Email: 736943 Autolearn: 0 AvgScore: 1.13 AvgScanTime: 2.07 sec Spam: 107002 Autolearn: 0 AvgScore: 12.85 AvgScanTime: 2.84 sec Ham: 629941 Autolearn: 0 AvgScore: -0.86 AvgScanTime: 1.94 sec Time Spent Running SA: 424.20 hours Time Spent Processing Spam: 84.44 hours Time Spent Processing Ham: 339.76 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 101164 78.93 94.54 76.28 2 DCC_CHECK 83321 43.09 77.87 37.18 3 DKIM_SIGNED 75381 67.43 70.45 66.92 4 XM_B_Unicode 72143 61.71 67.42 60.74 5 XM_DK_Pass 71519 66.02 66.84 65.88 6 DKIM_VALID 67295 62.70 62.89 62.67 7 XMListUnsubscribeExists 66739 49.28 62.37 47.05 8 BAYES_50 54266 47.03 50.71 46.41 9 DKIM_VALID_AU 50167 46.64 46.88 46.60 10 XM_B_Unicode3 46089 36.46 43.07 35.34 11 MIME_HTML_ONLY 41509 20.45 38.79 17.34 12 HTML_FONT_LOW_CONTRAST 33387 25.66 31.20 24.72 13 LOC_TINY_FONT_1 31128 22.59 29.09 21.49 14 XM_DK_Undo_02 30594 8.17 28.59 4.70 15 XMSubLong 29687 21.28 27.74 20.19 16 RELAYCOUNTRY_META 28316 8.02 26.46 4.89 17 FVGT_m_MULTI_ODD 26209 19.87 24.49 19.08 18 BOTNET 24950 5.13 23.32 2.04 19 FSL_BULK_SIG 23705 8.21 22.15 5.84 20 DKIM_VALID_EF 23259 22.31 21.74 22.41 21 XM_Body_Dirty_Words 22677 13.61 21.19 12.32 22 BAYES_99 21768 4.51 20.34 1.83 23 MultiRelay 21679 16.67 20.26 16.06 24 DCC_CHECK_NEGATIVE 21219 55.05 19.83 61.04 25 BOTNET_IPINHOSTNAME 19737 6.39 18.45 4.34 26 XM_Multi_Part_URI 19690 11.80 18.40 10.68 27 T_KAM_HTML_FONT_INVALID 18891 16.89 17.65 16.76 28 T_TM2_M_HEADER_IN_MSG 18163 24.96 16.97 26.32 29 TR_DCC_Bayes_99 17222 3.05 16.10 0.83 30 UNTRUSTED_Relay 16900 3.60 15.79 1.53 31 XM_UncommonTLD01 16449 4.51 15.37 2.67 32 BAYES_999 16239 3.41 15.18 1.41 33 HTML_IMAGE_RATIO_02 16208 8.63 15.15 7.52 34 XM_H_Long_From01 13471 6.73 12.59 5.74 35 LOTS_OF_MONEY 13049 7.85 12.20 7.11 36 XMSexyCombo_05 13006 4.99 12.15 3.78 37 XM_Evil_Numbers_Gen 12935 9.29 12.09 8.81 38 T_XMDrugObfuBody_14 11251 8.02 10.51 7.59 39 XMSubMetaSx_00 10331 4.52 9.65 3.65 40 T_REMOTE_IMAGE 10075 4.29 9.42 3.42 41 HTML_MIME_NO_HTML_TAG 9718 2.93 9.08 1.89 42 SpammyFromTLD_02 9141 1.53 8.54 0.34 43 LotsOfNums_01 8961 7.81 8.37 7.72 44 KHOP_HELO_FCRDNS 8797 2.77 8.22 1.85 45 XM_UB50 8650 1.90 8.08 0.85 46 TooManyTo_001 8381 7.21 7.83 7.10 47 DKIM_INVALID 8086 4.73 7.56 4.25 48 MPART_ALT_DIFF 6995 3.66 6.54 3.17 49 XMNumbers 6970 3.53 6.51 3.02 50 HTML_IMAGE_RATIO_04 6933 5.47 6.48 5.30 51 XM_DIRTYINTL 6891 3.19 6.44 2.64 52 XMStrtUSub 6537 3.90 6.11 3.53 53 HTML_SHORT_LINK_IMG_1 6401 0.90 5.98 0.03 54 XM_B_Phish_Phrases 6268 5.29 5.86 5.19 55 RCVD_IN_PSBL 6216 0.85 5.81 0.01 56 XM_SPF_SoftFail 6080 2.32 5.68 1.74 57 RCVD_IN_MSPIKE_H2 5927 6.07 5.54 6.16 58 BAYES_80 5781 2.29 5.40 1.76 59 FROM_MISSP_REPLYTO 5606 0.76 5.24 0.00 60 XM_B_SpammyTLD 5104 3.15 4.77 2.88 61 BAYES_40 5068 6.90 4.74 7.27 62 BAYES_60 5039 3.66 4.71 3.48 63 HTML_IMAGE_RATIO_06 5001 3.38 4.67 3.16 64 MIME_HTML_MOSTLY 4926 2.38 4.60 2.00 65 RELAYCOUNTRY_GB 4899 1.51 4.58 0.99 66 MIME_QP_LONG_LINE 4698 5.41 4.39 5.58 67 XM_BadFromFormat 4676 0.72 4.37 0.10 68 BAYES_20 4574 6.46 4.27 6.83 69 RDNS_DYNAMIC 4533 0.88 4.24 0.31 70 RELAYCOUNTRY_CA 4494 1.82 4.20 1.42 71 XM_URI_RBL 4490 0.84 4.20 0.27 72 XM_CamelCaseFrm001 4445 2.10 4.15 1.75 73 MultiRelay_Combo 4440 0.77 4.15 0.19 74 MultiRelay_CC 4440 0.77 4.15 0.19 75 RCVD_IN_BL_SPAMCOP_NET 4397 1.31 4.11 0.83 76 MIME_HTML_ONLY_MULTI 4396 2.05 4.11 1.71 77 T_HTML_TAG_BALANCE_CENTER 4379 0.80 4.09 0.24 78 BOTNET_NORDNS 4342 0.62 4.06 0.04 79 TM2_M_URI_OPT_OUT 4333 14.04 4.05 15.74 80 BAYES_00 4332 23.20 4.05 26.45 81 RCVD_IN_RP_RNBL 4306 0.61 4.02 0.03 82 XM_DrugUnitList 4031 0.55 3.77 0.00 83 BODY_URI_ONLY 3978 0.62 3.72 0.09 84 SpammyFromTLD_01 3943 1.13 3.68 0.70 85 XMSexyCombo_01 3909 1.32 3.65 0.93 86 REPLYTO_WITHOUT_TO_CC 3819 0.55 3.57 0.03 87 HTML_IMAGE_ONLY_08 3686 0.58 3.44 0.09 88 XM_OfRef6 3633 1.69 3.40 1.41 89 HTML_IMAGE_RATIO_08 3629 2.21 3.39 2.01 90 T_XMDrugObfuBody_08 3615 1.80 3.38 1.54 91 DOS_RCVD_IP_TWICE_B 3579 0.54 3.34 0.07 92 TR_XM_PHPDW 3558 1.30 3.33 0.96 93 TR_XM_PHPForged 3550 1.29 3.32 0.94 94 RELAYCOUNTRY_FR 3531 0.73 3.30 0.29 95 TR_XM_FormFill2 3525 1.28 3.29 0.94 96 XM_H_PHPOS 3516 1.28 3.29 0.94 97 XM_SendGrid 3448 5.15 3.22 5.48 98 HDRS_LCASE_IMGONLY 3354 0.48 3.13 0.03 99 HOSTED_IMG_DIRECT_MX 3271 0.44 3.06 0.00 100 BAYES_95 3264 1.29 3.05 0.99 101 TR_Mismatch_TLD_02 3232 0.51 3.02 0.08 102 HTML_IMAGE_ONLY_12 3197 0.58 2.99 0.17 103 RELAYCOUNTRY_DE 3037 0.80 2.84 0.45 104 MIME_HEADER_CTYPE_ONLY 2943 0.47 2.75 0.09 105 XMDiploma_00 2939 1.79 2.75 1.63 106 HTML_IMAGE_ONLY_20 2930 0.63 2.74 0.27 107 NO_DNS_FOR_FROM 2883 1.21 2.69 0.96 108 URI_HEX 2874 1.91 2.69 1.78 109 DATE_IN_PAST_03_06 2871 0.47 2.68 0.09 110 FROM_EXCESS_BASE64 2797 2.87 2.61 2.92 111 T_TooManySym_01 2698 4.54 2.52 4.88 112 DKIM_ADSP_NXDOMAIN 2669 0.65 2.49 0.34 113 BAYES_05 2660 4.39 2.49 4.71 114 SUBJ_ALL_CAPS 2654 1.77 2.48 1.64 115 TO_EQ_FM_DOM_HTML_IMG 2650 0.37 2.48 0.01 116 TR_Symld_Words 2498 1.51 2.33 1.36 117 FROM_MISSP_DYNIP 2456 0.33 2.30 0.00 118 XMSexyCombo_04 2454 0.73 2.29 0.46 119 XMSubMetaI_00 2416 0.78 2.26 0.53 120 AMAZON_IMG_NOT_RCVD_AMZN 2412 0.37 2.25 0.04 121 HOSTED_IMG_MULTI 2354 0.32 2.20 0.00 122 XMBrknScrpt_02 2354 0.85 2.20 0.62 123 TR_XM_INV_DKIM 2188 0.37 2.04 0.08 124 XMGenDplmaNmb 2105 1.20 1.97 1.07 125 RCVD_IN_IADB_LISTED 2087 4.41 1.95 4.83 126 TM2_M_VERY_LONG_WORD 2053 1.23 1.92 1.11 127 ALL_TRUSTED 2027 22.55 1.89 26.06 128 XMBody_17 2018 0.88 1.89 0.71 129 T_XMDrugObfuBody_00 2018 1.19 1.89 1.07 130 DATE_IN_PAST_06_12 1997 0.33 1.87 0.07 131 XMSubMetaSSx_00 1996 0.40 1.87 0.15 132 FROM_SUSPICIOUS_NTLD 1958 0.29 1.83 0.03 133 HTML_IMAGE_ONLY_16 1947 0.44 1.82 0.21 134 RCVD_IN_IADB_SPF 1899 3.84 1.77 4.19 135 FILL_THIS_FORM 1897 0.61 1.77 0.41 136 MAILING_LIST_MULTI 1871 2.03 1.75 2.08 137 RCVD_IN_IADB_DK 1861 3.33 1.74 3.60 138 RCVD_IN_IADB_SENDERID 1859 3.38 1.74 3.66 139 XM_UB99 1840 0.25 1.72 0.00 140 FILL_THIS_FORM_LONG 1816 0.52 1.70 0.32 141 FROM_SUSPICIOUS_NTLD_FP 1811 0.27 1.69 0.02 142 XM_OfRef7 1798 0.33 1.68 0.10 143 XMBdyGiftCard01 1797 1.19 1.68 1.11 144 RCVD_IN_RP_SAFE 1770 7.39 1.65 8.37 145 TR_XM_DK_Bayes 1760 13.92 1.64 16.00 146 NORDNS_LOW_CONTRAST 1739 0.25 1.63 0.01 147 HTML_EXTRA_CLOSE 1725 0.24 1.61 0.01 148 XMMoneyMeta_00 1681 0.79 1.57 0.66 149 ALIBABA_IMG_NOT_RCVD_ALI 1673 0.23 1.56 0.00 150 XMPhish11 1670 1.11 1.56 1.03 151 TR_XM_RelayPhish 1661 1.23 1.55 1.18 152 XMStockSpam_06 1659 1.30 1.55 1.26 153 T_MONEY_PERCENT 1634 0.71 1.53 0.57 154 TR_LOTS_OF_MONEY2 1634 0.71 1.53 0.57 155 TR_XM_DK_Bayes1 1597 13.25 1.49 15.25 156 XM_H_PHPMailer 1591 0.61 1.49 0.47 157 TR_XM_DK_SendGrid 1574 2.70 1.47 2.91 158 URI_NOVOWEL 1573 0.60 1.47 0.46 159 XM_DK_Undo_01 1563 1.48 1.46 1.48 160 T_XMHurry_00 1525 0.69 1.43 0.56 161 XMHTML_After_End 1511 0.84 1.41 0.74 162 HELO_NODOT 1508 1.41 1.41 1.41 163 HELO_NO_DOMAIN 1507 1.41 1.41 1.41 164 XMPhish30 1485 0.61 1.39 0.48 165 URIBL_DBL_ABUSE_REDIR 1484 0.20 1.39 0.00 166 MONEY_FORM 1433 0.21 1.34 0.01 167 XM_SPF_Unknown 1427 0.72 1.33 0.62 168 XM_H_PHPOS_M 1424 0.35 1.33 0.19 169 XM_XX_Yahoo 1336 0.28 1.25 0.12 170 XM_H_Long_From02 1300 1.00 1.21 0.97 171 DKIM_ADSP_CUSTOM_MED 1243 0.92 1.16 0.88 172 RELAYCOUNTRY_IN 1227 0.26 1.15 0.12 173 RCVD_IN_MSPIKE_WL 1202 4.22 1.12 4.75 174 DIET_1 1133 0.42 1.06 0.31 175 XM_UB60 1122 0.20 1.05 0.06 176 T_FILL_THIS_FORM_SHORT 1114 0.71 1.04 0.66 177 MISSING_HEADERS 1109 0.44 1.04 0.33 178 TM2_M_A_HREF_HREF 1088 0.58 1.02 0.51 179 DEAR_SOMETHING 1078 0.22 1.01 0.09 180 XM_ProductURIs 1076 0.70 1.01 0.65 181 URIBL_SBL_A 1072 0.47 1.00 0.38 182 TooManyTo_002 1048 1.61 0.98 1.71 183 TR_XM_DK_Bayes2 1037 11.20 0.97 12.94 184 URIBL_BLACK 1030 0.15 0.96 0.01 185 FORGED_GMAIL_RCVD 1021 0.55 0.95 0.48 186 XMSubMetaSxObfu_03 1014 0.48 0.95 0.40 187 HTML_FONT_FACE_BAD 1009 0.57 0.94 0.50 188 T_Symld_Words_02 1004 0.64 0.94 0.59 189 UNPARSEABLE_RELAY 1003 1.80 0.94 1.94 190 RCVD_IN_MSPIKE_H3 999 3.63 0.93 4.09 191 XM_UB80 996 0.16 0.93 0.03 192 TR_LOTS_OF_MONEY3 996 0.45 0.93 0.37 193 TR_MetaPhish_Combo_01 989 1.35 0.92 1.42 194 URIBL_DBL_SPAM 982 0.16 0.92 0.04 195 THIS_AD 950 0.45 0.89 0.37 196 DATE_IN_PAST_12_24 942 0.19 0.88 0.07 197 XM_PDF 938 3.43 0.88 3.86 198 XMNoVowels 921 0.54 0.86 0.49 199 XMPhish14 915 0.47 0.86 0.41 200 RELAYCOUNTRY_AT 913 0.28 0.85 0.19 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 480541 78.93 94.54 76.28 2 DKIM_SIGNED 421575 67.43 70.45 66.92 3 XM_DK_Pass 414975 66.02 66.84 65.88 4 DKIM_VALID 394782 62.70 62.89 62.67 5 DCC_CHECK_NEGATIVE 384493 55.05 19.83 61.04 6 XM_B_Unicode 382609 61.71 67.42 60.74 7 XMListUnsubscribeExists 296394 49.28 62.37 47.05 8 DKIM_VALID_AU 293541 46.64 46.88 46.60 9 BAYES_50 292344 47.03 50.71 46.41 10 DCC_CHECK 234194 43.09 77.87 37.18 11 XM_B_Unicode3 222622 36.46 43.07 35.34 12 BAYES_00 166640 23.20 4.05 26.45 13 T_TM2_M_HEADER_IN_MSG 165779 24.96 16.97 26.32 14 ALL_TRUSTED 164173 22.55 1.89 26.06 15 HTML_FONT_LOW_CONTRAST 155696 25.66 31.20 24.72 16 DKIM_VALID_EF 141169 22.31 21.74 22.41 17 LOC_TINY_FONT_1 135381 22.59 29.09 21.49 18 XMSubLong 127161 21.28 27.74 20.19 19 FVGT_m_MULTI_ODD 120193 19.87 24.49 19.08 20 MIME_HTML_ONLY 109205 20.45 38.79 17.34 21 T_KAM_HTML_FONT_INVALID 105554 16.89 17.65 16.76 22 MultiRelay 101154 16.67 20.26 16.06 23 TR_XM_DK_Bayes 100808 13.92 1.64 16.00 24 TM2_M_URI_OPT_OUT 99166 14.04 4.05 15.74 25 ANY_BOUNCE_MESSAGE 96314 13.14 0.48 15.29 26 BOUNCE_MESSAGE 96314 13.14 0.48 15.29 27 TR_XM_DK_Bayes1 96049 13.25 1.49 15.25 28 TR_XM_DK_Bayes2 81536 11.20 0.97 12.94 29 XM_Body_Dirty_Words 77614 13.61 21.19 12.32 30 XM_Multi_Part_URI 67305 11.80 18.40 10.68 31 XM_Evil_Numbers_Gen 55513 9.29 12.09 8.81 32 RCVD_IN_RP_SAFE 52709 7.39 1.65 8.37 33 LotsOfNums_01 48625 7.81 8.37 7.72 34 T_XMDrugObfuBody_14 47827 8.02 10.51 7.59 35 HTML_IMAGE_RATIO_02 47402 8.63 15.15 7.52 36 BAYES_40 45796 6.90 4.74 7.27 37 RCVD_IN_RP_CERTIFIED 45356 6.25 0.66 7.20 38 LOTS_OF_MONEY 44786 7.85 12.20 7.11 39 TooManyTo_001 44738 7.21 7.83 7.10 40 URI_OPTOUT_3LD 43489 5.92 0.11 6.90 41 BAYES_20 43034 6.46 4.27 6.83 42 RCVD_IN_MSPIKE_H2 38774 6.07 5.54 6.16 43 XM_DKIMWhitelistDomains 37110 5.05 0.10 5.89 44 FSL_BULK_SIG 36788 8.21 22.15 5.84 45 XM_H_Long_From01 36147 6.73 12.59 5.74 46 MIME_QP_LONG_LINE 35165 5.41 4.39 5.58 47 XM_SendGrid 34510 5.15 3.22 5.48 48 HTML_IMAGE_RATIO_04 33403 5.47 6.48 5.30 49 XM_B_Phish_Phrases 32725 5.29 5.86 5.19 50 RELAYCOUNTRY_META 30800 8.02 26.46 4.89 51 T_TooManySym_01 30746 4.54 2.52 4.88 52 RCVD_IN_IADB_LISTED 30403 4.41 1.95 4.83 53 RCVD_IN_MSPIKE_WL 29930 4.22 1.12 4.75 54 BAYES_05 29681 4.39 2.49 4.71 55 XM_DK_Undo_02 29605 8.17 28.59 4.70 56 BOTNET_IPINHOSTNAME 27345 6.39 18.45 4.34 57 DKIM_INVALID 26793 4.73 7.56 4.25 58 RCVD_IN_IADB_SPF 26415 3.84 1.77 4.19 59 RCVD_IN_MSPIKE_H3 25772 3.63 0.93 4.09 60 XM_PDF 24316 3.43 0.88 3.86 61 XMSexyCombo_05 23799 4.99 12.15 3.78 62 RCVD_IN_IADB_SENDERID 23054 3.38 1.74 3.66 63 XMSubMetaSx_00 22997 4.52 9.65 3.65 64 RCVD_IN_IADB_DK 22657 3.33 1.74 3.60 65 XMStrtUSub 22220 3.90 6.11 3.53 66 BAYES_60 21931 3.66 4.71 3.48 67 T_REMOTE_IMAGE 21560 4.29 9.42 3.42 68 MPART_ALT_DIFF 19995 3.66 6.54 3.17 69 RCVD_IN_IADB_VOUCHED 19915 2.79 0.58 3.16 70 HTML_IMAGE_RATIO_06 19914 3.38 4.67 3.16 71 XMNumbers 19048 3.53 6.51 3.02 72 IN_ZIMBRA_NJ_WHITELIST 18982 2.58 0.02 3.01 73 FROM_EXCESS_BASE64 18372 2.87 2.61 2.92 74 TR_XM_DK_SendGrid 18302 2.70 1.47 2.91 75 XM_B_SpammyTLD 18135 3.15 4.77 2.88 76 XM_UncommonTLD01 16820 4.51 15.37 2.67 77 XM_DIRTYINTL 16635 3.19 6.44 2.64 78 TO_MALFORMED 13919 1.89 0.02 2.21 79 MAILING_LIST_MULTI 13102 2.03 1.75 2.08 80 BOTNET 12857 5.13 23.32 2.04 81 HTML_IMAGE_RATIO_08 12656 2.21 3.39 2.01 82 MIME_HTML_MOSTLY 12627 2.38 4.60 2.00 83 RCVD_IN_IADB_OPTIN 12622 1.77 0.39 2.00 84 UNPARSEABLE_RELAY 12240 1.80 0.94 1.94 85 HTML_MIME_NO_HTML_TAG 11904 2.93 9.08 1.89 86 TVD_RCVD_IP 11748 1.69 0.67 1.86 87 KHOP_HELO_FCRDNS 11624 2.77 8.22 1.85 88 BAYES_99 11503 4.51 20.34 1.83 89 URI_HEX 11186 1.91 2.69 1.78 90 BAYES_80 11092 2.29 5.40 1.76 91 XM_CamelCaseFrm001 11042 2.10 4.15 1.75 92 XM_SPF_SoftFail 10992 2.32 5.68 1.74 93 T_TooManySym_02 10817 1.58 0.75 1.72 94 TooManyTo_002 10800 1.61 0.98 1.71 95 MIME_HTML_ONLY_MULTI 10747 2.05 4.11 1.71 96 SUBJ_ALL_CAPS 10361 1.77 2.48 1.64 97 XMDiploma_00 10241 1.79 2.75 1.63 98 T_XMDrugObfuBody_08 9677 1.80 3.38 1.54 99 UNTRUSTED_Relay 9607 3.60 15.79 1.53 100 XM_DK_Undo_01 9308 1.48 1.46 1.48 101 TR_MetaPhish_Combo_01 8944 1.35 0.92 1.42 102 RELAYCOUNTRY_CA 8926 1.82 4.20 1.42 103 HELO_NODOT 8876 1.41 1.41 1.41 104 HELO_NO_DOMAIN 8867 1.41 1.41 1.41 105 BAYES_999 8859 3.41 15.18 1.41 106 XM_OfRef6 8856 1.69 3.40 1.41 107 CK_HELO_DYNAMIC_SPLIT_IP 8680 1.27 0.60 1.38 108 HELO_DYNAMIC_IPADDR2 8628 1.19 0.14 1.37 109 TR_Symld_Words 8595 1.51 2.33 1.36 110 IN_HORDE_ADDRESS_BOOK 8050 1.10 0.03 1.28 111 XMStockSpam_06 7946 1.30 1.55 1.26 112 INVALID_MSGID 7784 1.11 0.39 1.24 113 XMCapTrack 7584 1.08 0.32 1.20 114 TR_XM_RelayPhish 7405 1.23 1.55 1.18 115 TooManyTo_003 7377 1.12 0.81 1.17 116 TM2_M_VERY_LONG_WORD 6988 1.23 1.92 1.11 117 XMBdyGiftCard01 6986 1.19 1.68 1.11 118 XMGenDplmaNmb 6750 1.20 1.97 1.07 119 T_XMDrugObfuBody_00 6736 1.19 1.89 1.07 120 XMPhish11 6513 1.11 1.56 1.03 121 BAYES_95 6250 1.29 3.05 0.99 122 RELAYCOUNTRY_GB 6211 1.51 4.58 0.99 123 XM_H_Long_From02 6103 1.00 1.21 0.97 124 NO_DNS_FOR_FROM 6056 1.21 2.69 0.96 125 TR_XM_PHPDW 6025 1.30 3.33 0.96 126 TR_XM_PHPForged 5951 1.29 3.32 0.94 127 TR_XM_FormFill2 5911 1.28 3.29 0.94 128 XM_H_PHPOS 5894 1.28 3.29 0.94 129 XMSexyCombo_01 5846 1.32 3.65 0.93 130 XM_GoogleGroups 5836 0.87 0.55 0.93 131 URI_TRY_3LD 5557 0.86 0.72 0.88 132 USER_IN_DEF_DKIM_WL 5540 0.75 0.01 0.88 133 DKIM_ADSP_CUSTOM_MED 5524 0.92 1.16 0.88 134 TooManyTo_004 5485 0.84 0.68 0.87 135 XMGappySubj_01 5440 0.79 0.39 0.86 136 XM_UB50 5384 1.90 8.08 0.85 137 RCVD_IN_BL_SPAMCOP_NET 5244 1.31 4.11 0.83 138 TR_DCC_Bayes_99 5234 3.05 16.10 0.83 139 XMHTML_After_End 4643 0.84 1.41 0.74 140 TooManyTo_005 4611 0.71 0.59 0.73 141 XMBody_17 4466 0.88 1.89 0.71 142 SpammyFromTLD_01 4383 1.13 3.68 0.70 143 XMMoneyMeta_00 4171 0.79 1.57 0.66 144 T_FILL_THIS_FORM_SHORT 4133 0.71 1.04 0.66 145 XM_ProductURIs 4079 0.70 1.01 0.65 146 HTTPS_HTTP_MISMATCH 4038 0.65 0.73 0.64 147 XMHTMLBadTable_001 3960 0.65 0.75 0.63 148 XMBrknScrpt_02 3921 0.85 2.20 0.62 149 NML_ADSP_CUSTOM_MED 3886 0.65 0.85 0.62 150 XM_SPF_Unknown 3878 0.72 1.33 0.62 151 TO_NO_BRKTS_HTML_ONLY 3835 0.57 0.35 0.61 152 XMSolicitRefs_0 3781 0.58 0.44 0.60 153 T_Symld_Words_02 3716 0.64 0.94 0.59 154 TR_LOTS_OF_MONEY2 3597 0.71 1.53 0.57 155 T_MONEY_PERCENT 3597 0.71 1.53 0.57 156 T_XMHurry_00 3539 0.69 1.43 0.56 157 XMSubMetaI_00 3320 0.78 2.26 0.53 158 PLING_QUERY 3263 0.53 0.60 0.52 159 T_OBFU_PDF_ATTACH 3240 0.48 0.25 0.51 160 XMBody_95 3220 0.45 0.11 0.51 161 TM2_M_A_HREF_HREF 3204 0.58 1.02 0.51 162 HTML_FONT_FACE_BAD 3167 0.57 0.94 0.50 163 HTML_TAG_BALANCE_BODY 3085 0.51 0.62 0.49 164 XMNoVowels 3070 0.54 0.86 0.49 165 XMPhish30 3040 0.61 1.39 0.48 166 FORGED_GMAIL_RCVD 3007 0.55 0.95 0.48 167 RCVD_IN_MSPIKE_H5 2949 0.41 0.10 0.47 168 XM_H_PHPMailer 2934 0.61 1.49 0.47 169 XM_ShortIntro_01 2928 0.46 0.44 0.46 170 XMSexyCombo_04 2927 0.73 2.29 0.46 171 FROM_GOV_DKIM_AU 2897 0.41 0.13 0.46 172 URI_NOVOWEL 2880 0.60 1.47 0.46 173 XM_B_REG_HTML 2871 0.42 0.20 0.46 174 RELAYCOUNTRY_DE 2837 0.80 2.84 0.45 175 RELAYCOUNTRY_AU 2770 0.46 0.59 0.44 176 USER_IN_WHITELIST 2696 0.37 0.00 0.43 177 FILL_THIS_FORM 2599 0.61 1.77 0.41 178 XMPhish14 2555 0.47 0.86 0.41 179 XMSubMetaSxObfu_03 2509 0.48 0.95 0.40 180 XM_Body_Obfu01 2491 0.42 0.56 0.40 181 T_TooManySym_03 2472 0.37 0.23 0.39 182 XMBody_78 2455 0.44 0.74 0.39 183 URIBL_SBL_A 2413 0.47 1.00 0.38 184 THIS_AD 2344 0.45 0.89 0.37 185 XMLngstWrd_00 2338 0.36 0.32 0.37 186 TR_LOTS_OF_MONEY3 2334 0.45 0.93 0.37 187 TM2_M_BODY_EMPTY 2331 0.42 0.73 0.37 188 HTML_IMAGE_ONLY_32 2328 0.35 0.22 0.37 189 SHORT_HELO_AND_INLINE_IMAGE 2302 0.34 0.20 0.37 190 FROM_GOV_SPOOF 2247 0.36 0.37 0.36 191 XMBSHREFv2 2221 0.36 0.44 0.35 192 FSL_THIS_IS_ADV 2200 0.34 0.31 0.35 193 T_MANY_PILL_PRICE 2192 0.31 0.08 0.35 194 XMLngstWrd_01 2171 0.34 0.29 0.34 195 DKIM_ADSP_NXDOMAIN 2130 0.65 2.49 0.34 196 SpammyFromTLD_02 2122 1.53 8.54 0.34 197 XMOemUri 2115 0.30 0.12 0.34 198 XMDateMe_00 2102 0.35 0.43 0.33 199 MISSING_HEADERS 2100 0.44 1.04 0.33 200 XM_B_COPY_HTML 2040 0.36 0.54 0.32 ----------------------------------------------------------------------