Email: 589551 Autolearn: 0 AvgScore: 4.08 AvgScanTime: 4.45 sec Spam: 210616 Autolearn: 0 AvgScore: 11.82 AvgScanTime: 5.11 sec Ham: 378935 Autolearn: 0 AvgScore: -0.23 AvgScanTime: 4.09 sec Time Spent Running SA: 729.41 hours Time Spent Processing Spam: 299.12 hours Time Spent Processing Ham: 430.29 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 202576 87.21 96.18 82.22 2 DKIM_SIGNED 145861 66.93 69.25 65.64 3 XM_DK_Pass 141363 65.16 67.12 64.07 4 DCC_CHECK 136775 43.46 64.94 31.52 5 XM_H_QuotedFrom 133341 43.61 63.31 32.66 6 DKIM_VALID 131864 60.37 62.61 59.13 7 XMListUnsubscribeExists 124685 47.22 59.20 40.56 8 DKIM_VALID_AU 98954 43.22 46.98 41.13 9 BAYES_50 94002 52.98 44.63 57.63 10 XM_DK_Undo_02 85360 22.57 40.53 12.60 11 BAYES_99 77161 20.45 36.64 11.45 12 DCC_CHECK_NEGATIVE 69627 54.20 33.06 65.94 13 BAYES_999 65610 17.60 31.15 10.06 14 TR_DCC_Bayes_99 61648 13.82 29.27 5.23 15 LOC_TINY_FONT_1 61466 20.84 29.18 16.20 16 HTML_FONT_LOW_CONTRAST 60973 23.98 28.95 21.21 17 TR_XM_DocInvoice 52261 11.10 24.81 3.47 18 MIME_HTML_ONLY 51183 19.36 24.30 16.61 19 XMSubLong 45010 20.17 21.37 19.50 20 FVGT_m_MULTI_ODD 44860 19.77 21.30 18.91 21 ALL_TRUSTED 43755 22.62 20.77 23.64 22 DKIM_VALID_EF 40342 21.86 19.15 23.37 23 URI_GOOGLE_PROXY 38794 6.68 18.42 0.16 24 DATE_IN_FUTURE_12_24 38489 6.58 18.27 0.08 25 T_KAM_HTML_FONT_INVALID 37829 15.14 17.96 13.57 26 T_TM2_M_HEADER_IN_MSG 36661 30.50 17.41 37.78 27 MultiRelay 31756 17.76 15.08 19.26 28 XM_Body_Dirty_Words 31575 11.17 14.99 9.04 29 RELAYCOUNTRY_META 28970 8.24 13.75 5.17 30 XM_Multi_Part_URI 28895 10.52 13.72 8.75 31 HTML_IMAGE_RATIO_02 26735 8.21 12.69 5.71 32 BOTNET 24099 5.04 11.44 1.49 33 XM_Evil_Numbers_Gen 22980 8.64 10.91 7.37 34 FSL_BULK_SIG 22496 8.59 10.68 7.43 35 BOTNET_IPINHOSTNAME 22200 6.04 10.54 3.54 36 LOTS_OF_MONEY 19957 7.78 9.48 6.83 37 T_XMDrugObfuBody_14 18984 7.95 9.01 7.36 38 XMSexyCombo_05 17359 4.55 8.24 2.50 39 LotsOfNums_01 15794 7.29 7.50 7.17 40 XM_B_Phish_Phrases 15706 5.35 7.46 4.18 41 UNTRUSTED_Relay 15587 3.49 7.40 1.32 42 XMSubMetaSx_00 14946 4.82 7.10 3.56 43 XM_H_Long_From01 14454 8.81 6.86 9.89 44 HTML_IMAGE_RATIO_04 14333 5.06 6.81 4.09 45 DKIM_INVALID 13997 6.56 6.65 6.51 46 TooManyTo_001 13500 8.17 6.41 9.15 47 BAYES_80 12966 4.60 6.16 3.73 48 XM_UncommonTLD01 11995 4.41 5.70 3.70 49 RCVD_IN_MSPIKE_H2 11432 5.82 5.43 6.03 50 FROM_EXCESS_BASE64 11097 4.12 5.27 3.49 51 BAYES_60 11085 6.30 5.26 6.87 52 MPART_ALT_DIFF 9941 3.40 4.72 2.67 53 MIME_QP_LONG_LINE 8864 4.84 4.21 5.19 54 RCVD_IN_RP_SAFE 8740 6.16 4.15 7.27 55 HTML_IMAGE_RATIO_06 8503 3.49 4.04 3.18 56 TM2_M_URI_OPT_OUT 8421 2.61 4.00 1.84 57 XMNumbers 7934 3.45 3.77 3.27 58 XM_SendGrid 7879 4.29 3.74 4.59 59 BAYES_95 7733 2.94 3.67 2.53 60 RCVD_IN_RP_CERTIFIED 7630 5.65 3.62 6.77 61 MIME_HTML_MOSTLY 7629 2.68 3.62 2.15 62 XM_SPF_SoftFail 7428 2.60 3.53 2.09 63 XM_UB50 7394 1.81 3.51 0.87 64 T_REMOTE_IMAGE 7180 4.04 3.41 4.39 65 RCVD_IN_BL_SPAMCOP_NET 6406 1.54 3.04 0.70 66 RELAYCOUNTRY_CA 6230 1.94 2.96 1.37 67 XM_DIRTYINTL 6135 2.06 2.91 1.59 68 MultiRelay_Combo 6017 1.15 2.86 0.20 69 MultiRelay_CC 6017 1.15 2.86 0.20 70 XM_OfRef6 5927 1.90 2.81 1.39 71 T_TooManySym_01 5680 3.84 2.70 4.48 72 XMStrtUSub 5674 3.33 2.69 3.68 73 HTML_IMAGE_RATIO_08 5622 2.14 2.67 1.85 74 XM_CamelCaseFrm001 5531 1.90 2.63 1.50 75 T_XMDrugObfuBody_08 5488 1.92 2.61 1.54 76 MIME_HTML_ONLY_MULTI 5415 1.69 2.57 1.20 77 URI_HEX 5411 1.68 2.57 1.19 78 NO_DNS_FOR_FROM 4968 2.18 2.36 2.08 79 RCVD_IN_RP_RNBL 4718 0.84 2.24 0.06 80 RCVD_IN_IADB_LISTED 4640 4.41 2.20 5.64 81 DKIM_ADSP_CUSTOM_MED 4604 1.49 2.19 1.11 82 XM_URI_RBL 4545 0.85 2.16 0.13 83 NML_ADSP_CUSTOM_MED 4216 1.24 2.00 0.82 84 RCVD_IN_IADB_SPF 4152 3.86 1.97 4.91 85 XMDiploma_00 3978 1.72 1.89 1.63 86 RCVD_IN_IADB_SENDERID 3942 3.44 1.87 4.31 87 T_FILL_THIS_FORM_SHORT 3906 1.23 1.85 0.89 88 RCVD_IN_IADB_DK 3895 3.36 1.85 4.20 89 SpammyFromTLD_02 3892 0.87 1.85 0.32 90 SUBJ_ALL_CAPS 3606 4.23 1.71 5.63 91 SpammyFromTLD_01 3565 1.20 1.69 0.93 92 HTML_MIME_NO_HTML_TAG 3414 1.95 1.62 2.14 93 FORGED_GMAIL_RCVD 3406 0.96 1.62 0.59 94 XMSexyCombo_01 3276 0.78 1.56 0.34 95 TM2_M_VERY_LONG_WORD 3239 1.04 1.54 0.77 96 MAILING_LIST_MULTI 3218 2.38 1.53 2.85 97 XMHTML_After_End 3199 0.76 1.52 0.33 98 XM_UB99 3097 0.55 1.47 0.03 99 BOTNET_NORDNS 3056 0.54 1.45 0.03 100 XM_H_Long_From02 2983 1.01 1.42 0.78 101 T_XMHurry_00 2941 0.84 1.40 0.52 102 XM_DK_Undo_01 2767 1.74 1.31 1.97 103 XMPhish30 2749 0.67 1.31 0.31 104 XM_ProductURIs 2702 1.05 1.28 0.92 105 XMSubNoVowel 2694 1.41 1.28 1.48 106 TooManyTo_002 2690 2.20 1.28 2.71 107 XMGenDplmaNmb 2582 1.13 1.23 1.07 108 RELAYCOUNTRY_GB 2580 1.13 1.22 1.08 109 RELAYCOUNTRY_FR 2487 0.60 1.18 0.28 110 URIBL_BLACK 2456 0.44 1.17 0.04 111 TR_XM_RelayPhish 2447 0.71 1.16 0.47 112 TooManyTo_003 2435 1.55 1.16 1.78 113 XMPhish11 2358 1.12 1.12 1.13 114 XM_UB999 2336 0.41 1.11 0.02 115 TR_Mismatch_TLD_01 2335 0.65 1.11 0.39 116 XMSubMetaI_00 2325 0.88 1.10 0.76 117 XMBody_17 2309 0.57 1.10 0.28 118 TR_Symld_Words 2284 1.50 1.08 1.73 119 XM_HighProb1 2272 0.39 1.08 0.01 120 BAYES_40 2257 4.00 1.07 5.62 121 T_XMDrugObfuBody_00 2234 0.93 1.06 0.86 122 BODY_URI_ONLY 2216 0.42 1.05 0.06 123 TR_Mismatch_TLD_02 2184 0.41 1.04 0.06 124 BAYES_00 2167 5.12 1.03 7.39 125 SUBJ_DOLLARS 2154 0.48 1.02 0.17 126 RCVD_IN_PSBL 2116 0.42 1.00 0.09 127 XMSubEmpty 2092 1.16 0.99 1.25 128 T_Symld_Words_02 2082 0.69 0.99 0.53 129 TooManyTo_004 2082 1.18 0.99 1.28 130 URI_TRY_3LD 2076 0.95 0.99 0.93 131 RELAYCOUNTRY_NL 2044 0.48 0.97 0.21 132 XMBody_78 2000 0.56 0.95 0.34 133 XMStockSpam_06 1963 1.03 0.93 1.09 134 XMBdyGiftCard01 1962 0.70 0.93 0.57 135 UNPARSEABLE_RELAY 1958 1.90 0.93 2.45 136 HTML_SHORT_LINK_IMG_1 1948 0.34 0.92 0.02 137 HTML_IMAGE_ONLY_08 1941 0.41 0.92 0.12 138 TooManyTo_005 1929 0.99 0.92 1.04 139 XMHTMLBadTable_001 1923 0.55 0.91 0.35 140 RCVD_IN_IADB_VOUCHED 1907 2.75 0.91 3.78 141 BAYES_20 1887 2.03 0.90 2.66 142 ADVANCE_FEE_4_NEW 1868 0.32 0.89 0.00 143 HTTPS_HTTP_MISMATCH 1854 0.64 0.88 0.51 144 FILL_THIS_FORM 1852 0.61 0.88 0.46 145 URIBL_DBL_SPAM 1843 0.32 0.88 0.01 146 DIET_1 1825 0.44 0.87 0.20 147 FILL_THIS_FORM_LONG 1710 0.48 0.81 0.30 148 XM_UB60 1707 0.36 0.81 0.11 149 HTML_FONT_FACE_BAD 1704 0.54 0.81 0.39 150 REMOVE_BEFORE_LINK 1679 0.44 0.80 0.24 151 RELAYCOUNTRY_AT 1658 0.36 0.79 0.12 152 XM_B_REG_HTML 1628 0.55 0.77 0.43 153 T_FILL_THIS_FORM_LOAN 1607 0.44 0.76 0.26 154 XMPhish14 1590 0.48 0.75 0.32 155 RELAYCOUNTRY_AU 1583 0.55 0.75 0.44 156 XM_XX_Yahoo 1580 0.33 0.75 0.10 157 XMNoVowels 1578 0.79 0.75 0.81 158 RELAYCOUNTRY_DE 1571 0.59 0.75 0.50 159 HTML_FONT_SIZE_LARGE 1556 0.38 0.74 0.18 160 PLING_QUERY 1544 0.48 0.73 0.34 161 RDNS_DYNAMIC 1537 0.50 0.73 0.38 162 URI_NOVOWEL 1534 0.51 0.73 0.38 163 T_TooManySym_02 1527 1.56 0.73 2.03 164 TR_XM_DK_Bayes 1511 3.07 0.72 4.38 165 XM_H_PHPOS 1506 1.46 0.72 1.87 166 XM_PDF 1492 3.56 0.71 5.14 167 XMSubMetaSSx_00 1490 0.37 0.71 0.18 168 XM_H_Undi_Recip 1487 0.46 0.71 0.32 169 XMLongAddy 1484 0.31 0.70 0.08 170 XM_BadFromFormat 1480 0.37 0.70 0.19 171 T_HTML_TAG_BALANCE_CENTER 1466 0.34 0.70 0.14 172 RELAYCOUNTRY_KR 1437 0.26 0.68 0.03 173 XMSlimDrugH 1422 0.43 0.68 0.29 174 HTML_TAG_BALANCE_BODY 1414 0.51 0.67 0.42 175 XM_UB80 1412 0.26 0.67 0.03 176 RELAYCOUNTRY_IT 1411 0.26 0.67 0.04 177 TR_LOTS_OF_MONEY2 1376 0.36 0.65 0.20 178 T_MONEY_PERCENT 1376 0.36 0.65 0.20 179 XMMoneyMeta_00 1375 0.62 0.65 0.60 180 RCVD_IN_MSPIKE_H3 1362 1.46 0.65 1.92 181 RCVD_IN_MSPIKE_WL 1362 1.46 0.65 1.92 182 TR_XM_DK_Bayes1 1351 2.68 0.64 3.81 183 HTML_IMAGE_ONLY_28 1344 0.51 0.64 0.44 184 ANY_BOUNCE_MESSAGE 1339 2.15 0.64 2.99 185 BOUNCE_MESSAGE 1335 2.15 0.63 2.99 186 MPART_ALT_DIFF_COUNT 1323 0.37 0.63 0.23 187 RELAYCOUNTRY_ZA 1313 0.23 0.62 0.01 188 TR_XM_DK_Bayes2 1307 2.17 0.62 3.03 189 TR_XM_Undi_Recip5 1294 0.27 0.61 0.08 190 XM_B_COPY_HTML 1284 0.54 0.61 0.50 191 RCVD_IN_IADB_OPTIN 1282 1.76 0.61 2.41 192 TR_Caps_n_Bayes_99 1267 0.30 0.60 0.14 193 SHORT_BUFFLY_IMG 1225 0.21 0.58 0.00 194 URI_BUFFLY 1225 0.21 0.58 0.00 195 RELAYCOUNTRY_CN 1219 0.25 0.58 0.07 196 TR_MetaPhish_Combo_01 1214 0.74 0.58 0.83 197 FORM_FRAUD_3 1211 0.21 0.57 0.00 198 TVD_SPACE_RATIO 1207 0.49 0.57 0.45 199 XMSubMetaSxObfu_03 1203 0.41 0.57 0.32 200 XMCapTrack 1186 1.34 0.56 1.78 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 311569 87.21 96.18 82.22 2 DCC_CHECK_NEGATIVE 249887 54.20 33.06 65.94 3 DKIM_SIGNED 248722 66.93 69.25 65.64 4 XM_DK_Pass 242794 65.16 67.12 64.07 5 DKIM_VALID 224049 60.37 62.61 59.13 6 BAYES_50 218366 52.98 44.63 57.63 7 DKIM_VALID_AU 155863 43.22 46.98 41.13 8 XMListUnsubscribeExists 153679 47.22 59.20 40.56 9 T_TM2_M_HEADER_IN_MSG 143144 30.50 17.41 37.78 10 XM_H_QuotedFrom 123746 43.61 63.31 32.66 11 DCC_CHECK 119455 43.46 64.94 31.52 12 ALL_TRUSTED 89595 22.62 20.77 23.64 13 DKIM_VALID_EF 88550 21.86 19.15 23.37 14 HTML_FONT_LOW_CONTRAST 80384 23.98 28.95 21.21 15 XMSubLong 73900 20.17 21.37 19.50 16 MultiRelay 72974 17.76 15.08 19.26 17 FVGT_m_MULTI_ODD 71669 19.77 21.30 18.91 18 MIME_HTML_ONLY 62951 19.36 24.30 16.61 19 LOC_TINY_FONT_1 61400 20.84 29.18 16.20 20 T_KAM_HTML_FONT_INVALID 51429 15.14 17.96 13.57 21 XM_DK_Undo_02 47727 22.57 40.53 12.60 22 BAYES_99 43401 20.45 36.64 11.45 23 BAYES_999 38139 17.60 31.15 10.06 24 XM_H_Long_From01 37482 8.81 6.86 9.89 25 TooManyTo_001 34655 8.17 6.41 9.15 26 XM_Body_Dirty_Words 34252 11.17 14.99 9.04 27 XM_Multi_Part_URI 33150 10.52 13.72 8.75 28 XM_DKIMWhitelistDomains 28562 4.87 0.08 7.54 29 FSL_BULK_SIG 28166 8.59 10.68 7.43 30 BAYES_00 28004 5.12 1.03 7.39 31 XM_Evil_Numbers_Gen 27935 8.64 10.91 7.37 32 T_XMDrugObfuBody_14 27881 7.95 9.01 7.36 33 RCVD_IN_RP_SAFE 27565 6.16 4.15 7.27 34 LotsOfNums_01 27155 7.29 7.50 7.17 35 BAYES_60 26029 6.30 5.26 6.87 36 LOTS_OF_MONEY 25886 7.78 9.48 6.83 37 RCVD_IN_RP_CERTIFIED 25656 5.65 3.62 6.77 38 DKIM_INVALID 24673 6.56 6.65 6.51 39 RCVD_IN_MSPIKE_H2 22853 5.82 5.43 6.03 40 IN_ZIMBRA_NJ_WHITELIST 22490 3.83 0.03 5.94 41 HTML_IMAGE_RATIO_02 21652 8.21 12.69 5.71 42 RCVD_IN_IADB_LISTED 21375 4.41 2.20 5.64 43 SUBJ_ALL_CAPS 21322 4.23 1.71 5.63 44 BAYES_40 21310 4.00 1.07 5.62 45 TR_DCC_Bayes_99 19835 13.82 29.27 5.23 46 MIME_QP_LONG_LINE 19661 4.84 4.21 5.19 47 RELAYCOUNTRY_META 19600 8.24 13.75 5.17 48 XM_PDF 19483 3.56 0.71 5.14 49 RCVD_IN_IADB_SPF 18596 3.86 1.97 4.91 50 XM_SendGrid 17409 4.29 3.74 4.59 51 T_TooManySym_01 16977 3.84 2.70 4.48 52 T_REMOTE_IMAGE 16631 4.04 3.41 4.39 53 TR_XM_DK_Bayes 16587 3.07 0.72 4.38 54 RCVD_IN_IADB_SENDERID 16341 3.44 1.87 4.31 55 RCVD_IN_IADB_DK 15923 3.36 1.85 4.20 56 XM_B_Phish_Phrases 15847 5.35 7.46 4.18 57 HTML_IMAGE_RATIO_04 15514 5.06 6.81 4.09 58 TR_XM_DK_Bayes1 14433 2.68 0.64 3.81 59 RCVD_IN_IADB_VOUCHED 14324 2.75 0.91 3.78 60 BAYES_80 14149 4.60 6.16 3.73 61 XM_UncommonTLD01 14021 4.41 5.70 3.70 62 XMStrtUSub 13942 3.33 2.69 3.68 63 XMSubMetaSx_00 13473 4.82 7.10 3.56 64 BOTNET_IPINHOSTNAME 13432 6.04 10.54 3.54 65 FROM_EXCESS_BASE64 13210 4.12 5.27 3.49 66 TR_XM_DocInvoice 13163 11.10 24.81 3.47 67 XMNumbers 12378 3.45 3.77 3.27 68 HTML_IMAGE_RATIO_06 12050 3.49 4.04 3.18 69 TR_XM_DK_Bayes2 11463 2.17 0.62 3.03 70 ANY_BOUNCE_MESSAGE 11342 2.15 0.64 2.99 71 BOUNCE_MESSAGE 11330 2.15 0.63 2.99 72 MAILING_LIST_MULTI 10818 2.38 1.53 2.85 73 TooManyTo_002 10255 2.20 1.28 2.71 74 MPART_ALT_DIFF 10131 3.40 4.72 2.67 75 BAYES_20 10070 2.03 0.90 2.66 76 BAYES_95 9574 2.94 3.67 2.53 77 XMSexyCombo_05 9461 4.55 8.24 2.50 78 UNPARSEABLE_RELAY 9266 1.90 0.93 2.45 79 RCVD_IN_IADB_OPTIN 9119 1.76 0.61 2.41 80 HELO_NODOT 9090 1.63 0.25 2.40 81 TVD_RCVD_IP 9036 1.62 0.23 2.38 82 IN_HORDE_ADDRESS_BOOK 8362 1.44 0.06 2.21 83 MIME_HTML_MOSTLY 8164 2.68 3.62 2.15 84 HTML_MIME_NO_HTML_TAG 8111 1.95 1.62 2.14 85 XM_SPF_SoftFail 7911 2.60 3.53 2.09 86 NO_DNS_FOR_FROM 7887 2.18 2.36 2.08 87 T_TooManySym_02 7677 1.56 0.73 2.03 88 XM_DK_Undo_01 7466 1.74 1.31 1.97 89 RCVD_IN_MSPIKE_H3 7261 1.46 0.65 1.92 90 RCVD_IN_MSPIKE_WL 7261 1.46 0.65 1.92 91 XM_H_PHPOS 7093 1.46 0.72 1.87 92 HTML_IMAGE_RATIO_08 7019 2.14 2.67 1.85 93 INVALID_MSGID 6992 1.24 0.15 1.85 94 TM2_M_URI_OPT_OUT 6954 2.61 4.00 1.84 95 BAYES_05 6906 1.36 0.54 1.82 96 XMCapTrack 6739 1.34 0.56 1.78 97 TooManyTo_003 6727 1.55 1.16 1.78 98 TO_MALFORMED 6613 1.28 0.45 1.75 99 MSGID_NOFQDN1 6575 1.12 0.03 1.74 100 TR_Symld_Words 6553 1.50 1.08 1.73 101 XMDiploma_00 6164 1.72 1.89 1.63 102 XM_DIRTYINTL 6039 2.06 2.91 1.59 103 T_XMDrugObfuBody_08 5831 1.92 2.61 1.54 104 XM_CamelCaseFrm001 5695 1.90 2.63 1.50 105 BOTNET 5643 5.04 11.44 1.49 106 XMSubNoVowel 5622 1.41 1.28 1.48 107 XM_GoogleGroups 5344 1.05 0.40 1.41 108 USER_IN_DEF_DKIM_WL 5340 0.94 0.09 1.41 109 XM_OfRef6 5268 1.90 2.81 1.39 110 RELAYCOUNTRY_CA 5195 1.94 2.96 1.37 111 UNTRUSTED_Relay 5004 3.49 7.40 1.32 112 TooManyTo_004 4867 1.18 0.99 1.28 113 XMSubEmpty 4740 1.16 0.99 1.25 114 MIME_HTML_ONLY_MULTI 4562 1.69 2.57 1.20 115 URI_HEX 4495 1.68 2.57 1.19 116 XMPhish11 4267 1.12 1.12 1.13 117 DKIM_ADSP_CUSTOM_MED 4205 1.49 2.19 1.11 118 XMStockSpam_06 4114 1.03 0.93 1.09 119 RELAYCOUNTRY_GB 4100 1.13 1.22 1.08 120 XMGenDplmaNmb 4052 1.13 1.23 1.07 121 TooManyTo_005 3931 0.99 0.92 1.04 122 TO_NO_BRKTS_HTML_ONLY 3542 0.64 0.12 0.93 123 URI_TRY_3LD 3538 0.95 0.99 0.93 124 SpammyFromTLD_01 3528 1.20 1.69 0.93 125 XM_ProductURIs 3477 1.05 1.28 0.92 126 T_FILL_THIS_FORM_SHORT 3361 1.23 1.85 0.89 127 XM_UB50 3297 1.81 3.51 0.87 128 T_XMDrugObfuBody_00 3263 0.93 1.06 0.86 129 TR_MetaPhish_Combo_01 3131 0.74 0.58 0.83 130 NML_ADSP_CUSTOM_MED 3121 1.24 2.00 0.82 131 XMNoVowels 3077 0.79 0.75 0.81 132 XM_H_Long_From02 2968 1.01 1.42 0.78 133 TM2_M_VERY_LONG_WORD 2920 1.04 1.54 0.77 134 XMSubMetaI_00 2879 0.88 1.10 0.76 135 T_TooManySym_03 2848 0.55 0.18 0.75 136 XM_H_PHPMailer 2821 0.68 0.55 0.74 137 RCVD_IN_BL_SPAMCOP_NET 2644 1.54 3.04 0.70 138 USER_IN_WHITELIST 2604 0.44 0.00 0.69 139 SHORT_HELO_AND_INLINE_IMAGE 2556 0.46 0.07 0.67 140 XMBody_29 2451 0.46 0.11 0.65 141 XMGappySubj_01 2429 0.56 0.40 0.64 142 T_OBFU_PDF_ATTACH 2382 0.46 0.16 0.63 143 XMMoneyMeta_00 2274 0.62 0.65 0.60 144 FORGED_GMAIL_RCVD 2237 0.96 1.62 0.59 145 MISSING_HEADERS 2214 0.47 0.25 0.58 146 XMBdyGiftCard01 2178 0.70 0.93 0.57 147 XM_ShortIntro_01 2168 0.47 0.29 0.57 148 RCVD_IN_SORBS_DUL 2133 0.41 0.12 0.56 149 AC_DIV_BONANZA 2101 0.41 0.16 0.55 150 HTML_IMAGE_ONLY_32 2019 0.40 0.16 0.53 151 T_Symld_Words_02 2004 0.69 0.99 0.53 152 T_XMHurry_00 1984 0.84 1.40 0.52 153 XM_RXBody 1969 0.52 0.53 0.52 154 HTTPS_HTTP_MISMATCH 1948 0.64 0.88 0.51 155 XM_B_COPY_HTML 1906 0.54 0.61 0.50 156 RELAYCOUNTRY_DE 1882 0.59 0.75 0.50 157 XM_USANA_RCVD 1837 0.31 0.00 0.48 158 XMDateMe_00 1828 0.40 0.26 0.48 159 XMhairloss01 1780 0.33 0.09 0.47 160 TR_XM_RelayPhish 1763 0.71 1.16 0.47 161 FILL_THIS_FORM 1762 0.61 0.88 0.46 162 TVD_SPACE_RATIO 1702 0.49 0.57 0.45 163 TM2_M_BODY_EMPTY 1684 0.33 0.12 0.44 164 XMBody_95 1682 0.33 0.12 0.44 165 RELAYCOUNTRY_AU 1674 0.55 0.75 0.44 166 HTML_IMAGE_ONLY_28 1667 0.51 0.64 0.44 167 XMBrknScrpt_02 1666 0.46 0.49 0.44 168 XMLKML 1645 0.28 0.00 0.43 169 XM_B_REG_HTML 1636 0.55 0.77 0.43 170 HTML_TAG_BALANCE_BODY 1591 0.51 0.67 0.42 171 XM_B_TRADE_HTML 1590 0.42 0.41 0.42 172 HTML_IMAGE_ONLY_24 1576 0.37 0.29 0.42 173 XMSubMetaSxObfu_02 1522 0.38 0.35 0.40 174 TR_Mismatch_TLD_01 1490 0.65 1.11 0.39 175 HTML_FONT_FACE_BAD 1487 0.54 0.81 0.39 176 URI_NOVOWEL 1455 0.51 0.73 0.38 177 RDNS_DYNAMIC 1436 0.50 0.73 0.38 178 T_TooManySym_04 1432 0.25 0.03 0.38 179 XMHTMLBadTable_001 1329 0.55 0.91 0.35 180 UPPERCASE_50_75 1326 0.27 0.12 0.35 181 XMSexyCombo_01 1298 0.78 1.56 0.34 182 XMBody_78 1294 0.56 0.95 0.34 183 PLING_QUERY 1270 0.48 0.73 0.34 184 XMHTML_After_End 1254 0.76 1.52 0.33 185 XMLngstWrd_00 1250 0.38 0.48 0.33 186 XMSubMetaSxObfu_03 1227 0.41 0.57 0.32 187 XM_H_Undi_Recip 1223 0.46 0.71 0.32 188 XMPhish14 1222 0.48 0.75 0.32 189 SpammyFromTLD_02 1211 0.87 1.85 0.32 190 XMEmptySub 1211 0.32 0.31 0.32 191 HTML_IMAGE_ONLY_20 1206 0.28 0.22 0.32 192 XM_H_PHPOS_M 1196 0.30 0.28 0.32 193 T_HTML_ATTACH 1192 0.23 0.07 0.31 194 XMPhish30 1188 0.67 1.31 0.31 195 GMD_PDF_EMPTY_BODY 1159 0.22 0.07 0.31 196 FILL_THIS_FORM_LONG 1137 0.48 0.81 0.30 197 SHORT_URI_2 1127 0.37 0.50 0.30 198 DKIM_ADSP_NXDOMAIN 1117 0.33 0.39 0.29 199 HTML_IMAGE_ONLY_16 1116 0.25 0.16 0.29 200 XMSlimDrugH 1095 0.43 0.68 0.29 ----------------------------------------------------------------------