Email: 681277 Autolearn: 0 AvgScore: 5.09 AvgScanTime: 4.34 sec Spam: 233776 Autolearn: 0 AvgScore: 13.99 AvgScanTime: 5.32 sec Ham: 447501 Autolearn: 0 AvgScore: 0.44 AvgScanTime: 3.83 sec Time Spent Running SA: 820.80 hours Time Spent Processing Spam: 345.26 hours Time Spent Processing Ham: 475.54 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 226622 90.25 96.94 86.75 2 DKIM_SIGNED 178208 71.38 76.23 68.85 3 XM_DK_Pass 173790 70.02 74.34 67.76 4 DCC_CHECK 169629 46.15 72.56 32.35 5 DKIM_VALID 164795 65.87 70.49 63.46 6 XMListUnsubscribeExists 151045 51.80 64.61 45.11 7 DKIM_VALID_AU 124400 47.33 53.21 44.25 8 XM_H_QuotedFrom 116033 38.74 49.63 33.06 9 XM_DK_Undo_02 101022 23.60 43.21 13.36 10 BAYES_99 99960 23.09 42.76 12.81 11 MIME_HTML_ONLY 87904 25.33 37.60 18.93 12 BAYES_999 80709 19.22 34.52 11.22 13 HTML_FONT_LOW_CONTRAST 78084 28.94 33.40 26.60 14 LOC_TINY_FONT_1 77725 25.09 33.25 20.83 15 TR_DCC_Bayes_99 73826 14.77 31.58 5.98 16 BAYES_50 67823 48.76 29.01 59.08 17 DCC_CHECK_NEGATIVE 61048 52.20 26.11 65.83 18 XMSubLong 58104 21.33 24.85 19.50 19 FVGT_m_MULTI_ODD 55548 22.06 23.76 21.16 20 DKIM_VALID_EF 51741 24.46 22.13 25.68 21 T_TM2_M_HEADER_IN_MSG 46304 25.84 19.81 28.99 22 BOTNET 45826 7.43 19.60 1.07 23 T_KAM_HTML_FONT_INVALID 45037 15.81 19.27 14.00 24 FROM_EXCESS_BASE64 40755 8.28 17.43 3.50 25 XM_Body_Dirty_Words 40369 12.98 17.27 10.74 26 HTML_IMAGE_RATIO_02 35200 9.89 15.06 7.18 27 XM_Multi_Part_URI 34518 12.26 14.77 10.95 28 RELAYCOUNTRY_META 34336 8.10 14.69 4.66 29 LOTS_OF_MONEY 33334 11.10 14.26 9.45 30 MultiRelay 33306 16.69 14.25 17.96 31 FSL_BULK_SIG 32675 9.14 13.98 6.61 32 MISSING_HEADERS 32370 5.27 13.85 0.79 33 HTML_MIME_NO_HTML_TAG 32153 6.39 13.75 2.55 34 XM_BadFromFormat 29244 4.44 12.51 0.23 35 HTML_IMAGE_ONLY_08 28897 6.46 12.36 3.38 36 HTML_SHORT_LINK_IMG_1 28830 6.39 12.33 3.29 37 XM_Evil_Numbers_Gen 28583 9.25 12.23 7.70 38 BOTNET_IPINHOSTNAME 28509 7.53 12.20 5.09 39 HTML_FONT_SIZE_HUGE 28271 6.39 12.09 3.42 40 MIME_HEADER_CTYPE_ONLY 27632 4.14 11.82 0.12 41 SHORTENER_SHORT_IMG 27422 6.16 11.73 3.25 42 URI_BUFFLY 27386 6.15 11.71 3.25 43 BODY_URI_ONLY 27010 4.00 11.55 0.05 44 BAYES_80 25622 6.27 10.96 3.82 45 BOTNET_NORDNS 22416 3.31 9.59 0.02 46 UNTRUSTED_Relay 22074 3.99 9.44 1.14 47 XM_UncommonTLD01 21898 5.28 9.37 3.14 48 XMSexyCombo_05 21466 5.29 9.18 3.25 49 XMNumbers 20390 4.93 8.72 2.94 50 TR_XM_DocInvoice 19620 5.16 8.39 3.47 51 XM_B_Phish_Phrases 18903 6.14 8.09 5.13 52 T_XMDrugObfuBody_14 18437 7.54 7.89 7.36 53 HTML_IMAGE_RATIO_04 17529 5.96 7.50 5.16 54 LotsOfNums_01 17452 8.09 7.47 8.42 55 XM_H_Long_From01 16859 5.96 7.21 5.30 56 MPART_ALT_DIFF 16812 4.35 7.19 2.86 57 BAYES_60 15677 6.73 6.71 6.74 58 TooManyTo_001 15472 7.38 6.62 7.78 59 BAYES_95 15418 4.01 6.60 2.66 60 XMSubMetaSx_00 14944 4.57 6.39 3.62 61 RCVD_IN_RP_RNBL 14841 2.20 6.35 0.04 62 SpammyFromTLD_02 14221 2.30 6.08 0.33 63 DKIM_INVALID 13413 5.51 5.74 5.39 64 XM_SendGrid 11478 5.06 4.91 5.13 65 RCVD_IN_RP_SAFE 11293 6.86 4.83 7.93 66 MIME_HTML_MOSTLY 11267 3.29 4.82 2.49 67 HTML_IMAGE_RATIO_06 10978 4.06 4.70 3.73 68 XM_OfRef6 9808 2.70 4.20 1.92 69 XM_DIRTYINTL 9067 2.53 3.88 1.82 70 XMStrtUSub 8905 3.71 3.81 3.65 71 T_TooManySym_01 8667 4.19 3.71 4.44 72 TM2_M_URI_OPT_OUT 8564 2.53 3.66 1.93 73 MIME_QP_LONG_LINE 8488 4.58 3.63 5.07 74 XMSlimDrugH 8311 1.46 3.56 0.36 75 RCVD_IN_RP_CERTIFIED 8051 5.72 3.44 6.91 76 RCVD_IN_MSPIKE_H2 8017 4.43 3.43 4.95 77 ALL_TRUSTED 7781 15.76 3.33 22.25 78 XM_CamelCaseFrm001 7648 2.17 3.27 1.59 79 XM_JunkDunk 7454 1.09 3.19 0.00 80 XM_UB50 7374 1.54 3.15 0.69 81 HTML_IMAGE_RATIO_08 7276 2.40 3.11 2.03 82 XM_SPF_SoftFail 7213 2.18 3.09 1.71 83 MIME_HTML_ONLY_MULTI 7064 1.76 3.02 1.10 84 URI_HEX 7036 2.12 3.01 1.65 85 TR_LOTS_OF_MONEY1 6700 1.00 2.87 0.03 86 T_REMOTE_IMAGE 6339 3.92 2.71 4.55 87 RELAYCOUNTRY_CA 6055 1.75 2.59 1.30 88 SUBJ_DOLLARS 5976 1.12 2.56 0.37 89 DIET_1 5908 1.37 2.53 0.76 90 MultiRelay_Combo 5687 0.95 2.43 0.18 91 MultiRelay_CC 5687 0.95 2.43 0.18 92 T_TooManySym_02 5428 2.25 2.32 2.21 93 XMDiploma_00 5235 1.90 2.24 1.72 94 XM_UB99 5203 0.78 2.23 0.03 95 T_XMDrugObfuBody_08 4994 1.96 2.14 1.87 96 ADVANCE_FEE_5_NEW_MONEY 4954 0.73 2.12 0.01 97 XM_OfRef7 4868 1.00 2.08 0.43 98 T_XMHurry_00 4849 1.67 2.07 1.46 99 REPLYTO_WITHOUT_TO_CC 4830 0.91 2.07 0.31 100 RCVD_IN_BL_SPAMCOP_NET 4766 0.89 2.04 0.30 101 XMWghtMeta_00 4749 0.70 2.03 0.01 102 SpammyFromTLD_01 4607 1.11 1.97 0.66 103 SUBJECT_DIET 4394 0.65 1.88 0.00 104 XM_URI_RBL 4375 0.73 1.87 0.14 105 RCVD_IN_IADB_LISTED 4278 4.32 1.83 5.62 106 TR_Symld_Words 4232 1.84 1.81 1.85 107 XMNoVowels 4043 1.82 1.73 1.87 108 XMSubMetaI_00 3931 0.84 1.68 0.40 109 MONEY_FORM_SHORT 3928 0.59 1.68 0.02 110 RCVD_IN_IADB_SPF 3882 3.77 1.66 4.88 111 LOTTO_AGENT 3860 0.57 1.65 0.00 112 XMBdyGiftCard01 3777 0.96 1.62 0.61 113 RELAYCOUNTRY_FR 3741 0.71 1.60 0.25 114 RCVD_IN_IADB_SENDERID 3682 3.34 1.58 4.26 115 T_Symld_Words_02 3680 0.76 1.57 0.33 116 RCVD_IN_IADB_DK 3639 3.27 1.56 4.17 117 XMSexyCombo_01 3516 0.79 1.50 0.42 118 SUBJ_ALL_CAPS 3407 1.55 1.46 1.60 119 XMMoneyMeta_00 3387 0.89 1.45 0.59 120 BAYES_00 3214 5.23 1.37 7.24 121 XMStockSpam_06 3207 1.38 1.37 1.38 122 XMGenDplmaNmb 3195 1.08 1.37 0.93 123 URIBL_BLACK 3129 0.49 1.34 0.04 124 XMBody_17 3123 0.67 1.34 0.33 125 TR_XM_RelayPhish 3117 0.78 1.33 0.49 126 XM_UB999 3101 0.47 1.33 0.02 127 NO_DNS_FOR_FROM 3010 0.93 1.29 0.74 128 XMGappySubj_01 3007 0.83 1.29 0.59 129 XM_DK_Undo_01 2985 1.61 1.28 1.78 130 TM2_M_VERY_LONG_WORD 2964 0.95 1.27 0.78 131 URIBL_DBL_SPAM 2957 0.46 1.26 0.04 132 T_XMDrugObfuBody_00 2945 1.11 1.26 1.03 133 XM_UB60 2917 0.50 1.25 0.11 134 MAILING_LIST_MULTI 2910 2.06 1.24 2.49 135 XM_UB80 2889 0.45 1.24 0.04 136 URI_TRY_3LD 2858 1.28 1.22 1.31 137 RELAYCOUNTRY_GB 2818 1.04 1.21 0.95 138 XM_H_Long_From02 2793 0.93 1.19 0.80 139 TR_XM_DK_Bayes 2648 3.52 1.13 4.76 140 BAYES_40 2633 2.67 1.13 3.48 141 UNPARSEABLE_RELAY 2617 2.98 1.12 3.95 142 XMHTML_After_End 2617 0.64 1.12 0.38 143 XMSlimDrugs 2600 0.39 1.11 0.02 144 XMHTMLBadTable_001 2490 0.66 1.07 0.45 145 SUBJ_BUY 2486 0.40 1.06 0.06 146 T_FILL_THIS_FORM_SHORT 2462 0.93 1.05 0.86 147 XM_ProductURIs 2422 1.14 1.04 1.19 148 TR_XM_DK_Bayes1 2414 3.14 1.03 4.24 149 DKIM_ADSP_CUSTOM_MED 2376 1.01 1.02 1.01 150 XM_H_PHPOS 2370 1.14 1.01 1.20 151 RELAYCOUNTRY_CN 2332 0.37 1.00 0.04 152 XMPhish11 2299 1.10 0.98 1.16 153 XMGappySubj_02 2291 0.44 0.98 0.16 154 XMPhish30 2286 0.59 0.98 0.38 155 HTML_FONT_FACE_BAD 2207 0.73 0.94 0.62 156 XM_HighProb1 2195 0.33 0.94 0.01 157 PLING_QUERY 2184 0.60 0.93 0.43 158 TR_XM_DK_Bayes2 2159 2.47 0.92 3.27 159 FORGED_GMAIL_RCVD 2147 0.61 0.92 0.44 160 TooManyTo_002 2146 1.87 0.92 2.36 161 LOW_PRICE 2137 0.42 0.91 0.17 162 TR_LOTS_OF_MONEY2 2129 0.54 0.91 0.35 163 T_MONEY_PERCENT 2129 0.54 0.91 0.35 164 XM_B_COPY_HTML 2125 0.64 0.91 0.50 165 NML_ADSP_CUSTOM_MED 2106 0.79 0.90 0.73 166 BAYES_20 2080 1.98 0.89 2.56 167 NO_MEDICAL 2018 0.30 0.86 0.00 168 RELAYCOUNTRY_TH 1997 0.30 0.85 0.01 169 HTML_TAG_BALANCE_BODY 1991 0.69 0.85 0.61 170 XMBody_78 1991 0.59 0.85 0.45 171 RELAYCOUNTRY_IN 1971 0.35 0.84 0.09 172 XM_H_PHPMailer 1948 0.70 0.83 0.63 173 TooManyTo_003 1879 1.29 0.80 1.55 174 XMSubMetaSSx_00 1869 0.37 0.80 0.15 175 TR_LOTS_OF_MONEY3 1862 0.46 0.80 0.28 176 XM_B_REG_HTML 1830 0.57 0.78 0.46 177 ANY_BOUNCE_MESSAGE 1827 6.10 0.78 8.88 178 BOUNCE_MESSAGE 1826 6.10 0.78 8.88 179 XMLongAddy 1817 0.38 0.78 0.17 180 XM_PDF 1811 3.69 0.77 5.21 181 RELAYCOUNTRY_AT 1792 0.32 0.77 0.08 182 BODY_ENHANCEMENT 1774 0.28 0.76 0.02 183 REMOVE_BEFORE_LINK 1774 0.46 0.76 0.30 184 XMSubMetaSxObfu_03 1767 0.49 0.76 0.34 185 XM_H_Long_From03 1742 0.37 0.75 0.18 186 RCVD_IN_IADB_VOUCHED 1726 2.73 0.74 3.77 187 URI_NOVOWEL 1691 0.58 0.72 0.50 188 RELAYCOUNTRY_NL 1620 0.35 0.69 0.18 189 LongTLD 1590 0.31 0.68 0.11 190 XM_UB95 1587 0.24 0.68 0.02 191 XMBrknScrpt_02 1572 0.56 0.67 0.50 192 TVD_SPACE_RATIO_MINFP 1562 0.24 0.67 0.01 193 XMSexyCombo_04 1518 0.29 0.65 0.11 194 HTTPS_HTTP_MISMATCH 1512 0.56 0.65 0.51 195 URIBL_CSS 1511 0.24 0.65 0.02 196 URIBL_CSS_A 1511 0.24 0.65 0.02 197 RDNS_DYNAMIC 1511 0.53 0.65 0.47 198 FVGT_m_MULTI_ODD_EMAIL 1491 0.28 0.64 0.09 199 RELAYCOUNTRY_AU 1486 0.53 0.64 0.48 200 MPART_ALT_DIFF_COUNT 1453 0.58 0.62 0.55 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 388228 90.25 96.94 86.75 2 DKIM_SIGNED 308107 71.38 76.23 68.85 3 XM_DK_Pass 303207 70.02 74.34 67.76 4 DCC_CHECK_NEGATIVE 294597 52.20 26.11 65.83 5 DKIM_VALID 283994 65.87 70.49 63.46 6 BAYES_50 264389 48.76 29.01 59.08 7 XMListUnsubscribeExists 201850 51.80 64.61 45.11 8 DKIM_VALID_AU 198016 47.33 53.21 44.25 9 XM_H_QuotedFrom 147922 38.74 49.63 33.06 10 DCC_CHECK 144783 46.15 72.56 32.35 11 T_TM2_M_HEADER_IN_MSG 129742 25.84 19.81 28.99 12 HTML_FONT_LOW_CONTRAST 119047 28.94 33.40 26.60 13 DKIM_VALID_EF 114912 24.46 22.13 25.68 14 ALL_TRUSTED 99556 15.76 3.33 22.25 15 FVGT_m_MULTI_ODD 94708 22.06 23.76 21.16 16 LOC_TINY_FONT_1 93217 25.09 33.25 20.83 17 XMSubLong 87245 21.33 24.85 19.50 18 MIME_HTML_ONLY 84690 25.33 37.60 18.93 19 MultiRelay 80369 16.69 14.25 17.96 20 T_KAM_HTML_FONT_INVALID 62648 15.81 19.27 14.00 21 XM_DK_Undo_02 59779 23.60 43.21 13.36 22 BAYES_99 57338 23.09 42.76 12.81 23 BAYES_999 50215 19.22 34.52 11.22 24 XM_Multi_Part_URI 48999 12.26 14.77 10.95 25 XM_DKIMWhitelistDomains 48380 7.12 0.04 10.81 26 XM_Body_Dirty_Words 48078 12.98 17.27 10.74 27 LOTS_OF_MONEY 42296 11.10 14.26 9.45 28 ANY_BOUNCE_MESSAGE 39729 6.10 0.78 8.88 29 BOUNCE_MESSAGE 39729 6.10 0.78 8.88 30 LotsOfNums_01 37687 8.09 7.47 8.42 31 RCVD_IN_RP_SAFE 35466 6.86 4.83 7.93 32 TooManyTo_001 34813 7.38 6.62 7.78 33 XM_Evil_Numbers_Gen 34445 9.25 12.23 7.70 34 T_XMDrugObfuBody_14 32926 7.54 7.89 7.36 35 BAYES_00 32392 5.23 1.37 7.24 36 HTML_IMAGE_RATIO_02 32147 9.89 15.06 7.18 37 RCVD_IN_RP_CERTIFIED 30905 5.72 3.44 6.91 38 BAYES_60 30166 6.73 6.71 6.74 39 FSL_BULK_SIG 29586 9.14 13.98 6.61 40 TR_DCC_Bayes_99 26780 14.77 31.58 5.98 41 RCVD_IN_IADB_LISTED 25139 4.32 1.83 5.62 42 DKIM_INVALID 24113 5.51 5.74 5.39 43 XM_H_Long_From01 23719 5.96 7.21 5.30 44 XM_PDF 23319 3.69 0.77 5.21 45 HTML_IMAGE_RATIO_04 23094 5.96 7.50 5.16 46 XM_SendGrid 22972 5.06 4.91 5.13 47 XM_B_Phish_Phrases 22948 6.14 8.09 5.13 48 BOTNET_IPINHOSTNAME 22762 7.53 12.20 5.09 49 MIME_QP_LONG_LINE 22685 4.58 3.63 5.07 50 RCVD_IN_MSPIKE_H2 22166 4.43 3.43 4.95 51 RCVD_IN_IADB_SPF 21820 3.77 1.66 4.88 52 TR_XM_DK_Bayes 21308 3.52 1.13 4.76 53 IN_ZIMBRA_NJ_WHITELIST 21267 3.13 0.03 4.75 54 RELAYCOUNTRY_META 20863 8.10 14.69 4.66 55 T_REMOTE_IMAGE 20383 3.92 2.71 4.55 56 T_TooManySym_01 19853 4.19 3.71 4.44 57 RCVD_IN_IADB_SENDERID 19062 3.34 1.58 4.26 58 TR_XM_DK_Bayes1 18983 3.14 1.03 4.24 59 RCVD_IN_IADB_DK 18650 3.27 1.56 4.17 60 UNPARSEABLE_RELAY 17686 2.98 1.12 3.95 61 BAYES_80 17092 6.27 10.96 3.82 62 RCVD_IN_IADB_VOUCHED 16873 2.73 0.74 3.77 63 HTML_IMAGE_RATIO_06 16680 4.06 4.70 3.73 64 XMStrtUSub 16353 3.71 3.81 3.65 65 XMSubMetaSx_00 16202 4.57 6.39 3.62 66 TVD_RCVD_IP 16180 2.44 0.18 3.62 67 FROM_EXCESS_BASE64 15658 8.28 17.43 3.50 68 BAYES_40 15551 2.67 1.13 3.48 69 TR_XM_DocInvoice 15513 5.16 8.39 3.47 70 HTML_FONT_SIZE_HUGE 15293 6.39 12.09 3.42 71 HTML_IMAGE_ONLY_08 15112 6.46 12.36 3.38 72 HTML_SHORT_LINK_IMG_1 14713 6.39 12.33 3.29 73 TR_XM_DK_Bayes2 14642 2.47 0.92 3.27 74 XMSexyCombo_05 14543 5.29 9.18 3.25 75 SHORTENER_SHORT_IMG 14525 6.16 11.73 3.25 76 URI_BUFFLY 14525 6.15 11.71 3.25 77 XM_UncommonTLD01 14043 5.28 9.37 3.14 78 XMNumbers 13163 4.93 8.72 2.94 79 MPART_ALT_DIFF 12809 4.35 7.19 2.86 80 BAYES_95 11908 4.01 6.60 2.66 81 BAYES_20 11439 1.98 0.89 2.56 82 HTML_MIME_NO_HTML_TAG 11390 6.39 13.75 2.55 83 MAILING_LIST_MULTI 11135 2.06 1.24 2.49 84 MIME_HTML_MOSTLY 11122 3.29 4.82 2.49 85 RCVD_IN_IADB_OPTIN 10834 1.75 0.46 2.42 86 TooManyTo_002 10582 1.87 0.92 2.36 87 T_TooManySym_02 9877 2.25 2.32 2.21 88 RCVD_IN_MSPIKE_WL 9446 1.57 0.54 2.11 89 RCVD_IN_MSPIKE_H3 9444 1.57 0.54 2.11 90 HTML_IMAGE_RATIO_08 9076 2.40 3.11 2.03 91 TM2_M_URI_OPT_OUT 8651 2.53 3.66 1.93 92 XM_OfRef6 8602 2.70 4.20 1.92 93 HELO_NODOT 8435 1.32 0.23 1.88 94 T_XMDrugObfuBody_08 8384 1.96 2.14 1.87 95 XMNoVowels 8349 1.82 1.73 1.87 96 TR_Symld_Words 8285 1.84 1.81 1.85 97 XM_DIRTYINTL 8143 2.53 3.88 1.82 98 XM_DK_Undo_01 7981 1.61 1.28 1.78 99 IN_HORDE_ADDRESS_BOOK 7929 1.18 0.04 1.77 100 XMDiploma_00 7707 1.90 2.24 1.72 101 XM_SPF_SoftFail 7670 2.18 3.09 1.71 102 URI_HEX 7378 2.12 3.01 1.65 103 SUBJ_ALL_CAPS 7138 1.55 1.46 1.60 104 XM_CamelCaseFrm001 7137 2.17 3.27 1.59 105 INVALID_MSGID 7087 1.12 0.23 1.58 106 TooManyTo_003 6927 1.29 0.80 1.55 107 BAYES_05 6871 1.19 0.54 1.54 108 T_XMHurry_00 6512 1.67 2.07 1.46 109 TO_MALFORMED 6358 0.94 0.01 1.42 110 XMStockSpam_06 6182 1.38 1.37 1.38 111 USER_IN_DEF_DKIM_WL 6088 0.93 0.12 1.36 112 URI_TRY_3LD 5871 1.28 1.22 1.31 113 RELAYCOUNTRY_CA 5835 1.75 2.59 1.30 114 XMCapTrack 5829 1.02 0.49 1.30 115 XMLngstWrd_00 5645 0.94 0.34 1.26 116 XM_H_PHPOS 5376 1.14 1.01 1.20 117 XM_ProductURIs 5338 1.14 1.04 1.19 118 XMPhish11 5171 1.10 0.98 1.16 119 UNTRUSTED_Relay 5110 3.99 9.44 1.14 120 XM_GoogleGroups 5025 0.86 0.36 1.12 121 XMLngstWrd_01 4965 0.84 0.31 1.11 122 MIME_HTML_ONLY_MULTI 4907 1.76 3.02 1.10 123 BOTNET 4795 7.43 19.60 1.07 124 T_XMDrugObfuBody_00 4592 1.11 1.26 1.03 125 DKIM_ADSP_CUSTOM_MED 4513 1.01 1.02 1.01 126 TooManyTo_004 4436 0.86 0.61 0.99 127 RELAYCOUNTRY_GB 4261 1.04 1.21 0.95 128 XMGenDplmaNmb 4158 1.08 1.37 0.93 129 T_FILL_THIS_FORM_SHORT 3842 0.93 1.05 0.86 130 TM2_M_A_HREF_HREF 3789 0.77 0.61 0.85 131 TooManyTo_005 3615 0.71 0.52 0.81 132 XM_H_Long_From02 3571 0.93 1.19 0.80 133 MISSING_HEADERS 3534 5.27 13.85 0.79 134 TM2_M_VERY_LONG_WORD 3487 0.95 1.27 0.78 135 DIET_1 3403 1.37 2.53 0.76 136 NO_DNS_FOR_FROM 3328 0.93 1.29 0.74 137 NML_ADSP_CUSTOM_MED 3288 0.79 0.90 0.73 138 USER_IN_WHITELIST 3173 0.47 0.00 0.71 139 XM_UB50 3095 1.54 3.15 0.69 140 FILL_THIS_FORM 3007 0.64 0.56 0.67 141 TR_MetaPhish_Combo_01 2977 0.57 0.40 0.67 142 SpammyFromTLD_01 2969 1.11 1.97 0.66 143 T_OBFU_PDF_ATTACH 2894 0.49 0.20 0.65 144 XM_H_PHPMailer 2807 0.70 0.83 0.63 145 HTML_FONT_FACE_BAD 2788 0.73 0.94 0.62 146 XMBody_29 2780 0.45 0.13 0.62 147 XMLngstWrd_02 2767 0.50 0.26 0.62 148 T_TooManySym_03 2743 0.45 0.15 0.61 149 XMBdyGiftCard01 2731 0.96 1.62 0.61 150 HTML_TAG_BALANCE_BODY 2731 0.69 0.85 0.61 151 XMMoneyMeta_00 2654 0.89 1.45 0.59 152 T_FILL_THIS_FORM_LONG 2639 0.56 0.51 0.59 153 XMGappySubj_01 2632 0.83 1.29 0.59 154 KHOP_DYNAMIC 2596 0.52 0.42 0.58 155 XM_RXBody 2553 0.56 0.54 0.57 156 MPART_ALT_DIFF_COUNT 2470 0.58 0.62 0.55 157 XM_ShortIntro_01 2383 0.50 0.45 0.53 158 XMSubMetaSxObfu_02 2361 0.43 0.25 0.53 159 XMhairloss01 2311 0.36 0.07 0.52 160 SHORT_HELO_AND_INLINE_IMAGE 2280 0.36 0.06 0.51 161 HTTPS_HTTP_MISMATCH 2279 0.56 0.65 0.51 162 URI_NOVOWEL 2236 0.58 0.72 0.50 163 XMBrknScrpt_02 2226 0.56 0.67 0.50 164 XM_B_COPY_HTML 2224 0.64 0.91 0.50 165 T_MANY_PILL_PRICE 2201 0.33 0.03 0.49 166 TR_XM_RelayPhish 2174 0.78 1.33 0.49 167 RELAYCOUNTRY_AU 2152 0.53 0.64 0.48 168 TVD_SPACE_RATIO 2107 0.52 0.60 0.47 169 XMBody_95 2105 0.35 0.13 0.47 170 RDNS_DYNAMIC 2097 0.53 0.65 0.47 171 AC_DIV_BONANZA 2084 0.35 0.14 0.47 172 XM_B_REG_HTML 2064 0.57 0.78 0.46 173 TM2_M_BODY_EMPTY 2062 0.34 0.10 0.46 174 RCVD_IN_SORBS_DUL 2051 0.37 0.21 0.46 175 XMBody_78 2025 0.59 0.85 0.45 176 XMHTMLBadTable_001 2017 0.66 1.07 0.45 177 FORGED_GMAIL_RCVD 1980 0.61 0.92 0.44 178 XM_D_tchamptons_WL 1977 0.29 0.00 0.44 179 XM_OfRef7 1940 1.00 2.08 0.43 180 PLING_QUERY 1929 0.60 0.93 0.43 181 XMDateMe_00 1894 0.37 0.25 0.42 182 XMSexyCombo_01 1877 0.79 1.50 0.42 183 HTML_IMAGE_ONLY_32 1851 0.37 0.29 0.41 184 RELAYCOUNTRY_DE 1843 0.47 0.57 0.41 185 XMSubNoVowel 1806 0.40 0.40 0.40 186 XMSubMetaI_00 1772 0.84 1.68 0.40 187 URIBL_SBL_A 1746 0.32 0.18 0.39 188 XMHTML_After_End 1721 0.64 1.12 0.38 189 XMPhish30 1716 0.59 0.98 0.38 190 XMLngstWrd_03 1716 0.31 0.18 0.38 191 SUBJ_DOLLARS 1664 1.12 2.56 0.37 192 HTML_IMAGE_ONLY_16 1646 0.30 0.16 0.37 193 XMSlimDrugH 1631 1.46 3.56 0.36 194 HTML_IMAGE_ONLY_28 1597 0.35 0.35 0.36 195 T_MONEY_PERCENT 1566 0.54 0.91 0.35 196 TR_LOTS_OF_MONEY2 1566 0.54 0.91 0.35 197 XMSubMetaSxObfu_03 1540 0.49 0.76 0.34 198 XMSolicitRefs_0 1522 0.31 0.26 0.34 199 XM_H_PHPOS_M 1511 0.43 0.60 0.34 200 T_Symld_Words_02 1495 0.76 1.57 0.33 ----------------------------------------------------------------------