Email: 682682 Autolearn: 0 AvgScore: 1.82 AvgScanTime: 2.01 sec Spam: 158727 Autolearn: 0 AvgScore: 12.07 AvgScanTime: 2.42 sec Ham: 523955 Autolearn: 0 AvgScore: -1.29 AvgScanTime: 1.89 sec Time Spent Running SA: 381.71 hours Time Spent Processing Spam: 106.56 hours Time Spent Processing Ham: 275.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 110864 83.40 69.85 87.51 2 BAYES_50 96973 59.21 61.09 58.63 3 DKIM_SIGNED 92839 69.12 58.49 72.34 4 DCC_CHECK 92736 44.46 58.42 40.24 5 XM_DK_Pass 89663 67.70 56.49 71.10 6 DKIM_VALID 84049 64.26 52.95 67.68 7 XMListUnsubscribeExists 79845 50.01 50.30 49.92 8 DKIM_VALID_AU 66103 47.50 41.65 49.27 9 DCC_CHECK_NEGATIVE 63837 53.58 40.22 57.63 10 BOTNET 62491 10.68 39.37 2.00 11 XM_H_QuotedFrom 59919 39.52 37.75 40.06 12 LOTS_OF_MONEY 56674 14.46 35.71 8.02 13 XM_OfRef6 44479 7.52 28.02 1.31 14 RCVD_IN_RP_RNBL 44447 6.56 28.00 0.07 15 XM_Multi_Part_URI 43599 15.17 27.47 11.44 16 HTML_FONT_LOW_CONTRAST 43338 26.86 27.30 26.72 17 XM_DK_Undo_02 42817 11.77 26.98 7.16 18 LOC_TINY_FONT_1 41917 23.00 26.41 21.97 19 T_FILL_THIS_FORM_SHORT 41770 6.84 26.32 0.94 20 XM_OfRef7 41589 6.27 26.20 0.23 21 ANY_BOUNCE_MESSAGE 41373 7.66 26.07 2.09 22 BOUNCE_MESSAGE 41369 7.66 26.06 2.09 23 MONEY_FORM_SHORT 41019 6.02 25.84 0.01 24 FVGT_m_MULTI_ODD 40359 21.36 25.43 20.13 25 MIME_HTML_ONLY 39568 20.93 24.93 19.72 26 HK_SCAM_N2 37527 5.50 23.64 0.01 27 BAYES_99 32902 8.88 20.73 5.30 28 XMSubLong 32612 20.71 20.55 20.76 29 BAYES_999 26583 7.27 16.75 4.40 30 TR_DCC_Bayes_99 26579 5.95 16.75 2.67 31 DKIM_VALID_EF 26150 23.52 16.47 25.66 32 T_KAM_HTML_FONT_INVALID 24038 16.19 15.14 16.51 33 XM_Body_Dirty_Words 24014 12.71 15.13 11.97 34 RELAYCOUNTRY_META 23482 7.37 14.79 5.12 35 T_TM2_M_HEADER_IN_MSG 22839 26.07 14.39 29.61 36 BOTNET_IPINHOSTNAME 21922 6.82 13.81 4.71 37 MultiRelay 19904 16.41 12.54 17.58 38 DATE_IN_PAST_03_06 19038 2.88 11.99 0.12 39 FSL_BULK_SIG 18794 7.42 11.84 6.08 40 XM_Evil_Numbers_Gen 16510 8.87 10.40 8.40 41 XM_OfRef8 15854 2.34 9.99 0.02 42 HTML_IMAGE_RATIO_02 15357 8.92 9.68 8.69 43 UNTRUSTED_Relay 14964 3.16 9.43 1.27 44 XM_UncommonTLD01 13763 4.81 8.67 3.63 45 XMSexyCombo_05 12637 4.85 7.96 3.91 46 HTML_IMAGE_RATIO_04 11575 5.82 7.29 5.38 47 T_XMDrugObfuBody_14 10848 7.49 6.83 7.69 48 TooManyTo_001 10804 8.14 6.81 8.55 49 XM_H_Long_From01 10262 6.54 6.47 6.56 50 XMSubMetaSx_00 9379 4.68 5.91 4.31 51 XM_B_Phish_Phrases 9105 5.45 5.74 5.37 52 DKIM_INVALID 8790 4.86 5.54 4.66 53 BAYES_80 8602 3.26 5.42 2.61 54 MPART_ALT_DIFF 8452 3.97 5.32 3.56 55 LotsOfNums_01 8213 7.58 5.17 8.31 56 FROM_EXCESS_BASE64 7720 4.19 4.86 3.99 57 T_REMOTE_IMAGE 7716 3.98 4.86 3.72 58 BAYES_60 7476 4.56 4.71 4.52 59 XM_UB50 7402 1.63 4.66 0.72 60 XMNumbers 7057 3.23 4.45 2.86 61 HTML_MIME_NO_HTML_TAG 6631 2.73 4.18 2.30 62 XM_SPF_SoftFail 6203 2.64 3.91 2.25 63 XM_URI_RBL 6199 1.28 3.91 0.49 64 XM_DIRTYINTL 5688 2.21 3.58 1.79 65 MIME_HTML_ONLY_MULTI 5482 1.94 3.45 1.48 66 HTML_IMAGE_RATIO_06 5480 3.02 3.45 2.90 67 TM2_M_URI_OPT_OUT 5196 2.37 3.27 2.10 68 MIME_HTML_MOSTLY 4987 3.04 3.14 3.01 69 DATE_IN_PAST_06_12 4865 0.74 3.07 0.04 70 MultiRelay_Combo 4562 0.79 2.87 0.16 71 MultiRelay_CC 4562 0.79 2.87 0.16 72 RELAYCOUNTRY_CA 4521 1.83 2.85 1.53 73 URI_HEX 4491 1.81 2.83 1.51 74 BODY_URI_ONLY 4470 0.70 2.82 0.05 75 HTML_SHORT_LINK_IMG_1 4459 0.68 2.81 0.03 76 XM_CamelCaseFrm001 4103 2.16 2.58 2.03 77 SpammyFromTLD_02 4056 0.80 2.56 0.27 78 BAYES_95 4020 1.84 2.53 1.63 79 HTML_IMAGE_RATIO_08 4001 2.34 2.52 2.28 80 XM_SendGrid 3733 5.06 2.35 5.88 81 MIME_QP_LONG_LINE 3716 4.82 2.34 5.58 82 BOTNET_NORDNS 3506 0.53 2.21 0.03 83 T_XMDrugObfuBody_08 3399 1.63 2.14 1.47 84 XMStrtUSub 3390 4.41 2.14 5.09 85 RCVD_IN_RP_SAFE 3332 8.12 2.10 9.95 86 RCVD_IN_MSPIKE_H2 3297 3.82 2.08 4.34 87 RCVD_IN_BL_SPAMCOP_NET 3141 0.82 1.98 0.47 88 T_TooManySym_01 2996 3.96 1.89 4.59 89 MIME_HEADER_CTYPE_ONLY 2987 0.54 1.88 0.13 90 XMDiploma_00 2978 1.61 1.88 1.53 91 HTML_IMAGE_ONLY_04 2970 0.48 1.87 0.06 92 BAYES_40 2962 4.04 1.87 4.70 93 SHORTENER_SHORT_IMG 2860 0.42 1.80 0.00 94 XM_ProductURIs 2854 1.03 1.80 0.80 95 XM_UB60 2593 0.43 1.63 0.07 96 TM2_M_VERY_LONG_WORD 2573 1.05 1.62 0.88 97 XMSexyCombo_01 2493 0.81 1.57 0.58 98 NO_DNS_FOR_FROM 2483 1.21 1.56 1.11 99 RCVD_IN_RP_CERTIFIED 2466 7.06 1.55 8.73 100 XMGenDplmaNmb 2434 1.15 1.53 1.03 101 XMSubMetaI_00 2406 0.86 1.52 0.66 102 XMPhish30 2362 0.69 1.49 0.45 103 MAILING_LIST_MULTI 2343 2.11 1.48 2.30 104 HTML_SHORT_CENTER 2341 0.35 1.47 0.00 105 SpammyFromTLD_01 2307 0.90 1.45 0.73 106 BAYES_20 2280 3.18 1.44 3.71 107 T_XMDrugObfuBody_00 2261 0.82 1.42 0.64 108 SUBJ_ALL_CAPS 2251 2.42 1.42 2.72 109 XMPhish11 2210 1.16 1.39 1.09 110 XM_salutation2 2171 0.82 1.37 0.66 111 XMStockSpam_06 2120 1.05 1.34 0.96 112 UNPARSEABLE_RELAY 2119 2.33 1.33 2.63 113 TR_Symld_Words 2110 2.14 1.33 2.38 114 DIET_1 2062 0.65 1.30 0.46 115 T_MONEY_PERCENT 2056 0.57 1.30 0.35 116 TR_LOTS_OF_MONEY2 2056 0.57 1.30 0.35 117 XMBdyGiftCard01 2034 0.83 1.28 0.69 118 T_XMHurry_00 1940 0.67 1.22 0.50 119 TR_XM_RelayPhish 1936 0.75 1.22 0.61 120 XMBody_17 1934 1.02 1.22 0.96 121 RELAYCOUNTRY_CN 1911 0.32 1.20 0.06 122 HTML_IMAGE_ONLY_12 1895 0.47 1.19 0.24 123 FROM_SUSPICIOUS_NTLD 1894 0.39 1.19 0.15 124 RCVD_IN_IADB_LISTED 1893 4.70 1.19 5.76 125 RELAYCOUNTRY_GB 1858 1.05 1.17 1.01 126 XM_DK_Undo_01 1849 1.55 1.16 1.66 127 BAYES_00 1820 12.92 1.15 16.48 128 URIBL_BLACK 1814 0.33 1.14 0.09 129 NORMAL_HTTP_TO_IP 1711 0.32 1.08 0.09 130 XMHTML_After_End 1688 0.58 1.06 0.43 131 RCVD_IN_IADB_SPF 1678 4.15 1.06 5.09 132 XM_H_PHPOS 1670 1.48 1.05 1.60 133 XM_UB99 1669 0.26 1.05 0.02 134 RCVD_IN_IADB_SENDERID 1595 3.71 1.00 4.52 135 RCVD_IN_IADB_DK 1585 3.63 1.00 4.43 136 ALL_TRUSTED 1584 14.74 1.00 18.91 137 RELAYCOUNTRY_IN 1577 0.31 0.99 0.11 138 FSL_THIS_IS_ADV 1574 0.50 0.99 0.36 139 DKIM_ADSP_CUSTOM_MED 1557 1.05 0.98 1.07 140 XM_H_Long_From02 1553 1.01 0.98 1.02 141 XM_XX_Yahoo 1525 0.27 0.96 0.06 142 RELAYCOUNTRY_NL 1515 0.43 0.95 0.27 143 RELAYCOUNTRY_FR 1498 0.40 0.94 0.23 144 FILL_THIS_FORM 1446 0.55 0.91 0.44 145 NORDNS_LOW_CONTRAST 1442 0.23 0.91 0.03 146 NML_ADSP_CUSTOM_MED 1441 0.76 0.91 0.71 147 XMBody_78 1419 0.68 0.89 0.62 148 XMSubMetaSxObfu_03 1416 0.55 0.89 0.45 149 XMMoneyMeta_00 1402 0.68 0.88 0.62 150 LONG_JUNK_URI 1386 0.25 0.87 0.06 151 TVD_SPACE_RATIO_MINFP 1349 0.22 0.85 0.03 152 TR_Mismatch_TLD_02 1339 0.25 0.84 0.07 153 BAYES_05 1330 1.85 0.84 2.16 154 XM_UB80 1328 0.22 0.84 0.03 155 TR_XM_DK_Bayes 1325 10.23 0.83 13.08 156 URI_NOVOWEL 1299 0.65 0.82 0.59 157 XMSlimDrugH 1277 0.49 0.80 0.39 158 XMPhish14 1236 0.41 0.78 0.30 159 DEAR_FRIEND 1219 0.24 0.77 0.08 160 XM_UB999 1205 0.19 0.76 0.01 161 XMSexyCombo_04 1171 0.30 0.74 0.16 162 LongTLD 1167 0.38 0.74 0.27 163 RELAYCOUNTRY_AT 1163 0.35 0.73 0.23 164 XM_PDF 1162 4.72 0.73 5.93 165 RELAYCOUNTRY_AU 1162 0.62 0.73 0.59 166 RDNS_DYNAMIC 1158 0.51 0.73 0.45 167 FORGED_GMAIL_RCVD 1152 0.61 0.73 0.58 168 BODY_ENHANCEMENT 1140 0.17 0.72 0.01 169 TR_XM_DK_Bayes1 1137 9.74 0.72 12.47 170 URI_TRY_3LD 1127 1.18 0.71 1.32 171 T_Symld_Words_02 1125 0.61 0.71 0.58 172 FILL_THIS_FORM_LONG 1104 0.42 0.70 0.33 173 XM_HighProb1 1094 0.16 0.69 0.00 174 XMNoVowels 1094 0.57 0.69 0.53 175 RCVD_IN_IADB_VOUCHED 1084 2.97 0.68 3.67 176 XMSolicitRefs_0 1075 0.47 0.68 0.40 177 ADVANCE_FEE_5_NEW_MONEY 1067 0.16 0.67 0.00 178 HTML_FONT_FACE_BAD 1064 0.52 0.67 0.47 179 LONG_HEX_URI 1038 0.27 0.65 0.15 180 TR_XM_DK_Bayes2 1029 8.29 0.65 10.61 181 XMGppyBdWords 1016 0.37 0.64 0.29 182 HTML_FONT_SIZE_LARGE 1011 0.31 0.64 0.21 183 SUBJ_DOLLARS 997 0.33 0.63 0.24 184 URI_HEX_IP 995 0.15 0.63 0.00 185 TR_MetaPhish_Combo_01 995 1.41 0.63 1.65 186 HELO_NODOT 989 1.35 0.62 1.57 187 XM_Hitman 983 0.20 0.62 0.08 188 FILL_THIS_FORM_LOAN 974 0.38 0.61 0.31 189 RELAYCOUNTRY_DE 973 0.41 0.61 0.35 190 XMBrknScrpt_02 968 0.48 0.61 0.45 191 TooManyTo_002 950 1.71 0.60 2.05 192 XMHTMLBadTable_001 938 0.57 0.59 0.57 193 XM_H_PHPMailer 931 0.58 0.59 0.58 194 MPART_ALT_DIFF_COUNT 922 0.29 0.58 0.20 195 RCVD_IN_IADB_OPTIN 888 1.96 0.56 2.39 196 TR_LOTS_OF_MONEY3 882 0.33 0.56 0.26 197 HTML_TAG_BALANCE_BODY 874 0.60 0.55 0.62 198 TEQF_USR_POLITE 862 0.13 0.54 0.00 199 XM_OverStock_LProb 861 0.14 0.54 0.02 200 XMSubGiftCard1 849 0.16 0.53 0.05 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 458501 83.40 69.85 87.51 2 DKIM_SIGNED 379033 69.12 58.49 72.34 3 XM_DK_Pass 372536 67.70 56.49 71.10 4 DKIM_VALID 354637 64.26 52.95 67.68 5 BAYES_50 307210 59.21 61.09 58.63 6 DCC_CHECK_NEGATIVE 301974 53.58 40.22 57.63 7 XMListUnsubscribeExists 261584 50.01 50.30 49.92 8 DKIM_VALID_AU 258177 47.50 41.65 49.27 9 DCC_CHECK 210814 44.46 58.42 40.24 10 XM_H_QuotedFrom 209911 39.52 37.75 40.06 11 T_TM2_M_HEADER_IN_MSG 155139 26.07 14.39 29.61 12 HTML_FONT_LOW_CONTRAST 140005 26.86 27.30 26.72 13 DKIM_VALID_EF 134431 23.52 16.47 25.66 14 LOC_TINY_FONT_1 115127 23.00 26.41 21.97 15 XMSubLong 108798 20.71 20.55 20.76 16 FVGT_m_MULTI_ODD 105449 21.36 25.43 20.13 17 MIME_HTML_ONLY 103311 20.93 24.93 19.72 18 ALL_TRUSTED 99075 14.74 1.00 18.91 19 MultiRelay 92117 16.41 12.54 17.58 20 T_KAM_HTML_FONT_INVALID 86491 16.19 15.14 16.51 21 BAYES_00 86363 12.92 1.15 16.48 22 TR_XM_DK_Bayes 68529 10.23 0.83 13.08 23 TR_XM_DK_Bayes1 65330 9.74 0.72 12.47 24 XM_Body_Dirty_Words 62728 12.71 15.13 11.97 25 XM_Multi_Part_URI 59959 15.17 27.47 11.44 26 XM_DKIMWhitelistDomains 56854 8.33 0.01 10.85 27 TR_XM_DK_Bayes2 55575 8.29 0.65 10.61 28 RCVD_IN_RP_SAFE 52113 8.12 2.10 9.95 29 RCVD_IN_RP_CERTIFIED 45759 7.06 1.55 8.73 30 HTML_IMAGE_RATIO_02 45508 8.92 9.68 8.69 31 TooManyTo_001 44774 8.14 6.81 8.55 32 XM_Evil_Numbers_Gen 44035 8.87 10.40 8.40 33 LotsOfNums_01 43545 7.58 5.17 8.31 34 LOTS_OF_MONEY 42027 14.46 35.71 8.02 35 T_XMDrugObfuBody_14 40315 7.49 6.83 7.69 36 XM_DK_Undo_02 37504 11.77 26.98 7.16 37 XM_H_Long_From01 34354 6.54 6.47 6.56 38 FSL_BULK_SIG 31837 7.42 11.84 6.08 39 XM_PDF 31086 4.72 0.73 5.93 40 XM_SendGrid 30834 5.06 2.35 5.88 41 RCVD_IN_IADB_LISTED 30194 4.70 1.19 5.76 42 MIME_QP_LONG_LINE 29221 4.82 2.34 5.58 43 HTML_IMAGE_RATIO_04 28184 5.82 7.29 5.38 44 XM_B_Phish_Phrases 28111 5.45 5.74 5.37 45 BAYES_99 27744 8.88 20.73 5.30 46 RELAYCOUNTRY_META 26841 7.37 14.79 5.12 47 XMStrtUSub 26692 4.41 2.14 5.09 48 RCVD_IN_IADB_SPF 26656 4.15 1.06 5.09 49 BOTNET_IPINHOSTNAME 24664 6.82 13.81 4.71 50 BAYES_40 24618 4.04 1.87 4.70 51 DKIM_INVALID 24396 4.86 5.54 4.66 52 T_TooManySym_01 24052 3.96 1.89 4.59 53 RCVD_IN_IADB_SENDERID 23707 3.71 1.00 4.52 54 BAYES_60 23681 4.56 4.71 4.52 55 RCVD_IN_IADB_DK 23226 3.63 1.00 4.43 56 BAYES_999 23043 7.27 16.75 4.40 57 RCVD_IN_MSPIKE_H2 22749 3.82 2.08 4.34 58 XMSubMetaSx_00 22562 4.68 5.91 4.31 59 FROM_EXCESS_BASE64 20903 4.19 4.86 3.99 60 XMSexyCombo_05 20483 4.85 7.96 3.91 61 T_REMOTE_IMAGE 19475 3.98 4.86 3.72 62 BAYES_20 19413 3.18 1.44 3.71 63 IN_ZIMBRA_NJ_WHITELIST 19400 2.85 0.02 3.70 64 RCVD_IN_IADB_VOUCHED 19212 2.97 0.68 3.67 65 XM_UncommonTLD01 19044 4.81 8.67 3.63 66 MPART_ALT_DIFF 18641 3.97 5.32 3.56 67 MIME_HTML_MOSTLY 15771 3.04 3.14 3.01 68 HTML_IMAGE_RATIO_06 15169 3.02 3.45 2.90 69 XMNumbers 14984 3.23 4.45 2.86 70 SUBJ_ALL_CAPS 14237 2.42 1.42 2.72 71 TR_DCC_Bayes_99 14014 5.95 16.75 2.67 72 UNPARSEABLE_RELAY 13789 2.33 1.33 2.63 73 BAYES_80 13654 3.26 5.42 2.61 74 TVD_RCVD_IP 13385 2.01 0.21 2.55 75 RCVD_IN_IADB_OPTIN 12513 1.96 0.56 2.39 76 TR_Symld_Words 12469 2.14 1.33 2.38 77 HTML_MIME_NO_HTML_TAG 12033 2.73 4.18 2.30 78 MAILING_LIST_MULTI 12031 2.11 1.48 2.30 79 HTML_IMAGE_RATIO_08 11972 2.34 2.52 2.28 80 XM_SPF_SoftFail 11804 2.64 3.91 2.25 81 TO_MALFORMED 11648 1.72 0.04 2.22 82 BAYES_05 11325 1.85 0.84 2.16 83 TM2_M_URI_OPT_OUT 10990 2.37 3.27 2.10 84 ANY_BOUNCE_MESSAGE 10943 7.66 26.07 2.09 85 BOUNCE_MESSAGE 10935 7.66 26.06 2.09 86 TooManyTo_002 10724 1.71 0.60 2.05 87 XM_CamelCaseFrm001 10632 2.16 2.58 2.03 88 BOTNET 10453 10.68 39.37 2.00 89 RCVD_IN_MSPIKE_WL 9850 1.50 0.25 1.88 90 RCVD_IN_MSPIKE_H3 9834 1.50 0.25 1.88 91 T_OBFU_PDF_ATTACH 9586 1.44 0.17 1.83 92 XM_DIRTYINTL 9369 2.21 3.58 1.79 93 XM_DK_Undo_01 8706 1.55 1.16 1.66 94 TR_MetaPhish_Combo_01 8646 1.41 0.63 1.65 95 BAYES_95 8538 1.84 2.53 1.63 96 T_TooManySym_02 8476 1.35 0.46 1.62 97 XM_H_PHPOS 8403 1.48 1.05 1.60 98 IN_HORDE_ADDRESS_BOOK 8305 1.22 0.03 1.59 99 HELO_NODOT 8248 1.35 0.62 1.57 100 XMDiploma_00 8007 1.61 1.88 1.53 101 RELAYCOUNTRY_CA 7999 1.83 2.85 1.53 102 URI_HEX 7898 1.81 2.83 1.51 103 MIME_HTML_ONLY_MULTI 7756 1.94 3.45 1.48 104 T_XMDrugObfuBody_08 7700 1.63 2.14 1.47 105 INVALID_MSGID 7261 1.10 0.15 1.39 106 TooManyTo_003 7166 1.15 0.44 1.37 107 XMCapTrack 6940 1.09 0.31 1.32 108 URI_TRY_3LD 6898 1.18 0.71 1.32 109 XM_OfRef6 6868 7.52 28.02 1.31 110 UNTRUSTED_Relay 6629 3.16 9.43 1.27 111 NO_DNS_FOR_FROM 5809 1.21 1.56 1.11 112 XMPhish11 5726 1.16 1.39 1.09 113 XM_GoogleGroups 5648 0.92 0.39 1.08 114 DKIM_ADSP_CUSTOM_MED 5594 1.05 0.98 1.07 115 UPPERCASE_75_100 5453 0.81 0.05 1.04 116 XMGenDplmaNmb 5403 1.15 1.53 1.03 117 XM_H_Long_From02 5339 1.01 0.98 1.02 118 RELAYCOUNTRY_GB 5300 1.05 1.17 1.01 119 TooManyTo_004 5205 0.85 0.36 0.99 120 XMStockSpam_06 5054 1.05 1.34 0.96 121 XMBody_17 5022 1.02 1.22 0.96 122 USER_IN_DEF_DKIM_WL 4950 0.73 0.00 0.94 123 T_FILL_THIS_FORM_SHORT 4913 6.84 26.32 0.94 124 TM2_M_VERY_LONG_WORD 4606 1.05 1.62 0.88 125 TooManyTo_005 4236 0.69 0.30 0.81 126 XM_ProductURIs 4190 1.03 1.80 0.80 127 SpammyFromTLD_01 3823 0.90 1.45 0.73 128 XM_UB50 3748 1.63 4.66 0.72 129 NML_ADSP_CUSTOM_MED 3726 0.76 0.91 0.71 130 XMBdyGiftCard01 3615 0.83 1.28 0.69 131 TO_NO_BRKTS_HTML_ONLY 3614 0.56 0.15 0.69 132 XM_salutation2 3457 0.82 1.37 0.66 133 XMSubMetaI_00 3449 0.86 1.52 0.66 134 T_XMDrugObfuBody_00 3358 0.82 1.42 0.64 135 XMBody_78 3257 0.68 0.89 0.62 136 USER_IN_WHITELIST 3255 0.48 0.00 0.62 137 XMMoneyMeta_00 3248 0.68 0.88 0.62 138 HTML_TAG_BALANCE_BODY 3240 0.60 0.55 0.62 139 TR_XM_RelayPhish 3209 0.75 1.22 0.61 140 XM_B_REG_HTML 3165 0.55 0.35 0.60 141 URI_NOVOWEL 3117 0.65 0.82 0.59 142 XMLngstWrd_00 3084 0.52 0.29 0.59 143 RELAYCOUNTRY_AU 3070 0.62 0.73 0.59 144 XM_H_PHPMailer 3054 0.58 0.59 0.58 145 XMSexyCombo_01 3040 0.81 1.57 0.58 146 T_Symld_Words_02 3039 0.61 0.71 0.58 147 FORGED_GMAIL_RCVD 3015 0.61 0.73 0.58 148 XMHTMLBadTable_001 2986 0.57 0.59 0.57 149 URI_WPADMIN 2978 0.45 0.05 0.57 150 XMLngstWrd_01 2884 0.49 0.27 0.55 151 HTTPS_HTTP_MISMATCH 2796 0.51 0.44 0.53 152 XMNoVowels 2771 0.57 0.69 0.53 153 REMOVE_BEFORE_LINK 2765 0.50 0.40 0.53 154 XMBody_95 2747 0.45 0.20 0.52 155 XM_B_COPY_HTML 2734 0.50 0.42 0.52 156 FROM_GOV_SPOOF 2725 0.46 0.28 0.52 157 T_TooManySym_03 2705 0.42 0.10 0.52 158 XMGappySubj_01 2688 0.51 0.49 0.51 159 XM_ShortIntro_01 2676 0.51 0.49 0.51 160 T_XMHurry_00 2640 0.67 1.22 0.50 161 XM_URI_RBL 2547 1.28 3.91 0.49 162 RCVD_IN_BL_SPAMCOP_NET 2468 0.82 1.98 0.47 163 HTML_FONT_FACE_BAD 2464 0.52 0.67 0.47 164 TM2_M_A_HREF_HREF 2456 0.47 0.48 0.47 165 SHORT_HELO_AND_INLINE_IMAGE 2420 0.36 0.04 0.46 166 DIET_1 2387 0.65 1.30 0.46 167 XMPhish30 2378 0.69 1.49 0.45 168 XMSubMetaSxObfu_03 2368 0.55 0.89 0.45 169 PLING_QUERY 2363 0.43 0.35 0.45 170 RDNS_DYNAMIC 2345 0.51 0.73 0.45 171 XMBrknScrpt_02 2336 0.48 0.61 0.45 172 FILL_THIS_FORM 2282 0.55 0.91 0.44 173 DKIM_ADSP_NXDOMAIN 2248 0.45 0.51 0.43 174 TM2_M_BODY_EMPTY 2247 0.39 0.28 0.43 175 XMHTML_After_End 2241 0.58 1.06 0.43 176 XMSubMetaSxObfu_02 2222 0.38 0.21 0.42 177 MISSING_HEADERS 2183 0.44 0.50 0.42 178 XM_Body_Obfu01 2148 0.40 0.38 0.41 179 XMSolicitRefs_0 2122 0.47 0.68 0.40 180 XM_Combo_Sbj 2067 0.39 0.36 0.39 181 BASE64_LENGTH_79_INF 2047 0.33 0.13 0.39 182 XMSlimDrugH 2044 0.49 0.80 0.39 183 HTML_IMAGE_ONLY_32 2010 0.36 0.28 0.38 184 XMDateMe_00 1964 0.36 0.32 0.37 185 XM_shorewaves_Whitelist 1930 0.28 0.00 0.37 186 HTML_IMAGE_ONLY_28 1889 0.37 0.39 0.36 187 TVD_SPACE_RATIO 1877 0.32 0.21 0.36 188 FROM_GOV_DKIM_AU 1871 0.30 0.13 0.36 189 FSL_THIS_IS_ADV 1861 0.50 0.99 0.36 190 T_MONEY_PERCENT 1849 0.57 1.30 0.35 191 TR_LOTS_OF_MONEY2 1849 0.57 1.30 0.35 192 RELAYCOUNTRY_DE 1829 0.41 0.61 0.35 193 HTML_IMAGE_ONLY_20 1766 0.31 0.23 0.34 194 FILL_THIS_FORM_LONG 1738 0.42 0.70 0.33 195 AC_DIV_BONANZA 1726 0.28 0.11 0.33 196 XM_USANA_RCVD 1723 0.25 0.00 0.33 197 HTML_IMAGE_ONLY_24 1682 0.31 0.29 0.32 198 XMSubMetaSSx_00 1619 0.34 0.42 0.31 199 FILL_THIS_FORM_LOAN 1615 0.38 0.61 0.31 200 XM_S_JOY_D 1573 0.31 0.35 0.30 ----------------------------------------------------------------------