Email: 656173 Autolearn: 0 AvgScore: 2.60 AvgScanTime: 3.91 sec Spam: 165608 Autolearn: 0 AvgScore: 13.11 AvgScanTime: 4.54 sec Ham: 490565 Autolearn: 0 AvgScore: -0.95 AvgScanTime: 3.70 sec Time Spent Running SA: 712.92 hours Time Spent Processing Spam: 208.77 hours Time Spent Processing Ham: 504.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 159573 89.84 96.36 87.64 2 DCC_CHECK 128069 50.37 77.33 41.27 3 DKIM_SIGNED 126819 75.56 76.58 75.21 4 XM_DK_Pass 122545 73.94 74.00 73.92 5 DKIM_VALID 115098 69.37 69.50 69.33 6 XMListUnsubscribeExists 113389 55.56 68.47 51.20 7 DKIM_VALID_AU 91678 50.03 55.36 48.23 8 XM_H_QuotedFrom 85567 40.85 51.67 37.20 9 BAYES_50 72546 54.33 43.81 57.88 10 MIME_HTML_ONLY 65791 24.35 39.73 19.16 11 HTML_FONT_LOW_CONTRAST 58470 29.21 35.31 27.15 12 LOC_TINY_FONT_1 54288 24.33 32.78 21.47 13 XM_DK_Undo_02 53934 13.61 32.57 7.21 14 XMSubLong 44019 22.66 26.58 21.34 15 BAYES_99 43208 10.67 26.09 5.47 16 FVGT_m_MULTI_ODD 41181 22.55 24.87 21.77 17 TR_DCC_Bayes_99 35661 7.74 21.53 3.08 18 T_TM2_M_HEADER_IN_MSG 35395 27.94 21.37 30.16 19 DCC_CHECK_NEGATIVE 35243 47.67 21.28 56.57 20 BAYES_999 35203 8.87 21.26 4.68 21 DKIM_VALID_EF 32220 25.59 19.46 27.67 22 RELAYCOUNTRY_META 31497 8.59 19.02 5.06 23 T_KAM_HTML_FONT_INVALID 30066 17.94 18.15 17.86 24 XM_Body_Dirty_Words 28824 13.10 17.40 11.64 25 BOTNET 28705 5.93 17.33 2.08 26 XM_UncommonTLD01 25964 6.36 15.68 3.21 27 XM_Multi_Part_URI 25199 12.52 15.22 11.61 28 FROM_EXCESS_BASE64 25166 6.20 15.20 3.17 29 HTML_IMAGE_RATIO_02 24667 10.21 14.89 8.63 30 MultiRelay 23721 17.61 14.32 18.72 31 BOTNET_IPINHOSTNAME 23386 7.60 14.12 5.40 32 XM_Evil_Numbers_Gen 23248 9.65 14.04 8.17 33 SpammyFromTLD_02 21713 3.68 13.11 0.49 34 UNTRUSTED_Relay 20978 4.13 12.67 1.25 35 T_REMOTE_IMAGE 20668 6.29 12.48 4.19 36 FSL_BULK_SIG 19915 8.08 12.03 6.75 37 HTML_MIME_NO_HTML_TAG 19347 4.76 11.68 2.42 38 RCVD_IN_RP_RNBL 17948 2.82 10.84 0.11 39 HTML_SHORT_LINK_IMG_1 17668 2.73 10.67 0.05 40 LOTS_OF_MONEY 17517 9.30 10.58 8.87 41 SHORTENER_SHORT_IMG 17388 2.66 10.50 0.01 42 URI_BUFFLY 17382 2.65 10.50 0.01 43 BODY_URI_ONLY 17343 2.72 10.47 0.11 44 XMSexyCombo_05 16407 5.01 9.91 3.36 45 MISSING_HEADERS 15653 2.75 9.45 0.48 46 BAYES_80 15471 4.52 9.34 2.89 47 MIME_HEADER_CTYPE_ONLY 15307 2.43 9.24 0.13 48 T_XMDrugObfuBody_14 14718 8.71 8.89 8.65 49 HTML_IMAGE_ONLY_04 14650 2.28 8.85 0.06 50 HTML_IMAGE_RATIO_04 14338 6.47 8.66 5.73 51 XM_B_Phish_Phrases 14192 6.34 8.57 5.58 52 BAYES_60 13597 6.03 8.21 5.29 53 XMSubMetaSx_00 12771 5.00 7.71 4.08 54 XM_H_Long_From01 12723 6.48 7.68 6.08 55 MPART_ALT_DIFF 12390 4.13 7.48 2.99 56 DKIM_INVALID 11721 6.19 7.08 5.89 57 TR_XM_DocInvoice 11588 4.06 7.00 3.07 58 XMNumbers 11458 4.11 6.92 3.16 59 HTML_SHORT_CENTER 11316 1.73 6.83 0.01 60 TooManyTo_001 11052 8.12 6.67 8.61 61 LotsOfNums_01 9531 8.16 5.76 8.97 62 BAYES_95 8925 2.59 5.39 1.64 63 XM_UB50 8252 1.78 4.98 0.69 64 HTML_IMAGE_RATIO_06 8208 3.57 4.96 3.11 65 XM_DIRTYINTL 7466 2.53 4.51 1.86 66 XMStrtUSub 7201 4.12 4.35 4.05 67 MIME_HTML_ONLY_MULTI 6900 2.12 4.17 1.43 68 MIME_HTML_MOSTLY 6383 2.76 3.85 2.39 69 RELAYCOUNTRY_KR 6338 0.98 3.83 0.02 70 TM2_M_URI_OPT_OUT 6203 2.31 3.75 1.83 71 HTML_IMAGE_RATIO_08 6172 2.68 3.73 2.33 72 XM_SPF_SoftFail 5824 2.62 3.52 2.32 73 XMDiploma_00 5596 2.11 3.38 1.68 74 URI_HEX 5229 1.92 3.16 1.50 75 RELAYCOUNTRY_CA 5112 2.01 3.09 1.65 76 XM_SendGrid 5033 5.16 3.04 5.87 77 SUBJ_ALL_CAPS 4885 1.99 2.95 1.66 78 XM_CamelCaseFrm001 4842 2.17 2.92 1.91 79 RCVD_IN_MSPIKE_H2 4686 4.19 2.83 4.65 80 T_XMDrugObfuBody_08 4636 1.81 2.80 1.47 81 MultiRelay_CC 4505 0.80 2.72 0.15 82 MultiRelay_Combo 4505 0.80 2.72 0.15 83 MIME_QP_LONG_LINE 4446 5.39 2.68 6.30 84 BAYES_40 4287 4.18 2.59 4.72 85 RCVD_IN_BL_SPAMCOP_NET 4195 1.05 2.53 0.55 86 XM_URI_RBL 4173 0.93 2.52 0.40 87 XM_OfRef6 4110 1.64 2.48 1.35 88 T_TooManySym_01 4099 4.44 2.48 5.11 89 XM_UB80 4003 0.63 2.42 0.03 90 XMGenDplmaNmb 3854 1.33 2.33 0.99 91 XM_UB60 3821 0.62 2.31 0.05 92 UNPARSEABLE_RELAY 3602 2.83 2.18 3.06 93 RCVD_IN_RP_SAFE 3584 7.13 2.16 8.80 94 DIET_1 3345 0.75 2.02 0.32 95 XM_H_Long_From02 3336 1.31 2.01 1.07 96 T_XMDrugObfuBody_00 3290 1.04 1.99 0.72 97 XMBody_17 3155 0.95 1.91 0.63 98 HTML_IMAGE_ONLY_08 3153 0.58 1.90 0.13 99 BOTNET_NORDNS 3151 0.49 1.90 0.02 100 HTML_FONT_SIZE_LARGE 3119 0.62 1.88 0.19 101 BAYES_20 3060 3.17 1.85 3.62 102 XMSexyCombo_01 3053 1.20 1.84 0.98 103 XMSubMetaI_00 2935 0.82 1.77 0.50 104 XM_ProductURIs 2881 1.21 1.74 1.03 105 XMBrknScrpt_02 2834 0.86 1.71 0.58 106 BAYES_00 2767 12.43 1.67 16.07 107 TM2_M_VERY_LONG_WORD 2726 1.12 1.65 0.94 108 RELAYCOUNTRY_CN 2690 0.45 1.62 0.06 109 XMBdyGiftCard01 2689 1.20 1.62 1.05 110 RCVD_IN_RP_CERTIFIED 2686 6.34 1.62 7.93 111 XMMoneyMeta_00 2637 0.83 1.59 0.58 112 TR_XM_RelayPhish 2533 0.80 1.53 0.55 113 URIBL_BLACK 2459 0.44 1.48 0.08 114 LongTLD 2435 0.48 1.47 0.15 115 SpammyFromTLD_01 2434 0.82 1.47 0.61 116 RELAYCOUNTRY_GB 2366 1.10 1.43 0.99 117 RELAYCOUNTRY_IN 2340 0.54 1.41 0.24 118 RELAYCOUNTRY_FR 2303 0.47 1.39 0.16 119 XMHTML_After_End 2276 0.72 1.37 0.50 120 URIBL_DBL_SPAM 2163 0.37 1.31 0.06 121 MAILING_LIST_MULTI 2160 2.00 1.30 2.24 122 RCVD_IN_IADB_LISTED 2134 4.78 1.29 5.96 123 MPART_ALT_DIFF_COUNT 2132 0.57 1.29 0.33 124 ALL_TRUSTED 2038 12.11 1.23 15.78 125 XMStockSpam_06 2014 1.10 1.22 1.06 126 TR_XM_DK_Bayes 2009 9.56 1.21 12.38 127 DKIM_ADSP_CUSTOM_MED 1983 1.11 1.20 1.08 128 XMPhish30 1964 0.60 1.19 0.40 129 XM_Combo_Sbj 1952 0.55 1.18 0.34 130 XMPhish11 1952 1.11 1.18 1.09 131 XM_UB95 1948 0.30 1.18 0.01 132 US_DOLLARS_3 1940 0.94 1.17 0.86 133 XMBody_78 1938 0.71 1.17 0.56 134 DKIM_ADSP_NXDOMAIN 1933 0.66 1.17 0.49 135 NML_ADSP_CUSTOM_MED 1900 0.78 1.15 0.66 136 HTML_TAG_BALANCE_BODY 1893 0.71 1.14 0.57 137 TR_Caps_n_Bayes_99 1884 0.35 1.14 0.09 138 T_Symld_Words_02 1873 0.77 1.13 0.65 139 HTTPS_HTTP_MISMATCH 1871 0.74 1.13 0.61 140 T_MONEY_PERCENT 1857 0.45 1.12 0.22 141 TR_LOTS_OF_MONEY2 1857 0.45 1.12 0.22 142 URI_TRY_3LD 1839 1.56 1.11 1.72 143 T_XMHurry_00 1828 0.85 1.10 0.77 144 HTML_IMAGE_ONLY_24 1822 0.51 1.10 0.32 145 RCVD_IN_IADB_SPF 1780 4.21 1.07 5.27 146 FORGED_GMAIL_RCVD 1771 0.74 1.07 0.63 147 TR_XM_DK_Bayes1 1762 8.88 1.06 11.51 148 XMSlimDrugH 1751 0.57 1.06 0.41 149 BAYES_05 1747 2.09 1.05 2.44 150 ANY_BOUNCE_MESSAGE 1704 2.12 1.03 2.49 151 BOUNCE_MESSAGE 1701 2.12 1.03 2.49 152 TR_Symld_Words 1699 1.59 1.03 1.78 153 RCVD_IN_IADB_SENDERID 1699 3.73 1.03 4.64 154 T_FILL_THIS_FORM_SHORT 1691 0.95 1.02 0.93 155 XMSubMetaSxObfu_03 1685 1.01 1.02 1.00 156 SUBJ_DOLLARS 1682 0.53 1.02 0.36 157 RCVD_IN_IADB_DK 1672 3.70 1.01 4.61 158 T_HTML_TAG_BALANCE_CENTER 1657 0.31 1.00 0.08 159 TR_LOTS_OF_MONEY3 1628 0.63 0.98 0.51 160 DATE_IN_PAST_03_06 1626 0.36 0.98 0.15 161 XM_DK_Undo_01 1624 1.68 0.98 1.91 162 HK_RANDOM_FROM 1595 0.38 0.96 0.18 163 XMSubMetaSSx_00 1566 0.38 0.95 0.19 164 XMSexyCombo_04 1553 0.65 0.94 0.56 165 TooManyTo_002 1549 2.10 0.94 2.49 166 TR_XM_DK_Bayes2 1504 7.32 0.91 9.48 167 HTML_FONT_FACE_BAD 1500 0.65 0.91 0.56 168 XM_UB99 1495 0.24 0.90 0.02 169 XM_Body_Obfu01 1487 0.44 0.90 0.29 170 GAPPY_SUBJECT 1474 0.31 0.89 0.11 171 XMPhish14 1452 0.50 0.88 0.38 172 REMOVE_BEFORE_LINK 1398 0.47 0.84 0.35 173 T_TooManySym_02 1389 1.46 0.84 1.67 174 TR_Mismatch_TLD_02 1385 0.25 0.84 0.06 175 RELAYCOUNTRY_AT 1384 0.34 0.84 0.18 176 FROM_SUSPICIOUS_NTLD 1383 0.25 0.84 0.06 177 RDNS_DYNAMIC 1361 0.51 0.82 0.41 178 XM_H_PHPOS 1355 0.96 0.82 1.01 179 XM_HighProb1 1341 0.23 0.81 0.03 180 PLING_QUERY 1337 0.44 0.81 0.31 181 RELAYCOUNTRY_AU 1322 0.61 0.80 0.55 182 RCVD_IN_IADB_VOUCHED 1320 2.96 0.80 3.69 183 TooManyTo_003 1310 1.45 0.79 1.68 184 XMHTMLBadTable_001 1293 0.60 0.78 0.54 185 URI_NOVOWEL 1288 0.55 0.78 0.48 186 FVGT_m_MULTI_ODD_EMAIL 1228 0.22 0.74 0.04 187 LOW_PRICE 1204 0.33 0.73 0.20 188 RELAYCOUNTRY_NL 1203 0.30 0.73 0.15 189 XMLongAddy 1181 0.23 0.71 0.06 190 XM_PDF 1180 3.79 0.71 4.83 191 XM_B_COPY_HTML 1159 0.48 0.70 0.40 192 RELAYCOUNTRY_DE 1123 0.44 0.68 0.36 193 HELO_NODOT 1111 1.59 0.67 1.90 194 HTML_IMAGE_ONLY_28 1099 0.43 0.66 0.36 195 HTML_FONT_SIZE_HUGE 1096 0.24 0.66 0.10 196 XMSubject_48 1095 0.19 0.66 0.03 197 RCVD_IN_MSPIKE_WL 1086 1.58 0.66 1.89 198 RCVD_IN_MSPIKE_H3 1079 1.57 0.65 1.88 199 XM_XX_Yahoo 1065 0.23 0.64 0.09 200 LONG_HEX_URI 1047 0.26 0.63 0.13 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 429932 89.84 96.36 87.64 2 DKIM_SIGNED 368967 75.56 76.58 75.21 3 XM_DK_Pass 362605 73.94 74.00 73.92 4 DKIM_VALID 340085 69.37 69.50 69.33 5 BAYES_50 283934 54.33 43.81 57.88 6 DCC_CHECK_NEGATIVE 277531 47.67 21.28 56.57 7 XMListUnsubscribeExists 251174 55.56 68.47 51.20 8 DKIM_VALID_AU 236618 50.03 55.36 48.23 9 DCC_CHECK 202472 50.37 77.33 41.27 10 XM_H_QuotedFrom 182468 40.85 51.67 37.20 11 T_TM2_M_HEADER_IN_MSG 147944 27.94 21.37 30.16 12 DKIM_VALID_EF 135726 25.59 19.46 27.67 13 HTML_FONT_LOW_CONTRAST 133193 29.21 35.31 27.15 14 FVGT_m_MULTI_ODD 106808 22.55 24.87 21.77 15 LOC_TINY_FONT_1 105337 24.33 32.78 21.47 16 XMSubLong 104672 22.66 26.58 21.34 17 MIME_HTML_ONLY 93983 24.35 39.73 19.16 18 MultiRelay 91824 17.61 14.32 18.72 19 T_KAM_HTML_FONT_INVALID 87621 17.94 18.15 17.86 20 BAYES_00 78823 12.43 1.67 16.07 21 ALL_TRUSTED 77395 12.11 1.23 15.78 22 XM_DKIMWhitelistDomains 62559 9.61 0.31 12.75 23 TR_XM_DK_Bayes 60723 9.56 1.21 12.38 24 XM_Body_Dirty_Words 57107 13.10 17.40 11.64 25 XM_Multi_Part_URI 56939 12.52 15.22 11.61 26 TR_XM_DK_Bayes1 56474 8.88 1.06 11.51 27 TR_XM_DK_Bayes2 46498 7.32 0.91 9.48 28 LotsOfNums_01 44015 8.16 5.76 8.97 29 LOTS_OF_MONEY 43520 9.30 10.58 8.87 30 RCVD_IN_RP_SAFE 43178 7.13 2.16 8.80 31 T_XMDrugObfuBody_14 42452 8.71 8.89 8.65 32 HTML_IMAGE_RATIO_02 42326 10.21 14.89 8.63 33 TooManyTo_001 42225 8.12 6.67 8.61 34 XM_Evil_Numbers_Gen 40066 9.65 14.04 8.17 35 RCVD_IN_RP_CERTIFIED 38892 6.34 1.62 7.93 36 XM_DK_Undo_02 35356 13.61 32.57 7.21 37 FSL_BULK_SIG 33130 8.08 12.03 6.75 38 MIME_QP_LONG_LINE 30927 5.39 2.68 6.30 39 XM_H_Long_From01 29815 6.48 7.68 6.08 40 RCVD_IN_IADB_LISTED 29240 4.78 1.29 5.96 41 DKIM_INVALID 28882 6.19 7.08 5.89 42 XM_SendGrid 28813 5.16 3.04 5.87 43 HTML_IMAGE_RATIO_04 28124 6.47 8.66 5.73 44 XM_B_Phish_Phrases 27384 6.34 8.57 5.58 45 BAYES_99 26834 10.67 26.09 5.47 46 BOTNET_IPINHOSTNAME 26498 7.60 14.12 5.40 47 BAYES_60 25942 6.03 8.21 5.29 48 RCVD_IN_IADB_SPF 25840 4.21 1.07 5.27 49 T_TooManySym_01 25054 4.44 2.48 5.11 50 RELAYCOUNTRY_META 24844 8.59 19.02 5.06 51 XM_PDF 23711 3.79 0.71 4.83 52 BAYES_40 23140 4.18 2.59 4.72 53 BAYES_999 22977 8.87 21.26 4.68 54 RCVD_IN_MSPIKE_H2 22800 4.19 2.83 4.65 55 RCVD_IN_IADB_SENDERID 22777 3.73 1.03 4.64 56 RCVD_IN_IADB_DK 22594 3.70 1.01 4.61 57 T_REMOTE_IMAGE 20573 6.29 12.48 4.19 58 XMSubMetaSx_00 20018 5.00 7.71 4.08 59 XMStrtUSub 19857 4.12 4.35 4.05 60 IN_ZIMBRA_NJ_WHITELIST 19143 2.92 0.02 3.90 61 RCVD_IN_IADB_VOUCHED 18119 2.96 0.80 3.69 62 BAYES_20 17741 3.17 1.85 3.62 63 XMSexyCombo_05 16493 5.01 9.91 3.36 64 XM_UncommonTLD01 15763 6.36 15.68 3.21 65 FROM_EXCESS_BASE64 15536 6.20 15.20 3.17 66 XMNumbers 15522 4.11 6.92 3.16 67 HTML_IMAGE_RATIO_06 15239 3.57 4.96 3.11 68 TR_DCC_Bayes_99 15101 7.74 21.53 3.08 69 TR_XM_DocInvoice 15044 4.06 7.00 3.07 70 UNPARSEABLE_RELAY 14987 2.83 2.18 3.06 71 TVD_RCVD_IP 14866 2.33 0.24 3.03 72 MPART_ALT_DIFF 14690 4.13 7.48 2.99 73 BAYES_80 14158 4.52 9.34 2.89 74 TO_MALFORMED 13145 2.12 0.46 2.68 75 ANY_BOUNCE_MESSAGE 12222 2.12 1.03 2.49 76 TooManyTo_002 12218 2.10 0.94 2.49 77 BOUNCE_MESSAGE 12217 2.12 1.03 2.49 78 BAYES_05 11953 2.09 1.05 2.44 79 HTML_MIME_NO_HTML_TAG 11862 4.76 11.68 2.42 80 MIME_HTML_MOSTLY 11713 2.76 3.85 2.39 81 HTML_IMAGE_RATIO_08 11435 2.68 3.73 2.33 82 RCVD_IN_IADB_OPTIN 11415 1.89 0.60 2.33 83 XM_SPF_SoftFail 11361 2.62 3.52 2.32 84 MAILING_LIST_MULTI 10972 2.00 1.30 2.24 85 BOTNET 10187 5.93 17.33 2.08 86 XM_CamelCaseFrm001 9390 2.17 2.92 1.91 87 XM_DK_Undo_01 9383 1.68 0.98 1.91 88 HELO_NODOT 9314 1.59 0.67 1.90 89 RCVD_IN_MSPIKE_WL 9255 1.58 0.66 1.89 90 RCVD_IN_MSPIKE_H3 9245 1.57 0.65 1.88 91 XM_DIRTYINTL 9141 2.53 4.51 1.86 92 TM2_M_URI_OPT_OUT 8960 2.31 3.75 1.83 93 TR_Symld_Words 8755 1.59 1.03 1.78 94 URI_TRY_3LD 8416 1.56 1.11 1.72 95 XMDiploma_00 8242 2.11 3.38 1.68 96 TooManyTo_003 8236 1.45 0.79 1.68 97 T_TooManySym_02 8194 1.46 0.84 1.67 98 SUBJ_ALL_CAPS 8144 1.99 2.95 1.66 99 RELAYCOUNTRY_CA 8073 2.01 3.09 1.65 100 IN_HORDE_ADDRESS_BOOK 8057 1.24 0.04 1.64 101 BAYES_95 8040 2.59 5.39 1.64 102 URI_HEX 7337 1.92 3.16 1.50 103 T_XMDrugObfuBody_08 7226 1.81 2.80 1.47 104 INVALID_MSGID 7206 1.15 0.20 1.47 105 XMCapTrack 7067 1.23 0.59 1.44 106 MIME_HTML_ONLY_MULTI 7025 2.12 4.17 1.43 107 XM_OfRef6 6641 1.64 2.48 1.35 108 TR_MetaPhish_Combo_01 6396 1.11 0.54 1.30 109 UNTRUSTED_Relay 6154 4.13 12.67 1.25 110 TooManyTo_004 6055 1.08 0.63 1.23 111 XM_GoogleGroups 6054 1.02 0.39 1.23 112 USER_IN_DEF_DKIM_WL 5902 0.91 0.03 1.20 113 XMPhish11 5340 1.11 1.18 1.09 114 DKIM_ADSP_CUSTOM_MED 5275 1.11 1.20 1.08 115 XM_H_Long_From02 5249 1.31 2.01 1.07 116 XMStockSpam_06 5187 1.10 1.22 1.06 117 XMBdyGiftCard01 5170 1.20 1.62 1.05 118 XM_ProductURIs 5048 1.21 1.74 1.03 119 XM_H_PHPOS 4975 0.96 0.82 1.01 120 XMSubMetaSxObfu_03 4916 1.01 1.02 1.00 121 TooManyTo_005 4911 0.89 0.55 1.00 122 XMGenDplmaNmb 4868 1.33 2.33 0.99 123 RELAYCOUNTRY_GB 4836 1.10 1.43 0.99 124 XMSexyCombo_01 4795 1.20 1.84 0.98 125 TM2_M_VERY_LONG_WORD 4613 1.12 1.65 0.94 126 T_FILL_THIS_FORM_SHORT 4575 0.95 1.02 0.93 127 US_DOLLARS_3 4241 0.94 1.17 0.86 128 XMGappySubj_01 3805 0.67 0.38 0.78 129 T_XMHurry_00 3772 0.85 1.10 0.77 130 T_XMDrugObfuBody_00 3553 1.04 1.99 0.72 131 XM_UB50 3400 1.78 4.98 0.69 132 USER_IN_WHITELIST 3276 0.50 0.00 0.67 133 XM_H_PHPMailer 3264 0.63 0.54 0.67 134 NML_ADSP_CUSTOM_MED 3217 0.78 1.15 0.66 135 T_Symld_Words_02 3190 0.77 1.13 0.65 136 HTML_IMAGE_ONLY_32 3164 0.53 0.18 0.64 137 XMBody_17 3107 0.95 1.91 0.63 138 FORGED_GMAIL_RCVD 3067 0.74 1.07 0.63 139 HTTPS_HTTP_MISMATCH 3013 0.74 1.13 0.61 140 FROM_GOV_SPOOF 2976 0.54 0.33 0.61 141 SpammyFromTLD_01 2972 0.82 1.47 0.61 142 T_OBFU_PDF_ATTACH 2880 0.48 0.18 0.59 143 XMMoneyMeta_00 2842 0.83 1.59 0.58 144 XMBrknScrpt_02 2824 0.86 1.71 0.58 145 HTML_TAG_BALANCE_BODY 2772 0.71 1.14 0.57 146 XMBody_78 2750 0.71 1.17 0.56 147 HTML_FONT_FACE_BAD 2742 0.65 0.91 0.56 148 XMSexyCombo_04 2740 0.65 0.94 0.56 149 TR_XM_RelayPhish 2710 0.80 1.53 0.55 150 XMLngstWrd_00 2710 0.54 0.51 0.55 151 RELAYCOUNTRY_AU 2702 0.61 0.80 0.55 152 RCVD_IN_BL_SPAMCOP_NET 2701 1.05 2.53 0.55 153 XMBody_95 2695 0.43 0.08 0.55 154 XMHTMLBadTable_001 2628 0.60 0.78 0.54 155 XM_B_REG_HTML 2624 0.56 0.63 0.53 156 T_TooManySym_03 2560 0.42 0.10 0.52 157 XMLngstWrd_01 2523 0.49 0.42 0.51 158 TR_LOTS_OF_MONEY3 2520 0.63 0.98 0.51 159 XMNoVowels 2506 0.51 0.51 0.51 160 XMHTML_After_End 2467 0.72 1.37 0.50 161 XMSubMetaI_00 2466 0.82 1.77 0.50 162 FILL_THIS_FORM 2449 0.45 0.32 0.50 163 SpammyFromTLD_02 2402 3.68 13.11 0.49 164 DKIM_ADSP_NXDOMAIN 2387 0.66 1.17 0.49 165 SHORT_HELO_AND_INLINE_IMAGE 2377 0.38 0.07 0.48 166 MISSING_HEADERS 2367 2.75 9.45 0.48 167 URI_NOVOWEL 2350 0.55 0.78 0.48 168 XMDateMe_00 2183 0.40 0.28 0.44 169 XM_ShortIntro_01 2133 0.48 0.60 0.43 170 XMGappySubj_02 2113 0.33 0.05 0.43 171 RCVD_IN_SORBS_DUL 2073 0.39 0.30 0.42 172 TM2_M_BODY_EMPTY 2010 0.34 0.13 0.41 173 T_FILL_THIS_FORM_LONG 2003 0.36 0.20 0.41 174 XMSlimDrugH 2000 0.57 1.06 0.41 175 RDNS_DYNAMIC 1989 0.51 0.82 0.41 176 XM_B_COPY_HTML 1979 0.48 0.70 0.40 177 XMPhish30 1976 0.60 1.19 0.40 178 XM_URI_RBL 1942 0.93 2.52 0.40 179 XMSolicitRefs_0 1937 0.37 0.30 0.39 180 XMSubMetaSxObfu_02 1908 0.37 0.33 0.39 181 TM2_M_A_HREF_HREF 1894 0.42 0.54 0.39 182 XM_shorewaves_Whitelist 1859 0.28 0.00 0.38 183 XMPhish14 1841 0.50 0.88 0.38 184 SUBJ_DOLLARS 1770 0.53 1.02 0.36 185 RELAYCOUNTRY_DE 1753 0.44 0.68 0.36 186 HTML_IMAGE_ONLY_28 1747 0.43 0.66 0.36 187 AC_DIV_BONANZA 1728 0.30 0.13 0.35 188 REMOVE_BEFORE_LINK 1704 0.47 0.84 0.35 189 T_FROM_GOV_DKIM_AU 1703 0.30 0.17 0.35 190 XMSubNoVowel 1676 0.34 0.32 0.34 191 XM_Combo_Sbj 1660 0.55 1.18 0.34 192 XM_H_PHPOS_M 1657 0.34 0.34 0.34 193 T_FILL_THIS_FORM_LOAN 1645 0.28 0.11 0.34 194 MPART_ALT_DIFF_COUNT 1625 0.57 1.29 0.33 195 DIET_1 1553 0.75 2.02 0.32 196 HTML_IMAGE_ONLY_24 1552 0.51 1.10 0.32 197 PLING_QUERY 1539 0.44 0.81 0.31 198 XM_S_JOY_D 1528 0.39 0.62 0.31 199 NO_DNS_FOR_FROM 1517 0.37 0.54 0.31 200 XM_B_TRADE_HTML 1485 0.30 0.29 0.30 ----------------------------------------------------------------------