Email: 335227 Autolearn: 0 AvgScore: 3.16 AvgScanTime: 6.85 sec Spam: 111256 Autolearn: 0 AvgScore: 12.44 AvgScanTime: 7.77 sec Ham: 223971 Autolearn: 0 AvgScore: -1.45 AvgScanTime: 6.40 sec Time Spent Running SA: 638.14 hours Time Spent Processing Spam: 240.00 hours Time Spent Processing Ham: 398.13 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 107618 89.42 96.73 85.79 2 DKIM_SIGNED 99392 80.94 89.34 76.77 3 XM_DK_Pass 97289 79.67 87.45 75.80 4 DCC_CHECK 90975 55.83 81.77 42.94 5 XMListUnsubscribeExists 87397 58.67 78.55 48.79 6 DKIM_VALID 67405 58.90 60.59 58.06 7 XM_H_QuotedFrom 62278 45.33 55.98 40.03 8 XM_DK_Undo_02 57546 27.18 51.72 14.98 9 DKIM_VALID_AU 56370 46.71 50.67 44.75 10 BAYES_99 50899 24.79 45.75 14.38 11 LOC_TINY_FONT_1 45414 29.42 40.82 23.76 12 BAYES_999 44146 21.77 39.68 12.88 13 HTML_FONT_LOW_CONTRAST 41854 31.08 37.62 27.83 14 TR_DCC_Bayes_99 40613 16.74 36.50 6.92 15 BAYES_50 35397 45.61 31.82 52.46 16 MIME_HTML_ONLY 34636 26.88 31.13 24.78 17 DKIM_INVALID 31987 22.04 28.75 18.71 18 FVGT_m_MULTI_ODD 29634 22.11 26.64 19.86 19 XMSubLong 27396 21.28 24.62 19.62 20 XM_Body_Dirty_Words 25489 14.71 22.91 10.64 21 HTML_IMAGE_RATIO_02 24476 12.70 22.00 8.08 22 T_KAM_HTML_FONT_INVALID 20062 14.86 18.03 13.29 23 DCC_CHECK_NEGATIVE 18653 42.71 16.77 55.60 24 XM_Multi_Part_URI 17968 14.25 16.15 13.31 25 RELAYCOUNTRY_META 17954 8.00 16.14 3.96 26 T_TM2_M_HEADER_IN_MSG 17831 19.70 16.03 21.52 27 XM_Evil_Numbers_Gen 16831 11.17 15.13 9.20 28 MultiRelay 16500 17.07 14.83 18.18 29 HTML_IMAGE_RATIO_04 14605 8.41 13.13 6.07 30 XMSexyCombo_05 14285 6.97 12.84 4.05 31 BOTNET_IPINHOSTNAME 14090 8.42 12.66 6.32 32 BOTNET 13016 4.63 11.70 1.12 33 UNTRUSTED_Relay 11571 4.17 10.40 1.07 34 FSL_BULK_SIG 11142 11.13 10.01 11.68 35 LOTS_OF_MONEY 11087 10.46 9.97 10.70 36 DKIM_VALID_EF 11074 13.80 9.95 15.71 37 T_XMDrugObfuBody_14 10992 7.43 9.88 6.22 38 FROM_EXCESS_BASE64 9812 5.41 8.82 3.72 39 XM_H_Long_From01 9584 6.70 8.61 5.74 40 XM_B_Phish_Phrases 9544 7.58 8.58 7.08 41 LotsOfNums_01 9410 8.01 8.46 7.79 42 TooManyTo_001 9123 6.69 8.20 5.95 43 XMSubMetaSx_00 8738 5.35 7.85 4.11 44 BAYES_80 8031 4.74 7.22 3.50 45 MPART_ALT_DIFF 7920 6.32 7.12 5.92 46 TR_XM_DocInvoice 7342 6.53 6.60 6.50 47 RCVD_IN_RP_SAFE 6976 9.37 6.27 10.91 48 XM_UncommonTLD01 6883 5.98 6.19 5.88 49 XMStrtUSub 6631 5.85 5.96 5.80 50 MIME_HTML_MOSTLY 6242 4.19 5.61 3.48 51 BAYES_60 5985 5.69 5.38 5.85 52 MIME_QP_LONG_LINE 5959 4.67 5.36 4.32 53 XM_UB50 5409 2.04 4.86 0.64 54 XM_DIRTYINTL 5090 2.65 4.58 1.69 55 XMNumbers 5056 3.95 4.54 3.66 56 RCVD_IN_RP_CERTIFIED 4907 7.56 4.41 9.12 57 BAYES_95 4650 3.08 4.18 2.54 58 XM_SendGrid 4486 5.06 4.03 5.57 59 XM_CamelCaseFrm001 4431 2.41 3.98 1.63 60 HTML_IMAGE_RATIO_06 4351 3.51 3.91 3.32 61 TM2_M_URI_OPT_OUT 3957 4.32 3.56 4.69 62 T_REMOTE_IMAGE 3752 4.51 3.37 5.08 63 URI_HEX 3693 2.17 3.32 1.59 64 T_TooManySym_01 3627 4.20 3.26 4.66 65 XMSubMetaI_00 3571 1.71 3.21 0.96 66 MultiRelay_Combo 3555 1.16 3.20 0.15 67 MultiRelay_CC 3555 1.16 3.20 0.15 68 HTML_IMAGE_RATIO_08 3344 2.57 3.01 2.36 69 MIME_HTML_ONLY_MULTI 3320 3.81 2.98 4.23 70 RELAYCOUNTRY_CA 3190 1.81 2.87 1.28 71 XMBdyGiftCard01 3174 2.09 2.85 1.72 72 XMDiploma_00 2947 1.62 2.65 1.12 73 XM_SPF_SoftFail 2915 1.91 2.62 1.56 74 SpammyFromTLD_02 2771 0.95 2.49 0.18 75 RELAYCOUNTRY_FR 2627 0.96 2.36 0.27 76 BAYES_00 2580 8.87 2.32 12.12 77 RCVD_IN_BL_SPAMCOP_NET 2531 0.93 2.27 0.27 78 BODY_ENHANCEMENT 2469 0.75 2.22 0.03 79 XMSexyCombo_01 2457 1.09 2.21 0.54 80 SUBJ_ALL_CAPS 2392 2.50 2.15 2.68 81 T_MONEY_PERCENT 2356 0.97 2.12 0.40 82 TR_LOTS_OF_MONEY2 2356 0.97 2.12 0.40 83 XMBody_17 2347 1.00 2.11 0.45 84 XM_URI_RBL 2333 0.79 2.10 0.15 85 XM_OfRef6 2287 1.45 2.06 1.15 86 SUBJ_DOLLARS 2247 1.05 2.02 0.58 87 XMPhish30 2180 1.09 1.96 0.66 88 TR_XM_DK_Bayes 2177 6.35 1.96 8.53 89 T_XMDrugObfuBody_08 2111 1.35 1.90 1.08 90 T_XMHurry_00 2048 1.20 1.84 0.88 91 HTML_MIME_NO_HTML_TAG 2030 1.80 1.82 1.79 92 MAILING_LIST_MULTI 2024 2.07 1.82 2.19 93 XM_B_REG_HTML 2018 1.02 1.81 0.62 94 XM_ProductURIs 1900 1.43 1.71 1.29 95 RCVD_IN_MSPIKE_H2 1873 2.73 1.68 3.25 96 TM2_M_VERY_LONG_WORD 1829 1.18 1.64 0.95 97 TooManyTo_002 1819 1.52 1.63 1.47 98 RCVD_IN_RP_RNBL 1801 0.54 1.62 0.01 99 XM_RXBody 1770 0.70 1.59 0.25 100 UNPARSEABLE_RELAY 1737 4.36 1.56 5.74 101 XMStockSpam_06 1732 1.51 1.56 1.48 102 RELAYCOUNTRY_AT 1709 0.60 1.54 0.14 103 XM_UB99 1694 0.51 1.52 0.01 104 T_XMDrugObfuBody_00 1690 1.09 1.52 0.87 105 TooManyTo_003 1677 1.17 1.51 1.01 106 SpammyFromTLD_01 1671 1.28 1.50 1.17 107 RCVD_IN_IADB_LISTED 1648 3.14 1.48 3.97 108 BOTNET_NORDNS 1612 0.49 1.45 0.01 109 XMGenDplmaNmb 1606 0.93 1.44 0.67 110 XMSexyCombo_04 1594 0.52 1.43 0.07 111 XM_S_JOY_D 1582 0.88 1.42 0.61 112 BAYES_40 1578 3.60 1.42 4.68 113 XMSubNoVowel 1542 1.30 1.39 1.25 114 LONG_JUNK_URI 1459 0.52 1.31 0.12 115 XM_B_COPY_HTML 1459 0.85 1.31 0.63 116 RCVD_IN_IADB_SPF 1456 2.76 1.31 3.48 117 TooManyTo_004 1426 0.93 1.28 0.76 118 URI_TRY_3LD 1424 1.14 1.28 1.08 119 XM_DK_Undo_01 1413 1.69 1.27 1.90 120 DIET_1 1407 0.62 1.26 0.30 121 XMBody_78 1402 0.87 1.26 0.67 122 TR_XM_DK_Bayes1 1401 4.72 1.26 6.43 123 URIBL_BLACK 1396 0.45 1.25 0.05 124 RCVD_IN_IADB_DK 1388 2.43 1.25 3.02 125 RCVD_IN_IADB_SENDERID 1384 2.46 1.24 3.07 126 XMSubEmpty 1362 0.57 1.22 0.24 127 TR_XM_DK_Bayes2 1328 3.72 1.19 4.98 128 TooManyTo_005 1319 0.83 1.19 0.65 129 BAYES_20 1318 2.32 1.18 2.88 130 RELAYCOUNTRY_JP 1318 0.41 1.18 0.03 131 XM_UB60 1306 0.42 1.17 0.05 132 TR_XM_RelayPhish 1300 0.69 1.17 0.46 133 PLING_QUERY 1271 0.53 1.14 0.23 134 XMGappySubj_01 1259 0.54 1.13 0.25 135 HTML_FONT_FACE_BAD 1258 0.66 1.13 0.42 136 RELAYCOUNTRY_GB 1247 0.80 1.12 0.65 137 RELAYCOUNTRY_CN 1203 0.38 1.08 0.03 138 XM_HighProb1 1200 0.37 1.08 0.03 139 XM_UB999 1197 0.36 1.08 0.01 140 XM_BadFromFormat 1191 0.54 1.07 0.28 141 T_HTML_TAG_BALANCE_CENTER 1158 0.51 1.04 0.24 142 RDNS_DYNAMIC 1117 0.73 1.00 0.59 143 T_Symld_Words_02 1114 0.56 1.00 0.34 144 XMPhish11 1086 0.83 0.98 0.76 145 MPART_ALT_DIFF_COUNT 1039 0.52 0.93 0.32 146 XM_H_Long_From02 1032 1.00 0.93 1.04 147 HTML_FONT_SIZE_HUGE 1031 0.41 0.93 0.16 148 ALL_TRUSTED 1024 9.12 0.92 13.19 149 XM_H_PHPOS 1018 1.55 0.92 1.87 150 DATE_IN_PAST_03_06 1004 0.39 0.90 0.13 151 XMPhish14 972 0.43 0.87 0.20 152 XMBrknScrpt_02 963 0.68 0.87 0.59 153 BASE64_LENGTH_79_INF 957 0.39 0.86 0.16 154 LONG_JUNK_URI3 955 0.35 0.86 0.10 155 DATE_IN_PAST_06_12 953 0.39 0.86 0.15 156 XMClaimOffer 940 0.44 0.84 0.24 157 LongTLD 934 0.37 0.84 0.14 158 XM_UB80 922 0.29 0.83 0.02 159 TR_Caps_n_Bayes_99 922 0.46 0.83 0.28 160 XMHTML_After_End 921 0.52 0.83 0.36 161 TR_Mismatch_TLD_02 920 0.32 0.83 0.06 162 RELAYCOUNTRY_BR 918 0.29 0.83 0.03 163 XM_Hitman 896 0.29 0.81 0.03 164 URI_NOVOWEL 864 0.57 0.78 0.47 165 XMSubMetaSxObfu_02 842 0.78 0.76 0.79 166 LONG_HEX_URI 820 0.31 0.74 0.10 167 HTML_TAG_BALANCE_BODY 820 0.61 0.74 0.54 168 TR_Symld_Words 818 1.92 0.74 2.50 169 BAYES_05 817 1.31 0.73 1.59 170 GAPPY_SUBJECT 813 0.62 0.73 0.56 171 RELAYCOUNTRY_IN 803 0.29 0.72 0.08 172 RCVD_IN_MSPIKE_BL 801 0.48 0.72 0.35 173 XM_Body_Obfu01 786 0.33 0.71 0.15 174 REMOVE_BEFORE_LINK 775 0.36 0.70 0.19 175 RCVD_IN_MSPIKE_WL 763 2.12 0.69 2.83 176 XMSubMetaSSx_00 762 0.34 0.68 0.17 177 RCVD_IN_MSPIKE_H3 759 2.11 0.68 2.81 178 RCVD_IN_PSBL 748 0.29 0.67 0.10 179 URIBL_DBL_SPAM 743 0.23 0.67 0.01 180 FORGED_OUTLOOK_HTML 737 0.22 0.66 0.00 181 XMHTMLBadTable_001 737 0.51 0.66 0.44 182 T_FILL_THIS_FORM_SHORT 736 0.60 0.66 0.58 183 T_TooManySym_02 733 1.50 0.66 1.92 184 TVD_PH_BODY_ACCOUNTS_PRE 705 0.35 0.63 0.20 185 XM_GoogleGroups 701 1.08 0.63 1.30 186 INVALID_DATE 698 0.28 0.63 0.11 187 NUMERIC_HTTP_ADDR 696 0.28 0.63 0.11 188 TR_LOTS_OF_MONEY3 695 0.35 0.62 0.21 189 RELAYCOUNTRY_DE 682 0.40 0.61 0.29 190 RELAYCOUNTRY_PL 658 0.21 0.59 0.01 191 LONG_JUNK_URI2 656 0.20 0.59 0.01 192 DOS_OE_TO_MX 648 0.19 0.58 0.00 193 MONEY_BACK 646 0.23 0.58 0.06 194 RCVD_IN_MSPIKE_L5 645 0.23 0.58 0.05 195 RCVD_IN_IADB_VOUCHED 641 2.03 0.58 2.75 196 XM_H_PHPMailer 640 0.64 0.58 0.67 197 RELAYCOUNTRY_AU 639 0.40 0.57 0.31 198 XMGppyBdWords 638 0.32 0.57 0.19 199 XMSlimDrugH 617 0.34 0.55 0.23 200 LOW_PRICE 617 0.27 0.55 0.13 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 192141 89.42 96.73 85.79 2 DKIM_SIGNED 171938 80.94 89.34 76.77 3 XM_DK_Pass 169779 79.67 87.45 75.80 4 DKIM_VALID 130039 58.90 60.59 58.06 5 DCC_CHECK_NEGATIVE 124524 42.71 16.77 55.60 6 BAYES_50 117495 45.61 31.82 52.46 7 XMListUnsubscribeExists 109279 58.67 78.55 48.79 8 DKIM_VALID_AU 100217 46.71 50.67 44.75 9 DCC_CHECK 96182 55.83 81.77 42.94 10 XM_H_QuotedFrom 89665 45.33 55.98 40.03 11 HTML_FONT_LOW_CONTRAST 62333 31.08 37.62 27.83 12 MIME_HTML_ONLY 55489 26.88 31.13 24.78 13 LOC_TINY_FONT_1 53209 29.42 40.82 23.76 14 T_TM2_M_HEADER_IN_MSG 48195 19.70 16.03 21.52 15 FVGT_m_MULTI_ODD 44472 22.11 26.64 19.86 16 XMSubLong 43952 21.28 24.62 19.62 17 DKIM_INVALID 41899 22.04 28.75 18.71 18 MultiRelay 40718 17.07 14.83 18.18 19 DKIM_VALID_EF 35183 13.80 9.95 15.71 20 XM_DKIMWhitelistDomains 34159 10.23 0.12 15.25 21 XM_DK_Undo_02 33562 27.18 51.72 14.98 22 BAYES_99 32209 24.79 45.75 14.38 23 XM_Multi_Part_URI 29802 14.25 16.15 13.31 24 T_KAM_HTML_FONT_INVALID 29765 14.86 18.03 13.29 25 ALL_TRUSTED 29541 9.12 0.92 13.19 26 BAYES_999 28841 21.77 39.68 12.88 27 BAYES_00 27152 8.87 2.32 12.12 28 FSL_BULK_SIG 26162 11.13 10.01 11.68 29 RCVD_IN_RP_SAFE 24427 9.37 6.27 10.91 30 LOTS_OF_MONEY 23972 10.46 9.97 10.70 31 XM_Body_Dirty_Words 23824 14.71 22.91 10.64 32 XM_Evil_Numbers_Gen 20602 11.17 15.13 9.20 33 RCVD_IN_RP_CERTIFIED 20420 7.56 4.41 9.12 34 TR_XM_DK_Bayes 19098 6.35 1.96 8.53 35 IN_ZIMBRA_NJ_WHITELIST 18737 5.60 0.03 8.37 36 HTML_IMAGE_RATIO_02 18104 12.70 22.00 8.08 37 LotsOfNums_01 17448 8.01 8.46 7.79 38 XM_B_Phish_Phrases 15851 7.58 8.58 7.08 39 TR_DCC_Bayes_99 15506 16.74 36.50 6.92 40 TR_XM_DocInvoice 14550 6.53 6.60 6.50 41 TR_XM_DK_Bayes1 14406 4.72 1.26 6.43 42 BOTNET_IPINHOSTNAME 14148 8.42 12.66 6.32 43 T_XMDrugObfuBody_14 13928 7.43 9.88 6.22 44 HTML_IMAGE_RATIO_04 13589 8.41 13.13 6.07 45 TooManyTo_001 13319 6.69 8.20 5.95 46 MPART_ALT_DIFF 13269 6.32 7.12 5.92 47 XM_UncommonTLD01 13169 5.98 6.19 5.88 48 BAYES_60 13104 5.69 5.38 5.85 49 XMStrtUSub 12994 5.85 5.96 5.80 50 XM_H_Long_From01 12867 6.70 8.61 5.74 51 UNPARSEABLE_RELAY 12865 4.36 1.56 5.74 52 XM_SendGrid 12470 5.06 4.03 5.57 53 T_REMOTE_IMAGE 11367 4.51 3.37 5.08 54 TR_XM_DK_Bayes2 11145 3.72 1.19 4.98 55 TM2_M_URI_OPT_OUT 10513 4.32 3.56 4.69 56 TVD_RCVD_IP 10496 3.26 0.38 4.69 57 BAYES_40 10474 3.60 1.42 4.68 58 T_TooManySym_01 10448 4.20 3.26 4.66 59 MIME_QP_LONG_LINE 9683 4.67 5.36 4.32 60 MIME_HTML_ONLY_MULTI 9464 3.81 2.98 4.23 61 XMSubMetaSx_00 9203 5.35 7.85 4.11 62 XMSexyCombo_05 9068 6.97 12.84 4.05 63 RCVD_IN_IADB_LISTED 8887 3.14 1.48 3.97 64 RELAYCOUNTRY_META 8864 8.00 16.14 3.96 65 XM_PDF 8773 2.74 0.36 3.92 66 FROM_EXCESS_BASE64 8336 5.41 8.82 3.72 67 XMNumbers 8190 3.95 4.54 3.66 68 BAYES_80 7842 4.74 7.22 3.50 69 MIME_HTML_MOSTLY 7805 4.19 5.61 3.48 70 RCVD_IN_IADB_SPF 7787 2.76 1.31 3.48 71 INVALID_MSGID 7468 2.32 0.29 3.33 72 HTML_IMAGE_RATIO_06 7427 3.51 3.91 3.32 73 RCVD_IN_MSPIKE_H2 7276 2.73 1.68 3.25 74 RCVD_IN_IADB_SENDERID 6870 2.46 1.24 3.07 75 RCVD_IN_IADB_DK 6772 2.43 1.25 3.02 76 BAYES_20 6448 2.32 1.18 2.88 77 TO_MALFORMED 6342 1.90 0.01 2.83 78 RCVD_IN_MSPIKE_WL 6335 2.12 0.69 2.83 79 RCVD_IN_MSPIKE_H3 6300 2.11 0.68 2.81 80 RCVD_IN_IADB_VOUCHED 6155 2.03 0.58 2.75 81 IN_HORDE_ADDRESS_BOOK 6152 1.86 0.07 2.75 82 SUBJ_ALL_CAPS 5994 2.50 2.15 2.68 83 BAYES_95 5688 3.08 4.18 2.54 84 TR_Symld_Words 5610 1.92 0.74 2.50 85 HTML_IMAGE_RATIO_08 5282 2.57 3.01 2.36 86 MAILING_LIST_MULTI 4915 2.07 1.82 2.19 87 T_TooManySym_02 4310 1.50 0.66 1.92 88 XM_DK_Undo_01 4251 1.69 1.27 1.90 89 XM_H_PHPOS 4184 1.55 0.92 1.87 90 ANY_BOUNCE_MESSAGE 4116 1.38 0.46 1.84 91 BOUNCE_MESSAGE 4113 1.38 0.46 1.84 92 HTML_MIME_NO_HTML_TAG 4015 1.80 1.82 1.79 93 XMBdyGiftCard01 3848 2.09 2.85 1.72 94 XM_DIRTYINTL 3795 2.65 4.58 1.69 95 USER_IN_DEF_DKIM_WL 3745 1.16 0.12 1.67 96 XM_CamelCaseFrm001 3645 2.41 3.98 1.63 97 URI_HEX 3570 2.17 3.32 1.59 98 BAYES_05 3559 1.31 0.73 1.59 99 XM_SPF_SoftFail 3486 1.91 2.62 1.56 100 XMStockSpam_06 3320 1.51 1.56 1.48 101 TooManyTo_002 3292 1.52 1.63 1.47 102 RCVD_IN_IADB_OPTIN 2980 1.02 0.39 1.33 103 XM_GoogleGroups 2915 1.08 0.63 1.30 104 XM_ProductURIs 2894 1.43 1.71 1.29 105 RELAYCOUNTRY_CA 2868 1.81 2.87 1.28 106 XMSubNoVowel 2800 1.30 1.39 1.25 107 USER_IN_WHITELIST 2673 0.80 0.00 1.19 108 SpammyFromTLD_01 2614 1.28 1.50 1.17 109 XM_OfRef6 2568 1.45 2.06 1.15 110 BOTNET 2507 4.63 11.70 1.12 111 XMDiploma_00 2500 1.62 2.65 1.12 112 T_XMDrugObfuBody_08 2428 1.35 1.90 1.08 113 URI_TRY_3LD 2409 1.14 1.28 1.08 114 UNTRUSTED_Relay 2403 4.17 10.40 1.07 115 XM_H_Long_From02 2322 1.00 0.93 1.04 116 TooManyTo_003 2257 1.17 1.51 1.01 117 XM_D_tchamptons_WL 2153 0.64 0.00 0.96 118 XMSubMetaI_00 2149 1.71 3.21 0.96 119 TM2_M_VERY_LONG_WORD 2126 1.18 1.64 0.95 120 T_XMHurry_00 1978 1.20 1.84 0.88 121 T_XMDrugObfuBody_00 1952 1.09 1.52 0.87 122 T_TooManySym_03 1937 0.65 0.21 0.86 123 TM2_M_A_HREF_HREF 1897 0.71 0.44 0.85 124 HELO_NODOT 1791 0.58 0.14 0.80 125 XMSubMetaSxObfu_02 1780 0.78 0.76 0.79 126 DKIM_ADSP_CUSTOM_MED 1753 0.70 0.55 0.78 127 XMPhish11 1710 0.83 0.98 0.76 128 TooManyTo_004 1701 0.93 1.28 0.76 129 GMD_PDF_EMPTY_BODY 1583 0.49 0.06 0.71 130 XMBody_95 1572 0.50 0.10 0.70 131 XM_H_PHPMailer 1509 0.64 0.58 0.67 132 XMGenDplmaNmb 1500 0.93 1.44 0.67 133 XMBody_78 1499 0.87 1.26 0.67 134 XMPhish30 1475 1.09 1.96 0.66 135 TooManyTo_005 1454 0.83 1.19 0.65 136 RELAYCOUNTRY_GB 1445 0.80 1.12 0.65 137 XM_UB50 1429 2.04 4.86 0.64 138 XM_B_COPY_HTML 1404 0.85 1.31 0.63 139 FILL_THIS_FORM 1397 0.59 0.54 0.62 140 XM_B_REG_HTML 1386 1.02 1.81 0.62 141 XM_S_JOY_D 1367 0.88 1.42 0.61 142 RDNS_DYNAMIC 1319 0.73 1.00 0.59 143 XMBrknScrpt_02 1314 0.68 0.87 0.59 144 T_FILL_THIS_FORM_SHORT 1291 0.60 0.66 0.58 145 SUBJ_DOLLARS 1289 1.05 2.02 0.58 146 XM_ShortIntro_01 1272 0.51 0.41 0.57 147 GAPPY_SUBJECT 1264 0.62 0.73 0.56 148 TR_MetaPhish_Combo_01 1249 0.52 0.43 0.56 149 HTML_TAG_BALANCE_BODY 1210 0.61 0.74 0.54 150 XMSexyCombo_01 1200 1.09 2.21 0.54 151 NML_ADSP_CUSTOM_MED 1140 0.49 0.46 0.51 152 XM_H_PHPOS_M 1133 0.48 0.42 0.51 153 T_OBFU_PDF_ATTACH 1127 0.38 0.12 0.50 154 XMNoVowels 1073 0.41 0.27 0.48 155 URI_NOVOWEL 1059 0.57 0.78 0.47 156 T_FILL_THIS_FORM_LONG 1023 0.37 0.19 0.46 157 TR_XM_RelayPhish 1020 0.69 1.17 0.46 158 RCVD_IN_IADB_DOPTIN 1015 0.32 0.06 0.45 159 T_TooManySym_04 1005 0.32 0.05 0.45 160 XMBody_17 1003 1.00 2.11 0.45 161 T_FILL_THIS_FORM_LOAN 990 0.32 0.06 0.44 162 XMHTMLBadTable_001 980 0.51 0.66 0.44 163 XM_E_Blogspot 953 0.33 0.15 0.43 164 HTML_FONT_FACE_BAD 945 0.66 1.13 0.42 165 TVD_SPACE_RATIO 915 0.44 0.51 0.41 166 XMUrgent 908 0.41 0.42 0.41 167 HTML_IMAGE_ONLY_32 901 0.36 0.26 0.40 168 TR_LOTS_OF_MONEY2 886 0.97 2.12 0.40 169 T_MONEY_PERCENT 886 0.97 2.12 0.40 170 XMCapTrack 843 0.35 0.31 0.38 171 FROM_EGROUPS 836 0.25 0.01 0.37 172 XM_B_TRADE_HTML 827 0.39 0.44 0.37 173 XMHTML_After_End 814 0.52 0.83 0.36 174 TRACKER_ID 808 0.36 0.35 0.36 175 XMRcvdHeader_15 807 0.24 0.00 0.36 176 RCVD_IN_MSPIKE_BL 793 0.48 0.72 0.35 177 UPPERCASE_50_75 790 0.30 0.19 0.35 178 MISSING_HEADERS 771 0.38 0.46 0.34 179 HTML_IMAGE_ONLY_28 768 0.32 0.28 0.34 180 XMBody_29 761 0.34 0.35 0.34 181 HTML_IMAGE_ONLY_20 755 0.32 0.30 0.34 182 T_Symld_Words_02 755 0.56 1.00 0.34 183 NO_DNS_FOR_FROM 742 0.31 0.25 0.33 184 FORGED_GMAIL_RCVD 730 0.34 0.37 0.33 185 TVD_PH_BODY_META_ALL 729 0.37 0.46 0.33 186 HTML_IMAGE_ONLY_24 726 0.36 0.44 0.32 187 MPART_ALT_DIFF_COUNT 718 0.52 0.93 0.32 188 DKIM_ADSP_NXDOMAIN 716 0.31 0.30 0.32 189 HTTPS_HTTP_MISMATCH 710 0.38 0.52 0.32 190 RELAYCOUNTRY_AU 686 0.40 0.57 0.31 191 TM2_M_BODY_EMPTY 685 0.38 0.52 0.31 192 RCVD_IN_MSPIKE_L3 679 0.23 0.09 0.30 193 DIET_1 665 0.62 1.26 0.30 194 TR_MetaPhish_Combo_01b 665 0.26 0.17 0.30 195 XMSUPPORT 654 0.20 0.00 0.29 196 RELAYCOUNTRY_DE 652 0.40 0.61 0.29 197 TR_Caps_n_Bayes_99 636 0.46 0.83 0.28 198 PRESENTAMOS_ES 628 0.19 0.01 0.28 199 XM_BadFromFormat 624 0.54 1.07 0.28 200 XMSubMetaSxObfu_03 621 0.37 0.55 0.28 ----------------------------------------------------------------------