Email: 544233 Autolearn: 0 AvgScore: 2.43 AvgScanTime: 2.00 sec Spam: 143412 Autolearn: 0 AvgScore: 12.35 AvgScanTime: 2.36 sec Ham: 400821 Autolearn: 0 AvgScore: -1.12 AvgScanTime: 1.87 sec Time Spent Running SA: 301.87 hours Time Spent Processing Spam: 94.09 hours Time Spent Processing Ham: 207.79 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 136796 89.32 95.39 87.15 2 DKIM_SIGNED 112154 76.84 78.20 76.35 3 DCC_CHECK 110263 49.22 76.89 39.32 4 XMListUnsubscribeExists 109606 58.11 76.43 51.56 5 XM_DK_Pass 108674 75.04 75.78 74.77 6 DKIM_VALID 103126 71.22 71.91 70.98 7 DKIM_VALID_AU 84229 53.24 58.73 51.28 8 XM_H_QuotedFrom 74188 39.94 51.73 35.72 9 XM_DK_Undo_02 65937 24.30 45.98 16.54 10 BAYES_99 56746 21.38 39.57 14.87 11 HTML_FONT_LOW_CONTRAST 55698 31.50 38.84 28.88 12 BAYES_50 53295 46.82 37.16 50.28 13 LOC_TINY_FONT_1 48240 25.83 33.64 23.04 14 BAYES_999 47806 18.64 33.33 13.38 15 TR_DCC_Bayes_99 44756 13.84 31.21 7.62 16 MIME_HTML_ONLY 44066 23.43 30.73 20.82 17 FVGT_m_MULTI_ODD 38937 22.64 27.15 21.02 18 XMSubLong 38430 24.08 26.80 23.10 19 DCC_CHECK_NEGATIVE 30897 49.03 21.54 58.87 20 XM_Body_Dirty_Words 30086 15.21 20.98 13.14 21 DKIM_VALID_EF 29621 26.14 20.65 28.10 22 T_KAM_HTML_FONT_INVALID 28539 17.15 19.90 16.16 23 RELAYCOUNTRY_META 28272 8.82 19.71 4.93 24 XM_Multi_Part_URI 26612 14.42 18.56 12.94 25 BOTNET 26456 6.34 18.45 2.01 26 BOTNET_IPINHOSTNAME 26308 9.20 18.34 5.93 27 T_TM2_M_HEADER_IN_MSG 26060 26.71 18.17 29.76 28 MultiRelay 20147 17.61 14.05 18.88 29 HTML_IMAGE_RATIO_02 19829 9.80 13.83 8.36 30 XM_Evil_Numbers_Gen 19755 10.45 13.77 9.26 31 LOTS_OF_MONEY 18807 10.83 13.11 10.01 32 XMSexyCombo_05 18567 6.15 12.95 3.72 33 UNTRUSTED_Relay 17846 4.18 12.44 1.23 34 XM_UncommonTLD01 17670 5.90 12.32 3.60 35 FSL_BULK_SIG 17598 8.35 12.27 6.95 36 XMSubMetaSx_00 14836 5.62 10.35 3.92 37 HTML_IMAGE_RATIO_04 12925 6.43 9.01 5.51 38 T_XMDrugObfuBody_14 12613 8.47 8.79 8.35 39 XM_H_Long_From01 11589 7.22 8.08 6.91 40 XMNumbers 11544 4.38 8.05 3.06 41 MPART_ALT_DIFF 10434 4.28 7.28 3.21 42 BAYES_80 10428 4.67 7.27 3.74 43 XM_UB50 10364 2.45 7.23 0.74 44 TooManyTo_001 10306 7.87 7.19 8.11 45 LotsOfNums_01 9602 8.50 6.70 9.15 46 DKIM_INVALID 9028 5.62 6.30 5.38 47 BAYES_60 8935 6.03 6.23 5.95 48 HTML_MIME_NO_HTML_TAG 8596 3.29 5.99 2.32 49 FROM_SUSPICIOUS_NTLD 8488 1.74 5.92 0.25 50 XM_B_Phish_Phrases 8405 6.01 5.86 6.07 51 SpammyFromTLD_02 7975 1.81 5.56 0.46 52 XM_DIRTYINTL 7769 3.25 5.42 2.48 53 HTML_IMAGE_RATIO_06 7400 4.21 5.16 3.86 54 RELAYCOUNTRY_FR 6780 1.40 4.73 0.21 55 DKIM_ADSP_NXDOMAIN 6630 1.53 4.62 0.42 56 MIME_HTML_MOSTLY 6558 2.85 4.57 2.23 57 INVALID_MSGID 6468 2.56 4.51 1.86 58 FROM_EXCESS_BASE64 6050 4.63 4.22 4.77 59 XM_SendGrid 5909 5.85 4.12 6.47 60 BAYES_95 5851 3.00 4.08 2.62 61 RELAYCOUNTRY_CA 5845 2.15 4.08 1.46 62 XMSubMetaSxObfu_03 5693 1.43 3.97 0.52 63 XM_CamelCaseFrm001 5632 2.33 3.93 1.75 64 RCVD_IN_RP_SAFE 5351 9.14 3.73 11.08 65 URI_HEX 5325 2.35 3.71 1.86 66 TM2_M_URI_OPT_OUT 5198 2.13 3.62 1.59 67 MIME_QP_LONG_LINE 4849 5.48 3.38 6.23 68 XM_SPF_SoftFail 4835 2.29 3.37 1.90 69 XMStrtUSub 4831 4.09 3.37 4.34 70 T_REMOTE_IMAGE 4642 3.75 3.24 3.93 71 HTML_IMAGE_RATIO_08 4481 2.39 3.12 2.13 72 RCVD_IN_RP_CERTIFIED 4390 8.18 3.06 10.01 73 XM_OfRef6 4328 1.84 3.02 1.41 74 MIME_HTML_ONLY_MULTI 4281 2.09 2.99 1.77 75 XMDiploma_00 4248 2.27 2.96 2.02 76 NORDNS_LOW_CONTRAST 4198 0.79 2.93 0.02 77 XMBdyGiftCard01 4125 1.45 2.88 0.94 78 RCVD_IN_BL_SPAMCOP_NET 3944 1.15 2.75 0.58 79 XMSexyCombo_01 3870 1.12 2.70 0.56 80 XM_E_Blogspot 3737 0.76 2.61 0.09 81 XM_URI_RBL 3653 1.02 2.55 0.48 82 T_TooManySym_01 3646 5.03 2.54 5.92 83 T_XMDrugObfuBody_08 3606 1.74 2.51 1.46 84 RCVD_IN_MSPIKE_H2 3471 4.05 2.42 4.63 85 XMHTMLBadTable_001 3269 0.92 2.28 0.43 86 BOTNET_NORDNS 3239 0.61 2.26 0.02 87 XMGenDplmaNmb 3221 1.67 2.25 1.46 88 BAYES_40 2982 3.59 2.08 4.14 89 MultiRelay_Combo 2972 0.67 2.07 0.16 90 MultiRelay_CC 2972 0.67 2.07 0.16 91 RELAYCOUNTRY_GB 2941 1.26 2.05 0.97 92 T_MONEY_PERCENT 2903 0.85 2.02 0.42 93 TR_LOTS_OF_MONEY2 2903 0.85 2.02 0.42 94 NO_DNS_FOR_FROM 2828 1.41 1.97 1.21 95 RCVD_IN_RP_RNBL 2755 0.55 1.92 0.05 96 TR_XM_PHPDW 2755 1.23 1.92 0.99 97 TR_XM_PHPForged 2732 1.21 1.91 0.96 98 TR_XM_FormFill2 2698 1.20 1.88 0.96 99 XM_H_PHPOS 2686 1.20 1.87 0.95 100 RELAYCOUNTRY_IN 2624 0.55 1.83 0.09 101 TM2_M_VERY_LONG_WORD 2620 1.29 1.83 1.10 102 TR_XM_DK_SendGrid 2563 2.77 1.79 3.12 103 DATE_IN_PAST_06_12 2547 0.50 1.78 0.04 104 ALL_TRUSTED 2534 11.68 1.77 15.22 105 RCVD_IN_IADB_LISTED 2528 4.79 1.76 5.87 106 XM_UB99 2525 0.47 1.76 0.01 107 XMBody_78 2514 0.76 1.75 0.40 108 HTML_TAG_BALANCE_BODY 2440 0.76 1.70 0.42 109 XM_H_Long_From02 2415 1.10 1.68 0.89 110 BAYES_20 2402 2.61 1.67 2.95 111 XMBody_17 2366 0.87 1.65 0.59 112 HK_RANDOM_REPLYTO 2350 0.57 1.64 0.19 113 XM_UB60 2276 0.49 1.59 0.10 114 DATE_IN_PAST_03_06 2265 0.49 1.58 0.10 115 T_XMHurry_00 2198 0.81 1.53 0.56 116 MAILING_LIST_MULTI 2183 2.08 1.52 2.28 117 XMStockSpam_06 2176 1.51 1.52 1.51 118 RCVD_IN_PSBL 2174 0.42 1.52 0.02 119 SUBJ_ALL_CAPS 2098 1.88 1.46 2.03 120 XM_UB999 2098 0.39 1.46 0.01 121 RCVD_IN_IADB_SPF 2040 4.18 1.42 5.17 122 UNPARSEABLE_RELAY 1948 3.08 1.36 3.69 123 XM_ProductURIs 1867 0.74 1.30 0.54 124 RCVD_IN_IADB_SENDERID 1841 3.70 1.28 4.57 125 HK_RANDOM_ENVFROM 1826 0.43 1.27 0.13 126 XMSubMetaI_00 1808 0.74 1.26 0.56 127 RCVD_IN_IADB_DK 1796 3.62 1.25 4.47 128 FILL_THIS_FORM 1778 0.90 1.24 0.77 129 TR_Symld_Words 1768 1.69 1.23 1.85 130 SpammyFromTLD_01 1749 0.89 1.22 0.78 131 XM_H_TOP 1741 0.32 1.21 0.00 132 URI_TRY_3LD 1725 1.41 1.20 1.49 133 T_Symld_Words_02 1695 0.90 1.18 0.80 134 XM_B_REG_HTML 1679 0.64 1.17 0.46 135 DIET_1 1654 0.90 1.15 0.81 136 FILL_THIS_FORM_LONG 1651 0.56 1.15 0.34 137 TR_LOTS_OF_MONEY3 1631 0.60 1.14 0.41 138 XMSexyCombo_04 1597 0.39 1.11 0.13 139 URIBL_BLACK 1580 0.33 1.10 0.05 140 XMPhish30 1570 0.63 1.09 0.46 141 BODY_ENHANCEMENT 1533 0.30 1.07 0.03 142 XMHTML_After_End 1524 0.56 1.06 0.38 143 RCVD_IN_IADB_VOUCHED 1518 3.04 1.06 3.75 144 XMPhish11 1506 1.13 1.05 1.17 145 TR_XM_RelayPhish 1502 0.95 1.05 0.92 146 SUBJ_DOLLARS 1493 0.62 1.04 0.47 147 XM_H_PHPMailer 1477 0.64 1.03 0.50 148 HTML_IMAGE_ONLY_28 1469 0.53 1.02 0.35 149 BAYES_05 1467 1.70 1.02 1.94 150 LONG_JUNK_URI 1413 0.31 0.99 0.07 151 PLING_QUERY 1405 0.81 0.98 0.75 152 XMSlimDrugH 1374 0.46 0.96 0.29 153 HEXHASH_WORD 1367 0.25 0.95 0.00 154 T_XMDrugObfuBody_00 1367 0.85 0.95 0.82 155 T_FILL_THIS_FORM_SHORT 1361 0.81 0.95 0.76 156 HELO_NODOT 1346 1.37 0.94 1.53 157 HELO_NO_DOMAIN 1344 1.37 0.94 1.53 158 URI_NOVOWEL 1285 0.57 0.90 0.46 159 RELAYCOUNTRY_AT 1284 0.37 0.90 0.18 160 DKIM_ADSP_CUSTOM_MED 1222 1.14 0.85 1.25 161 DATE_IN_PAST_12_24 1191 0.24 0.83 0.03 162 XM_HighProb1 1190 0.23 0.83 0.01 163 RELAYCOUNTRY_DE 1172 0.49 0.82 0.37 164 XMSubMetaSSx_00 1170 0.34 0.82 0.17 165 NML_ADSP_CUSTOM_MED 1167 0.84 0.81 0.85 166 XM_UB80 1153 0.24 0.80 0.04 167 HK_SCAM 1133 0.22 0.79 0.02 168 FILL_THIS_FORM_LOAN 1130 0.47 0.79 0.35 169 TR_Mismatch_TLD_02 1125 0.26 0.78 0.07 170 XM_H_PHPOS_M 1104 0.35 0.77 0.20 171 MISSING_HEADERS 1078 0.56 0.75 0.49 172 XM_RXBody 1071 0.33 0.75 0.18 173 REPLYTO_WITHOUT_TO_CC 1025 0.23 0.71 0.05 174 BAYES_00 1024 9.91 0.71 13.21 175 XM_PDF 1023 3.69 0.71 4.75 176 RCVD_IN_IADB_OPTIN 1023 1.94 0.71 2.38 177 XMBrknScrpt_02 1023 0.58 0.71 0.53 178 XM_B_COPY_HTML 1010 0.61 0.70 0.58 179 XM_DK_Undo_01 1002 1.52 0.70 1.81 180 URIBL_DBL_SPAM 996 0.19 0.69 0.01 181 XMGppyBdWords 993 0.33 0.69 0.19 182 TM2_M_A_HREF_HREF 984 1.04 0.69 1.16 183 SHORT_URI_3 982 0.30 0.68 0.16 184 NUMERIC_HTTP_ADDR 981 0.44 0.68 0.36 185 LongTLD 981 0.28 0.68 0.13 186 HTML_FONT_FACE_BAD 963 0.60 0.67 0.58 187 HTML_OFF_PAGE 956 0.18 0.67 0.00 188 FORGED_GMAIL_RCVD 942 0.59 0.66 0.57 189 RELAYCOUNTRY_CN 926 0.21 0.65 0.06 190 T_TooManySym_02 886 1.65 0.62 2.03 191 TooManyTo_002 881 1.83 0.61 2.26 192 RELAYCOUNTRY_AU 880 0.48 0.61 0.44 193 RDNS_DYNAMIC 862 0.47 0.60 0.42 194 TR_MetaPhish_Combo_01 856 1.39 0.60 1.67 195 HTTPS_HTTP_MISMATCH 832 0.49 0.58 0.46 196 XMMoneyMeta_00 831 0.50 0.58 0.47 197 RELAYCOUNTRY_NL 825 0.33 0.58 0.25 198 MPART_ALT_DIFF_COUNT 809 0.31 0.56 0.22 199 XMLngstWrd_00 804 0.69 0.56 0.73 200 ADVANCE_FEE_2_NEW_MONEY 800 0.16 0.56 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 349310 89.32 95.39 87.15 2 DKIM_SIGNED 306045 76.84 78.20 76.35 3 XM_DK_Pass 299710 75.04 75.78 74.77 4 DKIM_VALID 284489 71.22 71.91 70.98 5 DCC_CHECK_NEGATIVE 235945 49.03 21.54 58.87 6 XMListUnsubscribeExists 206665 58.11 76.43 51.56 7 DKIM_VALID_AU 205527 53.24 58.73 51.28 8 BAYES_50 201530 46.82 37.16 50.28 9 DCC_CHECK 157588 49.22 76.89 39.32 10 XM_H_QuotedFrom 143162 39.94 51.73 35.72 11 T_TM2_M_HEADER_IN_MSG 119289 26.71 18.17 29.76 12 HTML_FONT_LOW_CONTRAST 115758 31.50 38.84 28.88 13 DKIM_VALID_EF 112647 26.14 20.65 28.10 14 XMSubLong 92604 24.08 26.80 23.10 15 LOC_TINY_FONT_1 92358 25.83 33.64 23.04 16 FVGT_m_MULTI_ODD 84268 22.64 27.15 21.02 17 MIME_HTML_ONLY 83459 23.43 30.73 20.82 18 MultiRelay 75668 17.61 14.05 18.88 19 XM_DK_Undo_02 66309 24.30 45.98 16.54 20 T_KAM_HTML_FONT_INVALID 64790 17.15 19.90 16.16 21 ALL_TRUSTED 61015 11.68 1.77 15.22 22 BAYES_99 59622 21.38 39.57 14.87 23 XM_DKIMWhitelistDomains 57717 10.65 0.18 14.40 24 BAYES_999 53622 18.64 33.33 13.38 25 BAYES_00 52934 9.91 0.71 13.21 26 XM_Body_Dirty_Words 52685 15.21 20.98 13.14 27 XM_Multi_Part_URI 51851 14.42 18.56 12.94 28 RCVD_IN_RP_SAFE 44394 9.14 3.73 11.08 29 TR_XM_DK_Bayes 42807 7.96 0.37 10.68 30 TR_XM_DK_Bayes1 40690 7.55 0.29 10.15 31 RCVD_IN_RP_CERTIFIED 40141 8.18 3.06 10.01 32 LOTS_OF_MONEY 40140 10.83 13.11 10.01 33 XM_Evil_Numbers_Gen 37126 10.45 13.77 9.26 34 LotsOfNums_01 36660 8.50 6.70 9.15 35 TR_XM_DK_Bayes2 34024 6.31 0.24 8.49 36 HTML_IMAGE_RATIO_02 33518 9.80 13.83 8.36 37 T_XMDrugObfuBody_14 33458 8.47 8.79 8.35 38 TooManyTo_001 32505 7.87 7.19 8.11 39 TR_DCC_Bayes_99 30549 13.84 31.21 7.62 40 FSL_BULK_SIG 27845 8.35 12.27 6.95 41 XM_H_Long_From01 27705 7.22 8.08 6.91 42 XM_SendGrid 25939 5.85 4.12 6.47 43 MIME_QP_LONG_LINE 24971 5.48 3.38 6.23 44 XM_B_Phish_Phrases 24316 6.01 5.86 6.07 45 BAYES_60 23861 6.03 6.23 5.95 46 BOTNET_IPINHOSTNAME 23775 9.20 18.34 5.93 47 T_TooManySym_01 23726 5.03 2.54 5.92 48 RCVD_IN_IADB_LISTED 23540 4.79 1.76 5.87 49 HTML_IMAGE_RATIO_04 22090 6.43 9.01 5.51 50 DKIM_INVALID 21556 5.62 6.30 5.38 51 RCVD_IN_IADB_SPF 20712 4.18 1.42 5.17 52 RELAYCOUNTRY_META 19743 8.82 19.71 4.93 53 FROM_EXCESS_BASE64 19137 4.63 4.22 4.77 54 XM_PDF 19058 3.69 0.71 4.75 55 RCVD_IN_MSPIKE_H2 18557 4.05 2.42 4.63 56 RCVD_IN_IADB_SENDERID 18319 3.70 1.28 4.57 57 RCVD_IN_IADB_DK 17915 3.62 1.25 4.47 58 XMStrtUSub 17407 4.09 3.37 4.34 59 IN_ZIMBRA_NJ_WHITELIST 16918 3.11 0.02 4.22 60 BAYES_40 16577 3.59 2.08 4.14 61 T_REMOTE_IMAGE 15751 3.75 3.24 3.93 62 XMSubMetaSx_00 15731 5.62 10.35 3.92 63 HTML_IMAGE_RATIO_06 15490 4.21 5.16 3.86 64 RCVD_IN_IADB_VOUCHED 15049 3.04 1.06 3.75 65 BAYES_80 14995 4.67 7.27 3.74 66 XMSexyCombo_05 14892 6.15 12.95 3.72 67 UNPARSEABLE_RELAY 14793 3.08 1.36 3.69 68 XM_UncommonTLD01 14448 5.90 12.32 3.60 69 TO_MALFORMED 13443 2.47 0.00 3.35 70 TVD_RCVD_IP 13318 2.51 0.25 3.32 71 MPART_ALT_DIFF 12874 4.28 7.28 3.21 72 RCVD_IN_MSPIKE_WL 12867 2.48 0.45 3.21 73 RCVD_IN_MSPIKE_H3 12865 2.48 0.45 3.21 74 TR_XM_DK_SendGrid 12522 2.77 1.79 3.12 75 XMNumbers 12271 4.38 8.05 3.06 76 BAYES_20 11812 2.61 1.67 2.95 77 BAYES_95 10498 3.00 4.08 2.62 78 XM_DIRTYINTL 9923 3.25 5.42 2.48 79 RCVD_IN_IADB_OPTIN 9545 1.94 0.71 2.38 80 HTML_MIME_NO_HTML_TAG 9291 3.29 5.99 2.32 81 MAILING_LIST_MULTI 9136 2.08 1.52 2.28 82 TooManyTo_002 9070 1.83 0.61 2.26 83 MIME_HTML_MOSTLY 8934 2.85 4.57 2.23 84 HTML_IMAGE_RATIO_08 8533 2.39 3.12 2.13 85 ANY_BOUNCE_MESSAGE 8177 1.61 0.43 2.04 86 BOUNCE_MESSAGE 8176 1.61 0.43 2.04 87 SUBJ_ALL_CAPS 8118 1.88 1.46 2.03 88 T_TooManySym_02 8117 1.65 0.62 2.03 89 XMDiploma_00 8095 2.27 2.96 2.02 90 BOTNET 8061 6.34 18.45 2.01 91 BAYES_05 7763 1.70 1.02 1.94 92 XM_SPF_SoftFail 7620 2.29 3.37 1.90 93 IN_HORDE_ADDRESS_BOOK 7551 1.39 0.03 1.88 94 INVALID_MSGID 7474 2.56 4.51 1.86 95 URI_HEX 7445 2.35 3.71 1.86 96 TR_Symld_Words 7429 1.69 1.23 1.85 97 XM_DK_Undo_01 7254 1.52 0.70 1.81 98 MIME_HTML_ONLY_MULTI 7108 2.09 2.99 1.77 99 XM_CamelCaseFrm001 7025 2.33 3.93 1.75 100 TR_MetaPhish_Combo_01 6684 1.39 0.60 1.67 101 TM2_M_URI_OPT_OUT 6375 2.13 3.62 1.59 102 HELO_NODOT 6134 1.37 0.94 1.53 103 HELO_NO_DOMAIN 6133 1.37 0.94 1.53 104 XMStockSpam_06 6069 1.51 1.52 1.51 105 URI_TRY_3LD 5953 1.41 1.20 1.49 106 TooManyTo_003 5876 1.20 0.46 1.47 107 XMGenDplmaNmb 5870 1.67 2.25 1.46 108 T_XMDrugObfuBody_08 5861 1.74 2.51 1.46 109 RELAYCOUNTRY_CA 5838 2.15 4.08 1.46 110 USER_IN_DEF_DKIM_WL 5825 1.08 0.03 1.45 111 XM_OfRef6 5663 1.84 3.02 1.41 112 XMCapTrack 5269 1.02 0.21 1.31 113 XM_GoogleGroups 5204 1.06 0.38 1.30 114 DKIM_ADSP_CUSTOM_MED 5001 1.14 0.85 1.25 115 UNTRUSTED_Relay 4926 4.18 12.44 1.23 116 NO_DNS_FOR_FROM 4849 1.41 1.97 1.21 117 XMPhish11 4671 1.13 1.05 1.17 118 TM2_M_A_HREF_HREF 4669 1.04 0.69 1.16 119 TM2_M_VERY_LONG_WORD 4403 1.29 1.83 1.10 120 TooManyTo_004 4356 0.90 0.38 1.09 121 TR_XM_PHPDW 3960 1.23 1.92 0.99 122 RELAYCOUNTRY_GB 3902 1.26 2.05 0.97 123 TR_XM_PHPForged 3860 1.21 1.91 0.96 124 TR_XM_FormFill2 3828 1.20 1.88 0.96 125 XM_H_PHPOS 3822 1.20 1.87 0.95 126 XMSolicitRefs_0 3806 0.81 0.42 0.95 127 XMBdyGiftCard01 3770 1.45 2.88 0.94 128 TR_XM_RelayPhish 3672 0.95 1.05 0.92 129 TooManyTo_005 3659 0.75 0.31 0.91 130 XM_H_Long_From02 3555 1.10 1.68 0.89 131 NML_ADSP_CUSTOM_MED 3413 0.84 0.81 0.85 132 T_XMDrugObfuBody_00 3279 0.85 0.95 0.82 133 DIET_1 3253 0.90 1.15 0.81 134 T_Symld_Words_02 3188 0.90 1.18 0.80 135 SpammyFromTLD_01 3107 0.89 1.22 0.78 136 FILL_THIS_FORM 3099 0.90 1.24 0.77 137 T_FILL_THIS_FORM_SHORT 3030 0.81 0.95 0.76 138 PLING_QUERY 3004 0.81 0.98 0.75 139 XM_UB50 2970 2.45 7.23 0.74 140 XMLngstWrd_00 2934 0.69 0.56 0.73 141 XMBody_95 2838 0.58 0.23 0.71 142 XMLngstWrd_01 2820 0.66 0.54 0.70 143 USER_IN_WHITELIST 2817 0.52 0.00 0.70 144 FROM_GOV_SPOOF 2642 0.56 0.28 0.66 145 XMGappySubj_01 2483 0.57 0.43 0.62 146 T_OBFU_PDF_ATTACH 2456 0.50 0.17 0.61 147 XMBody_17 2369 0.87 1.65 0.59 148 T_TooManySym_03 2344 0.48 0.17 0.58 149 HTML_FONT_FACE_BAD 2318 0.60 0.67 0.58 150 XM_B_COPY_HTML 2314 0.61 0.70 0.58 151 RCVD_IN_BL_SPAMCOP_NET 2309 1.15 2.75 0.58 152 XM_ShortIntro_01 2289 0.50 0.30 0.57 153 FORGED_GMAIL_RCVD 2284 0.59 0.66 0.57 154 XMSubMetaI_00 2245 0.74 1.26 0.56 155 XMSexyCombo_01 2244 1.12 2.70 0.56 156 T_XMHurry_00 2227 0.81 1.53 0.56 157 XMSubMetaSxObfu_02 2222 0.54 0.52 0.55 158 AC_DIV_BONANZA 2207 0.43 0.10 0.55 159 XM_ProductURIs 2180 0.74 1.30 0.54 160 T_MANY_PILL_PRICE 2170 0.42 0.07 0.54 161 XMNoVowels 2163 0.49 0.34 0.54 162 XMBrknScrpt_02 2123 0.58 0.71 0.53 163 XMSubMetaSxObfu_03 2074 1.43 3.97 0.52 164 XM_H_PHPMailer 1998 0.64 1.03 0.50 165 MISSING_HEADERS 1978 0.56 0.75 0.49 166 XM_URI_RBL 1906 1.02 2.55 0.48 167 SUBJ_DOLLARS 1887 0.62 1.04 0.47 168 XMMoneyMeta_00 1866 0.50 0.58 0.47 169 XMPhish14 1860 0.46 0.44 0.46 170 SpammyFromTLD_02 1859 1.81 5.56 0.46 171 XMPhish30 1857 0.63 1.09 0.46 172 HTTPS_HTTP_MISMATCH 1851 0.49 0.58 0.46 173 URI_NOVOWEL 1837 0.57 0.90 0.46 174 XM_B_REG_HTML 1827 0.64 1.17 0.46 175 XM_D_tchamptons_WL 1811 0.33 0.00 0.45 176 TM2_M_BODY_EMPTY 1780 0.38 0.20 0.44 177 RELAYCOUNTRY_AU 1759 0.48 0.61 0.44 178 XMHTMLBadTable_001 1740 0.92 2.28 0.43 179 SHORT_HELO_AND_INLINE_IMAGE 1707 0.32 0.04 0.43 180 TR_LOTS_OF_MONEY2 1701 0.85 2.02 0.42 181 T_MONEY_PERCENT 1701 0.85 2.02 0.42 182 RDNS_DYNAMIC 1700 0.47 0.60 0.42 183 DKIM_ADSP_NXDOMAIN 1687 1.53 4.62 0.42 184 HTML_TAG_BALANCE_BODY 1683 0.76 1.70 0.42 185 HTML_IMAGE_ONLY_32 1676 0.37 0.22 0.42 186 TR_LOTS_OF_MONEY3 1648 0.60 1.14 0.41 187 XMBody_78 1617 0.76 1.75 0.40 188 REMOVE_BEFORE_LINK 1611 0.44 0.54 0.40 189 XMDateMe_00 1565 0.41 0.46 0.39 190 XMRcvdHeader_15 1523 0.28 0.00 0.38 191 XMHTML_After_End 1505 0.56 1.06 0.38 192 RCVD_IN_SORBS_DUL 1480 0.34 0.28 0.37 193 RELAYCOUNTRY_DE 1469 0.49 0.82 0.37 194 NUMERIC_HTTP_ADDR 1432 0.44 0.68 0.36 195 XMLngstWrd_02 1418 0.38 0.47 0.35 196 FILL_THIS_FORM_LOAN 1410 0.47 0.79 0.35 197 HTML_IMAGE_ONLY_28 1402 0.53 1.02 0.35 198 FROM_GOV_DKIM_AU 1396 0.29 0.12 0.35 199 FILL_THIS_FORM_LONG 1380 0.56 1.15 0.34 200 XM_Body_Obfu01 1375 0.35 0.38 0.34 ----------------------------------------------------------------------