Email: 552793 Autolearn: 0 AvgScore: 3.23 AvgScanTime: 4.01 sec Spam: 159855 Autolearn: 0 AvgScore: 12.34 AvgScanTime: 5.02 sec Ham: 392938 Autolearn: 0 AvgScore: -0.48 AvgScanTime: 3.60 sec Time Spent Running SA: 615.47 hours Time Spent Processing Spam: 222.80 hours Time Spent Processing Ham: 392.67 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 154348 86.53 96.56 82.45 2 DKIM_SIGNED 140470 70.97 87.87 64.09 3 XM_DK_Pass 136265 69.31 85.24 62.82 4 DKIM_VALID 128310 64.76 80.27 58.45 5 DCC_CHECK 127410 44.58 79.70 30.29 6 XMListUnsubscribeExists 119850 51.03 74.97 41.29 7 DKIM_VALID_AU 97211 46.07 60.81 40.08 8 XM_H_QuotedFrom 87690 38.46 54.86 31.79 9 XM_DK_Undo_02 83699 23.21 52.36 11.35 10 BAYES_99 76552 21.17 47.89 10.30 11 BAYES_999 65458 18.23 40.95 8.99 12 TR_DCC_Bayes_99 60408 14.28 37.79 4.72 13 HTML_FONT_LOW_CONTRAST 58905 25.87 36.85 21.40 14 LOC_TINY_FONT_1 57950 22.41 36.25 16.78 15 BAYES_50 47469 50.72 29.70 59.27 16 MIME_HTML_ONLY 47430 22.28 29.67 19.28 17 FVGT_m_MULTI_ODD 44794 20.70 28.02 17.73 18 XMSubLong 42926 20.69 26.85 18.18 19 DKIM_VALID_EF 40945 24.17 25.61 23.58 20 T_KAM_HTML_FONT_INVALID 36543 16.02 22.86 13.24 21 T_TM2_M_HEADER_IN_MSG 33895 31.68 21.20 35.95 22 XM_Body_Dirty_Words 31104 12.00 19.46 8.97 23 DCC_CHECK_NEGATIVE 28751 53.19 17.99 67.51 24 MultiRelay 27830 18.72 17.41 19.25 25 XM_Multi_Part_URI 26815 11.71 16.77 9.65 26 HTML_IMAGE_RATIO_02 26440 8.93 16.54 5.84 27 RELAYCOUNTRY_META 25142 7.96 15.73 4.81 28 XM_Evil_Numbers_Gen 23159 8.97 14.49 6.73 29 BOTNET_IPINHOSTNAME 20493 6.17 12.82 3.46 30 BOTNET 19586 4.52 12.25 1.38 31 LOTS_OF_MONEY 19262 8.93 12.05 7.66 32 FSL_BULK_SIG 18544 7.96 11.60 6.48 33 T_XMDrugObfuBody_14 17979 8.36 11.25 7.19 34 LotsOfNums_01 15909 7.78 9.95 6.90 35 XMSexyCombo_05 14882 4.58 9.31 2.66 36 XMSubMetaSx_00 14553 5.10 9.10 3.48 37 UNTRUSTED_Relay 14259 3.39 8.92 1.13 38 XM_B_Phish_Phrases 13918 5.21 8.71 3.79 39 HTML_IMAGE_RATIO_04 13698 5.29 8.57 3.96 40 TooManyTo_001 12715 8.21 7.95 8.32 41 XM_H_Long_From01 12666 9.29 7.92 9.85 42 TR_XM_DocInvoice 12475 5.03 7.80 3.90 43 DKIM_INVALID 12160 6.21 7.61 5.64 44 BAYES_80 11539 4.56 7.22 3.48 45 MPART_ALT_DIFF 11043 4.54 6.91 3.58 46 FROM_EXCESS_BASE64 9470 3.99 5.92 3.20 47 XM_UncommonTLD01 9351 4.24 5.85 3.58 48 HTML_IMAGE_RATIO_06 8989 3.27 5.62 2.32 49 BAYES_60 8942 6.12 5.59 6.34 50 XM_SendGrid 8228 5.07 5.15 5.03 51 RCVD_IN_RP_SAFE 8155 6.53 5.10 7.11 52 MIME_QP_LONG_LINE 8060 5.00 5.04 4.99 53 TM2_M_URI_OPT_OUT 8021 2.77 5.02 1.86 54 BAYES_95 7376 2.99 4.61 2.33 55 MIME_HTML_MOSTLY 7224 2.84 4.52 2.15 56 RCVD_IN_RP_CERTIFIED 7004 5.76 4.38 6.32 57 XMNumbers 6933 3.46 4.34 3.10 58 T_REMOTE_IMAGE 6732 4.40 4.21 4.48 59 XM_DIRTYINTL 6668 2.34 4.17 1.59 60 XM_UB50 6423 1.72 4.02 0.78 61 RCVD_IN_MSPIKE_H2 5832 3.55 3.65 3.51 62 XMStrtUSub 5794 3.51 3.62 3.46 63 HTML_IMAGE_RATIO_08 5665 2.33 3.54 1.84 64 XM_SPF_SoftFail 5583 2.52 3.49 2.12 65 XM_CamelCaseFrm001 5526 2.19 3.46 1.67 66 RELAYCOUNTRY_CA 5299 1.87 3.31 1.28 67 T_TooManySym_01 5144 3.56 3.22 3.70 68 MIME_HTML_ONLY_MULTI 5071 2.56 3.17 2.31 69 XMSexyCombo_01 4794 1.16 3.00 0.41 70 URI_HEX 4771 1.68 2.98 1.15 71 RCVD_IN_BL_SPAMCOP_NET 4576 1.27 2.86 0.62 72 T_XMDrugObfuBody_08 4533 1.86 2.84 1.47 73 RCVD_IN_IADB_LISTED 4116 4.78 2.57 5.68 74 XM_OfRef6 3902 1.58 2.44 1.23 75 RCVD_IN_IADB_SPF 3684 4.15 2.30 4.91 76 MultiRelay_Combo 3560 0.77 2.23 0.18 77 MultiRelay_CC 3560 0.77 2.23 0.18 78 HTML_MIME_NO_HTML_TAG 3554 2.13 2.22 2.10 79 SpammyFromTLD_02 3531 0.86 2.21 0.31 80 RCVD_IN_IADB_SENDERID 3527 3.69 2.21 4.29 81 XMDiploma_00 3479 1.66 2.18 1.46 82 RCVD_IN_IADB_DK 3477 3.61 2.18 4.19 83 TM2_M_VERY_LONG_WORD 3427 1.15 2.14 0.75 84 NO_DNS_FOR_FROM 3378 1.62 2.11 1.43 85 MAILING_LIST_MULTI 3370 2.26 2.11 2.33 86 RELAYCOUNTRY_FR 3257 0.77 2.04 0.25 87 XM_URI_RBL 3118 0.62 1.95 0.09 88 XM_DK_Undo_01 3046 2.00 1.91 2.04 89 XM_H_Long_From02 3020 1.19 1.89 0.91 90 SpammyFromTLD_01 2965 1.17 1.85 0.90 91 XMBdyGiftCard01 2807 0.86 1.76 0.50 92 SUBJ_ALL_CAPS 2777 4.64 1.74 5.82 93 XMBody_17 2747 0.74 1.72 0.34 94 XMHTML_After_End 2661 0.68 1.66 0.29 95 RCVD_IN_RP_RNBL 2642 0.49 1.65 0.02 96 T_XMDrugObfuBody_00 2622 1.18 1.64 0.99 97 XM_UB99 2586 0.48 1.62 0.01 98 XMSubMetaI_00 2397 0.67 1.50 0.34 99 BAYES_00 2377 5.86 1.49 7.64 100 XMPhish30 2344 0.66 1.47 0.33 101 XM_ProductURIs 2339 0.92 1.46 0.71 102 XMGenDplmaNmb 2298 1.09 1.44 0.95 103 XMStockSpam_06 2279 0.83 1.43 0.59 104 BAYES_40 2268 4.61 1.42 5.91 105 URIBL_BLACK 2254 0.43 1.41 0.03 106 TR_XM_RelayPhish 2205 0.72 1.38 0.45 107 BAYES_20 2204 2.38 1.38 2.79 108 DKIM_ADSP_CUSTOM_MED 2172 1.08 1.36 0.97 109 XMHTMLBadTable_001 2157 0.66 1.35 0.38 110 BOTNET_NORDNS 2106 0.40 1.32 0.03 111 XMPhish11 2102 1.23 1.31 1.19 112 TooManyTo_002 2081 2.24 1.30 2.62 113 XMBrknScrpt_02 2034 0.79 1.27 0.59 114 SUBJ_DOLLARS 2030 0.47 1.27 0.14 115 ALL_TRUSTED 2027 17.65 1.27 24.31 116 XM_UB999 2026 0.37 1.27 0.01 117 REMOVE_BEFORE_LINK 2014 0.61 1.26 0.34 118 URIBL_DBL_SPAM 1996 0.38 1.25 0.03 119 TR_XM_DK_Bayes 1960 3.81 1.23 4.86 120 UNPARSEABLE_RELAY 1953 2.15 1.22 2.53 121 URI_TRY_3LD 1932 0.97 1.21 0.87 122 T_FILL_THIS_FORM_SHORT 1917 0.99 1.20 0.91 123 NML_ADSP_CUSTOM_MED 1883 0.79 1.18 0.63 124 TooManyTo_003 1881 1.55 1.18 1.71 125 T_XMHurry_00 1881 0.66 1.18 0.45 126 XMBody_78 1868 0.63 1.17 0.41 127 RELAYCOUNTRY_GB 1850 1.10 1.16 1.08 128 TR_LOTS_OF_MONEY3 1837 0.46 1.15 0.18 129 TR_XM_DK_Bayes1 1835 3.45 1.15 4.38 130 T_TooManySym_02 1808 1.38 1.13 1.47 131 RCVD_IN_MSPIKE_WL 1804 2.48 1.13 3.03 132 RCVD_IN_MSPIKE_H3 1804 2.48 1.13 3.02 133 TR_XM_DK_Bayes2 1757 2.75 1.10 3.42 134 XM_B_COPY_HTML 1712 0.66 1.07 0.49 135 HTTPS_HTTP_MISMATCH 1711 0.66 1.07 0.49 136 RCVD_IN_IADB_VOUCHED 1702 3.18 1.06 4.05 137 XM_B_REG_HTML 1698 0.59 1.06 0.40 138 XM_H_PHPOS 1672 1.60 1.05 1.83 139 RDNS_DYNAMIC 1671 0.56 1.05 0.37 140 TR_Symld_Words 1671 1.59 1.05 1.81 141 TooManyTo_004 1654 1.18 1.03 1.24 142 HTML_TAG_BALANCE_BODY 1636 0.61 1.02 0.44 143 XMPhish14 1604 0.59 1.00 0.42 144 XMMoneyMeta_00 1564 0.61 0.98 0.46 145 XM_HighProb1 1541 0.29 0.96 0.01 146 XM_UB60 1505 0.32 0.94 0.07 147 TooManyTo_005 1503 0.97 0.94 0.99 148 T_Symld_Words_02 1495 0.57 0.94 0.42 149 URI_NOVOWEL 1466 0.54 0.92 0.39 150 PLING_QUERY 1456 0.45 0.91 0.26 151 RELAYCOUNTRY_AT 1454 0.35 0.91 0.12 152 DIET_1 1438 0.41 0.90 0.21 153 T_HTML_TAG_BALANCE_CENTER 1421 0.37 0.89 0.16 154 XM_PDF 1407 3.92 0.88 5.16 155 TR_MetaPhish_Combo_01 1397 0.86 0.87 0.86 156 RELAYCOUNTRY_DE 1386 0.61 0.87 0.50 157 RELAYCOUNTRY_IN 1374 0.35 0.86 0.15 158 XMLongAddy 1354 0.28 0.85 0.05 159 HTML_FONT_SIZE_HUGE 1336 0.29 0.84 0.07 160 FORGED_GMAIL_RCVD 1331 0.58 0.83 0.48 161 XM_UB80 1321 0.25 0.83 0.02 162 MPART_ALT_DIFF_COUNT 1308 0.38 0.82 0.21 163 XM_RXBody 1303 0.30 0.82 0.08 164 RELAYCOUNTRY_AU 1302 0.56 0.81 0.45 165 T_MONEY_PERCENT 1296 0.44 0.81 0.29 166 TR_LOTS_OF_MONEY2 1296 0.44 0.81 0.29 167 HTML_FONT_FACE_BAD 1277 1.19 0.80 1.36 168 XMClaimOffer 1268 0.35 0.79 0.18 169 HTML_IMAGE_ONLY_28 1250 0.52 0.78 0.41 170 XMCapTrack 1225 1.48 0.77 1.77 171 BOUNCE_MESSAGE 1222 2.50 0.76 3.20 172 ANY_BOUNCE_MESSAGE 1222 2.50 0.76 3.20 173 XM_BadFromFormat 1214 0.35 0.76 0.18 174 TR_Mismatch_TLD_02 1212 0.27 0.76 0.06 175 RCVD_IN_PSBL 1209 0.29 0.76 0.10 176 XMSlimDrugH 1149 0.40 0.72 0.28 177 XMSexyCombo_04 1142 0.29 0.71 0.11 178 LONG_JUNK_URI3 1132 0.23 0.71 0.04 179 RELAYCOUNTRY_NL 1128 0.36 0.71 0.22 180 XMGppyBdWords 1112 0.28 0.70 0.12 181 XMSubMetaSxObfu_03 1106 0.38 0.69 0.25 182 XMBody_29 1105 0.46 0.69 0.36 183 RELAYCOUNTRY_CN 1099 0.21 0.69 0.02 184 LongTLD 1088 0.31 0.68 0.15 185 XM_H_PHPMailer 1074 0.69 0.67 0.70 186 XMSubMetaSSx_00 1071 0.30 0.67 0.15 187 RCVD_IN_IADB_OPTIN 1065 2.06 0.67 2.63 188 TR_Caps_n_Bayes_99 1054 0.26 0.66 0.10 189 BAYES_05 1047 1.50 0.65 1.85 190 LOW_PRICE 1046 0.24 0.65 0.08 191 TM2_M_A_HREF_HREF 1022 0.49 0.64 0.44 192 FILL_THIS_FORM 1020 0.44 0.64 0.36 193 XM_S_JOY_D 990 0.45 0.62 0.38 194 BODY_URI_ONLY 981 0.22 0.61 0.06 195 DATE_IN_PAST_03_06 969 0.23 0.61 0.08 196 RELAYCOUNTRY_IT 948 0.20 0.59 0.05 197 XMGappySubj_01 926 0.51 0.58 0.48 198 FILL_THIS_FORM_LONG 913 0.36 0.57 0.27 199 XM_GoogleGroups 903 1.12 0.56 1.34 200 BASE64_LENGTH_79_INF 902 0.22 0.56 0.08 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 323978 86.53 96.56 82.45 2 DCC_CHECK_NEGATIVE 265273 53.19 17.99 67.51 3 DKIM_SIGNED 251844 70.97 87.87 64.09 4 XM_DK_Pass 246853 69.31 85.24 62.82 5 BAYES_50 232907 50.72 29.70 59.27 6 DKIM_VALID 229681 64.76 80.27 58.45 7 XMListUnsubscribeExists 162230 51.03 74.97 41.29 8 DKIM_VALID_AU 157486 46.07 60.81 40.08 9 T_TM2_M_HEADER_IN_MSG 141251 31.68 21.20 35.95 10 XM_H_QuotedFrom 124919 38.46 54.86 31.79 11 DCC_CHECK 119039 44.58 79.70 30.29 12 ALL_TRUSTED 95533 17.65 1.27 24.31 13 DKIM_VALID_EF 92656 24.17 25.61 23.58 14 HTML_FONT_LOW_CONTRAST 84094 25.87 36.85 21.40 15 MIME_HTML_ONLY 75741 22.28 29.67 19.28 16 MultiRelay 75627 18.72 17.41 19.25 17 XMSubLong 71437 20.69 26.85 18.18 18 FVGT_m_MULTI_ODD 69656 20.70 28.02 17.73 19 LOC_TINY_FONT_1 65937 22.41 36.25 16.78 20 T_KAM_HTML_FONT_INVALID 52008 16.02 22.86 13.24 21 XM_DK_Undo_02 44579 23.21 52.36 11.35 22 BAYES_99 40460 21.17 47.89 10.30 23 XM_H_Long_From01 38701 9.29 7.92 9.85 24 XM_Multi_Part_URI 37930 11.71 16.77 9.65 25 BAYES_999 35332 18.23 40.95 8.99 26 XM_Body_Dirty_Words 35238 12.00 19.46 8.97 27 TooManyTo_001 32673 8.21 7.95 8.32 28 LOTS_OF_MONEY 30100 8.93 12.05 7.66 29 BAYES_00 30005 5.86 1.49 7.64 30 XM_DKIMWhitelistDomains 28702 5.20 0.02 7.30 31 T_XMDrugObfuBody_14 28247 8.36 11.25 7.19 32 RCVD_IN_RP_SAFE 27931 6.53 5.10 7.11 33 LotsOfNums_01 27116 7.78 9.95 6.90 34 IN_ZIMBRA_NJ_WHITELIST 26476 4.80 0.04 6.74 35 XM_Evil_Numbers_Gen 26445 8.97 14.49 6.73 36 FSL_BULK_SIG 25448 7.96 11.60 6.48 37 BAYES_60 24895 6.12 5.59 6.34 38 RCVD_IN_RP_CERTIFIED 24849 5.76 4.38 6.32 39 BAYES_40 23218 4.61 1.42 5.91 40 HTML_IMAGE_RATIO_02 22950 8.93 16.54 5.84 41 SUBJ_ALL_CAPS 22860 4.64 1.74 5.82 42 RCVD_IN_IADB_LISTED 22305 4.78 2.57 5.68 43 DKIM_INVALID 22163 6.21 7.61 5.64 44 XM_PDF 20258 3.92 0.88 5.16 45 XM_SendGrid 19775 5.07 5.15 5.03 46 MIME_QP_LONG_LINE 19599 5.00 5.04 4.99 47 RCVD_IN_IADB_SPF 19278 4.15 2.30 4.91 48 TR_XM_DK_Bayes 19111 3.81 1.23 4.86 49 RELAYCOUNTRY_META 18881 7.96 15.73 4.81 50 TR_DCC_Bayes_99 18530 14.28 37.79 4.72 51 T_REMOTE_IMAGE 17600 4.40 4.21 4.48 52 TR_XM_DK_Bayes1 17214 3.45 1.15 4.38 53 RCVD_IN_IADB_SENDERID 16846 3.69 2.21 4.29 54 RCVD_IN_IADB_DK 16465 3.61 2.18 4.19 55 RCVD_IN_IADB_VOUCHED 15897 3.18 1.06 4.05 56 HTML_IMAGE_RATIO_04 15541 5.29 8.57 3.96 57 TR_XM_DocInvoice 15309 5.03 7.80 3.90 58 XM_B_Phish_Phrases 14890 5.21 8.71 3.79 59 T_TooManySym_01 14540 3.56 3.22 3.70 60 MPART_ALT_DIFF 14081 4.54 6.91 3.58 61 XM_UncommonTLD01 14061 4.24 5.85 3.58 62 RCVD_IN_MSPIKE_H2 13798 3.55 3.65 3.51 63 BAYES_80 13677 4.56 7.22 3.48 64 XMSubMetaSx_00 13660 5.10 9.10 3.48 65 BOTNET_IPINHOSTNAME 13615 6.17 12.82 3.46 66 XMStrtUSub 13584 3.51 3.62 3.46 67 TR_XM_DK_Bayes2 13456 2.75 1.10 3.42 68 ANY_BOUNCE_MESSAGE 12581 2.50 0.76 3.20 69 BOUNCE_MESSAGE 12580 2.50 0.76 3.20 70 FROM_EXCESS_BASE64 12573 3.99 5.92 3.20 71 XMNumbers 12197 3.46 4.34 3.10 72 RCVD_IN_MSPIKE_WL 11887 2.48 1.13 3.03 73 RCVD_IN_MSPIKE_H3 11885 2.48 1.13 3.02 74 BAYES_20 10961 2.38 1.38 2.79 75 XMSexyCombo_05 10434 4.58 9.31 2.66 76 RCVD_IN_IADB_OPTIN 10315 2.06 0.67 2.63 77 TooManyTo_002 10314 2.24 1.30 2.62 78 UNPARSEABLE_RELAY 9953 2.15 1.22 2.53 79 HELO_NODOT 9760 1.87 0.35 2.48 80 TVD_RCVD_IP 9275 1.80 0.44 2.36 81 BAYES_95 9161 2.99 4.61 2.33 82 MAILING_LIST_MULTI 9149 2.26 2.11 2.33 83 HTML_IMAGE_RATIO_06 9110 3.27 5.62 2.32 84 MIME_HTML_ONLY_MULTI 9076 2.56 3.17 2.31 85 MIME_HTML_MOSTLY 8456 2.84 4.52 2.15 86 IN_HORDE_ADDRESS_BOOK 8426 1.55 0.09 2.14 87 XM_SPF_SoftFail 8329 2.52 3.49 2.12 88 HTML_MIME_NO_HTML_TAG 8247 2.13 2.22 2.10 89 XM_DK_Undo_01 8005 2.00 1.91 2.04 90 TM2_M_URI_OPT_OUT 7306 2.77 5.02 1.86 91 BAYES_05 7256 1.50 0.65 1.85 92 HTML_IMAGE_RATIO_08 7215 2.33 3.54 1.84 93 XM_H_PHPOS 7180 1.60 1.05 1.83 94 TR_Symld_Words 7116 1.59 1.05 1.81 95 XMCapTrack 6973 1.48 0.77 1.77 96 INVALID_MSGID 6885 1.30 0.18 1.75 97 TooManyTo_003 6710 1.55 1.18 1.71 98 TO_MALFORMED 6650 1.22 0.04 1.69 99 MSGID_NOFQDN1 6575 1.19 0.01 1.67 100 XM_CamelCaseFrm001 6570 2.19 3.46 1.67 101 XM_DIRTYINTL 6240 2.34 4.17 1.59 102 T_TooManySym_02 5794 1.38 1.13 1.47 103 T_XMDrugObfuBody_08 5761 1.86 2.84 1.47 104 XMDiploma_00 5724 1.66 2.18 1.46 105 NO_DNS_FOR_FROM 5603 1.62 2.11 1.43 106 BOTNET 5421 4.52 12.25 1.38 107 HTML_FONT_FACE_BAD 5327 1.19 0.80 1.36 108 XM_GoogleGroups 5284 1.12 0.56 1.34 109 XMSubNoVowel 5235 1.04 0.31 1.33 110 RELAYCOUNTRY_CA 5027 1.87 3.31 1.28 111 TooManyTo_004 4872 1.18 1.03 1.24 112 XM_OfRef6 4846 1.58 2.44 1.23 113 XMPhish11 4670 1.23 1.31 1.19 114 URI_HEX 4521 1.68 2.98 1.15 115 USER_IN_DEF_DKIM_WL 4469 0.82 0.03 1.14 116 UNTRUSTED_Relay 4454 3.39 8.92 1.13 117 RELAYCOUNTRY_GB 4239 1.10 1.16 1.08 118 TO_NO_BRKTS_HTML_ONLY 3939 0.76 0.17 1.00 119 T_XMDrugObfuBody_00 3898 1.18 1.64 0.99 120 TooManyTo_005 3875 0.97 0.94 0.99 121 DKIM_ADSP_CUSTOM_MED 3809 1.08 1.36 0.97 122 XMGenDplmaNmb 3747 1.09 1.44 0.95 123 XMSubEmpty 3720 0.72 0.17 0.95 124 XM_H_Long_From02 3574 1.19 1.89 0.91 125 T_FILL_THIS_FORM_SHORT 3574 0.99 1.20 0.91 126 SpammyFromTLD_01 3521 1.17 1.85 0.90 127 URI_TRY_3LD 3430 0.97 1.21 0.87 128 TR_MetaPhish_Combo_01 3382 0.86 0.87 0.86 129 XMNoVowels 3125 0.70 0.48 0.80 130 XM_UB50 3071 1.72 4.02 0.78 131 TM2_M_VERY_LONG_WORD 2949 1.15 2.14 0.75 132 MISSING_HEADERS 2940 0.64 0.38 0.75 133 T_OBFU_PDF_ATTACH 2775 0.55 0.18 0.71 134 XM_ProductURIs 2774 0.92 1.46 0.71 135 XM_H_PHPMailer 2765 0.69 0.67 0.70 136 T_TooManySym_03 2588 0.54 0.24 0.66 137 USER_IN_WHITELIST 2563 0.46 0.00 0.65 138 SHORT_HELO_AND_INLINE_IMAGE 2494 0.48 0.10 0.63 139 NML_ADSP_CUSTOM_MED 2487 0.79 1.18 0.63 140 RCVD_IN_BL_SPAMCOP_NET 2420 1.27 2.86 0.62 141 XMStockSpam_06 2330 0.83 1.43 0.59 142 XMBrknScrpt_02 2319 0.79 1.27 0.59 143 RCVD_IN_SORBS_DUL 2252 0.49 0.28 0.57 144 XM_ShortIntro_01 2202 0.49 0.31 0.56 145 XMDateMe_00 1994 0.44 0.27 0.51 146 RELAYCOUNTRY_DE 1965 0.61 0.87 0.50 147 XMBdyGiftCard01 1959 0.86 1.76 0.50 148 XM_B_COPY_HTML 1938 0.66 1.07 0.49 149 HTTPS_HTTP_MISMATCH 1923 0.66 1.07 0.49 150 FORGED_GMAIL_RCVD 1886 0.58 0.83 0.48 151 XMGappySubj_01 1879 0.51 0.58 0.48 152 TVD_SPACE_RATIO 1864 0.40 0.23 0.47 153 HTML_IMAGE_ONLY_32 1814 0.47 0.48 0.46 154 TR_Mismatch_TLD_01 1794 0.41 0.29 0.46 155 XMMoneyMeta_00 1792 0.61 0.98 0.46 156 T_XMHurry_00 1785 0.66 1.18 0.45 157 TR_XM_RelayPhish 1785 0.72 1.38 0.45 158 RELAYCOUNTRY_AU 1770 0.56 0.81 0.45 159 HTML_TAG_BALANCE_BODY 1732 0.61 1.02 0.44 160 TM2_M_A_HREF_HREF 1711 0.49 0.64 0.44 161 XMBody_95 1690 0.36 0.18 0.43 162 TM2_M_BODY_EMPTY 1666 0.35 0.18 0.42 163 XMPhish14 1648 0.59 1.00 0.42 164 AC_DIV_BONANZA 1638 0.34 0.16 0.42 165 T_Symld_Words_02 1632 0.57 0.94 0.42 166 XMSubMetaSxObfu_02 1614 0.39 0.34 0.41 167 XM_USANA_RCVD 1607 0.29 0.01 0.41 168 HTML_IMAGE_ONLY_28 1606 0.52 0.78 0.41 169 XMSexyCombo_01 1605 1.16 3.00 0.41 170 XMBody_78 1598 0.63 1.17 0.41 171 XM_B_REG_HTML 1558 0.59 1.06 0.40 172 URI_NOVOWEL 1521 0.54 0.92 0.39 173 HTML_IMAGE_ONLY_24 1483 0.39 0.43 0.38 174 XM_S_JOY_D 1478 0.45 0.62 0.38 175 XMHTMLBadTable_001 1475 0.66 1.35 0.38 176 RDNS_DYNAMIC 1450 0.56 1.05 0.37 177 XMBody_29 1432 0.46 0.69 0.36 178 XM_B_TRADE_HTML 1430 0.39 0.45 0.36 179 FILL_THIS_FORM 1428 0.44 0.64 0.36 180 XM_Body_Obfu01 1365 0.40 0.51 0.35 181 XMBody_17 1350 0.74 1.72 0.34 182 REMOVE_BEFORE_LINK 1340 0.61 1.26 0.34 183 XMSubMetaI_00 1332 0.67 1.50 0.34 184 XMPhish30 1285 0.66 1.47 0.33 185 XMSolicitRefs_0 1270 0.34 0.38 0.32 186 XMLngstWrd_00 1260 0.36 0.45 0.32 187 SpammyFromTLD_02 1235 0.86 2.21 0.31 188 T_TooManySym_04 1213 0.23 0.02 0.31 189 HTML_IMAGE_ONLY_20 1203 0.33 0.39 0.31 190 XMRcvdHeader_15 1187 0.21 0.00 0.30 191 XM_H_PHPOS_M 1184 0.33 0.40 0.30 192 T_HTML_ATTACH 1167 0.23 0.05 0.30 193 T_MONEY_PERCENT 1142 0.44 0.81 0.29 194 TR_LOTS_OF_MONEY2 1142 0.44 0.81 0.29 195 XMEmptySub 1141 0.23 0.08 0.29 196 XMLngstWrd_01 1133 0.33 0.42 0.29 197 GMD_PDF_EMPTY_BODY 1126 0.24 0.12 0.29 198 XMHTML_After_End 1122 0.68 1.66 0.29 199 DKIM_ADSP_NXDOMAIN 1083 0.29 0.31 0.28 200 XMSlimDrugH 1082 0.40 0.72 0.28 ----------------------------------------------------------------------