Email: 685098 Autolearn: 0 AvgScore: 1.01 AvgScanTime: 2.14 sec Spam: 103433 Autolearn: 0 AvgScore: 12.88 AvgScanTime: 2.92 sec Ham: 581665 Autolearn: 0 AvgScore: -1.10 AvgScanTime: 2.00 sec Time Spent Running SA: 406.52 hours Time Spent Processing Spam: 84.01 hours Time Spent Processing Ham: 322.51 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 96275 81.91 93.08 79.93 2 DCC_CHECK 82382 45.94 79.65 39.95 3 DKIM_SIGNED 74319 70.73 71.85 70.53 4 XM_DK_Pass 71488 69.36 69.12 69.40 5 XM_B_Unicode 70780 65.05 68.43 64.45 6 XMListUnsubscribeExists 67105 51.04 64.88 48.58 7 DKIM_VALID 66925 65.92 64.70 66.14 8 BAYES_50 52296 49.26 50.56 49.03 9 DKIM_VALID_AU 51260 49.66 49.56 49.68 10 XM_B_Unicode3 44904 39.00 43.41 38.22 11 MIME_HTML_ONLY 38561 21.59 37.28 18.80 12 XM_DK_Undo_02 32950 9.31 31.86 5.31 13 HTML_FONT_LOW_CONTRAST 32105 27.63 31.04 27.02 14 LOC_TINY_FONT_1 31019 23.69 29.99 22.57 15 XMSubLong 28358 21.28 27.42 20.19 16 RELAYCOUNTRY_META 27471 8.33 26.56 5.09 17 BOTNET 24913 5.62 24.09 2.34 18 FVGT_m_MULTI_ODD 24180 21.11 23.38 20.70 19 DKIM_VALID_EF 22740 23.89 21.99 24.23 20 MultiRelay 22235 17.93 21.50 17.29 21 XM_Body_Dirty_Words 22014 14.15 21.28 12.88 22 BOTNET_IPINHOSTNAME 21308 7.11 20.60 4.72 23 FSL_BULK_SIG 21194 8.71 20.49 6.61 24 BAYES_99 20624 4.92 19.94 2.25 25 DCC_CHECK_NEGATIVE 19158 52.22 18.52 58.22 26 T_KAM_HTML_FONT_INVALID 18558 16.60 17.94 16.36 27 T_TM2_M_HEADER_IN_MSG 18474 26.53 17.86 28.07 28 XM_UncommonTLD01 17679 5.04 17.09 2.89 29 XM_Multi_Part_URI 17554 11.97 16.97 11.08 30 UNTRUSTED_Relay 16910 3.84 16.35 1.62 31 TR_DCC_Bayes_99 16681 3.29 16.13 1.00 32 BAYES_999 15784 3.82 15.26 1.78 33 HTML_IMAGE_RATIO_02 14662 8.84 14.18 7.89 34 XM_Evil_Numbers_Gen 13959 9.48 13.50 8.77 35 LOTS_OF_MONEY 13826 8.84 13.37 8.03 36 XMSexyCombo_05 12816 5.08 12.39 3.78 37 XM_H_Long_From01 10993 6.62 10.63 5.90 38 T_XMDrugObfuBody_14 9699 8.55 9.38 8.40 39 XM_UB50 9562 2.15 9.24 0.89 40 SpammyFromTLD_02 9306 1.71 9.00 0.42 41 XMSubMetaSx_00 8815 4.21 8.52 3.44 42 MPART_ALT_DIFF 8704 4.34 8.42 3.62 43 HTML_MIME_NO_HTML_TAG 8688 2.76 8.40 1.76 44 T_REMOTE_IMAGE 8571 4.29 8.29 3.58 45 XMNumbers 8219 3.88 7.95 3.16 46 LotsOfNums_01 7907 8.02 7.64 8.08 47 DKIM_INVALID 7394 4.80 7.15 4.38 48 KHOP_HELO_FCRDNS 7099 2.81 6.86 2.08 49 HTML_IMAGE_RATIO_04 6994 5.96 6.76 5.82 50 TooManyTo_001 6842 7.10 6.61 7.19 51 XM_SPF_SoftFail 6806 2.79 6.58 2.12 52 RCVD_IN_BL_SPAMCOP_NET 6696 1.65 6.47 0.79 53 XM_B_Phish_Phrases 6654 5.76 6.43 5.64 54 XM_DIRTYINTL 6405 3.34 6.19 2.83 55 HTML_SHORT_LINK_IMG_1 6262 0.94 6.05 0.03 56 XM_B_SpammyTLD 6137 3.66 5.93 3.26 57 RCVD_IN_MSPIKE_H2 5465 6.28 5.28 6.46 58 BAYES_80 5392 2.21 5.21 1.68 59 BAYES_40 5392 6.60 5.21 6.85 60 FROM_MISSP_REPLYTO 5271 0.77 5.10 0.01 61 XMStrtUSub 5243 3.91 5.07 3.71 62 MIME_HTML_MOSTLY 5234 2.70 5.06 2.28 63 MIME_HTML_ONLY_MULTI 5186 2.41 5.01 1.95 64 BOTNET_NORDNS 5099 0.83 4.93 0.11 65 MIME_QP_LONG_LINE 4942 5.36 4.78 5.47 66 HTML_IMAGE_RATIO_06 4921 3.32 4.76 3.06 67 BAYES_60 4799 3.56 4.64 3.37 68 BAYES_00 4738 22.06 4.58 25.17 69 RELAYCOUNTRY_GB 4652 1.57 4.50 1.05 70 BAYES_20 4524 5.92 4.37 6.19 71 RCVD_IN_RP_RNBL 4493 0.68 4.34 0.03 72 XM_URI_RBL 4449 0.91 4.30 0.31 73 SpammyFromTLD_01 4333 1.24 4.19 0.72 74 TR_XM_PHPDW 4280 1.16 4.14 0.64 75 TR_XM_PHPForged 4270 1.15 4.13 0.62 76 TR_XM_FormFill2 4237 1.14 4.10 0.62 77 XM_H_PHPOS 4230 1.14 4.09 0.61 78 RCVD_IN_PSBL 4190 0.62 4.05 0.01 79 XM_BadFromFormat 4183 0.70 4.04 0.10 80 RDNS_DYNAMIC 4060 0.86 3.93 0.31 81 MultiRelay_Combo 4009 0.76 3.88 0.21 82 MultiRelay_CC 4009 0.76 3.88 0.21 83 RELAYCOUNTRY_CA 3964 1.73 3.83 1.35 84 T_HTML_TAG_BALANCE_CENTER 3915 0.69 3.79 0.15 85 BODY_URI_ONLY 3904 0.64 3.77 0.08 86 TM2_M_URI_OPT_OUT 3895 9.81 3.77 10.88 87 REPLYTO_WITHOUT_TO_CC 3868 0.59 3.74 0.03 88 RELAYCOUNTRY_FR 3858 0.91 3.73 0.41 89 SUBJ_ALL_CAPS 3809 2.04 3.68 1.75 90 HTML_IMAGE_ONLY_12 3637 0.66 3.52 0.15 91 HTML_IMAGE_RATIO_08 3559 2.33 3.44 2.14 92 HDRS_LCASE_IMGONLY 3491 0.54 3.38 0.03 93 T_TooManySym_01 3477 5.11 3.36 5.42 94 T_Symld_Words_02 3375 0.96 3.26 0.55 95 MIME_HEADER_CTYPE_ONLY 3361 0.56 3.25 0.08 96 XM_SendGrid 3305 5.47 3.20 5.87 97 DOS_RCVD_IP_TWICE_B 3201 0.53 3.09 0.08 98 XMDiploma_00 3195 1.88 3.09 1.66 99 HTML_IMAGE_ONLY_08 3133 0.54 3.03 0.10 100 TO_EQ_FM_DOM_HTML_IMG 3129 0.46 3.03 0.01 101 FROM_EXCESS_BASE64 3120 3.17 3.02 3.20 102 XM_CamelCaseFrm001 3102 2.17 3.00 2.02 103 XMSexyCombo_01 3089 1.00 2.99 0.65 104 TR_Mismatch_TLD_02 3019 0.52 2.92 0.09 105 BAYES_95 2967 1.30 2.87 1.02 106 NO_DNS_FOR_FROM 2855 1.35 2.76 1.10 107 DATE_IN_PAST_12_24 2772 0.43 2.68 0.03 108 URI_HEX 2643 2.02 2.56 1.92 109 NORDNS_LOW_CONTRAST 2630 0.39 2.54 0.01 110 T_XMDrugObfuBody_08 2548 1.58 2.46 1.42 111 DKIM_ADSP_NXDOMAIN 2396 0.88 2.32 0.62 112 FROM_SUSPICIOUS_NTLD 2387 0.37 2.31 0.02 113 XMBdyGiftCard01 2385 1.31 2.31 1.14 114 BAYES_05 2353 3.81 2.27 4.08 115 FROM_SUSPICIOUS_NTLD_FP 2327 0.36 2.25 0.02 116 FROM_MISSP_DYNIP 2318 0.34 2.24 0.00 117 SUBJ_DOLLARS 2279 0.78 2.20 0.53 118 TR_XM_DK_Bayes 2237 14.38 2.16 16.56 119 T_XMDrugObfuBody_00 2144 1.10 2.07 0.93 120 XM_OfRef6 2141 1.40 2.07 1.29 121 TM2_M_VERY_LONG_WORD 2135 1.44 2.06 1.33 122 URI_NOVOWEL 2132 0.69 2.06 0.44 123 XM_DrugUnitList 2096 0.31 2.03 0.00 124 XMBrknScrpt_02 2093 0.87 2.02 0.66 125 XMMoneyMeta_00 2080 0.72 2.01 0.49 126 TR_XM_DK_Bayes1 2011 13.74 1.94 15.83 127 RCVD_IN_IADB_LISTED 1991 4.19 1.92 4.59 128 XMPhish11 1916 1.25 1.85 1.14 129 HOSTED_IMG_DIRECT_MX 1907 0.28 1.84 0.00 130 RCVD_IN_IADB_SPF 1900 3.65 1.84 3.97 131 RCVD_IN_IADB_DK 1862 3.17 1.80 3.41 132 RCVD_IN_IADB_SENDERID 1859 3.23 1.80 3.48 133 RELAYCOUNTRY_NL 1841 0.42 1.78 0.18 134 TR_LOTS_OF_MONEY2 1769 0.94 1.71 0.81 135 T_MONEY_PERCENT 1769 0.94 1.71 0.81 136 XMSubMetaSSx_00 1747 0.42 1.69 0.20 137 XMGenDplmaNmb 1718 1.13 1.66 1.04 138 ALL_TRUSTED 1688 18.77 1.63 21.82 139 XM_DK_Undo_01 1679 1.69 1.62 1.70 140 URIBL_DBL_ABUSE_REDIR 1620 0.24 1.57 0.01 141 XM_H_PHPMailer 1619 0.71 1.57 0.55 142 TR_Symld_Words 1619 1.54 1.57 1.53 143 XMStockSpam_06 1601 1.32 1.55 1.28 144 XM_H_Long_From02 1589 1.27 1.54 1.23 145 TM2_M_BODY_EMPTY 1581 0.57 1.53 0.40 146 UNPARSEABLE_RELAY 1569 2.05 1.52 2.14 147 XMSexyCombo_04 1564 0.32 1.51 0.10 148 TR_XM_RelayPhish 1520 1.04 1.47 0.96 149 TR_XM_DK_SendGrid 1516 2.94 1.47 3.20 150 DATE_IN_PAST_03_06 1496 0.34 1.45 0.14 151 XMHTML_After_End 1489 0.99 1.44 0.91 152 MAILING_LIST_MULTI 1478 2.08 1.43 2.20 153 XM_UB99 1473 0.22 1.42 0.00 154 T_FILL_THIS_FORM_SHORT 1472 0.82 1.42 0.71 155 URI_TRY_3LD 1453 1.32 1.40 1.31 156 XMEmptyBody_01 1443 0.32 1.40 0.13 157 XMSubMetaI_00 1439 0.69 1.39 0.57 158 RELAYCOUNTRY_IN 1432 0.31 1.38 0.12 159 XMSubject_09 1425 0.22 1.38 0.01 160 TR_XM_INV_DKIM 1420 0.29 1.37 0.10 161 XM_H_PHPOS_M 1400 0.41 1.35 0.24 162 RELAYCOUNTRY_AT 1395 0.39 1.35 0.22 163 HDRS_MISSP 1369 0.21 1.32 0.01 164 HTML_IMAGE_ONLY_20 1356 0.40 1.31 0.24 165 RCVD_IN_RP_SAFE 1355 7.94 1.31 9.11 166 HTML_IMAGE_ONLY_16 1348 0.37 1.30 0.21 167 LOADSA_MONEY_COMBO 1333 0.23 1.29 0.04 168 NO_MEDICAL 1310 0.19 1.27 0.00 169 TR_XM_DK_Bayes2 1257 11.70 1.22 13.56 170 RCVD_IN_MSPIKE_WL 1245 4.39 1.20 4.96 171 XM_UB60 1232 0.23 1.19 0.05 172 XMGppyBdWords 1207 0.37 1.17 0.23 173 DKIM_ADSP_CUSTOM_MED 1204 1.02 1.16 0.99 174 T_XMHurry_00 1203 0.72 1.16 0.64 175 FSL_THIS_IS_ADV 1189 0.46 1.15 0.34 176 URI_NO_WWW_INFO_CGI 1183 0.19 1.14 0.02 177 ALIBABA_IMG_NOT_RCVD_ALI 1177 0.17 1.14 0.00 178 ADMITS_SPAM 1157 0.20 1.12 0.03 179 TR_Mismatch_TLD_01 1089 0.32 1.05 0.19 180 XMBody_17 1085 0.77 1.05 0.73 181 RELAYCOUNTRY_BG 1059 0.16 1.02 0.01 182 HELO_NODOT 1057 1.35 1.02 1.40 183 HELO_NO_DOMAIN 1056 1.34 1.02 1.40 184 FORGED_GMAIL_RCVD 1049 0.59 1.01 0.51 185 URIBL_BLACK 1042 0.17 1.01 0.02 186 XM_UB80 1038 0.17 1.00 0.02 187 RCVD_IN_MSPIKE_H3 1029 3.70 0.99 4.18 188 URIBL_SBL_A 1016 0.50 0.98 0.41 189 HTML_FONT_FACE_BAD 1006 0.76 0.97 0.73 190 AMAZON_IMG_NOT_RCVD_AMZN 1002 0.18 0.97 0.04 191 XMPhish30 990 0.62 0.96 0.56 192 XM_UB95 984 0.15 0.95 0.01 193 NML_ADSP_CUSTOM_MED 980 0.74 0.95 0.71 194 HK_RANDOM_REPLYTO 979 0.28 0.95 0.16 195 XMPhish14 968 0.39 0.94 0.30 196 URIBL_DBL_SPAM 951 0.18 0.92 0.05 197 TooManyTo_002 931 1.64 0.90 1.77 198 HOSTED_IMG_MULTI 919 0.13 0.89 0.00 199 XM_PDF 888 3.34 0.86 3.79 200 TM2_M_A_HREF_HREF 867 0.55 0.84 0.50 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 464919 81.91 93.08 79.93 2 DKIM_SIGNED 410221 70.73 71.85 70.53 3 XM_DK_Pass 403694 69.36 69.12 69.40 4 DKIM_VALID 384720 65.92 64.70 66.14 5 XM_B_Unicode 374885 65.05 68.43 64.45 6 DCC_CHECK_NEGATIVE 338619 52.22 18.52 58.22 7 DKIM_VALID_AU 288954 49.66 49.56 49.68 8 BAYES_50 285173 49.26 50.56 49.03 9 XMListUnsubscribeExists 282582 51.04 64.88 48.58 10 DCC_CHECK 232365 45.94 79.65 39.95 11 XM_B_Unicode3 222302 39.00 43.41 38.22 12 T_TM2_M_HEADER_IN_MSG 163268 26.53 17.86 28.07 13 HTML_FONT_LOW_CONTRAST 157160 27.63 31.04 27.02 14 BAYES_00 146401 22.06 4.58 25.17 15 DKIM_VALID_EF 140916 23.89 21.99 24.23 16 LOC_TINY_FONT_1 131259 23.69 29.99 22.57 17 ALL_TRUSTED 126929 18.77 1.63 21.82 18 FVGT_m_MULTI_ODD 120422 21.11 23.38 20.70 19 XMSubLong 117462 21.28 27.42 20.19 20 MIME_HTML_ONLY 109324 21.59 37.28 18.80 21 MultiRelay 100569 17.93 21.50 17.29 22 TR_XM_DK_Bayes 96297 14.38 2.16 16.56 23 T_KAM_HTML_FONT_INVALID 95179 16.60 17.94 16.36 24 TR_XM_DK_Bayes1 92096 13.74 1.94 15.83 25 TR_XM_DK_Bayes2 78891 11.70 1.22 13.56 26 XM_Body_Dirty_Words 74934 14.15 21.28 12.88 27 XM_Multi_Part_URI 64436 11.97 16.97 11.08 28 TM2_M_URI_OPT_OUT 63293 9.81 3.77 10.88 29 ANY_BOUNCE_MESSAGE 62921 9.26 0.52 10.82 30 BOUNCE_MESSAGE 62915 9.26 0.51 10.82 31 RCVD_IN_RP_SAFE 53013 7.94 1.31 9.11 32 XM_Evil_Numbers_Gen 50999 9.48 13.50 8.77 33 T_XMDrugObfuBody_14 48874 8.55 9.38 8.40 34 LotsOfNums_01 47020 8.02 7.64 8.08 35 LOTS_OF_MONEY 46716 8.84 13.37 8.03 36 HTML_IMAGE_RATIO_02 45916 8.84 14.18 7.89 37 RCVD_IN_RP_CERTIFIED 45062 6.67 0.60 7.75 38 TooManyTo_001 41833 7.10 6.61 7.19 39 XM_DKIMWhitelistDomains 39905 5.83 0.02 6.86 40 BAYES_40 39826 6.60 5.21 6.85 41 FSL_BULK_SIG 38476 8.71 20.49 6.61 42 RCVD_IN_MSPIKE_H2 37565 6.28 5.28 6.46 43 BAYES_20 36027 5.92 4.37 6.19 44 XM_H_Long_From01 34328 6.62 10.63 5.90 45 XM_SendGrid 34158 5.47 3.20 5.87 46 HTML_IMAGE_RATIO_04 33831 5.96 6.76 5.82 47 XM_B_Phish_Phrases 32823 5.76 6.43 5.64 48 MIME_QP_LONG_LINE 31799 5.36 4.78 5.47 49 T_TooManySym_01 31526 5.11 3.36 5.42 50 XM_DK_Undo_02 30860 9.31 31.86 5.31 51 RELAYCOUNTRY_META 29618 8.33 26.56 5.09 52 RCVD_IN_MSPIKE_WL 28843 4.39 1.20 4.96 53 BOTNET_IPINHOSTNAME 27428 7.11 20.60 4.72 54 URI_OPTOUT_3LD 26970 3.96 0.12 4.64 55 RCVD_IN_IADB_LISTED 26726 4.19 1.92 4.59 56 DKIM_INVALID 25501 4.80 7.15 4.38 57 RCVD_IN_MSPIKE_H3 24303 3.70 0.99 4.18 58 BAYES_05 23723 3.81 2.27 4.08 59 RCVD_IN_IADB_SPF 23093 3.65 1.84 3.97 60 XM_PDF 22017 3.34 0.86 3.79 61 XMSexyCombo_05 21979 5.08 12.39 3.78 62 XMStrtUSub 21553 3.91 5.07 3.71 63 MPART_ALT_DIFF 21030 4.34 8.42 3.62 64 T_REMOTE_IMAGE 20846 4.29 8.29 3.58 65 RCVD_IN_IADB_SENDERID 20248 3.23 1.80 3.48 66 XMSubMetaSx_00 20004 4.21 8.52 3.44 67 RCVD_IN_IADB_DK 19828 3.17 1.80 3.41 68 BAYES_60 19575 3.56 4.64 3.37 69 IN_ZIMBRA_NJ_WHITELIST 19450 2.84 0.02 3.34 70 XM_B_SpammyTLD 18942 3.66 5.93 3.26 71 TR_XM_DK_SendGrid 18635 2.94 1.47 3.20 72 FROM_EXCESS_BASE64 18595 3.17 3.02 3.20 73 XMNumbers 18391 3.88 7.95 3.16 74 HTML_IMAGE_RATIO_06 17817 3.32 4.76 3.06 75 RCVD_IN_IADB_VOUCHED 17147 2.57 0.47 2.95 76 XM_UncommonTLD01 16821 5.04 17.09 2.89 77 XM_DIRTYINTL 16480 3.34 6.19 2.83 78 TO_MALFORMED 13924 2.03 0.01 2.39 79 BOTNET 13606 5.62 24.09 2.34 80 MIME_HTML_MOSTLY 13246 2.70 5.06 2.28 81 BAYES_99 13103 4.92 19.94 2.25 82 MAILING_LIST_MULTI 12775 2.08 1.43 2.20 83 UNPARSEABLE_RELAY 12472 2.05 1.52 2.14 84 TVD_RCVD_IP 12472 1.89 0.49 2.14 85 HTML_IMAGE_RATIO_08 12430 2.33 3.44 2.14 86 XM_SPF_SoftFail 12335 2.79 6.58 2.12 87 KHOP_HELO_FCRDNS 12122 2.81 6.86 2.08 88 XM_CamelCaseFrm001 11740 2.17 3.00 2.02 89 T_TooManySym_02 11386 1.78 0.81 1.96 90 MIME_HTML_ONLY_MULTI 11350 2.41 5.01 1.95 91 URI_HEX 11191 2.02 2.56 1.92 92 RCVD_IN_IADB_OPTIN 10860 1.64 0.35 1.87 93 BAYES_999 10355 3.82 15.26 1.78 94 TooManyTo_002 10275 1.64 0.90 1.77 95 HTML_MIME_NO_HTML_TAG 10228 2.76 8.40 1.76 96 SUBJ_ALL_CAPS 10201 2.04 3.68 1.75 97 XM_DK_Undo_01 9894 1.69 1.62 1.70 98 BAYES_80 9748 2.21 5.21 1.68 99 XMDiploma_00 9653 1.88 3.09 1.66 100 UNTRUSTED_Relay 9429 3.84 16.35 1.62 101 TR_Symld_Words 8925 1.54 1.57 1.53 102 CK_HELO_DYNAMIC_SPLIT_IP 8705 1.35 0.53 1.50 103 HELO_DYNAMIC_IPADDR2 8667 1.28 0.10 1.49 104 T_XMDrugObfuBody_08 8245 1.58 2.46 1.42 105 HELO_NODOT 8167 1.35 1.02 1.40 106 HELO_NO_DOMAIN 8155 1.34 1.02 1.40 107 TR_MetaPhish_Combo_01 8025 1.25 0.55 1.38 108 IN_HORDE_ADDRESS_BOOK 7911 1.16 0.06 1.36 109 RELAYCOUNTRY_CA 7881 1.73 3.83 1.35 110 TM2_M_VERY_LONG_WORD 7726 1.44 2.06 1.33 111 INVALID_MSGID 7704 1.16 0.26 1.32 112 URI_TRY_3LD 7618 1.32 1.40 1.31 113 XM_OfRef6 7480 1.40 2.07 1.29 114 XMStockSpam_06 7449 1.32 1.55 1.28 115 XMCapTrack 7276 1.11 0.34 1.25 116 XM_H_Long_From02 7126 1.27 1.54 1.23 117 TooManyTo_003 6846 1.11 0.72 1.18 118 XMPhish11 6618 1.25 1.85 1.14 119 XMBdyGiftCard01 6613 1.31 2.31 1.14 120 NO_DNS_FOR_FROM 6373 1.35 2.76 1.10 121 USER_IN_DEF_DKIM_WL 6120 0.90 0.02 1.05 122 RELAYCOUNTRY_GB 6101 1.57 4.50 1.05 123 XMGenDplmaNmb 6050 1.13 1.66 1.04 124 BAYES_95 5935 1.30 2.87 1.02 125 TR_DCC_Bayes_99 5826 3.29 16.13 1.00 126 DKIM_ADSP_CUSTOM_MED 5765 1.02 1.16 0.99 127 XM_GoogleGroups 5711 0.91 0.48 0.98 128 TR_XM_RelayPhish 5582 1.04 1.47 0.96 129 XMGappySubj_01 5505 0.85 0.34 0.95 130 T_XMDrugObfuBody_00 5383 1.10 2.07 0.93 131 XMHTML_After_End 5304 0.99 1.44 0.91 132 XM_UB50 5157 2.15 9.24 0.89 133 TooManyTo_004 5017 0.82 0.59 0.86 134 TR_LOTS_OF_MONEY2 4698 0.94 1.71 0.81 135 T_MONEY_PERCENT 4698 0.94 1.71 0.81 136 RCVD_IN_BL_SPAMCOP_NET 4608 1.65 6.47 0.79 137 XM_ProductURIs 4439 0.76 0.74 0.76 138 HTML_FONT_FACE_BAD 4221 0.76 0.97 0.73 139 XMBody_17 4221 0.77 1.05 0.73 140 SpammyFromTLD_01 4172 1.24 4.19 0.72 141 T_FILL_THIS_FORM_SHORT 4141 0.82 1.42 0.71 142 TooManyTo_005 4137 0.68 0.49 0.71 143 NML_ADSP_CUSTOM_MED 4114 0.74 0.95 0.71 144 XM_SPF_Unknown 3861 0.69 0.83 0.66 145 XMBrknScrpt_02 3853 0.87 2.02 0.66 146 XMSexyCombo_01 3779 1.00 2.99 0.65 147 TR_XM_PHPDW 3701 1.16 4.14 0.64 148 T_XMHurry_00 3698 0.72 1.16 0.64 149 TR_XM_PHPForged 3626 1.15 4.13 0.62 150 DKIM_ADSP_NXDOMAIN 3625 0.88 2.32 0.62 151 TR_XM_FormFill2 3582 1.14 4.10 0.62 152 XM_H_PHPOS 3554 1.14 4.09 0.61 153 HTTPS_HTTP_MISMATCH 3536 0.62 0.67 0.61 154 XMNoVowels 3308 0.56 0.51 0.57 155 XMSubMetaI_00 3295 0.69 1.39 0.57 156 XMBody_95 3291 0.49 0.08 0.57 157 FROM_GOV_DKIM_AU 3262 0.49 0.12 0.56 158 XMPhish30 3250 0.62 0.96 0.56 159 T_OBFU_PDF_ATTACH 3229 0.51 0.23 0.56 160 XM_H_PHPMailer 3217 0.71 1.57 0.55 161 T_Symld_Words_02 3199 0.96 3.26 0.55 162 RCVD_IN_MSPIKE_H5 3111 0.47 0.09 0.53 163 XMLngstWrd_00 3090 0.53 0.50 0.53 164 SUBJ_DOLLARS 3077 0.78 2.20 0.53 165 XM_B_REG_HTML 3000 0.49 0.37 0.52 166 FORGED_GMAIL_RCVD 2977 0.59 1.01 0.51 167 TM2_M_A_HREF_HREF 2924 0.55 0.84 0.50 168 HTML_TAG_BALANCE_BODY 2901 0.49 0.47 0.50 169 XMMoneyMeta_00 2861 0.72 2.01 0.49 170 RELAYCOUNTRY_AU 2860 0.50 0.52 0.49 171 XM_ShortIntro_01 2830 0.50 0.59 0.49 172 XMLngstWrd_01 2752 0.47 0.48 0.47 173 XMHTMLBadTable_001 2685 0.48 0.57 0.46 174 T_TooManySym_03 2664 0.42 0.23 0.46 175 XMBody_78 2639 0.50 0.77 0.45 176 FILL_THIS_FORM 2629 0.47 0.55 0.45 177 URI_NOVOWEL 2583 0.69 2.06 0.44 178 XM_B_COPY_HTML 2506 0.46 0.63 0.43 179 XM_shorewaves_Whitelist 2502 0.37 0.00 0.43 180 USER_IN_WHITELIST 2475 0.36 0.00 0.43 181 MISSING_HEADERS 2466 0.48 0.77 0.42 182 SpammyFromTLD_02 2435 1.71 9.00 0.42 183 PLING_QUERY 2388 0.46 0.72 0.41 184 URIBL_SBL_A 2383 0.50 0.98 0.41 185 RELAYCOUNTRY_FR 2370 0.91 3.73 0.41 186 TR_LOTS_OF_MONEY3 2358 0.46 0.76 0.41 187 AC_DIV_BONANZA 2354 0.37 0.20 0.40 188 TM2_M_BODY_EMPTY 2353 0.57 1.53 0.40 189 HTML_IMAGE_ONLY_32 2333 0.39 0.35 0.40 190 FROM_GOV_SPOOF 2321 0.39 0.33 0.40 191 REMOVE_BEFORE_LINK 2314 0.43 0.60 0.40 192 RELAYCOUNTRY_DE 2297 0.44 0.70 0.39 193 SHORT_HELO_AND_INLINE_IMAGE 2231 0.35 0.14 0.38 194 DIET_1 2140 0.42 0.71 0.37 195 HTML_IMAGE_ONLY_28 2140 0.38 0.48 0.37 196 FILL_THIS_FORM_LONG 2137 0.39 0.50 0.37 197 XMDateMe_00 2102 0.43 0.79 0.36 198 XM_Body_Obfu01 2055 0.38 0.50 0.35 199 XMSubMetaSxObfu_02 2006 0.37 0.49 0.34 200 FSL_THIS_IS_ADV 1963 0.46 1.15 0.34 ----------------------------------------------------------------------