Email: 360583 Autolearn: 0 AvgScore: 1.79 AvgScanTime: 2.33 sec Spam: 78451 Autolearn: 0 AvgScore: 11.70 AvgScanTime: 3.87 sec Ham: 282132 Autolearn: 0 AvgScore: -0.97 AvgScanTime: 1.90 sec Time Spent Running SA: 232.97 hours Time Spent Processing Spam: 84.40 hours Time Spent Processing Ham: 148.57 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 74082 89.08 94.43 87.59 2 DCC_CHECK 65275 58.58 83.20 51.73 3 XM_B_Unicode 60106 75.12 76.62 74.71 4 DKIM_SIGNED 58218 76.88 74.21 77.62 5 XM_DK_Pass 56536 75.46 72.07 76.40 6 RELAYCOUNTRY_US 54032 77.90 68.87 80.42 7 XMListUnsubscribeExists 50317 56.99 64.14 55.00 8 DKIM_VALID 48095 69.87 61.31 72.25 9 DKIM_VALID_AU 38866 57.32 49.54 59.48 10 BAYES_50 37068 52.79 47.25 54.33 11 XM_DK_Undo_02 30942 15.37 39.44 8.67 12 XM_B_Unicode3 28752 41.82 36.65 43.26 13 T_KAM_HTML_FONT_INVALID 26786 22.98 34.14 19.87 14 LOC_TINY_FONT_1 26219 30.15 33.42 29.24 15 MIME_HTML_ONLY 25965 25.01 33.10 22.76 16 DKIM_VALID_EF 21552 26.95 27.47 26.81 17 HTML_FONT_LOW_CONTRAST 21031 30.33 26.81 31.31 18 BAYES_99 19971 9.05 25.46 4.49 19 XM_Body_Dirty_Words 19828 19.23 25.27 17.55 20 FVGT_m_MULTI_ODD 17674 21.31 22.53 20.97 21 XMSubLong 16664 21.55 21.24 21.63 22 RELAYCOUNTRY_META 16382 8.54 20.88 5.11 23 TR_DCC_Bayes_99 16202 6.79 20.65 2.94 24 XM_B_Unsub 15878 15.63 20.24 14.35 25 BAYES_999 15865 7.32 20.22 3.73 26 XM_UncommonTLD01 14845 7.28 18.92 4.04 27 BOTNET 14130 6.34 18.01 3.10 28 T_TM2_M_HEADER_IN_MSG 12566 20.38 16.02 21.59 29 TooManyTo_001 12447 11.64 15.87 10.47 30 XM_Multi_Part_URI 12430 14.56 15.84 14.21 31 DCC_CHECK_NEGATIVE 12253 40.15 15.62 46.98 32 HTML_IMAGE_RATIO_02 11958 11.43 15.24 10.37 33 UNTRUSTED_Relay 11271 4.40 14.37 1.63 34 FSL_BULK_SIG 10858 9.63 13.84 8.46 35 DKIM_INVALID 10123 7.01 12.90 5.38 36 LOTS_OF_MONEY 9840 9.44 12.54 8.57 37 XM_B_Unsub2 9588 6.33 12.22 4.70 38 BOTNET_IPINHOSTNAME 9175 7.61 11.70 6.47 39 ALL_TRUSTED 9025 15.00 11.50 15.97 40 NO_DNS_FOR_FROM 8216 4.49 10.47 2.82 41 TooManyTo_002 8024 5.04 10.23 3.59 42 XMSexyCombo_05 7457 6.29 9.51 5.40 43 XM_UB50 7321 2.70 9.33 0.86 44 TooManyTo_003 6925 3.98 8.83 2.63 45 XM_Evil_Numbers_Gen 6626 10.27 8.45 10.77 46 RCVD_IN_MSPIKE_BL 6394 3.00 8.15 1.57 47 RCVD_IN_MSPIKE_L3 6133 2.92 7.82 1.55 48 RCVD_IN_MSPIKE_H2 6107 11.94 7.78 13.09 49 XM_B_Phish_Phrases 6094 8.46 7.77 8.65 50 XM_CamelCaseFrm001 6033 3.48 7.69 2.31 51 XMSubMetaSx_00 5826 5.68 7.43 5.19 52 TooManyTo_004 5796 3.08 7.39 1.88 53 BAYES_80 5540 4.05 7.06 3.21 54 MPART_ALT_DIFF 5519 5.44 7.03 4.99 55 BAYES_60 5288 5.92 6.74 5.70 56 URI_WP_HACKED_2 5274 1.97 6.72 0.65 57 LotsOfNums_01 4938 8.26 6.29 8.80 58 KHOP_HELO_FCRDNS 4908 2.36 6.26 1.27 59 XM_H_Long_From01 4610 5.37 5.88 5.23 60 PDS_OTHER_BAD_TLD 4256 1.38 5.43 0.26 61 XM_SPF_SoftFail 4230 1.99 5.39 1.04 62 UNPARSEABLE_RELAY 4206 8.96 5.36 9.96 63 MIME_HTML_MOSTLY 4185 3.36 5.33 2.81 64 HTML_IMAGE_RATIO_04 4173 6.56 5.32 6.90 65 URIBL_SBL_A 4136 1.30 5.27 0.20 66 RELAYCOUNTRY_CA 4055 2.64 5.17 1.93 67 TooManyTo_005 4052 2.24 5.17 1.43 68 XMHTML_After_End 4015 1.55 5.12 0.55 69 RELAYCOUNTRY_FR 3826 1.26 4.88 0.26 70 XM_B_SpammyTLD 3775 2.69 4.81 2.10 71 FROM_SUSPICIOUS_NTLD 3664 1.12 4.67 0.14 72 FROM_SUSPICIOUS_NTLD_FP 3626 1.11 4.62 0.14 73 RDNS_DYNAMIC 3611 1.38 4.60 0.49 74 RCVD_IN_BL_SPAMCOP_NET 3567 1.98 4.55 1.27 75 SUSPICIOUS_RECIPS 3399 0.96 4.33 0.02 76 BODY_URI_ONLY 3338 0.96 4.25 0.04 77 T_XMDrugObfuBody_08 3238 1.97 4.13 1.36 78 XM_SendGrid 3207 5.79 4.09 6.26 79 XM_OfRef6 3163 1.78 4.03 1.15 80 TR_XM_MaxBayes 3160 0.91 4.03 0.04 81 LongTLD 3125 1.02 3.98 0.20 82 SpammyFromTLD_01 2844 1.20 3.63 0.53 83 BAYES_95 2832 2.15 3.61 1.75 84 XMBody_17 2788 1.56 3.55 1.01 85 XMStrtUSub 2724 4.68 3.47 5.01 86 DATE_IN_PAST_06_12 2665 0.96 3.40 0.28 87 MIME_QP_LONG_LINE 2608 4.19 3.32 4.44 88 T_XMHurry_00 2559 1.38 3.26 0.86 89 HTML_IMAGE_RATIO_06 2549 4.02 3.25 4.24 90 FROM_EXCESS_BASE64 2545 4.47 3.24 4.81 91 SpammyFromTLD_02 2377 0.82 3.03 0.21 92 SUBJ_ALL_CAPS 2292 1.41 2.92 0.99 93 BAYES_40 2284 4.34 2.91 4.74 94 XM_DIRTYINTL 2279 1.12 2.90 0.62 95 DATE_IN_PAST_03_06 2249 0.70 2.87 0.09 96 RCVD_IN_RP_RNBL 2245 0.69 2.86 0.09 97 BAYES_00 2226 15.88 2.84 19.51 98 T_TooManySym_01 2123 5.19 2.71 5.88 99 XMNumbers 2039 3.36 2.60 3.57 100 BAYES_20 2019 3.49 2.57 3.75 101 HTML_IMAGE_RATIO_08 2014 2.32 2.57 2.25 102 RCVD_IN_RP_SAFE 1970 9.35 2.51 11.25 103 TR_XM_PHPDW 1950 0.90 2.49 0.46 104 TR_XM_PHPForged 1917 0.88 2.44 0.44 105 TR_XM_FormFill2 1905 0.87 2.43 0.44 106 XM_H_PHPOS 1901 0.87 2.42 0.44 107 DKIM_ADSP_NXDOMAIN 1836 0.75 2.34 0.31 108 RCVD_IN_MSPIKE_H3 1775 8.29 2.26 9.97 109 RCVD_IN_MSPIKE_WL 1775 8.29 2.26 9.97 110 XMSexyCombo_01 1767 2.21 2.25 2.20 111 TR_XM_INV_DKIM 1715 0.56 2.19 0.11 112 TM2_M_URI_OPT_OUT 1712 2.92 2.18 3.13 113 DIET_1 1652 0.87 2.11 0.52 114 MIME_HTML_ONLY_MULTI 1553 2.61 1.98 2.79 115 XM_URI_RBL 1549 0.62 1.97 0.25 116 FROM_MISSP_REPLYTO 1547 0.43 1.97 0.01 117 FROM_MISSP_DYNIP 1505 0.42 1.92 0.00 118 XMDiploma_00 1484 1.54 1.89 1.44 119 URI_HEX 1473 1.40 1.88 1.27 120 TR_Mismatch_TLD_02 1466 0.47 1.87 0.09 121 RELAYCOUNTRY_DE 1456 0.77 1.86 0.46 122 URI_TRY_3LD 1431 1.75 1.82 1.73 123 TR_LOTS_OF_MONEY3 1424 0.88 1.82 0.62 124 T_XMDrugObfuBody_14 1361 1.55 1.73 1.50 125 T_REMOTE_IMAGE 1343 2.76 1.71 3.06 126 DATE_IN_PAST_12_24 1334 0.45 1.70 0.11 127 RCVD_IN_RP_CERTIFIED 1312 8.54 1.67 10.45 128 XMNoVowels 1272 1.45 1.62 1.40 129 BAYES_05 1217 2.31 1.55 2.53 130 BOTNET_NORDNS 1214 0.34 1.55 0.01 131 XMStockSpam_06 1204 2.08 1.53 2.23 132 TM2_M_VERY_LONG_WORD 1202 1.28 1.53 1.21 133 SORTED_RECIPS 1189 0.34 1.52 0.01 134 TR_XM_DK_Bayes 1183 12.02 1.51 14.95 135 TR_XM_DK_SendGrid 1181 3.07 1.51 3.50 136 T_FILL_THIS_FORM_SHORT 1180 0.83 1.50 0.64 137 TR_XM_MaxSPIKE 1135 0.37 1.45 0.07 138 RELAYCOUNTRY_IN 1132 0.35 1.44 0.04 139 TR_Mismatch_TLD_01 1076 0.50 1.37 0.25 140 XMGenDplmaNmb 1054 0.96 1.34 0.85 141 TR_XM_RelayPhish 1018 0.41 1.30 0.16 142 XM_ProductURIs 1012 1.00 1.29 0.92 143 XMSlimDrugH 999 0.50 1.27 0.29 144 XM_UB60 984 0.31 1.25 0.05 145 XM_H_PHPMailer 969 0.69 1.24 0.54 146 MPART_ALT_DIFF_COUNT 966 0.57 1.23 0.39 147 TR_Symld_Words 952 1.55 1.21 1.65 148 DEAR_SOMETHING 952 0.38 1.21 0.15 149 RCVD_IN_IADB_LISTED 948 2.73 1.21 3.15 150 NORDNS_LOW_CONTRAST 941 0.27 1.20 0.01 151 HTML_MIME_NO_HTML_TAG 939 1.34 1.20 1.37 152 XM_Lotto 934 0.31 1.19 0.06 153 MAILING_LIST_MULTI 894 2.15 1.14 2.43 154 XMBdyGiftCard01 893 1.50 1.14 1.60 155 XM_Combo_Sbj 891 0.50 1.14 0.32 156 XM_H_PHPOS_M 872 0.42 1.11 0.23 157 XM_Nigeria_01 854 0.25 1.09 0.02 158 XMPhish30 836 0.56 1.07 0.42 159 XMSubNoVowel 832 1.06 1.06 1.06 160 XMSexyCombo_04 819 1.46 1.04 1.57 161 XMBody_78 800 0.62 1.02 0.51 162 RCVD_IN_IADB_SPF 783 2.39 1.00 2.77 163 RCVD_IN_IADB_SENDERID 769 2.18 0.98 2.51 164 RCVD_IN_IADB_DK 769 2.13 0.98 2.44 165 TR_XM_DK_Bayes1 759 11.15 0.97 13.99 166 XM_DK_Undo_01 746 1.62 0.95 1.80 167 RCVD_IN_PSBL 745 0.28 0.95 0.09 168 XMSubMetaSxObfu_03 743 1.12 0.95 1.17 169 MONEY_FORM_SHORT 742 0.21 0.95 0.00 170 FORM_FRAUD_5 741 0.21 0.94 0.00 171 MONEY_FRAUD_5 729 0.20 0.93 0.00 172 DKIM_ADSP_CUSTOM_MED 718 1.30 0.92 1.41 173 ADVANCE_FEE_3_NEW_MONEY 714 0.20 0.91 0.00 174 XMSubMetaI_00 710 0.61 0.91 0.53 175 BILLION_DOLLARS 693 0.21 0.88 0.02 176 XM_OfRef7 689 0.32 0.88 0.16 177 URIBL_BLACK 687 0.20 0.88 0.01 178 XMSubEmpty 684 0.39 0.87 0.26 179 RELAYCOUNTRY_GB 679 0.86 0.87 0.85 180 XM_B_COPY_HTML 678 0.45 0.86 0.33 181 XMReplyNow 674 0.24 0.86 0.07 182 RELAYCOUNTRY_NL 670 0.33 0.85 0.19 183 RELAYCOUNTRY_VE 663 0.18 0.85 0.00 184 TR_LOTS_OF_MONEY2 648 0.93 0.83 0.96 185 T_MONEY_PERCENT 648 0.93 0.83 0.96 186 HTML_FONT_FACE_BAD 636 1.05 0.81 1.12 187 XM_UB80 636 0.19 0.81 0.02 188 T_XMDrugObfuBody_00 635 0.69 0.81 0.66 189 HTML_TAG_BALANCE_BODY 622 0.45 0.79 0.35 190 XM_H_Long_From02 620 0.88 0.79 0.90 191 FORGED_GMAIL_RCVD 618 0.65 0.79 0.61 192 XM_UB99 617 0.17 0.79 0.00 193 TR_Caps_n_Bayes_99 616 0.19 0.79 0.02 194 XMBSHREFv2 614 0.47 0.78 0.39 195 T_Symld_Words_02 595 0.64 0.76 0.60 196 YOU_INHERIT 594 0.17 0.76 0.00 197 LOW_PRICE 590 0.43 0.75 0.34 198 XMBrknScrpt_02 590 0.69 0.75 0.67 199 TR_XM_DK_Bayes2 581 10.41 0.74 13.10 200 XMSlimDrugs 573 0.19 0.73 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 247128 89.08 94.43 87.59 2 RELAYCOUNTRY_US 226878 77.90 68.87 80.42 3 DKIM_SIGNED 219000 76.88 74.21 77.62 4 XM_DK_Pass 215554 75.46 72.07 76.40 5 XM_B_Unicode 210773 75.12 76.62 74.71 6 DKIM_VALID 203835 69.87 61.31 72.25 7 DKIM_VALID_AU 167803 57.32 49.54 59.48 8 XMListUnsubscribeExists 155182 56.99 64.14 55.00 9 BAYES_50 153293 52.79 47.25 54.33 10 DCC_CHECK 145945 58.58 83.20 51.73 11 DCC_CHECK_NEGATIVE 132537 40.15 15.62 46.98 12 XM_B_Unicode3 122047 41.82 36.65 43.26 13 HTML_FONT_LOW_CONTRAST 88343 30.33 26.81 31.31 14 LOC_TINY_FONT_1 82488 30.15 33.42 29.24 15 DKIM_VALID_EF 75632 26.95 27.47 26.81 16 MIME_HTML_ONLY 64204 25.01 33.10 22.76 17 XMSubLong 61036 21.55 21.24 21.63 18 T_TM2_M_HEADER_IN_MSG 60919 20.38 16.02 21.59 19 FVGT_m_MULTI_ODD 59173 21.31 22.53 20.97 20 T_KAM_HTML_FONT_INVALID 56073 22.98 34.14 19.87 21 BAYES_00 55037 15.88 2.84 19.51 22 XM_Body_Dirty_Words 49518 19.23 25.27 17.55 23 ALL_TRUSTED 45052 15.00 11.50 15.97 24 TR_XM_DK_Bayes 42168 12.02 1.51 14.95 25 XM_B_Unsub 40475 15.63 20.24 14.35 26 XM_Multi_Part_URI 40083 14.56 15.84 14.21 27 TR_XM_DK_Bayes1 39458 11.15 0.97 13.99 28 TR_XM_DK_Bayes2 36947 10.41 0.74 13.10 29 RCVD_IN_MSPIKE_H2 36932 11.94 7.78 13.09 30 XM_DKIMWhitelistDomains 33072 9.24 0.32 11.72 31 RCVD_IN_RP_SAFE 31749 9.35 2.51 11.25 32 XM_Evil_Numbers_Gen 30399 10.27 8.45 10.77 33 TooManyTo_001 29535 11.64 15.87 10.47 34 RCVD_IN_RP_CERTIFIED 29484 8.54 1.67 10.45 35 HTML_IMAGE_RATIO_02 29243 11.43 15.24 10.37 36 RCVD_IN_MSPIKE_WL 28119 8.29 2.26 9.97 37 RCVD_IN_MSPIKE_H3 28119 8.29 2.26 9.97 38 UNPARSEABLE_RELAY 28087 8.96 5.36 9.96 39 LotsOfNums_01 24831 8.26 6.29 8.80 40 XM_DK_Undo_02 24462 15.37 39.44 8.67 41 XM_B_Phish_Phrases 24401 8.46 7.77 8.65 42 LOTS_OF_MONEY 24186 9.44 12.54 8.57 43 FSL_BULK_SIG 23862 9.63 13.84 8.46 44 HTML_IMAGE_RATIO_04 19464 6.56 5.32 6.90 45 BOTNET_IPINHOSTNAME 18262 7.61 11.70 6.47 46 XM_SendGrid 17658 5.79 4.09 6.26 47 T_TooManySym_01 16589 5.19 2.71 5.88 48 BAYES_60 16074 5.92 6.74 5.70 49 XMSexyCombo_05 15223 6.29 9.51 5.40 50 DKIM_INVALID 15165 7.01 12.90 5.38 51 XM_H_Long_From01 14762 5.37 5.88 5.23 52 XMSubMetaSx_00 14648 5.68 7.43 5.19 53 RELAYCOUNTRY_META 14420 8.54 20.88 5.11 54 XMStrtUSub 14147 4.68 3.47 5.01 55 MPART_ALT_DIFF 14091 5.44 7.03 4.99 56 FROM_EXCESS_BASE64 13557 4.47 3.24 4.81 57 BAYES_40 13382 4.34 2.91 4.74 58 XM_B_Unsub2 13248 6.33 12.22 4.70 59 BAYES_99 12664 9.05 25.46 4.49 60 MIME_QP_LONG_LINE 12514 4.19 3.32 4.44 61 HTML_IMAGE_RATIO_06 11952 4.02 3.25 4.24 62 XM_UncommonTLD01 11402 7.28 18.92 4.04 63 BAYES_20 10575 3.49 2.57 3.75 64 BAYES_999 10516 7.32 20.22 3.73 65 TooManyTo_002 10139 5.04 10.23 3.59 66 XMNumbers 10069 3.36 2.60 3.57 67 TR_XM_DK_SendGrid 9871 3.07 1.51 3.50 68 TVD_RCVD_IP 9086 2.62 0.45 3.22 69 BAYES_80 9050 4.05 7.06 3.21 70 RCVD_IN_IADB_LISTED 8899 2.73 1.21 3.15 71 TM2_M_URI_OPT_OUT 8830 2.92 2.18 3.13 72 BOTNET 8733 6.34 18.01 3.10 73 T_TooManySym_02 8625 2.50 0.52 3.06 74 T_REMOTE_IMAGE 8623 2.76 1.71 3.06 75 TR_DCC_Bayes_99 8288 6.79 20.65 2.94 76 IN_ZIMBRA_NJ_WHITELIST 8257 2.29 0.01 2.93 77 INVALID_MSGID 8089 2.29 0.22 2.87 78 NO_DNS_FOR_FROM 7970 4.49 10.47 2.82 79 CK_HELO_DYNAMIC_SPLIT_IP 7929 2.29 0.43 2.81 80 HELO_DYNAMIC_IPADDR2 7928 2.21 0.05 2.81 81 MIME_HTML_MOSTLY 7923 3.36 5.33 2.81 82 MIME_HTML_ONLY_MULTI 7862 2.61 1.98 2.79 83 RCVD_IN_IADB_SPF 7826 2.39 1.00 2.77 84 TooManyTo_003 7412 3.98 8.83 2.63 85 BAYES_05 7127 2.31 1.55 2.53 86 RCVD_IN_IADB_SENDERID 7080 2.18 0.98 2.51 87 RCVD_IN_IADB_DK 6895 2.13 0.98 2.44 88 TO_MALFORMED 6882 1.91 0.01 2.44 89 MAILING_LIST_MULTI 6842 2.15 1.14 2.43 90 ANY_BOUNCE_MESSAGE 6615 1.88 0.23 2.34 91 BOUNCE_MESSAGE 6613 1.88 0.23 2.34 92 XM_CamelCaseFrm001 6508 3.48 7.69 2.31 93 XM_H_Trusted_IP 6456 1.79 0.00 2.29 94 HTML_IMAGE_RATIO_08 6351 2.32 2.57 2.25 95 XMStockSpam_06 6285 2.08 1.53 2.23 96 XMSexyCombo_01 6213 2.21 2.25 2.20 97 XM_B_SpammyTLD 5918 2.69 4.81 2.10 98 RELAYCOUNTRY_CA 5448 2.64 5.17 1.93 99 IN_HORDE_ADDRESS_BOOK 5326 1.48 0.03 1.89 100 TooManyTo_004 5314 3.08 7.39 1.88 101 RCVD_IN_IADB_VOUCHED 5213 1.53 0.40 1.85 102 XM_DK_Undo_01 5082 1.62 0.95 1.80 103 BAYES_95 4927 2.15 3.61 1.75 104 URI_TRY_3LD 4868 1.75 1.82 1.73 105 XM_GoogleGroups 4844 1.43 0.38 1.72 106 XM_PDF 4838 1.43 0.42 1.71 107 TR_Symld_Words 4642 1.55 1.21 1.65 108 UNTRUSTED_Relay 4592 4.40 14.37 1.63 109 XMBdyGiftCard01 4519 1.50 1.14 1.60 110 XMSexyCombo_04 4440 1.46 1.04 1.57 111 RCVD_IN_MSPIKE_BL 4419 3.00 8.15 1.57 112 RCVD_IN_MSPIKE_L3 4381 2.92 7.82 1.55 113 T_XMDrugObfuBody_14 4228 1.55 1.73 1.50 114 USER_IN_DEF_DKIM_WL 4208 1.17 0.00 1.49 115 XMDiploma_00 4051 1.54 1.89 1.44 116 TooManyTo_005 4036 2.24 5.17 1.43 117 DKIM_ADSP_CUSTOM_MED 3983 1.30 0.92 1.41 118 XMNoVowels 3960 1.45 1.62 1.40 119 HTML_MIME_NO_HTML_TAG 3876 1.34 1.20 1.37 120 T_XMDrugObfuBody_08 3850 1.97 4.13 1.36 121 XM_RXBody 3746 1.16 0.57 1.33 122 KHOP_HELO_FCRDNS 3597 2.36 6.26 1.27 123 RCVD_IN_BL_SPAMCOP_NET 3590 1.98 4.55 1.27 124 URI_HEX 3576 1.40 1.88 1.27 125 XMGappySubj_01 3459 1.05 0.44 1.23 126 TM2_M_VERY_LONG_WORD 3424 1.28 1.53 1.21 127 XMSubMetaSxObfu_03 3290 1.12 0.95 1.17 128 XM_OfRef6 3249 1.78 4.03 1.15 129 RCVD_IN_IADB_OPTIN 3243 0.96 0.27 1.15 130 HTML_FONT_FACE_BAD 3159 1.05 0.81 1.12 131 XMSubNoVowel 2992 1.06 1.06 1.06 132 XM_SPF_SoftFail 2931 1.99 5.39 1.04 133 XMBody_17 2852 1.56 3.55 1.01 134 NML_ADSP_CUSTOM_MED 2814 0.94 0.71 1.00 135 SUBJ_ALL_CAPS 2783 1.41 2.92 0.99 136 TR_MSPIKEBAYES00 2740 0.77 0.05 0.97 137 T_MONEY_PERCENT 2710 0.93 0.83 0.96 138 TR_LOTS_OF_MONEY2 2710 0.93 0.83 0.96 139 XM_ProductURIs 2582 1.00 1.29 0.92 140 XM_H_Long_From02 2540 0.88 0.79 0.90 141 XMSubMetaSx_01 2534 0.77 0.33 0.90 142 T_TooManySym_03 2500 0.74 0.23 0.89 143 TR_MetaPhish_Combo_01 2464 0.77 0.39 0.87 144 T_XMHurry_00 2427 1.38 3.26 0.86 145 XM_UB50 2422 2.70 9.33 0.86 146 RELAYCOUNTRY_GB 2409 0.86 0.87 0.85 147 XMGenDplmaNmb 2401 0.96 1.34 0.85 148 XMBody_95 2278 0.65 0.08 0.81 149 XMSexyCombo_02 2258 0.69 0.30 0.80 150 HELO_NODOT 2213 0.73 0.52 0.78 151 HELO_NO_DOMAIN 2208 0.72 0.51 0.78 152 XM_B_REG_HTML 1914 0.65 0.55 0.68 153 XMBrknScrpt_02 1882 0.69 0.75 0.67 154 T_XMDrugObfuBody_00 1850 0.69 0.81 0.66 155 URI_WP_HACKED_2 1842 1.97 6.72 0.65 156 USER_IN_WHITELIST 1815 0.50 0.00 0.64 157 T_FILL_THIS_FORM_SHORT 1803 0.83 1.50 0.64 158 XMSubMetaSxObfu_02 1754 0.58 0.42 0.62 159 XM_DIRTYINTL 1744 1.12 2.90 0.62 160 TR_LOTS_OF_MONEY3 1742 0.88 1.82 0.62 161 FORGED_GMAIL_RCVD 1712 0.65 0.79 0.61 162 SUBJ_DOLLARS 1711 0.58 0.48 0.61 163 T_Symld_Words_02 1703 0.64 0.76 0.60 164 HTTPS_HTTP_MISMATCH 1670 0.55 0.38 0.59 165 XMHTML_After_End 1561 1.55 5.12 0.55 166 XM_H_PHPMailer 1535 0.69 1.24 0.54 167 XMSubMetaI_00 1505 0.61 0.91 0.53 168 MISSING_HEADERS 1498 0.53 0.54 0.53 169 SpammyFromTLD_01 1489 1.20 3.63 0.53 170 XMCapTrack 1479 0.49 0.37 0.52 171 DIET_1 1477 0.87 2.11 0.52 172 HTML_IMAGE_ONLY_20 1475 0.47 0.29 0.52 173 XMPhish08 1459 0.55 0.68 0.52 174 XMBody_78 1438 0.62 1.02 0.51 175 RDNS_DYNAMIC 1372 1.38 4.60 0.49 176 XMHTMLBadTable_001 1345 0.50 0.59 0.48 177 RELAYCOUNTRY_DE 1311 0.77 1.86 0.46 178 TR_XM_PHPDW 1294 0.90 2.49 0.46 179 TR_XM_PHPForged 1255 0.88 2.44 0.44 180 TR_XM_FormFill2 1249 0.87 2.43 0.44 181 XM_H_PHPOS 1234 0.87 2.42 0.44 182 XM_Body_Obfu01 1221 0.39 0.26 0.43 183 XMLngstWrd_00 1197 0.41 0.37 0.42 184 XMPhish30 1184 0.56 1.07 0.42 185 XMPhish14 1151 0.43 0.49 0.41 186 T_TooManySym_04 1136 0.34 0.10 0.40 187 BASE64_LENGTH_79_INF 1104 0.42 0.50 0.39 188 MPART_ALT_DIFF_COUNT 1101 0.57 1.23 0.39 189 XMBSHREFv2 1088 0.47 0.78 0.39 190 XMLngstWrd_01 1059 0.37 0.33 0.38 191 XMSolicitRefs_0 1040 0.36 0.33 0.37 192 BODY_ENHANCEMENT 1026 0.30 0.07 0.36 193 XM_Akamai 1009 0.28 0.02 0.36 194 HTML_TAG_BALANCE_BODY 991 0.45 0.79 0.35 195 XM_ShortIntro_01 962 0.33 0.31 0.34 196 LOW_PRICE 951 0.43 0.75 0.34 197 XM_B_COPY_HTML 936 0.45 0.86 0.33 198 XM_Combo_Sbj 909 0.50 1.14 0.32 199 TVD_SPACE_RATIO 899 0.30 0.23 0.32 200 RELAYCOUNTRY_AU 877 0.33 0.38 0.31 ----------------------------------------------------------------------