Email: 589719 Autolearn: 0 AvgScore: 1.73 AvgScanTime: 2.00 sec Spam: 123762 Autolearn: 0 AvgScore: 13.33 AvgScanTime: 2.32 sec Ham: 465957 Autolearn: 0 AvgScore: -1.36 AvgScanTime: 1.92 sec Time Spent Running SA: 328.19 hours Time Spent Processing Spam: 79.67 hours Time Spent Processing Ham: 248.52 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 116752 88.81 94.34 87.34 2 DCC_CHECK 87998 47.51 71.10 41.24 3 DKIM_SIGNED 86897 74.03 70.21 75.05 4 XM_DK_Pass 84422 72.39 68.21 73.50 5 DKIM_VALID 80089 68.95 64.71 70.07 6 XMListUnsubscribeExists 76368 53.51 61.71 51.34 7 DKIM_VALID_AU 66651 51.61 53.85 51.01 8 XM_H_QuotedFrom 56391 41.07 45.56 39.87 9 BAYES_50 52797 54.24 42.66 57.32 10 MIME_HTML_ONLY 49728 25.05 40.18 21.03 11 HTML_FONT_LOW_CONTRAST 42005 30.08 33.94 29.06 12 XM_DK_Undo_02 40950 13.20 33.09 7.92 13 BAYES_99 40676 11.62 32.87 5.97 14 RELAYCOUNTRY_META 37799 11.34 30.54 6.23 15 LOC_TINY_FONT_1 37796 24.16 30.54 22.47 16 XMSubLong 36306 24.69 29.34 23.46 17 BAYES_999 34295 9.82 27.71 5.06 18 DCC_CHECK_NEGATIVE 33885 50.62 27.38 56.79 19 FVGT_m_MULTI_ODD 29199 21.74 23.59 21.24 20 UNTRUSTED_Relay 25964 6.29 20.98 2.38 21 XM_Body_Dirty_Words 24839 14.84 20.07 13.45 22 TR_DCC_Bayes_99 24779 6.77 20.02 3.24 23 DKIM_VALID_EF 23836 25.13 19.26 26.69 24 FROM_EXCESS_BASE64 22576 7.20 18.24 4.26 25 T_TM2_M_HEADER_IN_MSG 22373 28.22 18.08 30.91 26 BOTNET 20974 5.18 16.95 2.06 27 T_KAM_HTML_FONT_INVALID 20481 16.86 16.55 16.95 28 BOTNET_IPINHOSTNAME 19832 7.31 16.02 5.00 29 HTML_MIME_NO_HTML_TAG 19331 5.13 15.62 2.34 30 T_REMOTE_IMAGE 19110 6.29 15.44 3.86 31 MultiRelay 18108 17.10 14.63 17.75 32 FSL_BULK_SIG 16858 8.19 13.62 6.75 33 HTML_IMAGE_RATIO_02 16520 9.78 13.35 8.83 34 MISSING_HEADERS 16483 3.13 13.32 0.42 35 XM_Multi_Part_URI 16279 12.60 13.15 12.46 36 BODY_URI_ONLY 16146 2.82 13.05 0.11 37 MIME_HEADER_CTYPE_ONLY 16121 2.82 13.03 0.11 38 HTML_SHORT_LINK_IMG_1 14775 2.54 11.94 0.04 39 RELAYCOUNTRY_FR 14472 2.62 11.69 0.21 40 HTML_IMAGE_ONLY_04 13991 2.41 11.30 0.05 41 HTML_SHORT_CENTER 13930 2.37 11.26 0.00 42 LOTS_OF_MONEY 13709 10.50 11.08 10.34 43 XM_Evil_Numbers_Gen 13543 8.94 10.94 8.40 44 XMSexyCombo_05 13433 5.74 10.85 4.38 45 XM_UncommonTLD01 12882 4.54 10.41 2.98 46 XM_JunkDunk 12313 2.09 9.95 0.00 47 XMNumbers 12270 4.26 9.91 2.76 48 TooManyTo_001 12007 8.78 9.70 8.53 49 XM_UB99 10993 1.88 8.88 0.02 50 T_XMDrugObfuBody_14 10597 8.26 8.56 8.18 51 XMSubMetaSx_00 10235 5.58 8.27 4.86 52 XM_H_Long_From01 9926 6.77 8.02 6.44 53 XM_UB999 9605 1.63 7.76 0.01 54 XM_B_Phish_Phrases 8831 6.52 7.14 6.36 55 BAYES_80 8522 3.56 6.89 2.68 56 BAYES_60 8456 5.10 6.83 4.64 57 MPART_ALT_DIFF 8393 4.10 6.78 3.39 58 HTML_IMAGE_RATIO_04 8310 5.92 6.71 5.71 59 XM_UB50 7956 2.69 6.43 1.70 60 HTML_IMAGE_RATIO_06 7317 4.14 5.91 3.67 61 XMStrtUSub 6814 4.58 5.51 4.33 62 DKIM_INVALID 6808 5.09 5.50 4.98 63 LotsOfNums_01 6776 7.81 5.48 8.44 64 XM_DIRTYINTL 6690 2.77 5.41 2.07 65 SpammyFromTLD_02 6635 1.45 5.36 0.42 66 RCVD_IN_RP_RNBL 6369 1.10 5.15 0.03 67 XM_URI_RBL 5267 1.35 4.26 0.58 68 XM_SPF_SoftFail 5233 2.48 4.23 2.01 69 RELAYCOUNTRY_CA 5118 2.12 4.14 1.59 70 BAYES_95 5060 2.14 4.09 1.62 71 MIME_HTML_ONLY_MULTI 4979 1.95 4.02 1.40 72 MIME_HTML_MOSTLY 4884 3.13 3.95 2.91 73 TM2_M_URI_OPT_OUT 4571 2.17 3.69 1.77 74 URI_HEX 4494 2.05 3.63 1.63 75 MultiRelay_Combo 4429 0.86 3.58 0.14 76 MultiRelay_CC 4429 0.86 3.58 0.14 77 RELAYCOUNTRY_GB 4418 1.52 3.57 0.98 78 HTML_IMAGE_RATIO_08 4304 2.34 3.48 2.03 79 XMSexyCombo_01 4258 1.31 3.44 0.75 80 RCVD_IN_PSBL 4019 0.68 3.25 0.00 81 T_XMDrugObfuBody_08 4018 1.85 3.25 1.48 82 XM_OfRef6 3822 1.84 3.09 1.51 83 XM_CamelCaseFrm001 3821 2.11 3.09 1.85 84 FROM_SUSPICIOUS_NTLD 3596 0.65 2.91 0.06 85 DIET_1 3513 0.83 2.84 0.30 86 T_TooManySym_01 3499 4.91 2.83 5.47 87 RCVD_IN_BL_SPAMCOP_NET 3344 0.89 2.70 0.41 88 RCVD_IN_RP_SAFE 3277 8.93 2.65 10.60 89 RCVD_IN_MSPIKE_H2 3149 3.99 2.54 4.38 90 XM_SendGrid 3074 5.10 2.48 5.80 91 XMDiploma_00 3059 1.79 2.47 1.61 92 MIME_QP_LONG_LINE 2962 4.92 2.39 5.60 93 SUBJ_ALL_CAPS 2905 2.01 2.35 1.92 94 BOTNET_NORDNS 2755 0.48 2.23 0.01 95 SpammyFromTLD_01 2682 0.96 2.17 0.64 96 RCVD_IN_RP_CERTIFIED 2657 7.69 2.15 9.16 97 BAYES_40 2622 4.08 2.12 4.60 98 NO_DNS_FOR_FROM 2585 1.32 2.09 1.12 99 XMSexyCombo_04 2496 0.51 2.02 0.12 100 XMPhish11 2458 1.36 1.99 1.20 101 BAYES_20 2456 3.25 1.98 3.58 102 XMSlimDrugH 2424 0.73 1.96 0.41 103 XM_UB60 2356 0.46 1.90 0.07 104 XMBdyGiftCard01 2354 1.31 1.90 1.15 105 TR_XM_RelayPhish 2346 0.89 1.90 0.62 106 UNPARSEABLE_RELAY 2341 2.60 1.89 2.78 107 HTML_IMAGE_ONLY_28 2245 0.65 1.81 0.35 108 XM_H_TOP 2219 0.38 1.79 0.00 109 DATE_IN_PAST_06_12 2166 0.39 1.75 0.03 110 XMSubMetaI_00 2135 0.95 1.73 0.74 111 BODY_ENHANCEMENT 2126 0.39 1.72 0.03 112 ALL_TRUSTED 2086 13.15 1.69 16.20 113 FSL_THIS_IS_ADV 2043 0.44 1.65 0.12 114 XMPhish30 2026 0.65 1.64 0.38 115 DKIM_ADSP_CUSTOM_MED 2000 1.12 1.62 0.99 116 T_HTML_TAG_BALANCE_CENTER 2000 0.42 1.62 0.11 117 T_Symld_Words_02 2000 0.78 1.62 0.56 118 URIBL_BLACK 1968 0.38 1.59 0.06 119 NML_ADSP_CUSTOM_MED 1929 0.85 1.56 0.66 120 XM_UB95 1906 0.34 1.54 0.02 121 XMGenDplmaNmb 1830 1.14 1.48 1.06 122 RELAYCOUNTRY_CN 1813 0.34 1.46 0.04 123 XM_UB80 1789 0.33 1.45 0.04 124 HTML_IMAGE_ONLY_16 1783 0.50 1.44 0.25 125 NORMAL_HTTP_TO_IP 1775 0.36 1.43 0.08 126 TM2_M_VERY_LONG_WORD 1773 0.98 1.43 0.86 127 XMBody_78 1755 0.70 1.42 0.51 128 XMStockSpam_06 1744 1.40 1.41 1.40 129 MAILING_LIST_MULTI 1682 2.04 1.36 2.22 130 HK_RANDOM_FROM 1656 0.41 1.34 0.17 131 HTML_SHORT_LINK_IMG_2 1647 0.33 1.33 0.06 132 XMWghtMeta_00 1640 0.30 1.33 0.02 133 BAYES_00 1635 13.71 1.32 17.00 134 XMSubMetaSSx_00 1555 0.52 1.26 0.33 135 XM_H_Long_From02 1511 1.75 1.22 1.89 136 XM_salutation2 1505 0.80 1.22 0.69 137 XM_Body_Obfu01 1484 0.46 1.20 0.26 138 RELAYCOUNTRY_NL 1472 0.52 1.19 0.34 139 DATE_IN_PAST_03_06 1458 0.34 1.18 0.12 140 T_XMDrugObfuBody_00 1448 0.83 1.17 0.73 141 FORGED_GMAIL_RCVD 1433 0.61 1.16 0.46 142 TR_Symld_Words 1429 1.84 1.15 2.02 143 RCVD_IN_IADB_LISTED 1420 4.80 1.15 5.77 144 XMSubject_48 1412 0.25 1.14 0.02 145 FILL_THIS_FORM 1407 0.60 1.14 0.45 146 T_MONEY_PERCENT 1400 0.45 1.13 0.27 147 TR_LOTS_OF_MONEY2 1400 0.45 1.13 0.27 148 RELAYCOUNTRY_IN 1397 0.32 1.13 0.11 149 XMHTML_After_End 1374 0.53 1.11 0.38 150 XM_DK_Undo_01 1342 1.71 1.08 1.87 151 TVD_SPACE_RATIO_MINFP 1293 0.22 1.04 0.00 152 HTML_TAG_BALANCE_BODY 1265 0.63 1.02 0.53 153 XMBody_17 1261 0.78 1.02 0.71 154 RDNS_DYNAMIC 1229 0.55 0.99 0.43 155 TR_Mismatch_TLD_02 1227 0.26 0.99 0.06 156 TooManyTo_002 1219 1.80 0.98 2.02 157 BAYES_05 1218 1.98 0.98 2.25 158 DKIM_ADSP_NXDOMAIN 1215 0.49 0.98 0.36 159 RELAYCOUNTRY_DE 1214 0.54 0.98 0.43 160 RCVD_IN_IADB_SPF 1199 4.18 0.97 5.03 161 DEAR_FRIEND 1195 0.23 0.97 0.04 162 LONG_JUNK_URI 1181 0.26 0.95 0.08 163 XMSubMetaSxObfu_03 1163 0.63 0.94 0.54 164 XMBrknScrpt_02 1157 0.68 0.93 0.61 165 FILL_THIS_FORM_LONG 1147 0.49 0.93 0.38 166 XMNoVowels 1144 0.68 0.92 0.61 167 RELAYCOUNTRY_AT 1135 0.43 0.92 0.30 168 T_FILL_THIS_FORM_SHORT 1133 1.02 0.92 1.05 169 HTML_FONT_SIZE_LARGE 1131 0.32 0.91 0.16 170 URIBL_DBL_SPAM 1126 0.21 0.91 0.02 171 XMPhish14 1113 0.57 0.90 0.48 172 RCVD_IN_IADB_SENDERID 1100 3.68 0.89 4.42 173 RCVD_IN_IADB_DK 1079 3.60 0.87 4.33 174 TR_XM_DK_Bayes 1075 11.20 0.87 13.94 175 FILL_THIS_FORM_LOAN 1066 0.46 0.86 0.36 176 LONG_HEX_URI 1058 0.29 0.85 0.14 177 TooManyTo_003 1057 1.23 0.85 1.33 178 HELO_NODOT 1049 1.28 0.85 1.40 179 XM_ProductURIs 1045 0.88 0.84 0.88 180 SHORTENER_SHORT_IMG 1042 0.18 0.84 0.00 181 XMSubGiftCard1 1038 0.38 0.84 0.26 182 XMDateMe_00 1037 0.44 0.84 0.33 183 XM_H_PHPOS 1014 0.94 0.82 0.97 184 TR_MetaPhish_Combo_01 996 1.36 0.80 1.50 185 HTML_FONT_FACE_BAD 993 0.56 0.80 0.50 186 T_TooManySym_02 990 1.79 0.80 2.05 187 XM_HighProb1 990 0.17 0.80 0.01 188 URI_WP_HACKED_2 972 0.83 0.79 0.84 189 TM2_M_A_HREF_HREF 962 0.72 0.78 0.70 190 URI_NOVOWEL 956 0.60 0.77 0.55 191 SUBJ_DOLLARS 940 0.65 0.76 0.62 192 URI_TRY_3LD 930 1.26 0.75 1.40 193 XMMoneyMeta_00 927 0.55 0.75 0.50 194 XMHTMLBadTable_001 926 0.66 0.75 0.64 195 RELAYCOUNTRY_AU 923 0.55 0.75 0.50 196 TR_XM_DK_Bayes1 916 10.66 0.74 13.30 197 TooManyTo_004 910 0.89 0.74 0.93 198 RELAYCOUNTRY_NG 902 0.15 0.73 0.00 199 ADVANCE_FEE_5_NEW_MONEY 900 0.15 0.73 0.00 200 XM_H_PHPMailer 891 0.66 0.72 0.65 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 406960 88.81 94.34 87.34 2 DKIM_SIGNED 349696 74.03 70.21 75.05 3 XM_DK_Pass 342477 72.39 68.21 73.50 4 DKIM_VALID 326498 68.95 64.71 70.07 5 BAYES_50 267075 54.24 42.66 57.32 6 DCC_CHECK_NEGATIVE 264635 50.62 27.38 56.79 7 XMListUnsubscribeExists 239215 53.51 61.71 51.34 8 DKIM_VALID_AU 237681 51.61 53.85 51.01 9 DCC_CHECK 192182 47.51 71.10 41.24 10 XM_H_QuotedFrom 185791 41.07 45.56 39.87 11 T_TM2_M_HEADER_IN_MSG 144035 28.22 18.08 30.91 12 HTML_FONT_LOW_CONTRAST 135397 30.08 33.94 29.06 13 DKIM_VALID_EF 124367 25.13 19.26 26.69 14 XMSubLong 109298 24.69 29.34 23.46 15 LOC_TINY_FONT_1 104678 24.16 30.54 22.47 16 FVGT_m_MULTI_ODD 98987 21.74 23.59 21.24 17 MIME_HTML_ONLY 98006 25.05 40.18 21.03 18 MultiRelay 82728 17.10 14.63 17.75 19 BAYES_00 79228 13.71 1.32 17.00 20 T_KAM_HTML_FONT_INVALID 78959 16.86 16.55 16.95 21 ALL_TRUSTED 75474 13.15 1.69 16.20 22 TR_XM_DK_Bayes 64966 11.20 0.87 13.94 23 XM_Body_Dirty_Words 62689 14.84 20.07 13.45 24 TR_XM_DK_Bayes1 61969 10.66 0.74 13.30 25 XM_Multi_Part_URI 58049 12.60 13.15 12.46 26 XM_DKIMWhitelistDomains 56368 9.56 0.02 12.10 27 TR_XM_DK_Bayes2 50004 8.61 0.62 10.73 28 RCVD_IN_RP_SAFE 49388 8.93 2.65 10.60 29 LOTS_OF_MONEY 48199 10.50 11.08 10.34 30 RCVD_IN_RP_CERTIFIED 42667 7.69 2.15 9.16 31 HTML_IMAGE_RATIO_02 41145 9.78 13.35 8.83 32 TooManyTo_001 39761 8.78 9.70 8.53 33 LotsOfNums_01 39305 7.81 5.48 8.44 34 XM_Evil_Numbers_Gen 39155 8.94 10.94 8.40 35 T_XMDrugObfuBody_14 38136 8.26 8.56 8.18 36 XM_DK_Undo_02 36890 13.20 33.09 7.92 37 FSL_BULK_SIG 31466 8.19 13.62 6.75 38 XM_H_Long_From01 29985 6.77 8.02 6.44 39 XM_B_Phish_Phrases 29623 6.52 7.14 6.36 40 RELAYCOUNTRY_META 29050 11.34 30.54 6.23 41 BAYES_99 27829 11.62 32.87 5.97 42 XM_SendGrid 27029 5.10 2.48 5.80 43 RCVD_IN_IADB_LISTED 26909 4.80 1.15 5.77 44 HTML_IMAGE_RATIO_04 26622 5.92 6.71 5.71 45 MIME_QP_LONG_LINE 26073 4.92 2.39 5.60 46 T_TooManySym_01 25471 4.91 2.83 5.47 47 BAYES_999 23597 9.82 27.71 5.06 48 RCVD_IN_IADB_SPF 23438 4.18 0.97 5.03 49 BOTNET_IPINHOSTNAME 23288 7.31 16.02 5.00 50 DKIM_INVALID 23198 5.09 5.50 4.98 51 XMSubMetaSx_00 22667 5.58 8.27 4.86 52 BAYES_60 21598 5.10 6.83 4.64 53 BAYES_40 21411 4.08 2.12 4.60 54 XM_PDF 20917 3.68 0.65 4.49 55 RCVD_IN_IADB_SENDERID 20583 3.68 0.89 4.42 56 XMSexyCombo_05 20407 5.74 10.85 4.38 57 RCVD_IN_MSPIKE_H2 20396 3.99 2.54 4.38 58 XMStrtUSub 20186 4.58 5.51 4.33 59 RCVD_IN_IADB_DK 20155 3.60 0.87 4.33 60 FROM_EXCESS_BASE64 19860 7.20 18.24 4.26 61 T_REMOTE_IMAGE 17988 6.29 15.44 3.86 62 IN_ZIMBRA_NJ_WHITELIST 17391 2.95 0.01 3.73 63 RCVD_IN_IADB_VOUCHED 17233 3.06 0.63 3.70 64 HTML_IMAGE_RATIO_06 17086 4.14 5.91 3.67 65 BAYES_20 16698 3.25 1.98 3.58 66 MPART_ALT_DIFF 15782 4.10 6.78 3.39 67 TR_DCC_Bayes_99 15116 6.77 20.02 3.24 68 XM_UncommonTLD01 13886 4.54 10.41 2.98 69 MIME_HTML_MOSTLY 13566 3.13 3.95 2.91 70 UNPARSEABLE_RELAY 12970 2.60 1.89 2.78 71 XMNumbers 12843 4.26 9.91 2.76 72 BAYES_80 12495 3.56 6.89 2.68 73 TO_MALFORMED 11808 2.02 0.10 2.53 74 TVD_RCVD_IP 11519 2.01 0.27 2.47 75 UNTRUSTED_Relay 11100 6.29 20.98 2.38 76 RCVD_IN_IADB_OPTIN 11089 1.98 0.49 2.38 77 HTML_MIME_NO_HTML_TAG 10900 5.13 15.62 2.34 78 BAYES_05 10482 1.98 0.98 2.25 79 MAILING_LIST_MULTI 10355 2.04 1.36 2.22 80 XM_DIRTYINTL 9645 2.77 5.41 2.07 81 BOTNET 9598 5.18 16.95 2.06 82 T_TooManySym_02 9572 1.79 0.80 2.05 83 HTML_IMAGE_RATIO_08 9480 2.34 3.48 2.03 84 TR_Symld_Words 9430 1.84 1.15 2.02 85 TooManyTo_002 9404 1.80 0.98 2.02 86 XM_SPF_SoftFail 9388 2.48 4.23 2.01 87 RCVD_IN_MSPIKE_H3 9017 1.60 0.32 1.94 88 RCVD_IN_MSPIKE_WL 9017 1.60 0.32 1.94 89 SUBJ_ALL_CAPS 8949 2.01 2.35 1.92 90 XM_H_Long_From02 8787 1.75 1.22 1.89 91 XM_DK_Undo_01 8721 1.71 1.08 1.87 92 XM_CamelCaseFrm001 8635 2.11 3.09 1.85 93 ANY_BOUNCE_MESSAGE 8612 1.59 0.60 1.85 94 BOUNCE_MESSAGE 8610 1.58 0.60 1.85 95 TM2_M_URI_OPT_OUT 8240 2.17 3.69 1.77 96 XM_UB50 7925 2.69 6.43 1.70 97 URI_HEX 7602 2.05 3.63 1.63 98 IN_HORDE_ADDRESS_BOOK 7574 1.29 0.04 1.63 99 BAYES_95 7557 2.14 4.09 1.62 100 XMDiploma_00 7508 1.79 2.47 1.61 101 RELAYCOUNTRY_CA 7393 2.12 4.14 1.59 102 INVALID_MSGID 7235 1.27 0.20 1.55 103 XM_OfRef6 7024 1.84 3.09 1.51 104 TR_MetaPhish_Combo_01 6996 1.36 0.80 1.50 105 T_XMDrugObfuBody_08 6908 1.85 3.25 1.48 106 USER_IN_DEF_DKIM_WL 6768 1.15 0.02 1.45 107 XMStockSpam_06 6537 1.40 1.41 1.40 108 HELO_NODOT 6525 1.28 0.85 1.40 109 URI_TRY_3LD 6517 1.26 0.75 1.40 110 MIME_HTML_ONLY_MULTI 6504 1.95 4.02 1.40 111 TooManyTo_003 6193 1.23 0.85 1.33 112 XMPhish11 5579 1.36 1.99 1.20 113 XMCapTrack 5518 0.99 0.26 1.18 114 XMBdyGiftCard01 5354 1.31 1.90 1.15 115 NO_DNS_FOR_FROM 5204 1.32 2.09 1.12 116 XM_GoogleGroups 5125 0.96 0.44 1.10 117 XMGenDplmaNmb 4917 1.14 1.48 1.06 118 T_FILL_THIS_FORM_SHORT 4881 1.02 0.92 1.05 119 DKIM_ADSP_CUSTOM_MED 4619 1.12 1.62 0.99 120 RELAYCOUNTRY_GB 4554 1.52 3.57 0.98 121 XM_H_PHPOS 4534 0.94 0.82 0.97 122 TooManyTo_004 4336 0.89 0.74 0.93 123 RELAYCOUNTRY_PH 4267 0.73 0.02 0.92 124 XM_ProductURIs 4116 0.88 0.84 0.88 125 TM2_M_VERY_LONG_WORD 4000 0.98 1.43 0.86 126 URI_WP_HACKED_2 3899 0.83 0.79 0.84 127 XMSexyCombo_01 3491 1.31 3.44 0.75 128 TooManyTo_005 3467 0.73 0.66 0.74 129 XMSubMetaI_00 3446 0.95 1.73 0.74 130 T_XMDrugObfuBody_00 3418 0.83 1.17 0.73 131 XMBody_17 3328 0.78 1.02 0.71 132 TM2_M_A_HREF_HREF 3273 0.72 0.78 0.70 133 XM_salutation2 3193 0.80 1.22 0.69 134 IMPOTENCE 3141 0.63 0.47 0.67 135 PLING_QUERY 3112 0.62 0.44 0.67 136 NML_ADSP_CUSTOM_MED 3094 0.85 1.56 0.66 137 XM_D_tchamptons_WL 3086 0.52 0.00 0.66 138 XMBody_95 3018 0.53 0.10 0.65 139 XM_H_PHPMailer 3006 0.66 0.72 0.65 140 XMHTMLBadTable_001 2966 0.66 0.75 0.64 141 SpammyFromTLD_01 2959 0.96 2.17 0.64 142 XM_B_REG_HTML 2951 0.58 0.36 0.63 143 TR_XM_RelayPhish 2909 0.89 1.90 0.62 144 FROM_GOV_SPOOF 2886 0.54 0.26 0.62 145 SUBJ_DOLLARS 2871 0.65 0.76 0.62 146 XMBrknScrpt_02 2863 0.68 0.93 0.61 147 XMNoVowels 2859 0.68 0.92 0.61 148 T_TooManySym_03 2858 0.51 0.13 0.61 149 T_OBFU_PDF_ATTACH 2797 0.50 0.14 0.60 150 USER_IN_WHITELIST 2728 0.46 0.00 0.59 151 T_XMHurry_00 2696 0.61 0.71 0.58 152 XM_URI_RBL 2692 1.35 4.26 0.58 153 T_Symld_Words_02 2606 0.78 1.62 0.56 154 XMGappySubj_01 2584 0.51 0.35 0.55 155 URI_NOVOWEL 2582 0.60 0.77 0.55 156 XMSubMetaSxObfu_03 2526 0.63 0.94 0.54 157 HTML_TAG_BALANCE_BODY 2452 0.63 1.02 0.53 158 XMLngstWrd_00 2447 0.48 0.30 0.53 159 HTTPS_HTTP_MISMATCH 2404 0.51 0.48 0.52 160 XM_B_COPY_HTML 2401 0.54 0.65 0.52 161 XMBody_78 2374 0.70 1.42 0.51 162 XMMoneyMeta_00 2343 0.55 0.75 0.50 163 RELAYCOUNTRY_AU 2334 0.55 0.75 0.50 164 HTML_FONT_FACE_BAD 2333 0.56 0.80 0.50 165 XM_ShortIntro_01 2290 0.48 0.42 0.49 166 XMLngstWrd_01 2283 0.45 0.28 0.49 167 XMPhish14 2255 0.57 0.90 0.48 168 REMOVE_BEFORE_LINK 2177 0.45 0.39 0.47 169 FORGED_GMAIL_RCVD 2151 0.61 1.16 0.46 170 FILL_THIS_FORM 2111 0.60 1.14 0.45 171 XMSubMetaSxObfu_02 2031 0.41 0.31 0.44 172 RDNS_DYNAMIC 2012 0.55 0.99 0.43 173 RELAYCOUNTRY_DE 1985 0.54 0.98 0.43 174 MISSING_HEADERS 1978 3.13 13.32 0.42 175 AC_DIV_BONANZA 1972 0.36 0.12 0.42 176 SpammyFromTLD_02 1936 1.45 5.36 0.42 177 RCVD_IN_BL_SPAMCOP_NET 1923 0.89 2.70 0.41 178 XMSlimDrugH 1908 0.73 1.96 0.41 179 ONLINE_PHARMACY 1871 0.36 0.22 0.40 180 TM2_M_BODY_EMPTY 1834 0.34 0.14 0.39 181 HTML_IMAGE_ONLY_32 1802 0.35 0.23 0.39 182 XMPhish30 1783 0.65 1.64 0.38 183 XMHTML_After_End 1764 0.53 1.11 0.38 184 FILL_THIS_FORM_LONG 1757 0.49 0.93 0.38 185 SHORT_HELO_AND_INLINE_IMAGE 1752 0.31 0.06 0.38 186 DKIM_ADSP_NXDOMAIN 1695 0.49 0.98 0.36 187 FILL_THIS_FORM_LOAN 1676 0.46 0.86 0.36 188 FROM_GOV_DKIM_AU 1630 0.31 0.14 0.35 189 HTML_IMAGE_ONLY_28 1613 0.65 1.81 0.35 190 RELAYCOUNTRY_NL 1579 0.52 1.19 0.34 191 XMRcvdHeader_15 1536 0.26 0.00 0.33 192 XMDateMe_00 1529 0.44 0.84 0.33 193 XMSubMetaSSx_00 1520 0.52 1.26 0.33 194 RCVD_IN_SORBS_DUL 1491 0.31 0.27 0.32 195 XMSubMetaSxObfu_04 1468 0.28 0.15 0.32 196 TVD_VISIT_PHARMA 1441 0.29 0.20 0.31 197 HTML_IMAGE_ONLY_20 1424 0.35 0.51 0.31 198 LOW_PRICE 1408 0.38 0.65 0.30 199 RELAYCOUNTRY_AT 1403 0.43 0.92 0.30 200 HTML_IMAGE_ONLY_24 1393 0.31 0.36 0.30 ----------------------------------------------------------------------