Email: 776477 Autolearn: 0 AvgScore: 4.62 AvgScanTime: 4.09 sec Spam: 273778 Autolearn: 0 AvgScore: 14.95 AvgScanTime: 4.38 sec Ham: 502699 Autolearn: 0 AvgScore: -1.00 AvgScanTime: 3.94 sec Time Spent Running SA: 882.91 hours Time Spent Processing Spam: 332.95 hours Time Spent Processing Ham: 549.97 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 266207 87.32 97.23 81.93 2 DKIM_SIGNED 153558 65.33 56.09 70.37 3 DCC_CHECK 149257 42.37 54.52 35.76 4 XM_DK_Pass 148388 63.86 54.20 69.12 5 BAYES_50 145531 56.49 53.16 58.30 6 DKIM_VALID 140905 60.36 51.47 65.20 7 XMListUnsubscribeExists 131542 47.69 48.05 47.50 8 DCC_CHECK_NEGATIVE 121338 56.03 44.32 62.40 9 DKIM_VALID_AU 110938 43.69 40.52 45.42 10 BOTNET 110670 15.65 40.42 2.16 11 XM_H_QuotedFrom 103005 34.95 37.62 33.50 12 MIME_HTML_ONLY 87564 22.47 31.98 17.29 13 RCVD_IN_RP_RNBL 86151 11.32 31.47 0.34 14 URI_HEX 73167 10.69 26.72 1.95 15 XM_DK_Undo_02 71742 15.13 26.20 9.09 16 ANY_BOUNCE_MESSAGE 69069 14.47 25.23 8.61 17 BOUNCE_MESSAGE 69069 14.47 25.23 8.60 18 NUMERIC_HTTP_ADDR 68498 8.86 25.02 0.07 19 HTML_FONT_LOW_CONTRAST 68431 25.82 25.00 26.27 20 XMCapTrack 68330 9.66 24.96 1.33 21 LOC_TINY_FONT_1 65076 21.13 23.77 19.69 22 BAYES_99 64535 13.46 23.57 7.95 23 DATE_IN_PAST_06_12 63252 8.36 23.10 0.32 24 XMSubLong 55197 20.81 20.16 21.17 25 XM_URI_RBL 54630 7.23 19.95 0.30 26 URIBL_BLACK 53477 6.92 19.53 0.05 27 BAYES_999 52320 11.07 19.11 6.69 28 TR_DCC_Bayes_99 51608 9.27 18.85 4.05 29 FVGT_m_MULTI_ODD 50440 19.80 18.42 20.55 30 DKIM_VALID_EF 45043 22.07 16.45 25.13 31 T_TM2_M_HEADER_IN_MSG 41712 24.48 15.24 29.51 32 FROM_EXCESS_BASE64 40939 7.62 14.95 3.63 33 T_KAM_HTML_FONT_INVALID 37054 14.90 13.53 15.64 34 XM_Multi_Part_URI 34502 11.49 12.60 10.88 35 XM_Body_Dirty_Words 34342 13.61 12.54 14.18 36 HTML_IMAGE_RATIO_02 33356 9.68 12.18 8.31 37 T_REMOTE_IMAGE 33103 7.24 12.09 4.59 38 HTML_MIME_NO_HTML_TAG 32725 5.69 11.95 2.28 39 MIME_HEADER_CTYPE_ONLY 28782 3.79 10.51 0.13 40 BODY_URI_ONLY 28778 3.79 10.51 0.12 41 MISSING_HEADERS 28719 4.13 10.49 0.67 42 HTML_SHORT_LINK_IMG_1 28603 3.70 10.45 0.03 43 MultiRelay 27431 15.18 10.02 17.99 44 RELAYCOUNTRY_META 27033 6.59 9.87 4.80 45 FSL_BULK_SIG 26173 6.87 9.56 5.40 46 XM_Evil_Numbers_Gen 25255 7.79 9.22 7.01 47 HTML_IMAGE_ONLY_04 25154 3.27 9.19 0.05 48 LOTS_OF_MONEY 22780 8.49 8.32 8.59 49 BOTNET_IPINHOSTNAME 22698 6.27 8.29 5.17 50 BAYES_80 22611 5.21 8.26 3.55 51 HTML_SHORT_CENTER 21531 2.77 7.86 0.00 52 XMSexyCombo_05 21522 5.05 7.86 3.51 53 BAYES_60 19787 6.35 7.23 5.87 54 T_XMDrugObfuBody_14 17758 7.33 6.49 7.79 55 XMNumbers 16307 4.22 5.96 3.27 56 XMSubMetaSx_00 16262 6.22 5.94 6.37 57 MPART_ALT_DIFF 15890 3.51 5.80 2.25 58 TR_XM_DocInvoice 15673 4.37 5.72 3.63 59 UNTRUSTED_Relay 15344 2.79 5.60 1.26 60 HTML_IMAGE_RATIO_04 14588 5.26 5.33 5.22 61 XM_H_Long_From01 14005 5.41 5.12 5.57 62 XM_B_Phish_Phrases 13983 5.19 5.11 5.23 63 BAYES_95 13090 3.14 4.78 2.24 64 DKIM_INVALID 12653 4.97 4.62 5.16 65 TooManyTo_001 12413 6.41 4.53 7.44 66 XM_UncommonTLD01 11197 3.31 4.09 2.88 67 LotsOfNums_01 11030 6.86 4.03 8.40 68 XMStrtUSub 10097 3.75 3.69 3.79 69 HTML_IMAGE_RATIO_06 9687 3.30 3.54 3.17 70 MIME_HTML_MOSTLY 9671 2.47 3.53 1.90 71 TM2_M_URI_OPT_OUT 8981 2.26 3.28 1.71 72 XM_DIRTYINTL 7717 2.25 2.82 1.95 73 XM_UB50 7450 1.45 2.72 0.75 74 MIME_HTML_ONLY_MULTI 7327 1.71 2.68 1.18 75 MIME_QP_LONG_LINE 6771 5.07 2.47 6.48 76 DATE_IN_PAST_03_06 6753 0.94 2.47 0.10 77 T_XMDrugObfuBody_08 6741 1.76 2.46 1.38 78 RELAYCOUNTRY_CA 6635 1.75 2.42 1.39 79 XM_SendGrid 6510 4.98 2.38 6.40 80 XM_SPF_SoftFail 6261 2.28 2.29 2.27 81 HTML_IMAGE_RATIO_08 6038 2.17 2.21 2.16 82 DIET_1 5932 0.98 2.17 0.33 83 T_TooManySym_01 5456 4.49 1.99 5.85 84 XM_CamelCaseFrm001 5299 2.01 1.94 2.05 85 XMDiploma_00 5217 1.72 1.91 1.62 86 RCVD_IN_MSPIKE_H2 4945 3.99 1.81 5.18 87 XMSubMetaI_00 4867 1.11 1.78 0.74 88 XM_OfRef6 4846 1.42 1.77 1.23 89 RCVD_IN_RP_SAFE 4640 6.53 1.69 9.16 90 XM_H_Long_From02 4369 1.16 1.60 0.93 91 SUBJ_ALL_CAPS 4221 1.61 1.54 1.64 92 XMGenDplmaNmb 3959 1.24 1.45 1.13 93 MultiRelay_Combo 3955 0.61 1.44 0.16 94 MultiRelay_CC 3955 0.61 1.44 0.16 95 RCVD_IN_RP_CERTIFIED 3890 6.07 1.42 8.61 96 HTML_IMAGE_ONLY_08 3882 0.56 1.42 0.10 97 SpammyFromTLD_02 3855 0.70 1.41 0.32 98 T_XMDrugObfuBody_00 3592 0.93 1.31 0.72 99 RCVD_IN_BL_SPAMCOP_NET 3568 0.69 1.30 0.36 100 URI_TRY_3LD 3427 1.02 1.25 0.90 101 XMBdyGiftCard01 3372 1.18 1.23 1.16 102 RCVD_IN_PSBL 3339 0.49 1.22 0.10 103 XM_BadFromFormat 3262 0.53 1.19 0.17 104 TM2_M_VERY_LONG_WORD 3120 0.93 1.14 0.81 105 RCVD_IN_IADB_LISTED 3080 4.52 1.12 6.38 106 XMPhish11 3048 1.09 1.11 1.07 107 BAYES_40 2891 2.98 1.06 4.03 108 XMMoneyMeta_00 2837 0.67 1.04 0.46 109 XMBody_17 2832 0.78 1.03 0.64 110 XM_DK_Undo_01 2816 1.48 1.03 1.73 111 SpammyFromTLD_01 2796 0.76 1.02 0.62 112 XMSlimDrugH 2691 0.54 0.98 0.30 113 RCVD_IN_IADB_SPF 2654 3.94 0.97 5.56 114 RELAYCOUNTRY_FR 2628 0.47 0.96 0.20 115 UNPARSEABLE_RELAY 2604 2.36 0.95 3.13 116 TR_XM_RelayPhish 2598 0.73 0.95 0.62 117 T_XMHurry_00 2595 0.75 0.95 0.64 118 MAILING_LIST_MULTI 2591 1.66 0.95 2.04 119 XM_UB99 2578 0.34 0.94 0.02 120 XMSexyCombo_01 2563 1.63 0.94 2.01 121 XM_H_PHPOS 2556 0.99 0.93 1.03 122 BOTNET_NORDNS 2551 0.34 0.93 0.01 123 RCVD_IN_IADB_SENDERID 2535 3.51 0.93 4.92 124 ALL_TRUSTED 2522 13.76 0.92 20.75 125 RCVD_IN_IADB_DK 2492 3.44 0.91 4.82 126 XMPhish30 2393 0.54 0.87 0.35 127 XM_ReplyTo_Bdy 2309 0.30 0.84 0.00 128 BAYES_20 2282 2.23 0.83 2.99 129 XMHTML_After_End 2282 0.53 0.83 0.37 130 RELAYCOUNTRY_GB 2273 0.92 0.83 0.97 131 HTML_FONT_SIZE_LARGE 2251 0.39 0.82 0.16 132 URIBL_DBL_SPAM 2245 0.32 0.82 0.04 133 XMBody_78 2203 0.51 0.80 0.35 134 PLING_QUERY 2194 0.51 0.80 0.35 135 T_HTML_TAG_BALANCE_CENTER 2180 0.34 0.80 0.10 136 XMClaimOffer 2146 0.41 0.78 0.21 137 TR_Symld_Words 2141 1.29 0.78 1.56 138 T_MONEY_PERCENT 2125 0.40 0.78 0.19 139 TR_LOTS_OF_MONEY2 2125 0.40 0.78 0.19 140 XMStockSpam_06 2115 0.81 0.77 0.82 141 SUBJ_DOLLARS 2094 0.41 0.76 0.21 142 DKIM_ADSP_NXDOMAIN 2066 0.49 0.75 0.34 143 XMSubMetaI_01 2027 0.29 0.74 0.04 144 XM_UB60 1978 0.31 0.72 0.08 145 TR_Caps_n_Bayes_99 1940 0.29 0.71 0.06 146 BAYES_00 1939 8.81 0.71 13.22 147 URI_NOVOWEL 1924 0.55 0.70 0.46 148 RCVD_IN_IADB_VOUCHED 1913 2.96 0.70 4.20 149 XM_ProductURIs 1901 0.92 0.69 1.04 150 HTML_FONT_FACE_BAD 1886 0.56 0.69 0.49 151 XMPhish14 1801 0.46 0.66 0.35 152 XMWghtMeta_00 1791 0.25 0.65 0.03 153 XMBrknScrpt_02 1780 0.54 0.65 0.48 154 T_TooManySym_02 1772 1.49 0.65 1.95 155 TR_MetaPhish_Combo_01 1765 1.14 0.64 1.42 156 HTML_TAG_BALANCE_BODY 1708 0.52 0.62 0.46 157 T_Symld_Words_02 1696 0.60 0.62 0.58 158 RELAYCOUNTRY_IN 1664 0.27 0.61 0.08 159 TR_Mismatch_TLD_02 1642 0.25 0.60 0.06 160 XM_B_COPY_HTML 1629 0.49 0.60 0.44 161 RELAYCOUNTRY_AT 1623 0.33 0.59 0.19 162 HTTPS_HTTP_MISMATCH 1596 0.56 0.58 0.55 163 XM_Body_Obfu01 1587 0.38 0.58 0.27 164 XM_UB80 1567 0.25 0.57 0.08 165 XM_PDF 1562 3.05 0.57 4.39 166 T_FROM_SUSPICIOUS_NTLD 1554 0.23 0.57 0.04 167 BODY_ENHANCEMENT 1527 0.20 0.56 0.01 168 MPART_ALT_DIFF_COUNT 1504 0.40 0.55 0.31 169 T_FILL_THIS_FORM_SHORT 1485 0.74 0.54 0.85 170 REMOVE_BEFORE_LINK 1484 0.37 0.54 0.28 171 NO_PRESCRIPTION 1477 0.19 0.54 0.00 172 FVGT_m_MULTI_ODD_EMAIL 1445 0.21 0.53 0.04 173 XM_UB999 1444 0.20 0.53 0.02 174 XMSubMetaSxObfu_03 1437 2.20 0.52 3.11 175 XM_H_PHPMailer 1427 0.61 0.52 0.66 176 RELAYCOUNTRY_CN 1424 0.22 0.52 0.05 177 NO_DNS_FOR_FROM 1418 0.39 0.52 0.32 178 RELAYCOUNTRY_AU 1406 0.50 0.51 0.49 179 HTML_FONT_SIZE_HUGE 1402 0.44 0.51 0.41 180 HTML_IMAGE_ONLY_28 1390 0.40 0.51 0.34 181 TR_XM_DK_Bayes 1385 5.12 0.51 7.64 182 XMHTMLBadTable_001 1371 0.54 0.50 0.57 183 DKIM_ADSP_CUSTOM_MED 1370 0.78 0.50 0.93 184 LongTLD 1360 0.28 0.50 0.16 185 XM_RXBody 1346 0.29 0.49 0.18 186 TM2_M_A_HREF_HREF 1340 0.54 0.49 0.56 187 GUARANTEED_100_PERCENT 1338 0.18 0.49 0.01 188 RDNS_DYNAMIC 1322 0.41 0.48 0.37 189 RCVD_IN_MSPIKE_WL 1316 1.38 0.48 1.87 190 XMSexyCombo_04 1303 0.29 0.48 0.20 191 RCVD_IN_MSPIKE_H3 1302 1.38 0.48 1.87 192 XMSubject_09 1298 0.19 0.47 0.03 193 BANG_GUAR 1275 0.18 0.47 0.02 194 NML_ADSP_CUSTOM_MED 1272 0.59 0.46 0.66 195 XM_HighProb1 1267 0.17 0.46 0.01 196 XM_Hitman 1256 0.20 0.46 0.05 197 FILL_THIS_FORM 1210 0.44 0.44 0.44 198 LOW_PRICE 1209 0.25 0.44 0.15 199 TR_XM_DK_Bayes1 1209 4.77 0.44 7.13 200 FORGED_GMAIL_RCVD 1207 0.47 0.44 0.48 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 411845 87.32 97.23 81.93 2 DKIM_SIGNED 353739 65.33 56.09 70.37 3 XM_DK_Pass 347448 63.86 54.20 69.12 4 DKIM_VALID 327780 60.36 51.47 65.20 5 DCC_CHECK_NEGATIVE 313685 56.03 44.32 62.40 6 BAYES_50 293064 56.49 53.16 58.30 7 XMListUnsubscribeExists 238775 47.69 48.05 47.50 8 DKIM_VALID_AU 228310 43.69 40.52 45.42 9 DCC_CHECK 179742 42.37 54.52 35.76 10 XM_H_QuotedFrom 168410 34.95 37.62 33.50 11 T_TM2_M_HEADER_IN_MSG 148340 24.48 15.24 29.51 12 HTML_FONT_LOW_CONTRAST 132038 25.82 25.00 26.27 13 DKIM_VALID_EF 126316 22.07 16.45 25.13 14 XMSubLong 106400 20.81 20.16 21.17 15 ALL_TRUSTED 104288 13.76 0.92 20.75 16 FVGT_m_MULTI_ODD 103309 19.80 18.42 20.55 17 LOC_TINY_FONT_1 98989 21.13 23.77 19.69 18 MultiRelay 90440 15.18 10.02 17.99 19 MIME_HTML_ONLY 86900 22.47 31.98 17.29 20 T_KAM_HTML_FONT_INVALID 78635 14.90 13.53 15.64 21 XM_Body_Dirty_Words 71306 13.61 12.54 14.18 22 BAYES_00 66460 8.81 0.71 13.22 23 XM_DKIMWhitelistDomains 62341 8.03 0.02 12.40 24 XM_Multi_Part_URI 54685 11.49 12.60 10.88 25 RCVD_IN_RP_SAFE 46056 6.53 1.69 9.16 26 XM_DK_Undo_02 45709 15.13 26.20 9.09 27 RCVD_IN_RP_CERTIFIED 43276 6.07 1.42 8.61 28 ANY_BOUNCE_MESSAGE 43263 14.47 25.23 8.61 29 BOUNCE_MESSAGE 43256 14.47 25.23 8.60 30 LOTS_OF_MONEY 43161 8.49 8.32 8.59 31 LotsOfNums_01 42235 6.86 4.03 8.40 32 HTML_IMAGE_RATIO_02 41773 9.68 12.18 8.31 33 BAYES_99 39967 13.46 23.57 7.95 34 T_XMDrugObfuBody_14 39143 7.33 6.49 7.79 35 TR_XM_DK_Bayes 38398 5.12 0.51 7.64 36 TooManyTo_001 37395 6.41 4.53 7.44 37 TR_XM_DK_Bayes1 35827 4.77 0.44 7.13 38 XM_Evil_Numbers_Gen 35257 7.79 9.22 7.01 39 BAYES_999 33631 11.07 19.11 6.69 40 MIME_QP_LONG_LINE 32567 5.07 2.47 6.48 41 XM_SendGrid 32189 4.98 2.38 6.40 42 RCVD_IN_IADB_LISTED 32053 4.52 1.12 6.38 43 XMSubMetaSx_00 32029 6.22 5.94 6.37 44 TR_XM_DK_Bayes2 31052 4.13 0.38 6.18 45 BAYES_60 29509 6.35 7.23 5.87 46 T_TooManySym_01 29386 4.49 1.99 5.85 47 XM_H_Long_From01 28018 5.41 5.12 5.57 48 RCVD_IN_IADB_SPF 27968 3.94 0.97 5.56 49 FSL_BULK_SIG 27155 6.87 9.56 5.40 50 XM_B_Phish_Phrases 26314 5.19 5.11 5.23 51 HTML_IMAGE_RATIO_04 26257 5.26 5.33 5.22 52 RCVD_IN_MSPIKE_H2 26015 3.99 1.81 5.18 53 BOTNET_IPINHOSTNAME 25984 6.27 8.29 5.17 54 DKIM_INVALID 25959 4.97 4.62 5.16 55 RCVD_IN_IADB_SENDERID 24743 3.51 0.93 4.92 56 RCVD_IN_IADB_DK 24243 3.44 0.91 4.82 57 RELAYCOUNTRY_META 24118 6.59 9.87 4.80 58 T_REMOTE_IMAGE 23079 7.24 12.09 4.59 59 XM_PDF 22093 3.05 0.57 4.39 60 RCVD_IN_IADB_VOUCHED 21091 2.96 0.70 4.20 61 TR_DCC_Bayes_99 20367 9.27 18.85 4.05 62 BAYES_40 20235 2.98 1.06 4.03 63 IN_ZIMBRA_NJ_WHITELIST 19360 2.50 0.02 3.85 64 XMStrtUSub 19058 3.75 3.69 3.79 65 TR_XM_DocInvoice 18245 4.37 5.72 3.63 66 FROM_EXCESS_BASE64 18231 7.62 14.95 3.63 67 BAYES_80 17821 5.21 8.26 3.55 68 XMSexyCombo_05 17667 5.05 7.86 3.51 69 XMNumbers 16454 4.22 5.96 3.27 70 HTML_IMAGE_RATIO_06 15914 3.30 3.54 3.17 71 TVD_RCVD_IP 15722 2.07 0.13 3.13 72 UNPARSEABLE_RELAY 15713 2.36 0.95 3.13 73 XMSubMetaSxObfu_03 15610 2.20 0.52 3.11 74 BAYES_20 15016 2.23 0.83 2.99 75 XM_UncommonTLD01 14480 3.31 4.09 2.88 76 RCVD_IN_IADB_OPTIN 13004 1.83 0.43 2.59 77 TO_MALFORMED 12741 1.65 0.04 2.53 78 HTML_MIME_NO_HTML_TAG 11481 5.69 11.95 2.28 79 XM_SPF_SoftFail 11406 2.28 2.29 2.27 80 MPART_ALT_DIFF 11327 3.51 5.80 2.25 81 BAYES_95 11282 3.14 4.78 2.24 82 TO_IN_SUBJ 11137 1.44 0.02 2.22 83 BOTNET 10860 15.65 40.42 2.16 84 HTML_IMAGE_RATIO_08 10847 2.17 2.21 2.16 85 TooManyTo_002 10695 1.52 0.40 2.13 86 XM_CamelCaseFrm001 10304 2.01 1.94 2.05 87 MAILING_LIST_MULTI 10261 1.66 0.95 2.04 88 XMSexyCombo_01 10089 1.63 0.94 2.01 89 URI_HEX 9821 10.69 26.72 1.95 90 XM_DIRTYINTL 9786 2.25 2.82 1.95 91 T_TooManySym_02 9783 1.49 0.65 1.95 92 MIME_HTML_MOSTLY 9533 2.47 3.53 1.90 93 RCVD_IN_MSPIKE_WL 9385 1.38 0.48 1.87 94 RCVD_IN_MSPIKE_H3 9381 1.38 0.48 1.87 95 BAYES_05 9343 1.35 0.41 1.86 96 XM_DK_Undo_01 8677 1.48 1.03 1.73 97 TM2_M_URI_OPT_OUT 8572 2.26 3.28 1.71 98 HELO_NODOT 8546 1.18 0.22 1.70 99 SUBJ_ALL_CAPS 8254 1.61 1.54 1.64 100 XMDiploma_00 8147 1.72 1.91 1.62 101 TR_Symld_Words 7860 1.29 0.78 1.56 102 IN_HORDE_ADDRESS_BOOK 7804 1.02 0.04 1.55 103 INVALID_MSGID 7181 0.98 0.14 1.43 104 TooManyTo_003 7146 1.04 0.33 1.42 105 TR_MetaPhish_Combo_01 7116 1.14 0.64 1.42 106 RELAYCOUNTRY_CA 6974 1.75 2.42 1.39 107 T_XMDrugObfuBody_08 6924 1.76 2.46 1.38 108 XMCapTrack 6696 9.66 24.96 1.33 109 USER_IN_DEF_DKIM_WL 6389 0.84 0.04 1.27 110 UNTRUSTED_Relay 6317 2.79 5.60 1.26 111 XM_OfRef6 6192 1.42 1.77 1.23 112 MIXED_ES 6044 0.80 0.06 1.20 113 MIME_HTML_ONLY_MULTI 5948 1.71 2.68 1.18 114 XMBdyGiftCard01 5815 1.18 1.23 1.16 115 XMGenDplmaNmb 5704 1.24 1.45 1.13 116 XMPhish11 5385 1.09 1.11 1.07 117 XM_ProductURIs 5221 0.92 0.69 1.04 118 TooManyTo_004 5174 0.75 0.24 1.03 119 XM_H_PHPOS 5160 0.99 0.93 1.03 120 XM_GoogleGroups 5087 0.75 0.28 1.01 121 RELAYCOUNTRY_GB 4865 0.92 0.83 0.97 122 DKIM_ADSP_CUSTOM_MED 4698 0.78 0.50 0.93 123 XM_H_Long_From02 4674 1.16 1.60 0.93 124 URI_TRY_3LD 4508 1.02 1.25 0.90 125 TooManyTo_005 4288 0.63 0.22 0.85 126 T_FILL_THIS_FORM_SHORT 4254 0.74 0.54 0.85 127 XMStockSpam_06 4139 0.81 0.77 0.82 128 TM2_M_VERY_LONG_WORD 4095 0.93 1.14 0.81 129 XM_UB50 3778 1.45 2.72 0.75 130 XMSubMetaI_00 3721 1.11 1.78 0.74 131 T_XMDrugObfuBody_00 3629 0.93 1.31 0.72 132 MISSING_HEADERS 3388 4.13 10.49 0.67 133 XM_H_PHPMailer 3332 0.61 0.52 0.66 134 NML_ADSP_CUSTOM_MED 3314 0.59 0.46 0.66 135 T_XMHurry_00 3229 0.75 0.95 0.64 136 XMBody_17 3222 0.78 1.03 0.64 137 XMNoVowels 3103 0.53 0.37 0.62 138 SpammyFromTLD_01 3095 0.76 1.02 0.62 139 TR_XM_RelayPhish 3095 0.73 0.95 0.62 140 T_TooManySym_03 3082 0.43 0.11 0.61 141 USER_IN_WHITELIST 3060 0.39 0.00 0.61 142 XMBody_95 3012 0.44 0.14 0.60 143 T_Symld_Words_02 2927 0.60 0.62 0.58 144 XM_shorewaves_Whitelist 2918 0.38 0.00 0.58 145 XMHTMLBadTable_001 2843 0.54 0.50 0.57 146 XMLngstWrd_00 2820 0.46 0.26 0.56 147 TM2_M_A_HREF_HREF 2815 0.54 0.49 0.56 148 HTTPS_HTTP_MISMATCH 2781 0.56 0.58 0.55 149 URIBL_RHS_DOB 2759 0.41 0.15 0.55 150 T_OBFU_PDF_ATTACH 2659 0.40 0.16 0.53 151 XMGappySubj_01 2592 0.43 0.28 0.52 152 XMLngstWrd_01 2574 0.42 0.24 0.51 153 RELAYCOUNTRY_AU 2483 0.50 0.51 0.49 154 HTML_FONT_FACE_BAD 2464 0.56 0.69 0.49 155 T_FROM_GOV_SPOOF 2442 0.36 0.13 0.49 156 FORGED_GMAIL_RCVD 2434 0.47 0.44 0.48 157 XMBrknScrpt_02 2422 0.54 0.65 0.48 158 XMSubNoVowel 2410 0.38 0.21 0.48 159 XMSubMetaSxObfu_02 2366 0.37 0.18 0.47 160 AC_DIV_BONANZA 2347 0.33 0.08 0.47 161 HTML_TAG_BALANCE_BODY 2332 0.52 0.62 0.46 162 XMMoneyMeta_00 2327 0.67 1.04 0.46 163 URI_NOVOWEL 2320 0.55 0.70 0.46 164 RELAYCOUNTRY_DE 2255 0.44 0.43 0.45 165 FILL_THIS_FORM 2228 0.44 0.44 0.44 166 SHORT_HELO_AND_INLINE_IMAGE 2215 0.30 0.04 0.44 167 XM_B_COPY_HTML 2212 0.49 0.60 0.44 168 XM_ShortIntro_01 2163 0.42 0.41 0.43 169 XM_B_REG_HTML 2134 0.38 0.31 0.42 170 RCVD_IN_SORBS_DUL 2126 0.31 0.11 0.42 171 XMDateMe_00 2091 0.35 0.23 0.42 172 HTML_FONT_SIZE_HUGE 2038 0.44 0.51 0.41 173 XM_D_tchamptons_WL 1874 0.24 0.00 0.37 174 T_FROM_GOV_DKIM_AU 1862 0.26 0.07 0.37 175 TO_NO_BRKTS_HTML_ONLY 1854 0.28 0.12 0.37 176 RDNS_DYNAMIC 1852 0.41 0.48 0.37 177 TM2_M_BODY_EMPTY 1851 0.27 0.09 0.37 178 XMHTML_After_End 1849 0.53 0.83 0.37 179 T_FILL_THIS_FORM_LONG 1847 0.38 0.41 0.37 180 XM_H_PHPOS_M 1815 0.35 0.33 0.36 181 RCVD_IN_BL_SPAMCOP_NET 1801 0.69 1.30 0.36 182 HTML_IMAGE_ONLY_32 1790 0.31 0.24 0.36 183 XMPhish30 1779 0.54 0.87 0.35 184 XMBody_78 1744 0.51 0.80 0.35 185 PLING_QUERY 1741 0.51 0.80 0.35 186 T_FILL_THIS_FORM_LOAN 1739 0.36 0.38 0.35 187 XMPhish14 1739 0.46 0.66 0.35 188 RCVD_IN_RP_RNBL 1732 11.32 31.47 0.34 189 HTML_IMAGE_ONLY_28 1720 0.40 0.51 0.34 190 DKIM_ADSP_NXDOMAIN 1701 0.49 0.75 0.34 191 XM_B_TRADE_HTML 1677 0.31 0.26 0.33 192 DIET_1 1656 0.98 2.17 0.33 193 NO_DNS_FOR_FROM 1632 0.39 0.52 0.32 194 DATE_IN_PAST_06_12 1628 8.36 23.10 0.32 195 SpammyFromTLD_02 1592 0.70 1.41 0.32 196 HTML_IMAGE_ONLY_24 1580 0.29 0.25 0.31 197 MPART_ALT_DIFF_COUNT 1564 0.40 0.55 0.31 198 XMSlimDrugH 1488 0.54 0.98 0.30 199 XMSolicitRefs_0 1485 0.28 0.25 0.30 200 XM_URI_RBL 1483 7.23 19.95 0.30 ----------------------------------------------------------------------