Email: 630087 Autolearn: 0 AvgScore: 3.55 AvgScanTime: 3.95 sec Spam: 175926 Autolearn: 0 AvgScore: 12.34 AvgScanTime: 5.29 sec Ham: 454161 Autolearn: 0 AvgScore: 0.14 AvgScanTime: 3.44 sec Time Spent Running SA: 692.14 hours Time Spent Processing Spam: 258.47 hours Time Spent Processing Ham: 433.67 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 164028 81.68 93.24 77.20 2 DKIM_SIGNED 141602 63.37 80.49 56.74 3 XM_DK_Pass 137477 61.96 78.14 55.69 4 DKIM_VALID 132149 59.02 75.12 52.79 5 DCC_CHECK 131103 39.96 74.52 26.57 6 XMListUnsubscribeExists 120155 44.89 68.30 35.82 7 DKIM_VALID_AU 102470 42.71 58.25 36.70 8 XM_H_QuotedFrom 89348 37.35 50.79 32.15 9 XM_DK_Undo_02 85328 21.47 48.50 11.00 10 BAYES_99 80427 21.46 45.72 12.06 11 BAYES_999 68348 18.05 38.85 10.00 12 HTML_FONT_LOW_CONTRAST 62694 24.18 35.64 19.74 13 TR_DCC_Bayes_99 61296 13.06 34.84 4.62 14 LOC_TINY_FONT_1 60545 20.19 34.42 14.68 15 MIME_HTML_ONLY 57715 22.27 32.81 18.18 16 BAYES_50 53549 48.70 30.44 55.78 17 FVGT_m_MULTI_ODD 45099 18.85 25.64 16.22 18 XMSubLong 42280 19.02 24.03 17.08 19 DKIM_VALID_EF 41221 22.10 23.43 21.59 20 DCC_CHECK_NEGATIVE 41188 57.99 23.41 71.39 21 T_KAM_HTML_FONT_INVALID 36066 14.25 20.50 11.82 22 XM_Body_Dirty_Words 35254 12.27 20.04 9.26 23 T_TM2_M_HEADER_IN_MSG 35104 28.78 19.95 32.20 24 XM_Multi_Part_URI 28081 10.47 15.96 8.35 25 MultiRelay 27494 15.79 15.63 15.85 26 RELAYCOUNTRY_META 27060 7.36 15.38 4.25 27 HTML_IMAGE_RATIO_02 25963 8.11 14.76 5.53 28 XM_Evil_Numbers_Gen 24993 8.10 14.21 5.73 29 BOTNET_IPINHOSTNAME 21741 6.23 12.36 3.86 30 BOTNET 21373 3.93 12.15 0.74 31 FSL_BULK_SIG 19477 7.06 11.07 5.51 32 LOTS_OF_MONEY 19138 8.32 10.88 7.33 33 XMSexyCombo_05 17683 4.23 10.05 1.98 34 T_XMDrugObfuBody_14 17176 7.61 9.76 6.78 35 TooManyTo_001 16986 15.40 9.66 17.62 36 HTML_IMAGE_RATIO_04 16838 5.30 9.57 3.65 37 UNTRUSTED_Relay 16006 3.29 9.10 1.04 38 LotsOfNums_01 15871 7.10 9.02 6.35 39 BAYES_80 14929 7.49 8.49 7.10 40 ALL_TRUSTED 14609 27.11 8.30 34.40 41 XM_B_Phish_Phrases 14305 4.67 8.13 3.32 42 XMStrtUSub 14260 7.32 8.11 7.01 43 XM_UncommonTLD01 13668 4.79 7.77 3.63 44 XMSubMetaSx_00 13609 4.52 7.74 3.27 45 XM_H_Long_From01 13570 5.69 7.71 4.91 46 MPART_ALT_DIFF 12420 3.53 7.06 2.16 47 BAYES_60 12124 8.94 6.89 9.73 48 TR_XM_DocInvoice 11346 4.89 6.45 4.29 49 FROM_EXCESS_BASE64 10580 3.43 6.01 2.43 50 DKIM_INVALID 9453 4.35 5.37 3.95 51 XM_SPF_SoftFail 9020 3.76 5.13 3.24 52 RCVD_IN_RP_SAFE 8796 6.41 5.00 6.96 53 BAYES_95 8431 4.32 4.79 4.14 54 XM_UB50 8320 1.83 4.73 0.70 55 MIME_QP_LONG_LINE 8320 4.70 4.73 4.69 56 XMNumbers 8278 3.57 4.71 3.13 57 MIME_HTML_MOSTLY 8249 2.52 4.69 1.68 58 URIBL_DBL_SPAM 8012 1.28 4.55 0.02 59 URIBL_CSS 7850 4.28 4.46 4.21 60 URIBL_CSS_A 7850 4.28 4.46 4.21 61 RCVD_IN_RP_CERTIFIED 7755 5.96 4.41 6.56 62 HTML_IMAGE_RATIO_06 7738 2.74 4.40 2.10 63 XM_SendGrid 7330 3.96 4.17 3.88 64 URIBL_SBL_A 7104 1.49 4.04 0.50 65 RCVD_IN_MSPIKE_H2 7040 4.05 4.00 4.06 66 TooManyTo_002 6797 8.71 3.86 10.59 67 TM2_M_URI_OPT_OUT 6747 2.14 3.84 1.48 68 XM_DIRTYINTL 6630 2.01 3.77 1.32 69 URIBL_ABUSE_SURBL 6422 1.08 3.65 0.08 70 HTML_IMAGE_RATIO_08 6421 2.38 3.65 1.89 71 RCVD_IN_BL_SPAMCOP_NET 6397 1.44 3.64 0.60 72 TooManyTo_003 6248 6.71 3.55 7.93 73 T_REMOTE_IMAGE 6173 3.82 3.51 3.93 74 MIME_HTML_ONLY_MULTI 5740 1.68 3.26 1.07 75 TooManyTo_004 5387 4.99 3.06 5.74 76 XM_CamelCaseFrm001 5257 1.89 2.99 1.46 77 RELAYCOUNTRY_CA 5101 1.56 2.90 1.04 78 SUBJ_ALL_CAPS 4843 1.75 2.75 1.36 79 T_TooManySym_01 4624 3.41 2.63 3.71 80 T_XMDrugObfuBody_08 4499 1.72 2.56 1.39 81 URI_HEX 4270 1.47 2.43 1.10 82 XMSexyCombo_01 4041 0.90 2.30 0.36 83 XM_OfRef6 4036 1.58 2.29 1.30 84 SpammyFromTLD_02 4008 1.03 2.28 0.55 85 XMStockSpam_06 3990 1.03 2.27 0.56 86 MultiRelay_CC 3924 0.76 2.23 0.19 87 MultiRelay_Combo 3924 0.76 2.23 0.19 88 XM_H_Long_From02 3883 1.18 2.21 0.78 89 TooManyTo_005 3773 3.36 2.14 3.83 90 HTML_MIME_NO_HTML_TAG 3750 2.13 2.13 2.13 91 BOTNET_NORDNS 3691 0.61 2.10 0.03 92 XMDiploma_00 3544 1.55 2.01 1.37 93 RCVD_IN_IADB_LISTED 3534 4.08 2.01 4.88 94 RELAYCOUNTRY_FR 3499 0.70 1.99 0.20 95 TM2_M_VERY_LONG_WORD 3489 1.01 1.98 0.63 96 XMHTML_After_End 3484 0.78 1.98 0.31 97 XM_DK_Undo_01 3252 1.64 1.85 1.56 98 XM_ProductURIs 3158 1.17 1.80 0.93 99 SpammyFromTLD_01 3056 1.01 1.74 0.73 100 XM_RXBody 3054 0.67 1.74 0.26 101 RCVD_IN_RP_RNBL 3042 0.50 1.73 0.02 102 TR_Mismatch_TLD_02 3038 0.53 1.73 0.07 103 XM_URI_RBL 3038 0.54 1.73 0.08 104 RCVD_IN_IADB_SPF 2987 3.52 1.70 4.22 105 URI_TRY_3LD 2863 1.06 1.63 0.84 106 MAILING_LIST_MULTI 2855 2.13 1.62 2.33 107 RCVD_IN_IADB_SENDERID 2798 3.11 1.59 3.70 108 RCVD_IN_IADB_DK 2742 3.02 1.56 3.58 109 XMBody_17 2685 0.63 1.53 0.28 110 XMBdyGiftCard01 2655 0.78 1.51 0.49 111 XM_UB99 2533 0.41 1.44 0.01 112 RCVD_IN_PSBL 2506 0.49 1.42 0.13 113 BAYES_00 2472 4.17 1.41 5.24 114 DIET_1 2456 0.55 1.40 0.22 115 T_XMDrugObfuBody_00 2444 0.85 1.39 0.64 116 XMPhish30 2434 0.65 1.38 0.36 117 SUSPICIOUS_RECIPS 2427 0.89 1.38 0.70 118 XMSubMetaSxObfu_03 2424 0.61 1.38 0.31 119 LOW_PRICE 2423 0.50 1.38 0.16 120 UNPARSEABLE_RELAY 2415 2.43 1.37 2.83 121 XMGenDplmaNmb 2402 1.03 1.37 0.91 122 TR_XM_RelayPhish 2351 0.70 1.34 0.46 123 RELAYCOUNTRY_NL 2330 0.46 1.32 0.13 124 XMSexyCombo_04 2306 0.45 1.31 0.11 125 URIBL_DBL_ABUSE_SPAM 2294 1.96 1.30 2.22 126 XMSubMetaI_00 2282 0.73 1.30 0.51 127 XMSubMetaSx_01 2279 0.48 1.30 0.16 128 T_XMHurry_00 2246 3.62 1.28 4.53 129 URIBL_BLACK 2184 0.36 1.24 0.02 130 MPART_ALT_DIFF_COUNT 2168 0.49 1.23 0.20 131 FSL_THIS_IS_ADV 2167 0.38 1.23 0.05 132 TR_Caps_n_Bayes_99 2158 0.41 1.23 0.09 133 RELAYCOUNTRY_GB 2066 1.02 1.17 0.96 134 XM_UB999 2018 0.33 1.15 0.01 135 XMPhish11 2000 1.04 1.14 1.00 136 TR_XM_DK_Bayes 1982 2.61 1.13 3.19 137 DKIM_ADSP_CUSTOM_MED 1971 1.14 1.12 1.15 138 XMMoneyMeta_00 1961 0.61 1.11 0.42 139 TR_XM_DK_Bayes1 1914 2.49 1.09 3.03 140 RDNS_DYNAMIC 1849 0.55 1.05 0.35 141 TR_Symld_Words 1844 1.53 1.05 1.71 142 XM_B_REG_HTML 1830 0.58 1.04 0.40 143 TR_XM_DK_Bayes2 1824 2.14 1.04 2.57 144 SUBJ_DOLLARS 1802 0.37 1.02 0.12 145 RELAYCOUNTRY_AT 1786 0.36 1.02 0.11 146 RELAYCOUNTRY_CN 1767 0.32 1.00 0.05 147 XM_UB60 1765 0.33 1.00 0.06 148 NML_ADSP_CUSTOM_MED 1741 0.93 0.99 0.91 149 T_TooManySym_02 1740 1.37 0.99 1.52 150 XMSubMetaSxObfu_04 1731 0.36 0.98 0.12 151 RCVD_IN_IADB_VOUCHED 1692 2.69 0.96 3.36 152 T_Symld_Words_02 1674 0.53 0.95 0.36 153 XM_Body_Obfu01 1668 0.53 0.95 0.36 154 XMSexyCombo_02 1661 0.32 0.94 0.08 155 BAYES_40 1645 2.25 0.94 2.76 156 XM_B_COPY_HTML 1633 0.58 0.93 0.44 157 XMHTMLBadTable_001 1626 0.48 0.92 0.30 158 T_FILL_THIS_FORM_SHORT 1617 0.85 0.92 0.82 159 BOUNCE_MESSAGE 1602 2.04 0.91 2.47 160 ANY_BOUNCE_MESSAGE 1602 2.04 0.91 2.47 161 SHORT_URI 1602 0.34 0.91 0.11 162 XM_HighProb1 1583 0.26 0.90 0.01 163 XMPhish14 1581 0.47 0.90 0.31 164 BODY_ENHANCEMENT 1565 0.27 0.89 0.03 165 PHOTO_EDITING_FREEM 1562 0.25 0.89 0.00 166 XM_DKIMWhitelistDomains 1562 5.81 0.89 7.72 167 PHOTO_EDITING_DIRECT 1542 0.25 0.88 0.00 168 RCVD_IN_MSPIKE_WL 1523 1.37 0.87 1.56 169 RCVD_IN_MSPIKE_H3 1523 1.37 0.87 1.56 170 URI_NOVOWEL 1513 0.41 0.86 0.24 171 XM_salutation 1503 0.30 0.85 0.09 172 XMhairloss01 1466 0.29 0.83 0.08 173 XM_BadFromFormat 1445 0.35 0.82 0.17 174 XMBrknScrpt_02 1443 0.54 0.82 0.44 175 TR_MetaPhish_Combo_01 1439 0.81 0.82 0.81 176 BAYES_20 1434 1.60 0.82 1.90 177 T_HTML_TAG_BALANCE_CENTER 1429 0.34 0.81 0.15 178 XMSlimDrugH 1426 0.45 0.81 0.31 179 HTTPS_HTTP_MISMATCH 1403 0.59 0.80 0.51 180 REMOVE_BEFORE_LINK 1401 0.35 0.80 0.18 181 XMGappySubj_01 1383 0.82 0.79 0.83 182 XM_H_PHPOS 1370 1.03 0.78 1.13 183 XM_XX_Yahoo 1370 0.28 0.78 0.09 184 HTML_FONT_SIZE_HUGE 1332 0.28 0.76 0.09 185 T_MONEY_PERCENT 1331 0.54 0.76 0.45 186 TR_LOTS_OF_MONEY2 1331 0.54 0.76 0.45 187 XM_PDF 1324 3.04 0.75 3.93 188 SORTED_RECIPS 1312 0.30 0.75 0.12 189 LONG_JUNK_URI3 1303 0.24 0.74 0.05 190 HTML_FONT_SIZE_LARGE 1265 0.37 0.72 0.24 191 XMClaimOffer 1253 0.26 0.71 0.09 192 XMSubMetaSSx_00 1232 0.29 0.70 0.13 193 HTML_FONT_FACE_BAD 1218 0.41 0.69 0.30 194 XMBody_78 1207 0.43 0.69 0.33 195 RELAYCOUNTRY_DE 1207 0.56 0.69 0.51 196 RELAYCOUNTRY_AU 1187 0.45 0.67 0.36 197 XMNoVowels 1169 0.59 0.66 0.56 198 BASE64_LENGTH_79_INF 1163 0.25 0.66 0.09 199 BODY_URI_ONLY 1157 0.21 0.66 0.04 200 FORGED_GMAIL_RCVD 1156 0.51 0.66 0.46 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 350628 81.68 93.24 77.20 2 DCC_CHECK_NEGATIVE 324230 57.99 23.41 71.39 3 DKIM_SIGNED 257709 63.37 80.49 56.74 4 BAYES_50 253309 48.70 30.44 55.78 5 XM_DK_Pass 252938 61.96 78.14 55.69 6 DKIM_VALID 239749 59.02 75.12 52.79 7 DKIM_VALID_AU 166655 42.71 58.25 36.70 8 XMListUnsubscribeExists 162679 44.89 68.30 35.82 9 ALL_TRUSTED 156231 27.11 8.30 34.40 10 T_TM2_M_HEADER_IN_MSG 146244 28.78 19.95 32.20 11 XM_H_QuotedFrom 145994 37.35 50.79 32.15 12 DCC_CHECK 120674 39.96 74.52 26.57 13 DKIM_VALID_EF 98048 22.10 23.43 21.59 14 HTML_FONT_LOW_CONTRAST 89634 24.18 35.64 19.74 15 MIME_HTML_ONLY 82578 22.27 32.81 18.18 16 TooManyTo_001 80039 15.40 9.66 17.62 17 XMSubLong 77556 19.02 24.03 17.08 18 FVGT_m_MULTI_ODD 73658 18.85 25.64 16.22 19 MultiRelay 71968 15.79 15.63 15.85 20 LOC_TINY_FONT_1 66651 20.19 34.42 14.68 21 BAYES_99 54790 21.46 45.72 12.06 22 T_KAM_HTML_FONT_INVALID 53703 14.25 20.50 11.82 23 XM_DK_Undo_02 49952 21.47 48.50 11.00 24 TooManyTo_002 48107 8.71 3.86 10.59 25 BAYES_999 45401 18.05 38.85 10.00 26 BAYES_60 44200 8.94 6.89 9.73 27 XM_Body_Dirty_Words 42034 12.27 20.04 9.26 28 XM_Multi_Part_URI 37915 10.47 15.96 8.35 29 TooManyTo_003 36031 6.71 3.55 7.93 30 XM_DKIMWhitelistDomains 35052 5.81 0.89 7.72 31 LOTS_OF_MONEY 33302 8.32 10.88 7.33 32 BAYES_80 32235 7.49 8.49 7.10 33 XMStrtUSub 31850 7.32 8.11 7.01 34 RCVD_IN_RP_SAFE 31609 6.41 5.00 6.96 35 T_XMDrugObfuBody_14 30779 7.61 9.76 6.78 36 RCVD_IN_RP_CERTIFIED 29797 5.96 4.41 6.56 37 LotsOfNums_01 28843 7.10 9.02 6.35 38 TooManyTo_004 26063 4.99 3.06 5.74 39 XM_Evil_Numbers_Gen 26031 8.10 14.21 5.73 40 HTML_IMAGE_RATIO_02 25137 8.11 14.76 5.53 41 FSL_BULK_SIG 25013 7.06 11.07 5.51 42 BAYES_00 23795 4.17 1.41 5.24 43 IN_ZIMBRA_NJ_WHITELIST 22476 3.58 0.03 4.95 44 XM_H_Long_From01 22298 5.69 7.71 4.91 45 RCVD_IN_IADB_LISTED 22159 4.08 2.01 4.88 46 MIME_QP_LONG_LINE 21302 4.70 4.73 4.69 47 TR_DCC_Bayes_99 20975 13.06 34.84 4.62 48 T_XMHurry_00 20567 3.62 1.28 4.53 49 TR_XM_DocInvoice 19488 4.89 6.45 4.29 50 RELAYCOUNTRY_META 19294 7.36 15.38 4.25 51 RCVD_IN_IADB_SPF 19164 3.52 1.70 4.22 52 URIBL_CSS_A 19115 4.28 4.46 4.21 53 URIBL_CSS 19115 4.28 4.46 4.21 54 BAYES_95 18783 4.32 4.79 4.14 55 RCVD_IN_MSPIKE_H2 18456 4.05 4.00 4.06 56 DKIM_INVALID 17960 4.35 5.37 3.95 57 T_REMOTE_IMAGE 17871 3.82 3.51 3.93 58 XM_PDF 17830 3.04 0.75 3.93 59 XM_SendGrid 17606 3.96 4.17 3.88 60 BOTNET_IPINHOSTNAME 17529 6.23 12.36 3.86 61 TooManyTo_005 17395 3.36 2.14 3.83 62 T_TooManySym_01 16848 3.41 2.63 3.71 63 RCVD_IN_IADB_SENDERID 16822 3.11 1.59 3.70 64 HTML_IMAGE_RATIO_04 16588 5.30 9.57 3.65 65 XM_UncommonTLD01 16502 4.79 7.77 3.63 66 RCVD_IN_IADB_DK 16279 3.02 1.56 3.58 67 RCVD_IN_IADB_VOUCHED 15246 2.69 0.96 3.36 68 XM_B_Phish_Phrases 15098 4.67 8.13 3.32 69 XMSubMetaSx_00 14851 4.52 7.74 3.27 70 XM_SPF_SoftFail 14693 3.76 5.13 3.24 71 TR_XM_DK_Bayes 14471 2.61 1.13 3.19 72 XMNumbers 14221 3.57 4.71 3.13 73 TR_XM_DK_Bayes1 13780 2.49 1.09 3.03 74 UNPARSEABLE_RELAY 12874 2.43 1.37 2.83 75 BAYES_40 12533 2.25 0.94 2.76 76 TVD_RCVD_IP 12057 2.08 0.60 2.65 77 TR_XM_DK_Bayes2 11691 2.14 1.04 2.57 78 ANY_BOUNCE_MESSAGE 11230 2.04 0.91 2.47 79 BOUNCE_MESSAGE 11226 2.04 0.91 2.47 80 FROM_EXCESS_BASE64 11030 3.43 6.01 2.43 81 MAILING_LIST_MULTI 10590 2.13 1.62 2.33 82 URIBL_DBL_ABUSE_SPAM 10083 1.96 1.30 2.22 83 MPART_ALT_DIFF 9794 3.53 7.06 2.16 84 HTML_MIME_NO_HTML_TAG 9681 2.13 2.13 2.13 85 HTML_IMAGE_RATIO_06 9540 2.74 4.40 2.10 86 HELO_NODOT 9428 1.59 0.34 2.08 87 XMSexyCombo_05 8988 4.23 10.05 1.98 88 BAYES_20 8633 1.60 0.82 1.90 89 HTML_IMAGE_RATIO_08 8568 2.38 3.65 1.89 90 IN_HORDE_ADDRESS_BOOK 8458 1.36 0.06 1.86 91 TR_Symld_Words 7765 1.53 1.05 1.71 92 MIME_HTML_MOSTLY 7637 2.52 4.69 1.68 93 RCVD_IN_IADB_OPTIN 7413 1.32 0.51 1.63 94 XM_DK_Undo_01 7099 1.64 1.85 1.56 95 RCVD_IN_MSPIKE_H3 7095 1.37 0.87 1.56 96 RCVD_IN_MSPIKE_WL 7095 1.37 0.87 1.56 97 INVALID_MSGID 6935 1.15 0.18 1.53 98 T_TooManySym_02 6916 1.37 0.99 1.52 99 TM2_M_URI_OPT_OUT 6740 2.14 3.84 1.48 100 XM_CamelCaseFrm001 6627 1.89 2.99 1.46 101 TO_MALFORMED 6402 1.02 0.03 1.41 102 T_XMDrugObfuBody_08 6320 1.72 2.56 1.39 103 XMDiploma_00 6237 1.55 2.01 1.37 104 SUBJ_ALL_CAPS 6155 1.75 2.75 1.36 105 XMCapTrack 6123 1.14 0.60 1.35 106 XM_DIRTYINTL 6014 2.01 3.77 1.32 107 XM_OfRef6 5896 1.58 2.29 1.30 108 BAYES_05 5883 1.08 0.52 1.30 109 XM_ShortIntro_01 5379 1.00 0.53 1.18 110 XM_GoogleGroups 5275 0.99 0.54 1.16 111 DKIM_ADSP_CUSTOM_MED 5230 1.14 1.12 1.15 112 XM_H_PHPOS 5146 1.03 0.78 1.13 113 URI_HEX 4982 1.47 2.43 1.10 114 MIME_HTML_ONLY_MULTI 4843 1.68 3.26 1.07 115 UNTRUSTED_Relay 4724 3.29 9.10 1.04 116 RELAYCOUNTRY_CA 4702 1.56 2.90 1.04 117 XMPhish11 4540 1.04 1.14 1.00 118 USER_IN_DEF_DKIM_WL 4439 0.71 0.03 0.98 119 RELAYCOUNTRY_GB 4376 1.02 1.17 0.96 120 XM_ProductURIs 4209 1.17 1.80 0.93 121 NML_ADSP_CUSTOM_MED 4113 0.93 0.99 0.91 122 XMGenDplmaNmb 4113 1.03 1.37 0.91 123 URI_TRY_3LD 3808 1.06 1.63 0.84 124 XMGappySubj_01 3764 0.82 0.79 0.83 125 T_FILL_THIS_FORM_SHORT 3740 0.85 0.92 0.82 126 TR_MetaPhish_Combo_01 3676 0.81 0.82 0.81 127 XM_H_Long_From02 3528 1.18 2.21 0.78 128 BOTNET 3360 3.93 12.15 0.74 129 SpammyFromTLD_01 3338 1.01 1.74 0.73 130 SUSPICIOUS_RECIPS 3189 0.89 1.38 0.70 131 XM_UB50 3189 1.83 4.73 0.70 132 USER_IN_WHITELIST 3167 0.50 0.00 0.70 133 T_XMDrugObfuBody_00 2897 0.85 1.39 0.64 134 FILL_THIS_FORM 2882 0.55 0.34 0.63 135 XM_H_PHPMailer 2854 0.61 0.56 0.63 136 TM2_M_VERY_LONG_WORD 2853 1.01 1.98 0.63 137 T_TooManySym_03 2810 0.50 0.19 0.62 138 RCVD_IN_IADB_DOPTIN 2781 0.46 0.07 0.61 139 RCVD_IN_BL_SPAMCOP_NET 2706 1.44 3.64 0.60 140 XMStockSpam_06 2529 1.03 2.27 0.56 141 XMNoVowels 2524 0.59 0.66 0.56 142 XM_Combo_Sbj 2494 0.57 0.62 0.55 143 SpammyFromTLD_02 2477 1.03 2.28 0.55 144 T_OBFU_PDF_ATTACH 2456 0.44 0.18 0.54 145 XMDateMe_00 2373 0.52 0.50 0.52 146 HTTPS_HTTP_MISMATCH 2321 0.59 0.80 0.51 147 T_FILL_THIS_FORM_LOAN 2319 0.41 0.15 0.51 148 RELAYCOUNTRY_DE 2312 0.56 0.69 0.51 149 XMSubMetaI_00 2299 0.73 1.30 0.51 150 URIBL_SBL_A 2258 1.49 4.04 0.50 151 XMBdyGiftCard01 2233 0.78 1.51 0.49 152 SHORT_HELO_AND_INLINE_IMAGE 2149 0.36 0.07 0.47 153 RCVD_IN_SORBS_DUL 2118 0.41 0.27 0.47 154 T_FILL_THIS_FORM_LONG 2108 0.35 0.07 0.46 155 FORGED_GMAIL_RCVD 2076 0.51 0.66 0.46 156 TR_XM_RelayPhish 2067 0.70 1.34 0.46 157 XMGappySubj_02 2060 0.47 0.52 0.45 158 TR_LOTS_OF_MONEY2 2053 0.54 0.76 0.45 159 T_MONEY_PERCENT 2053 0.54 0.76 0.45 160 XM_B_COPY_HTML 2016 0.58 0.93 0.44 161 MISSING_HEADERS 2010 0.44 0.42 0.44 162 TVD_SPACE_RATIO 1999 0.38 0.23 0.44 163 XMBrknScrpt_02 1987 0.54 0.82 0.44 164 TM2_M_A_HREF_HREF 1944 0.44 0.49 0.43 165 XMBody_95 1936 0.35 0.17 0.43 166 XMSubMetaSxObfu_02 1935 0.45 0.50 0.43 167 XMMoneyMeta_00 1898 0.61 1.11 0.42 168 HTML_IMAGE_ONLY_32 1896 0.39 0.32 0.42 169 XM_B_TRADE_HTML 1856 0.45 0.55 0.41 170 XM_B_REG_HTML 1830 0.58 1.04 0.40 171 HTML_TAG_BALANCE_BODY 1722 0.45 0.62 0.38 172 XMPhish30 1656 0.65 1.38 0.36 173 XMSexyCombo_01 1643 0.90 2.30 0.36 174 RELAYCOUNTRY_AU 1642 0.45 0.67 0.36 175 XM_Body_Obfu01 1640 0.53 0.95 0.36 176 T_Symld_Words_02 1640 0.53 0.95 0.36 177 DKIM_ADSP_NXDOMAIN 1633 0.38 0.45 0.36 178 RDNS_DYNAMIC 1601 0.55 1.05 0.35 179 HTML_IMAGE_ONLY_28 1597 0.41 0.58 0.35 180 HTML_IMAGE_ONLY_24 1585 0.39 0.50 0.35 181 PLING_QUERY 1567 0.43 0.65 0.35 182 AC_DIV_BONANZA 1548 0.28 0.11 0.34 183 XMBody_78 1486 0.43 0.69 0.33 184 XMSubNoVowel 1483 0.30 0.24 0.33 185 XM_H_PHPOS_M 1445 0.32 0.31 0.32 186 TM2_M_BODY_EMPTY 1443 0.28 0.17 0.32 187 XMSubMetaSxObfu_03 1415 0.61 1.38 0.31 188 XMHTML_After_End 1408 0.78 1.98 0.31 189 XMBody_29 1407 0.37 0.54 0.31 190 XMPhish14 1400 0.47 0.90 0.31 191 XMSlimDrugH 1393 0.45 0.81 0.31 192 XMHTMLBadTable_001 1375 0.48 0.92 0.30 193 UPPERCASE_50_75 1365 0.26 0.15 0.30 194 HTML_FONT_FACE_BAD 1361 0.41 0.69 0.30 195 XMRcvdHeader_15 1288 0.20 0.00 0.28 196 XMBody_17 1273 0.63 1.53 0.28 197 T_TooManySym_04 1270 0.21 0.02 0.28 198 DOS_OUTLOOK_TO_MX 1227 0.22 0.09 0.27 199 XM_H_Trusted_IP 1224 0.19 0.00 0.27 200 TO_NO_BRKTS_HTML_ONLY 1196 0.27 0.29 0.26 ----------------------------------------------------------------------