Email: 579082 Autolearn: 0 AvgScore: 3.36 AvgScanTime: 4.01 sec Spam: 175017 Autolearn: 0 AvgScore: 12.61 AvgScanTime: 4.98 sec Ham: 404065 Autolearn: 0 AvgScore: -0.65 AvgScanTime: 3.59 sec Time Spent Running SA: 645.48 hours Time Spent Processing Spam: 242.30 hours Time Spent Processing Ham: 403.18 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 163820 83.17 93.60 78.65 2 DKIM_SIGNED 147123 69.63 84.06 63.37 3 XM_DK_Pass 143134 68.06 81.78 62.12 4 DCC_CHECK 136748 44.83 78.13 30.41 5 DKIM_VALID 135514 63.77 77.43 57.85 6 XMListUnsubscribeExists 128242 49.83 73.27 39.68 7 DKIM_VALID_AU 102341 45.54 58.47 39.94 8 XM_H_QuotedFrom 96509 37.87 55.14 30.38 9 XM_DK_Undo_02 87890 23.40 50.22 11.78 10 BAYES_99 80923 21.47 46.24 10.75 11 BAYES_999 68582 18.37 39.19 9.36 12 LOC_TINY_FONT_1 64362 23.02 36.77 17.06 13 HTML_FONT_LOW_CONTRAST 63276 26.09 36.15 21.72 14 TR_DCC_Bayes_99 63067 14.33 36.03 4.93 15 BAYES_50 53044 49.59 30.31 57.95 16 MIME_HTML_ONLY 49496 20.31 28.28 16.86 17 FVGT_m_MULTI_ODD 47894 21.09 27.37 18.38 18 XMSubLong 43769 20.65 25.01 18.76 19 DKIM_VALID_EF 42148 23.39 24.08 23.09 20 T_KAM_HTML_FONT_INVALID 38692 16.00 22.11 13.36 21 T_TM2_M_HEADER_IN_MSG 37029 30.89 21.16 35.11 22 DCC_CHECK_NEGATIVE 34053 52.93 19.46 67.42 23 XM_Body_Dirty_Words 33252 11.89 19.00 8.81 24 RELAYCOUNTRY_META 30326 8.89 17.33 5.23 25 HTML_IMAGE_RATIO_02 28057 8.83 16.03 5.70 26 XM_Multi_Part_URI 27801 11.08 15.88 9.00 27 MultiRelay 26535 17.38 15.16 18.34 28 BOTNET 25583 5.45 14.62 1.48 29 LOTS_OF_MONEY 24739 9.85 14.14 8.00 30 XM_Evil_Numbers_Gen 23484 8.73 13.42 6.69 31 BOTNET_IPINHOSTNAME 21343 6.17 12.19 3.56 32 UNTRUSTED_Relay 19198 4.37 10.97 1.51 33 FSL_BULK_SIG 18821 8.16 10.75 7.04 34 T_XMDrugObfuBody_14 18775 8.23 10.73 7.15 35 XMSexyCombo_05 17682 4.82 10.10 2.53 36 LotsOfNums_01 17479 7.89 9.99 6.98 37 XM_B_Phish_Phrases 16335 5.49 9.33 3.82 38 TR_XM_DocInvoice 14867 5.21 8.49 3.79 39 HTML_IMAGE_RATIO_04 13956 5.26 7.97 4.09 40 BAYES_80 13944 5.31 7.97 4.16 41 TooManyTo_001 13228 10.30 7.56 11.49 42 XM_H_Long_From01 13017 8.72 7.44 9.27 43 XMSubMetaSx_00 12760 4.47 7.29 3.25 44 DKIM_INVALID 11609 5.86 6.63 5.52 45 XM_UncommonTLD01 11327 4.36 6.47 3.45 46 FROM_EXCESS_BASE64 11272 3.92 6.44 2.83 47 MPART_ALT_DIFF 10869 4.36 6.21 3.56 48 BAYES_60 10801 7.10 6.17 7.51 49 XMStrtUSub 9088 4.67 5.19 4.44 50 MIME_QP_LONG_LINE 8990 5.25 5.14 5.30 51 RCVD_IN_RP_SAFE 8700 6.30 4.97 6.87 52 XMNumbers 8663 3.60 4.95 3.02 53 BAYES_95 8448 3.29 4.83 2.62 54 MIME_HTML_MOSTLY 7788 3.00 4.45 2.37 55 SUBJ_ALL_CAPS 7716 5.42 4.41 5.86 56 XM_UB50 7658 2.11 4.38 1.13 57 RCVD_IN_RP_CERTIFIED 7463 5.73 4.26 6.37 58 XM_SendGrid 7431 4.50 4.25 4.61 59 HTML_IMAGE_RATIO_08 7421 2.74 4.24 2.09 60 XM_OfRef6 7206 2.63 4.12 1.99 61 TM2_M_URI_OPT_OUT 7204 2.35 4.12 1.59 62 HTML_IMAGE_RATIO_06 6961 3.01 3.98 2.58 63 XM_DIRTYINTL 6931 2.32 3.96 1.60 64 RCVD_IN_MSPIKE_H2 6658 3.73 3.80 3.70 65 T_REMOTE_IMAGE 6471 4.07 3.70 4.23 66 XM_SPF_SoftFail 6337 2.60 3.62 2.16 67 XM_CamelCaseFrm001 6059 2.08 3.46 1.47 68 RCVD_IN_BL_SPAMCOP_NET 5786 1.42 3.31 0.61 69 RELAYCOUNTRY_CA 5659 1.87 3.23 1.29 70 T_XMDrugObfuBody_08 5641 1.97 3.22 1.43 71 T_TooManySym_01 5548 3.52 3.17 3.67 72 MIME_HTML_ONLY_MULTI 5364 2.49 3.06 2.24 73 BOTNET_NORDNS 5131 0.91 2.93 0.03 74 URI_HEX 5003 1.63 2.86 1.10 75 XMStockSpam_06 4678 1.49 2.67 0.98 76 XMDiploma_00 4525 1.80 2.59 1.46 77 RCVD_IN_IADB_LISTED 4272 4.47 2.44 5.35 78 RCVD_IN_RP_RNBL 4177 0.75 2.39 0.04 79 XM_UB99 4141 0.72 2.37 0.01 80 NO_DNS_FOR_FROM 4113 1.82 2.35 1.59 81 MultiRelay_CC 4105 0.84 2.35 0.19 82 MultiRelay_Combo 4105 0.84 2.35 0.19 83 SpammyFromTLD_01 3970 1.26 2.27 0.82 84 TooManyTo_002 3949 4.23 2.26 5.09 85 RELAYCOUNTRY_FR 3933 0.88 2.25 0.29 86 RCVD_IN_IADB_SPF 3873 3.92 2.21 4.66 87 HTML_MIME_NO_HTML_TAG 3786 2.21 2.16 2.23 88 RCVD_IN_IADB_SENDERID 3734 3.53 2.13 4.13 89 ALL_TRUSTED 3697 18.57 2.11 25.69 90 TooManyTo_003 3687 3.13 2.11 3.57 91 RCVD_IN_IADB_DK 3672 3.44 2.10 4.02 92 XMSubMetaI_00 3441 0.93 1.97 0.48 93 XM_H_Long_From02 3398 1.27 1.94 0.98 94 XM_URI_RBL 3395 0.66 1.94 0.10 95 SpammyFromTLD_02 3325 0.71 1.90 0.20 96 TooManyTo_004 3291 2.33 1.88 2.53 97 TM2_M_VERY_LONG_WORD 3242 1.12 1.85 0.80 98 T_XMHurry_00 3109 0.96 1.78 0.61 99 MAILING_LIST_MULTI 3108 2.33 1.78 2.58 100 XMSexyCombo_01 3094 0.76 1.77 0.32 101 MONEY_FRAUD_8 3001 0.52 1.71 0.00 102 TR_Caps_n_Bayes_99 2944 0.59 1.68 0.11 103 XM_ProductURIs 2927 1.40 1.67 1.28 104 XMGenDplmaNmb 2905 1.17 1.66 0.96 105 XM_UB999 2883 0.50 1.65 0.01 106 XMPhish30 2864 0.75 1.64 0.36 107 TR_Mismatch_TLD_01 2854 0.94 1.63 0.65 108 RCVD_IN_PSBL 2801 0.57 1.60 0.12 109 XM_DK_Undo_01 2796 1.89 1.60 2.02 110 TooManyTo_005 2710 1.66 1.55 1.71 111 BAYES_00 2703 5.35 1.54 7.00 112 XMBody_17 2652 0.74 1.52 0.40 113 RCVD_IN_MSPIKE_WL 2644 2.16 1.51 2.44 114 T_DEAR_BENEFICIARY 2640 0.46 1.51 0.00 115 RCVD_IN_MSPIKE_H3 2637 2.15 1.51 2.44 116 RELAYCOUNTRY_KR 2490 0.44 1.42 0.02 117 TR_XM_RelayPhish 2486 0.84 1.42 0.59 118 XMHTML_After_End 2388 0.63 1.36 0.31 119 URIBL_BLACK 2335 0.43 1.33 0.03 120 XMBdyGiftCard01 2327 0.74 1.33 0.49 121 UNPARSEABLE_RELAY 2322 2.13 1.33 2.48 122 URI_TRY_3LD 2250 1.38 1.29 1.43 123 XM_UB60 2238 0.44 1.28 0.07 124 FILL_THIS_FORM 2206 0.90 1.26 0.74 125 XMBody_78 2199 0.75 1.26 0.53 126 TR_LOTS_OF_MONEY2 2194 0.69 1.25 0.45 127 T_MONEY_PERCENT 2194 0.69 1.25 0.45 128 XMPhish11 2175 1.08 1.24 1.01 129 T_FILL_THIS_FORM_SHORT 2115 1.15 1.21 1.12 130 BAYES_40 2111 4.21 1.21 5.52 131 RELAYCOUNTRY_DE 2107 0.96 1.20 0.85 132 RELAYCOUNTRY_GB 2085 1.09 1.19 1.05 133 DIET_1 2032 0.54 1.16 0.27 134 SUBJ_DOLLARS 2005 0.47 1.15 0.17 135 TR_XM_DK_Bayes 1999 3.35 1.14 4.31 136 URIBL_DBL_SPAM 1980 0.37 1.13 0.03 137 XMPhish14 1935 0.52 1.11 0.27 138 T_XMDrugObfuBody_00 1902 0.78 1.09 0.65 139 XM_BadFromFormat 1899 0.46 1.09 0.19 140 HTTPS_HTTP_MISMATCH 1894 0.65 1.08 0.46 141 RDNS_DYNAMIC 1888 0.58 1.08 0.37 142 XM_B_REG_HTML 1870 0.58 1.07 0.37 143 XMSubMetaSxObfu_03 1840 0.54 1.05 0.32 144 BAYES_20 1838 2.12 1.05 2.59 145 TR_XM_DK_Bayes1 1812 3.00 1.04 3.85 146 XM_UB80 1773 0.32 1.01 0.02 147 SUSPICIOUS_RECIPS 1754 1.11 1.00 1.15 148 TR_XM_DK_Bayes2 1752 2.49 1.00 3.13 149 XMLongAddy 1742 0.36 1.00 0.09 150 TR_Symld_Words 1741 1.63 0.99 1.90 151 DATE_IN_PAST_06_12 1732 0.35 0.99 0.07 152 XMClaimOffer 1725 0.37 0.99 0.11 153 XM_HighProb1 1723 0.30 0.98 0.01 154 ANY_BOUNCE_MESSAGE 1715 2.64 0.98 3.35 155 BOUNCE_MESSAGE 1714 2.64 0.98 3.35 156 REMOVE_BEFORE_LINK 1707 0.43 0.98 0.19 157 T_HTML_TAG_BALANCE_CENTER 1690 0.39 0.97 0.14 158 HTML_FONT_FACE_BAD 1678 1.51 0.96 1.74 159 XM_B_COPY_HTML 1671 0.57 0.95 0.40 160 DKIM_ADSP_CUSTOM_MED 1639 0.98 0.94 1.00 161 T_TooManySym_02 1639 1.32 0.94 1.48 162 MPART_ALT_DIFF_COUNT 1617 0.48 0.92 0.29 163 PHOTO_EDITING_DIRECT 1616 0.30 0.92 0.02 164 TR_LOTS_OF_MONEY3 1602 0.52 0.92 0.35 165 XM_H_Long_From03 1579 0.34 0.90 0.09 166 RELAYCOUNTRY_CN 1578 0.30 0.90 0.04 167 XMSexyCombo_04 1569 0.31 0.90 0.06 168 RCVD_IN_IADB_VOUCHED 1565 2.72 0.89 3.51 169 FSL_THIS_IS_ADV 1541 0.34 0.88 0.10 170 URI_NOVOWEL 1523 0.50 0.87 0.34 171 LONG_JUNK_URI3 1515 0.29 0.87 0.05 172 HTML_FONT_SIZE_HUGE 1499 0.33 0.86 0.10 173 RELAYCOUNTRY_AT 1493 0.34 0.85 0.11 174 RELAYCOUNTRY_IN 1488 0.35 0.85 0.13 175 XMMoneyMeta_00 1433 0.57 0.82 0.46 176 MISSING_HEADERS 1431 0.62 0.82 0.54 177 PLING_QUERY 1429 0.44 0.82 0.28 178 LongTLD 1395 0.35 0.80 0.16 179 BASE64_LENGTH_79_INF 1391 0.31 0.79 0.10 180 XMHTMLBadTable_001 1373 0.46 0.78 0.32 181 XM_PDF 1350 3.68 0.77 4.94 182 TR_Mismatch_TLD_02 1338 0.28 0.76 0.07 183 T_Symld_Words_02 1329 0.52 0.76 0.42 184 XM_S_JOY_D 1286 0.36 0.73 0.19 185 RELAYCOUNTRY_AU 1261 0.54 0.72 0.46 186 XM_OfRef7 1252 0.41 0.72 0.27 187 RELAYCOUNTRY_IT 1247 0.24 0.71 0.04 188 XMCapTrack 1246 1.31 0.71 1.57 189 XM_H_PHPOS 1241 1.08 0.71 1.24 190 TR_MetaPhish_Combo_01 1230 0.87 0.70 0.94 191 SORTED_RECIPS 1229 0.39 0.70 0.25 192 REPLYTO_WITHOUT_TO_CC 1229 0.24 0.70 0.05 193 XMSlimDrugH 1223 0.59 0.70 0.54 194 NML_ADSP_CUSTOM_MED 1221 0.72 0.70 0.74 195 XMBrknScrpt_02 1212 0.49 0.69 0.41 196 XM_UB95 1198 0.22 0.68 0.01 197 XM_Lotto 1190 0.31 0.68 0.16 198 XM_Combo_Sbj 1180 0.43 0.67 0.33 199 XMBSHREFv2 1173 0.29 0.67 0.12 200 T_FILL_THIS_FORM_LONG 1153 0.58 0.66 0.55 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 317813 83.17 93.60 78.65 2 DCC_CHECK_NEGATIVE 272437 52.93 19.46 67.42 3 DKIM_SIGNED 256075 69.63 84.06 63.37 4 XM_DK_Pass 251014 68.06 81.78 62.12 5 BAYES_50 234151 49.59 30.31 57.95 6 DKIM_VALID 233752 63.77 77.43 57.85 7 DKIM_VALID_AU 161366 45.54 58.47 39.94 8 XMListUnsubscribeExists 160337 49.83 73.27 39.68 9 T_TM2_M_HEADER_IN_MSG 141861 30.89 21.16 35.11 10 DCC_CHECK 122860 44.83 78.13 30.41 11 XM_H_QuotedFrom 122768 37.87 55.14 30.38 12 ALL_TRUSTED 103814 18.57 2.11 25.69 13 DKIM_VALID_EF 93303 23.39 24.08 23.09 14 HTML_FONT_LOW_CONTRAST 87780 26.09 36.15 21.72 15 XMSubLong 75812 20.65 25.01 18.76 16 FVGT_m_MULTI_ODD 74250 21.09 27.37 18.38 17 MultiRelay 74103 17.38 15.16 18.34 18 LOC_TINY_FONT_1 68930 23.02 36.77 17.06 19 MIME_HTML_ONLY 68124 20.31 28.28 16.86 20 T_KAM_HTML_FONT_INVALID 53966 16.00 22.11 13.36 21 XM_DK_Undo_02 47597 23.40 50.22 11.78 22 TooManyTo_001 46409 10.30 7.56 11.49 23 BAYES_99 43426 21.47 46.24 10.75 24 BAYES_999 37819 18.37 39.19 9.36 25 XM_H_Long_From01 37460 8.72 7.44 9.27 26 XM_Multi_Part_URI 36374 11.08 15.88 9.00 27 XM_Body_Dirty_Words 35589 11.89 19.00 8.81 28 LOTS_OF_MONEY 32312 9.85 14.14 8.00 29 XM_DKIMWhitelistDomains 32156 5.56 0.03 7.96 30 BAYES_60 30328 7.10 6.17 7.51 31 T_XMDrugObfuBody_14 28884 8.23 10.73 7.15 32 FSL_BULK_SIG 28451 8.16 10.75 7.04 33 BAYES_00 28270 5.35 1.54 7.00 34 LotsOfNums_01 28190 7.89 9.99 6.98 35 RCVD_IN_RP_SAFE 27762 6.30 4.97 6.87 36 IN_ZIMBRA_NJ_WHITELIST 27055 4.68 0.04 6.70 37 XM_Evil_Numbers_Gen 27048 8.73 13.42 6.69 38 RCVD_IN_RP_CERTIFIED 25721 5.73 4.26 6.37 39 SUBJ_ALL_CAPS 23671 5.42 4.41 5.86 40 HTML_IMAGE_RATIO_02 23051 8.83 16.03 5.70 41 DKIM_INVALID 22323 5.86 6.63 5.52 42 BAYES_40 22289 4.21 1.21 5.52 43 RCVD_IN_IADB_LISTED 21635 4.47 2.44 5.35 44 MIME_QP_LONG_LINE 21412 5.25 5.14 5.30 45 RELAYCOUNTRY_META 21126 8.89 17.33 5.23 46 TooManyTo_002 20574 4.23 2.26 5.09 47 XM_PDF 19975 3.68 0.77 4.94 48 TR_DCC_Bayes_99 19925 14.33 36.03 4.93 49 RCVD_IN_IADB_SPF 18836 3.92 2.21 4.66 50 XM_SendGrid 18641 4.50 4.25 4.61 51 XMStrtUSub 17952 4.67 5.19 4.44 52 TR_XM_DK_Bayes 17397 3.35 1.14 4.31 53 T_REMOTE_IMAGE 17088 4.07 3.70 4.23 54 BAYES_80 16823 5.31 7.97 4.16 55 RCVD_IN_IADB_SENDERID 16693 3.53 2.13 4.13 56 HTML_IMAGE_RATIO_04 16528 5.26 7.97 4.09 57 RCVD_IN_IADB_DK 16234 3.44 2.10 4.02 58 TR_XM_DK_Bayes1 15558 3.00 1.04 3.85 59 XM_B_Phish_Phrases 15436 5.49 9.33 3.82 60 TR_XM_DocInvoice 15298 5.21 8.49 3.79 61 RCVD_IN_MSPIKE_H2 14962 3.73 3.80 3.70 62 T_TooManySym_01 14845 3.52 3.17 3.67 63 TooManyTo_003 14424 3.13 2.11 3.57 64 MPART_ALT_DIFF 14384 4.36 6.21 3.56 65 BOTNET_IPINHOSTNAME 14369 6.17 12.19 3.56 66 RCVD_IN_IADB_VOUCHED 14189 2.72 0.89 3.51 67 XM_UncommonTLD01 13924 4.36 6.47 3.45 68 ANY_BOUNCE_MESSAGE 13547 2.64 0.98 3.35 69 BOUNCE_MESSAGE 13545 2.64 0.98 3.35 70 XMSubMetaSx_00 13119 4.47 7.29 3.25 71 TR_XM_DK_Bayes2 12659 2.49 1.00 3.13 72 XMNumbers 12205 3.60 4.95 3.02 73 FROM_EXCESS_BASE64 11447 3.92 6.44 2.83 74 BAYES_95 10604 3.29 4.83 2.62 75 BAYES_20 10461 2.12 1.05 2.59 76 HTML_IMAGE_RATIO_06 10441 3.01 3.98 2.58 77 MAILING_LIST_MULTI 10413 2.33 1.78 2.58 78 XMSexyCombo_05 10240 4.82 10.10 2.53 79 TooManyTo_004 10203 2.33 1.88 2.53 80 UNPARSEABLE_RELAY 10028 2.13 1.33 2.48 81 RCVD_IN_MSPIKE_WL 9848 2.16 1.51 2.44 82 RCVD_IN_MSPIKE_H3 9842 2.15 1.51 2.44 83 MIME_HTML_MOSTLY 9593 3.00 4.45 2.37 84 TVD_RCVD_IP 9225 1.67 0.26 2.28 85 RCVD_IN_IADB_OPTIN 9093 1.74 0.56 2.25 86 MIME_HTML_ONLY_MULTI 9069 2.49 3.06 2.24 87 HTML_MIME_NO_HTML_TAG 9005 2.21 2.16 2.23 88 HELO_NODOT 9003 1.64 0.29 2.23 89 XM_SPF_SoftFail 8739 2.60 3.62 2.16 90 IN_HORDE_ADDRESS_BOOK 8490 1.49 0.09 2.10 91 HTML_IMAGE_RATIO_08 8448 2.74 4.24 2.09 92 XM_DK_Undo_01 8165 1.89 1.60 2.02 93 XM_OfRef6 8038 2.63 4.12 1.99 94 TR_Symld_Words 7680 1.63 0.99 1.90 95 BAYES_05 7094 1.40 0.59 1.76 96 HTML_FONT_FACE_BAD 7043 1.51 0.96 1.74 97 INVALID_MSGID 6970 1.26 0.18 1.72 98 TooManyTo_005 6918 1.66 1.55 1.71 99 TO_MALFORMED 6590 1.14 0.01 1.63 100 XM_DIRTYINTL 6477 2.32 3.96 1.60 101 XMSubNoVowel 6448 1.26 0.50 1.60 102 NO_DNS_FOR_FROM 6409 1.82 2.35 1.59 103 TM2_M_URI_OPT_OUT 6405 2.35 4.12 1.59 104 XMCapTrack 6360 1.31 0.71 1.57 105 UNTRUSTED_Relay 6083 4.37 10.97 1.51 106 T_TooManySym_02 5988 1.32 0.94 1.48 107 BOTNET 5971 5.45 14.62 1.48 108 XM_CamelCaseFrm001 5958 2.08 3.46 1.47 109 XMDiploma_00 5887 1.80 2.59 1.46 110 URI_TRY_3LD 5769 1.38 1.29 1.43 111 T_XMDrugObfuBody_08 5759 1.97 3.22 1.43 112 RELAYCOUNTRY_CA 5195 1.87 3.23 1.29 113 XM_ProductURIs 5187 1.40 1.67 1.28 114 XM_GoogleGroups 5145 1.05 0.55 1.27 115 XM_H_PHPOS 5007 1.08 0.71 1.24 116 SUSPICIOUS_RECIPS 4648 1.11 1.00 1.15 117 XMSubEmpty 4615 0.91 0.39 1.14 118 XM_UB50 4569 2.11 4.38 1.13 119 T_FILL_THIS_FORM_SHORT 4527 1.15 1.21 1.12 120 URI_HEX 4437 1.63 2.86 1.10 121 XM_H_PHPMailer 4415 0.94 0.57 1.09 122 USER_IN_DEF_DKIM_WL 4384 0.77 0.03 1.08 123 RELAYCOUNTRY_GB 4225 1.09 1.19 1.05 124 XMPhish11 4084 1.08 1.24 1.01 125 DKIM_ADSP_CUSTOM_MED 4038 0.98 0.94 1.00 126 XMStockSpam_06 3971 1.49 2.67 0.98 127 XM_H_Long_From02 3960 1.27 1.94 0.98 128 XMGenDplmaNmb 3868 1.17 1.66 0.96 129 TR_MetaPhish_Combo_01 3793 0.87 0.70 0.94 130 RELAYCOUNTRY_DE 3447 0.96 1.20 0.85 131 USER_IN_WHITELIST 3363 0.58 0.00 0.83 132 SpammyFromTLD_01 3322 1.26 2.27 0.82 133 TM2_M_VERY_LONG_WORD 3228 1.12 1.85 0.80 134 XMGappySubj_01 3136 0.65 0.35 0.78 135 T_OBFU_PDF_ATTACH 3130 0.60 0.19 0.77 136 FILL_THIS_FORM 2986 0.90 1.26 0.74 137 NML_ADSP_CUSTOM_MED 2977 0.72 0.70 0.74 138 XM_ShortIntro_01 2829 0.66 0.56 0.70 139 XMNoVowels 2723 0.64 0.57 0.67 140 T_TooManySym_03 2665 0.51 0.15 0.66 141 T_XMDrugObfuBody_00 2623 0.78 1.09 0.65 142 TR_Mismatch_TLD_01 2610 0.94 1.63 0.65 143 T_XMHurry_00 2465 0.96 1.78 0.61 144 RCVD_IN_BL_SPAMCOP_NET 2453 1.42 3.31 0.61 145 TR_XM_RelayPhish 2381 0.84 1.42 0.59 146 SHORT_HELO_AND_INLINE_IMAGE 2325 0.43 0.08 0.58 147 RCVD_IN_SORBS_DUL 2316 0.48 0.25 0.57 148 T_FILL_THIS_FORM_LONG 2223 0.58 0.66 0.55 149 MISSING_HEADERS 2187 0.62 0.82 0.54 150 XMSlimDrugH 2175 0.59 0.70 0.54 151 XM_H_Trusted_IP 2168 0.37 0.00 0.54 152 T_FILL_THIS_FORM_LOAN 2164 0.42 0.14 0.54 153 XMBody_78 2157 0.75 1.26 0.53 154 XMGappySubj_02 2119 0.40 0.11 0.52 155 TVD_SPACE_RATIO 2081 0.48 0.39 0.52 156 XM_RXBody 2063 0.53 0.58 0.51 157 XMDateMe_00 2048 0.46 0.36 0.51 158 XMBdyGiftCard01 1972 0.74 1.33 0.49 159 FORGED_GMAIL_RCVD 1933 0.53 0.65 0.48 160 XMSubMetaI_00 1931 0.93 1.97 0.48 161 XM_B_TRADE_HTML 1925 0.45 0.39 0.48 162 HTTPS_HTTP_MISMATCH 1870 0.65 1.08 0.46 163 HTML_IMAGE_ONLY_32 1864 0.49 0.57 0.46 164 XMMoneyMeta_00 1850 0.57 0.82 0.46 165 TM2_M_A_HREF_HREF 1849 0.49 0.56 0.46 166 RELAYCOUNTRY_AU 1847 0.54 0.72 0.46 167 XMBody_95 1838 0.38 0.20 0.45 168 T_MONEY_PERCENT 1809 0.69 1.25 0.45 169 TR_LOTS_OF_MONEY2 1809 0.69 1.25 0.45 170 AC_DIV_BONANZA 1774 0.33 0.09 0.44 171 HTML_IMAGE_ONLY_28 1772 0.49 0.61 0.44 172 XM_D_omniadmin_Whitelist 1717 0.30 0.00 0.42 173 TM2_M_BODY_EMPTY 1706 0.34 0.16 0.42 174 T_Symld_Words_02 1699 0.52 0.76 0.42 175 URIBL_DBL_ABUSE_SPAM 1676 0.43 0.45 0.41 176 XMBrknScrpt_02 1648 0.49 0.69 0.41 177 XMSubMetaSxObfu_02 1644 0.38 0.31 0.41 178 XMBody_17 1624 0.74 1.52 0.40 179 XM_B_COPY_HTML 1621 0.57 0.95 0.40 180 XM_B_REG_HTML 1506 0.58 1.07 0.37 181 XMLngstWrd_00 1502 0.40 0.45 0.37 182 HTML_TAG_BALANCE_BODY 1481 0.44 0.63 0.37 183 RDNS_DYNAMIC 1478 0.58 1.08 0.37 184 XMPhish30 1467 0.75 1.64 0.36 185 DKIM_ADSP_NXDOMAIN 1459 0.44 0.62 0.36 186 TR_LOTS_OF_MONEY3 1424 0.52 0.92 0.35 187 HTML_IMAGE_ONLY_24 1407 0.37 0.41 0.35 188 XM_H_PHPOS_M 1386 0.33 0.29 0.34 189 TO_NO_BRKTS_HTML_ONLY 1385 0.29 0.18 0.34 190 PP_MIME_FAKE_ASCII_TEXT 1367 0.36 0.39 0.34 191 URI_NOVOWEL 1361 0.50 0.87 0.34 192 XMRcvdHeader_15 1358 0.23 0.00 0.34 193 XMLngstWrd_01 1350 0.36 0.43 0.33 194 XMEmptySub 1342 0.25 0.05 0.33 195 XM_Combo_Sbj 1319 0.43 0.67 0.33 196 XMBody_29 1316 0.30 0.25 0.33 197 XMSexyCombo_01 1303 0.76 1.77 0.32 198 XMSubMetaSxObfu_03 1297 0.54 1.05 0.32 199 XMHTMLBadTable_001 1274 0.46 0.78 0.32 200 XMHTML_After_End 1245 0.63 1.36 0.31 ----------------------------------------------------------------------