Email: 593405 Autolearn: 0 AvgScore: 3.27 AvgScanTime: 3.94 sec Spam: 181588 Autolearn: 0 AvgScore: 12.70 AvgScanTime: 4.80 sec Ham: 411817 Autolearn: 0 AvgScore: -0.89 AvgScanTime: 3.55 sec Time Spent Running SA: 648.81 hours Time Spent Processing Spam: 242.26 hours Time Spent Processing Ham: 406.55 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 174236 87.04 95.95 83.11 2 DKIM_SIGNED 153094 68.76 84.31 61.91 3 XM_DK_Pass 148933 67.22 82.02 60.70 4 DKIM_VALID 140779 62.82 77.53 56.34 5 DCC_CHECK 140771 45.01 77.52 30.68 6 XMListUnsubscribeExists 131137 48.59 72.22 38.17 7 DKIM_VALID_AU 106484 44.87 58.64 38.80 8 XM_H_QuotedFrom 99529 41.91 54.81 36.22 9 XM_DK_Undo_02 87475 22.45 48.17 11.10 10 BAYES_99 80987 21.00 44.60 10.59 11 BAYES_999 68378 17.97 37.66 9.29 12 HTML_FONT_LOW_CONTRAST 66915 26.27 36.85 21.61 13 TR_DCC_Bayes_99 63242 14.09 34.83 4.94 14 LOC_TINY_FONT_1 62149 21.27 34.23 15.56 15 BAYES_50 58952 48.11 32.46 55.01 16 MIME_HTML_ONLY 53408 24.40 29.41 22.19 17 FVGT_m_MULTI_ODD 48027 19.85 26.45 16.94 18 XMSubLong 48019 22.33 26.44 20.52 19 DKIM_VALID_EF 45496 23.43 25.05 22.71 20 T_KAM_HTML_FONT_INVALID 39087 15.54 21.53 12.91 21 DCC_CHECK_NEGATIVE 36961 52.82 20.35 67.14 22 T_TM2_M_HEADER_IN_MSG 36824 30.25 20.28 34.65 23 XM_Body_Dirty_Words 34808 11.83 19.17 8.59 24 RELAYCOUNTRY_META 33059 9.30 18.21 5.37 25 MultiRelay 30142 17.51 16.60 17.92 26 XM_Multi_Part_URI 29821 11.02 16.42 8.64 27 HTML_IMAGE_RATIO_02 28087 8.45 15.47 5.36 28 BOTNET 26392 5.17 14.53 1.04 29 XM_Evil_Numbers_Gen 26117 9.33 14.38 7.11 30 BOTNET_IPINHOSTNAME 23766 6.32 13.09 3.33 31 LOTS_OF_MONEY 23177 8.92 12.76 7.23 32 FSL_BULK_SIG 21478 9.15 11.83 7.97 33 UNTRUSTED_Relay 20319 4.43 11.19 1.45 34 T_XMDrugObfuBody_14 18838 7.97 10.37 6.91 35 XMSexyCombo_05 17365 4.56 9.56 2.36 36 HTML_IMAGE_RATIO_04 15801 5.28 8.70 3.77 37 LotsOfNums_01 15476 7.47 8.52 7.01 38 XM_B_Phish_Phrases 15262 5.14 8.40 3.71 39 XM_H_Long_From01 14391 8.90 7.93 9.33 40 TR_XM_DocInvoice 14226 4.81 7.83 3.48 41 XM_UncommonTLD01 13733 4.69 7.56 3.43 42 BAYES_80 13625 4.77 7.50 3.56 43 TooManyTo_001 13615 8.19 7.50 8.49 44 XMSubMetaSx_00 13242 4.32 7.29 3.01 45 MPART_ALT_DIFF 12472 8.32 6.87 8.95 46 DKIM_INVALID 12315 5.94 6.78 5.57 47 FROM_EXCESS_BASE64 11799 3.77 6.50 2.56 48 BAYES_60 11710 6.10 6.45 5.95 49 XMNumbers 10102 3.89 5.56 3.15 50 XM_UB50 10017 2.38 5.52 0.99 51 HTML_IMAGE_RATIO_06 9082 3.33 5.00 2.60 52 TM2_M_URI_OPT_OUT 8760 2.61 4.82 1.63 53 BAYES_95 8478 3.15 4.67 2.48 54 XM_SendGrid 8160 4.28 4.49 4.19 55 MIME_QP_LONG_LINE 8043 4.93 4.43 5.15 56 T_REMOTE_IMAGE 7833 4.40 4.31 4.44 57 RCVD_IN_RP_SAFE 7828 6.14 4.31 6.94 58 RCVD_IN_MSPIKE_H2 7686 4.15 4.23 4.11 59 MIME_HTML_MOSTLY 7557 2.69 4.16 2.05 60 XM_SPF_SoftFail 7357 2.71 4.05 2.12 61 XM_DIRTYINTL 7089 2.31 3.90 1.60 62 XMStrtUSub 7037 3.64 3.88 3.54 63 RCVD_IN_RP_CERTIFIED 6570 5.47 3.62 6.29 64 XMPhish11 6431 1.94 3.54 1.24 65 RCVD_IN_BL_SPAMCOP_NET 6410 1.43 3.53 0.50 66 HTML_IMAGE_RATIO_08 6242 2.36 3.44 1.88 67 RELAYCOUNTRY_CA 5953 1.94 3.28 1.35 68 BOTNET_NORDNS 5817 0.99 3.20 0.02 69 XM_CamelCaseFrm001 5728 1.97 3.15 1.45 70 SpammyFromTLD_02 5699 1.16 3.14 0.29 71 ANY_BOUNCE_MESSAGE 5672 3.30 3.12 3.38 72 BOUNCE_MESSAGE 5670 3.30 3.12 3.38 73 RCVD_IN_RP_RNBL 5533 0.96 3.05 0.04 74 URI_HEX 5405 1.68 2.98 1.10 75 XM_OfRef6 5337 1.87 2.94 1.40 76 T_TooManySym_01 5235 3.42 2.88 3.65 77 MIME_HTML_ONLY_MULTI 4836 6.08 2.66 7.59 78 MultiRelay_CC 4814 0.97 2.65 0.23 79 MultiRelay_Combo 4814 0.97 2.65 0.23 80 HTML_MIME_NO_HTML_TAG 4764 2.24 2.62 2.08 81 SpammyFromTLD_01 4582 1.35 2.52 0.83 82 XMPhish19 4581 0.80 2.52 0.03 83 XM_URI_RBL 4529 0.84 2.49 0.11 84 XMDiploma_00 4148 1.65 2.28 1.37 85 RCVD_IN_IADB_LISTED 4094 4.46 2.25 5.43 86 XMHTML_After_End 3929 0.91 2.16 0.36 87 T_XMDrugObfuBody_08 3899 1.62 2.15 1.39 88 XMSexyCombo_01 3859 0.91 2.13 0.37 89 RCVD_IN_IADB_SPF 3672 3.93 2.02 4.77 90 XM_UB99 3659 0.66 2.02 0.06 91 RCVD_IN_IADB_SENDERID 3482 3.50 1.92 4.19 92 MAILING_LIST_MULTI 3441 2.24 1.89 2.40 93 RCVD_IN_IADB_DK 3435 3.43 1.89 4.11 94 XM_H_Long_From02 3398 1.14 1.87 0.82 95 UNPARSEABLE_RELAY 3347 2.24 1.84 2.42 96 SUBJ_ALL_CAPS 3347 4.51 1.84 5.69 97 XMBounce_01 3233 0.58 1.78 0.04 98 TM2_M_VERY_LONG_WORD 3230 1.08 1.78 0.77 99 RELAYCOUNTRY_FR 3090 0.78 1.70 0.37 100 RELAYCOUNTRY_JP 3068 0.54 1.69 0.04 101 XMBody_17 3028 0.71 1.67 0.29 102 XMGenDplmaNmb 2988 1.12 1.65 0.88 103 XM_ProductURIs 2930 1.12 1.61 0.90 104 URIBL_BLACK 2912 0.51 1.60 0.03 105 URIBL_DBL_SPAM 2852 0.50 1.57 0.03 106 T_XMDrugObfuBody_00 2820 0.82 1.55 0.50 107 XMStockSpam_06 2817 1.39 1.55 1.32 108 XMLongAddy 2770 0.53 1.53 0.10 109 XM_UB999 2744 0.49 1.51 0.04 110 XMSubMetaI_00 2696 0.90 1.48 0.65 111 BODY_URI_ONLY 2642 0.48 1.45 0.06 112 XMBdyGiftCard01 2632 0.77 1.45 0.47 113 XM_DK_Undo_01 2604 1.76 1.43 1.90 114 XMPhish30 2599 0.69 1.43 0.37 115 XM_UB60 2560 0.49 1.41 0.09 116 BAYES_40 2526 4.14 1.39 5.35 117 NO_DNS_FOR_FROM 2512 1.03 1.38 0.88 118 T_XMHurry_00 2484 0.78 1.37 0.52 119 MPART_ALT_DIFF_COUNT 2479 0.62 1.37 0.29 120 TR_XM_RelayPhish 2469 0.70 1.36 0.41 121 XMBrknScrpt_02 2452 0.73 1.35 0.45 122 XMMoneyMeta_00 2407 0.78 1.33 0.54 123 HTML_IMAGE_ONLY_08 2373 0.54 1.31 0.20 124 RELAYCOUNTRY_CN 2372 0.44 1.31 0.06 125 T_HTML_TAG_BALANCE_CENTER 2365 0.50 1.30 0.15 126 HTML_SHORT_LINK_IMG_1 2353 0.42 1.30 0.03 127 RELAYCOUNTRY_GB 2343 1.15 1.29 1.09 128 DIET_1 2322 0.57 1.28 0.26 129 XM_HighProb1 2315 0.40 1.27 0.01 130 BAYES_00 2291 9.18 1.26 12.68 131 URI_TRY_3LD 2181 0.96 1.20 0.86 132 XM_BadFromFormat 2159 0.48 1.19 0.17 133 T_Symld_Words_02 2148 0.61 1.18 0.36 134 XMNoVowels 2103 1.19 1.16 1.20 135 FSL_THIS_IS_ADV 2097 0.40 1.15 0.07 136 HTML_FONT_SIZE_LARGE 2057 0.46 1.13 0.17 137 HTML_IMAGE_ONLY_28 2018 0.63 1.11 0.42 138 T_MONEY_PERCENT 1974 0.62 1.09 0.41 139 TR_LOTS_OF_MONEY2 1974 0.62 1.09 0.41 140 T_FILL_THIS_FORM_SHORT 1956 0.93 1.08 0.87 141 ALL_TRUSTED 1926 15.49 1.06 21.85 142 BAYES_20 1914 2.06 1.05 2.50 143 TR_LOTS_OF_MONEY3 1876 0.46 1.03 0.21 144 RDNS_DYNAMIC 1866 0.58 1.03 0.39 145 TR_Symld_Words 1860 1.51 1.02 1.72 146 XMHTMLBadTable_001 1844 0.56 1.02 0.36 147 REMOVE_BEFORE_LINK 1842 0.61 1.01 0.43 148 DKIM_ADSP_CUSTOM_MED 1831 1.01 1.01 1.01 149 XM_H_PHPOS 1817 1.74 1.00 2.07 150 XMSlimDrugH 1795 0.50 0.99 0.28 151 TooManyTo_002 1785 2.00 0.98 2.44 152 URI_NOVOWEL 1780 0.57 0.98 0.39 153 RELAYCOUNTRY_AT 1765 0.42 0.97 0.17 154 RELAYCOUNTRY_IN 1742 0.41 0.96 0.17 155 RCVD_IN_IADB_VOUCHED 1733 2.79 0.95 3.60 156 TR_XM_DK_Bayes 1715 3.21 0.94 4.21 157 XMBody_78 1708 0.59 0.94 0.43 158 HTML_FONT_FACE_BAD 1707 0.61 0.94 0.47 159 FILL_THIS_FORM 1674 0.56 0.92 0.39 160 RELAYCOUNTRY_AU 1669 0.64 0.92 0.52 161 RCVD_IN_MSPIKE_WL 1660 1.43 0.91 1.66 162 RCVD_IN_MSPIKE_H3 1659 1.43 0.91 1.66 163 XM_UB80 1658 0.30 0.91 0.03 164 SUBJ_DOLLARS 1644 0.40 0.91 0.17 165 XM_XX_Yahoo 1632 0.32 0.90 0.06 166 XM_B_REG_HTML 1613 0.58 0.89 0.44 167 TR_XM_DK_Bayes1 1612 2.85 0.89 3.72 168 TR_MetaPhish_Combo_01 1604 0.91 0.88 0.92 169 FORGED_GMAIL_RCVD 1577 0.59 0.87 0.47 170 TooManyTo_003 1571 1.37 0.87 1.59 171 T_TooManySym_02 1567 1.23 0.86 1.40 172 XMSubMetaSxObfu_03 1548 0.48 0.85 0.31 173 XM_PDF 1546 3.60 0.85 4.81 174 HTTPS_HTTP_MISMATCH 1538 0.54 0.85 0.40 175 NML_ADSP_CUSTOM_MED 1534 0.78 0.84 0.75 176 XM_B_COPY_HTML 1497 0.60 0.82 0.50 177 XMSexyCombo_04 1496 0.33 0.82 0.12 178 TR_XM_DK_Bayes2 1482 2.32 0.82 2.98 179 XMPhish14 1455 0.49 0.80 0.35 180 XM_OfRef7 1428 0.36 0.79 0.17 181 RELAYCOUNTRY_NL 1416 0.39 0.78 0.22 182 BASE64_LENGTH_79_INF 1372 0.30 0.76 0.10 183 HTML_FONT_SIZE_HUGE 1348 0.30 0.74 0.11 184 LONG_JUNK_URI3 1294 0.26 0.71 0.06 185 DATE_IN_PAST_03_06 1272 1.29 0.70 1.55 186 TooManyTo_004 1256 1.03 0.69 1.17 187 FVGT_m_MULTI_ODD_EMAIL 1253 0.24 0.69 0.04 188 RELAYCOUNTRY_DE 1252 0.60 0.69 0.56 189 TM2_M_BODY_EMPTY 1228 0.56 0.68 0.50 190 PLING_QUERY 1203 0.36 0.66 0.22 191 XMCapTrack 1199 1.35 0.66 1.65 192 HTML_TAG_BALANCE_BODY 1193 0.50 0.66 0.42 193 ADMITS_SPAM 1172 0.23 0.65 0.05 194 XM_RXBody 1170 0.25 0.64 0.07 195 XMClaimOffer 1145 0.31 0.63 0.16 196 TR_Caps_n_Bayes_99 1144 0.23 0.63 0.06 197 XMEmptyBody_01 1133 0.27 0.62 0.12 198 XM_H_Long_From03 1125 0.26 0.62 0.10 199 XMGappySubj_01 1118 0.54 0.62 0.51 200 DKIM_ADSP_NXDOMAIN 1112 0.40 0.61 0.30 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 342264 87.04 95.95 83.11 2 DCC_CHECK_NEGATIVE 276491 52.82 20.35 67.14 3 DKIM_SIGNED 254959 68.76 84.31 61.91 4 XM_DK_Pass 249983 67.22 82.02 60.70 5 DKIM_VALID 232014 62.82 77.53 56.34 6 BAYES_50 226536 48.11 32.46 55.01 7 DKIM_VALID_AU 159769 44.87 58.64 38.80 8 XMListUnsubscribeExists 157200 48.59 72.22 38.17 9 XM_H_QuotedFrom 149165 41.91 54.81 36.22 10 T_TM2_M_HEADER_IN_MSG 142676 30.25 20.28 34.65 11 DCC_CHECK 126331 45.01 77.52 30.68 12 DKIM_VALID_EF 93520 23.43 25.05 22.71 13 MIME_HTML_ONLY 91378 24.40 29.41 22.19 14 ALL_TRUSTED 89967 15.49 1.06 21.85 15 HTML_FONT_LOW_CONTRAST 88982 26.27 36.85 21.61 16 XMSubLong 84486 22.33 26.44 20.52 17 MultiRelay 73787 17.51 16.60 17.92 18 FVGT_m_MULTI_ODD 69749 19.85 26.45 16.94 19 LOC_TINY_FONT_1 64063 21.27 34.23 15.56 20 T_KAM_HTML_FONT_INVALID 53147 15.54 21.53 12.91 21 BAYES_00 52212 9.18 1.26 12.68 22 IN_ZIMBRA_NJ_WHITELIST 49493 8.36 0.06 12.02 23 XM_DK_Undo_02 45730 22.45 48.17 11.10 24 BAYES_99 43609 21.00 44.60 10.59 25 XM_H_Long_From01 38407 8.90 7.93 9.33 26 BAYES_999 38264 17.97 37.66 9.29 27 MPART_ALT_DIFF 36871 8.32 6.87 8.95 28 XM_Multi_Part_URI 35600 11.02 16.42 8.64 29 XM_Body_Dirty_Words 35368 11.83 19.17 8.59 30 TooManyTo_001 34959 8.19 7.50 8.49 31 FSL_BULK_SIG 32818 9.15 11.83 7.97 32 MIME_HTML_ONLY_MULTI 31264 6.08 2.66 7.59 33 LOTS_OF_MONEY 29761 8.92 12.76 7.23 34 XM_DKIMWhitelistDomains 29458 5.00 0.11 7.15 35 XM_Evil_Numbers_Gen 29263 9.33 14.38 7.11 36 LotsOfNums_01 28866 7.47 8.52 7.01 37 RCVD_IN_RP_SAFE 28580 6.14 4.31 6.94 38 T_XMDrugObfuBody_14 28441 7.97 10.37 6.91 39 RCVD_IN_RP_CERTIFIED 25913 5.47 3.62 6.29 40 BAYES_60 24499 6.10 6.45 5.95 41 SUBJ_ALL_CAPS 23412 4.51 1.84 5.69 42 DKIM_INVALID 22945 5.94 6.78 5.57 43 RCVD_IN_IADB_LISTED 22378 4.46 2.25 5.43 44 RELAYCOUNTRY_META 22131 9.30 18.21 5.37 45 HTML_IMAGE_RATIO_02 22057 8.45 15.47 5.36 46 BAYES_40 22051 4.14 1.39 5.35 47 MIME_QP_LONG_LINE 21198 4.93 4.43 5.15 48 TR_DCC_Bayes_99 20353 14.09 34.83 4.94 49 XM_PDF 19791 3.60 0.85 4.81 50 RCVD_IN_IADB_SPF 19642 3.93 2.02 4.77 51 T_REMOTE_IMAGE 18265 4.40 4.31 4.44 52 TR_XM_DK_Bayes 17348 3.21 0.94 4.21 53 RCVD_IN_IADB_SENDERID 17275 3.50 1.92 4.19 54 XM_SendGrid 17244 4.28 4.49 4.19 55 RCVD_IN_MSPIKE_H2 16929 4.15 4.23 4.11 56 RCVD_IN_IADB_DK 16908 3.43 1.89 4.11 57 HTML_IMAGE_RATIO_04 15517 5.28 8.70 3.77 58 TR_XM_DK_Bayes1 15329 2.85 0.89 3.72 59 XM_B_Phish_Phrases 15260 5.14 8.40 3.71 60 T_TooManySym_01 15045 3.42 2.88 3.65 61 RCVD_IN_IADB_VOUCHED 14819 2.79 0.95 3.60 62 BAYES_80 14679 4.77 7.50 3.56 63 XMStrtUSub 14564 3.64 3.88 3.54 64 TR_XM_DocInvoice 14344 4.81 7.83 3.48 65 XM_UncommonTLD01 14127 4.69 7.56 3.43 66 ANY_BOUNCE_MESSAGE 13919 3.30 3.12 3.38 67 BOUNCE_MESSAGE 13916 3.30 3.12 3.38 68 BOTNET_IPINHOSTNAME 13720 6.32 13.09 3.33 69 XMNumbers 12976 3.89 5.56 3.15 70 XMSubMetaSx_00 12397 4.32 7.29 3.01 71 TR_XM_DK_Bayes2 12263 2.32 0.82 2.98 72 HTML_IMAGE_RATIO_06 10708 3.33 5.00 2.60 73 XMSubNoVowel 10667 1.91 0.37 2.59 74 FROM_EXCESS_BASE64 10561 3.77 6.50 2.56 75 BAYES_20 10303 2.06 1.05 2.50 76 BAYES_95 10194 3.15 4.67 2.48 77 TooManyTo_002 10063 2.00 0.98 2.44 78 UNPARSEABLE_RELAY 9972 2.24 1.84 2.42 79 MAILING_LIST_MULTI 9876 2.24 1.89 2.40 80 TVD_RCVD_IP 9720 1.75 0.38 2.36 81 XMSexyCombo_05 9712 4.56 9.56 2.36 82 HELO_NODOT 9617 1.72 0.33 2.34 83 RCVD_IN_IADB_OPTIN 9435 1.77 0.59 2.29 84 UPPERCASE_50_75 8964 1.63 0.38 2.18 85 XM_SPF_SoftFail 8712 2.71 4.05 2.12 86 HTML_MIME_NO_HTML_TAG 8550 2.24 2.62 2.08 87 XM_H_PHPOS 8529 1.74 1.00 2.07 88 MIME_HTML_MOSTLY 8425 2.69 4.16 2.05 89 IN_HORDE_ADDRESS_BOOK 8293 1.42 0.07 2.01 90 XMSubLongNoVowel 8192 1.40 0.05 1.99 91 XM_DK_Undo_01 7835 1.76 1.43 1.90 92 HTML_IMAGE_RATIO_08 7757 2.36 3.44 1.88 93 TR_Symld_Words 7091 1.51 1.02 1.72 94 BAYES_05 7041 1.35 0.53 1.71 95 TO_MALFORMED 6971 1.19 0.04 1.69 96 INVALID_MSGID 6861 1.22 0.19 1.67 97 RCVD_IN_MSPIKE_WL 6851 1.43 0.91 1.66 98 RCVD_IN_MSPIKE_H3 6850 1.43 0.91 1.66 99 XMCapTrack 6803 1.35 0.66 1.65 100 TM2_M_URI_OPT_OUT 6707 2.61 4.82 1.63 101 XM_DIRTYINTL 6597 2.31 3.90 1.60 102 TooManyTo_003 6565 1.37 0.87 1.59 103 MSGID_NOFQDN1 6529 1.11 0.02 1.59 104 DATE_IN_PAST_03_06 6364 1.29 0.70 1.55 105 XM_CamelCaseFrm001 5977 1.97 3.15 1.45 106 UNTRUSTED_Relay 5963 4.43 11.19 1.45 107 XM_OfRef6 5769 1.87 2.94 1.40 108 T_TooManySym_02 5756 1.23 0.86 1.40 109 T_XMDrugObfuBody_08 5727 1.62 2.15 1.39 110 XMDiploma_00 5646 1.65 2.28 1.37 111 RELAYCOUNTRY_CA 5569 1.94 3.28 1.35 112 XMStockSpam_06 5443 1.39 1.55 1.32 113 USER_IN_DEF_DKIM_WL 5357 0.94 0.11 1.30 114 XMPhish11 5110 1.94 3.54 1.24 115 XM_GoogleGroups 5023 0.99 0.47 1.22 116 XMNoVowels 4953 1.19 1.16 1.20 117 TooManyTo_004 4836 1.03 0.69 1.17 118 URI_HEX 4548 1.68 2.98 1.10 119 RELAYCOUNTRY_GB 4494 1.15 1.29 1.09 120 BOTNET 4302 5.17 14.53 1.04 121 DKIM_ADSP_CUSTOM_MED 4174 1.01 1.01 1.01 122 XM_UB50 4080 2.38 5.52 0.99 123 TooManyTo_005 4048 0.87 0.60 0.98 124 TR_MetaPhish_Combo_01 3791 0.91 0.88 0.92 125 TO_NO_BRKTS_HTML_ONLY 3724 0.67 0.13 0.90 126 XM_ProductURIs 3687 1.12 1.61 0.90 127 XMGenDplmaNmb 3631 1.12 1.65 0.88 128 NO_DNS_FOR_FROM 3610 1.03 1.38 0.88 129 T_FILL_THIS_FORM_SHORT 3574 0.93 1.08 0.87 130 URI_TRY_3LD 3535 0.96 1.20 0.86 131 SpammyFromTLD_01 3410 1.35 2.52 0.83 132 FUZZY_CREDIT 3403 0.62 0.14 0.83 133 XM_H_Long_From02 3395 1.14 1.87 0.82 134 TM2_M_VERY_LONG_WORD 3154 1.08 1.78 0.77 135 NML_ADSP_CUSTOM_MED 3089 0.78 0.84 0.75 136 XM_E_Blogspot 3030 0.52 0.04 0.74 137 XM_H_PHPMailer 2795 0.63 0.54 0.68 138 USER_IN_WHITELIST 2747 0.46 0.00 0.67 139 XMSubMetaI_00 2665 0.90 1.48 0.65 140 T_TooManySym_03 2606 0.54 0.33 0.63 141 SHORT_HELO_AND_INLINE_IMAGE 2555 0.46 0.09 0.62 142 T_OBFU_PDF_ATTACH 2422 0.48 0.25 0.59 143 RCVD_IN_SORBS_DUL 2408 0.53 0.39 0.58 144 AC_DIV_BONANZA 2371 0.46 0.19 0.58 145 RELAYCOUNTRY_DE 2300 0.60 0.69 0.56 146 XMMoneyMeta_00 2243 0.78 1.33 0.54 147 MISSING_HEADERS 2192 0.48 0.36 0.53 148 XM_ShortIntro_01 2158 0.47 0.35 0.52 149 RELAYCOUNTRY_AU 2134 0.64 0.92 0.52 150 T_XMHurry_00 2127 0.78 1.37 0.52 151 XMLngstWrd_00 2126 0.44 0.28 0.52 152 XMGappySubj_01 2101 0.54 0.62 0.51 153 TM2_M_BODY_EMPTY 2071 0.56 0.68 0.50 154 T_XMDrugObfuBody_00 2055 0.82 1.55 0.50 155 RCVD_IN_BL_SPAMCOP_NET 2052 1.43 3.53 0.50 156 XM_B_COPY_HTML 2049 0.60 0.82 0.50 157 XMLngstWrd_01 1956 0.41 0.25 0.47 158 FORGED_GMAIL_RCVD 1953 0.59 0.87 0.47 159 XMBdyGiftCard01 1928 0.77 1.45 0.47 160 XMDateMe_00 1928 0.46 0.43 0.47 161 HTML_FONT_FACE_BAD 1917 0.61 0.94 0.47 162 XMBrknScrpt_02 1862 0.73 1.35 0.45 163 HTML_IMAGE_ONLY_32 1834 0.47 0.53 0.45 164 XM_B_REG_HTML 1809 0.58 0.89 0.44 165 XMBody_78 1780 0.59 0.94 0.43 166 REMOVE_BEFORE_LINK 1753 0.61 1.01 0.43 167 HTML_TAG_BALANCE_BODY 1745 0.50 0.66 0.42 168 HTML_IMAGE_ONLY_20 1745 0.40 0.36 0.42 169 HTML_IMAGE_ONLY_28 1710 0.63 1.11 0.42 170 TR_LOTS_OF_MONEY2 1689 0.62 1.09 0.41 171 T_MONEY_PERCENT 1689 0.62 1.09 0.41 172 TR_XM_RelayPhish 1675 0.70 1.36 0.41 173 HTTPS_HTTP_MISMATCH 1637 0.54 0.85 0.40 174 FILL_THIS_FORM 1624 0.56 0.92 0.39 175 URI_NOVOWEL 1616 0.57 0.98 0.39 176 RDNS_DYNAMIC 1603 0.58 1.03 0.39 177 XMBody_95 1581 0.32 0.16 0.38 178 XMSubEmpty 1543 0.30 0.14 0.37 179 XMSexyCombo_01 1528 0.91 2.13 0.37 180 XM_H_PHPOS_M 1527 0.35 0.31 0.37 181 XMPhish30 1514 0.69 1.43 0.37 182 RELAYCOUNTRY_FR 1514 0.78 1.70 0.37 183 XMHTMLBadTable_001 1489 0.56 1.02 0.36 184 XMHTML_After_End 1488 0.91 2.16 0.36 185 T_Symld_Words_02 1487 0.61 1.18 0.36 186 TM2_M_A_HREF_HREF 1479 0.39 0.46 0.36 187 XMPhish14 1426 0.49 0.80 0.35 188 XMSubMetaSxObfu_02 1412 0.29 0.19 0.34 189 XM_B_TRADE_HTML 1399 0.32 0.29 0.34 190 XMSolicitRefs_0 1346 0.33 0.34 0.33 191 HTML_IMAGE_ONLY_24 1326 0.36 0.45 0.32 192 XMSubMetaSxObfu_03 1297 0.48 0.85 0.31 193 TVD_SPACE_RATIO 1297 0.31 0.30 0.31 194 DKIM_ADSP_NXDOMAIN 1249 0.40 0.61 0.30 195 TR_Sbj_FN_Bdy 1229 0.25 0.14 0.30 196 XMBody_17 1199 0.71 1.67 0.29 197 MPART_ALT_DIFF_COUNT 1190 0.62 1.37 0.29 198 XMRcvdHeader_15 1182 0.20 0.00 0.29 199 SpammyFromTLD_02 1182 1.16 3.14 0.29 200 XMSlimDrugH 1170 0.50 0.99 0.28 ----------------------------------------------------------------------