Email: 621913 Autolearn: 0 AvgScore: 2.21 AvgScanTime: 3.58 sec Spam: 140496 Autolearn: 0 AvgScore: 12.63 AvgScanTime: 4.08 sec Ham: 481417 Autolearn: 0 AvgScore: -0.83 AvgScanTime: 3.44 sec Time Spent Running SA: 619.31 hours Time Spent Processing Spam: 159.07 hours Time Spent Processing Ham: 460.23 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 123370 85.21 87.81 84.46 2 DKIM_SIGNED 104712 71.99 74.53 71.26 3 DCC_CHECK 104241 47.14 74.19 39.24 4 XM_DK_Pass 101598 70.51 72.31 69.98 5 DKIM_VALID 95233 66.30 67.78 65.87 6 XMListUnsubscribeExists 91713 51.85 65.28 47.93 7 DKIM_VALID_AU 77535 48.80 55.19 46.94 8 XM_H_QuotedFrom 70165 42.02 49.94 39.71 9 BAYES_50 67007 56.49 47.69 59.06 10 HTML_FONT_LOW_CONTRAST 48467 28.43 34.50 26.65 11 LOC_TINY_FONT_1 47890 23.75 34.09 20.74 12 MIME_HTML_ONLY 46759 22.84 33.28 19.79 13 XM_DK_Undo_02 45824 12.98 32.62 7.25 14 XMSubLong 38138 22.99 27.15 21.78 15 BAYES_99 36017 10.01 25.64 5.45 16 FVGT_m_MULTI_ODD 35620 20.95 25.35 19.66 17 DCC_CHECK_NEGATIVE 33942 51.16 24.16 59.04 18 STYLE_GIBBERISH 33321 20.75 23.72 19.88 19 RELAYCOUNTRY_META 33053 9.25 23.53 5.09 20 BAYES_999 29839 8.32 21.24 4.56 21 TR_DCC_Bayes_99 29213 7.20 20.79 3.24 22 DKIM_VALID_EF 26493 23.93 18.86 25.41 23 BOTNET 25989 5.70 18.50 1.97 24 XM_Body_Dirty_Words 25680 13.65 18.28 12.30 25 XM_Multi_Part_URI 25330 13.14 18.03 11.71 26 LOTS_OF_MONEY 24860 11.41 17.69 9.57 27 XM_Evil_Numbers_Gen 24791 9.77 17.65 7.47 28 T_TM2_M_HEADER_IN_MSG 23762 26.41 16.91 29.18 29 MultiRelay 23655 17.22 16.84 17.33 30 HTML_IMAGE_RATIO_02 23321 10.41 16.60 8.61 31 UNTRUSTED_Relay 23103 4.70 16.44 1.27 32 T_KAM_HTML_FONT_INVALID 22551 15.70 16.05 15.60 33 BOTNET_IPINHOSTNAME 19874 6.82 14.15 4.68 34 FSL_BULK_SIG 19649 8.45 13.99 6.83 35 FROM_EXCESS_BASE64 16488 5.70 11.74 3.95 36 XM_UncommonTLD01 14595 4.83 10.39 3.20 37 XMSexyCombo_05 14294 5.14 10.17 3.67 38 T_XMDrugObfuBody_14 13035 7.69 9.28 7.23 39 RCVD_IN_RP_RNBL 13001 2.26 9.25 0.22 40 XM_H_Long_From01 11684 6.38 8.32 5.82 41 BAYES_80 11630 4.00 8.28 2.75 42 BAYES_60 11510 5.76 8.19 5.05 43 HTML_IMAGE_RATIO_04 11459 5.74 8.16 5.03 44 XMSubMetaSx_00 11109 5.09 7.91 4.26 45 HTML_MIME_NO_HTML_TAG 11055 3.46 7.87 2.17 46 T_REMOTE_IMAGE 10819 4.92 7.70 4.11 47 TooManyTo_001 10803 9.21 7.69 9.65 48 MPART_ALT_DIFF 10763 4.21 7.66 3.21 49 SpammyFromTLD_02 9833 1.90 7.00 0.42 50 DKIM_INVALID 9479 5.70 6.75 5.39 51 XM_B_Phish_Phrases 9418 5.69 6.70 5.40 52 XMNumbers 9236 4.27 6.57 3.60 53 XM_UB50 9034 1.96 6.43 0.65 54 LotsOfNums_01 8204 7.75 5.84 8.31 55 TR_LOTS_OF_MONEY3 8038 1.75 5.72 0.59 56 ANY_BOUNCE_MESSAGE 7574 3.48 5.39 2.92 57 BOUNCE_MESSAGE 7574 3.48 5.39 2.92 58 BODY_URI_ONLY 7310 1.24 5.20 0.08 59 HTML_SHORT_LINK_IMG_1 7139 1.18 5.08 0.04 60 XM_SPF_SoftFail 6809 2.68 4.85 2.05 61 RELAYCOUNTRY_DE 6806 1.42 4.84 0.43 62 SHORTENER_SHORT_IMG 6662 1.07 4.74 0.00 63 URI_BUFFLY 6618 1.06 4.71 0.00 64 MISSING_HEADERS 6497 1.36 4.62 0.41 65 MIME_HTML_ONLY_MULTI 6105 2.09 4.35 1.43 66 MIME_HTML_MOSTLY 6060 2.80 4.31 2.36 67 XM_DIRTYINTL 6052 2.36 4.31 1.79 68 MIME_HEADER_CTYPE_ONLY 5946 1.05 4.23 0.12 69 HTML_IMAGE_RATIO_06 5909 3.66 4.21 3.49 70 URI_HEX 5867 2.30 4.18 1.76 71 HTML_IMAGE_ONLY_04 5656 0.94 4.03 0.05 72 MultiRelay_CC 5453 0.98 3.88 0.13 73 MultiRelay_Combo 5453 0.98 3.88 0.13 74 TM2_M_URI_OPT_OUT 5405 2.36 3.85 1.93 75 XMStrtUSub 5375 4.88 3.83 5.19 76 XM_UB60 5218 0.92 3.71 0.11 77 XM_OfRef6 5202 2.00 3.70 1.51 78 RELAYCOUNTRY_CA 5174 2.07 3.68 1.60 79 BAYES_95 5165 2.13 3.68 1.68 80 HTML_SHORT_CENTER 4678 0.75 3.33 0.00 81 UNPARSEABLE_RELAY 4527 2.79 3.22 2.66 82 XMDiploma_00 4210 2.06 3.00 1.79 83 XM_SendGrid 4159 5.05 2.96 5.66 84 RCVD_IN_MSPIKE_H2 4078 4.12 2.90 4.48 85 XM_CamelCaseFrm001 4074 1.90 2.90 1.61 86 XM_UB80 4062 0.69 2.89 0.05 87 SUBJ_ALL_CAPS 3838 1.97 2.73 1.74 88 RCVD_IN_BL_SPAMCOP_NET 3770 1.08 2.68 0.61 89 BOTNET_NORDNS 3760 0.62 2.68 0.02 90 RCVD_IN_RP_SAFE 3544 7.21 2.52 8.57 91 T_XMDrugObfuBody_08 3378 1.60 2.40 1.37 92 T_TooManySym_01 3376 5.14 2.40 5.94 93 RELAYCOUNTRY_CN 3317 0.56 2.36 0.03 94 XM_URI_RBL 3246 0.80 2.31 0.36 95 XMGenDplmaNmb 3124 1.48 2.22 1.26 96 MIME_QP_LONG_LINE 3114 4.74 2.22 5.47 97 HTML_IMAGE_RATIO_08 3080 2.16 2.19 2.15 98 BAYES_40 3064 4.20 2.18 4.79 99 XMPhish11 3025 1.26 2.15 1.00 100 DKIM_ADSP_CUSTOM_MED 3021 1.25 2.15 0.99 101 T_XMDrugObfuBody_00 2951 2.22 2.10 2.26 102 NML_ADSP_CUSTOM_MED 2923 1.01 2.08 0.69 103 TM2_M_VERY_LONG_WORD 2913 1.08 2.07 0.79 104 SpammyFromTLD_01 2746 1.03 1.95 0.76 105 XMSexyCombo_01 2732 0.98 1.94 0.70 106 XMBdyGiftCard01 2674 1.18 1.90 0.97 107 ALL_TRUSTED 2655 16.47 1.89 20.73 108 BAYES_20 2612 3.04 1.86 3.38 109 RCVD_IN_RP_CERTIFIED 2554 6.32 1.82 7.64 110 TR_Symld_Words 2503 1.67 1.78 1.63 111 XMBody_17 2400 0.83 1.71 0.58 112 XMSlimDrugH 2363 0.63 1.68 0.32 113 RELAYCOUNTRY_IN 2292 0.44 1.63 0.09 114 TR_LOTS_OF_MONEY2 2287 0.58 1.63 0.28 115 T_MONEY_PERCENT 2287 0.58 1.63 0.28 116 LOW_PRICE 2188 0.48 1.56 0.17 117 DIET_1 2182 0.60 1.55 0.33 118 URIBL_DBL_SPAM 2150 0.40 1.53 0.07 119 XMPhish30 2095 0.68 1.49 0.44 120 MONEY_FRAUD_8 2080 0.35 1.48 0.02 121 XM_UB99 2076 0.37 1.48 0.05 122 RCVD_IN_PSBL 2048 0.37 1.46 0.05 123 XMSubMetaI_00 2011 0.79 1.43 0.60 124 XM_Nigeria_01 1966 0.35 1.40 0.04 125 URIBL_BLACK 1960 0.36 1.40 0.05 126 TVD_SPACE_RATIO_MINFP 1952 0.32 1.39 0.01 127 BAYES_00 1945 12.37 1.38 15.57 128 RCVD_IN_IADB_LISTED 1927 4.58 1.37 5.52 129 MAILING_LIST_MULTI 1903 2.07 1.35 2.28 130 XMHTMLBadTable_001 1901 0.75 1.35 0.57 131 RELAYCOUNTRY_FR 1896 0.44 1.35 0.17 132 FORGED_GMAIL_RCVD 1893 0.68 1.35 0.48 133 RELAYCOUNTRY_GB 1887 1.06 1.34 0.97 134 TR_Mismatch_TLD_02 1873 0.34 1.33 0.05 135 XMStockSpam_06 1816 1.14 1.29 1.10 136 XMHTML_After_End 1772 0.60 1.26 0.41 137 XM_DK_Undo_01 1734 1.72 1.23 1.86 138 XMMoneyMeta_00 1724 0.68 1.23 0.52 139 XM_XX_Yahoo 1674 0.31 1.19 0.06 140 TR_XM_RelayPhish 1660 0.62 1.18 0.46 141 RELAYCOUNTRY_NL 1659 0.48 1.18 0.27 142 FILL_THIS_FORM 1644 0.66 1.17 0.51 143 ADVANCE_FEE_5_NEW_MONEY 1619 0.27 1.15 0.01 144 URI_TRY_3LD 1616 1.27 1.15 1.31 145 DATE_IN_PAST_03_06 1592 0.33 1.13 0.09 146 RCVD_IN_IADB_SPF 1572 3.99 1.12 4.83 147 XM_H_Undi_Recip 1570 0.43 1.12 0.23 148 BAYES_05 1546 2.00 1.10 2.26 149 XM_OfRef7 1543 0.39 1.10 0.19 150 T_Symld_Words_02 1531 0.66 1.09 0.53 151 T_XMHurry_00 1525 0.68 1.09 0.56 152 BODY_ENHANCEMENT 1525 0.26 1.09 0.01 153 XM_UB95 1519 0.26 1.08 0.02 154 SUBJ_DOLLARS 1519 0.42 1.08 0.23 155 RELAYCOUNTRY_AT 1505 0.46 1.07 0.28 156 RDNS_DYNAMIC 1486 0.56 1.06 0.42 157 DKIM_ADSP_NXDOMAIN 1481 0.57 1.05 0.43 158 XM_UB999 1466 0.26 1.04 0.03 159 TR_XM_DK_Bayes 1466 9.74 1.04 12.27 160 TooManyTo_002 1461 3.22 1.04 3.86 161 RCVD_IN_IADB_DK 1461 3.48 1.04 4.19 162 TR_Mismatch_TLD_01 1438 0.34 1.02 0.14 163 T_FILL_THIS_FORM_SHORT 1437 0.83 1.02 0.77 164 RCVD_IN_IADB_SENDERID 1433 3.51 1.02 4.23 165 XM_H_Long_From02 1431 0.97 1.02 0.95 166 XMBody_78 1413 0.62 1.01 0.50 167 TR_XM_Undi_Recip5 1407 0.25 1.00 0.03 168 TR_XM_DK_Bayes1 1376 9.28 0.98 11.70 169 HTML_FONT_FACE_BAD 1321 0.60 0.94 0.51 170 XM_H_PHPOS 1307 1.06 0.93 1.10 171 TooManyTo_003 1242 2.64 0.88 3.15 172 PLING_QUERY 1237 0.45 0.88 0.32 173 XM_ProductURIs 1217 0.70 0.87 0.65 174 RELAYCOUNTRY_BE 1215 0.25 0.86 0.07 175 HTML_IMAGE_ONLY_08 1215 0.32 0.86 0.16 176 RCVD_IN_IADB_VOUCHED 1199 2.91 0.85 3.51 177 LongTLD 1194 0.32 0.85 0.17 178 HTML_FONT_SIZE_HUGE 1191 0.28 0.85 0.11 179 XMSlimDrugs 1189 0.25 0.85 0.07 180 XM_S_JOY_D 1175 0.49 0.84 0.39 181 T_FILL_THIS_FORM_LONG 1154 0.44 0.82 0.33 182 XMSubMetaSxObfu_03 1141 0.67 0.81 0.63 183 TR_XM_DK_Bayes2 1123 7.64 0.80 9.64 184 FROM_SUSPICIOUS_NTLD 1117 0.21 0.80 0.04 185 XMSexyCombo_04 1115 0.28 0.79 0.13 186 HTML_TAG_BALANCE_BODY 1102 0.49 0.78 0.40 187 MONEY_FRAUD_5 1099 0.18 0.78 0.00 188 XM_RXBody 1095 0.33 0.78 0.20 189 HTTPS_HTTP_MISMATCH 1084 0.53 0.77 0.46 190 XMSubMetaSSx_00 1068 0.35 0.76 0.23 191 RELAYCOUNTRY_NG 1026 0.16 0.73 0.00 192 XMPhish14 1025 0.50 0.73 0.43 193 XM_PDF 1004 3.56 0.71 4.39 194 FORGED_YAHOO_RCVD 999 0.18 0.71 0.02 195 INVALID_DATE 974 0.20 0.69 0.06 196 RELAYCOUNTRY_AU 971 0.53 0.69 0.49 197 T_TooManySym_02 971 1.51 0.69 1.75 198 LONG_HEX_URI 947 0.26 0.67 0.14 199 MPART_ALT_DIFF_COUNT 937 0.34 0.67 0.24 200 XM_B_REG_HTML 934 0.56 0.66 0.53 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 406588 85.21 87.81 84.46 2 DKIM_SIGNED 343034 71.99 74.53 71.26 3 XM_DK_Pass 336905 70.51 72.31 69.98 4 DKIM_VALID 317091 66.30 67.78 65.87 5 BAYES_50 284318 56.49 47.69 59.06 6 DCC_CHECK_NEGATIVE 284244 51.16 24.16 59.04 7 XMListUnsubscribeExists 230745 51.85 65.28 47.93 8 DKIM_VALID_AU 225979 48.80 55.19 46.94 9 XM_H_QuotedFrom 191182 42.02 49.94 39.71 10 DCC_CHECK 188919 47.14 74.19 39.24 11 T_TM2_M_HEADER_IN_MSG 140458 26.41 16.91 29.18 12 HTML_FONT_LOW_CONTRAST 128315 28.43 34.50 26.65 13 DKIM_VALID_EF 122337 23.93 18.86 25.41 14 XMSubLong 104854 22.99 27.15 21.78 15 LOC_TINY_FONT_1 99845 23.75 34.09 20.74 16 ALL_TRUSTED 99800 16.47 1.89 20.73 17 STYLE_GIBBERISH 95714 20.75 23.72 19.88 18 MIME_HTML_ONLY 95278 22.84 33.28 19.79 19 FVGT_m_MULTI_ODD 94662 20.95 25.35 19.66 20 MultiRelay 83411 17.22 16.84 17.33 21 T_KAM_HTML_FONT_INVALID 75120 15.70 16.05 15.60 22 BAYES_00 74968 12.37 1.38 15.57 23 XM_Body_Dirty_Words 59192 13.65 18.28 12.30 24 TR_XM_DK_Bayes 59081 9.74 1.04 12.27 25 XM_DKIMWhitelistDomains 57415 9.23 0.01 11.93 26 XM_Multi_Part_URI 56379 13.14 18.03 11.71 27 TR_XM_DK_Bayes1 56344 9.28 0.98 11.70 28 TooManyTo_001 46467 9.21 7.69 9.65 29 TR_XM_DK_Bayes2 46396 7.64 0.80 9.64 30 LOTS_OF_MONEY 46070 11.41 17.69 9.57 31 HTML_IMAGE_RATIO_02 41432 10.41 16.60 8.61 32 RCVD_IN_RP_SAFE 41272 7.21 2.52 8.57 33 LotsOfNums_01 39985 7.75 5.84 8.31 34 RCVD_IN_RP_CERTIFIED 36760 6.32 1.82 7.64 35 XM_Evil_Numbers_Gen 35983 9.77 17.65 7.47 36 XM_DK_Undo_02 34882 12.98 32.62 7.25 37 T_XMDrugObfuBody_14 34808 7.69 9.28 7.23 38 FSL_BULK_SIG 32875 8.45 13.99 6.83 39 T_TooManySym_01 28583 5.14 2.40 5.94 40 XM_H_Long_From01 28012 6.38 8.32 5.82 41 XM_SendGrid 27254 5.05 2.96 5.66 42 RCVD_IN_IADB_LISTED 26563 4.58 1.37 5.52 43 MIME_QP_LONG_LINE 26345 4.74 2.22 5.47 44 BAYES_99 26239 10.01 25.64 5.45 45 XM_B_Phish_Phrases 25974 5.69 6.70 5.40 46 DKIM_INVALID 25943 5.70 6.75 5.39 47 XMStrtUSub 24976 4.88 3.83 5.19 48 RELAYCOUNTRY_META 24498 9.25 23.53 5.09 49 BAYES_60 24332 5.76 8.19 5.05 50 HTML_IMAGE_RATIO_04 24216 5.74 8.16 5.03 51 RCVD_IN_IADB_SPF 23232 3.99 1.12 4.83 52 BAYES_40 23058 4.20 2.18 4.79 53 BOTNET_IPINHOSTNAME 22524 6.82 14.15 4.68 54 BAYES_999 21934 8.32 21.24 4.56 55 RCVD_IN_MSPIKE_H2 21555 4.12 2.90 4.48 56 XM_PDF 21153 3.56 0.71 4.39 57 XMSubMetaSx_00 20528 5.09 7.91 4.26 58 RCVD_IN_IADB_SENDERID 20376 3.51 1.02 4.23 59 RCVD_IN_IADB_DK 20176 3.48 1.04 4.19 60 T_REMOTE_IMAGE 19763 4.92 7.70 4.11 61 FROM_EXCESS_BASE64 18992 5.70 11.74 3.95 62 TooManyTo_002 18568 3.22 1.04 3.86 63 IN_ZIMBRA_NJ_WHITELIST 17720 2.85 0.01 3.68 64 XMSexyCombo_05 17679 5.14 10.17 3.67 65 XMNumbers 17344 4.27 6.57 3.60 66 RCVD_IN_IADB_VOUCHED 16885 2.91 0.85 3.51 67 HTML_IMAGE_RATIO_06 16825 3.66 4.21 3.49 68 BAYES_20 16290 3.04 1.86 3.38 69 TR_DCC_Bayes_99 15592 7.20 20.79 3.24 70 MPART_ALT_DIFF 15442 4.21 7.66 3.21 71 XM_UncommonTLD01 15415 4.83 10.39 3.20 72 TooManyTo_003 15168 2.64 0.88 3.15 73 ANY_BOUNCE_MESSAGE 14049 3.48 5.39 2.92 74 TO_MALFORMED 14047 2.27 0.06 2.92 75 BOUNCE_MESSAGE 14047 3.48 5.39 2.92 76 BAYES_80 13255 4.00 8.28 2.75 77 UNPARSEABLE_RELAY 12795 2.79 3.22 2.66 78 MIME_HTML_MOSTLY 11349 2.80 4.31 2.36 79 TVD_RCVD_IP 11066 1.87 0.38 2.30 80 MAILING_LIST_MULTI 10992 2.07 1.35 2.28 81 BAYES_05 10867 2.00 1.10 2.26 82 T_XMDrugObfuBody_00 10858 2.22 2.10 2.26 83 RCVD_IN_IADB_OPTIN 10781 1.87 0.61 2.24 84 HTML_MIME_NO_HTML_TAG 10467 3.46 7.87 2.17 85 HTML_IMAGE_RATIO_08 10372 2.16 2.19 2.15 86 XM_SPF_SoftFail 9847 2.68 4.85 2.05 87 BOTNET 9482 5.70 18.50 1.97 88 TM2_M_URI_OPT_OUT 9273 2.36 3.85 1.93 89 XM_DK_Undo_01 8962 1.72 1.23 1.86 90 XM_DIRTYINTL 8605 2.36 4.31 1.79 91 XMDiploma_00 8599 2.06 3.00 1.79 92 URI_HEX 8464 2.30 4.18 1.76 93 T_TooManySym_02 8416 1.51 0.69 1.75 94 SUBJ_ALL_CAPS 8395 1.97 2.73 1.74 95 RCVD_IN_MSPIKE_WL 8331 1.47 0.59 1.73 96 RCVD_IN_MSPIKE_H3 8322 1.47 0.59 1.73 97 BAYES_95 8089 2.13 3.68 1.68 98 TR_Symld_Words 7857 1.67 1.78 1.63 99 HELO_NODOT 7779 1.32 0.29 1.62 100 XM_CamelCaseFrm001 7756 1.90 2.90 1.61 101 RELAYCOUNTRY_CA 7720 2.07 3.68 1.60 102 IN_HORDE_ADDRESS_BOOK 7477 1.21 0.04 1.55 103 INVALID_MSGID 7249 1.20 0.14 1.51 104 XM_OfRef6 7247 2.00 3.70 1.51 105 MIME_HTML_ONLY_MULTI 6881 2.09 4.35 1.43 106 TR_MetaPhish_Combo_01 6667 1.16 0.41 1.38 107 T_XMDrugObfuBody_08 6586 1.60 2.40 1.37 108 URI_TRY_3LD 6295 1.27 1.15 1.31 109 UNTRUSTED_Relay 6117 4.70 16.44 1.27 110 XMGenDplmaNmb 6085 1.48 2.22 1.26 111 USER_IN_DEF_DKIM_WL 5731 0.94 0.06 1.19 112 XMCapTrack 5684 0.97 0.27 1.18 113 XM_GoogleGroups 5595 1.01 0.49 1.16 114 TooManyTo_004 5365 1.00 0.60 1.11 115 XM_H_PHPOS 5298 1.06 0.93 1.10 116 XMStockSpam_06 5273 1.14 1.29 1.10 117 XMPhish11 4798 1.26 2.15 1.00 118 DKIM_ADSP_CUSTOM_MED 4751 1.25 2.15 0.99 119 RELAYCOUNTRY_GB 4686 1.06 1.34 0.97 120 XMBdyGiftCard01 4677 1.18 1.90 0.97 121 XM_H_Long_From02 4576 0.97 1.02 0.95 122 XMGappySubj_01 4357 0.79 0.40 0.91 123 TooManyTo_005 4259 0.81 0.56 0.88 124 TM2_M_VERY_LONG_WORD 3812 1.08 2.07 0.79 125 T_FILL_THIS_FORM_SHORT 3701 0.83 1.02 0.77 126 SpammyFromTLD_01 3658 1.03 1.95 0.76 127 XMBrknScrpt_02 3402 0.65 0.47 0.71 128 FROM_GOV_SPOOF 3359 0.66 0.52 0.70 129 XMSexyCombo_01 3347 0.98 1.94 0.70 130 NML_ADSP_CUSTOM_MED 3339 1.01 2.08 0.69 131 TM2_M_A_HREF_HREF 3282 0.67 0.61 0.68 132 XM_UB50 3148 1.96 6.43 0.65 133 T_OBFU_PDF_ATTACH 3143 0.55 0.18 0.65 134 XM_ProductURIs 3131 0.70 0.87 0.65 135 XMSubMetaSxObfu_03 3035 0.67 0.81 0.63 136 XM_H_PHPMailer 2929 0.60 0.56 0.61 137 RCVD_IN_BL_SPAMCOP_NET 2926 1.08 2.68 0.61 138 XMSubMetaI_00 2890 0.79 1.43 0.60 139 TR_LOTS_OF_MONEY3 2858 1.75 5.72 0.59 140 XMNoVowels 2805 0.54 0.41 0.58 141 XMBody_17 2784 0.83 1.71 0.58 142 XMHTMLBadTable_001 2737 0.75 1.35 0.57 143 XMBody_95 2723 0.46 0.12 0.57 144 XM_ShortIntro_01 2697 0.56 0.58 0.56 145 T_XMHurry_00 2689 0.68 1.09 0.56 146 XMLngstWrd_00 2579 0.47 0.25 0.54 147 T_Symld_Words_02 2572 0.66 1.09 0.53 148 XM_B_REG_HTML 2535 0.56 0.66 0.53 149 USER_IN_WHITELIST 2532 0.41 0.00 0.53 150 XMMoneyMeta_00 2482 0.68 1.23 0.52 151 URI_WP_HACKED_2 2473 0.52 0.53 0.51 152 FILL_THIS_FORM 2453 0.66 1.17 0.51 153 HTML_FONT_FACE_BAD 2433 0.60 0.94 0.51 154 XMBody_78 2427 0.62 1.01 0.50 155 URI_NOVOWEL 2406 0.53 0.61 0.50 156 XMLngstWrd_01 2384 0.44 0.24 0.50 157 XMGappySubj_02 2352 0.39 0.07 0.49 158 RELAYCOUNTRY_AU 2340 0.53 0.69 0.49 159 T_TooManySym_03 2321 0.40 0.13 0.48 160 FORGED_GMAIL_RCVD 2311 0.68 1.35 0.48 161 TR_XM_RelayPhish 2219 0.62 1.18 0.46 162 HTTPS_HTTP_MISMATCH 2191 0.53 0.77 0.46 163 T_MANY_PILL_PRICE 2185 0.35 0.00 0.45 164 XMPhish30 2116 0.68 1.49 0.44 165 XMDateMe_00 2114 0.41 0.31 0.44 166 DKIM_ADSP_NXDOMAIN 2088 0.57 1.05 0.43 167 XMPhish14 2075 0.50 0.73 0.43 168 RELAYCOUNTRY_DE 2048 1.42 4.84 0.43 169 XM_B_COPY_HTML 2043 0.47 0.63 0.42 170 RDNS_DYNAMIC 2014 0.56 1.06 0.42 171 SpammyFromTLD_02 2000 1.90 7.00 0.42 172 XMHTML_After_End 1986 0.60 1.26 0.41 173 MISSING_HEADERS 1977 1.36 4.62 0.41 174 SHORT_HELO_AND_INLINE_IMAGE 1973 0.33 0.05 0.41 175 HTML_TAG_BALANCE_BODY 1938 0.49 0.78 0.40 176 XM_S_JOY_D 1878 0.49 0.84 0.39 177 TM2_M_BODY_EMPTY 1808 0.39 0.44 0.38 178 HTML_IMAGE_ONLY_32 1794 0.35 0.27 0.37 179 XM_URI_RBL 1742 0.80 2.31 0.36 180 IMPOTENCE 1724 0.35 0.34 0.36 181 XMSubMetaSxObfu_02 1639 0.34 0.34 0.34 182 HTML_IMAGE_ONLY_28 1601 0.38 0.54 0.33 183 T_FILL_THIS_FORM_LONG 1577 0.44 0.82 0.33 184 REMOVE_BEFORE_LINK 1574 0.40 0.64 0.33 185 DIET_1 1571 0.60 1.55 0.33 186 NO_DNS_FOR_FROM 1566 0.34 0.40 0.33 187 PLING_QUERY 1563 0.45 0.88 0.32 188 XMSlimDrugH 1557 0.63 1.68 0.32 189 RCVD_IN_SORBS_DUL 1554 0.34 0.41 0.32 190 AC_DIV_BONANZA 1530 0.27 0.11 0.32 191 XM_H_PHPOS_M 1513 0.32 0.33 0.31 192 XMRcvdHeader_15 1499 0.24 0.00 0.31 193 FILL_THIS_FORM_LOAN 1493 0.31 0.32 0.31 194 XMOemUri 1469 0.28 0.20 0.31 195 TVD_SPACE_RATIO 1457 0.28 0.20 0.30 196 XMSolicitRefs_0 1397 0.35 0.56 0.29 197 T_FROM_GOV_DKIM_AU 1393 0.25 0.13 0.29 198 XM_D_tchamptons_WL 1361 0.22 0.00 0.28 199 XM_Ancestry_Forge 1355 0.23 0.07 0.28 200 T_MONEY_PERCENT 1347 0.58 1.63 0.28 ----------------------------------------------------------------------