.25 0.98 129 T_FILL_THIS_FORM_SHORT 4750 0.96 0.92 0.97 130 DKIM_ADSP_CUSTOM_MED 4738 1.06 1.34 0.97 131 RCVD_IN_BL_SPAMCOP_NET 4710 1.52 3.18 0.97 132 TooManyTo_005 4579 0.88 0.70 0.94 133 NO_DNS_FOR_FROM 4479 1.22 2.13 0.92 134 XMBdyGiftCard01 4264 1.56 3.58 0.87 135 XMGappySubj_01 4229 0.72 0.27 0.87 136 XM_ProductURIs 4078 1.09 1.83 0.84 137 XMBody_78 3817 0.97 1.54 0.78 138 IMPOTENCE 3719 1.16 2.34 0.76 139 FILL_THIS_FORM 3606 0.69 0.53 0.74 140 TR_XM_PHPDW 3537 0.99 1.79 0.73 141 T_XMHurry_00 3536 0.86 1.26 0.72 142 NML_ADSP_CUSTOM_MED 3475 0.83 1.17 0.71 143 TR_XM_RelayPhish 3432 0.92 1.56 0.70 144 TR_XM_PHPForged 3420 0.97 1.76 0.70 145 TR_XM_FormFill2 3362 0.96 1.75 0.69 146 XM_H_PHPOS 3349 0.95 1.73 0.69 147 SpammyFromTLD_01 3316 0.90 1.57 0.68 148 XMBrknScrpt_02 3248 0.80 1.19 0.67 149 XM_H_PHPMailer 3219 0.75 1.03 0.66 150 XMBody_17 3204 0.89 1.60 0.66 151 BODY_QUOTE_MALF_MSGID 3145 0.70 0.87 0.64 152 T_OBFU_PDF_ATTACH 3089 0.52 0.17 0.63 153 TM2_M_A_HREF_HREF 3031 0.85 1.52 0.62 154 TR_LOTS_OF_MONEY3 2960 0.87 1.65 0.61 155 RCVD_IN_MSPIKE_L4 2906 0.51 0.24 0.60 156 XM_RXBody 2883 0.68 0.96 0.59 157 HTTPS_HTTP_MISMATCH 2881 0.61 0.68 0.59 158 T_Symld_Words_02 2871 0.65 0.83 0.59 159 XMBody_95 2834 0.48 0.20 0.58 160 USER_IN_WHITELIST 2788 0.43 0.00 0.57 161 T_TooManySym_03 2779 0.48 0.20 0.57 162 HTML_FONT_FACE_BAD 2774 0.67 0.98 0.57 163 HTML_TAG_BALANCE_BODY 2762 0.63 0.82 0.57 164 T_FILL_THIS_FORM_LONG 2732 0.51 0.36 0.56 165 T_FILL_THIS_FORM_LOAN 2690 0.43 0.06 0.55 166 XM_ShortIntro_01 2587 0.50 0.41 0.53 167 XMSubMetaI_00 2564 1.01 2.43 0.53 168 DKIM_ADSP_NXDOMAIN 2508 1.22 3.31 0.51 169 XM_B_COPY_HTML 2452 0.57 0.77 0.50 170 T_MONEY_PERCENT 2449 0.76 1.53 0.50 171 TR_LOTS_OF_MONEY2 2449 0.76 1.53 0.50 172 XMSlimDrugH 2444 0.84 1.85 0.50 173 ONLINE_PHARMACY 2438 0.72 1.39 0.50 174 RELAYCOUNTRY_AU 2432 0.55 0.69 0.50 175 AC_DIV_BONANZA 2380 0.39 0.12 0.49 176 XMHTMLBadTable_001 2358 0.61 0.99 0.48 177 XMNoVowels 2331 0.49 0.52 0.48 178 XMMoneyMeta_00 2326 0.71 1.42 0.48 179 XM_D_tchamptons_WL 2268 0.35 0.00 0.46 180 SHORT_HELO_AND_INLINE_IMAGE 2238 0.35 0.04 0.46 181 XMPhish30 2227 0.60 1.03 0.46 182 URI_NOVOWEL 2227 0.50 0.64 0.46 183 RCVD_IN_MSPIKE_L3 2178 0.54 0.83 0.45 184 XMGappySubj_02 2166 0.35 0.07 0.44 185 TM2_M_BODY_EMPTY 2157 0.42 0.36 0.44 186 XMSubMetaSxObfu_03 2157 0.57 0.95 0.44 187 FROM_GOV_SPOOF 2149 0.39 0.23 0.44 188 XMLngstWrd_00 2141 0.44 0.45 0.44 189 MISSING_HEADERS 2126 0.49 0.64 0.44 190 FROM_GOV_DKIM_AU 2093 0.36 0.16 0.43 191 FORGED_GMAIL_RCVD 2069 0.53 0.83 0.42 192 PLING_QUERY 2053 0.46 0.58 0.42 193 SUBJ_DOLLARS 2043 0.53 0.86 0.42 194 RELAYCOUNTRY_DE 2027 0.60 1.14 0.42 195 NUMERIC_HTTP_ADDR 2026 0.74 1.69 0.42 196 RCVD_IN_SORBS_DUL 1998 0.36 0.21 0.41 197 XMLngstWrd_01 1951 0.39 0.38 0.40 198 XM_Body_Obfu01 1901 0.44 0.57 0.39 199 XMSubMetaSxObfu_02 1883 0.38 0.38 0.39 200 HTML_IMAGE_ONLY_32 1875 0.49 0.79 0.38 ----------------------------------------------------------------------