Email: 359299 Autolearn: 0 AvgScore: 1.16 AvgScanTime: 2.15 sec Spam: 63329 Autolearn: 0 AvgScore: 12.30 AvgScanTime: 2.85 sec Ham: 295970 Autolearn: 0 AvgScore: -1.22 AvgScanTime: 2.01 sec Time Spent Running SA: 214.99 hours Time Spent Processing Spam: 50.06 hours Time Spent Processing Ham: 164.93 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 58001 84.97 91.59 83.55 2 DCC_CHECK 49103 55.07 77.54 50.26 3 DKIM_SIGNED 47832 79.25 75.53 80.05 4 XM_DK_Pass 46352 77.86 73.19 78.86 5 XM_B_Unicode 45229 70.71 71.42 70.56 6 XMListUnsubscribeExists 44534 61.89 70.32 60.09 7 DKIM_VALID 43506 74.54 68.70 75.80 8 DKIM_VALID_AU 35678 58.71 56.34 59.21 9 BAYES_50 30652 52.52 48.40 53.40 10 XM_B_Unicode3 29445 45.11 46.50 44.81 11 HTML_FONT_LOW_CONTRAST 25117 34.65 39.66 33.58 12 LOC_TINY_FONT_1 22508 30.44 35.54 29.34 13 XM_DK_Undo_02 21456 11.36 33.88 6.54 14 XM_Body_Dirty_Words 17710 17.46 27.97 15.21 15 FVGT_m_MULTI_ODD 17550 23.62 27.71 22.75 16 MIME_HTML_ONLY 17086 23.39 26.98 22.62 17 RELAYCOUNTRY_META 16527 8.42 26.10 4.63 18 XMSubLong 14860 23.34 23.46 23.32 19 BAYES_99 14766 7.48 23.32 4.10 20 BOTNET_IPINHOSTNAME 14466 9.06 22.84 6.11 21 DKIM_VALID_EF 13520 26.85 21.35 28.03 22 DCC_CHECK_NEGATIVE 13311 43.76 21.02 48.63 23 MultiRelay 13295 16.16 20.99 15.13 24 XM_Multi_Part_URI 13030 15.22 20.58 14.07 25 XM_UncommonTLD01 12393 7.51 19.57 4.93 26 BOTNET 11978 5.29 18.91 2.37 27 BAYES_999 11526 6.01 18.20 3.41 28 TR_DCC_Bayes_99 11353 4.75 17.93 1.93 29 T_KAM_HTML_FONT_INVALID 11280 17.30 17.81 17.19 30 UNTRUSTED_Relay 9788 4.16 15.46 1.75 31 FSL_BULK_SIG 9724 9.61 15.35 8.38 32 XM_B_SpammyTLD 9171 6.12 14.48 4.33 33 T_TM2_M_HEADER_IN_MSG 9135 22.22 14.42 23.89 34 TooManyTo_001 9082 7.20 14.34 5.67 35 HTML_IMAGE_RATIO_02 8870 11.94 14.01 11.50 36 SpammyFromTLD_02 8788 2.70 13.88 0.31 37 XM_Evil_Numbers_Gen 7747 10.44 12.23 10.06 38 LOTS_OF_MONEY 6966 11.39 11.00 11.47 39 XM_DIRTYINTL 6620 4.12 10.45 2.77 40 XMSexyCombo_05 6328 5.95 9.99 5.09 41 XMSubMetaSx_00 6191 5.20 9.78 4.22 42 T_XMDrugObfuBody_14 6159 7.46 9.73 6.98 43 HTML_IMAGE_RATIO_04 5961 7.12 9.41 6.63 44 XM_H_Long_From01 5950 7.19 9.40 6.72 45 XM_UB50 5597 2.35 8.84 0.96 46 MPART_ALT_DIFF 5493 4.84 8.67 4.02 47 XM_B_Phish_Phrases 5104 6.48 8.06 6.14 48 RCVD_IN_MSPIKE_H2 4582 6.26 7.24 6.05 49 DKIM_INVALID 4326 4.71 6.83 4.25 50 MIME_HTML_MOSTLY 4293 3.41 6.78 2.69 51 XMNumbers 4017 4.03 6.34 3.53 52 RCVD_IN_BL_SPAMCOP_NET 3561 1.56 5.62 0.69 53 KHOP_HELO_FCRDNS 3483 1.76 5.50 0.96 54 BAYES_80 3478 3.01 5.49 2.47 55 LotsOfNums_01 3400 7.67 5.37 8.16 56 NORDNS_LOW_CONTRAST 3342 0.94 5.28 0.01 57 MIME_HTML_ONLY_MULTI 3257 2.62 5.14 2.09 58 FROM_SUSPICIOUS_NTLD 3248 0.93 5.13 0.03 59 XM_SendGrid 3223 6.39 5.09 6.67 60 FROM_SUSPICIOUS_NTLD_FP 3199 0.91 5.05 0.03 61 RELAYCOUNTRY_FR 3151 1.35 4.98 0.57 62 BAYES_60 3060 4.48 4.83 4.40 63 T_REMOTE_IMAGE 3007 3.62 4.75 3.37 64 BAYES_40 2916 5.04 4.60 5.14 65 XM_SPF_SoftFail 2874 1.60 4.54 0.98 66 BAYES_20 2779 4.22 4.39 4.18 67 TR_XM_PHPDW 2775 1.22 4.38 0.55 68 TR_XM_PHPForged 2732 1.20 4.31 0.53 69 TR_XM_FormFill2 2702 1.18 4.27 0.51 70 XM_H_PHPOS 2698 1.17 4.26 0.51 71 MultiRelay_Combo 2586 0.87 4.08 0.18 72 MultiRelay_CC 2586 0.87 4.08 0.18 73 XM_H_TOP 2539 0.71 4.01 0.00 74 TM2_M_VERY_LONG_WORD 2536 1.73 4.00 1.25 75 RELAYCOUNTRY_CA 2534 2.04 4.00 1.62 76 DKIM_ADSP_NXDOMAIN 2511 1.26 3.97 0.69 77 RCVD_IN_PSBL 2492 0.76 3.94 0.08 78 HTML_MIME_NO_HTML_TAG 2481 2.07 3.92 1.68 79 TR_XM_RelayPhish 2472 1.44 3.90 0.91 80 XMBdyGiftCard01 2313 2.43 3.65 2.16 81 XMSexyCombo_01 2293 1.27 3.62 0.77 82 URI_HEX 2284 2.70 3.61 2.51 83 RCVD_IN_RP_RNBL 2272 0.66 3.59 0.04 84 TR_M_TOP_BAYES 2213 0.62 3.49 0.00 85 TR_XM_DK_SendGrid 2172 3.54 3.43 3.57 86 XMStrtUSub 2020 4.43 3.19 4.69 87 MIME_QP_LONG_LINE 2012 4.27 3.18 4.51 88 HTML_IMAGE_RATIO_06 1985 3.49 3.13 3.57 89 RELAYCOUNTRY_GB 1951 0.91 3.08 0.45 90 XM_URI_RBL 1936 0.99 3.06 0.54 91 T_XMDrugObfuBody_08 1929 1.57 3.05 1.26 92 BAYES_95 1919 1.80 3.03 1.54 93 BAYES_00 1890 18.17 2.98 21.42 94 T_TooManySym_01 1887 6.73 2.98 7.53 95 XM_CamelCaseFrm001 1857 2.24 2.93 2.09 96 FROM_EXCESS_BASE64 1832 3.96 2.89 4.19 97 T_FILL_THIS_FORM_SHORT 1815 1.22 2.87 0.86 98 NO_DNS_FOR_FROM 1767 1.54 2.79 1.27 99 SpammyFromTLD_01 1681 0.96 2.65 0.60 100 DATE_IN_PAST_06_12 1632 0.55 2.58 0.12 101 BAYES_05 1610 2.92 2.54 3.00 102 SUBJ_ALL_CAPS 1590 2.58 2.51 2.60 103 URIBL_DBL_ABUSE_REDIR 1577 0.45 2.49 0.02 104 RCVD_IN_MSPIKE_BL 1561 0.48 2.46 0.05 105 TooManyTo_002 1530 1.33 2.42 1.09 106 RCVD_IN_MSPIKE_L5 1528 0.45 2.41 0.03 107 DATE_IN_PAST_12_24 1490 0.49 2.35 0.09 108 URI_TRY_3LD 1480 2.04 2.34 1.98 109 HTML_IMAGE_RATIO_08 1435 2.38 2.27 2.40 110 TM2_M_URI_OPT_OUT 1433 3.37 2.26 3.60 111 RELAYCOUNTRY_RU 1407 0.41 2.22 0.02 112 XM_H_PHPMailer 1406 0.85 2.22 0.56 113 DKIM_ADSP_CUSTOM_MED 1398 1.06 2.21 0.81 114 BOTNET_NORDNS 1393 0.40 2.20 0.02 115 REPLYTO_WITHOUT_TO_CC 1385 0.42 2.19 0.04 116 ALL_TRUSTED 1372 13.50 2.17 15.93 117 FORGED_GMAIL_RCVD 1330 0.75 2.10 0.46 118 XMDiploma_00 1323 1.49 2.09 1.37 119 XM_H_PHPOS_M 1306 0.58 2.06 0.27 120 XMBrknScrpt_02 1286 1.10 2.03 0.90 121 TooManyTo_003 1279 0.98 2.02 0.75 122 NML_ADSP_CUSTOM_MED 1246 0.80 1.97 0.55 123 DIET_1 1189 0.78 1.88 0.55 124 HTML_FONT_FACE_BAD 1169 0.94 1.85 0.74 125 SUBJ_DOLLARS 1163 0.96 1.84 0.77 126 HTML_IMAGE_ONLY_12 1129 0.44 1.78 0.15 127 XMStockSpam_06 1123 1.13 1.77 1.00 128 RELAYCOUNTRY_AT 1118 0.52 1.77 0.26 129 MIME_HEADER_CTYPE_ONLY 1089 0.38 1.72 0.09 130 RCVD_IN_RP_SAFE 1083 11.29 1.71 13.33 131 TooManyTo_004 1069 0.83 1.69 0.65 132 HDRS_LCASE_IMGONLY 1065 0.31 1.68 0.02 133 HTML_SHORT_LINK_IMG_1 1049 0.31 1.66 0.02 134 RELAYCOUNTRY_DE 1041 0.48 1.64 0.23 135 T_Symld_Words_02 1021 0.81 1.61 0.64 136 MPART_ALT_DIFF_COUNT 1018 0.50 1.61 0.26 137 XM_OfRef6 1013 1.62 1.60 1.62 138 TO_EQ_FM_DOM_HTML_IMG 991 0.28 1.56 0.00 139 UNPARSEABLE_RELAY 986 3.30 1.56 3.67 140 XMBody_17 946 0.92 1.49 0.80 141 TooManyTo_005 898 0.73 1.42 0.58 142 TR_Mismatch_TLD_02 885 0.34 1.40 0.11 143 THIS_AD 865 0.64 1.37 0.48 144 MAILING_LIST_MULTI 864 1.98 1.36 2.11 145 T_XMDrugObfuBody_00 860 1.07 1.36 1.01 146 DATE_IN_FUTURE_06_12 840 0.24 1.33 0.01 147 XMGenDplmaNmb 839 0.84 1.32 0.73 148 RDNS_DYNAMIC 830 0.66 1.31 0.52 149 RCVD_IN_IADB_LISTED 827 4.03 1.31 4.61 150 TR_XM_INV_DKIM 823 0.53 1.30 0.36 151 SHORT_URI 821 0.24 1.30 0.01 152 XMSexyCombo_04 786 0.41 1.24 0.23 153 XMSubMetaI_00 770 0.82 1.22 0.74 154 TM2_M_A_HREF_HREF 765 1.09 1.21 1.06 155 LOADSA_MONEY_COMBO 714 0.34 1.13 0.17 156 XM_H_Long_From02 713 1.09 1.13 1.08 157 XMClaimOffer 708 0.37 1.12 0.20 158 XMSlimDrugH 708 0.45 1.12 0.30 159 TR_XM_DK_Bayes 706 15.54 1.11 18.62 160 RELAYCOUNTRY_IN 706 0.25 1.11 0.07 161 XMSubject_09 688 0.20 1.09 0.01 162 XMPhish11 684 0.91 1.08 0.87 163 RCVD_IN_IADB_SPF 677 3.46 1.07 3.97 164 LONG_HEX_URI 676 0.32 1.07 0.16 165 XM_ProductURIs 672 1.27 1.06 1.32 166 TR_Symld_Words 668 2.10 1.05 2.32 167 HTML_FONT_SIZE_HUGE 667 0.25 1.05 0.08 168 RCVD_IN_IADB_SENDERID 655 3.01 1.03 3.43 169 RCVD_IN_IADB_DK 651 2.94 1.03 3.34 170 XM_UB60 651 0.22 1.03 0.05 171 XMPhish14 649 0.49 1.02 0.38 172 RCVD_IN_MSPIKE_WL 645 4.51 1.02 5.26 173 TR_Caps_n_Bayes_99 640 0.29 1.01 0.13 174 DRUGS_ERECTILE 638 0.28 1.01 0.12 175 DATE_IN_PAST_24_48 626 0.31 0.99 0.17 176 TR_XM_DK_Bayes1 605 14.96 0.96 17.96 177 URIBL_BLACK 603 0.19 0.95 0.02 178 XMSubMetaSxObfu_03 587 0.52 0.93 0.43 179 XMPhish30 576 0.82 0.91 0.80 180 XM_B_COPY_HTML 574 0.67 0.91 0.62 181 RELAYCOUNTRY_VN 573 0.18 0.90 0.03 182 DATE_IN_PAST_03_06 563 0.27 0.89 0.14 183 NO_MEDICAL 558 0.16 0.88 0.00 184 SUBJ_OBFU_PUNCT_FEW 555 0.19 0.88 0.04 185 RCVD_IN_MSPIKE_H3 553 4.26 0.87 4.98 186 XM_DK_Undo_01 552 1.13 0.87 1.19 187 XMSubMetaSx_01 545 0.25 0.86 0.12 188 RELAYCOUNTRY_CN 541 0.17 0.85 0.03 189 PDS_TO_EQ_FROM_NAME 531 0.16 0.84 0.01 190 URI_NO_WWW_INFO_CGI 524 0.29 0.83 0.18 191 BASE64_LENGTH_79_INF 518 0.32 0.82 0.21 192 CK_HELO_DYNAMIC_SPLIT_IP 515 2.44 0.81 2.79 193 URIBL_DBL_SPAM 513 0.18 0.81 0.04 194 XM_UB99 511 0.15 0.81 0.01 195 TR_Mismatch_TLD_01 500 0.37 0.79 0.28 196 TR_LOTS_OF_MONEY3 499 0.71 0.79 0.70 197 T_XMHurry_00 497 0.56 0.78 0.51 198 XMSubMetaSSx_00 494 0.30 0.78 0.19 199 XMHTML_After_End 494 0.42 0.78 0.34 200 TR_LOTS_OF_MONEY2 493 0.37 0.78 0.28 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 247288 84.97 91.59 83.55 2 DKIM_SIGNED 236926 79.25 75.53 80.05 3 XM_DK_Pass 233399 77.86 73.19 78.86 4 DKIM_VALID 224333 74.54 68.70 75.80 5 XM_B_Unicode 208841 70.71 71.42 70.56 6 XMListUnsubscribeExists 177852 61.89 70.32 60.09 7 DKIM_VALID_AU 175255 58.71 56.34 59.21 8 BAYES_50 158053 52.52 48.40 53.40 9 DCC_CHECK 148763 55.07 77.54 50.26 10 DCC_CHECK_NEGATIVE 143917 43.76 21.02 48.63 11 XM_B_Unicode3 132629 45.11 46.50 44.81 12 HTML_FONT_LOW_CONTRAST 99380 34.65 39.66 33.58 13 LOC_TINY_FONT_1 86846 30.44 35.54 29.34 14 DKIM_VALID_EF 82947 26.85 21.35 28.03 15 T_TM2_M_HEADER_IN_MSG 70703 22.22 14.42 23.89 16 XMSubLong 69014 23.34 23.46 23.32 17 FVGT_m_MULTI_ODD 67319 23.62 27.71 22.75 18 MIME_HTML_ONLY 66956 23.39 26.98 22.62 19 BAYES_00 63387 18.17 2.98 21.42 20 TR_XM_DK_Bayes 55119 15.54 1.11 18.62 21 TR_XM_DK_Bayes1 53162 14.96 0.96 17.96 22 T_KAM_HTML_FONT_INVALID 50882 17.30 17.81 17.19 23 ALL_TRUSTED 47150 13.50 2.17 15.93 24 TR_XM_DK_Bayes2 46763 13.13 0.64 15.80 25 XM_Body_Dirty_Words 45006 17.46 27.97 15.21 26 MultiRelay 44777 16.16 20.99 15.13 27 XM_Multi_Part_URI 41652 15.22 20.58 14.07 28 RCVD_IN_RP_SAFE 39464 11.29 1.71 13.33 29 HTML_IMAGE_RATIO_02 34032 11.94 14.01 11.50 30 LOTS_OF_MONEY 33960 11.39 11.00 11.47 31 RCVD_IN_RP_CERTIFIED 33953 9.58 0.72 11.47 32 XM_Evil_Numbers_Gen 29775 10.44 12.23 10.06 33 XM_DKIMWhitelistDomains 29729 8.28 0.06 10.04 34 FSL_BULK_SIG 24791 9.61 15.35 8.38 35 LotsOfNums_01 24143 7.67 5.37 8.16 36 T_TooManySym_01 22300 6.73 2.98 7.53 37 T_XMDrugObfuBody_14 20660 7.46 9.73 6.98 38 XM_H_Long_From01 19876 7.19 9.40 6.72 39 XM_SendGrid 19744 6.39 5.09 6.67 40 HTML_IMAGE_RATIO_04 19613 7.12 9.41 6.63 41 XM_DK_Undo_02 19348 11.36 33.88 6.54 42 XM_B_Phish_Phrases 18185 6.48 8.06 6.14 43 BOTNET_IPINHOSTNAME 18070 9.06 22.84 6.11 44 RCVD_IN_MSPIKE_H2 17903 6.26 7.24 6.05 45 TO_MALFORMED 17083 4.80 0.26 5.77 46 TooManyTo_001 16783 7.20 14.34 5.67 47 RCVD_IN_MSPIKE_WL 15564 4.51 1.02 5.26 48 BAYES_40 15206 5.04 4.60 5.14 49 XMSexyCombo_05 15067 5.95 9.99 5.09 50 RCVD_IN_MSPIKE_H3 14738 4.26 0.87 4.98 51 XM_UncommonTLD01 14592 7.51 19.57 4.93 52 XMStrtUSub 13879 4.43 3.19 4.69 53 RELAYCOUNTRY_META 13714 8.42 26.10 4.63 54 RCVD_IN_IADB_LISTED 13650 4.03 1.31 4.61 55 MIME_QP_LONG_LINE 13347 4.27 3.18 4.51 56 BAYES_60 13025 4.48 4.83 4.40 57 XM_B_SpammyTLD 12822 6.12 14.48 4.33 58 DKIM_INVALID 12593 4.71 6.83 4.25 59 XMSubMetaSx_00 12478 5.20 9.78 4.22 60 FROM_EXCESS_BASE64 12403 3.96 2.89 4.19 61 BAYES_20 12374 4.22 4.39 4.18 62 BAYES_99 12127 7.48 23.32 4.10 63 MPART_ALT_DIFF 11905 4.84 8.67 4.02 64 RCVD_IN_IADB_SPF 11747 3.46 1.07 3.97 65 UNPARSEABLE_RELAY 10868 3.30 1.56 3.67 66 TM2_M_URI_OPT_OUT 10659 3.37 2.26 3.60 67 TR_XM_DK_SendGrid 10554 3.54 3.43 3.57 68 HTML_IMAGE_RATIO_06 10552 3.49 3.13 3.57 69 BOUNCE_MESSAGE 10475 2.96 0.26 3.54 70 ANY_BOUNCE_MESSAGE 10475 2.96 0.26 3.54 71 INVALID_MSGID 10457 2.96 0.26 3.53 72 XMNumbers 10455 4.03 6.34 3.53 73 RCVD_IN_IADB_SENDERID 10154 3.01 1.03 3.43 74 BAYES_999 10082 6.01 18.20 3.41 75 T_REMOTE_IMAGE 9984 3.62 4.75 3.37 76 RCVD_IN_IADB_DK 9896 2.94 1.03 3.34 77 RCVD_IN_IADB_VOUCHED 9067 2.62 0.54 3.06 78 IN_ZIMBRA_NJ_WHITELIST 9017 2.51 0.01 3.05 79 BAYES_05 8891 2.92 2.54 3.00 80 TVD_RCVD_IP 8860 2.59 0.72 2.99 81 T_TooManySym_02 8838 2.58 0.70 2.99 82 CK_HELO_DYNAMIC_SPLIT_IP 8265 2.44 0.81 2.79 83 HELO_DYNAMIC_IPADDR2 8245 2.32 0.15 2.79 84 XM_DIRTYINTL 8195 4.12 10.45 2.77 85 MIME_HTML_MOSTLY 7948 3.41 6.78 2.69 86 SUBJ_ALL_CAPS 7683 2.58 2.51 2.60 87 URI_HEX 7427 2.70 3.61 2.51 88 BAYES_80 7322 3.01 5.49 2.47 89 HTML_IMAGE_RATIO_08 7103 2.38 2.27 2.40 90 BOTNET 7025 5.29 18.91 2.37 91 TR_Symld_Words 6867 2.10 1.05 2.32 92 XMBdyGiftCard01 6407 2.43 3.65 2.16 93 TR_MetaPhish_Combo_01 6337 1.84 0.46 2.14 94 MAILING_LIST_MULTI 6259 1.98 1.36 2.11 95 XM_CamelCaseFrm001 6178 2.24 2.93 2.09 96 MIME_HTML_ONLY_MULTI 6173 2.62 5.14 2.09 97 XM_PDF 6067 1.75 0.36 2.05 98 RCVD_IN_IADB_OPTIN 5912 1.70 0.31 2.00 99 URI_TRY_3LD 5850 2.04 2.34 1.98 100 TR_DCC_Bayes_99 5700 4.75 17.93 1.93 101 UNTRUSTED_Relay 5176 4.16 15.46 1.75 102 IN_HORDE_ADDRESS_BOOK 5138 1.44 0.04 1.74 103 HTML_MIME_NO_HTML_TAG 4968 2.07 3.92 1.68 104 RELAYCOUNTRY_CA 4804 2.04 4.00 1.62 105 XM_OfRef6 4798 1.62 1.60 1.62 106 BAYES_95 4563 1.80 3.03 1.54 107 USER_IN_DEF_DKIM_WL 4373 1.22 0.01 1.48 108 XMGappySubj_01 4173 1.21 0.25 1.41 109 XMDiploma_00 4041 1.49 2.09 1.37 110 XM_ProductURIs 3898 1.27 1.06 1.32 111 NO_DNS_FOR_FROM 3767 1.54 2.79 1.27 112 T_XMDrugObfuBody_08 3729 1.57 3.05 1.26 113 TM2_M_VERY_LONG_WORD 3694 1.73 4.00 1.25 114 XM_DK_Undo_01 3510 1.13 0.87 1.19 115 URI_OPTOUT_3LD 3451 0.97 0.04 1.17 116 TooManyTo_002 3236 1.33 2.42 1.09 117 XM_H_Long_From02 3207 1.09 1.13 1.08 118 TM2_M_A_HREF_HREF 3151 1.09 1.21 1.06 119 XM_GoogleGroups 3029 0.91 0.38 1.02 120 T_XMDrugObfuBody_00 2991 1.07 1.36 1.01 121 XM_B_REG_HTML 2991 0.89 0.34 1.01 122 XMStockSpam_06 2954 1.13 1.77 1.00 123 XM_SPF_SoftFail 2891 1.60 4.54 0.98 124 XM_UB50 2841 2.35 8.84 0.96 125 KHOP_HELO_FCRDNS 2832 1.76 5.50 0.96 126 XM_D_tchamptons_WL 2748 0.77 0.00 0.93 127 TR_XM_RelayPhish 2700 1.44 3.90 0.91 128 XMBrknScrpt_02 2650 1.10 2.03 0.90 129 XMPhish11 2570 0.91 1.08 0.87 130 T_FILL_THIS_FORM_SHORT 2560 1.22 2.87 0.86 131 USER_IN_WHITELIST 2483 0.69 0.00 0.84 132 DKIM_ADSP_CUSTOM_MED 2398 1.06 2.21 0.81 133 XMPhish30 2376 0.82 0.91 0.80 134 XMBody_17 2373 0.92 1.49 0.80 135 SUBJ_DOLLARS 2290 0.96 1.84 0.77 136 XMSexyCombo_01 2272 1.27 3.62 0.77 137 XMBody_95 2255 0.65 0.15 0.76 138 TooManyTo_003 2234 0.98 2.02 0.75 139 T_TooManySym_03 2223 0.64 0.14 0.75 140 HTML_FONT_FACE_BAD 2194 0.94 1.85 0.74 141 XMSubMetaI_00 2186 0.82 1.22 0.74 142 XMGenDplmaNmb 2166 0.84 1.32 0.73 143 HTML_TAG_BALANCE_BODY 2134 0.66 0.40 0.72 144 TR_LOTS_OF_MONEY3 2069 0.71 0.79 0.70 145 PLING_QUERY 2055 0.67 0.54 0.69 146 RCVD_IN_BL_SPAMCOP_NET 2039 1.56 5.62 0.69 147 DKIM_ADSP_NXDOMAIN 2033 1.26 3.97 0.69 148 TooManyTo_004 1914 0.83 1.69 0.65 149 XMHTMLBadTable_001 1895 0.66 0.77 0.64 150 T_Symld_Words_02 1887 0.81 1.61 0.64 151 XM_B_COPY_HTML 1844 0.67 0.91 0.62 152 XMSubMetaSxObfu_02 1790 0.60 0.56 0.60 153 XMBody_78 1773 0.61 0.68 0.60 154 SpammyFromTLD_01 1767 0.96 2.65 0.60 155 TooManyTo_005 1727 0.73 1.42 0.58 156 FILL_THIS_FORM 1702 0.59 0.65 0.58 157 RELAYCOUNTRY_FR 1698 1.35 4.98 0.57 158 XM_H_PHPMailer 1665 0.85 2.22 0.56 159 NML_ADSP_CUSTOM_MED 1638 0.80 1.97 0.55 160 TR_XM_PHPDW 1617 1.22 4.38 0.55 161 DIET_1 1617 0.78 1.88 0.55 162 XM_URI_RBL 1604 0.99 3.06 0.54 163 TR_XM_PHPForged 1562 1.20 4.31 0.53 164 RDNS_DYNAMIC 1540 0.66 1.31 0.52 165 FILL_THIS_FORM_LONG 1527 0.51 0.49 0.52 166 TR_XM_FormFill2 1523 1.18 4.27 0.51 167 T_XMHurry_00 1523 0.56 0.78 0.51 168 XM_H_PHPOS 1508 1.17 4.26 0.51 169 FILL_THIS_FORM_LOAN 1466 0.46 0.31 0.50 170 URI_NOVOWEL 1445 0.53 0.73 0.49 171 HELO_NODOT 1438 0.51 0.64 0.49 172 HELO_NO_DOMAIN 1437 0.51 0.64 0.49 173 THIS_AD 1417 0.64 1.37 0.48 174 RELAYCOUNTRY_AU 1374 0.51 0.74 0.46 175 FORGED_GMAIL_RCVD 1357 0.75 2.10 0.46 176 RELAYCOUNTRY_GB 1324 0.91 3.08 0.45 177 XM_RXBody 1314 0.42 0.32 0.44 178 XMBSHREFv2 1290 0.45 0.53 0.44 179 XMSubMetaSxObfu_03 1287 0.52 0.93 0.43 180 BODY_ENHANCEMENT 1285 0.43 0.43 0.43 181 XMGappySubj_02 1258 0.38 0.15 0.43 182 XMPhish14 1126 0.49 1.02 0.38 183 HK_RANDOM_REPLYTO 1118 0.42 0.63 0.38 184 XMCapTrack 1118 0.34 0.15 0.38 185 XMLngstWrd_00 1103 0.34 0.19 0.37 186 REMOVE_BEFORE_LINK 1090 0.36 0.34 0.37 187 HTTPS_HTTP_MISMATCH 1081 0.37 0.40 0.37 188 TR_XM_INV_DKIM 1078 0.53 1.30 0.36 189 HTML_TITLE_SUBJ_DIFF 1042 0.35 0.36 0.35 190 XMLngstWrd_01 1028 0.31 0.16 0.35 191 XMHTML_After_End 1020 0.42 0.78 0.34 192 XMNoVowels 1009 0.34 0.35 0.34 193 MONEY_BACK 985 0.31 0.19 0.33 194 TM2_M_BODY_EMPTY 982 0.29 0.12 0.33 195 T_TooManySym_04 961 0.27 0.03 0.32 196 SpammyFromTLD_02 931 2.70 13.88 0.31 197 XMSlimDrugH 901 0.45 1.12 0.30 198 XM_Akamai 888 0.25 0.01 0.30 199 XMRcvdHeader_15 879 0.24 0.00 0.30 200 XM_ShortIntro_01 860 0.36 0.66 0.29 ----------------------------------------------------------------------