Email: 629655 Autolearn: 0 AvgScore: 2.35 AvgScanTime: 3.46 sec Spam: 155021 Autolearn: 0 AvgScore: 12.02 AvgScanTime: 3.93 sec Ham: 474634 Autolearn: 0 AvgScore: -0.80 AvgScanTime: 3.31 sec Time Spent Running SA: 605.56 hours Time Spent Processing Spam: 169.30 hours Time Spent Processing Ham: 436.26 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 136011 87.00 87.74 86.76 2 DKIM_SIGNED 116451 71.99 75.12 70.97 3 DCC_CHECK 113701 45.97 73.35 37.02 4 XM_DK_Pass 110048 69.89 70.99 69.53 5 DKIM_VALID 102522 65.20 66.13 64.89 6 XMListUnsubscribeExists 100309 51.13 64.71 46.69 7 DKIM_VALID_AU 83927 48.74 54.14 46.98 8 XM_H_QuotedFrom 73353 42.22 47.32 40.56 9 BAYES_50 71641 55.04 46.21 57.92 10 HTML_FONT_LOW_CONTRAST 57280 28.39 36.95 25.60 11 LOC_TINY_FONT_1 50656 23.27 32.68 20.19 12 MIME_HTML_ONLY 50003 23.23 32.26 20.29 13 XM_DK_Undo_02 45908 12.25 29.61 6.57 14 FVGT_m_MULTI_ODD 39626 21.28 25.56 19.89 15 DCC_CHECK_NEGATIVE 39123 52.13 25.24 60.91 16 BAYES_99 38276 9.90 24.69 5.06 17 BOTNET 37198 7.30 24.00 1.85 18 STYLE_GIBBERISH 36694 17.12 23.67 14.98 19 XMSubLong 36017 21.04 23.23 20.32 20 XM_Multi_Part_URI 35443 14.12 22.86 11.26 21 XM_Evil_Numbers_Gen 34643 11.85 22.35 8.42 22 LOTS_OF_MONEY 32550 10.91 21.00 7.62 23 TR_DCC_Bayes_99 31079 7.08 20.05 2.84 24 BAYES_999 31030 8.13 20.02 4.25 25 DKIM_VALID_EF 30651 24.34 19.77 25.83 26 XM_Body_Dirty_Words 29228 13.61 18.85 11.89 27 RELAYCOUNTRY_META 28095 8.42 18.12 5.25 28 T_KAM_HTML_FONT_INVALID 26505 16.00 17.10 15.64 29 MultiRelay 23088 17.78 14.89 18.72 30 T_TM2_M_HEADER_IN_MSG 22991 27.45 14.83 31.57 31 BOTNET_IPINHOSTNAME 22730 7.10 14.66 4.63 32 FSL_BULK_SIG 19819 7.76 12.78 6.11 33 UNTRUSTED_Relay 19160 4.02 12.36 1.30 34 RCVD_IN_RP_RNBL 18788 3.08 12.12 0.13 35 HTML_IMAGE_RATIO_02 18471 8.78 11.92 7.76 36 XMSexyCombo_05 16341 5.39 10.54 3.71 37 T_XMDrugObfuBody_14 15648 8.00 10.09 7.31 38 HTML_IMAGE_RATIO_04 15465 5.62 9.98 4.19 39 BOUNCE_MESSAGE 15259 4.76 9.84 3.10 40 ANY_BOUNCE_MESSAGE 15259 4.76 9.84 3.10 41 XM_UncommonTLD01 14122 4.65 9.11 3.19 42 XM_B_Phish_Phrases 13943 6.29 8.99 5.40 43 DKIM_INVALID 13929 6.79 8.99 6.08 44 TR_LOTS_OF_MONEY3 13185 2.33 8.51 0.31 45 TooManyTo_001 12428 8.57 8.02 8.75 46 XMSubMetaSx_00 12127 5.03 7.82 4.12 47 FROM_EXCESS_BASE64 12048 4.60 7.77 3.56 48 BAYES_60 12034 5.40 7.76 4.63 49 MPART_ALT_DIFF 10867 3.95 7.01 2.95 50 XM_H_Long_From01 10824 5.95 6.98 5.61 51 BAYES_80 10581 3.54 6.83 2.47 52 XM_UB50 9798 2.10 6.32 0.73 53 LotsOfNums_01 9296 7.70 6.00 8.26 54 SpammyFromTLD_02 8815 1.56 5.69 0.21 55 XMNumbers 8639 4.02 5.57 3.52 56 HTML_MIME_NO_HTML_TAG 7207 4.42 4.65 4.34 57 BAYES_20 6979 3.87 4.50 3.66 58 T_REMOTE_IMAGE 6778 4.16 4.37 4.09 59 MIME_HTML_ONLY_MULTI 6720 1.86 4.33 1.05 60 XM_salutation2 6615 1.86 4.27 1.08 61 XM_DIRTYINTL 6484 2.53 4.18 1.99 62 TM2_M_URI_OPT_OUT 5882 2.41 3.79 1.95 63 HTML_IMAGE_RATIO_06 5789 3.23 3.73 3.07 64 URI_HEX 5764 2.23 3.72 1.75 65 HTML_IMAGE_RATIO_08 5673 2.37 3.66 1.94 66 XM_SPF_SoftFail 5517 2.54 3.56 2.20 67 RCVD_IN_RP_SAFE 5481 7.20 3.54 8.40 68 XMStrtUSub 5390 4.50 3.48 4.84 69 BAYES_40 5330 4.73 3.44 5.15 70 MIME_HTML_MOSTLY 5248 2.89 3.39 2.73 71 BAYES_95 5213 1.95 3.36 1.49 72 DKIM_ADSP_NXDOMAIN 5080 1.22 3.28 0.55 73 XMSexyCombo_01 4972 1.47 3.21 0.90 74 XM_SendGrid 4916 5.01 3.17 5.61 75 MultiRelay_Combo 4835 0.90 3.12 0.18 76 MultiRelay_CC 4835 0.90 3.12 0.18 77 RCVD_IN_MSPIKE_H2 4769 3.85 3.08 4.11 78 RELAYCOUNTRY_CA 4683 1.87 3.02 1.49 79 XMDiploma_00 4529 2.00 2.92 1.69 80 XM_URI_RBL 4518 1.00 2.91 0.38 81 XM_CamelCaseFrm001 4463 2.11 2.88 1.86 82 RELAYCOUNTRY_CN 4410 0.73 2.84 0.05 83 XM_RXBody 4337 1.26 2.80 0.75 84 XMStockSpam_06 4139 1.35 2.67 0.92 85 T_TooManySym_01 4027 4.75 2.60 5.45 86 BOTNET_NORDNS 3905 0.64 2.52 0.02 87 RCVD_IN_RP_CERTIFIED 3813 6.11 2.46 7.31 88 XM_UB60 3665 0.62 2.36 0.05 89 XMGenDplmaNmb 3647 1.42 2.35 1.11 90 MIME_QP_LONG_LINE 3596 4.60 2.32 5.35 91 UNPARSEABLE_RELAY 3560 2.58 2.30 2.68 92 XMSubMetaSxObfu_03 3523 0.91 2.27 0.46 93 XMPhish11 3379 1.40 2.18 1.14 94 RELAYCOUNTRY_IN 3347 0.63 2.16 0.13 95 TR_XM_RelayPhish 3255 0.92 2.10 0.53 96 XMSexyCombo_04 3191 0.79 2.06 0.38 97 BODY_URI_ONLY 3174 0.59 2.05 0.11 98 XM_OfRef6 3032 1.75 1.96 1.68 99 NO_DNS_FOR_FROM 2933 0.66 1.89 0.25 100 SUBJ_ALL_CAPS 2924 1.80 1.89 1.77 101 T_XMDrugObfuBody_08 2915 1.47 1.88 1.34 102 XMBdyGiftCard01 2835 0.78 1.83 0.43 103 XMSubMetaSx_01 2738 0.54 1.77 0.13 104 TVD_SPACE_RATIO_MINFP 2627 0.42 1.69 0.01 105 URIBL_SBL_A 2615 0.64 1.69 0.30 106 XMSubMetaI_00 2614 0.96 1.69 0.72 107 RELAYCOUNTRY_FR 2602 0.56 1.68 0.20 108 XMSolicitRefs_0 2549 0.65 1.64 0.33 109 BAYES_00 2517 13.37 1.62 17.20 110 SpammyFromTLD_01 2459 1.02 1.59 0.84 111 FROM_SUSPICIOUS_NTLD 2435 0.42 1.57 0.05 112 HTML_SHORT_LINK_IMG_1 2422 0.41 1.56 0.04 113 LONG_HEX_URI 2415 0.52 1.56 0.18 114 BAYES_05 2414 2.21 1.56 2.43 115 TM2_M_VERY_LONG_WORD 2411 1.15 1.56 1.01 116 FSL_THIS_IS_ADV 2395 0.61 1.54 0.31 117 XMHTML_After_End 2394 0.74 1.54 0.47 118 XMSubNoVowel 2318 0.69 1.50 0.43 119 MIME_HEADER_CTYPE_ONLY 2318 0.46 1.50 0.13 120 URIBL_DBL_SPAM 2301 0.38 1.48 0.02 121 XM_ProductURIs 2277 0.94 1.47 0.77 122 T_MONEY_PERCENT 2257 0.53 1.46 0.22 123 TR_LOTS_OF_MONEY2 2257 0.53 1.46 0.22 124 T_XMHurry_00 2228 0.94 1.44 0.77 125 TooManyTo_002 2217 2.29 1.43 2.57 126 RCVD_IN_IADB_LISTED 2184 3.94 1.41 4.77 127 MAILING_LIST_MULTI 2183 2.20 1.41 2.46 128 XMPhish30 2173 0.63 1.40 0.38 129 XMSexyCombo_02 2158 0.38 1.39 0.05 130 DIET_1 2131 0.72 1.37 0.51 131 XM_DKIMWhitelistDomains 2090 8.47 1.35 10.80 132 XM_B_REG_HTML 2085 0.67 1.34 0.45 133 HTML_FONT_SIZE_LARGE 2084 0.50 1.34 0.22 134 MISSING_HEADERS 2063 0.72 1.33 0.52 135 XMAntiAgingB 2057 0.35 1.33 0.03 136 XMBody_78 2009 0.70 1.30 0.50 137 TooManyTo_003 1994 1.66 1.29 1.78 138 URIBL_CSS_A 1992 0.41 1.28 0.13 139 URIBL_CSS 1992 0.41 1.28 0.13 140 URIBL_BLACK 1945 0.35 1.25 0.05 141 XM_GoogleGroups 1942 1.15 1.25 1.12 142 RCVD_IN_BL_SPAMCOP_NET 1908 0.50 1.23 0.26 143 TR_Mismatch_TLD_02 1889 0.36 1.22 0.07 144 XMGppyBdWords 1881 0.51 1.21 0.28 145 TooManyTo_004 1835 1.30 1.18 1.34 146 ALL_TRUSTED 1820 15.39 1.17 20.03 147 RELAYCOUNTRY_GB 1812 1.03 1.17 0.98 148 RCVD_IN_IADB_SPF 1810 3.49 1.17 4.25 149 MPART_ALT_DIFF_COUNT 1804 0.42 1.16 0.17 150 XM_UB80 1777 0.32 1.15 0.05 151 HTML_IMAGE_ONLY_04 1743 0.32 1.12 0.06 152 TR_XM_DK_Bayes 1730 10.20 1.12 13.17 153 HTML_FONT_FACE_BAD 1721 0.67 1.11 0.52 154 RCVD_IN_IADB_SENDERID 1714 3.12 1.11 3.77 155 TooManyTo_005 1713 1.12 1.11 1.12 156 XM_H_Long_From02 1696 1.13 1.09 1.14 157 HTML_SHORT_CENTER 1689 0.27 1.09 0.00 158 RCVD_IN_IADB_DK 1687 3.10 1.09 3.75 159 XM_UB99 1685 0.28 1.09 0.02 160 RDNS_DYNAMIC 1674 0.52 1.08 0.34 161 T_XMDrugObfuBody_00 1672 0.72 1.08 0.60 162 XMBody_17 1670 0.77 1.08 0.67 163 XMPhish14 1670 0.75 1.08 0.65 164 XM_H_PHPOS 1668 1.08 1.08 1.08 165 RELAYCOUNTRY_AT 1640 0.45 1.06 0.26 166 TR_Symld_Words 1636 1.39 1.06 1.50 167 HTML_TITLE_SUBJ_DIFF 1611 0.31 1.04 0.07 168 T_TooManySym_02 1562 1.82 1.01 2.08 169 XM_DK_Undo_01 1555 1.60 1.00 1.79 170 T_HTML_TAG_BALANCE_CENTER 1505 0.32 0.97 0.11 171 SUBJ_DOLLARS 1490 0.55 0.96 0.41 172 DATE_IN_PAST_06_12 1480 0.28 0.95 0.06 173 TR_XM_DK_Bayes1 1420 9.50 0.92 12.30 174 RCVD_IN_IADB_VOUCHED 1405 2.48 0.91 2.99 175 NORDNS_LOW_CONTRAST 1404 0.23 0.91 0.02 176 URI_TRY_3LD 1397 1.22 0.90 1.33 177 HTML_TAG_BALANCE_HEAD 1371 0.28 0.88 0.08 178 DATE_IN_PAST_03_06 1369 0.30 0.88 0.11 179 XMHTMLBadTable_001 1361 0.58 0.88 0.48 180 LONG_JUNK_URI 1348 0.26 0.87 0.06 181 DKIM_ADSP_CUSTOM_MED 1262 0.96 0.81 1.01 182 T_TVD_MIME_EPI 1253 0.21 0.81 0.02 183 XM_B_COPY_HTML 1224 0.53 0.79 0.45 184 XM_H_TOP 1218 0.20 0.79 0.00 185 XMSlimDrugH 1214 0.40 0.78 0.27 186 DATE_IN_PAST_96_XX 1213 0.20 0.78 0.01 187 MIME_CHARSET_FARAWAY 1193 0.27 0.77 0.10 188 TR_XM_DK_Bayes2 1190 8.08 0.77 10.47 189 T_FILL_THIS_FORM_SHORT 1164 0.86 0.75 0.89 190 TR_MetaPhish_Combo_01 1158 1.21 0.75 1.36 191 XMLongAddy 1153 0.23 0.74 0.06 192 XMSubMetaSSx_00 1146 0.31 0.74 0.17 193 NML_ADSP_CUSTOM_MED 1141 0.72 0.74 0.71 194 XM_UB999 1110 0.19 0.72 0.02 195 LOW_PRICE 1104 0.29 0.71 0.15 196 TR_Caps_n_Bayes_99 1098 0.20 0.71 0.04 197 CHARSET_FARAWAY_HEADER 1097 0.21 0.71 0.04 198 PLING_QUERY 1083 0.78 0.70 0.81 199 HTML_FONT_SIZE_HUGE 1071 1.69 0.69 2.02 200 HTTPS_HTTP_MISMATCH 1067 0.58 0.69 0.55 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 411781 87.00 87.74 86.76 2 DKIM_SIGNED 336848 71.99 75.12 70.97 3 XM_DK_Pass 330029 69.89 70.99 69.53 4 DKIM_VALID 308002 65.20 66.13 64.89 5 DCC_CHECK_NEGATIVE 289111 52.13 25.24 60.91 6 BAYES_50 274904 55.04 46.21 57.92 7 DKIM_VALID_AU 222982 48.74 54.14 46.98 8 XMListUnsubscribeExists 221613 51.13 64.71 46.69 9 XM_H_QuotedFrom 192502 42.22 47.32 40.56 10 DCC_CHECK 175720 45.97 73.35 37.02 11 T_TM2_M_HEADER_IN_MSG 149847 27.45 14.83 31.57 12 DKIM_VALID_EF 122606 24.34 19.77 25.83 13 HTML_FONT_LOW_CONTRAST 121492 28.39 36.95 25.60 14 XMSubLong 96445 21.04 23.23 20.32 15 MIME_HTML_ONLY 96282 23.23 32.26 20.29 16 LOC_TINY_FONT_1 95834 23.27 32.68 20.19 17 ALL_TRUSTED 95056 15.39 1.17 20.03 18 FVGT_m_MULTI_ODD 94390 21.28 25.56 19.89 19 MultiRelay 88843 17.78 14.89 18.72 20 BAYES_00 81644 13.37 1.62 17.20 21 T_KAM_HTML_FONT_INVALID 74230 16.00 17.10 15.64 22 STYLE_GIBBERISH 71104 17.12 23.67 14.98 23 TR_XM_DK_Bayes 62494 10.20 1.12 13.17 24 TR_XM_DK_Bayes1 58393 9.50 0.92 12.30 25 XM_Body_Dirty_Words 56442 13.61 18.85 11.89 26 XM_Multi_Part_URI 53438 14.12 22.86 11.26 27 XM_DKIMWhitelistDomains 51238 8.47 1.35 10.80 28 TR_XM_DK_Bayes2 49688 8.08 0.77 10.47 29 TooManyTo_001 41521 8.57 8.02 8.75 30 XM_Evil_Numbers_Gen 39968 11.85 22.35 8.42 31 RCVD_IN_RP_SAFE 39847 7.20 3.54 8.40 32 LotsOfNums_01 39217 7.70 6.00 8.26 33 HTML_IMAGE_RATIO_02 36844 8.78 11.92 7.76 34 LOTS_OF_MONEY 36163 10.91 21.00 7.62 35 T_XMDrugObfuBody_14 34714 8.00 10.09 7.31 36 RCVD_IN_RP_CERTIFIED 34690 6.11 2.46 7.31 37 XM_DK_Undo_02 31204 12.25 29.61 6.57 38 FSL_BULK_SIG 29023 7.76 12.78 6.11 39 DKIM_INVALID 28846 6.79 8.99 6.08 40 XM_H_Long_From01 26642 5.95 6.98 5.61 41 XM_SendGrid 26614 5.01 3.17 5.61 42 T_TooManySym_01 25874 4.75 2.60 5.45 43 XM_B_Phish_Phrases 25645 6.29 8.99 5.40 44 MIME_QP_LONG_LINE 25396 4.60 2.32 5.35 45 RELAYCOUNTRY_META 24921 8.42 18.12 5.25 46 BAYES_40 24426 4.73 3.44 5.15 47 XM_PDF 24112 3.98 0.61 5.08 48 BAYES_99 24034 9.90 24.69 5.06 49 XMStrtUSub 22974 4.50 3.48 4.84 50 RCVD_IN_IADB_LISTED 22647 3.94 1.41 4.77 51 BOTNET_IPINHOSTNAME 21996 7.10 14.66 4.63 52 BAYES_60 21959 5.40 7.76 4.63 53 HTML_MIME_NO_HTML_TAG 20597 4.42 4.65 4.34 54 RCVD_IN_IADB_SPF 20178 3.49 1.17 4.25 55 BAYES_999 20163 8.13 20.02 4.25 56 HTML_IMAGE_RATIO_04 19904 5.62 9.98 4.19 57 XMSubMetaSx_00 19551 5.03 7.82 4.12 58 RCVD_IN_MSPIKE_H2 19485 3.85 3.08 4.11 59 T_REMOTE_IMAGE 19416 4.16 4.37 4.09 60 RCVD_IN_IADB_SENDERID 17907 3.12 1.11 3.77 61 IN_ZIMBRA_NJ_WHITELIST 17831 2.84 0.02 3.76 62 RCVD_IN_IADB_DK 17808 3.10 1.09 3.75 63 XMSexyCombo_05 17589 5.39 10.54 3.71 64 BAYES_20 17366 3.87 4.50 3.66 65 FROM_EXCESS_BASE64 16907 4.60 7.77 3.56 66 XMNumbers 16685 4.02 5.57 3.52 67 XM_UncommonTLD01 15153 4.65 9.11 3.19 68 ANY_BOUNCE_MESSAGE 14697 4.76 9.84 3.10 69 BOUNCE_MESSAGE 14696 4.76 9.84 3.10 70 HTML_IMAGE_RATIO_06 14562 3.23 3.73 3.07 71 RCVD_IN_IADB_VOUCHED 14204 2.48 0.91 2.99 72 MPART_ALT_DIFF 14025 3.95 7.01 2.95 73 TR_DCC_Bayes_99 13481 7.08 20.05 2.84 74 MIME_HTML_MOSTLY 12953 2.89 3.39 2.73 75 UNPARSEABLE_RELAY 12698 2.58 2.30 2.68 76 TooManyTo_002 12199 2.29 1.43 2.57 77 BAYES_80 11715 3.54 6.83 2.47 78 MAILING_LIST_MULTI 11684 2.20 1.41 2.46 79 BAYES_05 11532 2.21 1.56 2.43 80 TO_MALFORMED 11278 1.80 0.05 2.38 81 TVD_RCVD_IP 10818 1.82 0.43 2.28 82 XM_SPF_SoftFail 10462 2.54 3.56 2.20 83 T_TooManySym_02 9889 1.82 1.01 2.08 84 HTML_FONT_SIZE_HUGE 9592 1.69 0.69 2.02 85 HELO_NODOT 9566 1.61 0.37 2.02 86 XM_DIRTYINTL 9428 2.53 4.18 1.99 87 HTTP_ESCAPED_HOST 9343 1.51 0.09 1.97 88 TM2_M_URI_OPT_OUT 9275 2.41 3.79 1.95 89 HTML_IMAGE_RATIO_08 9224 2.37 3.66 1.94 90 XM_CamelCaseFrm001 8842 2.11 2.88 1.86 91 BOTNET 8780 7.30 24.00 1.85 92 XM_DK_Undo_01 8509 1.60 1.00 1.79 93 TooManyTo_003 8452 1.66 1.29 1.78 94 SUBJ_ALL_CAPS 8402 1.80 1.89 1.77 95 RCVD_IN_IADB_OPTIN 8359 1.49 0.67 1.76 96 RCVD_IN_MSPIKE_WL 8350 1.41 0.34 1.76 97 RCVD_IN_MSPIKE_H3 8333 1.41 0.34 1.76 98 URI_HEX 8285 2.23 3.72 1.75 99 IN_HORDE_ADDRESS_BOOK 8048 1.29 0.06 1.70 100 XMDiploma_00 8037 2.00 2.92 1.69 101 XM_OfRef6 7962 1.75 1.96 1.68 102 INVALID_MSGID 7213 1.19 0.17 1.52 103 XMCapTrack 7169 1.20 0.24 1.51 104 TR_Symld_Words 7120 1.39 1.06 1.50 105 RELAYCOUNTRY_CA 7064 1.87 3.02 1.49 106 BAYES_95 7052 1.95 3.36 1.49 107 TR_MetaPhish_Combo_01 6432 1.21 0.75 1.36 108 TooManyTo_004 6360 1.30 1.18 1.34 109 T_XMDrugObfuBody_08 6358 1.47 1.88 1.34 110 URI_TRY_3LD 6313 1.22 0.90 1.33 111 UNTRUSTED_Relay 6163 4.02 12.36 1.30 112 USER_IN_DEF_DKIM_WL 5452 0.89 0.08 1.15 113 XMPhish11 5428 1.40 2.18 1.14 114 XM_H_Long_From02 5409 1.13 1.09 1.14 115 TooManyTo_005 5311 1.12 1.11 1.12 116 XM_GoogleGroups 5309 1.15 1.25 1.12 117 XMGenDplmaNmb 5276 1.42 2.35 1.11 118 XM_H_PHPOS 5119 1.08 1.08 1.08 119 XM_salutation2 5116 1.86 4.27 1.08 120 MIME_HTML_ONLY_MULTI 4966 1.86 4.33 1.05 121 TM2_M_VERY_LONG_WORD 4811 1.15 1.56 1.01 122 DKIM_ADSP_CUSTOM_MED 4787 0.96 0.81 1.01 123 RELAYCOUNTRY_GB 4672 1.03 1.17 0.98 124 XMStockSpam_06 4343 1.35 2.67 0.92 125 XMSexyCombo_01 4287 1.47 3.21 0.90 126 T_FILL_THIS_FORM_SHORT 4242 0.86 0.75 0.89 127 SpammyFromTLD_01 3971 1.02 1.59 0.84 128 PLING_QUERY 3826 0.78 0.70 0.81 129 T_XMHurry_00 3672 0.94 1.44 0.77 130 XM_ProductURIs 3634 0.94 1.47 0.77 131 T_Symld_Words_02 3633 0.74 0.64 0.77 132 XM_RXBody 3577 1.26 2.80 0.75 133 XM_H_PHPMailer 3503 0.72 0.68 0.74 134 XM_UB50 3447 2.10 6.32 0.73 135 XMSubMetaI_00 3407 0.96 1.69 0.72 136 NML_ADSP_CUSTOM_MED 3374 0.72 0.74 0.71 137 T_OBFU_PDF_ATTACH 3359 0.57 0.14 0.71 138 T_TooManySym_03 3309 0.59 0.25 0.70 139 XMBody_17 3176 0.77 1.08 0.67 140 XMPhish14 3076 0.75 1.08 0.65 141 XMNoVowels 2996 0.56 0.33 0.63 142 XMBrknScrpt_02 2986 0.63 0.64 0.63 143 XMBody_95 2977 0.50 0.11 0.63 144 XMLngstWrd_00 2924 0.54 0.30 0.62 145 T_XMDrugObfuBody_00 2837 0.72 1.08 0.60 146 USER_IN_WHITELIST 2837 0.45 0.00 0.60 147 FILL_THIS_FORM 2773 0.56 0.49 0.58 148 XMLngstWrd_01 2692 0.50 0.29 0.57 149 AC_DIV_BONANZA 2609 0.45 0.13 0.55 150 DKIM_ADSP_NXDOMAIN 2604 1.22 3.28 0.55 151 HTTPS_HTTP_MISMATCH 2602 0.58 0.69 0.55 152 XMMoneyMeta_00 2600 0.55 0.55 0.55 153 TR_XM_RelayPhish 2538 0.92 2.10 0.53 154 URI_NOVOWEL 2510 0.57 0.68 0.53 155 HTML_FONT_FACE_BAD 2484 0.67 1.11 0.52 156 MISSING_HEADERS 2452 0.72 1.33 0.52 157 DIET_1 2427 0.72 1.37 0.51 158 FROM_GOV_SPOOF 2402 0.44 0.22 0.51 159 XMBody_78 2374 0.70 1.30 0.50 160 XMSubMetaSxObfu_02 2374 0.44 0.26 0.50 161 TM2_M_BODY_EMPTY 2365 0.41 0.14 0.50 162 FORGED_GMAIL_RCVD 2360 0.54 0.67 0.50 163 RELAYCOUNTRY_DE 2353 0.53 0.63 0.50 164 XM_ShortIntro_01 2346 0.45 0.33 0.49 165 HTML_TAG_BALANCE_BODY 2323 0.50 0.54 0.49 166 SHORT_HELO_AND_INLINE_IMAGE 2276 0.37 0.05 0.48 167 XMHTMLBadTable_001 2261 0.58 0.88 0.48 168 XMHTML_After_End 2252 0.74 1.54 0.47 169 XMSubMetaSxObfu_03 2183 0.91 2.27 0.46 170 RELAYCOUNTRY_AU 2174 0.45 0.45 0.46 171 XMDateMe_00 2160 0.42 0.32 0.46 172 XM_B_COPY_HTML 2129 0.53 0.79 0.45 173 XMGappySubj_01 2126 0.41 0.28 0.45 174 XM_B_REG_HTML 2124 0.67 1.34 0.45 175 XMBdyGiftCard01 2063 0.78 1.83 0.43 176 XMSubNoVowel 2057 0.69 1.50 0.43 177 HTML_IMAGE_ONLY_28 2022 0.44 0.47 0.43 178 HTML_IMAGE_ONLY_32 2002 0.43 0.46 0.42 179 SUBJ_DOLLARS 1946 0.55 0.96 0.41 180 XM_Body_Obfu01 1854 0.36 0.25 0.39 181 RCVD_IN_SORBS_DUL 1848 0.36 0.25 0.39 182 FROM_GOV_DKIM_AU 1822 0.31 0.10 0.38 183 XMPhish30 1816 0.63 1.40 0.38 184 XM_URI_RBL 1808 1.00 2.91 0.38 185 XMSexyCombo_04 1802 0.79 2.06 0.38 186 XM_H_PHPOS_M 1745 0.39 0.45 0.37 187 XMLKML 1724 0.27 0.00 0.36 188 HTML_IMAGE_ONLY_24 1683 0.33 0.27 0.35 189 RELAYCOUNTRY_NL 1642 0.38 0.50 0.35 190 RDNS_DYNAMIC 1609 0.52 1.08 0.34 191 T_HTML_ATTACH 1605 0.36 0.43 0.34 192 TVD_SPACE_RATIO 1589 0.31 0.24 0.33 193 TM2_M_A_HREF_HREF 1580 0.37 0.48 0.33 194 XMSolicitRefs_0 1544 0.65 1.64 0.33 195 TR_LOTS_OF_MONEY3 1477 2.33 8.51 0.31 196 T_FILL_THIS_FORM_LONG 1469 0.26 0.09 0.31 197 FSL_THIS_IS_ADV 1464 0.61 1.54 0.31 198 T_TooManySym_04 1462 0.24 0.02 0.31 199 URIBL_SBL_A 1439 0.64 1.69 0.30 200 XMSubEmpty 1434 0.28 0.22 0.30 ----------------------------------------------------------------------