Email: 350580 Autolearn: 0 AvgScore: 1.17 AvgScanTime: 2.11 sec Spam: 73423 Autolearn: 0 AvgScore: 12.44 AvgScanTime: 2.52 sec Ham: 277157 Autolearn: 0 AvgScore: -1.82 AvgScanTime: 2.01 sec Time Spent Running SA: 205.87 hours Time Spent Processing Spam: 51.44 hours Time Spent Processing Ham: 154.43 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 67888 87.08 92.46 85.65 2 DKIM_SIGNED 61499 78.28 83.76 76.83 3 XM_DK_Pass 60445 77.19 82.32 75.83 4 DCC_CHECK 58523 56.24 79.71 50.03 5 DKIM_VALID 57123 73.74 77.80 72.67 6 XMListUnsubscribeExists 53328 59.91 72.63 56.54 7 DKIM_VALID_AU 48710 61.02 66.34 59.61 8 XM_H_QuotedFrom 36555 40.43 49.79 37.95 9 BAYES_50 32168 54.62 43.81 57.48 10 HTML_FONT_LOW_CONTRAST 30756 35.96 41.89 34.39 11 LOC_TINY_FONT_1 30503 31.76 41.54 29.17 12 XM_DK_Undo_02 27710 15.85 37.74 10.05 13 MIME_HTML_ONLY 21936 26.62 29.88 25.75 14 BAYES_99 20275 11.96 27.61 7.81 15 DKIM_VALID_EF 18043 27.62 24.57 28.43 16 FVGT_m_MULTI_ODD 17224 21.55 23.46 21.05 17 BAYES_999 17014 10.12 23.17 6.67 18 TR_DCC_Bayes_99 16375 8.47 22.30 4.81 19 RELAYCOUNTRY_META 15836 9.46 21.57 6.25 20 XMSubLong 15675 21.72 21.35 21.82 21 HTML_IMAGE_RATIO_02 14879 16.35 20.26 15.31 22 XM_Body_Dirty_Words 14468 14.97 19.70 13.71 23 BOTNET 13991 5.84 19.06 2.34 24 DCC_CHECK_NEGATIVE 13870 42.65 18.89 48.94 25 BOTNET_IPINHOSTNAME 13485 9.15 18.37 6.71 26 XM_UncommonTLD01 13129 6.78 17.88 3.84 27 T_KAM_HTML_FONT_INVALID 12597 17.02 17.16 16.98 28 T_TM2_M_HEADER_IN_MSG 10622 20.64 14.47 22.27 29 MultiRelay 10180 13.10 13.86 12.89 30 TooManyTo_001 10149 8.61 13.82 7.23 31 UNTRUSTED_Relay 9490 5.05 12.93 2.96 32 FSL_BULK_SIG 9239 8.14 12.58 6.97 33 XM_Evil_Numbers_Gen 9035 11.00 12.31 10.66 34 SpammyFromTLD_02 8677 2.66 11.82 0.24 35 XM_Multi_Part_URI 8645 14.21 11.77 14.85 36 LOTS_OF_MONEY 8581 9.00 11.69 8.29 37 XMSexyCombo_05 8420 6.72 11.47 5.47 38 BAYES_60 7828 6.10 10.66 4.89 39 MPART_ALT_DIFF 6711 5.20 9.14 4.16 40 XMSubMetaSx_00 6669 5.17 9.08 4.14 41 FROM_SUSPICIOUS_NTLD 6516 1.90 8.87 0.05 42 HTML_IMAGE_RATIO_04 6142 7.41 8.37 7.16 43 XM_H_Long_From01 5891 6.55 8.02 6.17 44 FROM_EXCESS_BASE64 5693 6.29 7.75 5.90 45 XM_UB50 5133 3.25 6.99 2.26 46 T_XMDrugObfuBody_14 5046 7.45 6.87 7.61 47 RCVD_IN_RP_RNBL 5039 1.49 6.86 0.07 48 HTML_IMAGE_RATIO_06 4920 3.78 6.70 3.01 49 XM_B_Phish_Phrases 4836 7.57 6.59 7.84 50 T_REMOTE_IMAGE 4563 3.30 6.21 2.53 51 DKIM_INVALID 4376 4.54 5.96 4.16 52 HTML_MIME_NO_HTML_TAG 4240 2.27 5.77 1.34 53 XM_H_TOP 4224 1.21 5.75 0.01 54 XMNumbers 4025 3.46 5.48 2.92 55 MIME_HTML_MOSTLY 3925 4.19 5.35 3.88 56 BAYES_80 3818 3.39 5.20 2.91 57 XMStrtUSub 3728 5.37 5.08 5.44 58 XM_DIRTYINTL 3715 2.45 5.06 1.76 59 LotsOfNums_01 3576 8.56 4.87 9.53 60 RELAYCOUNTRY_CA 3322 2.49 4.52 1.95 61 MISSING_HEADERS 3308 1.11 4.51 0.21 62 MIME_HTML_ONLY_MULTI 3199 2.26 4.36 1.70 63 XM_SPF_SoftFail 2625 1.91 3.58 1.47 64 BOTNET_NORDNS 2545 0.73 3.47 0.01 65 TR_Mismatch_TLD_02 2513 0.76 3.42 0.06 66 BAYES_40 2416 3.95 3.29 4.12 67 DATE_IN_PAST_06_12 2372 0.75 3.23 0.09 68 MIME_HEADER_CTYPE_ONLY 2362 0.77 3.22 0.12 69 BODY_URI_ONLY 2354 0.70 3.21 0.03 70 XMSexyCombo_01 2260 1.26 3.08 0.77 71 HTML_SHORT_LINK_IMG_1 2219 0.65 3.02 0.02 72 XMBdyGiftCard01 2215 2.54 3.02 2.42 73 URI_HEX 2212 2.03 3.01 1.76 74 DATE_IN_PAST_12_24 2192 0.70 2.99 0.09 75 BAYES_95 2173 2.01 2.96 1.76 76 T_XMDrugObfuBody_00 2171 1.15 2.96 0.67 77 RCVD_IN_RP_SAFE 2164 12.59 2.95 15.14 78 REPLYTO_WITHOUT_TO_CC 2145 0.63 2.92 0.02 79 TM2_M_URI_OPT_OUT 2133 2.04 2.91 1.81 80 HTML_IMAGE_ONLY_04 2132 0.62 2.90 0.02 81 SHORTENER_SHORT_IMG 2098 0.60 2.86 0.00 82 HTML_SHORT_CENTER 2094 0.60 2.85 0.00 83 XM_CamelCaseFrm001 2088 2.03 2.84 1.81 84 LongTLD 2059 0.70 2.80 0.14 85 MultiRelay_Combo 2041 0.68 2.78 0.13 86 MultiRelay_CC 2041 0.68 2.78 0.13 87 XM_OfRef6 2021 1.87 2.75 1.63 88 NO_DNS_FOR_FROM 2015 1.66 2.74 1.37 89 HTML_IMAGE_RATIO_08 1986 2.75 2.70 2.76 90 TR_LOTS_OF_MONEY1 1984 0.57 2.70 0.00 91 RELAYCOUNTRY_IN 1962 0.66 2.67 0.12 92 UNPARSEABLE_RELAY 1922 3.92 2.62 4.27 93 XMSubMetaI_00 1901 1.31 2.59 0.97 94 XMDiploma_00 1849 1.51 2.52 1.24 95 T_XMHurry_00 1807 1.13 2.46 0.78 96 BAYES_20 1770 2.80 2.41 2.91 97 XM_UB60 1739 0.53 2.37 0.05 98 XMSubMetaSxObfu_03 1729 0.88 2.35 0.49 99 RCVD_IN_MSPIKE_H2 1697 3.83 2.31 4.24 100 RELAYCOUNTRY_CN 1686 0.53 2.30 0.06 101 T_TooManySym_01 1663 5.86 2.26 6.82 102 MONEY_FRAUD_8 1610 0.46 2.19 0.00 103 ADVANCE_FEE_5_NEW_MONEY 1606 0.46 2.19 0.00 104 XMClaimOffer 1559 0.54 2.12 0.12 105 BODY_ENHANCEMENT 1542 0.49 2.10 0.07 106 BAYES_00 1460 13.07 1.99 16.00 107 RCVD_IN_RP_CERTIFIED 1445 10.72 1.97 13.04 108 RCVD_IN_BL_SPAMCOP_NET 1442 0.60 1.96 0.24 109 XM_URI_RBL 1423 0.95 1.94 0.68 110 XM_SendGrid 1423 4.75 1.94 5.50 111 T_XMDrugObfuBody_08 1420 1.39 1.93 1.25 112 BOMB_MONEY 1412 0.40 1.92 0.00 113 TVD_SPACE_RATIO_MINFP 1391 0.41 1.89 0.02 114 URIBL_BLACK 1390 0.44 1.89 0.06 115 RELAYCOUNTRY_FR 1356 0.54 1.85 0.19 116 XM_H_Long_From02 1350 2.27 1.84 2.38 117 SUBJ_ALL_CAPS 1334 1.29 1.82 1.15 118 DATE_IN_PAST_03_06 1330 0.43 1.81 0.06 119 XMGenDplmaNmb 1293 1.00 1.76 0.80 120 BAYES_05 1292 1.80 1.76 1.81 121 MIME_QP_LONG_LINE 1289 3.23 1.76 3.62 122 SpammyFromTLD_01 1180 0.69 1.61 0.45 123 LONG_JUNK_URI 1146 0.41 1.56 0.10 124 XMStockSpam_06 1089 1.63 1.48 1.66 125 XMSexyCombo_04 1084 0.53 1.48 0.28 126 XMPhish30 1079 0.68 1.47 0.47 127 FILL_THIS_FORM 1072 0.76 1.46 0.57 128 RCVD_IN_PSBL 1064 0.39 1.45 0.10 129 TR_Symld_Words 1051 1.37 1.43 1.35 130 XMPhish11 1048 0.98 1.43 0.86 131 T_MONEY_PERCENT 1028 0.50 1.40 0.26 132 TR_LOTS_OF_MONEY2 1028 0.50 1.40 0.26 133 MAILING_LIST_MULTI 1024 1.59 1.39 1.64 134 XMBody_17 1016 1.13 1.38 1.07 135 ALL_TRUSTED 959 14.19 1.31 17.60 136 FILL_THIS_FORM_LOAN 946 0.67 1.29 0.51 137 RELAYCOUNTRY_GB 945 0.58 1.29 0.40 138 XMBody_78 941 0.65 1.28 0.49 139 LOW_PRICE 913 0.51 1.24 0.32 140 MPART_ALT_DIFF_COUNT 908 0.51 1.24 0.32 141 DIET_1 904 0.65 1.23 0.49 142 RCVD_IN_IADB_LISTED 902 2.77 1.23 3.18 143 FILL_THIS_FORM_LONG 891 0.66 1.21 0.52 144 XM_H_PHPOS 871 0.97 1.19 0.92 145 XM_B_COPY_HTML 871 0.77 1.19 0.66 146 XM_salutation2 865 0.79 1.18 0.69 147 RELAYCOUNTRY_AT 853 0.57 1.16 0.41 148 URI_TRY_3LD 831 1.62 1.13 1.75 149 XMHTMLBadTable_001 798 0.95 1.09 0.92 150 TR_XM_DK_Bayes 776 11.38 1.06 14.12 151 TM2_M_VERY_LONG_WORD 760 0.95 1.04 0.93 152 RCVD_IN_IADB_SPF 751 2.40 1.02 2.77 153 HTML_IMAGE_ONLY_28 750 0.34 1.02 0.16 154 SUBJ_DOLLARS 749 0.61 1.02 0.50 155 DKIM_ADSP_CUSTOM_MED 748 0.82 1.02 0.77 156 XM_UB99 744 0.22 1.01 0.01 157 TR_XM_RelayPhish 726 0.58 0.99 0.47 158 NML_ADSP_CUSTOM_MED 710 0.62 0.97 0.52 159 RCVD_IN_IADB_SENDERID 689 2.16 0.94 2.48 160 TR_XM_DK_Bayes1 674 10.99 0.92 13.66 161 RELAYCOUNTRY_DE 672 0.39 0.92 0.24 162 XM_Combo_Sbj 671 0.32 0.91 0.16 163 RCVD_IN_IADB_DK 661 2.09 0.90 2.41 164 HK_RANDOM_FROM 645 0.33 0.88 0.18 165 HTML_FONT_FACE_BAD 620 0.62 0.84 0.56 166 RELAYCOUNTRY_AU 614 0.46 0.84 0.36 167 THIS_AD 610 0.25 0.83 0.09 168 XM_Lotto 594 0.22 0.81 0.07 169 URIBL_DBL_SPAM 591 0.21 0.80 0.05 170 XM_PDF 590 1.51 0.80 1.70 171 XM_H_PHPMailer 586 0.63 0.80 0.59 172 TR_LOTS_OF_MONEY3 581 0.42 0.79 0.32 173 TooManyTo_002 580 0.99 0.79 1.04 174 XMGppyBdWords 577 0.36 0.79 0.25 175 URI_NOVOWEL 567 0.46 0.77 0.37 176 FORGED_GMAIL_RCVD 548 0.42 0.75 0.34 177 XMSlimDrugH 544 0.40 0.74 0.31 178 XM_UB999 541 0.16 0.74 0.01 179 XM_ProductURIs 538 1.28 0.73 1.43 180 RDNS_DYNAMIC 536 0.61 0.73 0.58 181 XM_DK_Undo_01 528 1.21 0.72 1.33 182 XM_XX_Yahoo 522 0.20 0.71 0.06 183 SUBJ_ILLEGAL_CHARS 515 0.16 0.70 0.01 184 SUBJECT_NEEDS_ENCODING 515 0.16 0.70 0.01 185 PP_MIME_FAKE_ASCII_TEXT 511 0.26 0.70 0.14 186 RCVD_IN_IADB_VOUCHED 509 1.72 0.69 1.99 187 RELAYCOUNTRY_IE 504 0.30 0.69 0.19 188 TooManyTo_003 501 0.73 0.68 0.74 189 T_HTML_TAG_BALANCE_CENTER 500 0.29 0.68 0.19 190 T_FILL_THIS_FORM_SHORT 494 0.51 0.67 0.47 191 XMSubMetaSSx_00 493 0.29 0.67 0.19 192 XM_UB80 478 0.15 0.65 0.02 193 XMPhish14 477 0.46 0.65 0.40 194 XMBrknScrpt_02 476 0.70 0.65 0.72 195 DKIM_ADSP_NXDOMAIN 474 0.58 0.65 0.56 196 XM_RXBody 469 0.45 0.64 0.40 197 TR_XM_DK_Bayes2 456 9.57 0.62 11.94 198 HTML_TAG_BALANCE_BODY 456 0.53 0.62 0.50 199 XMMoneyMeta_00 453 0.41 0.62 0.36 200 LONG_JUNK_URI2 451 0.14 0.61 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 237390 87.08 92.46 85.65 2 DKIM_SIGNED 212942 78.28 83.76 76.83 3 XM_DK_Pass 210156 77.19 82.32 75.83 4 DKIM_VALID 201406 73.74 77.80 72.67 5 DKIM_VALID_AU 165222 61.02 66.34 59.61 6 BAYES_50 159313 54.62 43.81 57.48 7 XMListUnsubscribeExists 156714 59.91 72.63 56.54 8 DCC_CHECK 138656 56.24 79.71 50.03 9 DCC_CHECK_NEGATIVE 135642 42.65 18.89 48.94 10 XM_H_QuotedFrom 105176 40.43 49.79 37.95 11 HTML_FONT_LOW_CONTRAST 95302 35.96 41.89 34.39 12 LOC_TINY_FONT_1 80834 31.76 41.54 29.17 13 DKIM_VALID_EF 78800 27.62 24.57 28.43 14 MIME_HTML_ONLY 71372 26.62 29.88 25.75 15 T_TM2_M_HEADER_IN_MSG 61736 20.64 14.47 22.27 16 XMSubLong 60481 21.72 21.35 21.82 17 FVGT_m_MULTI_ODD 58339 21.55 23.46 21.05 18 ALL_TRUSTED 48790 14.19 1.31 17.60 19 T_KAM_HTML_FONT_INVALID 47066 17.02 17.16 16.98 20 BAYES_00 44346 13.07 1.99 16.00 21 HTML_IMAGE_RATIO_02 42425 16.35 20.26 15.31 22 RCVD_IN_RP_SAFE 41971 12.59 2.95 15.14 23 XM_Multi_Part_URI 41163 14.21 11.77 14.85 24 XM_DKIMWhitelistDomains 40530 11.57 0.03 14.62 25 TR_XM_DK_Bayes 39126 11.38 1.06 14.12 26 XM_Body_Dirty_Words 38006 14.97 19.70 13.71 27 TR_XM_DK_Bayes1 37864 10.99 0.92 13.66 28 RCVD_IN_RP_CERTIFIED 36149 10.72 1.97 13.04 29 MultiRelay 35732 13.10 13.86 12.89 30 TR_XM_DK_Bayes2 33086 9.57 0.62 11.94 31 XM_Evil_Numbers_Gen 29544 11.00 12.31 10.66 32 XM_DK_Undo_02 27842 15.85 37.74 10.05 33 LotsOfNums_01 26420 8.56 4.87 9.53 34 LOTS_OF_MONEY 22982 9.00 11.69 8.29 35 XM_B_Phish_Phrases 21718 7.57 6.59 7.84 36 BAYES_99 21641 11.96 27.61 7.81 37 T_XMDrugObfuBody_14 21078 7.45 6.87 7.61 38 TooManyTo_001 20044 8.61 13.82 7.23 39 HTML_IMAGE_RATIO_04 19839 7.41 8.37 7.16 40 FSL_BULK_SIG 19313 8.14 12.58 6.97 41 T_TooManySym_01 18895 5.86 2.26 6.82 42 BOTNET_IPINHOSTNAME 18584 9.15 18.37 6.71 43 BAYES_999 18476 10.12 23.17 6.67 44 RELAYCOUNTRY_META 17317 9.46 21.57 6.25 45 XM_H_Long_From01 17089 6.55 8.02 6.17 46 FROM_EXCESS_BASE64 16350 6.29 7.75 5.90 47 XM_SendGrid 15242 4.75 1.94 5.50 48 XMSexyCombo_05 15155 6.72 11.47 5.47 49 XMStrtUSub 15084 5.37 5.08 5.44 50 BAYES_60 13551 6.10 10.66 4.89 51 TR_DCC_Bayes_99 13336 8.47 22.30 4.81 52 UNPARSEABLE_RELAY 11835 3.92 2.62 4.27 53 TO_MALFORMED 11785 3.39 0.15 4.25 54 RCVD_IN_MSPIKE_H2 11740 3.83 2.31 4.24 55 ANY_BOUNCE_MESSAGE 11591 3.38 0.34 4.18 56 BOUNCE_MESSAGE 11590 3.38 0.33 4.18 57 DKIM_INVALID 11536 4.54 5.96 4.16 58 MPART_ALT_DIFF 11524 5.20 9.14 4.16 59 TVD_RCVD_IP 11507 3.33 0.22 4.15 60 XMSubMetaSx_00 11469 5.17 9.08 4.14 61 BAYES_40 11426 3.95 3.29 4.12 62 MIME_HTML_MOSTLY 10750 4.19 5.35 3.88 63 XM_UncommonTLD01 10633 6.78 17.88 3.84 64 MIME_QP_LONG_LINE 10022 3.23 1.76 3.62 65 IN_ZIMBRA_NJ_WHITELIST 9082 2.59 0.02 3.28 66 RCVD_IN_IADB_LISTED 8820 2.77 1.23 3.18 67 HTML_IMAGE_RATIO_06 8341 3.78 6.70 3.01 68 UNTRUSTED_Relay 8200 5.05 12.93 2.96 69 XMNumbers 8103 3.46 5.48 2.92 70 BAYES_20 8059 2.80 2.41 2.91 71 BAYES_80 8054 3.39 5.20 2.91 72 DC_GIF_UNO_LARGO 7716 2.21 0.04 2.78 73 RCVD_IN_IADB_SPF 7678 2.40 1.02 2.77 74 HTML_IMAGE_RATIO_08 7662 2.75 2.70 2.76 75 T_REMOTE_IMAGE 7000 3.30 6.21 2.53 76 INVALID_MSGID 6997 2.06 0.33 2.52 77 RCVD_IN_IADB_SENDERID 6873 2.16 0.94 2.48 78 XMBdyGiftCard01 6707 2.54 3.02 2.42 79 RCVD_IN_IADB_DK 6672 2.09 0.90 2.41 80 XM_H_Long_From02 6597 2.27 1.84 2.38 81 BOTNET 6495 5.84 19.06 2.34 82 URI_OPTOUT_3LD 6382 1.84 0.08 2.30 83 XM_UB50 6260 3.25 6.99 2.26 84 T_TooManySym_02 6170 1.87 0.53 2.23 85 RCVD_IN_MSPIKE_WL 5906 1.79 0.52 2.13 86 RCVD_IN_MSPIKE_H3 5906 1.79 0.52 2.13 87 TR_MetaPhish_Combo_01 5588 1.71 0.54 2.02 88 RCVD_IN_IADB_VOUCHED 5515 1.72 0.69 1.99 89 RELAYCOUNTRY_CA 5409 2.49 4.52 1.95 90 USER_IN_DEF_DKIM_WL 5128 1.47 0.01 1.85 91 BAYES_05 5027 1.80 1.76 1.81 92 TM2_M_URI_OPT_OUT 5021 2.04 2.91 1.81 93 XM_CamelCaseFrm001 5017 2.03 2.84 1.81 94 URI_HEX 4890 2.03 3.01 1.76 95 XM_DIRTYINTL 4879 2.45 5.06 1.76 96 BAYES_95 4871 2.01 2.96 1.76 97 URI_TRY_3LD 4864 1.62 1.13 1.75 98 IN_HORDE_ADDRESS_BOOK 4756 1.37 0.06 1.72 99 MIME_HTML_ONLY_MULTI 4712 2.26 4.36 1.70 100 XM_PDF 4703 1.51 0.80 1.70 101 XMStockSpam_06 4609 1.63 1.48 1.66 102 MAILING_LIST_MULTI 4538 1.59 1.39 1.64 103 XM_OfRef6 4526 1.87 2.75 1.63 104 RELAYCOUNTRY_PH 4417 1.27 0.03 1.59 105 XM_SPF_SoftFail 4075 1.91 3.58 1.47 106 XM_ProductURIs 3961 1.28 0.73 1.43 107 NO_DNS_FOR_FROM 3799 1.66 2.74 1.37 108 TR_Symld_Words 3743 1.37 1.43 1.35 109 HTML_MIME_NO_HTML_TAG 3723 2.27 5.77 1.34 110 XM_DK_Undo_01 3700 1.21 0.72 1.33 111 RCVD_IN_IADB_OPTIN 3469 1.10 0.52 1.25 112 T_XMDrugObfuBody_08 3457 1.39 1.93 1.25 113 XMDiploma_00 3439 1.51 2.52 1.24 114 SUBJ_ALL_CAPS 3195 1.29 1.82 1.15 115 XM_GoogleGroups 3054 0.97 0.47 1.10 116 XMBody_17 2959 1.13 1.38 1.07 117 TooManyTo_002 2893 0.99 0.79 1.04 118 XM_B_REG_HTML 2890 0.94 0.55 1.04 119 XMSubMetaI_00 2700 1.31 2.59 0.97 120 TM2_M_VERY_LONG_WORD 2572 0.95 1.04 0.93 121 XMHTMLBadTable_001 2550 0.95 1.09 0.92 122 XM_H_PHPOS 2544 0.97 1.19 0.92 123 XMBody_95 2530 0.74 0.07 0.91 124 USER_IN_WHITELIST 2514 0.72 0.00 0.91 125 PLING_QUERY 2418 0.82 0.61 0.87 126 XMPhish11 2384 0.98 1.43 0.86 127 T_TooManySym_03 2243 0.66 0.10 0.81 128 XMGenDplmaNmb 2210 1.00 1.76 0.80 129 T_XMHurry_00 2149 1.13 2.46 0.78 130 XMSexyCombo_01 2140 1.26 3.08 0.77 131 DKIM_ADSP_CUSTOM_MED 2121 0.82 1.02 0.77 132 TooManyTo_003 2057 0.73 0.68 0.74 133 XMSubMetaSxObfu_02 2045 0.68 0.44 0.74 134 XMBrknScrpt_02 1984 0.70 0.65 0.72 135 XM_salutation2 1915 0.79 1.18 0.69 136 XM_URI_RBL 1894 0.95 1.94 0.68 137 T_XMDrugObfuBody_00 1862 1.15 2.96 0.67 138 XM_B_COPY_HTML 1833 0.77 1.19 0.66 139 TooManyTo_004 1652 0.58 0.54 0.60 140 XM_H_PHPMailer 1629 0.63 0.80 0.59 141 RDNS_DYNAMIC 1597 0.61 0.73 0.58 142 XM_shorewaves_Whitelist 1589 0.45 0.00 0.57 143 FILL_THIS_FORM 1585 0.76 1.46 0.57 144 DKIM_ADSP_NXDOMAIN 1547 0.58 0.65 0.56 145 HTML_FONT_FACE_BAD 1544 0.62 0.84 0.56 146 TM2_M_A_HREF_HREF 1492 0.50 0.37 0.54 147 TooManyTo_005 1477 0.52 0.49 0.53 148 NML_ADSP_CUSTOM_MED 1455 0.62 0.97 0.52 149 FILL_THIS_FORM_LONG 1437 0.66 1.21 0.52 150 FILL_THIS_FORM_LOAN 1417 0.67 1.29 0.51 151 ADMITS_SPAM 1404 0.46 0.30 0.51 152 HTML_TAG_BALANCE_BODY 1396 0.53 0.62 0.50 153 SUBJ_DOLLARS 1386 0.61 1.02 0.50 154 HELO_NODOT 1371 0.47 0.39 0.49 155 DIET_1 1371 0.65 1.23 0.49 156 XMSubMetaSxObfu_03 1366 0.88 2.35 0.49 157 XMBody_78 1353 0.65 1.28 0.49 158 T_Symld_Words_02 1311 0.47 0.47 0.47 159 XMPhish30 1303 0.68 1.47 0.47 160 T_FILL_THIS_FORM_SHORT 1299 0.51 0.67 0.47 161 TR_XM_RelayPhish 1291 0.58 0.99 0.47 162 XMLngstWrd_00 1259 0.41 0.25 0.45 163 SpammyFromTLD_01 1253 0.69 1.61 0.45 164 XM_Walgreens_Forge 1248 0.43 0.35 0.45 165 XMHTML_After_End 1242 0.48 0.59 0.45 166 XMNoVowels 1207 0.39 0.22 0.44 167 XMLngstWrd_01 1152 0.37 0.21 0.42 168 XM_Body_Obfu01 1142 0.35 0.11 0.41 169 RELAYCOUNTRY_AT 1139 0.57 1.16 0.41 170 XMPhish14 1120 0.46 0.65 0.40 171 XM_RXBody 1101 0.45 0.64 0.40 172 RELAYCOUNTRY_GB 1095 0.58 1.29 0.40 173 T_TooManySym_04 1059 0.30 0.01 0.38 174 URI_NOVOWEL 1039 0.46 0.77 0.37 175 RELAYCOUNTRY_AU 994 0.46 0.84 0.36 176 XMMoneyMeta_00 990 0.41 0.62 0.36 177 XMRcvdHeader_15 973 0.28 0.00 0.35 178 HTTPS_HTTP_MISMATCH 966 0.34 0.29 0.35 179 XM_H_PHPOS_M 960 0.39 0.55 0.35 180 XM_ShortIntro_01 955 0.34 0.35 0.34 181 XMCapTrack 942 0.31 0.19 0.34 182 FORGED_GMAIL_RCVD 938 0.42 0.75 0.34 183 REMOVE_BEFORE_LINK 927 0.31 0.22 0.33 184 FSL_THIS_IS_ADV 912 0.29 0.14 0.33 185 BASE64_LENGTH_79_INF 898 0.33 0.35 0.32 186 XM_H_SpoofStaff4 896 0.27 0.05 0.32 187 MPART_ALT_DIFF_COUNT 892 0.51 1.24 0.32 188 XM_Akamai 887 0.25 0.01 0.32 189 XM_D_tchamptons_WL 883 0.25 0.00 0.32 190 LOW_PRICE 883 0.51 1.24 0.32 191 XMSUPPORT 883 0.25 0.00 0.32 192 TR_LOTS_OF_MONEY3 878 0.42 0.79 0.32 193 XMDateMe_00 869 0.29 0.19 0.31 194 XMSlimDrugH 855 0.40 0.74 0.31 195 NUMERIC_HTTP_ADDR 844 0.30 0.27 0.30 196 XM_S_JOY_D 799 0.29 0.29 0.29 197 XMSubject_48 798 0.36 0.61 0.29 198 XMSexyCombo_04 777 0.53 1.48 0.28 199 T_MONEY_PERCENT 732 0.50 1.40 0.26 200 TR_LOTS_OF_MONEY2 732 0.50 1.40 0.26 ----------------------------------------------------------------------