Email: 521489 Autolearn: 0 AvgScore: 3.31 AvgScanTime: 4.18 sec Spam: 156934 Autolearn: 0 AvgScore: 12.58 AvgScanTime: 5.12 sec Ham: 364555 Autolearn: 0 AvgScore: -0.69 AvgScanTime: 3.78 sec Time Spent Running SA: 605.74 hours Time Spent Processing Spam: 223.02 hours Time Spent Processing Ham: 382.72 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 149160 87.56 95.05 84.34 2 DKIM_SIGNED 132453 72.44 84.40 67.29 3 XM_DK_Pass 128747 70.77 82.04 65.91 4 DCC_CHECK 124477 45.98 79.32 31.62 5 DKIM_VALID 121703 66.28 77.55 61.43 6 XMListUnsubscribeExists 113259 50.20 72.17 40.74 7 DKIM_VALID_AU 94521 48.74 60.23 43.80 8 XM_H_QuotedFrom 88566 39.60 56.44 32.35 9 XM_DK_Undo_02 76656 23.86 48.85 13.10 10 BAYES_99 70238 21.74 44.76 11.84 11 BAYES_999 60163 18.89 38.34 10.52 12 HTML_FONT_LOW_CONTRAST 55968 27.41 35.66 23.86 13 TR_DCC_Bayes_99 55048 14.44 35.08 5.55 14 LOC_TINY_FONT_1 54985 24.35 35.04 19.75 15 BAYES_50 50502 52.07 32.18 60.63 16 MIME_HTML_ONLY 50292 23.85 32.05 20.33 17 XMSubLong 44552 22.88 28.39 20.51 18 FVGT_m_MULTI_ODD 42579 21.48 27.13 19.04 19 DKIM_VALID_EF 39125 25.37 24.93 25.56 20 T_KAM_HTML_FONT_INVALID 32460 15.61 20.68 13.43 21 T_TM2_M_HEADER_IN_MSG 31412 29.19 20.02 33.15 22 XM_Body_Dirty_Words 28969 12.22 18.46 9.54 23 DCC_CHECK_NEGATIVE 28920 51.58 18.43 65.85 24 RELAYCOUNTRY_META 27485 9.14 17.51 5.53 25 MultiRelay 27267 18.80 17.37 19.41 26 HTML_IMAGE_RATIO_02 25361 9.29 16.16 6.33 27 XM_Multi_Part_URI 24620 11.64 15.69 9.90 28 XM_Evil_Numbers_Gen 22766 9.62 14.51 7.52 29 BOTNET 21507 5.30 13.70 1.68 30 FSL_BULK_SIG 21030 9.14 13.40 7.31 31 BOTNET_IPINHOSTNAME 18489 6.39 11.78 4.07 32 UNTRUSTED_Relay 17765 4.64 11.32 1.77 33 LOTS_OF_MONEY 17078 8.99 10.88 8.18 34 XMSexyCombo_05 15824 4.93 10.08 2.71 35 T_XMDrugObfuBody_14 15129 8.15 9.64 7.51 36 XM_B_Phish_Phrases 15062 5.89 9.60 4.29 37 LotsOfNums_01 14222 7.80 9.06 7.25 38 HTML_IMAGE_RATIO_04 14116 5.84 8.99 4.48 39 XM_H_Long_From01 13729 6.58 8.75 5.65 40 XMSubMetaSx_00 12180 4.91 7.76 3.68 41 BAYES_80 12145 4.92 7.74 3.71 42 MPART_ALT_DIFF 11829 6.11 7.54 5.49 43 XM_UncommonTLD01 11238 4.75 7.16 3.71 44 FROM_EXCESS_BASE64 10824 4.19 6.90 3.03 45 DKIM_INVALID 10750 6.15 6.85 5.85 46 TooManyTo_001 10709 8.28 6.82 8.91 47 BAYES_60 10630 6.38 6.77 6.21 48 TR_XM_DocInvoice 9886 4.64 6.30 3.92 49 XMNumbers 9126 4.12 5.82 3.39 50 T_REMOTE_IMAGE 8019 4.80 5.11 4.67 51 HTML_IMAGE_RATIO_06 7893 3.34 5.03 2.62 52 MIME_QP_LONG_LINE 7886 5.01 5.03 5.01 53 XMStrtUSub 7764 4.08 4.95 3.70 54 XM_UB50 7519 2.37 4.79 1.33 55 BAYES_95 7367 3.08 4.69 2.39 56 TM2_M_URI_OPT_OUT 6682 2.45 4.26 1.67 57 MIME_HTML_MOSTLY 6540 2.88 4.17 2.33 58 RCVD_IN_RP_SAFE 6416 6.96 4.09 8.19 59 XM_SendGrid 6354 4.58 4.05 4.80 60 XM_SPF_SoftFail 6092 2.81 3.88 2.34 61 MIME_HTML_ONLY_MULTI 5936 3.80 3.78 3.81 62 RCVD_IN_MSPIKE_H2 5772 4.29 3.68 4.55 63 RCVD_IN_RP_CERTIFIED 5545 6.41 3.53 7.64 64 XM_DIRTYINTL 5525 2.37 3.52 1.87 65 XM_CamelCaseFrm001 5328 2.01 3.40 1.41 66 SpammyFromTLD_02 5304 1.28 3.38 0.37 67 MultiRelay_CC 5247 1.19 3.34 0.27 68 MultiRelay_Combo 5247 1.19 3.34 0.27 69 RCVD_IN_BL_SPAMCOP_NET 5133 1.51 3.27 0.75 70 RELAYCOUNTRY_CA 5042 1.89 3.21 1.32 71 URI_HEX 4674 1.58 2.98 0.98 72 HTML_IMAGE_RATIO_08 4581 2.24 2.92 1.94 73 XM_OfRef6 4381 2.00 2.79 1.66 74 T_TooManySym_01 4292 3.57 2.73 3.93 75 RCVD_IN_RP_RNBL 4268 0.85 2.72 0.04 76 NO_DNS_FOR_FROM 4142 1.91 2.64 1.60 77 HTML_MIME_NO_HTML_TAG 4103 2.67 2.61 2.69 78 XMHTML_After_End 3834 1.03 2.44 0.42 79 T_XMDrugObfuBody_08 3684 1.66 2.35 1.37 80 XM_UB99 3542 0.68 2.26 0.01 81 SUBJ_ALL_CAPS 3434 2.93 2.19 3.25 82 SpammyFromTLD_01 3316 1.23 2.11 0.85 83 RCVD_IN_IADB_LISTED 3284 4.24 2.09 5.17 84 RELAYCOUNTRY_FR 3217 0.81 2.05 0.27 85 TM2_M_VERY_LONG_WORD 3208 1.17 2.04 0.79 86 XMDiploma_00 3168 1.71 2.02 1.58 87 XM_URI_RBL 3058 0.65 1.95 0.09 88 XMSubMetaI_00 3027 0.92 1.93 0.49 89 RCVD_IN_PSBL 2987 0.70 1.90 0.18 90 BOTNET_NORDNS 2924 0.81 1.86 0.36 91 MAILING_LIST_MULTI 2863 2.41 1.82 2.66 92 RCVD_IN_IADB_SPF 2840 3.68 1.81 4.49 93 XM_H_Long_From02 2794 1.17 1.78 0.91 94 XMBody_17 2752 0.80 1.75 0.39 95 HTML_SHORT_LINK_IMG_1 2696 0.54 1.72 0.03 96 XM_UB999 2679 0.52 1.71 0.01 97 RCVD_IN_IADB_SENDERID 2631 3.27 1.68 3.96 98 RCVD_IN_IADB_DK 2627 3.18 1.67 3.84 99 BODY_URI_ONLY 2619 0.54 1.67 0.05 100 SUBJ_DOLLARS 2567 0.58 1.64 0.13 101 XM_UB60 2563 0.54 1.63 0.07 102 HTML_IMAGE_ONLY_08 2546 0.61 1.62 0.17 103 T_XMHurry_00 2526 0.81 1.61 0.47 104 ALL_TRUSTED 2507 13.62 1.60 18.79 105 UNPARSEABLE_RELAY 2485 2.63 1.58 3.08 106 XM_DK_Undo_01 2476 1.92 1.58 2.07 107 XMPhish30 2458 0.70 1.57 0.33 108 URIBL_BLACK 2444 0.49 1.56 0.04 109 TR_XM_RelayPhish 2440 0.79 1.55 0.47 110 URI_TRY_3LD 2348 1.05 1.50 0.85 111 XMSexyCombo_01 2273 0.87 1.45 0.63 112 XMLongAddy 2269 0.54 1.45 0.15 113 PHOTO_EDITING_DIRECT 2254 0.44 1.44 0.01 114 TooManyTo_002 2245 2.33 1.43 2.71 115 XMStockSpam_06 2242 1.30 1.43 1.25 116 URIBL_DBL_SPAM 2124 0.43 1.35 0.03 117 XMPhish11 2088 1.29 1.33 1.27 118 TR_LOTS_OF_MONEY2 2071 0.73 1.32 0.48 119 T_MONEY_PERCENT 2071 0.73 1.32 0.48 120 FSL_THIS_IS_ADV 2061 0.44 1.31 0.07 121 RELAYCOUNTRY_NL 2057 0.53 1.31 0.19 122 DIET_1 2057 0.59 1.31 0.28 123 RELAYCOUNTRY_GB 2054 1.15 1.31 1.09 124 TooManyTo_003 2018 1.59 1.29 1.73 125 T_XMDrugObfuBody_00 1893 0.96 1.21 0.86 126 RELAYCOUNTRY_IN 1884 0.47 1.20 0.15 127 XMGenDplmaNmb 1874 1.01 1.19 0.93 128 RELAYCOUNTRY_CN 1869 0.41 1.19 0.08 129 HTML_FONT_SIZE_LARGE 1866 0.55 1.19 0.27 130 TR_Symld_Words 1859 2.99 1.18 3.77 131 BAYES_40 1857 3.02 1.18 3.81 132 TR_MetaPhish_Combo_01 1842 1.14 1.17 1.12 133 RELAYCOUNTRY_DE 1841 0.99 1.17 0.92 134 XM_BadFromFormat 1832 0.52 1.17 0.24 135 XMMoneyMeta_00 1757 0.67 1.12 0.47 136 BAYES_00 1745 5.04 1.11 6.73 137 TooManyTo_004 1705 1.21 1.09 1.27 138 XMBdyGiftCard01 1683 0.68 1.07 0.52 139 T_TooManySym_02 1627 1.44 1.04 1.62 140 XM_B_REG_HTML 1621 0.82 1.03 0.73 141 XM_UB80 1603 0.33 1.02 0.03 142 XMSlimDrugH 1592 0.57 1.01 0.38 143 REMOVE_BEFORE_LINK 1587 0.51 1.01 0.30 144 XM_PDF 1576 5.04 1.00 6.78 145 T_FILL_THIS_FORM_SHORT 1563 1.18 1.00 1.26 146 XMBody_78 1557 0.63 0.99 0.48 147 XM_ProductURIs 1549 0.95 0.99 0.93 148 XM_HighProb1 1532 0.30 0.98 0.01 149 RCVD_IN_IADB_VOUCHED 1528 2.79 0.97 3.57 150 DATE_IN_PAST_06_12 1525 0.32 0.97 0.04 151 DATE_IN_PAST_03_06 1520 0.36 0.97 0.09 152 ADMITS_SPAM 1440 0.30 0.92 0.04 153 HTTPS_HTTP_MISMATCH 1439 0.57 0.92 0.43 154 RDNS_DYNAMIC 1420 0.57 0.90 0.43 155 BAYES_20 1401 2.16 0.89 2.71 156 XMBrknScrpt_02 1385 0.63 0.88 0.52 157 T_HTML_TAG_BALANCE_CENTER 1382 0.39 0.88 0.18 158 XM_B_COPY_HTML 1379 0.61 0.88 0.50 159 TR_XM_DK_Bayes 1341 3.00 0.85 3.92 160 URI_NOVOWEL 1323 0.46 0.84 0.29 161 XMPhish14 1321 0.45 0.84 0.29 162 TR_Caps_n_Bayes_99 1303 0.27 0.83 0.02 163 XM_H_PHPOS 1287 1.17 0.82 1.33 164 TooManyTo_005 1285 0.97 0.82 1.04 165 RELAYCOUNTRY_AT 1284 0.33 0.82 0.11 166 RCVD_IN_MSPIKE_H3 1283 1.59 0.82 1.92 167 RCVD_IN_MSPIKE_WL 1283 1.59 0.82 1.92 168 XMHTMLBadTable_001 1270 0.49 0.81 0.35 169 MPART_ALT_DIFF_COUNT 1269 0.41 0.81 0.23 170 XMSubMetaSxObfu_03 1259 0.44 0.80 0.29 171 HTML_IMAGE_ONLY_28 1250 0.56 0.80 0.45 172 HTML_FONT_FACE_BAD 1250 2.41 0.80 3.10 173 DKIM_ADSP_CUSTOM_MED 1248 0.98 0.80 1.06 174 T_Symld_Words_02 1244 0.62 0.79 0.55 175 TR_XM_DK_Bayes1 1244 2.78 0.79 3.63 176 PLING_QUERY 1213 0.42 0.77 0.26 177 XMNoVowels 1209 0.70 0.77 0.67 178 ANY_BOUNCE_MESSAGE 1202 2.62 0.77 3.42 179 BOUNCE_MESSAGE 1201 2.62 0.77 3.42 180 TR_XM_DK_Bayes2 1188 2.40 0.76 3.10 181 XMBSHREFv2 1185 0.35 0.76 0.18 182 HTML_FONT_SIZE_HUGE 1177 0.32 0.75 0.13 183 XM_UB95 1156 0.23 0.74 0.01 184 DATE_IN_PAST_12_24 1131 0.24 0.72 0.04 185 XM_Body_Obfu01 1118 0.39 0.71 0.25 186 XM_H_PHPMailer 1089 0.69 0.69 0.68 187 XMCapTrack 1084 1.44 0.69 1.77 188 XMSubMetaSSx_00 1076 0.31 0.69 0.15 189 XMClaimOffer 1068 0.34 0.68 0.19 190 FORGED_GMAIL_RCVD 1062 0.55 0.68 0.50 191 FVGT_m_MULTI_ODD_EMAIL 1052 0.25 0.67 0.07 192 LONG_JUNK_URI3 1023 0.25 0.65 0.08 193 TR_Mismatch_TLD_02 1003 0.24 0.64 0.07 194 XM_RXBody 978 0.26 0.62 0.10 195 RELAYCOUNTRY_BR 972 0.20 0.62 0.01 196 RELAYCOUNTRY_AU 971 0.50 0.62 0.45 197 XM_GoogleGroups 966 1.09 0.62 1.29 198 HTML_TAG_BALANCE_BODY 949 0.49 0.60 0.45 199 XMSubPhish11 942 0.31 0.60 0.18 200 LongTLD 929 0.30 0.59 0.17 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 307460 87.56 95.05 84.34 2 DKIM_SIGNED 245302 72.44 84.40 67.29 3 XM_DK_Pass 240292 70.77 82.04 65.91 4 DCC_CHECK_NEGATIVE 240055 51.58 18.43 65.85 5 DKIM_VALID 223958 66.28 77.55 61.43 6 BAYES_50 221017 52.07 32.18 60.63 7 DKIM_VALID_AU 159674 48.74 60.23 43.80 8 XMListUnsubscribeExists 148509 50.20 72.17 40.74 9 T_TM2_M_HEADER_IN_MSG 120833 29.19 20.02 33.15 10 XM_H_QuotedFrom 117923 39.60 56.44 32.35 11 DCC_CHECK 115280 45.98 79.32 31.62 12 DKIM_VALID_EF 93198 25.37 24.93 25.56 13 HTML_FONT_LOW_CONTRAST 86970 27.41 35.66 23.86 14 XMSubLong 74763 22.88 28.39 20.51 15 MIME_HTML_ONLY 74097 23.85 32.05 20.33 16 LOC_TINY_FONT_1 72002 24.35 35.04 19.75 17 MultiRelay 70758 18.80 17.37 19.41 18 FVGT_m_MULTI_ODD 69413 21.48 27.13 19.04 19 ALL_TRUSTED 68494 13.62 1.60 18.79 20 T_KAM_HTML_FONT_INVALID 48955 15.61 20.68 13.43 21 XM_DK_Undo_02 47755 23.86 48.85 13.10 22 BAYES_99 43150 21.74 44.76 11.84 23 BAYES_999 38353 18.89 38.34 10.52 24 XM_Multi_Part_URI 36095 11.64 15.69 9.90 25 XM_Body_Dirty_Words 34783 12.22 18.46 9.54 26 TooManyTo_001 32491 8.28 6.82 8.91 27 IN_ZIMBRA_NJ_WHITELIST 32101 6.17 0.03 8.81 28 XM_DKIMWhitelistDomains 31981 6.14 0.03 8.77 29 RCVD_IN_RP_SAFE 29870 6.96 4.09 8.19 30 LOTS_OF_MONEY 29808 8.99 10.88 8.18 31 RCVD_IN_RP_CERTIFIED 27867 6.41 3.53 7.64 32 XM_Evil_Numbers_Gen 27404 9.62 14.51 7.52 33 T_XMDrugObfuBody_14 27369 8.15 9.64 7.51 34 FSL_BULK_SIG 26632 9.14 13.40 7.31 35 LotsOfNums_01 26444 7.80 9.06 7.25 36 XM_PDF 24726 5.04 1.00 6.78 37 BAYES_00 24549 5.04 1.11 6.73 38 HTML_IMAGE_RATIO_02 23064 9.29 16.16 6.33 39 BAYES_60 22641 6.38 6.77 6.21 40 DKIM_INVALID 21344 6.15 6.85 5.85 41 XM_H_Long_From01 20599 6.58 8.75 5.65 42 TR_DCC_Bayes_99 20250 14.44 35.08 5.55 43 RELAYCOUNTRY_META 20177 9.14 17.51 5.53 44 MPART_ALT_DIFF 20023 6.11 7.54 5.49 45 RCVD_IN_IADB_LISTED 18848 4.24 2.09 5.17 46 MIME_QP_LONG_LINE 18265 5.01 5.03 5.01 47 XM_SendGrid 17507 4.58 4.05 4.80 48 T_REMOTE_IMAGE 17014 4.80 5.11 4.67 49 RCVD_IN_MSPIKE_H2 16574 4.29 3.68 4.55 50 RCVD_IN_IADB_SPF 16374 3.68 1.81 4.49 51 HTML_IMAGE_RATIO_04 16330 5.84 8.99 4.48 52 XM_B_Phish_Phrases 15654 5.89 9.60 4.29 53 BOTNET_IPINHOSTNAME 14826 6.39 11.78 4.07 54 RCVD_IN_IADB_SENDERID 14435 3.27 1.68 3.96 55 T_TooManySym_01 14340 3.57 2.73 3.93 56 TR_XM_DocInvoice 14297 4.64 6.30 3.92 57 TR_XM_DK_Bayes 14278 3.00 0.85 3.92 58 RCVD_IN_IADB_DK 13982 3.18 1.67 3.84 59 MIME_HTML_ONLY_MULTI 13896 3.80 3.78 3.81 60 BAYES_40 13892 3.02 1.18 3.81 61 TR_Symld_Words 13749 2.99 1.18 3.77 62 BAYES_80 13527 4.92 7.74 3.71 63 XM_UncommonTLD01 13508 4.75 7.16 3.71 64 XMStrtUSub 13503 4.08 4.95 3.70 65 XMSubMetaSx_00 13422 4.91 7.76 3.68 66 TR_XM_DK_Bayes1 13243 2.78 0.79 3.63 67 RCVD_IN_IADB_VOUCHED 13005 2.79 0.97 3.57 68 ANY_BOUNCE_MESSAGE 12469 2.62 0.77 3.42 69 BOUNCE_MESSAGE 12467 2.62 0.77 3.42 70 XMNumbers 12356 4.12 5.82 3.39 71 SUBJ_ALL_CAPS 11850 2.93 2.19 3.25 72 TR_XM_DK_Bayes2 11306 2.40 0.76 3.10 73 HTML_FONT_FACE_BAD 11297 2.41 0.80 3.10 74 UNPARSEABLE_RELAY 11233 2.63 1.58 3.08 75 FROM_EXCESS_BASE64 11035 4.19 6.90 3.03 76 TVD_RCVD_IP 10731 2.17 0.36 2.94 77 HELO_NODOT 10144 2.06 0.40 2.78 78 TooManyTo_002 9896 2.33 1.43 2.71 79 XMSexyCombo_05 9883 4.93 10.08 2.71 80 BAYES_20 9867 2.16 0.89 2.71 81 HTML_MIME_NO_HTML_TAG 9819 2.67 2.61 2.69 82 MAILING_LIST_MULTI 9697 2.41 1.82 2.66 83 HTML_IMAGE_RATIO_06 9546 3.34 5.03 2.62 84 BAYES_95 8695 3.08 4.69 2.39 85 XM_SPF_SoftFail 8540 2.81 3.88 2.34 86 MIME_HTML_MOSTLY 8504 2.88 4.17 2.33 87 T_OBFU_PDF_ATTACH 8497 1.71 0.27 2.33 88 IN_HORDE_ADDRESS_BOOK 8247 1.60 0.08 2.26 89 XM_DK_Undo_01 7551 1.92 1.58 2.07 90 HTML_IMAGE_RATIO_08 7082 2.24 2.92 1.94 91 RCVD_IN_MSPIKE_WL 7003 1.59 0.82 1.92 92 RCVD_IN_MSPIKE_H3 6991 1.59 0.82 1.92 93 INVALID_MSGID 6974 1.40 0.20 1.91 94 XM_DIRTYINTL 6834 2.37 3.52 1.87 95 XMCapTrack 6442 1.44 0.69 1.77 96 UNTRUSTED_Relay 6437 4.64 11.32 1.77 97 TO_MALFORMED 6372 1.22 0.00 1.75 98 TooManyTo_003 6299 1.59 1.29 1.73 99 RCVD_IN_IADB_OPTIN 6240 1.35 0.52 1.71 100 UPPERCASE_75_100 6117 1.19 0.04 1.68 101 BOTNET 6107 5.30 13.70 1.68 102 TM2_M_URI_OPT_OUT 6070 2.45 4.26 1.67 103 BAYES_05 6069 1.32 0.52 1.66 104 XM_OfRef6 6035 2.00 2.79 1.66 105 T_TooManySym_02 5897 1.44 1.04 1.62 106 NO_DNS_FOR_FROM 5834 1.91 2.64 1.60 107 XMDiploma_00 5743 1.71 2.02 1.58 108 XM_CamelCaseFrm001 5146 2.01 3.40 1.41 109 T_XMDrugObfuBody_08 4997 1.66 2.35 1.37 110 XM_UB50 4839 2.37 4.79 1.33 111 XM_H_PHPOS 4835 1.17 0.82 1.33 112 RELAYCOUNTRY_CA 4798 1.89 3.21 1.32 113 XM_GoogleGroups 4717 1.09 0.62 1.29 114 XMPhish11 4639 1.29 1.33 1.27 115 TooManyTo_004 4622 1.21 1.09 1.27 116 T_FILL_THIS_FORM_SHORT 4595 1.18 1.00 1.26 117 XMStockSpam_06 4557 1.30 1.43 1.25 118 USER_IN_DEF_DKIM_WL 4307 0.85 0.09 1.18 119 TR_MetaPhish_Combo_01 4089 1.14 1.17 1.12 120 RELAYCOUNTRY_GB 3968 1.15 1.31 1.09 121 DKIM_ADSP_CUSTOM_MED 3882 0.98 0.80 1.06 122 TooManyTo_005 3775 0.97 0.82 1.04 123 XMSubNoVowel 3651 0.85 0.49 1.00 124 URI_HEX 3589 1.58 2.98 0.98 125 XM_ProductURIs 3398 0.95 0.99 0.93 126 XMGenDplmaNmb 3384 1.01 1.19 0.93 127 RELAYCOUNTRY_DE 3338 0.99 1.17 0.92 128 XM_H_Long_From02 3305 1.17 1.78 0.91 129 T_XMDrugObfuBody_00 3139 0.96 1.21 0.86 130 URI_TRY_3LD 3105 1.05 1.50 0.85 131 SpammyFromTLD_01 3085 1.23 2.11 0.85 132 TM2_M_VERY_LONG_WORD 2874 1.17 2.04 0.79 133 T_TooManySym_03 2873 0.63 0.25 0.79 134 NML_ADSP_CUSTOM_MED 2827 0.71 0.55 0.78 135 RCVD_IN_BL_SPAMCOP_NET 2727 1.51 3.27 0.75 136 USER_IN_WHITELIST 2674 0.51 0.00 0.73 137 XM_B_REG_HTML 2670 0.82 1.03 0.73 138 XM_H_PHPMailer 2497 0.69 0.69 0.68 139 SHORT_HELO_AND_INLINE_IMAGE 2480 0.51 0.10 0.68 140 XMNoVowels 2431 0.70 0.77 0.67 141 RCVD_IN_IADB_DOPTIN 2408 0.48 0.07 0.66 142 FILL_THIS_FORM 2333 0.58 0.44 0.64 143 XMSexyCombo_01 2290 0.87 1.45 0.63 144 RCVD_IN_SORBS_DUL 2231 0.52 0.31 0.61 145 AC_DIV_BONANZA 2091 0.48 0.26 0.57 146 XMGappySubj_01 2080 0.51 0.37 0.57 147 XM_H_Trusted_IP 2063 0.40 0.00 0.57 148 T_Symld_Words_02 2009 0.62 0.79 0.55 149 HTML_IMAGE_ONLY_32 1975 0.54 0.53 0.54 150 XM_ShortIntro_01 1958 0.50 0.40 0.54 151 XMBody_95 1932 0.43 0.19 0.53 152 MISSING_HEADERS 1915 0.49 0.42 0.53 153 XMDateMe_00 1899 0.49 0.41 0.52 154 XMBrknScrpt_02 1892 0.63 0.88 0.52 155 XMSubMetaSxObfu_02 1882 0.50 0.45 0.52 156 XMBdyGiftCard01 1878 0.68 1.07 0.52 157 XM_B_COPY_HTML 1823 0.61 0.88 0.50 158 FORGED_GMAIL_RCVD 1822 0.55 0.68 0.50 159 XMSubMetaI_00 1783 0.92 1.93 0.49 160 T_FILL_THIS_FORM_LOAN 1776 0.38 0.14 0.49 161 XMBody_78 1753 0.63 0.99 0.48 162 T_MONEY_PERCENT 1747 0.73 1.32 0.48 163 TR_LOTS_OF_MONEY2 1747 0.73 1.32 0.48 164 T_XMHurry_00 1713 0.81 1.61 0.47 165 XMMoneyMeta_00 1711 0.67 1.12 0.47 166 TR_XM_RelayPhish 1704 0.79 1.55 0.47 167 HTML_IMAGE_ONLY_28 1658 0.56 0.80 0.45 168 RELAYCOUNTRY_AU 1626 0.50 0.62 0.45 169 HTML_TAG_BALANCE_BODY 1623 0.49 0.60 0.45 170 XM_B_TRADE_HTML 1621 0.46 0.50 0.44 171 TM2_M_BODY_EMPTY 1615 0.39 0.27 0.44 172 XM_D_omniadmin_Whitelist 1611 0.31 0.00 0.44 173 T_FILL_THIS_FORM_LONG 1601 0.37 0.19 0.44 174 HTML_IMAGE_ONLY_24 1599 0.47 0.53 0.44 175 RDNS_DYNAMIC 1568 0.57 0.90 0.43 176 HTTPS_HTTP_MISMATCH 1552 0.57 0.92 0.43 177 XMBounce_01 1536 0.41 0.38 0.42 178 XMHTML_After_End 1534 1.03 2.44 0.42 179 T_FILL_THIS_FORM_FRAUD_PHISH 1437 0.28 0.03 0.39 180 XMBody_17 1407 0.80 1.75 0.39 181 TM2_M_A_HREF_HREF 1404 0.41 0.47 0.39 182 XMSlimDrugH 1375 0.57 1.01 0.38 183 URI_WP_HACKED_2 1369 0.43 0.57 0.38 184 SpammyFromTLD_02 1357 1.28 3.38 0.37 185 BOTNET_NORDNS 1325 0.81 1.86 0.36 186 TO_NO_BRKTS_HTML_ONLY 1322 0.37 0.38 0.36 187 XMLngstWrd_00 1297 0.41 0.54 0.36 188 XM_H_PHPOS_M 1294 0.35 0.33 0.35 189 XMSolicitRefs_0 1293 0.35 0.34 0.35 190 XMHTMLBadTable_001 1274 0.49 0.81 0.35 191 TVD_SPACE_RATIO 1215 0.40 0.54 0.33 192 XMPhish30 1197 0.70 1.57 0.33 193 XMLngstWrd_01 1188 0.38 0.51 0.33 194 T_TooManySym_04 1175 0.23 0.03 0.32 195 FUZZY_CREDIT 1156 0.26 0.12 0.32 196 DOS_OUTLOOK_TO_MX 1144 0.26 0.13 0.31 197 HTML_IMAGE_ONLY_20 1132 0.31 0.32 0.31 198 XMSubEmpty 1127 0.33 0.39 0.31 199 XM_USANA_RCVD 1117 0.21 0.00 0.31 200 XMRcvdHeader_15 1102 0.21 0.00 0.30 ----------------------------------------------------------------------