Email: 709136 Autolearn: 0 AvgScore: 4.93 AvgScanTime: 3.87 sec Spam: 245800 Autolearn: 0 AvgScore: 14.09 AvgScanTime: 4.63 sec Ham: 463336 Autolearn: 0 AvgScore: 0.07 AvgScanTime: 3.46 sec Time Spent Running SA: 761.77 hours Time Spent Processing Spam: 316.28 hours Time Spent Processing Ham: 445.50 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 236670 89.69 96.29 86.19 2 DCC_CHECK 184033 45.79 74.87 30.37 3 DKIM_SIGNED 180525 66.74 73.44 63.18 4 XM_DK_Pass 176104 65.34 71.65 61.99 5 DKIM_VALID 165570 60.91 67.36 57.49 6 XMListUnsubscribeExists 153739 47.37 62.55 39.32 7 DKIM_VALID_AU 128357 44.65 52.22 40.63 8 XM_H_QuotedFrom 112184 36.46 45.64 31.59 9 XM_DK_Undo_02 104475 22.44 42.50 11.80 10 BAYES_99 103497 22.07 42.11 11.45 11 MIME_HTML_ONLY 102212 25.18 41.58 16.47 12 BAYES_999 83328 18.17 33.90 9.82 13 TR_DCC_Bayes_99 79071 14.72 32.17 5.47 14 HTML_FONT_LOW_CONTRAST 78757 26.26 32.04 23.20 15 BAYES_50 75263 50.29 30.62 60.73 16 LOC_TINY_FONT_1 73904 23.08 30.07 19.38 17 T_TM2_M_HEADER_IN_MSG 73398 29.67 29.86 29.57 18 XMSubLong 65212 20.95 26.53 18.00 19 RELAYCOUNTRY_META 64428 12.18 26.21 4.74 20 DCC_CHECK_NEGATIVE 58381 52.55 23.75 67.83 21 FVGT_m_MULTI_ODD 54384 19.98 22.13 18.84 22 UNTRUSTED_Relay 52162 8.05 21.22 1.06 23 DKIM_VALID_EF 49156 22.56 20.00 23.92 24 FROM_EXCESS_BASE64 46009 8.75 18.72 3.47 25 T_KAM_HTML_FONT_INVALID 42719 14.36 17.38 12.77 26 FSL_BULK_SIG 42553 10.08 17.31 6.24 27 MultiRelay 40666 17.43 16.54 17.90 28 XM_Body_Dirty_Words 40412 12.53 16.44 10.45 29 HTML_IMAGE_RATIO_02 36297 9.07 14.77 6.05 30 HTML_MIME_NO_HTML_TAG 36123 6.39 14.70 1.98 31 XM_Multi_Part_URI 35509 11.22 14.45 9.52 32 NO_DNS_FOR_FROM 33157 5.19 13.49 0.79 33 XM_BadFromFormat 32566 4.70 13.25 0.16 34 BODY_URI_ONLY 32466 4.87 13.21 0.45 35 MISSING_HEADERS 32353 5.02 13.16 0.70 36 RELAYCOUNTRY_NL 32334 4.78 13.15 0.34 37 HTML_FONT_SIZE_HUGE 31996 6.95 13.02 3.74 38 HTML_IMAGE_ONLY_08 31658 6.89 12.88 3.72 39 HTML_SHORT_LINK_IMG_1 31589 6.83 12.85 3.63 40 SHORTENER_SHORT_IMG 31252 6.76 12.71 3.61 41 MIME_HEADER_CTYPE_ONLY 31205 4.49 12.70 0.14 42 XM_Evil_Numbers_Gen 30962 9.31 12.60 7.57 43 URI_BUFFLY 30951 6.72 12.59 3.61 44 BOTNET_IPINHOSTNAME 27899 6.71 11.35 4.25 45 BOTNET 26840 4.44 10.92 1.00 46 XM_UncommonTLD01 25820 5.66 10.50 3.09 47 LOTS_OF_MONEY 25754 9.09 10.48 8.36 48 BAYES_80 24672 6.00 10.04 3.86 49 XMSexyCombo_05 23525 5.22 9.57 2.91 50 RCVD_IN_RP_RNBL 23299 3.32 9.48 0.06 51 T_XMDrugObfuBody_14 19965 7.74 8.12 7.54 52 XM_B_Phish_Phrases 19682 5.54 8.01 4.23 53 BAYES_60 19539 7.07 7.95 6.60 54 LotsOfNums_01 19176 8.10 7.80 8.26 55 XMNumbers 19103 4.77 7.77 3.18 56 HTML_IMAGE_RATIO_04 18170 5.74 7.39 4.86 57 SpammyFromTLD_02 16678 2.47 6.79 0.18 58 TooManyTo_001 16431 7.94 6.68 8.60 59 XM_H_Long_From01 16124 5.38 6.56 4.75 60 XMSubMetaSx_00 15225 4.40 6.19 3.45 61 BAYES_95 15034 3.92 6.12 2.75 62 DKIM_INVALID 14955 5.83 6.08 5.69 63 TR_XM_DocInvoice 14921 4.40 6.07 3.52 64 MPART_ALT_DIFF 14205 3.97 5.78 3.01 65 XM_SPF_SoftFail 14179 3.46 5.77 2.23 66 XM_UB99 12002 1.71 4.88 0.03 67 RCVD_IN_RP_SAFE 11845 6.22 4.82 6.97 68 XMNoVowels 11378 3.55 4.63 2.97 69 XM_UB50 11143 2.00 4.53 0.66 70 XM_UB80 10967 1.57 4.46 0.03 71 XM_UB60 9981 1.46 4.06 0.07 72 MIME_HTML_MOSTLY 9625 3.09 3.92 2.65 73 DIET_1 9439 2.33 3.84 1.53 74 MIME_QP_LONG_LINE 9411 4.94 3.83 5.52 75 HTML_IMAGE_RATIO_06 9359 3.45 3.81 3.26 76 HTML_IMAGE_RATIO_08 9201 2.54 3.74 1.90 77 RCVD_IN_RP_CERTIFIED 9055 5.31 3.68 6.17 78 XM_JunkDunk 8410 1.19 3.42 0.00 79 TM2_M_URI_OPT_OUT 8251 2.93 3.36 2.70 80 RCVD_IN_MSPIKE_H2 8065 3.82 3.28 4.11 81 XMSlimDrugH 7907 1.32 3.22 0.31 82 T_TooManySym_01 7808 3.70 3.18 3.98 83 XM_SendGrid 7806 4.02 3.18 4.47 84 XM_DIRTYINTL 7783 2.08 3.17 1.50 85 URI_HEX 7685 2.08 3.13 1.52 86 XM_CamelCaseFrm001 7682 2.16 3.13 1.65 87 XMStrtUSub 7490 3.79 3.05 4.19 88 MIME_HTML_ONLY_MULTI 7483 1.91 3.04 1.31 89 XMDiploma_00 7156 2.34 2.91 2.03 90 SUBJ_ALL_CAPS 6813 1.89 2.77 1.43 91 XM_UB95 6800 0.98 2.77 0.03 92 T_REMOTE_IMAGE 6546 3.60 2.66 4.10 93 MultiRelay_Combo 6131 0.98 2.49 0.18 94 MultiRelay_CC 6131 0.98 2.49 0.18 95 RELAYCOUNTRY_CA 6044 1.68 2.46 1.26 96 XM_OfRef6 5946 1.78 2.42 1.45 97 RCVD_IN_IADB_LISTED 5195 4.05 2.11 5.07 98 URIBL_DBL_SPAM 5191 0.78 2.11 0.08 99 SpammyFromTLD_01 5134 1.16 2.09 0.66 100 XMSubMetaI_00 5068 0.97 2.06 0.39 101 XM_URI_RBL 4902 0.79 1.99 0.15 102 T_XMDrugObfuBody_08 4900 1.54 1.99 1.30 103 XMWghtMeta_00 4732 0.68 1.93 0.02 104 XM_UB999 4729 0.68 1.92 0.02 105 RCVD_IN_IADB_SPF 4694 3.55 1.91 4.43 106 XM_H_Long_From02 4690 1.17 1.91 0.77 107 XMBody_17 4688 1.13 1.91 0.72 108 TR_XM_RelayPhish 4646 0.92 1.89 0.41 109 XMSlimDrugs 4634 0.67 1.89 0.02 110 RCVD_IN_BL_SPAMCOP_NET 4530 0.80 1.84 0.24 111 RCVD_IN_IADB_DK 4444 3.13 1.81 3.84 112 RCVD_IN_IADB_SENDERID 4431 3.16 1.80 3.87 113 MAILING_LIST_MULTI 4332 2.04 1.76 2.18 114 T_XMHurry_00 4312 0.99 1.75 0.59 115 SUBJECT_DIET 4306 0.61 1.75 0.01 116 ALL_TRUSTED 4276 17.21 1.74 25.42 117 XMGenDplmaNmb 4104 1.29 1.67 1.09 118 RELAYCOUNTRY_FR 4083 0.74 1.66 0.25 119 TR_Caps_n_Bayes_99 4046 0.62 1.65 0.07 120 XM_ProductURIs 3919 1.33 1.59 1.19 121 XMHTML_After_End 3619 0.76 1.47 0.37 122 XM_DK_Undo_01 3485 1.76 1.42 1.95 123 BOTNET_NORDNS 3470 0.50 1.41 0.02 124 XMBdyGiftCard01 3374 1.06 1.37 0.89 125 URIBL_BLACK 3331 0.50 1.36 0.04 126 TM2_M_VERY_LONG_WORD 3230 0.97 1.31 0.79 127 XMBrknScrpt_02 3225 0.81 1.31 0.55 128 XMSexyCombo_01 3144 0.68 1.28 0.36 129 UNPARSEABLE_RELAY 3109 2.63 1.26 3.35 130 RELAYCOUNTRY_CN 2843 0.43 1.16 0.04 131 TooManyTo_002 2782 2.55 1.13 3.30 132 TR_LOTS_OF_MONEY3 2773 0.52 1.13 0.20 133 URI_TRY_3LD 2682 1.05 1.09 1.02 134 DRUGS_ERECTILE 2672 0.39 1.09 0.02 135 DKIM_ADSP_NXDOMAIN 2591 0.57 1.05 0.31 136 T_TooManySym_02 2554 1.57 1.04 1.85 137 TooManyTo_003 2539 1.92 1.03 2.39 138 XMStockSpam_06 2519 1.14 1.02 1.20 139 DKIM_ADSP_CUSTOM_MED 2501 0.98 1.02 0.96 140 ONLINE_PHARMACY 2487 0.35 1.01 0.00 141 T_MONEY_PERCENT 2475 0.61 1.01 0.41 142 TR_LOTS_OF_MONEY2 2475 0.61 1.01 0.41 143 RCVD_IN_IADB_VOUCHED 2474 2.65 1.01 3.52 144 XM_HighProb1 2473 0.36 1.01 0.01 145 TVD_VISIT_PHARMA 2438 0.35 0.99 0.00 146 BAYES_00 2421 4.82 0.98 6.86 147 REMOVE_BEFORE_LINK 2383 0.49 0.97 0.23 148 BAYES_40 2370 2.79 0.96 3.76 149 XMPhish11 2368 1.06 0.96 1.10 150 RELAYCOUNTRY_AT 2315 0.40 0.94 0.12 151 XM_B_REG_HTML 2278 0.52 0.93 0.31 152 XMPhish30 2204 0.43 0.90 0.19 153 XM_H_PHPOS 2203 1.12 0.90 1.23 154 FORGED_GMAIL_RCVD 2133 0.60 0.87 0.46 155 NML_ADSP_CUSTOM_MED 2130 0.77 0.87 0.72 156 XM_CreditScore_03 2119 0.31 0.86 0.02 157 TR_Symld_Words 2061 1.55 0.84 1.93 158 GAPPY_SUBJECT 2050 0.34 0.83 0.07 159 RELAYCOUNTRY_GB 2048 0.99 0.83 1.07 160 DRUG_ED_CAPS 2021 0.28 0.82 0.00 161 T_XMDrugObfuBody_00 2017 0.67 0.82 0.59 162 FILL_THIS_FORM 2007 0.63 0.82 0.53 163 DATE_IN_PAST_06_12 2006 0.30 0.82 0.02 164 T_FILL_THIS_FORM_SHORT 2000 0.97 0.81 1.06 165 HTML_FONT_FACE_BAD 1993 0.66 0.81 0.58 166 XM_PDF 1983 3.22 0.81 4.50 167 KHOP_DYNAMIC 1967 0.72 0.80 0.68 168 XMMoneyMeta_00 1959 0.56 0.80 0.44 169 TR_XM_DK_Bayes 1939 2.41 0.79 3.27 170 URIBL_SBL_A 1915 1.19 0.78 1.41 171 HTML_TAG_BALANCE_BODY 1915 0.51 0.78 0.37 172 TVD_SPACE_RATIO_MINFP 1884 0.27 0.77 0.00 173 TooManyTo_004 1862 1.16 0.76 1.37 174 URI_NOVOWEL 1853 0.56 0.75 0.46 175 XM_RXBody 1848 0.33 0.75 0.10 176 XMHTMLBadTable_001 1844 0.48 0.75 0.34 177 ANY_BOUNCE_MESSAGE 1823 6.96 0.74 10.26 178 BOUNCE_MESSAGE 1822 6.96 0.74 10.25 179 BAYES_20 1806 1.75 0.73 2.28 180 T_Symld_Words_02 1764 0.46 0.72 0.33 181 TR_XM_DK_Bayes1 1744 2.22 0.71 3.01 182 XMBody_78 1729 0.46 0.70 0.33 183 RCVD_IN_MSPIKE_WL 1683 1.46 0.68 1.87 184 XM_H_PHPMailer 1674 0.67 0.68 0.66 185 HTML_IMAGE_ONLY_28 1671 0.52 0.68 0.44 186 RELAYCOUNTRY_RU 1667 0.25 0.68 0.02 187 RCVD_IN_MSPIKE_H3 1662 1.46 0.68 1.87 188 FVGT_m_MULTI_ODD_EMAIL 1660 0.28 0.68 0.08 189 MPART_ALT_DIFF_COUNT 1655 0.90 0.67 1.03 190 HTTPS_HTTP_MISMATCH 1652 0.50 0.67 0.41 191 RELAYCOUNTRY_IN 1645 0.31 0.67 0.13 192 BODY_ENHANCEMENT 1643 0.25 0.67 0.03 193 RELAYCOUNTRY_DE 1635 0.49 0.67 0.40 194 PLING_QUERY 1630 0.40 0.66 0.26 195 TR_XM_DK_Bayes2 1617 1.90 0.66 2.56 196 TooManyTo_005 1592 0.98 0.65 1.15 197 DATE_IN_PAST_03_06 1589 0.26 0.65 0.05 198 RDNS_DYNAMIC 1577 0.51 0.64 0.44 199 XM_B_COPY_HTML 1567 0.44 0.64 0.34 200 XM_Body_Obfu01 1532 0.38 0.62 0.25 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 399333 89.69 96.29 86.19 2 DCC_CHECK_NEGATIVE 314265 52.55 23.75 67.83 3 DKIM_SIGNED 292723 66.74 73.44 63.18 4 XM_DK_Pass 287226 65.34 71.65 61.99 5 BAYES_50 281389 50.29 30.62 60.73 6 DKIM_VALID 266364 60.91 67.36 57.49 7 DKIM_VALID_AU 188265 44.65 52.22 40.63 8 XMListUnsubscribeExists 182186 47.37 62.55 39.32 9 XM_H_QuotedFrom 146374 36.46 45.64 31.59 10 DCC_CHECK 140701 45.79 74.87 30.37 11 T_TM2_M_HEADER_IN_MSG 137000 29.67 29.86 29.57 12 ALL_TRUSTED 117764 17.21 1.74 25.42 13 DKIM_VALID_EF 110851 22.56 20.00 23.92 14 HTML_FONT_LOW_CONTRAST 107495 26.26 32.04 23.20 15 LOC_TINY_FONT_1 89774 23.08 30.07 19.38 16 FVGT_m_MULTI_ODD 87290 19.98 22.13 18.84 17 XMSubLong 83378 20.95 26.53 18.00 18 MultiRelay 82921 17.43 16.54 17.90 19 MIME_HTML_ONLY 76334 25.18 41.58 16.47 20 T_KAM_HTML_FONT_INVALID 59148 14.36 17.38 12.77 21 XM_DK_Undo_02 54662 22.44 42.50 11.80 22 BAYES_99 53042 22.07 42.11 11.45 23 XM_Body_Dirty_Words 48440 12.53 16.44 10.45 24 ANY_BOUNCE_MESSAGE 47519 6.96 0.74 10.26 25 BOUNCE_MESSAGE 47515 6.96 0.74 10.25 26 BAYES_999 45505 18.17 33.90 9.82 27 XM_Multi_Part_URI 44087 11.22 14.45 9.52 28 XM_DKIMWhitelistDomains 42068 5.95 0.06 9.08 29 TooManyTo_001 39849 7.94 6.68 8.60 30 LOTS_OF_MONEY 38729 9.09 10.48 8.36 31 LotsOfNums_01 38290 8.10 7.80 8.26 32 XM_Evil_Numbers_Gen 35092 9.31 12.60 7.57 33 T_XMDrugObfuBody_14 34945 7.74 8.12 7.54 34 RCVD_IN_RP_SAFE 32287 6.22 4.82 6.97 35 BAYES_00 31788 4.82 0.98 6.86 36 BAYES_60 30572 7.07 7.95 6.60 37 FSL_BULK_SIG 28897 10.08 17.31 6.24 38 RCVD_IN_RP_CERTIFIED 28577 5.31 3.68 6.17 39 HTML_IMAGE_RATIO_02 28028 9.07 14.77 6.05 40 IN_ZIMBRA_NJ_WHITELIST 26740 3.78 0.03 5.77 41 DKIM_INVALID 26359 5.83 6.08 5.69 42 MIME_QP_LONG_LINE 25593 4.94 3.83 5.52 43 TR_DCC_Bayes_99 25326 14.72 32.17 5.47 44 RCVD_IN_IADB_LISTED 23503 4.05 2.11 5.07 45 HTML_IMAGE_RATIO_04 22510 5.74 7.39 4.86 46 XM_H_Long_From01 22013 5.38 6.56 4.75 47 RELAYCOUNTRY_META 21978 12.18 26.21 4.74 48 XM_PDF 20831 3.22 0.81 4.50 49 XM_SendGrid 20723 4.02 3.18 4.47 50 RCVD_IN_IADB_SPF 20509 3.55 1.91 4.43 51 BOTNET_IPINHOSTNAME 19687 6.71 11.35 4.25 52 XM_B_Phish_Phrases 19618 5.54 8.01 4.23 53 XMStrtUSub 19400 3.79 3.05 4.19 54 RCVD_IN_MSPIKE_H2 19053 3.82 3.28 4.11 55 T_REMOTE_IMAGE 19014 3.60 2.66 4.10 56 T_TooManySym_01 18448 3.70 3.18 3.98 57 RCVD_IN_IADB_SENDERID 17946 3.16 1.80 3.87 58 BAYES_80 17873 6.00 10.04 3.86 59 RCVD_IN_IADB_DK 17771 3.13 1.81 3.84 60 BAYES_40 17440 2.79 0.96 3.76 61 HTML_FONT_SIZE_HUGE 17309 6.95 13.02 3.74 62 HTML_IMAGE_ONLY_08 17216 6.89 12.88 3.72 63 HTML_SHORT_LINK_IMG_1 16810 6.83 12.85 3.63 64 URI_BUFFLY 16704 6.72 12.59 3.61 65 SHORTENER_SHORT_IMG 16704 6.76 12.71 3.61 66 RCVD_IN_IADB_VOUCHED 16318 2.65 1.01 3.52 67 TR_XM_DocInvoice 16295 4.40 6.07 3.52 68 FROM_EXCESS_BASE64 16070 8.75 18.72 3.47 69 XMSubMetaSx_00 15969 4.40 6.19 3.45 70 UNPARSEABLE_RELAY 15534 2.63 1.26 3.35 71 TooManyTo_002 15284 2.55 1.13 3.30 72 TR_XM_DK_Bayes 15172 2.41 0.79 3.27 73 HTML_IMAGE_RATIO_06 15086 3.45 3.81 3.26 74 XMNumbers 14746 4.77 7.77 3.18 75 TVD_RCVD_IP 14446 2.10 0.17 3.12 76 XM_UncommonTLD01 14315 5.66 10.50 3.09 77 TR_XM_DK_Bayes1 13969 2.22 0.71 3.01 78 MPART_ALT_DIFF 13924 3.97 5.78 3.01 79 XMNoVowels 13775 3.55 4.63 2.97 80 XMSexyCombo_05 13501 5.22 9.57 2.91 81 BAYES_95 12754 3.92 6.12 2.75 82 TM2_M_URI_OPT_OUT 12505 2.93 3.36 2.70 83 MIME_HTML_MOSTLY 12295 3.09 3.92 2.65 84 TR_XM_DK_Bayes2 11848 1.90 0.66 2.56 85 TooManyTo_003 11062 1.92 1.03 2.39 86 BAYES_20 10586 1.75 0.73 2.28 87 XM_SPF_SoftFail 10325 3.46 5.77 2.23 88 MAILING_LIST_MULTI 10116 2.04 1.76 2.18 89 RCVD_IN_IADB_OPTIN 9918 1.60 0.58 2.14 90 XMDiploma_00 9406 2.34 2.91 2.03 91 HELO_NODOT 9335 1.40 0.24 2.01 92 HTML_MIME_NO_HTML_TAG 9158 6.39 14.70 1.98 93 XM_DK_Undo_01 9018 1.76 1.42 1.95 94 TR_Symld_Words 8957 1.55 0.84 1.93 95 HTML_IMAGE_RATIO_08 8802 2.54 3.74 1.90 96 RCVD_IN_MSPIKE_WL 8665 1.46 0.68 1.87 97 RCVD_IN_MSPIKE_H3 8661 1.46 0.68 1.87 98 T_TooManySym_02 8566 1.57 1.04 1.85 99 IN_HORDE_ADDRESS_BOOK 8295 1.19 0.05 1.79 100 XM_CamelCaseFrm001 7630 2.16 3.13 1.65 101 BAYES_05 7485 1.21 0.44 1.62 102 XMCapTrack 7162 1.21 0.58 1.55 103 USER_IN_DEF_DKIM_WL 7108 1.03 0.07 1.53 104 DIET_1 7103 2.33 3.84 1.53 105 URI_HEX 7048 2.08 3.13 1.52 106 INVALID_MSGID 6960 1.02 0.12 1.50 107 XM_DIRTYINTL 6959 2.08 3.17 1.50 108 TO_MALFORMED 6915 0.98 0.03 1.49 109 XM_OfRef6 6697 1.78 2.42 1.45 110 SUBJ_ALL_CAPS 6622 1.89 2.77 1.43 111 URIBL_SBL_A 6530 1.19 0.78 1.41 112 TooManyTo_004 6360 1.16 0.76 1.37 113 MIME_HTML_ONLY_MULTI 6079 1.91 3.04 1.31 114 T_XMDrugObfuBody_08 6011 1.54 1.99 1.30 115 RELAYCOUNTRY_CA 5847 1.68 2.46 1.26 116 XM_H_PHPOS 5710 1.12 0.90 1.23 117 XMStockSpam_06 5580 1.14 1.02 1.20 118 XM_ProductURIs 5504 1.33 1.59 1.19 119 XMLngstWrd_00 5476 0.87 0.29 1.18 120 XM_GoogleGroups 5349 0.90 0.42 1.15 121 TooManyTo_005 5336 0.98 0.65 1.15 122 XMPhish11 5114 1.06 0.96 1.10 123 XMGenDplmaNmb 5044 1.29 1.67 1.09 124 RELAYCOUNTRY_GB 4957 0.99 0.83 1.07 125 T_FILL_THIS_FORM_SHORT 4907 0.97 0.81 1.06 126 UNTRUSTED_Relay 4890 8.05 21.22 1.06 127 MPART_ALT_DIFF_COUNT 4757 0.90 0.67 1.03 128 URI_TRY_3LD 4736 1.05 1.09 1.02 129 XMLngstWrd_01 4666 0.74 0.25 1.01 130 BOTNET 4642 4.44 10.92 1.00 131 DKIM_ADSP_CUSTOM_MED 4464 0.98 1.02 0.96 132 T_TooManySym_03 4128 0.66 0.22 0.89 133 XMBdyGiftCard01 4110 1.06 1.37 0.89 134 NO_DNS_FOR_FROM 3656 5.19 13.49 0.79 135 XMSolicitRefs_0 3652 0.63 0.32 0.79 136 TM2_M_VERY_LONG_WORD 3641 0.97 1.31 0.79 137 XM_H_Long_From02 3577 1.17 1.91 0.77 138 XMBody_17 3354 1.13 1.91 0.72 139 NML_ADSP_CUSTOM_MED 3350 0.77 0.87 0.72 140 TR_MetaPhish_Combo_01 3249 0.66 0.57 0.70 141 MISSING_HEADERS 3240 5.02 13.16 0.70 142 XMBody_95 3222 0.51 0.15 0.70 143 USER_IN_WHITELIST 3165 0.45 0.00 0.68 144 KHOP_DYNAMIC 3136 0.72 0.80 0.68 145 XM_H_PHPMailer 3080 0.67 0.68 0.66 146 XM_UB50 3073 2.00 4.53 0.66 147 SpammyFromTLD_01 3067 1.16 2.09 0.66 148 XMLngstWrd_02 2826 0.47 0.20 0.61 149 T_XMHurry_00 2743 0.99 1.75 0.59 150 T_XMDrugObfuBody_00 2721 0.67 0.82 0.59 151 HTML_FONT_FACE_BAD 2699 0.66 0.81 0.58 152 XM_ShortIntro_01 2665 0.53 0.45 0.58 153 XMSubMetaSxObfu_02 2623 0.45 0.24 0.57 154 T_TooManySym_04 2595 0.39 0.08 0.56 155 XMBrknScrpt_02 2532 0.81 1.31 0.55 156 HTML_IMAGE_ONLY_20 2495 0.45 0.28 0.54 157 XMSubNoVowel 2482 0.47 0.34 0.54 158 T_OBFU_PDF_ATTACH 2479 0.41 0.17 0.54 159 FILL_THIS_FORM 2438 0.63 0.82 0.53 160 AC_DIV_BONANZA 2365 0.38 0.14 0.51 161 XMGappySubj_01 2362 0.42 0.24 0.51 162 XMDateMe_00 2343 0.48 0.44 0.51 163 SHORT_HELO_AND_INLINE_IMAGE 2299 0.34 0.05 0.50 164 T_MANY_PILL_PRICE 2257 0.32 0.01 0.49 165 T_HTML_ATTACH 2240 0.35 0.08 0.48 166 URI_NOVOWEL 2151 0.56 0.75 0.46 167 HTML_IMAGE_ONLY_32 2150 0.41 0.30 0.46 168 FORGED_GMAIL_RCVD 2150 0.60 0.87 0.46 169 RCVD_IN_SORBS_DUL 2126 0.39 0.25 0.46 170 BODY_URI_ONLY 2103 4.87 13.21 0.45 171 HTML_IMAGE_ONLY_28 2045 0.52 0.68 0.44 172 XMMoneyMeta_00 2040 0.56 0.80 0.44 173 TM2_M_BODY_EMPTY 2034 0.38 0.27 0.44 174 RDNS_DYNAMIC 2032 0.51 0.64 0.44 175 TR_XM_RelayPhish 1908 0.92 1.89 0.41 176 HTTPS_HTTP_MISMATCH 1905 0.50 0.67 0.41 177 T_MONEY_PERCENT 1884 0.61 1.01 0.41 178 TR_LOTS_OF_MONEY2 1884 0.61 1.01 0.41 179 RELAYCOUNTRY_DE 1863 0.49 0.67 0.40 180 RELAYCOUNTRY_AU 1831 0.41 0.44 0.40 181 XMRcvdHeader_15 1816 0.26 0.00 0.39 182 HTML_IMAGE_ONLY_24 1801 0.39 0.40 0.39 183 XMSubMetaI_00 1793 0.97 2.06 0.39 184 XMHTML_After_End 1737 0.76 1.47 0.37 185 HTML_TAG_BALANCE_BODY 1708 0.51 0.78 0.37 186 XMLngstWrd_03 1684 0.28 0.14 0.36 187 XMSexyCombo_01 1673 0.68 1.28 0.36 188 XM_H_PHPOS_M 1669 0.38 0.42 0.36 189 TM2_M_A_HREF_HREF 1659 0.38 0.42 0.36 190 HTML_IMAGE_ONLY_16 1578 0.31 0.24 0.34 191 XMHTMLBadTable_001 1575 0.48 0.75 0.34 192 XM_B_COPY_HTML 1573 0.44 0.64 0.34 193 RELAYCOUNTRY_NL 1559 4.78 13.15 0.34 194 XMBody_78 1547 0.46 0.70 0.33 195 T_Symld_Words_02 1511 0.46 0.72 0.33 196 T_FILL_THIS_FORM_LONG 1505 0.43 0.61 0.32 197 HTML_EXTRA_CLOSE 1500 0.24 0.09 0.32 198 XMSlimDrugH 1459 1.32 3.22 0.31 199 XM_B_REG_HTML 1431 0.52 0.93 0.31 200 DKIM_ADSP_NXDOMAIN 1420 0.57 1.05 0.31 ----------------------------------------------------------------------