Email: 710376 Autolearn: 0 AvgScore: 5.50 AvgScanTime: 4.04 sec Spam: 250636 Autolearn: 0 AvgScore: 15.19 AvgScanTime: 4.81 sec Ham: 459740 Autolearn: 0 AvgScore: 0.22 AvgScanTime: 3.62 sec Time Spent Running SA: 796.40 hours Time Spent Processing Spam: 334.59 hours Time Spent Processing Ham: 461.81 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 242651 89.46 96.81 85.45 2 DCC_CHECK 174613 44.30 69.67 30.47 3 DKIM_SIGNED 171192 66.09 68.30 64.89 4 XM_DK_Pass 167725 64.94 66.92 63.86 5 DKIM_VALID 158764 61.11 63.34 59.88 6 XMListUnsubscribeExists 145991 47.26 58.25 41.27 7 DKIM_VALID_AU 123761 44.35 49.38 41.61 8 MIME_HTML_ONLY 116328 27.18 46.41 16.70 9 XM_H_QuotedFrom 108423 35.62 43.26 31.45 10 BAYES_99 102694 22.00 40.97 11.66 11 XM_DK_Undo_02 95113 21.29 37.95 12.21 12 BAYES_999 79761 17.78 31.82 10.13 13 T_TM2_M_HEADER_IN_MSG 78229 29.99 31.21 29.32 14 HTML_FONT_LOW_CONTRAST 74926 26.19 29.89 24.16 15 LOC_TINY_FONT_1 74912 22.90 29.89 19.10 16 RELAYCOUNTRY_META 74314 14.64 29.65 6.46 17 TR_DCC_Bayes_99 73765 13.92 29.43 5.47 18 DCC_CHECK_NEGATIVE 73079 54.10 29.16 67.69 19 BAYES_50 71600 49.73 28.57 61.26 20 XMSubLong 65022 21.43 25.94 18.97 21 UNTRUSTED_Relay 63244 10.45 25.23 2.38 22 FROM_EXCESS_BASE64 63240 10.90 25.23 3.08 23 FVGT_m_MULTI_ODD 54861 20.69 21.89 20.04 24 BOTNET_IPINHOSTNAME 53345 10.44 21.28 4.53 25 HTML_MIME_NO_HTML_TAG 52833 8.64 21.08 1.86 26 MIME_HEADER_CTYPE_ONLY 49351 7.02 19.69 0.11 27 XM_BadFromFormat 49346 7.06 19.69 0.18 28 BOTNET 49326 7.57 19.68 0.96 29 MISSING_HEADERS 48916 7.22 19.52 0.52 30 HTML_IMAGE_ONLY_08 48903 10.41 19.51 5.44 31 HTML_SHORT_LINK_IMG_1 48358 10.27 19.29 5.35 32 SHORTENER_SHORT_IMG 48018 10.21 19.16 5.33 33 URI_BUFFLY 47843 10.19 19.09 5.33 34 DKIM_VALID_EF 47149 23.00 18.81 25.29 35 HTML_FONT_SIZE_HUGE 46767 9.94 18.66 5.19 36 BODY_URI_ONLY 46416 6.58 18.52 0.07 37 XM_Body_Dirty_Words 43828 13.36 17.49 11.10 38 T_KAM_HTML_FONT_INVALID 41278 14.57 16.47 13.53 39 FSL_BULK_SIG 41276 9.77 16.47 6.12 40 MultiRelay 35746 16.48 14.26 17.69 41 HTML_IMAGE_RATIO_02 35278 9.06 14.08 6.32 42 XM_Multi_Part_URI 35197 11.71 14.04 10.44 43 XM_UncommonTLD01 32749 6.69 13.07 3.21 44 XM_Evil_Numbers_Gen 28575 8.47 11.40 6.87 45 RELAYCOUNTRY_TH 27504 3.88 10.97 0.01 46 BAYES_80 27353 6.23 10.91 3.68 47 XMNumbers 27146 5.75 10.83 2.97 48 LOTS_OF_MONEY 26711 9.92 10.66 9.51 49 XMSexyCombo_05 26472 5.57 10.56 2.84 50 SpammyFromTLD_02 23022 3.46 9.19 0.34 51 NO_DNS_FOR_FROM 20535 3.37 8.19 0.74 52 XM_B_Phish_Phrases 20227 5.95 8.07 4.79 53 RCVD_IN_RP_RNBL 19999 2.84 7.98 0.04 54 BAYES_60 19586 6.81 7.81 6.27 55 RELAYCOUNTRY_NL 19578 3.20 7.81 0.68 56 T_XMDrugObfuBody_14 19452 7.54 7.76 7.42 57 BAYES_95 18982 4.30 7.57 2.51 58 HTML_IMAGE_RATIO_04 17993 5.73 7.18 4.94 59 XM_UB99 17551 2.49 7.00 0.03 60 TR_XM_DocInvoice 17010 4.72 6.79 3.60 61 LotsOfNums_01 16403 7.81 6.54 8.51 62 XMSubMetaSx_00 16122 4.87 6.43 4.02 63 MPART_ALT_DIFF 15890 3.85 6.34 2.50 64 XM_JunkDunk 15527 2.19 6.20 0.00 65 XM_H_Long_From01 15046 5.49 6.00 5.22 66 XM_UB80 14493 2.06 5.78 0.02 67 TooManyTo_001 14198 8.29 5.66 9.73 68 DKIM_INVALID 12428 4.99 4.96 5.00 69 XM_SPF_SoftFail 11735 2.94 4.68 1.99 70 RCVD_IN_RP_SAFE 11367 6.52 4.54 7.60 71 XM_UB95 10812 1.53 4.31 0.01 72 HTML_IMAGE_RATIO_06 10744 3.63 4.29 3.27 73 XMNoVowels 10381 3.38 4.14 2.97 74 XM_UB60 9944 1.44 3.97 0.07 75 XM_SendGrid 9201 4.24 3.67 4.54 76 MIME_QP_LONG_LINE 8941 4.98 3.57 5.75 77 XM_DIRTYINTL 8911 2.31 3.56 1.63 78 MIME_HTML_MOSTLY 8832 2.68 3.52 2.23 79 DIET_1 8590 1.87 3.43 1.03 80 URI_HEX 8511 2.12 3.40 1.42 81 XMSlimDrugH 8410 1.40 3.36 0.33 82 XM_UB50 8382 2.49 3.34 2.02 83 TM2_M_URI_OPT_OUT 8357 2.51 3.33 2.06 84 RCVD_IN_RP_CERTIFIED 8285 5.49 3.31 6.68 85 XM_UB999 7718 1.10 3.08 0.02 86 XMStrtUSub 7678 3.44 3.06 3.65 87 RCVD_IN_MSPIKE_H2 7652 3.76 3.05 4.15 88 XM_CamelCaseFrm001 7633 2.05 3.05 1.51 89 XMMoneyMeta_00 7614 1.34 3.04 0.42 90 MIME_HTML_ONLY_MULTI 7177 1.67 2.86 1.01 91 HTML_IMAGE_RATIO_08 7060 2.08 2.82 1.68 92 XMDiploma_00 6699 2.21 2.67 1.96 93 T_TooManySym_01 6163 3.84 2.46 4.59 94 XM_URI_RBL 5828 0.89 2.33 0.11 95 XM_OfRef6 5732 2.07 2.29 1.95 96 RELAYCOUNTRY_CA 5571 1.64 2.22 1.32 97 SpammyFromTLD_01 5482 1.23 2.19 0.71 98 T_REMOTE_IMAGE 5420 3.37 2.16 4.03 99 T_XMDrugObfuBody_08 4973 1.64 1.98 1.45 100 XMWghtMeta_00 4914 0.70 1.96 0.01 101 XMSlimDrugs 4793 0.69 1.91 0.02 102 XMMoneyMeta_01 4673 0.71 1.86 0.08 103 MultiRelay_CC 4397 0.72 1.75 0.15 104 MultiRelay_Combo 4397 0.72 1.75 0.15 105 TR_XM_RelayPhish 4353 0.87 1.74 0.39 106 XMSubMetaI_00 4348 0.90 1.73 0.45 107 URIBL_BLACK 4218 0.62 1.68 0.04 108 XMGenDplmaNmb 4210 1.36 1.68 1.18 109 T_XMHurry_00 4184 0.89 1.67 0.47 110 RCVD_IN_BL_SPAMCOP_NET 4153 0.80 1.66 0.33 111 SUBJ_ALL_CAPS 4150 1.76 1.66 1.81 112 RCVD_IN_IADB_LISTED 4134 4.11 1.65 5.46 113 XMSexyCombo_01 4100 1.15 1.64 0.88 114 DRUGS_ERECTILE 4041 0.59 1.61 0.03 115 XMBody_17 4005 0.78 1.60 0.33 116 RELAYCOUNTRY_FR 3910 0.69 1.56 0.21 117 XM_H_Long_From02 3857 2.00 1.54 2.26 118 PLING_QUERY 3751 0.68 1.50 0.23 119 XMSubMetaSx_01 3744 0.69 1.49 0.26 120 XMPhish11 3708 1.18 1.48 1.02 121 XMBdyGiftCard01 3708 0.98 1.48 0.71 122 ALL_TRUSTED 3697 16.42 1.48 24.56 123 TM2_M_VERY_LONG_WORD 3686 1.03 1.47 0.78 124 RCVD_IN_IADB_SPF 3670 3.56 1.46 4.71 125 DKIM_ADSP_NXDOMAIN 3599 0.69 1.44 0.29 126 BAYES_00 3568 5.05 1.42 7.03 127 RCVD_IN_IADB_SENDERID 3468 3.14 1.38 4.10 128 RCVD_IN_IADB_DK 3420 3.08 1.36 4.01 129 XM_ProductURIs 3298 1.11 1.32 1.00 130 UNPARSEABLE_RELAY 3270 2.73 1.30 3.51 131 URI_TRY_3LD 3169 1.12 1.26 1.04 132 URIBL_DBL_SPAM 2995 0.49 1.19 0.10 133 TR_XM_DK_Bayes 2870 3.26 1.15 4.41 134 ONLINE_PHARMACY 2808 0.40 1.12 0.01 135 BAYES_40 2802 2.63 1.12 3.46 136 BOTNET_NORDNS 2783 0.40 1.11 0.02 137 T_FILL_THIS_FORM_SHORT 2770 1.11 1.11 1.11 138 TVD_VISIT_PHARMA 2765 0.39 1.10 0.00 139 TR_XM_DK_Bayes1 2674 2.92 1.07 3.93 140 XM_DK_Undo_01 2663 1.52 1.06 1.77 141 MAILING_LIST_MULTI 2649 2.05 1.06 2.60 142 XMStockSpam_06 2649 1.21 1.06 1.30 143 RDNS_DYNAMIC 2620 0.65 1.05 0.44 144 BAYES_20 2613 1.95 1.04 2.44 145 XM_HighProb1 2590 0.37 1.03 0.01 146 T_XMDrugObfuBody_00 2577 0.81 1.03 0.69 147 RELAYCOUNTRY_CN 2530 0.38 1.01 0.04 148 TR_LOTS_OF_MONEY3 2527 0.49 1.01 0.21 149 XM_H_PHPOS 2525 1.13 1.01 1.19 150 T_MONEY_PERCENT 2503 0.63 1.00 0.43 151 TR_LOTS_OF_MONEY2 2503 0.63 1.00 0.43 152 SUBJECT_DIET 2453 0.35 0.98 0.00 153 FVGT_m_MULTI_ODD_EMAIL 2441 0.38 0.97 0.05 154 TR_XM_DK_Bayes2 2437 2.40 0.97 3.17 155 REMOVE_BEFORE_LINK 2429 0.61 0.97 0.42 156 XMHTML_After_End 2423 0.62 0.97 0.44 157 HTML_EXTRA_CLOSE 2389 0.55 0.95 0.32 158 XM_RXBody 2387 0.40 0.95 0.10 159 TooManyTo_002 2297 2.34 0.92 3.12 160 MPART_ALT_DIFF_COUNT 2263 1.00 0.90 1.06 161 TR_Symld_Words 2213 1.55 0.88 1.92 162 XMPhish30 2202 0.52 0.88 0.33 163 DRUG_ED_CAPS 2193 0.31 0.87 0.00 164 XM_B_REG_HTML 2188 0.63 0.87 0.49 165 DATE_IN_PAST_06_12 2185 0.33 0.87 0.03 166 XM_H_PHPMailer 2176 0.72 0.87 0.65 167 HTML_FONT_FACE_BAD 2135 0.61 0.85 0.47 168 RELAYCOUNTRY_GB 2097 0.83 0.84 0.83 169 SUBJ_DOLLARS 2078 0.50 0.83 0.32 170 TooManyTo_003 2077 1.83 0.83 2.38 171 RELAYCOUNTRY_AT 2018 0.34 0.81 0.08 172 XMSexyCombo_04 2002 0.36 0.80 0.13 173 FILL_THIS_FORM 1991 0.55 0.79 0.42 174 XMBody_78 1934 0.49 0.77 0.33 175 XM_B_COPY_HTML 1903 0.59 0.76 0.50 176 XMHTMLBadTable_001 1900 0.62 0.76 0.54 177 DKIM_ADSP_CUSTOM_MED 1870 0.92 0.75 1.01 178 XMSubMetaSxObfu_03 1851 0.56 0.74 0.47 179 RCVD_IN_IADB_VOUCHED 1844 2.69 0.74 3.76 180 T_FILL_THIS_FORM_LONG 1826 0.48 0.73 0.34 181 XMPhish14 1818 0.41 0.73 0.24 182 XMSubMetaSSx_00 1804 0.52 0.72 0.41 183 TR_Mismatch_TLD_02 1788 0.39 0.71 0.21 184 T_TooManySym_02 1785 1.44 0.71 1.84 185 T_Symld_Words_02 1782 0.58 0.71 0.51 186 XM_PDF 1763 2.88 0.70 4.07 187 TVD_SPACE_RATIO_MINFP 1741 0.25 0.69 0.01 188 XM_H_PHPOS_M 1626 0.45 0.65 0.34 189 HTTPS_HTTP_MISMATCH 1622 0.49 0.65 0.41 190 TR_MetaPhish_Combo_01 1618 0.60 0.65 0.58 191 BOUNCE_MESSAGE 1611 7.41 0.64 11.10 192 ANY_BOUNCE_MESSAGE 1611 7.41 0.64 11.11 193 NML_ADSP_CUSTOM_MED 1602 0.72 0.64 0.76 194 FORGED_GMAIL_RCVD 1582 0.49 0.63 0.41 195 RCVD_IN_MSPIKE_WL 1542 1.40 0.62 1.82 196 DATE_IN_PAST_03_06 1530 0.26 0.61 0.07 197 STYLE_GIBBERISH 1528 0.22 0.61 0.01 198 XMBrknScrpt_02 1481 0.59 0.59 0.59 199 RCVD_IN_MSPIKE_H3 1479 1.38 0.59 1.82 200 FILL_THIS_FORM_LOAN 1474 0.38 0.59 0.27 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 392867 89.46 96.81 85.45 2 DCC_CHECK_NEGATIVE 311219 54.10 29.16 67.69 3 DKIM_SIGNED 298314 66.09 68.30 64.89 4 XM_DK_Pass 293600 64.94 66.92 63.86 5 BAYES_50 281645 49.73 28.57 61.26 6 DKIM_VALID 275315 61.11 63.34 59.88 7 DKIM_VALID_AU 191300 44.35 49.38 41.61 8 XMListUnsubscribeExists 189737 47.26 58.25 41.27 9 XM_H_QuotedFrom 144602 35.62 43.26 31.45 10 DCC_CHECK 140094 44.30 69.67 30.47 11 T_TM2_M_HEADER_IN_MSG 134785 29.99 31.21 29.32 12 DKIM_VALID_EF 116253 23.00 18.81 25.29 13 ALL_TRUSTED 112924 16.42 1.48 24.56 14 HTML_FONT_LOW_CONTRAST 111089 26.19 29.89 24.16 15 FVGT_m_MULTI_ODD 92149 20.69 21.89 20.04 16 LOC_TINY_FONT_1 87798 22.90 29.89 19.10 17 XMSubLong 87210 21.43 25.94 18.97 18 MultiRelay 81320 16.48 14.26 17.69 19 MIME_HTML_ONLY 76771 27.18 46.41 16.70 20 T_KAM_HTML_FONT_INVALID 62210 14.57 16.47 13.53 21 XM_DK_Undo_02 56123 21.29 37.95 12.21 22 BAYES_99 53611 22.00 40.97 11.66 23 ANY_BOUNCE_MESSAGE 51055 7.41 0.64 11.11 24 BOUNCE_MESSAGE 51048 7.41 0.64 11.10 25 XM_Body_Dirty_Words 51047 13.36 17.49 11.10 26 XM_Multi_Part_URI 48016 11.71 14.04 10.44 27 BAYES_999 46563 17.78 31.82 10.13 28 XM_DKIMWhitelistDomains 45895 6.50 0.11 9.98 29 TooManyTo_001 44714 8.29 5.66 9.73 30 LOTS_OF_MONEY 43727 9.92 10.66 9.51 31 LotsOfNums_01 39109 7.81 6.54 8.51 32 RCVD_IN_RP_SAFE 34938 6.52 4.54 7.60 33 T_XMDrugObfuBody_14 34098 7.54 7.76 7.42 34 BAYES_00 32332 5.05 1.42 7.03 35 XM_Evil_Numbers_Gen 31595 8.47 11.40 6.87 36 RCVD_IN_RP_CERTIFIED 30693 5.49 3.31 6.68 37 RELAYCOUNTRY_META 29677 14.64 29.65 6.46 38 HTML_IMAGE_RATIO_02 29076 9.06 14.08 6.32 39 BAYES_60 28809 6.81 7.81 6.27 40 FSL_BULK_SIG 28152 9.77 16.47 6.12 41 MIME_QP_LONG_LINE 26436 4.98 3.57 5.75 42 TR_DCC_Bayes_99 25144 13.92 29.43 5.47 43 RCVD_IN_IADB_LISTED 25084 4.11 1.65 5.46 44 HTML_IMAGE_ONLY_08 25021 10.41 19.51 5.44 45 HTML_SHORT_LINK_IMG_1 24614 10.27 19.29 5.35 46 URI_BUFFLY 24514 10.19 19.09 5.33 47 SHORTENER_SHORT_IMG 24514 10.21 19.16 5.33 48 XM_H_Long_From01 23980 5.49 6.00 5.22 49 HTML_FONT_SIZE_HUGE 23840 9.94 18.66 5.19 50 DKIM_INVALID 22999 4.99 4.96 5.00 51 HTML_IMAGE_RATIO_04 22726 5.73 7.18 4.94 52 XM_B_Phish_Phrases 22033 5.95 8.07 4.79 53 RCVD_IN_IADB_SPF 21653 3.56 1.46 4.71 54 IN_ZIMBRA_NJ_WHITELIST 21148 2.99 0.03 4.60 55 T_TooManySym_01 21080 3.84 2.46 4.59 56 XM_SendGrid 20894 4.24 3.67 4.54 57 BOTNET_IPINHOSTNAME 20819 10.44 21.28 4.53 58 TR_XM_DK_Bayes 20264 3.26 1.15 4.41 59 RCVD_IN_MSPIKE_H2 19091 3.76 3.05 4.15 60 RCVD_IN_IADB_SENDERID 18863 3.14 1.38 4.10 61 XM_PDF 18713 2.88 0.70 4.07 62 T_REMOTE_IMAGE 18531 3.37 2.16 4.03 63 XMSubMetaSx_00 18486 4.87 6.43 4.02 64 RCVD_IN_IADB_DK 18446 3.08 1.36 4.01 65 TR_XM_DK_Bayes1 18047 2.92 1.07 3.93 66 RCVD_IN_IADB_VOUCHED 17275 2.69 0.74 3.76 67 BAYES_80 16917 6.23 10.91 3.68 68 XMStrtUSub 16783 3.44 3.06 3.65 69 TR_XM_DocInvoice 16530 4.72 6.79 3.60 70 UNPARSEABLE_RELAY 16136 2.73 1.30 3.51 71 BAYES_40 15896 2.63 1.12 3.46 72 HTML_IMAGE_RATIO_06 15055 3.63 4.29 3.27 73 XM_UncommonTLD01 14776 6.69 13.07 3.21 74 TR_XM_DK_Bayes2 14583 2.40 0.97 3.17 75 TVD_RCVD_IP 14532 2.12 0.22 3.16 76 TooManyTo_002 14338 2.34 0.92 3.12 77 FROM_EXCESS_BASE64 14167 10.90 25.23 3.08 78 XMNumbers 13667 5.75 10.83 2.97 79 XMNoVowels 13654 3.38 4.14 2.97 80 XMSexyCombo_05 13071 5.57 10.56 2.84 81 MAILING_LIST_MULTI 11947 2.05 1.06 2.60 82 BAYES_95 11554 4.30 7.57 2.51 83 MPART_ALT_DIFF 11479 3.85 6.34 2.50 84 BAYES_20 11219 1.95 1.04 2.44 85 UNTRUSTED_Relay 10964 10.45 25.23 2.38 86 TooManyTo_003 10921 1.83 0.83 2.38 87 RCVD_IN_IADB_OPTIN 10916 1.70 0.45 2.37 88 XM_H_Long_From02 10381 2.00 1.54 2.26 89 MIME_HTML_MOSTLY 10239 2.68 3.52 2.23 90 TM2_M_URI_OPT_OUT 9465 2.51 3.33 2.06 91 XM_UB50 9301 2.49 3.34 2.02 92 XM_SPF_SoftFail 9149 2.94 4.68 1.99 93 XMDiploma_00 9026 2.21 2.67 1.96 94 XM_OfRef6 8976 2.07 2.29 1.95 95 TR_Symld_Words 8833 1.55 0.88 1.92 96 HTML_MIME_NO_HTML_TAG 8557 8.64 21.08 1.86 97 T_TooManySym_02 8474 1.44 0.71 1.84 98 RCVD_IN_MSPIKE_WL 8381 1.40 0.62 1.82 99 RCVD_IN_MSPIKE_H3 8359 1.38 0.59 1.82 100 SUBJ_ALL_CAPS 8329 1.76 1.66 1.81 101 HELO_NODOT 8243 1.31 0.42 1.79 102 XM_DK_Undo_01 8158 1.52 1.06 1.77 103 IN_HORDE_ADDRESS_BOOK 7818 1.12 0.05 1.70 104 HTML_IMAGE_RATIO_08 7732 2.08 2.82 1.68 105 XM_DIRTYINTL 7512 2.31 3.56 1.63 106 BAYES_05 7331 1.21 0.51 1.59 107 INVALID_MSGID 7079 1.06 0.19 1.54 108 XM_CamelCaseFrm001 6940 2.05 3.05 1.51 109 RELAYCOUNTRY_PH 6695 0.95 0.01 1.46 110 T_XMDrugObfuBody_08 6655 1.64 1.98 1.45 111 TO_MALFORMED 6545 0.93 0.02 1.42 112 URI_HEX 6524 2.12 3.40 1.42 113 RELAYCOUNTRY_CA 6079 1.64 2.22 1.32 114 XMStockSpam_06 5972 1.21 1.06 1.30 115 XMLngstWrd_00 5874 0.95 0.35 1.28 116 USER_IN_DEF_DKIM_WL 5738 0.84 0.09 1.25 117 XMCapTrack 5706 0.96 0.44 1.24 118 XM_H_PHPOS 5479 1.13 1.01 1.19 119 XMGenDplmaNmb 5439 1.36 1.68 1.18 120 XM_GoogleGroups 5177 0.86 0.36 1.13 121 XMLngstWrd_01 5173 0.84 0.32 1.13 122 T_FILL_THIS_FORM_SHORT 5114 1.11 1.11 1.11 123 TooManyTo_004 4934 0.89 0.56 1.07 124 MPART_ALT_DIFF_COUNT 4858 1.00 0.90 1.06 125 URI_TRY_3LD 4788 1.12 1.26 1.04 126 DIET_1 4713 1.87 3.43 1.03 127 XMPhish11 4670 1.18 1.48 1.02 128 DKIM_ADSP_CUSTOM_MED 4663 0.92 0.75 1.01 129 MIME_HTML_ONLY_MULTI 4652 1.67 2.86 1.01 130 XM_ProductURIs 4605 1.11 1.32 1.00 131 BOTNET 4415 7.57 19.68 0.96 132 TooManyTo_005 4047 0.74 0.48 0.88 133 XMSexyCombo_01 4044 1.15 1.64 0.88 134 RELAYCOUNTRY_GB 3804 0.83 0.84 0.83 135 TM2_M_VERY_LONG_WORD 3596 1.03 1.47 0.78 136 NML_ADSP_CUSTOM_MED 3495 0.72 0.64 0.76 137 XMGappySubj_01 3458 0.61 0.35 0.75 138 NO_DNS_FOR_FROM 3391 3.37 8.19 0.74 139 USER_IN_WHITELIST 3352 0.47 0.00 0.73 140 SpammyFromTLD_01 3264 1.23 2.19 0.71 141 XMBdyGiftCard01 3252 0.98 1.48 0.71 142 T_TooManySym_03 3207 0.50 0.14 0.70 143 T_XMDrugObfuBody_00 3183 0.81 1.03 0.69 144 RELAYCOUNTRY_NL 3133 3.20 7.81 0.68 145 TM2_M_A_HREF_HREF 3097 0.64 0.59 0.67 146 T_OBFU_PDF_ATTACH 3096 0.51 0.22 0.67 147 XMLngstWrd_02 3019 0.52 0.28 0.66 148 XM_H_PHPMailer 2972 0.72 0.87 0.65 149 XMBrknScrpt_02 2695 0.59 0.59 0.59 150 URIBL_SBL_A 2693 0.48 0.29 0.59 151 TR_MetaPhish_Combo_01 2663 0.60 0.65 0.58 152 XMHTMLBadTable_001 2483 0.62 0.76 0.54 153 KHOP_DYNAMIC 2480 0.49 0.39 0.54 154 XM_D_tchamptons_WL 2432 0.34 0.00 0.53 155 MISSING_HEADERS 2393 7.22 19.52 0.52 156 HTML_TAG_BALANCE_BODY 2382 0.50 0.47 0.52 157 T_Symld_Words_02 2364 0.58 0.71 0.51 158 XM_B_COPY_HTML 2296 0.59 0.76 0.50 159 XMSubMetaSxObfu_02 2265 0.44 0.35 0.49 160 AC_DIV_BONANZA 2259 0.37 0.14 0.49 161 XM_B_REG_HTML 2254 0.63 0.87 0.49 162 XM_ShortIntro_01 2253 0.40 0.24 0.49 163 XMLKML 2246 0.32 0.00 0.49 164 T_MANY_PILL_PRICE 2243 0.32 0.00 0.49 165 XMBody_95 2183 0.45 0.40 0.47 166 HTML_FONT_FACE_BAD 2175 0.61 0.85 0.47 167 T_XMHurry_00 2167 0.89 1.67 0.47 168 XMSubMetaSxObfu_03 2159 0.56 0.74 0.47 169 URI_NOVOWEL 2151 0.47 0.48 0.47 170 SHORT_HELO_AND_INLINE_IMAGE 2129 0.32 0.06 0.46 171 RELAYCOUNTRY_AU 2121 0.49 0.53 0.46 172 XMSubMetaI_00 2063 0.90 1.73 0.45 173 RDNS_DYNAMIC 2017 0.65 1.05 0.44 174 XMHTML_After_End 2012 0.62 0.97 0.44 175 RCVD_IN_SORBS_DUL 2008 0.40 0.32 0.44 176 TR_LOTS_OF_MONEY2 1987 0.63 1.00 0.43 177 T_MONEY_PERCENT 1987 0.63 1.00 0.43 178 HTML_IMAGE_ONLY_32 1963 0.38 0.30 0.43 179 FILL_THIS_FORM 1949 0.55 0.79 0.42 180 XMMoneyMeta_00 1918 1.34 3.04 0.42 181 XMLngstWrd_03 1911 0.33 0.18 0.42 182 REMOVE_BEFORE_LINK 1911 0.61 0.97 0.42 183 XMSubMetaSSx_00 1892 0.52 0.72 0.41 184 HTTPS_HTTP_MISMATCH 1892 0.49 0.65 0.41 185 FORGED_GMAIL_RCVD 1867 0.49 0.63 0.41 186 HTML_IMAGE_ONLY_28 1824 0.39 0.37 0.40 187 TM2_M_BODY_EMPTY 1802 0.35 0.28 0.39 188 TR_Mismatch_TLD_01 1795 0.32 0.19 0.39 189 TR_XM_RelayPhish 1793 0.87 1.74 0.39 190 XM_Combo_Sbj 1788 0.35 0.27 0.39 191 RELAYCOUNTRY_DE 1725 0.42 0.51 0.38 192 XMDateMe_00 1715 0.35 0.31 0.37 193 XMSubNoVowel 1652 0.31 0.23 0.36 194 T_TooManySym_04 1623 0.24 0.02 0.35 195 SpammyFromTLD_02 1560 3.46 9.19 0.34 196 T_FILL_THIS_FORM_LONG 1560 0.48 0.73 0.34 197 XM_H_PHPOS_M 1557 0.45 0.65 0.34 198 RCVD_IN_BL_SPAMCOP_NET 1538 0.80 1.66 0.33 199 XMBody_78 1517 0.49 0.77 0.33 200 XMBody_17 1511 0.78 1.60 0.33 ----------------------------------------------------------------------