Email: 598598 Autolearn: 0 AvgScore: 3.39 AvgScanTime: 4.03 sec Spam: 175099 Autolearn: 0 AvgScore: 12.15 AvgScanTime: 5.01 sec Ham: 423499 Autolearn: 0 AvgScore: -0.24 AvgScanTime: 3.63 sec Time Spent Running SA: 670.51 hours Time Spent Processing Spam: 243.72 hours Time Spent Processing Ham: 426.79 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 160116 80.01 91.44 75.28 2 DKIM_SIGNED 143636 64.93 82.03 57.87 3 XM_DK_Pass 140071 63.48 80.00 56.65 4 DCC_CHECK 132771 41.91 75.83 27.89 5 DKIM_VALID 132543 59.46 75.70 52.75 6 XMListUnsubscribeExists 122675 45.46 70.06 35.29 7 DKIM_VALID_AU 103155 43.96 58.91 37.77 8 XM_H_QuotedFrom 101305 43.94 57.86 38.19 9 XM_DK_Undo_02 86426 22.29 49.36 11.10 10 BAYES_99 79777 20.60 45.56 10.28 11 BAYES_999 69015 17.98 39.41 9.12 12 TR_DCC_Bayes_99 63010 13.95 35.99 4.84 13 HTML_FONT_LOW_CONTRAST 62482 24.50 35.68 19.88 14 LOC_TINY_FONT_1 57951 21.63 33.10 16.89 15 BAYES_50 54384 51.40 31.06 59.82 16 XMSubLong 48871 24.53 27.91 23.14 17 MIME_HTML_ONLY 48133 20.78 27.49 18.01 18 FVGT_m_MULTI_ODD 44832 19.15 25.60 16.49 19 DKIM_VALID_EF 40577 22.41 23.17 22.10 20 DCC_CHECK_NEGATIVE 38852 55.97 22.19 69.94 21 T_TM2_M_HEADER_IN_MSG 36440 31.32 20.81 35.67 22 T_KAM_HTML_FONT_INVALID 35620 13.93 20.34 11.27 23 XM_Body_Dirty_Words 31321 11.51 17.89 8.87 24 XM_Multi_Part_URI 27966 10.34 15.97 8.01 25 RELAYCOUNTRY_META 27943 8.19 15.96 4.98 26 HTML_IMAGE_RATIO_02 27478 8.57 15.69 5.62 27 MultiRelay 26473 16.56 15.12 17.15 28 XM_Evil_Numbers_Gen 22677 8.34 12.95 6.44 29 BOTNET 21063 4.41 12.03 1.26 30 FSL_BULK_SIG 19552 7.69 11.17 6.26 31 BOTNET_IPINHOSTNAME 19094 5.48 10.90 3.24 32 LOTS_OF_MONEY 18309 7.92 10.46 6.88 33 UNTRUSTED_Relay 16881 3.87 9.64 1.48 34 T_XMDrugObfuBody_14 16158 8.78 9.23 8.59 35 XM_B_Phish_Phrases 16075 5.54 9.18 4.04 36 XMSubMetaSx_00 15829 6.48 9.04 5.42 37 HTML_IMAGE_RATIO_04 15764 4.98 9.00 3.31 38 LotsOfNums_01 15693 6.91 8.96 6.06 39 XMSexyCombo_05 14703 4.40 8.40 2.74 40 XM_UncommonTLD01 13532 4.69 7.73 3.43 41 BAYES_80 13223 4.67 7.55 3.47 42 XM_H_Long_From01 12096 8.18 6.91 8.71 43 ALL_TRUSTED 12047 23.16 6.88 29.89 44 MPART_ALT_DIFF 12037 5.46 6.87 4.88 45 BAYES_60 11767 6.99 6.72 7.10 46 TooManyTo_001 11545 7.38 6.59 7.71 47 DKIM_INVALID 11093 5.48 6.34 5.12 48 TR_XM_DocInvoice 10959 5.16 6.26 4.71 49 FROM_EXCESS_BASE64 10433 3.72 5.96 2.79 50 XM_SPF_SoftFail 8944 2.87 5.11 1.95 51 MIME_QP_LONG_LINE 8251 4.47 4.71 4.37 52 HTML_IMAGE_RATIO_06 8166 2.88 4.66 2.14 53 XMNumbers 8068 3.42 4.61 2.93 54 BAYES_95 7497 2.85 4.28 2.25 55 MIME_HTML_MOSTLY 7444 2.55 4.25 1.84 56 RCVD_IN_RP_SAFE 7444 6.06 4.25 6.81 57 XM_SendGrid 7359 4.26 4.20 4.29 58 URI_WP_HACKED_2 6789 4.41 3.88 4.63 59 XMStrtUSub 6724 4.15 3.84 4.28 60 XM_UB50 6703 1.87 3.83 1.06 61 RCVD_IN_MSPIKE_H2 6556 3.62 3.74 3.57 62 RCVD_IN_RP_CERTIFIED 6518 5.48 3.72 6.21 63 TM2_M_URI_OPT_OUT 6464 2.21 3.69 1.60 64 RELAYCOUNTRY_CA 6019 1.85 3.44 1.19 65 XM_DIRTYINTL 6000 2.07 3.43 1.51 66 SUBJ_ALL_CAPS 5898 5.28 3.37 6.08 67 RCVD_IN_BL_SPAMCOP_NET 5867 1.38 3.35 0.57 68 XM_CamelCaseFrm001 5507 1.81 3.15 1.26 69 T_REMOTE_IMAGE 5330 3.48 3.04 3.66 70 T_XMDrugObfuBody_08 5320 1.79 3.04 1.27 71 MIME_HTML_ONLY_MULTI 5027 3.43 2.87 3.66 72 HTML_IMAGE_RATIO_08 4965 2.20 2.84 1.94 73 URI_HEX 4809 1.48 2.75 0.96 74 T_TooManySym_01 4669 3.30 2.67 3.57 75 IMPOTENCE 4554 2.64 2.60 2.66 76 XM_OfRef6 4412 1.71 2.52 1.37 77 NO_DNS_FOR_FROM 4348 1.69 2.48 1.37 78 RCVD_IN_IADB_LISTED 4156 3.75 2.37 4.31 79 XMBody_17 4029 0.96 2.30 0.40 80 SpammyFromTLD_01 3995 1.28 2.28 0.87 81 T_XMHurry_00 3960 1.08 2.26 0.60 82 HTML_MIME_NO_HTML_TAG 3856 2.10 2.20 2.06 83 RCVD_IN_IADB_SPF 3787 3.29 2.16 3.75 84 MultiRelay_CC 3713 0.77 2.12 0.21 85 MultiRelay_Combo 3713 0.77 2.12 0.21 86 RCVD_IN_IADB_SENDERID 3633 2.96 2.07 3.33 87 RCVD_IN_IADB_DK 3589 2.91 2.05 3.26 88 XMDiploma_00 3529 1.50 2.02 1.29 89 RCVD_IN_RP_RNBL 3464 0.60 1.98 0.02 90 SpammyFromTLD_02 3423 0.87 1.95 0.42 91 BAYES_00 3400 5.55 1.94 7.05 92 XM_URI_RBL 3301 0.61 1.89 0.09 93 HTML_SHORT_LINK_IMG_1 3195 0.55 1.82 0.02 94 XMSlimDrugH 3190 1.05 1.82 0.73 95 XM_H_Long_From02 3173 1.10 1.81 0.81 96 XMSexyCombo_01 3172 0.73 1.81 0.28 97 XMPhish14 3118 0.73 1.78 0.30 98 HTML_IMAGE_ONLY_08 3086 0.63 1.76 0.17 99 XM_UB99 3052 0.52 1.74 0.01 100 TM2_M_VERY_LONG_WORD 2914 0.94 1.66 0.64 101 RCVD_IN_MSPIKE_WL 2834 1.85 1.62 1.95 102 RCVD_IN_MSPIKE_H3 2823 1.84 1.61 1.93 103 TR_Mismatch_TLD_02 2801 0.51 1.60 0.07 104 XMSubMetaI_00 2718 0.78 1.55 0.46 105 XMSubMetaSSx_00 2696 0.87 1.54 0.59 106 MAILING_LIST_MULTI 2682 2.20 1.53 2.48 107 ONLINE_PHARMACY 2533 1.53 1.45 1.56 108 TO_NO_BRKTS_HTML_IMG 2532 0.47 1.45 0.06 109 UNPARSEABLE_RELAY 2532 2.11 1.45 2.38 110 RELAYCOUNTRY_FR 2501 0.58 1.43 0.22 111 XM_DK_Undo_01 2488 1.69 1.42 1.80 112 XMPhish30 2443 0.60 1.40 0.28 113 SUBJ_DOLLARS 2422 0.51 1.38 0.15 114 RCVD_IN_PSBL 2400 0.51 1.37 0.15 115 TVD_VISIT_PHARMA 2350 1.24 1.34 1.20 116 XMStockSpam_06 2342 1.25 1.34 1.21 117 RELAYCOUNTRY_DE 2329 0.91 1.33 0.73 118 BAYES_40 2293 4.28 1.31 5.51 119 URIBL_DBL_SPAM 2264 0.40 1.29 0.03 120 TR_XM_RelayPhish 2263 0.66 1.29 0.39 121 BOTNET_NORDNS 2258 0.40 1.29 0.03 122 URIBL_BLACK 2254 0.40 1.29 0.04 123 XM_UB999 2233 0.38 1.28 0.01 124 TR_XM_DK_Bayes 2212 3.38 1.26 4.26 125 XM_ProductURIs 2201 0.88 1.26 0.73 126 XMPhish11 2197 1.10 1.25 1.04 127 XM_UB60 2170 0.42 1.24 0.08 128 XMSlimDrugs 2159 0.66 1.23 0.42 129 XMHTML_After_End 2154 0.55 1.23 0.27 130 TR_XM_DK_Bayes1 2103 3.05 1.20 3.82 131 TR_XM_DK_Bayes2 2072 2.59 1.18 3.16 132 URI_TRY_3LD 2055 0.85 1.17 0.72 133 XM_RXBody 2022 0.53 1.15 0.27 134 XMBody_78 2009 0.62 1.15 0.40 135 PHOTO_EDITING_DIRECT 1972 0.34 1.13 0.01 136 TooManyTo_002 1928 2.00 1.10 2.37 137 RELAYCOUNTRY_NL 1866 0.45 1.07 0.20 138 FSL_THIS_IS_ADV 1860 0.37 1.06 0.08 139 NO_PRESCRIPTION 1852 0.47 1.06 0.22 140 XM_B_REG_HTML 1849 0.69 1.06 0.54 141 XM_S_JOY_D 1843 0.52 1.05 0.31 142 RELAYCOUNTRY_GB 1835 1.00 1.05 0.98 143 XMGenDplmaNmb 1822 0.86 1.04 0.79 144 T_XMDrugObfuBody_00 1817 0.77 1.04 0.66 145 XMBdyGiftCard01 1805 0.61 1.03 0.43 146 MISSING_HEADERS 1787 0.71 1.02 0.58 147 TR_MetaPhish_Combo_01 1782 0.85 1.02 0.78 148 HTML_FONT_SIZE_HUGE 1773 0.36 1.01 0.09 149 TR_Caps_n_Bayes_99 1746 0.33 1.00 0.06 150 RELAYCOUNTRY_CN 1694 0.33 0.97 0.07 151 TooManyTo_003 1693 1.36 0.97 1.52 152 URIBL_DBL_ABUSE_SPAM 1679 0.66 0.96 0.53 153 T_TooManySym_02 1673 1.41 0.96 1.59 154 DATE_IN_PAST_03_06 1640 0.34 0.94 0.09 155 BODY_ENHANCEMENT 1603 0.28 0.92 0.02 156 TR_Symld_Words 1603 1.56 0.92 1.82 157 RCVD_IN_IADB_VOUCHED 1603 2.28 0.92 2.85 158 XM_BadFromFormat 1602 0.41 0.91 0.20 159 XMSexyCombo_04 1599 0.30 0.91 0.05 160 TR_LOTS_OF_MONEY2 1595 0.51 0.91 0.35 161 T_MONEY_PERCENT 1595 0.51 0.91 0.35 162 XM_HighProb1 1590 0.27 0.91 0.01 163 XM_B_COPY_HTML 1568 0.54 0.90 0.40 164 BAYES_20 1560 2.14 0.89 2.66 165 DIET_1 1559 0.43 0.89 0.25 166 T_FILL_THIS_FORM_SHORT 1556 0.91 0.89 0.91 167 LongTLD 1528 0.37 0.87 0.17 168 PLING_QUERY 1518 0.51 0.87 0.36 169 XMMoneyMeta_00 1505 0.51 0.86 0.37 170 RELAYCOUNTRY_AU 1502 0.58 0.86 0.47 171 ANY_BOUNCE_MESSAGE 1491 2.86 0.85 3.69 172 BOUNCE_MESSAGE 1490 2.86 0.85 3.69 173 XMBrknScrpt_02 1483 0.56 0.85 0.44 174 XM_UB80 1461 0.26 0.83 0.02 175 TR_LOTS_OF_MONEY3 1452 0.38 0.83 0.19 176 DKIM_ADSP_CUSTOM_MED 1452 0.92 0.83 0.96 177 DATE_IN_PAST_06_12 1450 0.30 0.83 0.08 178 XMLongAddy 1385 0.29 0.79 0.08 179 TooManyTo_004 1381 0.98 0.79 1.06 180 T_HTML_TAG_BALANCE_CENTER 1365 0.31 0.78 0.11 181 TR_Sbj_FN_Bdy 1352 0.41 0.77 0.27 182 DKIM_ADSP_NXDOMAIN 1351 0.46 0.77 0.33 183 XM_Body_Obfu01 1344 0.39 0.77 0.23 184 RELAYCOUNTRY_AT 1331 0.28 0.76 0.08 185 XM_PDF 1320 3.39 0.75 4.49 186 RDNS_DYNAMIC 1315 0.47 0.75 0.35 187 HTTPS_HTTP_MISMATCH 1314 0.51 0.75 0.41 188 TM2_M_A_HREF_HREF 1307 0.45 0.75 0.33 189 HTML_IMAGE_ONLY_28 1305 0.50 0.75 0.40 190 URI_NOVOWEL 1288 0.38 0.74 0.23 191 XMHTMLBadTable_001 1243 0.38 0.71 0.25 192 REMOVE_BEFORE_LINK 1203 0.44 0.69 0.34 193 MPART_ALT_DIFF_COUNT 1197 0.38 0.68 0.25 194 XM_Hitman 1188 0.23 0.68 0.04 195 HTML_FONT_FACE_BAD 1183 2.38 0.68 3.09 196 RELAYCOUNTRY_SG 1176 0.29 0.67 0.14 197 LONG_JUNK_URI3 1176 0.23 0.67 0.05 198 HTML_TAG_BALANCE_BODY 1173 0.42 0.67 0.31 199 XMSubMetaD_00 1167 0.26 0.67 0.09 200 XM_H_Long_From03 1161 0.25 0.66 0.08 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 318828 80.01 91.44 75.28 2 DCC_CHECK_NEGATIVE 296188 55.97 22.19 69.94 3 BAYES_50 253322 51.40 31.06 59.82 4 DKIM_SIGNED 245063 64.93 82.03 57.87 5 XM_DK_Pass 239927 63.48 80.00 56.65 6 DKIM_VALID 223375 59.46 75.70 52.75 7 XM_H_QuotedFrom 161720 43.94 57.86 38.19 8 DKIM_VALID_AU 159968 43.96 58.91 37.77 9 T_TM2_M_HEADER_IN_MSG 151042 31.32 20.81 35.67 10 XMListUnsubscribeExists 149473 45.46 70.06 35.29 11 ALL_TRUSTED 126578 23.16 6.88 29.89 12 DCC_CHECK 118127 41.91 75.83 27.89 13 XMSubLong 97991 24.53 27.91 23.14 14 DKIM_VALID_EF 93590 22.41 23.17 22.10 15 HTML_FONT_LOW_CONTRAST 84176 24.50 35.68 19.88 16 MIME_HTML_ONLY 76272 20.78 27.49 18.01 17 MultiRelay 72636 16.56 15.12 17.15 18 LOC_TINY_FONT_1 71548 21.63 33.10 16.89 19 FVGT_m_MULTI_ODD 69817 19.15 25.60 16.49 20 T_KAM_HTML_FONT_INVALID 47737 13.93 20.34 11.27 21 XM_DK_Undo_02 46997 22.29 49.36 11.10 22 BAYES_99 43552 20.60 45.56 10.28 23 BAYES_999 38628 17.98 39.41 9.12 24 XM_Body_Dirty_Words 37557 11.51 17.89 8.87 25 XM_H_Long_From01 36899 8.18 6.91 8.71 26 T_XMDrugObfuBody_14 36370 8.78 9.23 8.59 27 XM_Multi_Part_URI 33919 10.34 15.97 8.01 28 IN_ZIMBRA_NJ_WHITELIST 33733 5.65 0.04 7.97 29 TooManyTo_001 32648 7.38 6.59 7.71 30 XM_DKIMWhitelistDomains 31937 5.34 0.03 7.54 31 BAYES_60 30060 6.99 6.72 7.10 32 BAYES_00 29837 5.55 1.94 7.05 33 LOTS_OF_MONEY 29124 7.92 10.46 6.88 34 RCVD_IN_RP_SAFE 28859 6.06 4.25 6.81 35 XM_Evil_Numbers_Gen 27256 8.34 12.95 6.44 36 FSL_BULK_SIG 26497 7.69 11.17 6.26 37 RCVD_IN_RP_CERTIFIED 26282 5.48 3.72 6.21 38 SUBJ_ALL_CAPS 25736 5.28 3.37 6.08 39 LotsOfNums_01 25657 6.91 8.96 6.06 40 HTML_IMAGE_RATIO_02 23793 8.57 15.69 5.62 41 BAYES_40 23326 4.28 1.31 5.51 42 XMSubMetaSx_00 22972 6.48 9.04 5.42 43 DKIM_INVALID 21688 5.48 6.34 5.12 44 RELAYCOUNTRY_META 21110 8.19 15.96 4.98 45 MPART_ALT_DIFF 20665 5.46 6.87 4.88 46 TR_DCC_Bayes_99 20513 13.95 35.99 4.84 47 TR_XM_DocInvoice 19930 5.16 6.26 4.71 48 URI_WP_HACKED_2 19627 4.41 3.88 4.63 49 XM_PDF 19001 3.39 0.75 4.49 50 MIME_QP_LONG_LINE 18497 4.47 4.71 4.37 51 RCVD_IN_IADB_LISTED 18271 3.75 2.37 4.31 52 XM_SendGrid 18165 4.26 4.20 4.29 53 XMStrtUSub 18140 4.15 3.84 4.28 54 TR_XM_DK_Bayes 18042 3.38 1.26 4.26 55 XM_B_Phish_Phrases 17090 5.54 9.18 4.04 56 TR_XM_DK_Bayes1 16172 3.05 1.20 3.82 57 RCVD_IN_IADB_SPF 15900 3.29 2.16 3.75 58 ANY_BOUNCE_MESSAGE 15612 2.86 0.85 3.69 59 BOUNCE_MESSAGE 15608 2.86 0.85 3.69 60 T_REMOTE_IMAGE 15495 3.48 3.04 3.66 61 MIME_HTML_ONLY_MULTI 15479 3.43 2.87 3.66 62 RCVD_IN_MSPIKE_H2 15132 3.62 3.74 3.57 63 T_TooManySym_01 15100 3.30 2.67 3.57 64 BAYES_80 14703 4.67 7.55 3.47 65 XM_UncommonTLD01 14518 4.69 7.73 3.43 66 RCVD_IN_IADB_SENDERID 14105 2.96 2.07 3.33 67 HTML_IMAGE_RATIO_04 14023 4.98 9.00 3.31 68 RCVD_IN_IADB_DK 13818 2.91 2.05 3.26 69 BOTNET_IPINHOSTNAME 13706 5.48 10.90 3.24 70 TR_XM_DK_Bayes2 13402 2.59 1.18 3.16 71 HTML_FONT_FACE_BAD 13065 2.38 0.68 3.09 72 XMNumbers 12425 3.42 4.61 2.93 73 RCVD_IN_IADB_VOUCHED 12073 2.28 0.92 2.85 74 FROM_EXCESS_BASE64 11829 3.72 5.96 2.79 75 XMSexyCombo_05 11620 4.40 8.40 2.74 76 BAYES_20 11272 2.14 0.89 2.66 77 IMPOTENCE 11260 2.64 2.60 2.66 78 MAILING_LIST_MULTI 10513 2.20 1.53 2.48 79 UNPARSEABLE_RELAY 10074 2.11 1.45 2.38 80 TooManyTo_002 10018 2.00 1.10 2.37 81 BAYES_95 9542 2.85 4.28 2.25 82 TVD_RCVD_IP 9315 1.62 0.23 2.20 83 HTML_IMAGE_RATIO_06 9071 2.88 4.66 2.14 84 HELO_NODOT 8882 1.57 0.29 2.10 85 HTML_MIME_NO_HTML_TAG 8711 2.10 2.20 2.06 86 IN_HORDE_ADDRESS_BOOK 8495 1.45 0.11 2.01 87 XMSubNoVowel 8331 1.50 0.36 1.97 88 RCVD_IN_MSPIKE_WL 8260 1.85 1.62 1.95 89 XM_SPF_SoftFail 8242 2.87 5.11 1.95 90 HTML_IMAGE_RATIO_08 8222 2.20 2.84 1.94 91 RCVD_IN_MSPIKE_H3 8167 1.84 1.61 1.93 92 MIME_HTML_MOSTLY 7800 2.55 4.25 1.84 93 TR_Symld_Words 7725 1.56 0.92 1.82 94 XM_DK_Undo_01 7609 1.69 1.42 1.80 95 BAYES_05 7001 1.34 0.57 1.65 96 INVALID_MSGID 6909 1.20 0.17 1.63 97 TO_MALFORMED 6771 1.14 0.01 1.60 98 TM2_M_URI_OPT_OUT 6771 2.21 3.69 1.60 99 T_TooManySym_02 6754 1.41 0.96 1.59 100 ONLINE_PHARMACY 6612 1.53 1.45 1.56 101 XMCapTrack 6581 1.27 0.58 1.55 102 TooManyTo_003 6442 1.36 0.97 1.52 103 XM_DIRTYINTL 6375 2.07 3.43 1.51 104 UNTRUSTED_Relay 6265 3.87 9.64 1.48 105 XM_OfRef6 5813 1.71 2.52 1.37 106 NO_DNS_FOR_FROM 5785 1.69 2.48 1.37 107 RCVD_IN_IADB_OPTIN 5490 1.06 0.48 1.30 108 XMDiploma_00 5452 1.50 2.02 1.29 109 T_XMDrugObfuBody_08 5381 1.79 3.04 1.27 110 XM_GoogleGroups 5373 1.05 0.51 1.27 111 XM_CamelCaseFrm001 5329 1.81 3.15 1.26 112 BOTNET 5320 4.41 12.03 1.26 113 XMStockSpam_06 5143 1.25 1.34 1.21 114 TVD_VISIT_PHARMA 5097 1.24 1.34 1.20 115 RELAYCOUNTRY_CA 5049 1.85 3.44 1.19 116 XM_H_PHPOS 4865 1.00 0.65 1.15 117 XMSubEmpty 4793 0.95 0.52 1.13 118 USER_IN_DEF_DKIM_WL 4508 0.78 0.09 1.06 119 TooManyTo_004 4488 0.98 0.79 1.06 120 XM_UB50 4482 1.87 3.83 1.06 121 XMPhish11 4415 1.10 1.25 1.04 122 RELAYCOUNTRY_GB 4147 1.00 1.05 0.98 123 DKIM_ADSP_CUSTOM_MED 4066 0.92 0.83 0.96 124 URI_HEX 4064 1.48 2.75 0.96 125 T_FILL_THIS_FORM_SHORT 3869 0.91 0.89 0.91 126 SpammyFromTLD_01 3672 1.28 2.28 0.87 127 TooManyTo_005 3591 0.77 0.59 0.85 128 XM_H_Long_From02 3425 1.10 1.81 0.81 129 XMGenDplmaNmb 3333 0.86 1.04 0.79 130 XM_H_PHPMailer 3314 0.71 0.52 0.78 131 TR_MetaPhish_Combo_01 3301 0.85 1.02 0.78 132 XMSlimDrugH 3110 1.05 1.82 0.73 133 XM_ProductURIs 3095 0.88 1.26 0.73 134 RELAYCOUNTRY_DE 3091 0.91 1.33 0.73 135 URI_TRY_3LD 3058 0.85 1.17 0.72 136 XMNoVowels 3007 0.67 0.57 0.71 137 T_TooManySym_03 2938 0.58 0.32 0.69 138 T_XMDrugObfuBody_00 2777 0.77 1.04 0.66 139 NML_ADSP_CUSTOM_MED 2749 0.63 0.58 0.65 140 TM2_M_VERY_LONG_WORD 2727 0.94 1.66 0.64 141 USER_IN_WHITELIST 2725 0.46 0.00 0.64 142 T_OBFU_PDF_ATTACH 2623 0.50 0.22 0.62 143 T_XMHurry_00 2530 1.08 2.26 0.60 144 XMSubMetaSSx_00 2513 0.87 1.54 0.59 145 MISSING_HEADERS 2443 0.71 1.02 0.58 146 RCVD_IN_BL_SPAMCOP_NET 2401 1.38 3.35 0.57 147 AC_DIV_BONANZA 2374 0.43 0.11 0.56 148 XMGappySubj_01 2297 0.51 0.42 0.54 149 TR_Mismatch_TLD_01 2293 0.48 0.35 0.54 150 XM_B_REG_HTML 2292 0.69 1.06 0.54 151 SHORT_HELO_AND_INLINE_IMAGE 2250 0.39 0.06 0.53 152 RCVD_IN_SORBS_DUL 2248 0.47 0.32 0.53 153 URIBL_DBL_ABUSE_SPAM 2243 0.66 0.96 0.53 154 RCVD_IN_IADB_DOPTIN 2210 0.39 0.07 0.52 155 TVD_SPACE_RATIO 2090 0.43 0.26 0.49 156 HTML_IMAGE_ONLY_32 2006 0.42 0.28 0.47 157 FILL_THIS_FORM 1985 0.39 0.22 0.47 158 RELAYCOUNTRY_AU 1984 0.58 0.86 0.47 159 XMSubMetaI_00 1964 0.78 1.55 0.46 160 XM_ShortIntro_01 1890 0.43 0.39 0.45 161 HTML_IMAGE_ONLY_24 1888 0.45 0.48 0.45 162 XMBrknScrpt_02 1872 0.56 0.85 0.44 163 FORGED_GMAIL_RCVD 1853 0.50 0.66 0.44 164 TM2_M_BODY_EMPTY 1852 0.45 0.48 0.44 165 XMSolicitRefs_0 1829 0.43 0.43 0.43 166 XMBdyGiftCard01 1823 0.61 1.03 0.43 167 XMDateMe_00 1820 0.42 0.40 0.43 168 XM_H_Trusted_IP 1804 0.30 0.00 0.43 169 SpammyFromTLD_02 1795 0.87 1.95 0.42 170 XMSlimDrugs 1773 0.66 1.23 0.42 171 HTTPS_HTTP_MISMATCH 1749 0.51 0.75 0.41 172 T_Symld_Words_02 1734 0.47 0.61 0.41 173 XMBody_95 1699 0.34 0.20 0.40 174 XMBody_17 1696 0.96 2.30 0.40 175 HTML_IMAGE_ONLY_28 1679 0.50 0.75 0.40 176 XM_B_COPY_HTML 1679 0.54 0.90 0.40 177 XMBody_78 1675 0.62 1.15 0.40 178 TR_XM_RelayPhish 1660 0.66 1.29 0.39 179 XMMoneyMeta_00 1570 0.51 0.86 0.37 180 XMLngstWrd_00 1547 0.43 0.57 0.37 181 PLING_QUERY 1528 0.51 0.87 0.36 182 RDNS_DYNAMIC 1503 0.47 0.75 0.35 183 XMSubMetaSxObfu_02 1498 0.32 0.24 0.35 184 XMSubMetaSx_01 1490 0.43 0.62 0.35 185 TR_LOTS_OF_MONEY2 1485 0.51 0.91 0.35 186 T_MONEY_PERCENT 1485 0.51 0.91 0.35 187 T_FILL_THIS_FORM_LOAN 1450 0.27 0.11 0.34 188 REMOVE_BEFORE_LINK 1421 0.44 0.69 0.34 189 TM2_M_A_HREF_HREF 1409 0.45 0.75 0.33 190 XMLngstWrd_01 1406 0.39 0.54 0.33 191 DKIM_ADSP_NXDOMAIN 1404 0.46 0.77 0.33 192 T_FILL_THIS_FORM_LONG 1404 0.26 0.08 0.33 193 PP_MIME_FAKE_ASCII_TEXT 1389 0.40 0.58 0.33 194 XM_H_PHPOS_M 1379 0.30 0.24 0.33 195 GMD_PDF_EMPTY_BODY 1347 0.24 0.07 0.32 196 HTML_TAG_BALANCE_BODY 1328 0.42 0.67 0.31 197 T_HTML_ATTACH 1301 0.24 0.07 0.31 198 XM_S_JOY_D 1296 0.52 1.05 0.31 199 XMEmptySub 1265 0.22 0.03 0.30 200 XMPhish14 1264 0.73 1.78 0.30 ----------------------------------------------------------------------