Email: 362194 Autolearn: 0 AvgScore: 0.48 AvgScanTime: 2.19 sec Spam: 60927 Autolearn: 0 AvgScore: 12.49 AvgScanTime: 3.20 sec Ham: 301267 Autolearn: 0 AvgScore: -1.95 AvgScanTime: 1.99 sec Time Spent Running SA: 220.80 hours Time Spent Processing Spam: 54.12 hours Time Spent Processing Ham: 166.68 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 55174 86.79 90.56 86.03 2 DCC_CHECK 47910 56.73 78.64 52.30 3 DKIM_SIGNED 45371 79.99 74.47 81.11 4 XM_DK_Pass 42788 78.38 70.23 80.03 5 XMListUnsubscribeExists 41839 60.77 68.67 59.17 6 XM_B_Unicode 41282 72.56 67.76 73.53 7 DKIM_VALID 39783 74.91 65.30 76.86 8 DKIM_VALID_AU 31367 61.09 51.48 63.03 9 XM_B_Unicode3 28507 46.88 46.79 46.90 10 BAYES_50 27758 51.84 45.56 53.11 11 LOC_TINY_FONT_1 21795 32.32 35.77 31.63 12 XM_DK_Undo_02 21309 11.55 34.97 6.81 13 HTML_FONT_LOW_CONTRAST 21209 34.67 34.81 34.64 14 RELAYCOUNTRY_META 20927 9.66 34.35 4.67 15 MIME_HTML_ONLY 19876 26.55 32.62 25.33 16 FVGT_m_MULTI_ODD 15101 22.39 24.79 21.90 17 XMSubLong 14698 23.50 24.12 23.37 18 BOTNET_IPINHOSTNAME 14482 9.19 23.77 6.24 19 BOTNET 14471 5.88 23.75 2.27 20 BAYES_99 14118 6.89 23.17 3.60 21 XM_Body_Dirty_Words 13024 17.79 21.38 17.06 22 DCC_CHECK_NEGATIVE 11912 42.05 19.55 46.60 23 MultiRelay 11861 16.08 19.47 15.40 24 UNTRUSTED_Relay 11718 4.66 19.23 1.71 25 BAYES_999 11372 5.58 18.66 2.93 26 FSL_BULK_SIG 11239 10.09 18.45 8.40 27 DKIM_VALID_EF 11220 25.59 18.42 27.04 28 TR_DCC_Bayes_99 10702 4.68 17.57 2.07 29 T_KAM_HTML_FONT_INVALID 10421 17.11 17.10 17.11 30 XM_Multi_Part_URI 10320 14.45 16.94 13.95 31 XM_UncommonTLD01 9982 5.97 16.38 3.87 32 HTML_IMAGE_RATIO_02 9704 13.67 15.93 13.21 33 T_TM2_M_HEADER_IN_MSG 9099 22.13 14.93 23.59 34 XM_Evil_Numbers_Gen 7803 11.91 12.81 11.73 35 MPART_ALT_DIFF 6447 5.14 10.58 4.04 36 XMSexyCombo_05 6304 6.25 10.35 5.42 37 SpammyFromTLD_02 5930 1.83 9.73 0.24 38 XM_UB50 5825 2.37 9.56 0.91 39 LOTS_OF_MONEY 5790 9.06 9.50 8.97 40 KHOP_HELO_FCRDNS 5628 3.07 9.24 1.83 41 DKIM_INVALID 5588 5.08 9.17 4.25 42 HTML_IMAGE_RATIO_04 5439 7.88 8.93 7.67 43 LotsOfNums_01 5115 7.95 8.40 7.87 44 T_REMOTE_IMAGE 4854 3.55 7.97 2.65 45 TooManyTo_001 4605 6.15 7.56 5.86 46 T_XMDrugObfuBody_14 4329 7.58 7.11 7.68 47 XMSubMetaSx_00 4279 4.22 7.02 3.65 48 XM_DIRTYINTL 4138 4.08 6.79 3.53 49 XMStrtUSub 4131 5.41 6.78 5.14 50 MIME_HTML_MOSTLY 4020 4.25 6.60 3.78 51 REPLYTO_WITHOUT_TO_CC 3980 1.13 6.53 0.04 52 RELAYCOUNTRY_GB 3857 1.49 6.33 0.51 53 RCVD_IN_RP_RNBL 3775 1.08 6.20 0.04 54 RCVD_IN_MSPIKE_H2 3740 6.86 6.14 7.00 55 HTML_SHORT_LINK_IMG_1 3593 1.01 5.90 0.03 56 XM_B_Phish_Phrases 3578 7.53 5.87 7.87 57 XM_H_Long_From01 3542 6.46 5.81 6.59 58 HTML_IMAGE_ONLY_12 3413 1.04 5.60 0.12 59 BAYES_80 3375 2.79 5.54 2.23 60 MIME_HEADER_CTYPE_ONLY 3357 1.01 5.51 0.10 61 HDRS_LCASE_IMGONLY 3269 0.92 5.37 0.02 62 BAYES_60 3258 4.03 5.35 3.76 63 TO_EQ_FM_DOM_HTML_IMG 3253 0.90 5.34 0.00 64 XMNumbers 3230 5.00 5.30 4.94 65 BAYES_40 3217 5.65 5.28 5.73 66 XM_SPF_SoftFail 3177 2.47 5.21 1.91 67 RELAYCOUNTRY_CA 3081 2.12 5.06 1.53 68 MIME_HTML_ONLY_MULTI 3022 2.52 4.96 2.03 69 BAYES_20 2874 4.64 4.72 4.63 70 T_TooManySym_01 2832 7.69 4.65 8.31 71 RELAYCOUNTRY_FR 2818 0.97 4.63 0.23 72 BAYES_00 2796 19.52 4.59 22.54 73 HTML_IMAGE_RATIO_06 2789 3.48 4.58 3.26 74 MultiRelay_CC 2686 0.90 4.41 0.19 75 MultiRelay_Combo 2686 0.90 4.41 0.19 76 RCVD_IN_PSBL 2637 0.75 4.33 0.03 77 URI_HEX 2634 2.53 4.32 2.17 78 DKIM_ADSP_NXDOMAIN 2592 1.16 4.25 0.53 79 RCVD_IN_BL_SPAMCOP_NET 2554 1.56 4.19 1.03 80 NO_DNS_FOR_FROM 2544 1.93 4.18 1.47 81 XM_OfRef6 2407 2.79 3.95 2.56 82 FROM_SUSPICIOUS_NTLD 2338 0.66 3.84 0.02 83 XM_B_SpammyTLD 2315 4.50 3.80 4.64 84 FROM_SUSPICIOUS_NTLD_FP 2294 0.65 3.77 0.02 85 TR_XM_PHPForged 2238 1.02 3.67 0.49 86 TR_XM_PHPDW 2234 0.99 3.67 0.45 87 TR_XM_FormFill2 2224 0.98 3.65 0.44 88 XM_H_PHPOS 2220 0.97 3.64 0.43 89 XMBdyGiftCard01 2151 3.23 3.53 3.17 90 MIME_QP_LONG_LINE 2129 4.11 3.49 4.23 91 FROM_EXCESS_BASE64 2084 4.47 3.42 4.68 92 HTML_MIME_NO_HTML_TAG 1962 1.66 3.22 1.35 93 URIBL_DBL_ABUSE_REDIR 1879 0.53 3.08 0.02 94 XM_SendGrid 1799 6.49 2.95 7.21 95 XMDiploma_00 1786 1.54 2.93 1.26 96 XM_CamelCaseFrm001 1775 2.24 2.91 2.11 97 XMSubMetaI_00 1738 1.21 2.85 0.88 98 RCVD_IN_RP_SAFE 1716 12.55 2.82 14.52 99 RDNS_DYNAMIC 1709 0.83 2.80 0.44 100 BAYES_05 1689 2.71 2.77 2.70 101 HTML_IMAGE_RATIO_08 1679 2.28 2.76 2.18 102 BAYES_95 1669 1.65 2.74 1.43 103 XM_URI_RBL 1657 0.83 2.72 0.45 104 T_XMDrugObfuBody_08 1597 1.43 2.62 1.19 105 XMSexyCombo_01 1594 0.94 2.62 0.61 106 TM2_M_URI_OPT_OUT 1516 2.05 2.49 1.96 107 HTML_FONT_SIZE_HUGE 1511 0.50 2.48 0.10 108 UNPARSEABLE_RELAY 1491 3.50 2.45 3.71 109 XMPhish11 1462 1.37 2.40 1.16 110 SUBJ_ALL_CAPS 1458 2.23 2.39 2.20 111 XM_Combo_Sbj 1417 0.51 2.33 0.14 112 RELAYCOUNTRY_DE 1413 0.71 2.32 0.38 113 MPART_ALT_DIFF_COUNT 1407 0.67 2.31 0.33 114 TR_Symld_Words 1322 1.68 2.17 1.58 115 TR_Mismatch_TLD_02 1321 0.42 2.17 0.06 116 RELAYCOUNTRY_PL 1316 0.38 2.16 0.02 117 XM_H_PHPMailer 1316 0.80 2.16 0.52 118 ALL_TRUSTED 1313 12.67 2.16 14.79 119 XMGenDplmaNmb 1310 0.89 2.15 0.63 120 TM2_M_VERY_LONG_WORD 1291 1.77 2.12 1.70 121 XMBody_17 1272 1.19 2.09 1.01 122 RELAYCOUNTRY_AT 1250 0.56 2.05 0.26 123 XM_UB60 1243 0.39 2.04 0.05 124 T_FILL_THIS_FORM_SHORT 1233 0.89 2.02 0.66 125 TR_XM_INV_DKIM 1199 0.48 1.97 0.18 126 RCVD_IN_MSPIKE_BL 1198 0.35 1.97 0.02 127 XM_H_PHPOS_M 1190 0.50 1.95 0.21 128 RELAYCOUNTRY_RU 1151 0.33 1.89 0.01 129 XMPhish30 1146 0.90 1.88 0.70 130 RCVD_IN_MSPIKE_L5 1138 0.32 1.87 0.00 131 TR_XM_DK_Bayes 1108 17.01 1.82 20.08 132 NORDNS_LOW_CONTRAST 1096 0.31 1.80 0.00 133 T_XMHurry_00 1052 1.38 1.73 1.31 134 T_MONEY_PERCENT 1031 0.62 1.69 0.40 135 TR_LOTS_OF_MONEY2 1031 0.62 1.69 0.40 136 URI_TRY_3LD 1030 1.85 1.69 1.88 137 SpammyFromTLD_01 996 0.71 1.63 0.52 138 XM_UB99 995 0.29 1.63 0.01 139 TR_XM_DK_Bayes1 958 16.26 1.57 19.23 140 RCVD_IN_IADB_LISTED 951 3.04 1.56 3.34 141 HTML_TAG_BALANCE_HEAD 944 0.32 1.55 0.08 142 HK_RANDOM_REPLYTO 938 0.47 1.54 0.25 143 INVALID_DATE 936 0.29 1.54 0.03 144 BOTNET_NORDNS 930 0.27 1.53 0.02 145 XMStockSpam_06 913 1.70 1.50 1.74 146 RCVD_IN_IADB_SPF 899 2.68 1.48 2.92 147 RCVD_IN_IADB_DK 890 2.35 1.46 2.53 148 RCVD_IN_IADB_SENDERID 889 2.42 1.46 2.61 149 DEAR_FRIEND 872 0.30 1.43 0.07 150 XM_H_Long_From02 855 1.20 1.40 1.16 151 TR_XM_RelayPhish 849 1.09 1.39 1.03 152 FILL_THIS_FORM 844 1.03 1.39 0.96 153 TR_XM_DK_SendGrid 827 3.62 1.36 4.08 154 T_XMDrugObfuBody_00 821 0.97 1.35 0.89 155 GAPPY_SUBJECT 819 0.45 1.34 0.27 156 RCVD_IN_MSPIKE_WL 802 4.28 1.32 4.88 157 XMBrknScrpt_02 799 1.01 1.31 0.95 158 DKIM_ADSP_CUSTOM_MED 778 0.98 1.28 0.92 159 FORM_FRAUD_5 770 0.21 1.26 0.00 160 XM_UB999 768 0.22 1.26 0.01 161 URIBL_SBL_A 760 0.54 1.25 0.39 162 XMLngstWrd_00 757 0.62 1.24 0.49 163 DATE_IN_PAST_03_06 757 0.28 1.24 0.08 164 SUBJ_DOLLARS 745 0.98 1.22 0.93 165 XMLngstWrd_01 745 0.58 1.22 0.45 166 HK_SCAM 743 0.22 1.22 0.02 167 FILL_THIS_FORM_LONG 737 0.94 1.21 0.89 168 XMPhish14 718 0.41 1.18 0.26 169 ADVANCE_FEE_4_NEW 717 0.20 1.18 0.00 170 XM_DK_Undo_01 711 1.37 1.17 1.41 171 URIBL_DBL_SPAM 707 0.27 1.16 0.09 172 RELAYCOUNTRY_PH 701 0.20 1.15 0.01 173 TR_XM_DK_Bayes2 694 14.66 1.14 17.40 174 NML_ADSP_CUSTOM_MED 694 0.72 1.14 0.63 175 XMLngstWrd_02 690 0.45 1.13 0.31 176 DATE_IN_FUTURE_03_06 688 0.19 1.13 0.00 177 TO_MALFORMED 688 4.09 1.13 4.68 178 XMLngstWrd_03 669 0.41 1.10 0.27 179 RELAYCOUNTRY_BR 663 0.19 1.09 0.01 180 HTML_FONT_FACE_BAD 662 0.70 1.09 0.63 181 MAILING_LIST_MULTI 662 1.55 1.09 1.65 182 FORGED_GMAIL_RCVD 659 0.56 1.08 0.46 183 XM_UB80 654 0.20 1.07 0.02 184 XMSexyCombo_04 650 0.26 1.07 0.09 185 T_TooManySym_02 645 2.77 1.06 3.11 186 XM_ProductURIs 632 1.33 1.04 1.39 187 LOW_PRICE 625 0.43 1.03 0.31 188 RCVD_IN_RP_CERTIFIED 623 10.67 1.02 12.62 189 RCVD_IN_MSPIKE_H3 591 3.76 0.97 4.32 190 XMSubMetaI_01 589 0.19 0.97 0.04 191 URIBL_BLACK 586 0.17 0.96 0.01 192 THIS_AD 585 0.32 0.96 0.20 193 XMSubMetaD_03 582 0.18 0.96 0.03 194 XM_OfRef7 577 0.43 0.95 0.33 195 RELAYCOUNTRY_VN 574 0.17 0.94 0.01 196 DRUGS_ERECTILE 565 0.19 0.93 0.04 197 XMBody_78 565 0.81 0.93 0.79 198 XMSubNoVowel 562 1.07 0.92 1.10 199 RELAYCOUNTRY_IN 561 0.20 0.92 0.05 200 XMLngstWrd_04 559 0.35 0.92 0.23 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 259174 86.79 90.56 86.03 2 DKIM_SIGNED 244355 79.99 74.47 81.11 3 XM_DK_Pass 241107 78.38 70.23 80.03 4 DKIM_VALID 231539 74.91 65.30 76.86 5 XM_B_Unicode 221511 72.56 67.76 73.53 6 DKIM_VALID_AU 189880 61.09 51.48 63.03 7 XMListUnsubscribeExists 178268 60.77 68.67 59.17 8 BAYES_50 160007 51.84 45.56 53.11 9 DCC_CHECK 157553 56.73 78.64 52.30 10 XM_B_Unicode3 141300 46.88 46.79 46.90 11 DCC_CHECK_NEGATIVE 140383 42.05 19.55 46.60 12 HTML_FONT_LOW_CONTRAST 104373 34.67 34.81 34.64 13 LOC_TINY_FONT_1 95283 32.32 35.77 31.63 14 DKIM_VALID_EF 81452 25.59 18.42 27.04 15 MIME_HTML_ONLY 76297 26.55 32.62 25.33 16 T_TM2_M_HEADER_IN_MSG 71071 22.13 14.93 23.59 17 XMSubLong 70408 23.50 24.12 23.37 18 BAYES_00 67910 19.52 4.59 22.54 19 FVGT_m_MULTI_ODD 65981 22.39 24.79 21.90 20 TR_XM_DK_Bayes 60507 17.01 1.82 20.08 21 TR_XM_DK_Bayes1 57935 16.26 1.57 19.23 22 TR_XM_DK_Bayes2 52406 14.66 1.14 17.40 23 T_KAM_HTML_FONT_INVALID 51539 17.11 17.10 17.11 24 XM_Body_Dirty_Words 51404 17.79 21.38 17.06 25 MultiRelay 46394 16.08 19.47 15.40 26 ALL_TRUSTED 44572 12.67 2.16 14.79 27 RCVD_IN_RP_SAFE 43749 12.55 2.82 14.52 28 XM_Multi_Part_URI 42033 14.45 16.94 13.95 29 HTML_IMAGE_RATIO_02 39801 13.67 15.93 13.21 30 RCVD_IN_RP_CERTIFIED 38022 10.67 1.02 12.62 31 XM_Evil_Numbers_Gen 35333 11.91 12.81 11.73 32 XM_DKIMWhitelistDomains 33263 9.19 0.06 11.04 33 LOTS_OF_MONEY 27033 9.06 9.50 8.97 34 FSL_BULK_SIG 25301 10.09 18.45 8.40 35 T_TooManySym_01 25037 7.69 4.65 8.31 36 XM_B_Phish_Phrases 23704 7.53 5.87 7.87 37 LotsOfNums_01 23695 7.95 8.40 7.87 38 T_XMDrugObfuBody_14 23123 7.58 7.11 7.68 39 HTML_IMAGE_RATIO_04 23119 7.88 8.93 7.67 40 XM_SendGrid 21719 6.49 2.95 7.21 41 RCVD_IN_MSPIKE_H2 21089 6.86 6.14 7.00 42 XM_DK_Undo_02 20518 11.55 34.97 6.81 43 XM_H_Long_From01 19865 6.46 5.81 6.59 44 BOTNET_IPINHOSTNAME 18793 9.19 23.77 6.24 45 TooManyTo_001 17663 6.15 7.56 5.86 46 BAYES_40 17260 5.65 5.28 5.73 47 XMSexyCombo_05 16335 6.25 10.35 5.42 48 XMStrtUSub 15477 5.41 6.78 5.14 49 XMNumbers 14890 5.00 5.30 4.94 50 RCVD_IN_MSPIKE_WL 14708 4.28 1.32 4.88 51 TO_MALFORMED 14109 4.09 1.13 4.68 52 FROM_EXCESS_BASE64 14100 4.47 3.42 4.68 53 RELAYCOUNTRY_META 14079 9.66 34.35 4.67 54 XM_B_SpammyTLD 13977 4.50 3.80 4.64 55 BAYES_20 13940 4.64 4.72 4.63 56 RCVD_IN_MSPIKE_H3 13015 3.76 0.97 4.32 57 DKIM_INVALID 12816 5.08 9.17 4.25 58 MIME_QP_LONG_LINE 12758 4.11 3.49 4.23 59 TR_XM_DK_SendGrid 12287 3.62 1.36 4.08 60 MPART_ALT_DIFF 12169 5.14 10.58 4.04 61 TVD_RCVD_IP 12052 3.46 0.80 4.00 62 XM_UncommonTLD01 11652 5.97 16.38 3.87 63 MIME_HTML_MOSTLY 11390 4.25 6.60 3.78 64 BAYES_60 11338 4.03 5.35 3.76 65 UNPARSEABLE_RELAY 11181 3.50 2.45 3.71 66 XMSubMetaSx_00 10997 4.22 7.02 3.65 67 BAYES_99 10855 6.89 23.17 3.60 68 XM_DIRTYINTL 10638 4.08 6.79 3.53 69 RCVD_IN_IADB_LISTED 10054 3.04 1.56 3.34 70 HTML_IMAGE_RATIO_06 9833 3.48 4.58 3.26 71 XMBdyGiftCard01 9547 3.23 3.53 3.17 72 IN_ZIMBRA_NJ_WHITELIST 9483 2.62 0.01 3.15 73 T_TooManySym_02 9377 2.77 1.06 3.11 74 BAYES_999 8838 5.58 18.66 2.93 75 RCVD_IN_IADB_SPF 8802 2.68 1.48 2.92 76 CK_HELO_DYNAMIC_SPLIT_IP 8688 2.52 0.71 2.88 77 HELO_DYNAMIC_IPADDR2 8664 2.42 0.14 2.88 78 BAYES_05 8137 2.71 2.77 2.70 79 T_REMOTE_IMAGE 7997 3.55 7.97 2.65 80 RCVD_IN_IADB_SENDERID 7859 2.42 1.46 2.61 81 XM_OfRef6 7706 2.79 3.95 2.56 82 RCVD_IN_IADB_DK 7619 2.35 1.46 2.53 83 INVALID_MSGID 7422 2.17 0.70 2.46 84 BOTNET 6843 5.88 23.75 2.27 85 BAYES_80 6716 2.79 5.54 2.23 86 SUBJ_ALL_CAPS 6616 2.23 2.39 2.20 87 HTML_IMAGE_RATIO_08 6561 2.28 2.76 2.18 88 URI_HEX 6544 2.53 4.32 2.17 89 XM_CamelCaseFrm001 6342 2.24 2.91 2.11 90 TR_DCC_Bayes_99 6245 4.68 17.57 2.07 91 RCVD_IN_IADB_VOUCHED 6204 1.76 0.26 2.06 92 MIME_HTML_ONLY_MULTI 6122 2.52 4.96 2.03 93 TR_MetaPhish_Combo_01 6005 1.80 0.84 1.99 94 TM2_M_URI_OPT_OUT 5907 2.05 2.49 1.96 95 XM_SPF_SoftFail 5763 2.47 5.21 1.91 96 URI_TRY_3LD 5670 1.85 1.69 1.88 97 USER_IN_DEF_DKIM_WL 5525 1.53 0.01 1.83 98 KHOP_HELO_FCRDNS 5502 3.07 9.24 1.83 99 XMStockSpam_06 5238 1.70 1.50 1.74 100 UNTRUSTED_Relay 5164 4.66 19.23 1.71 101 TM2_M_VERY_LONG_WORD 5107 1.77 2.12 1.70 102 MAILING_LIST_MULTI 4966 1.55 1.09 1.65 103 IN_HORDE_ADDRESS_BOOK 4901 1.37 0.07 1.63 104 TR_Symld_Words 4759 1.68 2.17 1.58 105 XM_PDF 4632 1.35 0.43 1.54 106 RELAYCOUNTRY_CA 4597 2.12 5.06 1.53 107 NO_DNS_FOR_FROM 4432 1.93 4.18 1.47 108 BAYES_95 4302 1.65 2.74 1.43 109 XM_DK_Undo_01 4260 1.37 1.17 1.41 110 ANY_BOUNCE_MESSAGE 4241 1.21 0.21 1.41 111 BOUNCE_MESSAGE 4241 1.21 0.21 1.41 112 XM_ProductURIs 4174 1.33 1.04 1.39 113 HTML_MIME_NO_HTML_TAG 4054 1.66 3.22 1.35 114 RCVD_IN_IADB_OPTIN 4039 1.16 0.26 1.34 115 T_XMHurry_00 3959 1.38 1.73 1.31 116 XMGappySubj_01 3926 1.22 0.80 1.30 117 XMDiploma_00 3785 1.54 2.93 1.26 118 T_XMDrugObfuBody_08 3589 1.43 2.62 1.19 119 XMPhish11 3507 1.37 2.40 1.16 120 XM_H_Long_From02 3492 1.20 1.40 1.16 121 XMSubNoVowel 3325 1.07 0.92 1.10 122 TVD_SPACE_RATIO 3255 0.91 0.07 1.08 123 XMSubEmpty 3206 0.94 0.31 1.06 124 TooManyTo_002 3172 0.97 0.56 1.05 125 TR_XM_RelayPhish 3108 1.09 1.39 1.03 126 RCVD_IN_BL_SPAMCOP_NET 3094 1.56 4.19 1.03 127 XM_GoogleGroups 3066 0.94 0.54 1.02 128 XMBody_17 3036 1.19 2.09 1.01 129 XM_RXBody 2978 0.93 0.63 0.99 130 FILL_THIS_FORM 2879 1.03 1.39 0.96 131 XMBrknScrpt_02 2854 1.01 1.31 0.95 132 SUBJ_DOLLARS 2789 0.98 1.22 0.93 133 DKIM_ADSP_CUSTOM_MED 2786 0.98 1.28 0.92 134 XM_B_REG_HTML 2767 0.82 0.35 0.92 135 XM_UB50 2749 2.37 9.56 0.91 136 T_TooManySym_03 2748 0.83 0.43 0.91 137 T_XMDrugObfuBody_00 2686 0.97 1.35 0.89 138 FILL_THIS_FORM_LONG 2682 0.94 1.21 0.89 139 XM_shorewaves_Whitelist 2677 0.74 0.00 0.89 140 XMSubMetaI_00 2637 1.21 2.85 0.88 141 FILL_THIS_FORM_LOAN 2636 0.78 0.33 0.87 142 XMHTML_After_End 2586 0.83 0.70 0.86 143 PLING_QUERY 2531 0.78 0.50 0.84 144 XMBody_78 2372 0.81 0.93 0.79 145 XMSubMetaSxObfu_02 2350 0.71 0.37 0.78 146 TM2_M_A_HREF_HREF 2346 0.80 0.88 0.78 147 XMBody_95 2318 0.65 0.08 0.77 148 HTML_TAG_BALANCE_BODY 2298 0.76 0.76 0.76 149 TooManyTo_003 2233 0.69 0.44 0.74 150 XMPhish30 2104 0.90 1.88 0.70 151 USER_IN_WHITELIST 2057 0.57 0.00 0.68 152 T_FILL_THIS_FORM_SHORT 1986 0.89 2.02 0.66 153 NML_ADSP_CUSTOM_MED 1913 0.72 1.14 0.63 154 XMGenDplmaNmb 1907 0.89 2.15 0.63 155 HTML_FONT_FACE_BAD 1890 0.70 1.09 0.63 156 TooManyTo_004 1825 0.56 0.34 0.61 157 XMSexyCombo_01 1823 0.94 2.62 0.61 158 XMHTMLBadTable_001 1804 0.60 0.61 0.60 159 BODY_ENHANCEMENT 1697 0.47 0.04 0.56 160 XM_B_COPY_HTML 1656 0.59 0.81 0.55 161 DKIM_ADSP_NXDOMAIN 1602 1.16 4.25 0.53 162 TooManyTo_005 1590 0.49 0.28 0.53 163 XM_H_PHPMailer 1566 0.80 2.16 0.52 164 SpammyFromTLD_01 1559 0.71 1.63 0.52 165 RELAYCOUNTRY_GB 1536 1.49 6.33 0.51 166 XMLngstWrd_00 1487 0.62 1.24 0.49 167 TR_XM_PHPForged 1469 1.02 3.67 0.49 168 SUBJ_YOUR_FAMILY 1465 0.45 0.28 0.49 169 ADMITS_SPAM 1385 0.52 0.80 0.46 170 FORGED_GMAIL_RCVD 1375 0.56 1.08 0.46 171 XMLngstWrd_01 1369 0.58 1.22 0.45 172 TR_XM_PHPDW 1355 0.99 3.67 0.45 173 XM_URI_RBL 1342 0.83 2.72 0.45 174 DIET_1 1338 0.47 0.62 0.44 175 TR_XM_FormFill2 1323 0.98 3.65 0.44 176 HELO_NODOT 1320 0.48 0.68 0.44 177 RDNS_DYNAMIC 1313 0.83 2.80 0.44 178 XM_H_PHPOS 1303 0.97 3.64 0.43 179 T_Symld_Words_02 1259 0.50 0.90 0.42 180 XMCapTrack 1258 0.38 0.21 0.42 181 XMBSHREFv2 1235 0.44 0.61 0.41 182 TR_LOTS_OF_MONEY3 1235 0.48 0.83 0.41 183 HELO_NO_DOMAIN 1225 0.45 0.68 0.41 184 XM_D_tchamptons_WL 1222 0.34 0.00 0.41 185 HTTPS_HTTP_MISMATCH 1207 0.37 0.23 0.40 186 T_MONEY_PERCENT 1202 0.62 1.69 0.40 187 TR_LOTS_OF_MONEY2 1202 0.62 1.69 0.40 188 URI_NOVOWEL 1189 0.40 0.44 0.39 189 URIBL_SBL_A 1188 0.54 1.25 0.39 190 XM_SPF_Unknown 1173 0.41 0.50 0.39 191 RELAYCOUNTRY_IE 1147 0.38 0.39 0.38 192 RELAYCOUNTRY_DE 1143 0.71 2.32 0.38 193 XMSubMetaSxObfu_03 1079 0.45 0.91 0.36 194 XM_Body_Obfu01 1079 0.39 0.57 0.36 195 XMNoVowels 1015 0.33 0.28 0.34 196 MPART_ALT_DIFF_COUNT 1002 0.67 2.31 0.33 197 XMSubMetaSSx_00 1001 0.38 0.61 0.33 198 MISSING_HEADERS 999 0.36 0.47 0.33 199 XMGappySubj_02 997 0.32 0.27 0.33 200 XM_OfRef7 995 0.43 0.95 0.33 ----------------------------------------------------------------------