Email: 570557 Autolearn: 0 AvgScore: 3.75 AvgScanTime: 3.73 sec Spam: 183886 Autolearn: 0 AvgScore: 12.20 AvgScanTime: 4.41 sec Ham: 386671 Autolearn: 0 AvgScore: -0.26 AvgScanTime: 3.41 sec Time Spent Running SA: 591.68 hours Time Spent Processing Spam: 225.22 hours Time Spent Processing Ham: 366.46 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 173863 85.25 94.55 80.82 2 DKIM_SIGNED 154285 70.27 83.90 63.79 3 XM_DK_Pass 150334 68.67 81.75 62.45 4 DCC_CHECK 147608 47.68 80.27 32.18 5 DKIM_VALID 144597 65.24 78.63 58.87 6 XMListUnsubscribeExists 133765 50.72 72.74 40.25 7 DKIM_VALID_AU 112125 47.23 60.98 40.70 8 XM_H_QuotedFrom 105859 40.75 57.57 32.76 9 XM_DK_Undo_02 85087 22.70 46.27 11.48 10 BAYES_99 77615 21.03 42.21 10.96 11 BAYES_999 66611 18.22 36.22 9.65 12 LOC_TINY_FONT_1 66016 22.30 35.90 15.83 13 HTML_FONT_LOW_CONTRAST 65977 26.80 35.88 22.49 14 BAYES_50 64416 51.20 35.03 58.89 15 TR_DCC_Bayes_99 61673 14.18 33.54 4.98 16 MIME_HTML_ONLY 52350 19.36 28.47 15.04 17 FVGT_m_MULTI_ODD 50715 21.83 27.58 19.09 18 XMSubLong 48727 21.38 26.50 18.94 19 DKIM_VALID_EF 45715 24.13 24.86 23.79 20 T_KAM_HTML_FONT_INVALID 38975 16.01 21.20 13.54 21 T_TM2_M_HEADER_IN_MSG 37885 31.10 20.60 36.10 22 XM_Body_Dirty_Words 33274 11.74 18.09 8.71 23 DCC_CHECK_NEGATIVE 32759 50.14 17.81 65.51 24 XM_Multi_Part_URI 30818 11.71 16.76 9.31 25 MultiRelay 29425 17.79 16.00 18.64 26 RELAYCOUNTRY_META 27526 8.43 14.97 5.32 27 HTML_IMAGE_RATIO_02 27525 8.61 14.97 5.58 28 FSL_BULK_SIG 26358 10.20 14.33 8.23 29 XM_Evil_Numbers_Gen 24354 8.52 13.24 6.28 30 LOTS_OF_MONEY 22976 9.06 12.49 7.43 31 BOTNET_IPINHOSTNAME 21622 6.14 11.76 3.47 32 BOTNET 20106 4.16 10.93 0.93 33 T_XMDrugObfuBody_14 17472 7.92 9.50 7.16 34 XM_B_Phish_Phrases 17039 5.61 9.27 3.87 35 HTML_IMAGE_RATIO_04 16591 5.51 9.02 3.84 36 XM_H_Long_From01 16539 9.56 8.99 9.83 37 LotsOfNums_01 16495 8.20 8.97 7.83 38 UNTRUSTED_Relay 15928 3.68 8.66 1.31 39 TR_XM_DocInvoice 15824 5.17 8.61 3.54 40 XM_UncommonTLD01 15015 5.27 8.17 3.89 41 XMSexyCombo_05 14396 4.00 7.83 2.18 42 TooManyTo_001 14110 8.55 7.67 8.97 43 MPART_ALT_DIFF 13386 3.87 7.28 2.25 44 BAYES_80 13256 4.88 7.21 3.77 45 BAYES_60 13101 6.80 7.12 6.65 46 XMSubMetaSx_00 12532 4.35 6.82 3.17 47 HTML_IMAGE_RATIO_06 10531 3.61 5.73 2.60 48 XMNumbers 10391 4.77 5.65 4.35 49 FROM_EXCESS_BASE64 10216 3.75 5.56 2.89 50 DKIM_INVALID 9688 5.03 5.27 4.92 51 ALL_TRUSTED 9634 19.04 5.24 25.61 52 RCVD_IN_RP_SAFE 9399 6.63 5.11 7.35 53 MIME_HTML_MOSTLY 8439 2.78 4.59 1.91 54 TM2_M_URI_OPT_OUT 8404 2.66 4.57 1.75 55 MIME_QP_LONG_LINE 8000 5.19 4.35 5.59 56 XM_SPF_SoftFail 7981 2.69 4.34 1.91 57 HTML_IMAGE_RATIO_08 7875 2.54 4.28 1.71 58 RCVD_IN_RP_CERTIFIED 7773 5.84 4.23 6.61 59 XM_SendGrid 7673 4.24 4.17 4.27 60 BAYES_95 7631 3.01 4.15 2.46 61 XM_UB50 7499 1.96 4.08 0.96 62 RCVD_IN_MSPIKE_H2 6848 3.96 3.72 4.08 63 SpammyFromTLD_01 6706 2.00 3.65 1.21 64 RELAYCOUNTRY_CA 6672 2.16 3.63 1.46 65 XMSubNoVowel 6590 3.15 3.58 2.95 66 T_REMOTE_IMAGE 6570 4.22 3.57 4.53 67 XM_DIRTYINTL 6293 2.26 3.42 1.70 68 XMStrtUSub 6273 3.46 3.41 3.48 69 XM_CamelCaseFrm001 6172 2.23 3.36 1.70 70 TR_Mismatch_TLD_01 5972 1.48 3.25 0.64 71 RCVD_IN_BL_SPAMCOP_NET 5599 1.36 3.04 0.56 72 MIME_HTML_ONLY_MULTI 5406 1.59 2.94 0.95 73 XM_OfRef6 5384 1.98 2.93 1.53 74 T_XMDrugObfuBody_08 5237 1.91 2.85 1.46 75 SpammyFromTLD_02 5206 1.12 2.83 0.30 76 XMDiploma_00 4975 1.85 2.71 1.44 77 XMSubEmpty 4961 2.58 2.70 2.53 78 T_TooManySym_01 4920 3.60 2.68 4.04 79 URI_HEX 4478 1.55 2.44 1.13 80 HTML_MIME_NO_HTML_TAG 3963 2.31 2.16 2.38 81 MultiRelay_Combo 3900 0.84 2.12 0.23 82 MultiRelay_CC 3900 0.84 2.12 0.23 83 RCVD_IN_IADB_LISTED 3849 4.32 2.09 5.37 84 SHORT_URI_2 3806 1.22 2.07 0.81 85 XM_H_PHPOS 3805 1.90 2.07 1.82 86 TM2_M_VERY_LONG_WORD 3699 1.21 2.01 0.82 87 URIBL_DBL_SPAM 3676 0.74 2.00 0.15 88 BOTNET_NORDNS 3660 0.66 1.99 0.03 89 MAILING_LIST_MULTI 3652 2.47 1.99 2.69 90 XMGenDplmaNmb 3630 1.23 1.97 0.87 91 XM_H_Long_From02 3627 1.23 1.97 0.88 92 XM_URI_RBL 3531 0.69 1.92 0.10 93 RCVD_IN_IADB_SPF 3472 3.81 1.89 4.73 94 SUBJ_ALL_CAPS 3353 4.45 1.82 5.70 95 RCVD_IN_IADB_SENDERID 3330 3.41 1.81 4.17 96 RCVD_IN_IADB_DK 3274 3.34 1.78 4.08 97 XMSexyCombo_01 3216 0.84 1.75 0.40 98 XM_ProductURIs 3108 1.23 1.69 1.02 99 XMBody_17 2971 0.78 1.62 0.39 100 RCVD_IN_RP_RNBL 2965 0.55 1.61 0.04 101 RELAYCOUNTRY_FR 2921 0.69 1.59 0.27 102 XMPhish11 2884 1.45 1.57 1.39 103 UNPARSEABLE_RELAY 2881 2.25 1.57 2.57 104 URIBL_BLACK 2820 0.52 1.53 0.03 105 TM2_M_BODY_EMPTY 2781 1.06 1.51 0.84 106 XM_DK_Undo_01 2726 1.86 1.48 2.04 107 XMEmptyBody_01 2711 0.83 1.47 0.52 108 SUBJ_DOLLARS 2636 0.60 1.43 0.21 109 XMHTML_After_End 2596 0.67 1.41 0.32 110 XMBdyGiftCard01 2593 0.75 1.41 0.44 111 XMPhish30 2582 0.70 1.40 0.36 112 XM_UB99 2532 0.45 1.38 0.02 113 URI_TRY_3LD 2504 1.15 1.36 1.06 114 BAYES_40 2468 4.28 1.34 5.67 115 TR_XM_RelayPhish 2434 0.72 1.32 0.44 116 XMStockSpam_06 2388 0.79 1.30 0.55 117 XM_B_REG_HTML 2386 0.67 1.30 0.38 118 NO_DNS_FOR_FROM 2336 0.81 1.27 0.58 119 XMPhish14 2335 0.61 1.27 0.30 120 T_XMHurry_00 2305 0.71 1.25 0.45 121 T_XMDrugObfuBody_00 2302 0.80 1.25 0.59 122 RCVD_IN_PSBL 2274 0.47 1.24 0.11 123 BAYES_00 2249 5.32 1.22 7.26 124 T_Symld_Words_02 2168 0.68 1.18 0.44 125 XMSubMetaI_00 2143 0.61 1.17 0.34 126 HTML_FONT_FACE_BAD 2128 0.65 1.16 0.42 127 RELAYCOUNTRY_GB 2099 1.10 1.14 1.08 128 XM_UB60 2092 0.42 1.14 0.08 129 XMEmptySub 2070 0.78 1.13 0.61 130 TooManyTo_002 2029 2.36 1.10 2.95 131 REMOVE_BEFORE_LINK 2008 0.48 1.09 0.19 132 DIET_1 1990 0.50 1.08 0.23 133 XM_UB999 1982 0.35 1.08 0.01 134 DKIM_ADSP_CUSTOM_MED 1960 1.09 1.07 1.10 135 TR_LOTS_OF_MONEY2 1959 0.50 1.07 0.23 136 T_MONEY_PERCENT 1959 0.50 1.07 0.23 137 BAYES_20 1952 2.08 1.06 2.57 138 XM_BadFromFormat 1943 0.49 1.06 0.21 139 TR_LOTS_OF_MONEY3 1920 0.54 1.04 0.29 140 XMBrknScrpt_02 1919 0.68 1.04 0.50 141 XMLongAddy 1905 0.41 1.04 0.12 142 RELAYCOUNTRY_CN 1893 0.38 1.03 0.07 143 TR_XM_DK_Bayes 1884 3.33 1.02 4.42 144 XM_B_COPY_HTML 1873 0.62 1.02 0.43 145 RELAYCOUNTRY_IN 1864 0.42 1.01 0.13 146 XM_HighProb1 1860 0.33 1.01 0.01 147 TooManyTo_003 1829 1.64 0.99 1.94 148 TR_XM_DK_Bayes1 1807 3.03 0.98 4.01 149 HTTPS_HTTP_MISMATCH 1794 0.64 0.98 0.48 150 XMSlimDrugH 1778 0.54 0.97 0.33 151 RELAYCOUNTRY_AT 1743 0.40 0.95 0.14 152 TR_Symld_Words 1698 1.66 0.92 2.01 153 T_FILL_THIS_FORM_SHORT 1675 0.86 0.91 0.84 154 URI_NOVOWEL 1653 0.54 0.90 0.37 155 TR_XM_DK_Bayes2 1640 2.39 0.89 3.10 156 FORGED_GMAIL_RCVD 1624 0.63 0.88 0.50 157 XMClaimOffer 1610 0.41 0.88 0.19 158 FILL_THIS_FORM 1606 0.60 0.87 0.48 159 MPART_ALT_DIFF_COUNT 1587 0.44 0.86 0.24 160 NML_ADSP_CUSTOM_MED 1562 0.84 0.85 0.83 161 RDNS_DYNAMIC 1528 0.53 0.83 0.39 162 XM_RXBody 1521 0.32 0.83 0.08 163 BODY_URI_ONLY 1509 0.29 0.82 0.04 164 XM_UB80 1509 0.28 0.82 0.03 165 RCVD_IN_IADB_VOUCHED 1495 2.58 0.81 3.42 166 TooManyTo_004 1479 1.21 0.80 1.40 167 XMNoVowels 1471 0.97 0.80 1.05 168 XMLngstWrd_00 1458 0.70 0.79 0.65 169 XMLngstWrd_01 1420 0.66 0.77 0.60 170 TVD_SPACE_RATIO 1412 0.72 0.77 0.69 171 XMHTMLBadTable_001 1410 0.48 0.77 0.35 172 HTML_IMAGE_ONLY_08 1394 0.34 0.76 0.14 173 TooManyTo_005 1347 1.00 0.73 1.13 174 XMMoneyMeta_00 1346 0.59 0.73 0.52 175 T_TooManySym_02 1341 1.37 0.73 1.68 176 TO_IN_SUBJ 1334 0.41 0.73 0.26 177 FILL_THIS_FORM_LONG 1331 0.47 0.72 0.35 178 RELAYCOUNTRY_DE 1317 0.64 0.72 0.60 179 HTML_SHORT_LINK_IMG_1 1312 0.25 0.71 0.03 180 XMLngstWrd_02 1307 0.44 0.71 0.31 181 TR_MetaPhish_Combo_01 1298 0.79 0.71 0.83 182 HTML_FONT_SIZE_HUGE 1295 0.29 0.70 0.10 183 SHORT_URI 1284 0.47 0.70 0.37 184 XM_H_Long_From03 1261 0.30 0.69 0.11 185 XM_PDF 1260 3.49 0.69 4.83 186 XM_Superlative01 1251 0.25 0.68 0.05 187 XMBody_78 1247 0.51 0.68 0.43 188 ANY_BOUNCE_MESSAGE 1240 2.95 0.67 4.04 189 BOUNCE_MESSAGE 1239 2.95 0.67 4.03 190 URIBL_SBL_A 1228 0.80 0.67 0.87 191 PP_MIME_FAKE_ASCII_TEXT 1221 0.49 0.66 0.40 192 XM_H_PHPMailer 1214 0.72 0.66 0.75 193 XMSubMetaSSx_00 1202 0.32 0.65 0.17 194 HTML_TAG_BALANCE_BODY 1188 0.55 0.65 0.50 195 XMSexyCombo_04 1183 0.24 0.64 0.05 196 XMLngstWrd_03 1176 0.32 0.64 0.16 197 RELAYCOUNTRY_AU 1173 0.53 0.64 0.48 198 HTML_IMAGE_ONLY_28 1171 0.50 0.64 0.43 199 T_FILL_THIS_FORM_LOAN 1145 0.41 0.62 0.31 200 PLING_QUERY 1138 0.35 0.62 0.23 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 312512 85.25 94.55 80.82 2 DCC_CHECK_NEGATIVE 253322 50.14 17.81 65.51 3 DKIM_SIGNED 246666 70.27 83.90 63.79 4 XM_DK_Pass 241461 68.67 81.75 62.45 5 BAYES_50 227712 51.20 35.03 58.89 6 DKIM_VALID 227628 65.24 78.63 58.87 7 DKIM_VALID_AU 157359 47.23 60.98 40.70 8 XMListUnsubscribeExists 155622 50.72 72.74 40.25 9 T_TM2_M_HEADER_IN_MSG 139569 31.10 20.60 36.10 10 XM_H_QuotedFrom 126668 40.75 57.57 32.76 11 DCC_CHECK 124419 47.68 80.27 32.18 12 ALL_TRUSTED 99018 19.04 5.24 25.61 13 DKIM_VALID_EF 91980 24.13 24.86 23.79 14 HTML_FONT_LOW_CONTRAST 86948 26.80 35.88 22.49 15 FVGT_m_MULTI_ODD 73815 21.83 27.58 19.09 16 XMSubLong 73252 21.38 26.50 18.94 17 MultiRelay 72094 17.79 16.00 18.64 18 LOC_TINY_FONT_1 61224 22.30 35.90 15.83 19 MIME_HTML_ONLY 58138 19.36 28.47 15.04 20 T_KAM_HTML_FONT_INVALID 52360 16.01 21.20 13.54 21 XM_DK_Undo_02 44408 22.70 46.27 11.48 22 BAYES_99 42365 21.03 42.21 10.96 23 XM_H_Long_From01 38027 9.56 8.99 9.83 24 BAYES_999 37332 18.22 36.22 9.65 25 XM_Multi_Part_URI 36007 11.71 16.76 9.31 26 TooManyTo_001 34678 8.55 7.67 8.97 27 XM_Body_Dirty_Words 33694 11.74 18.09 8.71 28 FSL_BULK_SIG 31841 10.20 14.33 8.23 29 LotsOfNums_01 30280 8.20 8.97 7.83 30 LOTS_OF_MONEY 28741 9.06 12.49 7.43 31 XM_DKIMWhitelistDomains 28515 5.00 0.02 7.37 32 RCVD_IN_RP_SAFE 28421 6.63 5.11 7.35 33 BAYES_00 28086 5.32 1.22 7.26 34 T_XMDrugObfuBody_14 27689 7.92 9.50 7.16 35 BAYES_60 25717 6.80 7.12 6.65 36 RCVD_IN_RP_CERTIFIED 25569 5.84 4.23 6.61 37 XM_Evil_Numbers_Gen 24283 8.52 13.24 6.28 38 SUBJ_ALL_CAPS 22043 4.45 1.82 5.70 39 IN_ZIMBRA_NJ_WHITELIST 21939 3.86 0.05 5.67 40 BAYES_40 21936 4.28 1.34 5.67 41 MIME_QP_LONG_LINE 21631 5.19 4.35 5.59 42 HTML_IMAGE_RATIO_02 21588 8.61 14.97 5.58 43 RCVD_IN_IADB_LISTED 20781 4.32 2.09 5.37 44 RELAYCOUNTRY_META 20587 8.43 14.97 5.32 45 TR_DCC_Bayes_99 19246 14.18 33.54 4.98 46 DKIM_INVALID 19038 5.03 5.27 4.92 47 XM_PDF 18674 3.49 0.69 4.83 48 RCVD_IN_IADB_SPF 18279 3.81 1.89 4.73 49 T_REMOTE_IMAGE 17514 4.22 3.57 4.53 50 TR_XM_DK_Bayes 17103 3.33 1.02 4.42 51 XMNumbers 16834 4.77 5.65 4.35 52 XM_SendGrid 16528 4.24 4.17 4.27 53 RCVD_IN_IADB_SENDERID 16135 3.41 1.81 4.17 54 RCVD_IN_IADB_DK 15757 3.34 1.78 4.08 55 RCVD_IN_MSPIKE_H2 15757 3.96 3.72 4.08 56 T_TooManySym_01 15640 3.60 2.68 4.04 57 ANY_BOUNCE_MESSAGE 15605 2.95 0.67 4.04 58 BOUNCE_MESSAGE 15596 2.95 0.67 4.03 59 TR_XM_DK_Bayes1 15487 3.03 0.98 4.01 60 XM_UncommonTLD01 15038 5.27 8.17 3.89 61 XM_B_Phish_Phrases 14960 5.61 9.27 3.87 62 HTML_IMAGE_RATIO_04 14835 5.51 9.02 3.84 63 BAYES_80 14561 4.88 7.21 3.77 64 TR_XM_DocInvoice 13680 5.17 8.61 3.54 65 XMStrtUSub 13457 3.46 3.41 3.48 66 BOTNET_IPINHOSTNAME 13429 6.14 11.76 3.47 67 RCVD_IN_IADB_VOUCHED 13208 2.58 0.81 3.42 68 XMSubMetaSx_00 12268 4.35 6.82 3.17 69 TR_XM_DK_Bayes2 11987 2.39 0.89 3.10 70 TooManyTo_002 11408 2.36 1.10 2.95 71 XMSubNoVowel 11405 3.15 3.58 2.95 72 FROM_EXCESS_BASE64 11157 3.75 5.56 2.89 73 MAILING_LIST_MULTI 10418 2.47 1.99 2.69 74 HTML_IMAGE_RATIO_06 10059 3.61 5.73 2.60 75 BAYES_20 9940 2.08 1.06 2.57 76 UNPARSEABLE_RELAY 9931 2.25 1.57 2.57 77 XMSubEmpty 9787 2.58 2.70 2.53 78 HELO_NODOT 9779 1.82 0.33 2.53 79 BAYES_95 9520 3.01 4.15 2.46 80 HTML_MIME_NO_HTML_TAG 9203 2.31 2.16 2.38 81 TVD_RCVD_IP 9165 1.70 0.30 2.37 82 MPART_ALT_DIFF 8707 3.87 7.28 2.25 83 RCVD_IN_IADB_OPTIN 8575 1.69 0.57 2.22 84 XMSexyCombo_05 8444 4.00 7.83 2.18 85 IN_HORDE_ADDRESS_BOOK 8330 1.48 0.06 2.15 86 XM_DK_Undo_01 7869 1.86 1.48 2.04 87 TR_Symld_Words 7763 1.66 0.92 2.01 88 TooManyTo_003 7503 1.64 0.99 1.94 89 RCVD_IN_MSPIKE_WL 7478 1.50 0.60 1.93 90 RCVD_IN_MSPIKE_H3 7478 1.50 0.60 1.93 91 MIME_HTML_MOSTLY 7399 2.78 4.59 1.91 92 XM_SPF_SoftFail 7376 2.69 4.34 1.91 93 XM_H_PHPOS 7033 1.90 2.07 1.82 94 INVALID_MSGID 6927 1.27 0.18 1.79 95 TM2_M_URI_OPT_OUT 6760 2.66 4.57 1.75 96 TO_MALFORMED 6721 1.19 0.04 1.74 97 BAYES_05 6650 1.36 0.62 1.72 98 HTML_IMAGE_RATIO_08 6627 2.54 4.28 1.71 99 XM_DIRTYINTL 6580 2.26 3.42 1.70 100 XMCapTrack 6579 1.34 0.57 1.70 101 XM_CamelCaseFrm001 6574 2.23 3.36 1.70 102 T_TooManySym_02 6497 1.37 0.73 1.68 103 MSGID_NOFQDN1 6295 1.11 0.01 1.63 104 XM_OfRef6 5904 1.98 2.93 1.53 105 T_XMDrugObfuBody_08 5635 1.91 2.85 1.46 106 RELAYCOUNTRY_CA 5633 2.16 3.63 1.46 107 XMDiploma_00 5559 1.85 2.71 1.44 108 TooManyTo_004 5410 1.21 0.80 1.40 109 XMPhish11 5389 1.45 1.57 1.39 110 XM_GoogleGroups 5102 1.06 0.51 1.32 111 UNTRUSTED_Relay 5061 3.68 8.66 1.31 112 SpammyFromTLD_01 4693 2.00 3.65 1.21 113 URI_HEX 4361 1.55 2.44 1.13 114 TooManyTo_005 4351 1.00 0.73 1.13 115 DKIM_ADSP_CUSTOM_MED 4249 1.09 1.07 1.10 116 USER_IN_DEF_DKIM_WL 4205 0.75 0.04 1.09 117 RELAYCOUNTRY_GB 4165 1.10 1.14 1.08 118 URI_TRY_3LD 4082 1.15 1.36 1.06 119 XMNoVowels 4070 0.97 0.80 1.05 120 XMGappySubj_01 4006 0.82 0.36 1.04 121 XM_ProductURIs 3932 1.23 1.69 1.02 122 XM_UB50 3704 1.96 4.08 0.96 123 MIME_HTML_ONLY_MULTI 3681 1.59 2.94 0.95 124 BOTNET 3610 4.16 10.93 0.93 125 XM_H_Long_From02 3409 1.23 1.97 0.88 126 XMGenDplmaNmb 3381 1.23 1.97 0.87 127 URIBL_SBL_A 3348 0.80 0.67 0.87 128 TM2_M_BODY_EMPTY 3266 1.06 1.51 0.84 129 USER_IN_WHITELIST 3260 0.57 0.00 0.84 130 T_FILL_THIS_FORM_SHORT 3244 0.86 0.91 0.84 131 TR_MetaPhish_Combo_01 3212 0.79 0.71 0.83 132 NML_ADSP_CUSTOM_MED 3207 0.84 0.85 0.83 133 TM2_M_VERY_LONG_WORD 3186 1.21 2.01 0.82 134 SHORT_URI_2 3138 1.22 2.07 0.81 135 XM_H_PHPMailer 2919 0.72 0.66 0.75 136 TVD_SPACE_RATIO 2677 0.72 0.77 0.69 137 T_TooManySym_03 2655 0.54 0.23 0.69 138 SHORT_HELO_AND_INLINE_IMAGE 2591 0.48 0.08 0.67 139 T_OBFU_PDF_ATTACH 2562 0.50 0.16 0.66 140 XMLngstWrd_00 2518 0.70 0.79 0.65 141 TR_Mismatch_TLD_01 2475 1.48 3.25 0.64 142 XMGappySubj_02 2395 0.45 0.10 0.62 143 XMEmptySub 2358 0.78 1.13 0.61 144 RELAYCOUNTRY_DE 2337 0.64 0.72 0.60 145 XMLngstWrd_01 2335 0.66 0.77 0.60 146 T_XMDrugObfuBody_00 2274 0.80 1.25 0.59 147 NO_DNS_FOR_FROM 2260 0.81 1.27 0.58 148 RCVD_IN_SORBS_DUL 2234 0.48 0.27 0.58 149 MISSING_HEADERS 2200 0.49 0.32 0.57 150 TM2_M_A_HREF_HREF 2178 0.50 0.38 0.56 151 RCVD_IN_BL_SPAMCOP_NET 2163 1.36 3.04 0.56 152 XMStockSpam_06 2142 0.79 1.30 0.55 153 XM_ShortIntro_01 2004 0.44 0.29 0.52 154 XMEmptyBody_01 2000 0.83 1.47 0.52 155 XMMoneyMeta_00 1993 0.59 0.73 0.52 156 XMDateMe_00 1961 0.48 0.41 0.51 157 FORGED_GMAIL_RCVD 1949 0.63 0.88 0.50 158 HTML_TAG_BALANCE_BODY 1944 0.55 0.65 0.50 159 XMBrknScrpt_02 1942 0.68 1.04 0.50 160 HTTPS_HTTP_MISMATCH 1855 0.64 0.98 0.48 161 RELAYCOUNTRY_AU 1848 0.53 0.64 0.48 162 FILL_THIS_FORM 1839 0.60 0.87 0.48 163 HTML_IMAGE_ONLY_32 1774 0.42 0.34 0.46 164 AC_DIV_BONANZA 1728 0.33 0.10 0.45 165 XMBody_95 1726 0.34 0.12 0.45 166 T_XMHurry_00 1723 0.71 1.25 0.45 167 T_Symld_Words_02 1715 0.68 1.18 0.44 168 XMBdyGiftCard01 1712 0.75 1.41 0.44 169 TR_XM_RelayPhish 1686 0.72 1.32 0.44 170 HTML_IMAGE_ONLY_28 1659 0.50 0.64 0.43 171 XM_B_COPY_HTML 1655 0.62 1.02 0.43 172 XMSubMetaSxObfu_02 1654 0.37 0.26 0.43 173 XMBody_78 1652 0.51 0.68 0.43 174 HTML_FONT_FACE_BAD 1607 0.65 1.16 0.42 175 PP_MIME_FAKE_ASCII_TEXT 1557 0.49 0.66 0.40 176 XMSexyCombo_01 1549 0.84 1.75 0.40 177 RDNS_DYNAMIC 1509 0.53 0.83 0.39 178 UPPERCASE_50_75 1506 0.43 0.50 0.39 179 XMBody_17 1496 0.78 1.62 0.39 180 XM_B_REG_HTML 1460 0.67 1.30 0.38 181 URI_NOVOWEL 1440 0.54 0.90 0.37 182 SHORT_URI 1423 0.47 0.70 0.37 183 XMPhish30 1406 0.70 1.40 0.36 184 XM_B_TRADE_HTML 1396 0.35 0.32 0.36 185 XM_Body_Obfu01 1374 0.40 0.50 0.36 186 XMHTMLBadTable_001 1352 0.48 0.77 0.35 187 FILL_THIS_FORM_LONG 1344 0.47 0.72 0.35 188 XMSubMetaI_00 1321 0.61 1.17 0.34 189 XMRcvdHeader_15 1319 0.23 0.00 0.34 190 HTML_IMAGE_ONLY_24 1309 0.40 0.54 0.34 191 XMSlimDrugH 1282 0.54 0.97 0.33 192 T_TooManySym_04 1280 0.24 0.05 0.33 193 XMHTML_After_End 1241 0.67 1.41 0.32 194 XMLKML 1227 0.22 0.00 0.32 195 XM_H_PHPOS_M 1217 0.31 0.31 0.31 196 T_FILL_THIS_FORM_LOAN 1200 0.41 0.62 0.31 197 XMSubMetaSxObfu_03 1196 0.34 0.40 0.31 198 XMLngstWrd_02 1195 0.44 0.71 0.31 199 SpammyFromTLD_02 1174 1.12 2.83 0.30 200 XMPhish14 1143 0.61 1.27 0.30 ----------------------------------------------------------------------