Email: 648731 Autolearn: 0 AvgScore: 4.52 AvgScanTime: 4.62 sec Spam: 221067 Autolearn: 0 AvgScore: 13.81 AvgScanTime: 5.28 sec Ham: 427664 Autolearn: 0 AvgScore: -0.28 AvgScanTime: 4.28 sec Time Spent Running SA: 832.77 hours Time Spent Processing Spam: 324.32 hours Time Spent Processing Ham: 508.46 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 206474 90.10 93.40 88.40 2 DKIM_SIGNED 159073 72.47 71.96 72.74 3 DCC_CHECK 156366 47.01 70.73 34.74 4 XM_DK_Pass 154191 70.82 69.75 71.37 5 DKIM_VALID 146167 66.79 66.12 67.14 6 XMListUnsubscribeExists 136575 53.10 61.78 48.61 7 DKIM_VALID_AU 119344 50.03 53.99 47.98 8 XM_H_QuotedFrom 105947 39.12 47.93 34.57 9 BAYES_50 99313 54.28 44.92 59.11 10 XM_DK_Undo_02 85225 20.46 38.55 11.11 11 BAYES_99 73775 18.13 33.37 10.24 12 MIME_HTML_ONLY 68584 24.25 31.02 20.74 13 HTML_FONT_LOW_CONTRAST 68478 27.35 30.98 25.48 14 LOC_TINY_FONT_1 66961 23.80 30.29 20.44 15 BAYES_999 62630 15.43 28.33 8.76 16 DCC_CHECK_NEGATIVE 61381 51.10 27.77 63.16 17 TR_DCC_Bayes_99 58862 12.75 26.63 5.58 18 BOTNET 52608 9.03 23.80 1.39 19 FVGT_m_MULTI_ODD 50363 21.55 22.78 20.92 20 XMSubLong 46561 19.65 21.06 18.92 21 DKIM_VALID_EF 43638 24.19 19.74 26.49 22 T_TM2_M_HEADER_IN_MSG 39294 26.91 17.77 31.63 23 RELAYCOUNTRY_META 38782 9.26 17.54 4.98 24 T_KAM_HTML_FONT_INVALID 38580 17.49 17.45 17.50 25 XM_Body_Dirty_Words 35749 13.24 16.17 11.73 26 MultiRelay 31937 17.79 14.45 19.52 27 XM_Multi_Part_URI 30750 11.71 13.91 10.58 28 RCVD_IN_RP_RNBL 30743 4.78 13.91 0.06 29 FSL_BULK_SIG 30586 8.02 13.84 5.01 30 HTML_IMAGE_RATIO_02 30566 9.48 13.83 7.23 31 XM_Evil_Numbers_Gen 28385 9.64 12.84 7.99 32 BOTNET_IPINHOSTNAME 28118 7.43 12.72 4.69 33 URI_HEX 26894 5.15 12.17 1.52 34 LOTS_OF_MONEY 25717 9.49 11.63 8.39 35 UNTRUSTED_Relay 24670 4.53 11.16 1.11 36 XM_UncommonTLD01 22477 4.80 10.17 2.03 37 XMCapTrack 22360 4.57 10.11 1.70 38 NUMERIC_HTTP_ADDR 21961 3.47 9.93 0.13 39 BOUNCE_MESSAGE 21943 5.22 9.93 2.79 40 ANY_BOUNCE_MESSAGE 21943 5.22 9.93 2.79 41 XMSexyCombo_05 20305 5.50 9.18 3.60 42 XM_URI_RBL 20206 3.22 9.14 0.16 43 FROM_EXCESS_BASE64 19153 5.39 8.66 3.69 44 URIBL_BLACK 18468 2.88 8.35 0.05 45 HTML_IMAGE_RATIO_04 18297 6.05 8.28 4.90 46 T_XMDrugObfuBody_14 18274 8.17 8.27 8.13 47 TR_XM_DocInvoice 17468 5.14 7.90 3.72 48 XM_H_Long_From01 16169 6.09 7.31 5.46 49 XM_B_Phish_Phrases 16152 6.62 7.31 6.27 50 T_REMOTE_IMAGE 15712 5.21 7.11 4.23 51 BAYES_80 14718 5.03 6.66 4.19 52 BAYES_60 14355 6.43 6.49 6.39 53 HTML_MIME_NO_HTML_TAG 14309 4.03 6.47 2.76 54 MPART_ALT_DIFF 14163 3.98 6.41 2.73 55 XMSubMetaSx_00 13451 4.54 6.08 3.74 56 TooManyTo_001 13400 7.78 6.06 8.67 57 DKIM_INVALID 12906 5.68 5.84 5.60 58 BODY_URI_ONLY 11334 1.83 5.13 0.13 59 LotsOfNums_01 11137 7.31 5.04 8.48 60 XM_UB50 11123 2.18 5.03 0.70 61 DATE_IN_PAST_03_06 10976 1.77 4.97 0.12 62 SHORTENED_URL_SRC 10846 1.67 4.91 0.00 63 XMNumbers 10829 3.92 4.90 3.42 64 HTML_SHORT_LINK_IMG_1 10720 1.67 4.85 0.02 65 RCVD_IN_RP_SAFE 10530 7.77 4.76 9.32 66 MISSING_HEADERS 10324 1.99 4.67 0.60 67 SHORTENER_SHORT_IMG 10141 1.56 4.59 0.00 68 URI_BUFFLY 10080 1.55 4.56 0.00 69 HTML_IMAGE_ONLY_04 10076 1.59 4.56 0.06 70 MIME_HEADER_CTYPE_ONLY 9841 1.62 4.45 0.15 71 XMStrtUSub 9015 4.15 4.08 4.19 72 SpammyFromTLD_02 8915 1.53 4.03 0.23 73 RCVD_IN_RP_CERTIFIED 8849 7.18 4.00 8.82 74 XM_SPF_SoftFail 8831 2.77 3.99 2.14 75 HTML_SHORT_CENTER 8809 1.36 3.98 0.00 76 HTML_IMAGE_RATIO_06 8573 3.66 3.88 3.55 77 BAYES_95 8563 3.01 3.87 2.57 78 ALL_TRUSTED 8180 12.85 3.70 17.58 79 RELAYCOUNTRY_FR 8016 1.36 3.63 0.19 80 MultiRelay_CC 7572 1.29 3.43 0.18 81 MultiRelay_Combo 7572 1.29 3.43 0.18 82 TM2_M_URI_OPT_OUT 7386 2.47 3.34 2.01 83 MIME_HTML_MOSTLY 7364 2.83 3.33 2.57 84 MIME_HTML_ONLY_MULTI 7171 1.96 3.24 1.30 85 XM_OfRef6 6723 1.89 3.04 1.30 86 HTML_IMAGE_RATIO_08 6646 2.29 3.01 1.92 87 XM_DIRTYINTL 6518 2.15 2.95 1.74 88 XM_SendGrid 6285 4.59 2.84 5.49 89 XM_CamelCaseFrm001 6142 2.09 2.78 1.73 90 RELAYCOUNTRY_CA 6141 1.90 2.78 1.44 91 INVALID_MSGID 6135 1.13 2.78 0.27 92 RCVD_IN_MSPIKE_H2 5817 4.14 2.63 4.93 93 TO_MALFORMED 5813 1.14 2.63 0.37 94 T_TooManySym_01 5410 3.60 2.45 4.20 95 SUBJ_ALL_CAPS 5327 1.99 2.41 1.77 96 XMBdyGiftCard01 4901 1.37 2.22 0.93 97 MIME_QP_LONG_LINE 4826 4.68 2.18 5.97 98 XMDiploma_00 4792 2.03 2.17 1.96 99 DKIM_ADSP_NXDOMAIN 4773 1.03 2.16 0.45 100 XM_UB60 4587 0.75 2.07 0.07 101 BOTNET_NORDNS 4468 0.71 2.02 0.03 102 T_XMDrugObfuBody_00 4423 1.09 2.00 0.61 103 UNPARSEABLE_RELAY 4423 3.02 2.00 3.55 104 XMSubMetaI_00 4295 1.21 1.94 0.83 105 RCVD_IN_BL_SPAMCOP_NET 4293 0.85 1.94 0.28 106 XM_H_Long_From02 3979 1.23 1.80 0.94 107 T_XMDrugObfuBody_08 3842 1.54 1.74 1.44 108 TR_LOTS_OF_MONEY3 3718 0.89 1.68 0.48 109 XMBody_17 3681 0.95 1.67 0.58 110 XM_UB80 3649 0.59 1.65 0.05 111 DIET_1 3607 0.79 1.63 0.35 112 T_XMHurry_00 3265 0.98 1.48 0.73 113 T_Symld_Words_02 3246 0.87 1.47 0.56 114 NO_DNS_FOR_FROM 3215 1.26 1.45 1.16 115 XMHTML_After_End 3156 0.77 1.43 0.42 116 BAYES_40 3103 3.02 1.40 3.86 117 BAYES_00 3066 6.31 1.39 8.85 118 RELAYCOUNTRY_IN 3003 0.53 1.36 0.10 119 XM_ProductURIs 2916 1.20 1.32 1.14 120 XMSexyCombo_01 2849 0.69 1.29 0.38 121 XMPhish14 2787 0.71 1.26 0.43 122 XMGenDplmaNmb 2775 1.27 1.26 1.28 123 TM2_M_VERY_LONG_WORD 2753 1.06 1.25 0.97 124 URI_TRY_3LD 2697 1.13 1.22 1.09 125 XM_UB99 2678 0.44 1.21 0.05 126 FILL_THIS_FORM 2634 0.68 1.19 0.42 127 SpammyFromTLD_01 2609 0.92 1.18 0.79 128 MAILING_LIST_MULTI 2577 1.94 1.17 2.34 129 XM_DK_Undo_01 2552 1.76 1.15 2.07 130 TR_XM_RelayPhish 2513 0.74 1.14 0.54 131 T_FILL_THIS_FORM_LONG 2468 0.59 1.12 0.32 132 BAYES_20 2443 2.20 1.11 2.76 133 TR_XM_DK_Bayes 2418 4.57 1.09 6.36 134 RCVD_IN_IADB_LISTED 2389 4.08 1.08 5.63 135 RELAYCOUNTRY_AU 2362 0.66 1.07 0.45 136 T_FILL_THIS_FORM_SHORT 2325 0.93 1.05 0.86 137 T_MONEY_PERCENT 2313 0.61 1.05 0.38 138 TR_LOTS_OF_MONEY2 2313 0.61 1.05 0.38 139 XM_OfRef7 2308 0.50 1.04 0.22 140 XMPhish30 2281 0.54 1.03 0.28 141 XMMoneyMeta_00 2262 0.69 1.02 0.51 142 XMStockSpam_06 2243 1.31 1.01 1.46 143 TR_XM_DK_Bayes1 2223 4.21 1.01 5.87 144 RELAYCOUNTRY_CN 2220 0.38 1.00 0.05 145 MPART_ALT_DIFF_COUNT 2208 0.48 1.00 0.22 146 RELAYCOUNTRY_AT 2186 0.41 0.99 0.11 147 DKIM_ADSP_CUSTOM_MED 2181 1.04 0.99 1.06 148 SUBJ_DOLLARS 2164 0.50 0.98 0.25 149 RELAYCOUNTRY_GB 2141 1.02 0.97 1.05 150 HTML_TAG_BALANCE_BODY 2128 0.68 0.96 0.53 151 RCVD_IN_IADB_SPF 2117 3.61 0.96 4.98 152 XMPhish11 2109 1.21 0.95 1.34 153 XMBody_78 2104 1.41 0.95 1.64 154 TR_Symld_Words 2100 2.19 0.95 2.83 155 XM_RXBody 2098 0.71 0.95 0.58 156 TR_XM_DK_Bayes2 2094 3.55 0.95 4.90 157 XM_HighProb1 2074 0.36 0.94 0.05 158 NML_ADSP_CUSTOM_MED 2060 0.82 0.93 0.76 159 XM_H_PHPOS 2017 1.20 0.91 1.35 160 XM_UB999 2007 0.33 0.91 0.02 161 URIBL_DBL_SPAM 1994 0.33 0.90 0.03 162 RCVD_IN_IADB_SENDERID 1990 3.23 0.90 4.43 163 TooManyTo_002 1985 2.18 0.90 2.84 164 XM_PDF 1973 4.23 0.89 5.96 165 RCVD_IN_IADB_DK 1971 3.20 0.89 4.40 166 RDNS_DYNAMIC 1909 0.59 0.86 0.45 167 FORGED_GMAIL_RCVD 1877 0.64 0.85 0.53 168 HTML_FONT_FACE_BAD 1857 0.61 0.84 0.48 169 TR_Mismatch_TLD_02 1803 0.32 0.82 0.07 170 RELAYCOUNTRY_JP 1771 0.29 0.80 0.03 171 PLING_QUERY 1730 0.51 0.78 0.36 172 XM_S_JOY_D 1707 0.47 0.77 0.32 173 TooManyTo_003 1705 1.57 0.77 1.98 174 TR_Caps_n_Bayes_99 1682 0.31 0.76 0.07 175 HTTPS_HTTP_MISMATCH 1666 0.64 0.75 0.58 176 MONEY_FRAUD_8 1657 0.26 0.75 0.00 177 XM_B_REG_HTML 1651 0.56 0.75 0.46 178 HTML_FONT_SIZE_HUGE 1633 0.33 0.74 0.11 179 KHOP_DYNAMIC 1592 0.72 0.72 0.73 180 XMHTMLBadTable_001 1559 0.49 0.71 0.37 181 XM_Body_Obfu01 1545 0.41 0.70 0.26 182 XMGppyBdWords 1538 0.32 0.70 0.13 183 RCVD_IN_IADB_VOUCHED 1532 2.51 0.69 3.44 184 BODY_ENHANCEMENT 1531 0.25 0.69 0.03 185 T_HTML_TAG_BALANCE_CENTER 1497 0.32 0.68 0.14 186 LongTLD 1482 0.35 0.67 0.18 187 LONG_JUNK_URI3 1481 0.24 0.67 0.02 188 URI_NOVOWEL 1478 0.51 0.67 0.43 189 XMSexyCombo_04 1475 0.28 0.67 0.08 190 RELAYCOUNTRY_ZA 1470 0.23 0.66 0.00 191 MONEY_FORM 1458 0.23 0.66 0.01 192 THIS_AD 1454 0.34 0.66 0.18 193 XM_UB95 1451 0.24 0.66 0.03 194 HTML_FONT_SIZE_LARGE 1449 0.34 0.66 0.18 195 REMOVE_BEFORE_LINK 1440 0.38 0.65 0.24 196 TooManyTo_004 1415 1.23 0.64 1.53 197 ADVANCE_FEE_5_NEW_FRM_MNY 1391 0.22 0.63 0.00 198 MONEY_ATM_CARD 1388 0.22 0.63 0.00 199 BAYES_05 1381 1.39 0.62 1.79 200 RELAYCOUNTRY_DE 1379 0.51 0.62 0.46 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 378059 90.10 93.40 88.40 2 DKIM_SIGNED 311087 72.47 71.96 72.74 3 XM_DK_Pass 305235 70.82 69.75 71.37 4 DKIM_VALID 287142 66.79 66.12 67.14 5 DCC_CHECK_NEGATIVE 270130 51.10 27.77 63.16 6 BAYES_50 252787 54.28 44.92 59.11 7 XMListUnsubscribeExists 207877 53.10 61.78 48.61 8 DKIM_VALID_AU 205207 50.03 53.99 47.98 9 DCC_CHECK 148590 47.01 70.73 34.74 10 XM_H_QuotedFrom 147854 39.12 47.93 34.57 11 T_TM2_M_HEADER_IN_MSG 135260 26.91 17.77 31.63 12 DKIM_VALID_EF 113277 24.19 19.74 26.49 13 HTML_FONT_LOW_CONTRAST 108952 27.35 30.98 25.48 14 FVGT_m_MULTI_ODD 89459 21.55 22.78 20.92 15 MIME_HTML_ONLY 88705 24.25 31.02 20.74 16 LOC_TINY_FONT_1 87408 23.80 30.29 20.44 17 MultiRelay 83469 17.79 14.45 19.52 18 XMSubLong 80931 19.65 21.06 18.92 19 ALL_TRUSTED 75165 12.85 3.70 17.58 20 T_KAM_HTML_FONT_INVALID 74862 17.49 17.45 17.50 21 XM_DKIMWhitelistDomains 58378 9.02 0.06 13.65 22 XM_Body_Dirty_Words 50156 13.24 16.17 11.73 23 XM_DK_Undo_02 47499 20.46 38.55 11.11 24 XM_Multi_Part_URI 45229 11.71 13.91 10.58 25 BAYES_99 43809 18.13 33.37 10.24 26 RCVD_IN_RP_SAFE 39849 7.77 4.76 9.32 27 BAYES_00 37866 6.31 1.39 8.85 28 RCVD_IN_RP_CERTIFIED 37710 7.18 4.00 8.82 29 BAYES_999 37460 15.43 28.33 8.76 30 TooManyTo_001 37096 7.78 6.06 8.67 31 LotsOfNums_01 36260 7.31 5.04 8.48 32 LOTS_OF_MONEY 35864 9.49 11.63 8.39 33 T_XMDrugObfuBody_14 34752 8.17 8.27 8.13 34 XM_Evil_Numbers_Gen 34174 9.64 12.84 7.99 35 HTML_IMAGE_RATIO_02 30940 9.48 13.83 7.23 36 BAYES_60 27343 6.43 6.49 6.39 37 TR_XM_DK_Bayes 27210 4.57 1.09 6.36 38 XM_B_Phish_Phrases 26808 6.62 7.31 6.27 39 MIME_QP_LONG_LINE 25513 4.68 2.18 5.97 40 XM_PDF 25486 4.23 0.89 5.96 41 TR_XM_DK_Bayes1 25089 4.21 1.01 5.87 42 RCVD_IN_IADB_LISTED 24080 4.08 1.08 5.63 43 DKIM_INVALID 23945 5.68 5.84 5.60 44 TR_DCC_Bayes_99 23881 12.75 26.63 5.58 45 XM_SendGrid 23499 4.59 2.84 5.49 46 XM_H_Long_From01 23364 6.09 7.31 5.46 47 FSL_BULK_SIG 21438 8.02 13.84 5.01 48 RELAYCOUNTRY_META 21309 9.26 17.54 4.98 49 RCVD_IN_IADB_SPF 21293 3.61 0.96 4.98 50 RCVD_IN_MSPIKE_H2 21063 4.14 2.63 4.93 51 HTML_IMAGE_RATIO_04 20962 6.05 8.28 4.90 52 TR_XM_DK_Bayes2 20949 3.55 0.95 4.90 53 BOTNET_IPINHOSTNAME 20051 7.43 12.72 4.69 54 RCVD_IN_IADB_SENDERID 18954 3.23 0.90 4.43 55 RCVD_IN_IADB_DK 18799 3.20 0.89 4.40 56 T_REMOTE_IMAGE 18082 5.21 7.11 4.23 57 T_TooManySym_01 17942 3.60 2.45 4.20 58 XMStrtUSub 17922 4.15 4.08 4.19 59 BAYES_80 17908 5.03 6.66 4.19 60 IN_ZIMBRA_NJ_WHITELIST 17614 2.72 0.02 4.12 61 BAYES_40 16487 3.02 1.40 3.86 62 XMSubMetaSx_00 15979 4.54 6.08 3.74 63 TR_XM_DocInvoice 15909 5.14 7.90 3.72 64 FROM_EXCESS_BASE64 15784 5.39 8.66 3.69 65 XMSexyCombo_05 15402 5.50 9.18 3.60 66 UNPARSEABLE_RELAY 15193 3.02 2.00 3.55 67 HTML_IMAGE_RATIO_06 15184 3.66 3.88 3.55 68 RCVD_IN_IADB_VOUCHED 14722 2.51 0.69 3.44 69 XMNumbers 14620 3.92 4.90 3.42 70 TVD_RCVD_IP 14012 2.28 0.35 3.28 71 TooManyTo_002 12165 2.18 0.90 2.84 72 TR_Symld_Words 12108 2.19 0.95 2.83 73 ANY_BOUNCE_MESSAGE 11950 5.22 9.93 2.79 74 BOUNCE_MESSAGE 11944 5.22 9.93 2.79 75 HTML_MIME_NO_HTML_TAG 11819 4.03 6.47 2.76 76 BAYES_20 11814 2.20 1.11 2.76 77 MPART_ALT_DIFF 11654 3.98 6.41 2.73 78 BAYES_95 10977 3.01 3.87 2.57 79 MIME_HTML_MOSTLY 10971 2.83 3.33 2.57 80 MAILING_LIST_MULTI 10027 1.94 1.17 2.34 81 HELO_NODOT 9520 1.56 0.26 2.23 82 XM_SPF_SoftFail 9146 2.77 3.99 2.14 83 RCVD_IN_IADB_OPTIN 9025 1.57 0.53 2.11 84 XM_DK_Undo_01 8837 1.76 1.15 2.07 85 XM_UncommonTLD01 8694 4.80 10.17 2.03 86 TM2_M_URI_OPT_OUT 8615 2.47 3.34 2.01 87 TooManyTo_003 8479 1.57 0.77 1.98 88 RCVD_IN_MSPIKE_WL 8400 1.48 0.53 1.96 89 RCVD_IN_MSPIKE_H3 8395 1.47 0.53 1.96 90 XMDiploma_00 8384 2.03 2.17 1.96 91 HTML_IMAGE_RATIO_08 8205 2.29 3.01 1.92 92 IN_HORDE_ADDRESS_BOOK 8110 1.28 0.07 1.90 93 T_TooManySym_02 7696 1.39 0.61 1.80 94 BAYES_05 7643 1.39 0.62 1.79 95 SUBJ_ALL_CAPS 7551 1.99 2.41 1.77 96 XM_DIRTYINTL 7450 2.15 2.95 1.74 97 XM_CamelCaseFrm001 7410 2.09 2.78 1.73 98 XMCapTrack 7264 4.57 10.11 1.70 99 XMBody_78 7035 1.41 0.95 1.64 100 TooManyTo_004 6532 1.23 0.64 1.53 101 URI_HEX 6494 5.15 12.17 1.52 102 XMStockSpam_06 6258 1.31 1.01 1.46 103 USER_IN_DEF_DKIM_WL 6256 0.98 0.05 1.46 104 T_XMDrugObfuBody_08 6167 1.54 1.74 1.44 105 RELAYCOUNTRY_CA 6164 1.90 2.78 1.44 106 BOTNET 5956 9.03 23.80 1.39 107 XM_H_PHPOS 5789 1.20 0.91 1.35 108 XMPhish11 5726 1.21 0.95 1.34 109 MIME_HTML_ONLY_MULTI 5545 1.96 3.24 1.30 110 XM_OfRef6 5539 1.89 3.04 1.30 111 TooManyTo_005 5507 1.04 0.57 1.29 112 XMGenDplmaNmb 5469 1.27 1.26 1.28 113 XM_GoogleGroups 5424 0.96 0.37 1.27 114 NO_DNS_FOR_FROM 4940 1.26 1.45 1.16 115 XM_ProductURIs 4869 1.20 1.32 1.14 116 UNTRUSTED_Relay 4743 4.53 11.16 1.11 117 URI_TRY_3LD 4657 1.13 1.22 1.09 118 DKIM_ADSP_CUSTOM_MED 4539 1.04 0.99 1.06 119 RELAYCOUNTRY_GB 4493 1.02 0.97 1.05 120 TM2_M_VERY_LONG_WORD 4139 1.06 1.25 0.97 121 XM_H_Long_From02 4004 1.23 1.80 0.94 122 XMBdyGiftCard01 3961 1.37 2.22 0.93 123 T_FILL_THIS_FORM_SHORT 3676 0.93 1.05 0.86 124 XMSubMetaI_00 3553 1.21 1.94 0.83 125 XM_H_PHPMailer 3511 0.70 0.46 0.82 126 SpammyFromTLD_01 3381 0.92 1.18 0.79 127 NML_ADSP_CUSTOM_MED 3244 0.82 0.93 0.76 128 TR_MetaPhish_Combo_01 3141 0.68 0.58 0.73 129 KHOP_DYNAMIC 3111 0.72 0.72 0.73 130 T_XMHurry_00 3108 0.98 1.48 0.73 131 XM_UB50 3011 2.18 5.03 0.70 132 T_TooManySym_03 2826 0.47 0.10 0.66 133 DATE_IN_FUTURE_12_24 2731 0.43 0.03 0.64 134 XMBrknScrpt_02 2705 0.60 0.54 0.63 135 XMLngstWrd_00 2684 0.51 0.29 0.63 136 USER_IN_WHITELIST 2645 0.41 0.00 0.62 137 T_XMDrugObfuBody_00 2625 1.09 2.00 0.61 138 MISSING_HEADERS 2573 1.99 4.67 0.60 139 XMNoVowels 2571 0.51 0.34 0.60 140 SHORT_HELO_AND_INLINE_IMAGE 2551 0.42 0.07 0.60 141 HTTPS_HTTP_MISMATCH 2501 0.64 0.75 0.58 142 XMLngstWrd_01 2494 0.47 0.26 0.58 143 XM_RXBody 2476 0.71 0.95 0.58 144 XMBody_17 2474 0.95 1.67 0.58 145 T_OBFU_PDF_ATTACH 2471 0.44 0.18 0.58 146 TM2_M_BODY_EMPTY 2390 0.42 0.16 0.56 147 AC_DIV_BONANZA 2386 0.40 0.11 0.56 148 T_Symld_Words_02 2385 0.87 1.47 0.56 149 XMBody_95 2360 0.41 0.13 0.55 150 TR_XM_RelayPhish 2290 0.74 1.14 0.54 151 HTML_TAG_BALANCE_BODY 2280 0.68 0.96 0.53 152 FORGED_GMAIL_RCVD 2262 0.64 0.85 0.53 153 HTML_IMAGE_ONLY_32 2204 0.46 0.34 0.52 154 XM_ShortIntro_01 2200 0.48 0.41 0.51 155 XMMoneyMeta_00 2193 0.69 1.02 0.51 156 RCVD_IN_SORBS_DUL 2191 0.48 0.43 0.51 157 XMSubMetaSxObfu_02 2179 0.40 0.19 0.51 158 T_MANY_PILL_PRICE 2115 0.34 0.04 0.49 159 XMDateMe_00 2102 0.40 0.21 0.49 160 XMGappySubj_01 2091 0.44 0.34 0.49 161 HTML_FONT_FACE_BAD 2074 0.61 0.84 0.48 162 XM_B_COPY_HTML 2061 0.50 0.53 0.48 163 TR_LOTS_OF_MONEY3 2059 0.89 1.68 0.48 164 XM_H_PHPOS_M 2056 0.40 0.25 0.48 165 XM_B_REG_HTML 1987 0.56 0.75 0.46 166 RELAYCOUNTRY_DE 1946 0.51 0.62 0.46 167 DKIM_ADSP_NXDOMAIN 1936 1.03 2.16 0.45 168 RDNS_DYNAMIC 1929 0.59 0.86 0.45 169 RELAYCOUNTRY_AU 1905 0.66 1.07 0.45 170 HTML_IMAGE_ONLY_28 1905 0.48 0.56 0.45 171 XMSubMetaSxObfu_03 1847 0.49 0.62 0.43 172 XMPhish14 1832 0.71 1.26 0.43 173 URI_NOVOWEL 1820 0.51 0.67 0.43 174 XMHTML_After_End 1814 0.77 1.43 0.42 175 FILL_THIS_FORM 1805 0.68 1.19 0.42 176 TVD_SPACE_RATIO 1669 0.36 0.30 0.39 177 HTML_IMAGE_ONLY_20 1642 0.32 0.20 0.38 178 XMSexyCombo_01 1635 0.69 1.29 0.38 179 XMSubNoVowel 1618 0.38 0.39 0.38 180 TR_LOTS_OF_MONEY2 1615 0.61 1.05 0.38 181 T_MONEY_PERCENT 1615 0.61 1.05 0.38 182 TO_MALFORMED 1591 1.14 2.63 0.37 183 XMHTMLBadTable_001 1589 0.49 0.71 0.37 184 HTML_IMAGE_ONLY_24 1562 0.33 0.26 0.37 185 PLING_QUERY 1552 0.51 0.78 0.36 186 TM2_M_A_HREF_HREF 1546 0.37 0.39 0.36 187 GMD_PDF_EMPTY_BODY 1536 0.28 0.14 0.36 188 XMSlimDrugH 1528 0.44 0.61 0.36 189 XMRcvdHeader_15 1524 0.23 0.00 0.36 190 DIET_1 1513 0.79 1.63 0.35 191 HTML_IMAGE_ONLY_16 1400 0.33 0.33 0.33 192 T_FILL_THIS_FORM_LONG 1376 0.59 1.12 0.32 193 XM_S_JOY_D 1362 0.47 0.77 0.32 194 XMSolicitRefs_0 1358 0.31 0.30 0.32 195 XMSubEmpty 1350 0.27 0.18 0.32 196 XM_H_Undi_Recip 1327 0.28 0.24 0.31 197 FILL_THIS_FORM_LOAN 1269 0.36 0.47 0.30 198 XM_B_TRADE_HTML 1207 0.30 0.33 0.28 199 XMPhish30 1197 0.54 1.03 0.28 200 RCVD_IN_BL_SPAMCOP_NET 1196 0.85 1.94 0.28 ----------------------------------------------------------------------