Email: 406507 Autolearn: 0 AvgScore: 3.70 AvgScanTime: 3.59 sec Spam: 133058 Autolearn: 0 AvgScore: 12.76 AvgScanTime: 4.53 sec Ham: 273449 Autolearn: 0 AvgScore: -0.70 AvgScanTime: 3.13 sec Time Spent Running SA: 405.36 hours Time Spent Processing Spam: 167.44 hours Time Spent Processing Ham: 237.92 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 127941 87.55 96.15 83.37 2 DKIM_SIGNED 115452 76.35 86.77 71.28 3 XM_DK_Pass 112536 74.73 84.58 69.95 4 DCC_CHECK 107456 49.42 80.76 34.17 5 DKIM_VALID 106350 69.86 79.93 64.96 6 XMListUnsubscribeExists 98333 53.80 73.90 44.01 7 DKIM_VALID_AU 85157 52.87 64.00 47.45 8 XM_H_QuotedFrom 73292 41.06 55.08 34.23 9 XM_DK_Undo_02 71981 28.06 54.10 15.38 10 BAYES_99 64277 25.55 48.31 14.48 11 BAYES_999 55579 22.33 41.77 12.86 12 TR_DCC_Bayes_99 52003 17.23 39.08 6.60 13 LOC_TINY_FONT_1 49491 25.34 37.20 19.57 14 HTML_FONT_LOW_CONTRAST 48804 28.38 36.68 24.35 15 MIME_HTML_ONLY 41138 22.36 30.92 18.19 16 BAYES_50 39325 49.12 29.55 58.64 17 FVGT_m_MULTI_ODD 35236 21.68 26.48 19.34 18 XMSubLong 34233 22.33 25.73 20.67 19 DKIM_VALID_EF 29856 25.96 22.44 27.67 20 T_TM2_M_HEADER_IN_MSG 27420 28.88 20.61 32.90 21 XM_Body_Dirty_Words 25927 12.63 19.49 9.29 22 T_KAM_HTML_FONT_INVALID 24956 15.47 18.76 13.87 23 MultiRelay 23928 19.08 17.98 19.62 24 DCC_CHECK_NEGATIVE 23238 48.68 17.46 63.87 25 RELAYCOUNTRY_META 23069 9.59 17.34 5.82 26 XM_Multi_Part_URI 22730 12.96 17.08 10.96 27 XM_Evil_Numbers_Gen 21607 10.76 16.24 8.10 28 HTML_IMAGE_RATIO_02 20692 9.27 15.55 6.22 29 BOTNET 19565 5.77 14.70 1.43 30 BOTNET_IPINHOSTNAME 17915 7.92 13.46 5.22 31 FSL_BULK_SIG 16308 9.08 12.26 7.53 32 HTML_IMAGE_RATIO_04 15727 6.84 11.82 4.42 33 UNTRUSTED_Relay 14866 4.72 11.17 1.58 34 LOTS_OF_MONEY 14304 8.56 10.75 7.50 35 XMSexyCombo_05 14175 5.29 10.65 2.68 36 T_XMDrugObfuBody_14 13826 8.50 10.39 7.59 37 LotsOfNums_01 12897 8.25 9.69 7.55 38 XM_B_Phish_Phrases 12278 6.21 9.23 4.74 39 XM_H_Long_From01 11003 6.53 8.27 5.68 40 TooManyTo_001 10944 9.28 8.22 9.79 41 XM_UncommonTLD01 10123 5.52 7.61 4.50 42 BAYES_80 9938 5.22 7.47 4.13 43 MPART_ALT_DIFF 9381 3.99 7.05 2.49 44 FROM_EXCESS_BASE64 9354 4.68 7.03 3.54 45 TR_XM_DocInvoice 9238 5.10 6.94 4.20 46 DKIM_INVALID 9102 6.49 6.84 6.32 47 BAYES_60 8419 6.49 6.33 6.57 48 RCVD_IN_RP_SAFE 8294 8.75 6.23 9.98 49 XMSubMetaSx_00 7776 4.33 5.84 3.60 50 T_REMOTE_IMAGE 7712 4.95 5.80 4.54 51 XMStrtUSub 7178 4.89 5.39 4.64 52 RCVD_IN_RP_CERTIFIED 7155 7.99 5.38 9.26 53 XMNumbers 7024 4.45 5.28 4.05 54 MIME_QP_LONG_LINE 6630 5.07 4.98 5.11 55 MIME_HTML_MOSTLY 6428 3.16 4.83 2.35 56 BAYES_95 6303 3.33 4.74 2.65 57 XM_UB50 6157 2.31 4.63 1.18 58 TM2_M_URI_OPT_OUT 6073 2.63 4.56 1.68 59 HTML_IMAGE_RATIO_08 5774 2.64 4.34 1.82 60 T_TooManySym_01 5772 5.25 4.34 5.70 61 HTML_IMAGE_RATIO_06 5499 3.49 4.13 3.18 62 XM_SendGrid 5259 4.62 3.95 4.94 63 XM_DIRTYINTL 5127 2.23 3.85 1.44 64 MultiRelay_CC 5092 1.44 3.83 0.28 65 MultiRelay_Combo 5092 1.44 3.83 0.28 66 SUBJ_ALL_CAPS 4881 2.43 3.67 1.83 67 RCVD_IN_MSPIKE_H2 4774 4.67 3.59 5.20 68 URI_HEX 4718 1.90 3.55 1.10 69 XM_CamelCaseFrm001 4492 2.24 3.38 1.68 70 MIME_HTML_ONLY_MULTI 4472 1.79 3.36 1.02 71 XM_SPF_SoftFail 4467 2.62 3.36 2.27 72 NO_DNS_FOR_FROM 4393 2.54 3.30 2.16 73 RCVD_IN_BL_SPAMCOP_NET 4355 1.52 3.27 0.66 74 RELAYCOUNTRY_CA 4172 1.96 3.14 1.39 75 SpammyFromTLD_02 4128 1.15 3.10 0.19 76 XMHTML_After_End 3676 1.13 2.76 0.33 77 BOTNET_NORDNS 3484 0.90 2.62 0.07 78 XMSubMetaI_00 3313 1.71 2.49 1.33 79 XM_UB99 3252 0.81 2.44 0.01 80 MAILING_LIST_MULTI 3179 3.00 2.39 3.29 81 XM_H_Long_From02 3056 1.32 2.30 0.85 82 TR_Caps_n_Bayes_99 3019 0.84 2.27 0.14 83 XMStockSpam_06 2990 1.40 2.25 0.99 84 RELAYCOUNTRY_FR 2876 0.89 2.16 0.28 85 XMDiploma_00 2833 1.60 2.13 1.35 86 HTML_FONT_SIZE_LARGE 2799 0.80 2.10 0.17 87 XMLongAddy 2751 0.71 2.07 0.06 88 XMBdyGiftCard01 2744 1.33 2.06 0.97 89 HTML_MIME_NO_HTML_TAG 2727 2.29 2.05 2.41 90 RCVD_IN_RP_RNBL 2724 0.69 2.05 0.04 91 XMBody_17 2700 0.98 2.03 0.47 92 RCVD_IN_IADB_LISTED 2698 4.07 2.03 5.06 93 XM_URI_RBL 2679 0.74 2.01 0.12 94 XM_OfRef6 2620 1.78 1.97 1.70 95 BODY_URI_ONLY 2602 0.74 1.96 0.14 96 T_TooManySym_02 2568 2.26 1.93 2.42 97 XM_UB999 2566 0.64 1.93 0.01 98 HTML_IMAGE_ONLY_08 2551 0.73 1.92 0.15 99 T_XMDrugObfuBody_08 2494 1.42 1.87 1.20 100 XMPhish30 2424 0.84 1.82 0.36 101 HTML_SHORT_LINK_IMG_1 2415 0.61 1.81 0.03 102 RCVD_IN_IADB_SPF 2330 3.53 1.75 4.39 103 UNPARSEABLE_RELAY 2277 3.34 1.71 4.14 104 RCVD_IN_IADB_SENDERID 2224 3.16 1.67 3.89 105 TM2_M_VERY_LONG_WORD 2215 1.12 1.66 0.85 106 TooManyTo_002 2205 2.72 1.66 3.23 107 XM_RXBody 2195 0.78 1.65 0.36 108 SpammyFromTLD_01 2183 1.08 1.64 0.80 109 RCVD_IN_IADB_DK 2171 3.08 1.63 3.79 110 XM_DK_Undo_01 2085 1.81 1.57 1.93 111 XM_UB60 2078 0.56 1.56 0.08 112 XM_ProductURIs 2058 1.25 1.55 1.11 113 LOW_PRICE 2042 0.74 1.53 0.35 114 XMSexyCombo_01 2041 0.74 1.53 0.36 115 TR_XM_RelayPhish 2025 0.77 1.52 0.40 116 TooManyTo_003 2017 1.92 1.52 2.11 117 URIBL_BLACK 1898 0.50 1.43 0.05 118 XM_B_REG_HTML 1880 0.86 1.41 0.59 119 RELAYCOUNTRY_CN 1880 0.51 1.41 0.07 120 DIET_1 1834 0.69 1.38 0.35 121 DKIM_ADSP_CUSTOM_MED 1802 1.33 1.35 1.31 122 REMOVE_BEFORE_LINK 1760 0.60 1.32 0.25 123 TooManyTo_004 1740 1.50 1.31 1.59 124 SUBJ_DOLLARS 1713 0.54 1.29 0.17 125 T_FILL_THIS_FORM_SHORT 1696 0.95 1.27 0.79 126 BAYES_00 1690 4.44 1.27 5.98 127 T_XMDrugObfuBody_00 1683 0.87 1.26 0.67 128 XMPhish14 1673 0.61 1.26 0.29 129 MPART_ALT_DIFF_COUNT 1667 0.57 1.25 0.24 130 RELAYCOUNTRY_AT 1652 0.50 1.24 0.14 131 ALL_TRUSTED 1650 12.89 1.24 18.55 132 URIBL_DBL_SPAM 1614 0.40 1.21 0.01 133 T_XMHurry_00 1581 0.80 1.19 0.61 134 URI_TRY_3LD 1544 0.89 1.16 0.75 135 NML_ADSP_CUSTOM_MED 1543 1.04 1.16 0.98 136 HTML_TAG_BALANCE_BODY 1542 0.66 1.16 0.41 137 XM_HighProb1 1466 0.37 1.10 0.02 138 XMBody_78 1463 0.75 1.10 0.58 139 XMPhish11 1462 1.10 1.10 1.09 140 TR_Symld_Words 1452 1.87 1.09 2.25 141 XM_B_COPY_HTML 1451 0.85 1.09 0.73 142 XM_UB80 1448 0.37 1.09 0.02 143 XMMoneyMeta_00 1430 0.58 1.07 0.33 144 XM_H_PHPOS 1405 1.29 1.06 1.41 145 TR_LOTS_OF_MONEY2 1405 0.63 1.06 0.42 146 T_MONEY_PERCENT 1405 0.63 1.06 0.42 147 RELAYCOUNTRY_GB 1399 1.10 1.05 1.12 148 TR_XM_DK_Bayes 1390 2.79 1.04 3.64 149 XMGenDplmaNmb 1384 0.89 1.04 0.82 150 HTML_FONT_FACE_BAD 1383 0.62 1.04 0.42 151 BODY_ENHANCEMENT 1381 0.39 1.04 0.08 152 BAYES_40 1359 2.50 1.02 3.22 153 PLING_QUERY 1331 0.53 1.00 0.30 154 FVGT_m_MULTI_ODD_EMAIL 1319 0.36 0.99 0.05 155 TooManyTo_005 1305 1.19 0.98 1.29 156 TR_XM_DK_Bayes1 1300 2.59 0.98 3.38 157 T_HTML_TAG_BALANCE_CENTER 1269 0.36 0.95 0.07 158 TR_MetaPhish_Combo_01 1257 0.96 0.94 0.96 159 TR_XM_DK_Bayes2 1241 2.29 0.93 2.95 160 XM_S_JOY_D 1238 0.46 0.93 0.23 161 XMBrknScrpt_02 1236 0.66 0.93 0.53 162 ANY_BOUNCE_MESSAGE 1224 2.60 0.92 3.41 163 XM_DKIMWhitelistDomains 1222 7.46 0.92 10.64 164 BOUNCE_MESSAGE 1222 2.60 0.92 3.41 165 RELAYCOUNTRY_IT 1214 0.34 0.91 0.06 166 RELAYCOUNTRY_DE 1173 0.82 0.88 0.79 167 RCVD_IN_IADB_VOUCHED 1158 2.58 0.87 3.42 168 XM_PDF 1157 3.35 0.87 4.56 169 RCVD_IN_MSPIKE_WL 1146 1.53 0.86 1.86 170 RCVD_IN_MSPIKE_H3 1145 1.53 0.86 1.85 171 RDNS_DYNAMIC 1141 0.65 0.86 0.55 172 T_Symld_Words_02 1132 0.58 0.85 0.45 173 RCVD_IN_PSBL 1120 0.39 0.84 0.17 174 T_MANY_PILL_PRICE 1113 0.43 0.84 0.23 175 XM_BadFromFormat 1066 0.37 0.80 0.17 176 TM2_M_BODY_EMPTY 1061 0.51 0.80 0.37 177 HTTPS_HTTP_MISMATCH 1053 0.55 0.79 0.43 178 BAYES_20 1032 1.92 0.78 2.47 179 XMEmptyBody_01 1017 0.31 0.76 0.09 180 XMClaimOffer 1017 0.34 0.76 0.14 181 XM_H_PHPMailer 1015 0.77 0.76 0.78 182 HTML_IMAGE_ONLY_28 993 0.59 0.75 0.52 183 XMHTMLBadTable_001 973 0.49 0.73 0.38 184 URI_NOVOWEL 972 0.43 0.73 0.28 185 XMSexyCombo_04 946 0.30 0.71 0.10 186 FORGED_GMAIL_RCVD 944 0.64 0.71 0.61 187 FSL_THIS_IS_ADV 918 0.27 0.69 0.07 188 RELAYCOUNTRY_AU 890 0.46 0.67 0.36 189 XMCapTrack 848 1.20 0.64 1.47 190 XMBSHREFv2 846 0.27 0.64 0.10 191 LONG_JUNK_URI3 829 0.22 0.62 0.02 192 XMSubMetaSxObfu_03 828 0.42 0.62 0.32 193 HTML_FONT_SIZE_HUGE 815 0.25 0.61 0.08 194 RELAYCOUNTRY_IE 805 0.33 0.60 0.20 195 XM_GoogleGroups 804 1.25 0.60 1.56 196 TR_Mismatch_TLD_02 798 0.25 0.60 0.08 197 XMSlimDrugH 783 0.41 0.59 0.32 198 XMNoVowels 776 0.78 0.58 0.87 199 NUMERIC_HTTP_ADDR 774 0.27 0.58 0.12 200 FORGED_YAHOO_RCVD 762 0.22 0.57 0.05 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 227972 87.55 96.15 83.37 2 DKIM_SIGNED 194907 76.35 86.77 71.28 3 XM_DK_Pass 191265 74.73 84.58 69.95 4 DKIM_VALID 177633 69.86 79.93 64.96 5 DCC_CHECK_NEGATIVE 174659 48.68 17.46 63.87 6 BAYES_50 160349 49.12 29.55 58.64 7 DKIM_VALID_AU 129754 52.87 64.00 47.45 8 XMListUnsubscribeExists 120355 53.80 73.90 44.01 9 XM_H_QuotedFrom 93602 41.06 55.08 34.23 10 DCC_CHECK 93434 49.42 80.76 34.17 11 T_TM2_M_HEADER_IN_MSG 89961 28.88 20.61 32.90 12 DKIM_VALID_EF 75661 25.96 22.44 27.67 13 HTML_FONT_LOW_CONTRAST 66580 28.38 36.68 24.35 14 XMSubLong 56532 22.33 25.73 20.67 15 MultiRelay 53638 19.08 17.98 19.62 16 LOC_TINY_FONT_1 53509 25.34 37.20 19.57 17 FVGT_m_MULTI_ODD 52885 21.68 26.48 19.34 18 ALL_TRUSTED 50734 12.89 1.24 18.55 19 MIME_HTML_ONLY 49754 22.36 30.92 18.19 20 XM_DK_Undo_02 42068 28.06 54.10 15.38 21 BAYES_99 39602 25.55 48.31 14.48 22 T_KAM_HTML_FONT_INVALID 37923 15.47 18.76 13.87 23 BAYES_999 35178 22.33 41.77 12.86 24 XM_Multi_Part_URI 29964 12.96 17.08 10.96 25 XM_DKIMWhitelistDomains 29099 7.46 0.92 10.64 26 RCVD_IN_RP_SAFE 27285 8.75 6.23 9.98 27 TooManyTo_001 26779 9.28 8.22 9.79 28 XM_Body_Dirty_Words 25409 12.63 19.49 9.29 29 RCVD_IN_RP_CERTIFIED 25316 7.99 5.38 9.26 30 XM_Evil_Numbers_Gen 22137 10.76 16.24 8.10 31 T_XMDrugObfuBody_14 20746 8.50 10.39 7.59 32 LotsOfNums_01 20657 8.25 9.69 7.55 33 FSL_BULK_SIG 20595 9.08 12.26 7.53 34 LOTS_OF_MONEY 20503 8.56 10.75 7.50 35 TR_DCC_Bayes_99 18041 17.23 39.08 6.60 36 BAYES_60 17955 6.49 6.33 6.57 37 DKIM_INVALID 17274 6.49 6.84 6.32 38 HTML_IMAGE_RATIO_02 17005 9.27 15.55 6.22 39 BAYES_00 16358 4.44 1.27 5.98 40 IN_ZIMBRA_NJ_WHITELIST 15986 3.95 0.04 5.85 41 RELAYCOUNTRY_META 15920 9.59 17.34 5.82 42 T_TooManySym_01 15581 5.25 4.34 5.70 43 XM_H_Long_From01 15532 6.53 8.27 5.68 44 BOTNET_IPINHOSTNAME 14269 7.92 13.46 5.22 45 RCVD_IN_MSPIKE_H2 14224 4.67 3.59 5.20 46 MIME_QP_LONG_LINE 13981 5.07 4.98 5.11 47 RCVD_IN_IADB_LISTED 13843 4.07 2.03 5.06 48 XM_SendGrid 13506 4.62 3.95 4.94 49 XM_B_Phish_Phrases 12962 6.21 9.23 4.74 50 XMStrtUSub 12696 4.89 5.39 4.64 51 XM_PDF 12456 3.35 0.87 4.56 52 T_REMOTE_IMAGE 12412 4.95 5.80 4.54 53 XM_UncommonTLD01 12312 5.52 7.61 4.50 54 HTML_IMAGE_RATIO_04 12092 6.84 11.82 4.42 55 RCVD_IN_IADB_SPF 12006 3.53 1.75 4.39 56 TR_XM_DocInvoice 11491 5.10 6.94 4.20 57 UNPARSEABLE_RELAY 11309 3.34 1.71 4.14 58 BAYES_80 11285 5.22 7.47 4.13 59 XMNumbers 11068 4.45 5.28 4.05 60 TVD_RCVD_IP 10731 2.74 0.31 3.92 61 RCVD_IN_IADB_SENDERID 10633 3.16 1.67 3.89 62 RCVD_IN_IADB_DK 10364 3.08 1.63 3.79 63 TR_XM_DK_Bayes 9943 2.79 1.04 3.64 64 XMSubMetaSx_00 9837 4.33 5.84 3.60 65 FROM_EXCESS_BASE64 9683 4.68 7.03 3.54 66 RCVD_IN_IADB_VOUCHED 9342 2.58 0.87 3.42 67 ANY_BOUNCE_MESSAGE 9332 2.60 0.92 3.41 68 BOUNCE_MESSAGE 9328 2.60 0.92 3.41 69 TR_XM_DK_Bayes1 9247 2.59 0.98 3.38 70 MAILING_LIST_MULTI 9001 3.00 2.39 3.29 71 TooManyTo_002 8832 2.72 1.66 3.23 72 BAYES_40 8809 2.50 1.02 3.22 73 HTML_IMAGE_RATIO_06 8684 3.49 4.13 3.18 74 TR_XM_DK_Bayes2 8068 2.29 0.93 2.95 75 XMSexyCombo_05 7318 5.29 10.65 2.68 76 BAYES_95 7244 3.33 4.74 2.65 77 IN_HORDE_ADDRESS_BOOK 6943 1.74 0.10 2.54 78 INVALID_MSGID 6854 1.84 0.46 2.51 79 MPART_ALT_DIFF 6820 3.99 7.05 2.49 80 BAYES_20 6763 1.92 0.78 2.47 81 TO_MALFORMED 6690 1.65 0.02 2.45 82 T_TooManySym_02 6629 2.26 1.93 2.42 83 HTML_MIME_NO_HTML_TAG 6600 2.29 2.05 2.41 84 HELO_NODOT 6431 1.70 0.37 2.35 85 MIME_HTML_MOSTLY 6424 3.16 4.83 2.35 86 XM_SPF_SoftFail 6201 2.62 3.36 2.27 87 TR_Symld_Words 6149 1.87 1.09 2.25 88 NO_DNS_FOR_FROM 5916 2.54 3.30 2.16 89 TooManyTo_003 5771 1.92 1.52 2.11 90 XM_DK_Undo_01 5286 1.81 1.57 1.93 91 RCVD_IN_MSPIKE_WL 5081 1.53 0.86 1.86 92 RCVD_IN_MSPIKE_H3 5070 1.53 0.86 1.85 93 SUBJ_ALL_CAPS 5008 2.43 3.67 1.83 94 HTML_IMAGE_RATIO_08 4967 2.64 4.34 1.82 95 XM_OfRef6 4636 1.78 1.97 1.70 96 XM_CamelCaseFrm001 4604 2.24 3.38 1.68 97 TM2_M_URI_OPT_OUT 4600 2.63 4.56 1.68 98 RCVD_IN_IADB_OPTIN 4509 1.26 0.47 1.65 99 BAYES_05 4368 1.21 0.40 1.60 100 TooManyTo_004 4352 1.50 1.31 1.59 101 UNTRUSTED_Relay 4333 4.72 11.17 1.58 102 XM_GoogleGroups 4279 1.25 0.60 1.56 103 USER_IN_DEF_DKIM_WL 4194 1.07 0.10 1.53 104 XMCapTrack 4012 1.20 0.64 1.47 105 XM_DIRTYINTL 3933 2.23 3.85 1.44 106 BOTNET 3910 5.77 14.70 1.43 107 XM_H_PHPOS 3856 1.29 1.06 1.41 108 RELAYCOUNTRY_CA 3792 1.96 3.14 1.39 109 XMDiploma_00 3687 1.60 2.13 1.35 110 XMSubMetaI_00 3645 1.71 2.49 1.33 111 DKIM_ADSP_CUSTOM_MED 3593 1.33 1.35 1.31 112 TooManyTo_005 3519 1.19 0.98 1.29 113 T_XMDrugObfuBody_08 3283 1.42 1.87 1.20 114 XM_UB50 3236 2.31 4.63 1.18 115 RELAYCOUNTRY_GB 3059 1.10 1.05 1.12 116 XM_ProductURIs 3038 1.25 1.55 1.11 117 URI_HEX 2995 1.90 3.55 1.10 118 XMPhish11 2991 1.10 1.10 1.09 119 MIME_HTML_ONLY_MULTI 2787 1.79 3.36 1.02 120 XMStockSpam_06 2700 1.40 2.25 0.99 121 NML_ADSP_CUSTOM_MED 2668 1.04 1.16 0.98 122 XMBdyGiftCard01 2659 1.33 2.06 0.97 123 TR_MetaPhish_Combo_01 2630 0.96 0.94 0.96 124 T_TooManySym_03 2553 0.68 0.16 0.93 125 USER_IN_WHITELIST 2540 0.62 0.00 0.93 126 FILL_THIS_FORM 2500 0.80 0.56 0.91 127 XMNoVowels 2390 0.78 0.58 0.87 128 TM2_M_VERY_LONG_WORD 2329 1.12 1.66 0.85 129 XM_H_Long_From02 2326 1.32 2.30 0.85 130 XMGenDplmaNmb 2247 0.89 1.04 0.82 131 SpammyFromTLD_01 2188 1.08 1.64 0.80 132 RELAYCOUNTRY_DE 2167 0.82 0.88 0.79 133 T_FILL_THIS_FORM_SHORT 2156 0.95 1.27 0.79 134 XM_H_PHPMailer 2127 0.77 0.76 0.78 135 URI_TRY_3LD 2060 0.89 1.16 0.75 136 XM_B_COPY_HTML 2002 0.85 1.09 0.73 137 T_FILL_THIS_FORM_LOAN 1981 0.55 0.20 0.72 138 T_FILL_THIS_FORM_LONG 1930 0.57 0.28 0.71 139 XMSubMetaSxObfu_02 1847 0.59 0.42 0.68 140 T_XMDrugObfuBody_00 1843 0.87 1.26 0.67 141 RCVD_IN_BL_SPAMCOP_NET 1817 1.52 3.27 0.66 142 XMGappySubj_01 1785 0.55 0.35 0.65 143 RCVD_IN_SORBS_DUL 1718 0.53 0.34 0.63 144 XMBody_95 1716 0.47 0.16 0.63 145 RCVD_IN_IADB_DOPTIN 1696 0.44 0.07 0.62 146 MISSING_HEADERS 1677 0.52 0.33 0.61 147 T_XMHurry_00 1660 0.80 1.19 0.61 148 FORGED_GMAIL_RCVD 1656 0.64 0.71 0.61 149 XMLKML 1635 0.40 0.00 0.60 150 XM_B_REG_HTML 1624 0.86 1.41 0.59 151 XMDateMe_00 1602 0.47 0.23 0.59 152 SHORT_HELO_AND_INLINE_IMAGE 1590 0.42 0.08 0.58 153 XMBody_78 1582 0.75 1.10 0.58 154 XM_ShortIntro_01 1575 0.48 0.30 0.58 155 HTML_IMAGE_ONLY_32 1553 0.46 0.24 0.57 156 T_OBFU_PDF_ATTACH 1514 0.44 0.21 0.55 157 RDNS_DYNAMIC 1498 0.65 0.86 0.55 158 XMBrknScrpt_02 1456 0.66 0.93 0.53 159 HTML_IMAGE_ONLY_28 1411 0.59 0.75 0.52 160 AC_DIV_BONANZA 1365 0.39 0.15 0.50 161 XMBody_29 1360 0.38 0.13 0.50 162 XMBody_17 1279 0.98 2.03 0.47 163 T_Symld_Words_02 1243 0.58 0.85 0.45 164 RELAYCOUNTRY_NL 1241 0.48 0.54 0.45 165 XM_B_TRADE_HTML 1213 0.48 0.54 0.44 166 HTTPS_HTTP_MISMATCH 1174 0.55 0.79 0.43 167 HTML_FONT_FACE_BAD 1148 0.62 1.04 0.42 168 TR_LOTS_OF_MONEY2 1145 0.63 1.06 0.42 169 T_MONEY_PERCENT 1145 0.63 1.06 0.42 170 HTML_IMAGE_ONLY_24 1144 0.44 0.48 0.42 171 HTML_TAG_BALANCE_BODY 1124 0.66 1.16 0.41 172 T_TooManySym_04 1113 0.30 0.07 0.41 173 XMGappySubj_02 1103 0.31 0.11 0.40 174 XM_H_PHPOS_M 1101 0.40 0.38 0.40 175 TR_XM_RelayPhish 1087 0.77 1.52 0.40 176 XM_H_Trusted_IP 1083 0.27 0.00 0.40 177 XMSubNoVowel 1082 0.42 0.47 0.40 178 XMHTMLBadTable_001 1026 0.49 0.73 0.38 179 TM2_M_BODY_EMPTY 1021 0.51 0.80 0.37 180 UPPERCASE_50_75 1007 0.32 0.21 0.37 181 XMPhish30 994 0.84 1.82 0.36 182 XM_RXBody 994 0.78 1.65 0.36 183 XMSexyCombo_01 980 0.74 1.53 0.36 184 RELAYCOUNTRY_AU 977 0.46 0.67 0.36 185 DIET_1 961 0.69 1.38 0.35 186 LOW_PRICE 946 0.74 1.53 0.35 187 TM2_M_A_HREF_HREF 942 0.41 0.55 0.34 188 XMSolicitRefs_0 937 0.38 0.46 0.34 189 DKIM_ADSP_NXDOMAIN 926 0.40 0.52 0.34 190 XMMoneyMeta_00 915 0.58 1.07 0.33 191 XMRcvdHeader_15 915 0.23 0.00 0.33 192 XMHTML_After_End 905 1.13 2.76 0.33 193 HTML_IMAGE_ONLY_20 903 0.38 0.49 0.33 194 XMSlimDrugH 885 0.41 0.59 0.32 195 XMSubMetaSxObfu_03 878 0.42 0.62 0.32 196 XMSubEmpty 860 0.31 0.31 0.31 197 XM_H_SpoofStaff4 819 0.23 0.08 0.30 198 PLING_QUERY 812 0.53 1.00 0.30 199 XMPhish14 805 0.61 1.26 0.29 200 TVD_SPACE_RATIO 786 0.31 0.36 0.29 ----------------------------------------------------------------------