Email: 700995 Autolearn: 0 AvgScore: 2.38 AvgScanTime: 2.15 sec Spam: 183055 Autolearn: 0 AvgScore: 12.61 AvgScanTime: 2.45 sec Ham: 517940 Autolearn: 0 AvgScore: -1.24 AvgScanTime: 2.04 sec Time Spent Running SA: 417.78 hours Time Spent Processing Spam: 124.67 hours Time Spent Processing Ham: 293.11 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 117574 80.58 64.23 86.36 2 BAYES_50 110582 58.90 60.41 58.37 3 DCC_CHECK 94079 43.05 51.39 40.10 4 DKIM_SIGNED 91931 66.53 50.22 72.30 5 XM_DK_Pass 89318 65.19 48.79 70.99 6 DCC_CHECK_NEGATIVE 86924 55.29 47.49 58.05 7 DKIM_VALID 85007 62.17 46.44 67.73 8 XMListUnsubscribeExists 80300 48.74 43.87 50.46 9 BOTNET 79995 13.04 43.70 2.21 10 LOTS_OF_MONEY 71598 16.42 39.11 8.41 11 DKIM_VALID_AU 69303 46.22 37.86 49.17 12 XM_H_QuotedFrom 60724 38.59 33.17 40.50 13 RCVD_IN_RP_RNBL 60540 8.66 33.07 0.04 14 T_FILL_THIS_FORM_SHORT 60124 9.21 32.84 0.86 15 XM_OfRef6 60061 9.73 32.81 1.58 16 BOUNCE_MESSAGE 57855 9.62 31.61 1.86 17 ANY_BOUNCE_MESSAGE 57855 9.62 31.61 1.86 18 XM_OfRef7 57777 8.39 31.56 0.21 19 MONEY_FORM_SHORT 57152 8.16 31.22 0.01 20 HK_SCAM_N2 52490 7.49 28.67 0.01 21 XM_Multi_Part_URI 50547 15.95 27.61 11.83 22 MIME_HTML_ONLY 48923 21.75 26.73 19.99 23 HTML_FONT_LOW_CONTRAST 46558 26.64 25.43 27.07 24 XM_DK_Undo_02 42018 11.46 22.95 7.40 25 FVGT_m_MULTI_ODD 41262 20.73 22.54 20.09 26 LOC_TINY_FONT_1 41262 22.33 22.54 22.26 27 BAYES_99 39094 9.43 21.36 5.22 28 RELAYCOUNTRY_META 34650 8.60 18.93 4.95 29 DATE_IN_PAST_03_06 34227 4.92 18.70 0.06 30 BAYES_999 32525 7.82 17.77 4.30 31 XMSubLong 31833 19.17 17.39 19.79 32 XM_Body_Dirty_Words 27528 13.08 15.04 12.38 33 TR_DCC_Bayes_99 26315 5.87 14.38 2.87 34 DKIM_VALID_EF 25693 21.82 14.04 24.57 35 UNTRUSTED_Relay 25149 4.58 13.74 1.35 36 T_TM2_M_HEADER_IN_MSG 22837 23.48 12.48 27.38 37 T_KAM_HTML_FONT_INVALID 21892 15.02 11.96 16.10 38 MultiRelay 20899 15.43 11.42 16.84 39 BOTNET_IPINHOSTNAME 20213 6.45 11.04 4.83 40 FROM_EXCESS_BASE64 20063 5.97 10.96 4.20 41 DATE_IN_PAST_06_12 19624 2.83 10.72 0.04 42 FSL_BULK_SIG 18783 7.24 10.26 6.17 43 HTML_IMAGE_RATIO_02 16618 8.90 9.08 8.84 44 XM_Evil_Numbers_Gen 16052 9.27 8.77 9.44 45 T_REMOTE_IMAGE 15967 5.16 8.72 3.90 46 HTML_MIME_NO_HTML_TAG 14330 3.54 7.83 2.03 47 XMSexyCombo_05 14247 5.16 7.78 4.23 48 XM_OfRef8 14191 2.05 7.75 0.03 49 XM_UncommonTLD01 13549 4.38 7.40 3.31 50 HTML_SHORT_LINK_IMG_1 13030 1.88 7.12 0.03 51 BODY_URI_ONLY 12430 1.83 6.79 0.08 52 RELAYCOUNTRY_FR 12185 1.95 6.66 0.29 53 T_XMDrugObfuBody_14 11873 7.14 6.49 7.38 54 MIME_HEADER_CTYPE_ONLY 11770 1.76 6.43 0.11 55 TooManyTo_001 11754 7.45 6.42 7.81 56 MISSING_HEADERS 11305 1.91 6.18 0.40 57 HTML_IMAGE_ONLY_04 11074 1.61 6.05 0.05 58 HTML_SHORT_CENTER 10854 1.55 5.93 0.00 59 XMSubMetaSx_00 10679 4.56 5.83 4.11 60 XMNumbers 10289 3.42 5.62 2.64 61 BAYES_60 10137 4.94 5.54 4.72 62 HTML_IMAGE_RATIO_04 10021 6.02 5.47 6.21 63 BAYES_80 9464 3.36 5.17 2.72 64 MPART_ALT_DIFF 8843 3.56 4.83 3.11 65 XM_H_Long_From01 8835 5.82 4.83 6.17 66 XM_URI_RBL 8734 1.61 4.77 0.50 67 XM_UB50 8704 1.76 4.75 0.70 68 XM_B_Phish_Phrases 8649 5.55 4.72 5.85 69 XM_UB99 8636 1.26 4.72 0.04 70 XM_JunkDunk 8064 1.15 4.41 0.00 71 LotsOfNums_01 7282 7.92 3.98 9.32 72 XM_UB999 7260 1.05 3.97 0.02 73 XM_SPF_SoftFail 7089 2.58 3.87 2.12 74 DKIM_INVALID 6924 4.36 3.78 4.57 75 BOTNET_NORDNS 6531 0.97 3.57 0.05 76 SpammyFromTLD_02 6517 1.20 3.56 0.37 77 XM_DIRTYINTL 6358 2.16 3.47 1.70 78 HTML_IMAGE_RATIO_08 6254 2.34 3.42 1.96 79 MultiRelay_Combo 6201 1.00 3.39 0.16 80 MultiRelay_CC 6201 1.00 3.39 0.16 81 HTML_IMAGE_RATIO_06 5793 3.24 3.16 3.27 82 MIME_HTML_ONLY_MULTI 5335 1.78 2.91 1.38 83 TM2_M_URI_OPT_OUT 5015 2.31 2.74 2.16 84 BAYES_95 4773 2.11 2.61 1.93 85 URI_HEX 4759 1.96 2.60 1.74 86 MIME_HTML_MOSTLY 4132 2.61 2.26 2.73 87 XM_SendGrid 4091 4.95 2.23 5.91 88 FROM_SUSPICIOUS_NTLD 4029 0.63 2.20 0.07 89 T_XMDrugObfuBody_00 3945 1.12 2.16 0.75 90 XM_CamelCaseFrm001 3795 1.78 2.07 1.67 91 RELAYCOUNTRY_CA 3795 1.66 2.07 1.51 92 XMStrtUSub 3762 4.26 2.06 5.04 93 RCVD_IN_MSPIKE_H2 3738 3.73 2.04 4.33 94 SpammyFromTLD_01 3697 1.08 2.02 0.75 95 RCVD_IN_BL_SPAMCOP_NET 3685 0.90 2.01 0.50 96 RELAYCOUNTRY_GB 3680 1.25 2.01 0.98 97 DIET_1 3601 0.79 1.97 0.37 98 T_TooManySym_01 3450 3.81 1.88 4.49 99 XMSexyCombo_01 3445 1.05 1.88 0.76 100 RCVD_IN_RP_SAFE 3114 8.09 1.70 10.35 101 MIME_QP_LONG_LINE 3076 4.61 1.68 5.65 102 HELO_NODOT 3074 1.55 1.68 1.50 103 SUBJ_ALL_CAPS 3066 3.96 1.67 4.76 104 XMDiploma_00 3039 1.63 1.66 1.62 105 BAYES_40 2984 3.47 1.63 4.12 106 T_XMDrugObfuBody_08 2978 1.42 1.63 1.34 107 XMSubMetaI_00 2971 1.14 1.62 0.97 108 XMBdyGiftCard01 2914 1.01 1.59 0.80 109 XM_UB60 2818 0.45 1.54 0.07 110 FSL_HELO_NON_FQDN_1 2741 0.48 1.50 0.12 111 XM_H_TOP 2725 0.39 1.49 0.00 112 BAYES_20 2432 2.70 1.33 3.18 113 NO_DNS_FOR_FROM 2429 1.12 1.33 1.04 114 XMGenDplmaNmb 2428 1.22 1.33 1.18 115 T_MONEY_PERCENT 2425 0.72 1.32 0.50 116 TR_LOTS_OF_MONEY2 2425 0.72 1.32 0.50 117 MAILING_LIST_MULTI 2269 2.02 1.24 2.30 118 XM_ProductURIs 2222 0.97 1.21 0.88 119 TM2_M_VERY_LONG_WORD 2183 0.88 1.19 0.77 120 XM_HighProb1 2182 0.34 1.19 0.03 121 RCVD_IN_RP_CERTIFIED 2162 6.94 1.18 8.98 122 FSL_THIS_IS_ADV 2118 0.63 1.16 0.44 123 XMBody_17 2068 0.75 1.13 0.61 124 BODY_ENHANCEMENT 2057 0.32 1.12 0.04 125 RELAYCOUNTRY_KR 2036 0.30 1.11 0.02 126 XM_salutation2 2029 1.13 1.11 1.13 127 RELAYCOUNTRY_ZA 2017 0.29 1.10 0.01 128 TR_Orig_Subnet 2002 0.29 1.09 0.01 129 UNPARSEABLE_RELAY 1958 2.10 1.07 2.46 130 FORM_FRAUD_5 1950 0.28 1.07 0.00 131 XM_H_Long_From02 1917 0.99 1.05 0.98 132 XMStockSpam_06 1904 1.27 1.04 1.36 133 RELAYCOUNTRY_CN 1900 0.32 1.04 0.06 134 XMSexyCombo_04 1889 0.50 1.03 0.31 135 ADVANCE_FEE_5_NEW 1872 0.27 1.02 0.00 136 XMSubject_63 1868 0.27 1.02 0.00 137 TR_XM_RelayPhish 1847 0.66 1.01 0.53 138 RCVD_IN_IADB_LISTED 1843 4.49 1.01 5.72 139 XMChrist 1841 0.26 1.01 0.00 140 XMSlimDrugH 1770 0.49 0.97 0.32 141 URIBL_BLACK 1747 0.29 0.95 0.05 142 T_Symld_Words_02 1731 0.55 0.95 0.41 143 XMPhish30 1705 0.59 0.93 0.47 144 RCVD_IN_IADB_SPF 1688 3.96 0.92 5.03 145 XM_UB95 1666 0.26 0.91 0.02 146 BAYES_00 1646 12.99 0.90 17.26 147 HTML_IMAGE_ONLY_12 1636 0.40 0.89 0.23 148 RCVD_IN_IADB_SENDERID 1634 3.53 0.89 4.46 149 RCVD_IN_IADB_DK 1622 3.49 0.89 4.41 150 URI_TRY_3LD 1619 1.25 0.88 1.38 151 ALL_TRUSTED 1605 14.41 0.88 19.20 152 TR_Symld_Words 1598 3.55 0.87 4.49 153 TR_Mismatch_TLD_02 1596 0.28 0.87 0.07 154 XM_UB80 1562 0.25 0.85 0.04 155 SHORTENER_SHORT_IMG 1530 0.22 0.84 0.00 156 HK_RANDOM_FROM 1496 0.34 0.82 0.17 157 XMPhish11 1458 0.93 0.80 0.98 158 XM_H_PHPOS 1450 0.87 0.79 0.90 159 XMSubMetaSxObfu_03 1379 0.49 0.75 0.40 160 BAYES_05 1373 1.73 0.75 2.07 161 XM_DK_Undo_01 1354 1.45 0.74 1.70 162 T_XMHurry_00 1341 0.61 0.73 0.56 163 XMWghtMeta_00 1338 0.22 0.73 0.04 164 TR_MetaPhish_Combo_01 1333 1.21 0.73 1.38 165 NORMAL_HTTP_TO_IP 1326 0.24 0.72 0.07 166 XMManySubDom_06 1322 0.33 0.72 0.19 167 LongTLD 1321 0.30 0.72 0.16 168 XMPhish14 1308 0.45 0.71 0.36 169 TVD_SPACE_RATIO_MINFP 1284 0.19 0.70 0.01 170 LONG_JUNK_URI 1272 0.22 0.69 0.06 171 XM_XX_Yahoo 1242 0.22 0.68 0.06 172 RELAYCOUNTRY_AT 1239 0.37 0.68 0.26 173 XMHTML_After_End 1234 0.51 0.67 0.46 174 TR_Caps_n_Bayes_99 1209 0.21 0.66 0.05 175 SUBJ_DOLLARS 1201 0.65 0.66 0.64 176 HTML_FONT_SIZE_LARGE 1193 0.36 0.65 0.26 177 XMSubject_48 1169 0.20 0.64 0.05 178 SPOOF_COM2OTH 1149 0.18 0.63 0.02 179 XMBody_78 1144 0.54 0.62 0.50 180 MPART_ALT_DIFF_COUNT 1144 0.33 0.62 0.22 181 SPOOF_COM2COM 1134 0.18 0.62 0.02 182 FVGT_m_MULTI_ODD_EMAIL 1116 0.18 0.61 0.03 183 DKIM_ADSP_CUSTOM_MED 1106 0.88 0.60 0.98 184 FILL_THIS_FORM 1090 0.40 0.60 0.34 185 LONG_HEX_URI 1087 0.26 0.59 0.14 186 DKIM_ADSP_NXDOMAIN 1057 0.42 0.58 0.37 187 XM_PDF 1049 5.65 0.57 7.44 188 RELAYCOUNTRY_VN 1047 0.15 0.57 0.00 189 URI_NOVOWEL 1025 0.53 0.56 0.52 190 RCVD_IN_IADB_VOUCHED 1023 2.76 0.56 3.53 191 NML_ADSP_CUSTOM_MED 1016 0.65 0.56 0.68 192 XMSubGiftCard1 1013 0.17 0.55 0.04 193 FILL_THIS_FORM_LONG 999 0.33 0.55 0.26 194 XMLongAddy 994 0.18 0.54 0.05 195 RELAYCOUNTRY_IN 958 0.21 0.52 0.10 196 XM_RXBody 948 0.33 0.52 0.26 197 TR_XM_DK_Bayes 935 10.21 0.51 13.64 198 FORGED_GMAIL_RCVD 924 0.52 0.50 0.52 199 XMSubMetaSSx_00 917 0.37 0.50 0.33 200 URIBL_DBL_SPAM 916 0.16 0.50 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 447291 80.58 64.23 86.36 2 DKIM_SIGNED 374464 66.53 50.22 72.30 3 XM_DK_Pass 367660 65.19 48.79 70.99 4 DKIM_VALID 350798 62.17 46.44 67.73 5 BAYES_50 302319 58.90 60.41 58.37 6 DCC_CHECK_NEGATIVE 300678 55.29 47.49 58.05 7 XMListUnsubscribeExists 261336 48.74 43.87 50.46 8 DKIM_VALID_AU 254680 46.22 37.86 49.17 9 XM_H_QuotedFrom 209765 38.59 33.17 40.50 10 DCC_CHECK 207678 43.05 51.39 40.10 11 T_TM2_M_HEADER_IN_MSG 141791 23.48 12.48 27.38 12 HTML_FONT_LOW_CONTRAST 140193 26.64 25.43 27.07 13 DKIM_VALID_EF 127275 21.82 14.04 24.57 14 LOC_TINY_FONT_1 115300 22.33 22.54 22.26 15 FVGT_m_MULTI_ODD 104069 20.73 22.54 20.09 16 MIME_HTML_ONLY 103537 21.75 26.73 19.99 17 XMSubLong 102526 19.17 17.39 19.79 18 ALL_TRUSTED 99436 14.41 0.88 19.20 19 BAYES_00 89411 12.99 0.90 17.26 20 MultiRelay 87232 15.43 11.42 16.84 21 T_KAM_HTML_FONT_INVALID 83402 15.02 11.96 16.10 22 TR_XM_DK_Bayes 70671 10.21 0.51 13.64 23 TR_XM_DK_Bayes1 67696 9.77 0.41 13.07 24 XM_Body_Dirty_Words 64131 13.08 15.04 12.38 25 XM_Multi_Part_URI 61247 15.95 27.61 11.83 26 XM_DKIMWhitelistDomains 59026 8.54 0.47 11.40 27 TR_XM_DK_Bayes2 56774 8.19 0.33 10.96 28 RCVD_IN_RP_SAFE 53585 8.09 1.70 10.35 29 XM_Evil_Numbers_Gen 48908 9.27 8.77 9.44 30 LotsOfNums_01 48270 7.92 3.98 9.32 31 RCVD_IN_RP_CERTIFIED 46502 6.94 1.18 8.98 32 HTML_IMAGE_RATIO_02 45802 8.90 9.08 8.84 33 LOTS_OF_MONEY 43540 16.42 39.11 8.41 34 TooManyTo_001 40457 7.45 6.42 7.81 35 XM_PDF 38542 5.65 0.57 7.44 36 XM_DK_Undo_02 38306 11.46 22.95 7.40 37 T_XMDrugObfuBody_14 38202 7.14 6.49 7.38 38 HTML_IMAGE_RATIO_04 32176 6.02 5.47 6.21 39 XM_H_Long_From01 31963 5.82 4.83 6.17 40 FSL_BULK_SIG 31945 7.24 10.26 6.17 41 XM_SendGrid 30598 4.95 2.23 5.91 42 XM_B_Phish_Phrases 30276 5.55 4.72 5.85 43 RCVD_IN_IADB_LISTED 29638 4.49 1.01 5.72 44 MIME_QP_LONG_LINE 29259 4.61 1.68 5.65 45 BAYES_99 27039 9.43 21.36 5.22 46 XMStrtUSub 26100 4.26 2.06 5.04 47 RCVD_IN_IADB_SPF 26070 3.96 0.92 5.03 48 RELAYCOUNTRY_META 25632 8.60 18.93 4.95 49 BOTNET_IPINHOSTNAME 25009 6.45 11.04 4.83 50 SUBJ_ALL_CAPS 24676 3.96 1.67 4.76 51 BAYES_60 24467 4.94 5.54 4.72 52 DKIM_INVALID 23666 4.36 3.78 4.57 53 T_TooManySym_01 23256 3.81 1.88 4.49 54 TR_Symld_Words 23256 3.55 0.87 4.49 55 RCVD_IN_IADB_SENDERID 23121 3.53 0.89 4.46 56 RCVD_IN_IADB_DK 22845 3.49 0.89 4.41 57 RCVD_IN_MSPIKE_H2 22420 3.73 2.04 4.33 58 BAYES_999 22293 7.82 17.77 4.30 59 XMSexyCombo_05 21918 5.16 7.78 4.23 60 FROM_EXCESS_BASE64 21755 5.97 10.96 4.20 61 BAYES_40 21330 3.47 1.63 4.12 62 XMSubMetaSx_00 21277 4.56 5.83 4.11 63 IN_ZIMBRA_NJ_WHITELIST 20402 2.91 0.02 3.94 64 T_REMOTE_IMAGE 20219 5.16 8.72 3.90 65 T_OBFU_PDF_ATTACH 19820 2.87 0.15 3.83 66 RCVD_IN_IADB_VOUCHED 18295 2.76 0.56 3.53 67 XM_UncommonTLD01 17122 4.38 7.40 3.31 68 HTML_IMAGE_RATIO_06 16937 3.24 3.16 3.27 69 BAYES_20 16493 2.70 1.33 3.18 70 UPPERCASE_75_100 16303 2.33 0.02 3.15 71 MPART_ALT_DIFF 16122 3.56 4.83 3.11 72 TR_DCC_Bayes_99 14847 5.87 14.38 2.87 73 MIME_HTML_MOSTLY 14129 2.61 2.26 2.73 74 BAYES_80 14109 3.36 5.17 2.72 75 XMNumbers 13666 3.42 5.62 2.64 76 UNPARSEABLE_RELAY 12744 2.10 1.07 2.46 77 TooManyTo_002 12380 1.89 0.49 2.39 78 MAILING_LIST_MULTI 11922 2.02 1.24 2.30 79 TO_MALFORMED 11657 1.67 0.03 2.25 80 RCVD_IN_IADB_OPTIN 11649 1.79 0.50 2.25 81 TVD_RCVD_IP 11570 1.69 0.14 2.23 82 BOTNET 11445 13.04 43.70 2.21 83 TM2_M_URI_OPT_OUT 11167 2.31 2.74 2.16 84 XM_SPF_SoftFail 10966 2.58 3.87 2.12 85 BAYES_05 10743 1.73 0.75 2.07 86 HTML_MIME_NO_HTML_TAG 10508 3.54 7.83 2.03 87 HTML_IMAGE_RATIO_08 10147 2.34 3.42 1.96 88 BAYES_95 9987 2.11 2.61 1.93 89 ANY_BOUNCE_MESSAGE 9615 9.62 31.61 1.86 90 BOUNCE_MESSAGE 9610 9.62 31.61 1.86 91 RCVD_IN_MSPIKE_WL 9607 1.47 0.39 1.85 92 RCVD_IN_MSPIKE_H3 9591 1.47 0.39 1.85 93 TooManyTo_003 9160 1.41 0.40 1.77 94 URI_HEX 8997 1.96 2.60 1.74 95 XM_DIRTYINTL 8815 2.16 3.47 1.70 96 XM_DK_Undo_01 8789 1.45 0.74 1.70 97 XM_CamelCaseFrm001 8665 1.78 2.07 1.67 98 XMDiploma_00 8386 1.63 1.66 1.62 99 XM_OfRef6 8176 9.73 32.81 1.58 100 IN_HORDE_ADDRESS_BOOK 8022 1.15 0.03 1.55 101 T_TooManySym_02 7828 1.23 0.42 1.51 102 RELAYCOUNTRY_CA 7827 1.66 2.07 1.51 103 HELO_NODOT 7792 1.55 1.68 1.50 104 TooManyTo_004 7361 1.13 0.31 1.42 105 INVALID_MSGID 7229 1.06 0.11 1.40 106 TR_MetaPhish_Combo_01 7154 1.21 0.73 1.38 107 URI_TRY_3LD 7130 1.25 0.88 1.38 108 MIME_HTML_ONLY_MULTI 7127 1.78 2.91 1.38 109 XMStockSpam_06 7026 1.27 1.04 1.36 110 UNTRUSTED_Relay 6982 4.58 13.74 1.35 111 T_XMDrugObfuBody_08 6951 1.42 1.63 1.34 112 TooManyTo_005 6565 1.01 0.27 1.27 113 XMGenDplmaNmb 6121 1.22 1.33 1.18 114 XMCapTrack 6050 0.92 0.21 1.17 115 XM_GoogleGroups 5960 0.93 0.31 1.15 116 USER_IN_DEF_DKIM_WL 5907 0.85 0.01 1.14 117 XM_salutation2 5863 1.13 1.11 1.13 118 NO_DNS_FOR_FROM 5406 1.12 1.33 1.04 119 XMPhish11 5087 0.93 0.80 0.98 120 TM2_M_A_HREF_HREF 5081 0.83 0.41 0.98 121 DKIM_ADSP_CUSTOM_MED 5076 0.88 0.60 0.98 122 RELAYCOUNTRY_GB 5056 1.25 2.01 0.98 123 XM_H_Long_From02 5052 0.99 1.05 0.98 124 XMSubMetaI_00 4999 1.14 1.62 0.97 125 XM_H_PHPOS 4664 0.87 0.79 0.90 126 XM_ProductURIs 4558 0.97 1.21 0.88 127 T_FILL_THIS_FORM_SHORT 4472 9.21 32.84 0.86 128 XMBdyGiftCard01 4138 1.01 1.59 0.80 129 TM2_M_VERY_LONG_WORD 4008 0.88 1.19 0.77 130 XMSexyCombo_01 3934 1.05 1.88 0.76 131 T_XMDrugObfuBody_00 3899 1.12 2.16 0.75 132 SpammyFromTLD_01 3890 1.08 2.02 0.75 133 XM_B_REG_HTML 3687 0.59 0.25 0.71 134 XM_UB50 3640 1.76 4.75 0.70 135 NML_ADSP_CUSTOM_MED 3521 0.65 0.56 0.68 136 XMBrknScrpt_02 3401 0.61 0.47 0.66 137 SUBJ_DOLLARS 3339 0.65 0.66 0.64 138 LOW_PRICE 3282 0.59 0.48 0.63 139 REMOVE_BEFORE_LINK 3212 0.54 0.30 0.62 140 XMBody_17 3181 0.75 1.13 0.61 141 XM_H_SpoofStaff4 3166 0.47 0.06 0.61 142 USER_IN_WHITELIST 3065 0.44 0.00 0.59 143 XM_E_Blogspot 3003 0.45 0.07 0.58 144 XM_H_PHPMailer 2937 0.55 0.49 0.57 145 T_XMHurry_00 2918 0.61 0.73 0.56 146 XMSubNoVowel 2894 0.47 0.20 0.56 147 HTML_TAG_BALANCE_BODY 2829 0.50 0.38 0.55 148 THIS_AD 2806 0.53 0.49 0.54 149 FROM_GOV_SPOOF 2803 0.44 0.15 0.54 150 HTML_FONT_FACE_BAD 2803 0.52 0.47 0.54 151 XMMoneyMeta_00 2766 0.49 0.38 0.53 152 TR_XM_RelayPhish 2762 0.66 1.01 0.53 153 XM_ShortIntro_01 2726 0.47 0.32 0.53 154 FORGED_GMAIL_RCVD 2695 0.52 0.50 0.52 155 URI_NOVOWEL 2672 0.53 0.56 0.52 156 HTTPS_HTTP_MISMATCH 2658 0.45 0.28 0.51 157 XMLngstWrd_00 2617 0.43 0.21 0.51 158 XMBody_78 2609 0.54 0.62 0.50 159 XMBody_95 2602 0.40 0.10 0.50 160 TR_LOTS_OF_MONEY2 2600 0.72 1.32 0.50 161 T_MONEY_PERCENT 2600 0.72 1.32 0.50 162 RCVD_IN_BL_SPAMCOP_NET 2599 0.90 2.01 0.50 163 XM_URI_RBL 2586 1.61 4.77 0.50 164 XM_B_COPY_HTML 2582 0.49 0.46 0.50 165 XMSpoofStaff2 2473 0.37 0.07 0.48 166 XMPhish30 2454 0.59 0.93 0.47 167 XMGappySubj_01 2431 0.41 0.23 0.47 168 XMLngstWrd_01 2399 0.39 0.19 0.46 169 XMHTMLBadTable_001 2398 0.43 0.35 0.46 170 AC_DIV_BONANZA 2385 0.36 0.07 0.46 171 XMHTML_After_End 2375 0.51 0.67 0.46 172 XMSolicitRefs_0 2350 0.40 0.25 0.45 173 XMNoVowels 2349 0.44 0.41 0.45 174 T_TooManySym_03 2344 0.36 0.09 0.45 175 RELAYCOUNTRY_DE 2343 0.44 0.42 0.45 176 FSL_THIS_IS_ADV 2285 0.63 1.16 0.44 177 RELAYCOUNTRY_AU 2282 0.45 0.46 0.44 178 T_Symld_Words_02 2135 0.55 0.95 0.41 179 MISSING_HEADERS 2085 1.91 6.18 0.40 180 XMSubMetaSxObfu_03 2048 0.49 0.75 0.40 181 SHORT_HELO_AND_INLINE_IMAGE 1970 0.29 0.03 0.38 182 DKIM_ADSP_NXDOMAIN 1921 0.42 0.58 0.37 183 HTML_IMAGE_ONLY_32 1906 0.32 0.18 0.37 184 DIET_1 1905 0.79 1.97 0.37 185 SpammyFromTLD_02 1901 1.20 3.56 0.37 186 URIBL_SBL_A 1869 0.33 0.23 0.36 187 XMPhish14 1860 0.45 0.71 0.36 188 FROM_GOV_DKIM_AU 1850 0.31 0.17 0.36 189 RDNS_DYNAMIC 1847 0.38 0.45 0.36 190 HTML_IMAGE_ONLY_28 1825 0.33 0.27 0.35 191 XMDateMe_00 1796 0.32 0.25 0.35 192 XM_USANA_RCVD 1762 0.25 0.00 0.34 193 XM_shorewaves_Whitelist 1740 0.25 0.00 0.34 194 FILL_THIS_FORM 1736 0.40 0.60 0.34 195 TM2_M_BODY_EMPTY 1700 0.26 0.08 0.33 196 XM_Body_Obfu01 1699 0.29 0.19 0.33 197 XMSubMetaSSx_00 1687 0.37 0.50 0.33 198 XM_B_TRADE_HTML 1675 0.30 0.24 0.32 199 PLING_QUERY 1670 0.30 0.23 0.32 200 XMSubMetaSxObfu_02 1647 0.29 0.22 0.32 ----------------------------------------------------------------------