Email: 550760 Autolearn: 0 AvgScore: 3.44 AvgScanTime: 3.99 sec Spam: 166632 Autolearn: 0 AvgScore: 12.32 AvgScanTime: 5.02 sec Ham: 384128 Autolearn: 0 AvgScore: -0.41 AvgScanTime: 3.54 sec Time Spent Running SA: 610.57 hours Time Spent Processing Spam: 232.43 hours Time Spent Processing Ham: 378.14 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 159701 85.81 95.84 81.46 2 DKIM_SIGNED 144499 71.25 86.72 64.53 3 XM_DK_Pass 140000 69.47 84.02 63.16 4 DCC_CHECK 134447 45.85 80.68 30.74 5 DKIM_VALID 132485 64.80 79.51 58.43 6 XMListUnsubscribeExists 124177 50.28 74.52 39.76 7 DKIM_VALID_AU 100661 46.13 60.41 39.94 8 XM_H_QuotedFrom 92178 39.22 55.32 32.24 9 XM_DK_Undo_02 84548 23.80 50.74 12.12 10 BAYES_99 77443 21.83 46.48 11.14 11 BAYES_999 66365 18.86 39.83 9.77 12 HTML_FONT_LOW_CONTRAST 63216 26.21 37.94 21.13 13 TR_DCC_Bayes_99 62340 14.98 37.41 5.25 14 LOC_TINY_FONT_1 59942 22.82 35.97 17.12 15 BAYES_50 51844 51.14 31.11 59.83 16 MIME_HTML_ONLY 49819 21.34 29.90 17.63 17 XMSubLong 44838 21.02 26.91 18.47 18 FVGT_m_MULTI_ODD 44800 20.42 26.89 17.62 19 DKIM_VALID_EF 40446 23.86 24.27 23.68 20 T_KAM_HTML_FONT_INVALID 36994 15.91 22.20 13.18 21 T_TM2_M_HEADER_IN_MSG 35774 32.23 21.47 36.89 22 XM_Body_Dirty_Words 30456 11.46 18.28 8.50 23 DCC_CHECK_NEGATIVE 28679 51.83 17.21 66.85 24 MultiRelay 27825 18.84 16.70 19.76 25 XM_Multi_Part_URI 27047 10.73 16.23 8.34 26 RELAYCOUNTRY_META 26345 8.62 15.81 5.51 27 XM_Evil_Numbers_Gen 25407 9.49 15.25 6.99 28 HTML_IMAGE_RATIO_02 24699 8.61 14.82 5.92 29 BOTNET 21976 5.11 13.19 1.61 30 LOTS_OF_MONEY 21459 9.20 12.88 7.60 31 BOTNET_IPINHOSTNAME 21089 6.48 12.66 3.79 32 FSL_BULK_SIG 20282 8.47 12.17 6.86 33 T_XMDrugObfuBody_14 17320 8.25 10.39 7.33 34 XM_B_Phish_Phrases 16840 5.94 10.11 4.13 35 LotsOfNums_01 15918 7.73 9.55 6.93 36 XMSexyCombo_05 15060 4.36 9.04 2.33 37 UNTRUSTED_Relay 14678 3.60 8.81 1.34 38 HTML_IMAGE_RATIO_04 14085 4.80 8.45 3.22 39 TR_XM_DocInvoice 13365 5.20 8.02 3.98 40 TooManyTo_001 13094 8.49 7.86 8.77 41 XM_H_Long_From01 12893 9.27 7.74 9.93 42 XMSubMetaSx_00 12206 4.40 7.33 3.13 43 DKIM_INVALID 12014 6.44 7.21 6.11 44 BAYES_80 11880 4.81 7.13 3.81 45 BAYES_60 10239 6.35 6.14 6.44 46 MPART_ALT_DIFF 10162 4.59 6.10 3.94 47 HTML_IMAGE_RATIO_06 10139 3.80 6.08 2.80 48 FROM_EXCESS_BASE64 10002 3.64 6.00 2.62 49 XM_UncommonTLD01 9481 4.24 5.69 3.62 50 MIME_QP_LONG_LINE 8633 5.20 5.18 5.21 51 XMNumbers 7818 3.48 4.69 2.96 52 XM_SendGrid 7778 4.66 4.67 4.66 53 TM2_M_URI_OPT_OUT 7713 2.46 4.63 1.53 54 RCVD_IN_RP_SAFE 7361 6.54 4.42 7.46 55 BAYES_95 7323 3.13 4.39 2.59 56 XMStrtUSub 7299 3.80 4.38 3.55 57 RELAYCOUNTRY_CA 7157 2.23 4.30 1.34 58 MIME_HTML_MOSTLY 7146 2.75 4.29 2.08 59 XM_UB50 6566 1.83 3.94 0.91 60 XM_SPF_SoftFail 6265 2.85 3.76 2.46 61 XM_DIRTYINTL 6250 2.28 3.75 1.64 62 RCVD_IN_MSPIKE_H2 6131 4.20 3.68 4.43 63 RCVD_IN_RP_CERTIFIED 6056 5.92 3.63 6.91 64 T_TooManySym_01 5790 4.14 3.47 4.42 65 XM_CamelCaseFrm001 5481 2.02 3.29 1.46 66 T_REMOTE_IMAGE 5450 4.06 3.27 4.41 67 URI_HEX 5349 1.95 3.21 1.40 68 HTML_IMAGE_RATIO_08 5289 2.29 3.17 1.91 69 MIME_HTML_ONLY_MULTI 5073 2.64 3.04 2.46 70 RCVD_IN_BL_SPAMCOP_NET 4806 1.27 2.88 0.57 71 T_XMDrugObfuBody_08 4777 1.89 2.87 1.47 72 RCVD_IN_IADB_LISTED 4257 4.83 2.55 5.82 73 HTML_MIME_NO_HTML_TAG 4157 2.22 2.49 2.10 74 RCVD_IN_RP_RNBL 4155 0.78 2.49 0.03 75 NO_DNS_FOR_FROM 4041 1.86 2.43 1.62 76 XMBody_17 3931 0.96 2.36 0.36 77 MultiRelay_CC 3872 0.84 2.32 0.19 78 MultiRelay_Combo 3872 0.84 2.32 0.19 79 XMDiploma_00 3828 1.66 2.30 1.38 80 RCVD_IN_IADB_SPF 3745 4.19 2.25 5.03 81 SUBJ_ALL_CAPS 3731 4.83 2.24 5.95 82 XM_OfRef6 3611 1.63 2.17 1.39 83 RCVD_IN_IADB_SENDERID 3591 3.74 2.16 4.42 84 XM_URI_RBL 3582 0.73 2.15 0.11 85 RCVD_IN_IADB_DK 3545 3.64 2.13 4.29 86 XMSexyCombo_01 3455 0.87 2.07 0.35 87 XM_H_Long_From02 3412 1.31 2.05 0.99 88 TM2_M_VERY_LONG_WORD 3289 1.10 1.97 0.72 89 T_XMDrugObfuBody_00 3232 1.09 1.94 0.72 90 MAILING_LIST_MULTI 2937 2.56 1.76 2.90 91 SpammyFromTLD_01 2847 1.11 1.71 0.85 92 SpammyFromTLD_02 2836 0.74 1.70 0.33 93 T_XMHurry_00 2802 0.83 1.68 0.47 94 XMPhish30 2801 0.77 1.68 0.38 95 TooManyTo_002 2788 2.41 1.67 2.73 96 XMSubMetaI_00 2719 0.79 1.63 0.42 97 XM_UB99 2628 0.48 1.58 0.01 98 ALL_TRUSTED 2596 16.71 1.56 23.28 99 XMHTML_After_End 2596 0.68 1.56 0.30 100 TooManyTo_003 2558 1.71 1.54 1.78 101 XM_DK_Undo_01 2549 1.76 1.53 1.86 102 XM_Combo_Sbj 2548 0.60 1.53 0.19 103 XMPhish11 2520 1.33 1.51 1.25 104 XMGenDplmaNmb 2485 1.08 1.49 0.89 105 TR_XM_RelayPhish 2470 0.76 1.48 0.45 106 UNPARSEABLE_RELAY 2462 2.28 1.48 2.63 107 RCVD_IN_PSBL 2411 0.55 1.45 0.16 108 T_TooManySym_02 2329 1.66 1.40 1.78 109 BAYES_40 2310 4.23 1.39 5.47 110 BAYES_00 2281 4.93 1.37 6.47 111 RELAYCOUNTRY_FR 2273 0.62 1.36 0.29 112 T_MONEY_PERCENT 2246 0.66 1.35 0.36 113 TR_LOTS_OF_MONEY2 2246 0.66 1.35 0.36 114 URIBL_BLACK 2203 0.42 1.32 0.03 115 TooManyTo_004 2190 1.29 1.31 1.28 116 RCVD_IN_MSPIKE_WL 2151 2.07 1.29 2.41 117 T_Symld_Words_02 2146 0.68 1.29 0.42 118 XM_ProductURIs 2134 0.96 1.28 0.82 119 BOTNET_NORDNS 2121 0.41 1.27 0.03 120 XMBrknScrpt_02 2117 0.66 1.27 0.40 121 RCVD_IN_MSPIKE_H3 2098 2.05 1.26 2.40 122 URI_TRY_3LD 2092 0.93 1.26 0.79 123 XMHTMLBadTable_001 2077 0.63 1.25 0.37 124 XM_UB999 2065 0.38 1.24 0.00 125 TR_Symld_Words 2014 1.63 1.21 1.81 126 XMStockSpam_06 1989 0.83 1.19 0.67 127 T_HTML_TAG_BALANCE_CENTER 1968 0.47 1.18 0.16 128 XM_HighProb1 1933 0.36 1.16 0.01 129 XMBody_78 1921 0.64 1.15 0.42 130 XM_UB60 1912 0.41 1.15 0.09 131 RELAYCOUNTRY_DE 1903 0.75 1.14 0.58 132 BAYES_20 1882 2.06 1.13 2.47 133 XMCapTrack 1875 1.58 1.13 1.78 134 XMMoneyMeta_00 1872 0.72 1.12 0.54 135 XMSexyCombo_04 1871 0.39 1.12 0.08 136 XMBdyGiftCard01 1869 0.63 1.12 0.42 137 PHOTO_EDITING_DIRECT 1838 0.34 1.10 0.00 138 TooManyTo_005 1802 1.06 1.08 1.05 139 RELAYCOUNTRY_GB 1748 1.11 1.05 1.13 140 TR_XM_DK_Bayes 1694 2.99 1.02 3.85 141 RELAYCOUNTRY_CN 1684 0.35 1.01 0.06 142 T_FILL_THIS_FORM_SHORT 1670 0.90 1.00 0.85 143 MPART_ALT_DIFF_COUNT 1660 0.48 1.00 0.26 144 RCVD_IN_IADB_VOUCHED 1649 3.08 0.99 3.99 145 HTML_TAG_BALANCE_BODY 1639 0.59 0.98 0.41 146 DIET_1 1630 0.46 0.98 0.23 147 TR_MetaPhish_Combo_01 1616 0.86 0.97 0.81 148 HTML_FONT_FACE_BAD 1609 1.60 0.97 1.88 149 URIBL_DBL_SPAM 1607 0.30 0.96 0.01 150 XMPhish14 1591 0.48 0.95 0.28 151 HTTPS_HTTP_MISMATCH 1591 0.61 0.95 0.47 152 RELAYCOUNTRY_AT 1585 0.37 0.95 0.12 153 ANY_BOUNCE_MESSAGE 1550 2.34 0.93 2.95 154 BOUNCE_MESSAGE 1549 2.33 0.93 2.94 155 XM_H_PHPOS 1538 1.83 0.92 2.23 156 XM_B_COPY_HTML 1515 0.62 0.91 0.50 157 URI_NOVOWEL 1508 0.50 0.90 0.32 158 TR_LOTS_OF_MONEY3 1506 0.48 0.90 0.30 159 TR_XM_DK_Bayes1 1494 2.73 0.90 3.53 160 TR_XM_DK_Bayes2 1443 2.38 0.87 3.03 161 XMSubEmpty 1421 1.20 0.85 1.34 162 XM_B_REG_HTML 1391 0.58 0.83 0.46 163 RDNS_DYNAMIC 1386 0.55 0.83 0.43 164 XM_BadFromFormat 1378 0.42 0.83 0.24 165 MISSING_HEADERS 1377 0.72 0.83 0.67 166 PLING_QUERY 1370 0.40 0.82 0.22 167 XMSubNoVowel 1345 1.54 0.81 1.85 168 FSL_THIS_IS_ADV 1332 0.29 0.80 0.08 169 DKIM_ADSP_CUSTOM_MED 1321 0.95 0.79 1.01 170 XM_PDF 1307 3.96 0.78 5.34 171 XMLongAddy 1305 0.33 0.78 0.13 172 XMClaimOffer 1292 0.37 0.78 0.20 173 XM_UB80 1254 0.25 0.75 0.03 174 XMSlimDrugH 1249 0.46 0.75 0.34 175 XMNoVowels 1238 0.90 0.74 0.97 176 XMSubMetaSxObfu_03 1225 0.42 0.74 0.28 177 XM_OfRef7 1221 0.34 0.73 0.16 178 HTML_FONT_SIZE_HUGE 1219 0.31 0.73 0.13 179 XMSubMetaSSx_00 1216 0.32 0.73 0.15 180 REMOVE_BEFORE_LINK 1206 0.47 0.72 0.36 181 XM_Body_Obfu01 1206 0.42 0.72 0.29 182 RCVD_IN_MSPIKE_BL 1187 0.23 0.71 0.02 183 DATE_IN_PAST_03_06 1186 0.26 0.71 0.07 184 RCVD_IN_MSPIKE_L5 1175 0.22 0.71 0.02 185 TVD_SPACE_RATIO 1160 0.62 0.70 0.58 186 HTML_IMAGE_ONLY_28 1154 0.51 0.69 0.44 187 BAYES_05 1128 1.23 0.68 1.48 188 SUBJ_DOLLARS 1121 0.26 0.67 0.09 189 RELAYCOUNTRY_NL 1111 0.51 0.67 0.44 190 TR_Caps_n_Bayes_99 1109 0.27 0.67 0.10 191 XM_XX_Yahoo 1090 0.24 0.65 0.06 192 RELAYCOUNTRY_AU 1084 0.54 0.65 0.50 193 XMGppyBdWords 1075 0.27 0.65 0.11 194 TM2_M_A_HREF_HREF 1070 0.41 0.64 0.31 195 XM_H_PHPMailer 1031 0.78 0.62 0.85 196 LONG_JUNK_URI3 1024 0.25 0.61 0.09 197 NML_ADSP_CUSTOM_MED 1018 0.71 0.61 0.75 198 TR_Mismatch_TLD_02 1003 0.23 0.60 0.06 199 FORGED_GMAIL_RCVD 999 0.50 0.60 0.46 200 LONG_HEX_URI 974 0.26 0.58 0.13 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 312914 85.81 95.84 81.46 2 DCC_CHECK_NEGATIVE 256785 51.83 17.21 66.85 3 DKIM_SIGNED 247896 71.25 86.72 64.53 4 XM_DK_Pass 242622 69.47 84.02 63.16 5 BAYES_50 229814 51.14 31.11 59.83 6 DKIM_VALID 224435 64.80 79.51 58.43 7 DKIM_VALID_AU 153420 46.13 60.41 39.94 8 XMListUnsubscribeExists 152744 50.28 74.52 39.76 9 T_TM2_M_HEADER_IN_MSG 141723 32.23 21.47 36.89 10 XM_H_QuotedFrom 123844 39.22 55.32 32.24 11 DCC_CHECK 118086 45.85 80.68 30.74 12 DKIM_VALID_EF 90957 23.86 24.27 23.68 13 ALL_TRUSTED 89422 16.71 1.56 23.28 14 HTML_FONT_LOW_CONTRAST 81154 26.21 37.94 21.13 15 MultiRelay 75916 18.84 16.70 19.76 16 XMSubLong 70956 21.02 26.91 18.47 17 MIME_HTML_ONLY 67714 21.34 29.90 17.63 18 FVGT_m_MULTI_ODD 67692 20.42 26.89 17.62 19 LOC_TINY_FONT_1 65755 22.82 35.97 17.12 20 T_KAM_HTML_FONT_INVALID 50615 15.91 22.20 13.18 21 XM_DK_Undo_02 46555 23.80 50.74 12.12 22 BAYES_99 42779 21.83 46.48 11.14 23 XM_H_Long_From01 38148 9.27 7.74 9.93 24 BAYES_999 37525 18.86 39.83 9.77 25 TooManyTo_001 33693 8.49 7.86 8.77 26 XM_Body_Dirty_Words 32639 11.46 18.28 8.50 27 XM_Multi_Part_URI 32030 10.73 16.23 8.34 28 LOTS_OF_MONEY 29185 9.20 12.88 7.60 29 RCVD_IN_RP_SAFE 28641 6.54 4.42 7.46 30 XM_DKIMWhitelistDomains 28428 5.17 0.04 7.40 31 T_XMDrugObfuBody_14 28144 8.25 10.39 7.33 32 IN_ZIMBRA_NJ_WHITELIST 27387 4.99 0.04 7.13 33 XM_Evil_Numbers_Gen 26859 9.49 15.25 6.99 34 LotsOfNums_01 26635 7.73 9.55 6.93 35 RCVD_IN_RP_CERTIFIED 26535 5.92 3.63 6.91 36 FSL_BULK_SIG 26343 8.47 12.17 6.86 37 BAYES_00 24860 4.93 1.37 6.47 38 BAYES_60 24728 6.35 6.14 6.44 39 DKIM_INVALID 23461 6.44 7.21 6.11 40 SUBJ_ALL_CAPS 22852 4.83 2.24 5.95 41 HTML_IMAGE_RATIO_02 22727 8.61 14.82 5.92 42 RCVD_IN_IADB_LISTED 22353 4.83 2.55 5.82 43 RELAYCOUNTRY_META 21154 8.62 15.81 5.51 44 BAYES_40 20999 4.23 1.39 5.47 45 XM_PDF 20514 3.96 0.78 5.34 46 TR_DCC_Bayes_99 20170 14.98 37.41 5.25 47 MIME_QP_LONG_LINE 20004 5.20 5.18 5.21 48 RCVD_IN_IADB_SPF 19319 4.19 2.25 5.03 49 XM_SendGrid 17900 4.66 4.67 4.66 50 RCVD_IN_MSPIKE_H2 17009 4.20 3.68 4.43 51 T_TooManySym_01 16987 4.14 3.47 4.42 52 RCVD_IN_IADB_SENDERID 16984 3.74 2.16 4.42 53 T_REMOTE_IMAGE 16921 4.06 3.27 4.41 54 RCVD_IN_IADB_DK 16484 3.64 2.13 4.29 55 XM_B_Phish_Phrases 15853 5.94 10.11 4.13 56 RCVD_IN_IADB_VOUCHED 15324 3.08 0.99 3.99 57 TR_XM_DocInvoice 15301 5.20 8.02 3.98 58 MPART_ALT_DIFF 15122 4.59 6.10 3.94 59 TR_XM_DK_Bayes 14775 2.99 1.02 3.85 60 BAYES_80 14630 4.81 7.13 3.81 61 BOTNET_IPINHOSTNAME 14573 6.48 12.66 3.79 62 XM_UncommonTLD01 13898 4.24 5.69 3.62 63 XMStrtUSub 13640 3.80 4.38 3.55 64 TR_XM_DK_Bayes1 13543 2.73 0.90 3.53 65 HTML_IMAGE_RATIO_04 12359 4.80 8.45 3.22 66 XMSubMetaSx_00 12026 4.40 7.33 3.13 67 TR_XM_DK_Bayes2 11655 2.38 0.87 3.03 68 XMNumbers 11361 3.48 4.69 2.96 69 ANY_BOUNCE_MESSAGE 11323 2.34 0.93 2.95 70 BOUNCE_MESSAGE 11309 2.33 0.93 2.94 71 MAILING_LIST_MULTI 11136 2.56 1.76 2.90 72 HTML_IMAGE_RATIO_06 10764 3.80 6.08 2.80 73 TooManyTo_002 10491 2.41 1.67 2.73 74 TVD_RCVD_IP 10113 1.93 0.30 2.63 75 UNPARSEABLE_RELAY 10086 2.28 1.48 2.63 76 FROM_EXCESS_BASE64 10067 3.64 6.00 2.62 77 HELO_NODOT 9969 1.97 0.54 2.60 78 BAYES_95 9942 3.13 4.39 2.59 79 BAYES_20 9476 2.06 1.13 2.47 80 MIME_HTML_ONLY_MULTI 9460 2.64 3.04 2.46 81 XM_SPF_SoftFail 9458 2.85 3.76 2.46 82 RCVD_IN_MSPIKE_WL 9249 2.07 1.29 2.41 83 RCVD_IN_MSPIKE_H3 9200 2.05 1.26 2.40 84 XMSexyCombo_05 8944 4.36 9.04 2.33 85 XM_H_PHPOS 8567 1.83 0.92 2.23 86 IN_HORDE_ADDRESS_BOOK 8545 1.57 0.07 2.22 87 HTML_MIME_NO_HTML_TAG 8057 2.22 2.49 2.10 88 MIME_HTML_MOSTLY 8002 2.75 4.29 2.08 89 RCVD_IN_IADB_OPTIN 7408 1.51 0.53 1.93 90 HTML_IMAGE_RATIO_08 7336 2.29 3.17 1.91 91 HTML_FONT_FACE_BAD 7204 1.60 0.97 1.88 92 XM_DK_Undo_01 7128 1.76 1.53 1.86 93 XMSubNoVowel 7110 1.54 0.81 1.85 94 TR_Symld_Words 6947 1.63 1.21 1.81 95 INVALID_MSGID 6941 1.32 0.21 1.81 96 T_TooManySym_02 6840 1.66 1.40 1.78 97 XMCapTrack 6839 1.58 1.13 1.78 98 TooManyTo_003 6836 1.71 1.54 1.78 99 TO_MALFORMED 6675 1.22 0.03 1.74 100 XM_DIRTYINTL 6293 2.28 3.75 1.64 101 NO_DNS_FOR_FROM 6216 1.86 2.43 1.62 102 BOTNET 6183 5.11 13.19 1.61 103 TM2_M_URI_OPT_OUT 5862 2.46 4.63 1.53 104 BAYES_05 5672 1.23 0.68 1.48 105 T_XMDrugObfuBody_08 5658 1.89 2.87 1.47 106 XM_CamelCaseFrm001 5618 2.02 3.29 1.46 107 URI_HEX 5367 1.95 3.21 1.40 108 XM_OfRef6 5345 1.63 2.17 1.39 109 XM_GoogleGroups 5345 1.14 0.57 1.39 110 XMDiploma_00 5309 1.66 2.30 1.38 111 XMSubEmpty 5165 1.20 0.85 1.34 112 UNTRUSTED_Relay 5154 3.60 8.81 1.34 113 RELAYCOUNTRY_CA 5130 2.23 4.30 1.34 114 TooManyTo_004 4900 1.29 1.31 1.28 115 XMPhish11 4803 1.33 1.51 1.25 116 RELAYCOUNTRY_GB 4343 1.11 1.05 1.13 117 USER_IN_DEF_DKIM_WL 4218 0.78 0.06 1.10 118 TooManyTo_005 4045 1.06 1.08 1.05 119 DKIM_ADSP_CUSTOM_MED 3897 0.95 0.79 1.01 120 XM_H_Long_From02 3795 1.31 2.05 0.99 121 XMNoVowels 3723 0.90 0.74 0.97 122 TO_NO_BRKTS_HTML_ONLY 3693 0.76 0.31 0.96 123 XM_UB50 3501 1.83 3.94 0.91 124 XMGenDplmaNmb 3436 1.08 1.49 0.89 125 T_FILL_THIS_FORM_SHORT 3277 0.90 1.00 0.85 126 SpammyFromTLD_01 3267 1.11 1.71 0.85 127 XM_H_PHPMailer 3250 0.78 0.62 0.85 128 XM_ProductURIs 3142 0.96 1.28 0.82 129 TR_MetaPhish_Combo_01 3103 0.86 0.97 0.81 130 URI_TRY_3LD 3035 0.93 1.26 0.79 131 NML_ADSP_CUSTOM_MED 2899 0.71 0.61 0.75 132 T_TooManySym_03 2872 0.61 0.30 0.75 133 RCVD_IN_IADB_DOPTIN 2800 0.53 0.07 0.73 134 T_XMDrugObfuBody_00 2784 1.09 1.94 0.72 135 TM2_M_VERY_LONG_WORD 2778 1.10 1.97 0.72 136 USER_IN_WHITELIST 2653 0.48 0.00 0.69 137 SHORT_HELO_AND_INLINE_IMAGE 2577 0.50 0.11 0.67 138 MISSING_HEADERS 2561 0.72 0.83 0.67 139 XMStockSpam_06 2560 0.83 1.19 0.67 140 TR_Mismatch_TLD_01 2497 0.56 0.35 0.65 141 T_OBFU_PDF_ATTACH 2419 0.49 0.16 0.63 142 RCVD_IN_SORBS_DUL 2311 0.51 0.29 0.60 143 RELAYCOUNTRY_DE 2245 0.75 1.14 0.58 144 XM_H_PHPOS_M 2243 0.50 0.29 0.58 145 TVD_SPACE_RATIO 2236 0.62 0.70 0.58 146 RCVD_IN_BL_SPAMCOP_NET 2195 1.27 2.88 0.57 147 AC_DIV_BONANZA 2187 0.47 0.23 0.57 148 XMGappySubj_01 2170 0.50 0.35 0.56 149 XMMoneyMeta_00 2081 0.72 1.12 0.54 150 XM_ShortIntro_01 2050 0.46 0.29 0.53 151 FILL_THIS_FORM 1968 0.43 0.25 0.51 152 XM_B_COPY_HTML 1911 0.62 0.91 0.50 153 RELAYCOUNTRY_AU 1907 0.54 0.65 0.50 154 XMDateMe_00 1898 0.44 0.32 0.49 155 HTML_IMAGE_ONLY_32 1828 0.42 0.30 0.48 156 T_XMHurry_00 1795 0.83 1.68 0.47 157 HTTPS_HTTP_MISMATCH 1787 0.61 0.95 0.47 158 XM_B_REG_HTML 1781 0.58 0.83 0.46 159 FORGED_GMAIL_RCVD 1774 0.50 0.60 0.46 160 TR_XM_RelayPhish 1743 0.76 1.48 0.45 161 HTML_IMAGE_ONLY_28 1674 0.51 0.69 0.44 162 RELAYCOUNTRY_NL 1674 0.51 0.67 0.44 163 RDNS_DYNAMIC 1664 0.55 0.83 0.43 164 XMSubMetaI_00 1631 0.79 1.63 0.42 165 XMBdyGiftCard01 1621 0.63 1.12 0.42 166 T_Symld_Words_02 1608 0.68 1.29 0.42 167 XMBody_78 1601 0.64 1.15 0.42 168 XMBody_95 1598 0.34 0.17 0.42 169 HTML_TAG_BALANCE_BODY 1589 0.59 0.98 0.41 170 XMSubMetaSxObfu_02 1566 0.35 0.21 0.41 171 XMEmptySub 1562 0.30 0.04 0.41 172 XM_B_TRADE_HTML 1550 0.42 0.47 0.40 173 HTML_IMAGE_ONLY_24 1530 0.39 0.37 0.40 174 XMBrknScrpt_02 1521 0.66 1.27 0.40 175 XMLKML 1496 0.27 0.00 0.39 176 TM2_M_BODY_EMPTY 1495 0.38 0.36 0.39 177 XMPhish30 1451 0.77 1.68 0.38 178 XMHTMLBadTable_001 1409 0.63 1.25 0.37 179 TR_LOTS_OF_MONEY2 1374 0.66 1.35 0.36 180 T_MONEY_PERCENT 1374 0.66 1.35 0.36 181 T_FILL_THIS_FORM_LONG 1373 0.28 0.09 0.36 182 REMOVE_BEFORE_LINK 1372 0.47 0.72 0.36 183 XMBody_17 1367 0.96 2.36 0.36 184 T_FILL_THIS_FORM_LOAN 1358 0.28 0.12 0.35 185 XMLngstWrd_00 1354 0.39 0.47 0.35 186 XMSexyCombo_01 1349 0.87 2.07 0.35 187 HTML_IMAGE_ONLY_20 1324 0.31 0.25 0.34 188 XMSlimDrugH 1308 0.46 0.75 0.34 189 SpammyFromTLD_02 1256 0.74 1.70 0.33 190 T_TooManySym_04 1256 0.24 0.04 0.33 191 XMSolicitRefs_0 1240 0.31 0.27 0.32 192 PP_MIME_FAKE_ASCII_TEXT 1236 0.37 0.48 0.32 193 URI_NOVOWEL 1233 0.50 0.90 0.32 194 XMLngstWrd_01 1199 0.35 0.45 0.31 195 DOS_OUTLOOK_TO_MX 1195 0.25 0.10 0.31 196 TM2_M_A_HREF_HREF 1195 0.41 0.64 0.31 197 XMHTML_After_End 1152 0.68 1.56 0.30 198 TR_LOTS_OF_MONEY3 1146 0.48 0.90 0.30 199 RELAYCOUNTRY_FR 1129 0.62 1.36 0.29 200 HTML_IMAGE_ONLY_16 1121 0.26 0.19 0.29 ----------------------------------------------------------------------