Email: 641283 Autolearn: 0 AvgScore: 2.79 AvgScanTime: 2.16 sec Spam: 166405 Autolearn: 0 AvgScore: 12.17 AvgScanTime: 2.53 sec Ham: 474878 Autolearn: 0 AvgScore: -0.49 AvgScanTime: 2.03 sec Time Spent Running SA: 384.99 hours Time Spent Processing Spam: 116.99 hours Time Spent Processing Ham: 267.99 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 150279 86.91 90.31 85.72 2 DKIM_SIGNED 123734 73.15 74.36 72.73 3 DCC_CHECK 121766 46.96 73.17 37.77 4 XM_DK_Pass 117964 71.29 70.89 71.42 5 XMListUnsubscribeExists 116151 54.06 69.80 48.55 6 DKIM_VALID 112164 67.68 67.40 67.78 7 DKIM_VALID_AU 90348 50.58 54.29 49.27 8 XM_H_QuotedFrom 82393 40.19 49.51 36.92 9 XM_DK_Undo_02 67075 20.53 40.31 13.60 10 BAYES_50 65006 49.02 39.06 52.51 11 BAYES_99 57845 17.85 34.76 11.93 12 HTML_FONT_LOW_CONTRAST 57223 29.05 34.39 27.18 13 LOC_TINY_FONT_1 53678 24.25 32.26 21.45 14 FVGT_m_MULTI_ODD 50817 24.87 30.54 22.89 15 MIME_HTML_ONLY 50154 22.72 30.14 20.12 16 BAYES_999 48266 15.29 29.01 10.48 17 XMSubLong 46519 25.29 27.96 24.35 18 TR_DCC_Bayes_99 45317 11.45 27.23 5.92 19 DCC_CHECK_NEGATIVE 42134 51.06 25.32 60.08 20 XM_Body_Dirty_Words 39857 15.89 23.95 13.06 21 DKIM_VALID_EF 34007 24.69 20.44 26.19 22 RELAYCOUNTRY_META 33660 8.96 20.23 5.01 23 T_KAM_HTML_FONT_INVALID 31326 16.74 18.83 16.00 24 BOTNET 29421 6.08 17.68 2.02 25 T_TM2_M_HEADER_IN_MSG 29307 26.80 17.61 30.02 26 BOTNET_IPINHOSTNAME 28473 7.97 17.11 4.77 27 MultiRelay 27680 18.11 16.63 18.62 28 XM_Multi_Part_URI 27436 13.46 16.49 12.39 29 XM_UncommonTLD01 22153 6.25 13.31 3.78 30 FSL_BULK_SIG 21025 8.28 12.63 6.75 31 UNTRUSTED_Relay 20765 4.34 12.48 1.48 32 XM_Evil_Numbers_Gen 19712 9.46 11.85 8.62 33 LOTS_OF_MONEY 19222 9.93 11.55 9.36 34 XMSexyCombo_05 18428 5.82 11.07 3.98 35 HTML_IMAGE_RATIO_02 18033 8.67 10.84 7.91 36 T_XMDrugObfuBody_14 15920 8.74 9.57 8.46 37 LotsOfNums_01 14659 9.70 8.81 10.01 38 XM_H_Long_From01 13562 6.79 8.15 6.31 39 XMSubMetaSx_00 13355 4.63 8.03 3.43 40 XMNumbers 12707 5.76 7.64 5.10 41 BAYES_80 12623 4.86 7.59 3.90 42 TooManyTo_001 12480 7.97 7.50 8.14 43 BAYES_60 12346 6.47 7.42 6.14 44 HTML_IMAGE_RATIO_04 11864 6.47 7.13 6.23 45 DKIM_INVALID 11570 5.47 6.95 4.95 46 XM_DIRTYINTL 11442 3.71 6.88 2.61 47 XM_B_Phish_Phrases 11069 6.51 6.65 6.46 48 T_TooManySym_01 10853 7.49 6.52 7.83 49 ALL_TRUSTED 10014 14.73 6.02 17.79 50 MPART_ALT_DIFF 9751 3.94 5.86 3.27 51 XM_UB50 8633 1.93 5.19 0.79 52 HTML_IMAGE_RATIO_06 8441 3.87 5.07 3.45 53 TR_Symld_Words 8239 4.25 4.95 4.00 54 DKIM_ADSP_NXDOMAIN 7932 1.57 4.77 0.45 55 T_TooManySym_02 7813 4.30 4.70 4.17 56 T_REMOTE_IMAGE 7728 4.23 4.64 4.09 57 XM_SPF_SoftFail 7300 2.57 4.39 1.94 58 XMStrtUSub 7073 4.30 4.25 4.32 59 XMLngstWrd_00 7067 2.67 4.25 2.12 60 SpammyFromTLD_02 7046 1.38 4.23 0.37 61 XM_H_SpoofStaff4 6843 3.03 4.11 2.65 62 HTML_MIME_NO_HTML_TAG 6771 3.24 4.07 2.94 63 XMSubject_78 6703 2.69 4.03 2.22 64 RELAYCOUNTRY_FR 6512 1.21 3.91 0.26 65 XMBdyGiftCard01 6346 1.71 3.81 0.97 66 BAYES_95 6187 2.88 3.72 2.59 67 XMLngstWrd_01 6140 2.28 3.69 1.78 68 NUMERIC_HTTP_ADDR 6116 1.22 3.68 0.36 69 MIME_HTML_MOSTLY 6107 2.67 3.67 2.32 70 MIME_QP_LONG_LINE 5946 5.62 3.57 6.33 71 RELAYCOUNTRY_CA 5861 1.95 3.52 1.39 72 XM_CamelCaseFrm001 5806 2.32 3.49 1.91 73 BODY_URI_ONLY 5804 1.00 3.49 0.12 74 URI_HEX 5612 2.39 3.37 2.04 75 NORMAL_HTTP_TO_IP 5603 0.94 3.37 0.08 76 TM2_M_URI_OPT_OUT 5582 2.21 3.35 1.82 77 XM_SendGrid 5535 5.23 3.33 5.90 78 HTML_IMAGE_RATIO_08 5492 2.40 3.30 2.09 79 FROM_EXCESS_BASE64 5404 4.03 3.25 4.30 80 SpammyFromTLD_01 5389 1.57 3.24 0.99 81 MIME_HTML_ONLY_MULTI 5377 2.04 3.23 1.62 82 XMMoneyMeta_00 5366 1.20 3.22 0.49 83 TR_XM_PHPDW 5320 1.55 3.20 0.97 84 TR_XM_PHPForged 5306 1.53 3.19 0.95 85 TR_XM_FormFill2 5280 1.53 3.17 0.95 86 FROM_SUSPICIOUS_NTLD 5264 0.93 3.16 0.15 87 XM_H_PHPOS 5240 1.51 3.15 0.94 88 XMSexyCombo_01 5190 1.18 3.12 0.50 89 BAYES_40 5120 3.63 3.08 3.83 90 T_TooManySym_03 5061 2.00 3.04 1.64 91 RCVD_IN_RP_SAFE 5060 8.18 3.04 9.97 92 RCVD_IN_RP_RNBL 5008 0.82 3.01 0.05 93 XMDiploma_00 4863 2.21 2.92 1.96 94 XM_OfRef6 4770 1.99 2.87 1.68 95 XM_URI_RBL 4757 1.01 2.86 0.36 96 BOTNET_NORDNS 4495 0.74 2.70 0.06 97 MultiRelay_Combo 4425 0.80 2.66 0.15 98 MultiRelay_CC 4425 0.80 2.66 0.15 99 RCVD_IN_RP_CERTIFIED 4242 7.33 2.55 9.01 100 XMLngstWrd_02 4124 1.50 2.48 1.16 101 RCVD_IN_MSPIKE_H2 4060 3.85 2.44 4.35 102 T_XMDrugObfuBody_08 4024 1.70 2.42 1.45 103 HTML_FONT_SIZE_LARGE 3949 0.74 2.37 0.17 104 RELAYCOUNTRY_DE 3919 0.96 2.36 0.48 105 PDS_TO_EQ_FROM_NAME 3858 0.62 2.32 0.03 106 URIBL_DBL_ABUSE_REDIR 3789 0.71 2.28 0.16 107 HTML_IMAGE_ONLY_12 3687 0.77 2.22 0.27 108 BAYES_20 3680 2.73 2.21 2.92 109 T_TooManySym_04 3544 1.07 2.13 0.70 110 XM_UB60 3396 0.63 2.04 0.13 111 RCVD_IN_BL_SPAMCOP_NET 3382 0.86 2.03 0.45 112 SUBJ_DOLLARS 3378 0.66 2.03 0.18 113 XMGappySubj_01 3227 1.03 1.94 0.71 114 HTML_SHORT_LINK_IMG_1 3134 0.51 1.88 0.03 115 NORDNS_LOW_CONTRAST 3090 0.51 1.86 0.04 116 NO_DNS_FOR_FROM 3015 1.29 1.81 1.10 117 XM_H_Long_From02 3014 1.17 1.81 0.95 118 SUBJ_ALL_CAPS 2974 2.03 1.79 2.11 119 XMSubMetaI_00 2905 1.18 1.75 0.99 120 RELAYCOUNTRY_JP 2851 0.47 1.71 0.03 121 TR_XM_RelayPhish 2846 1.08 1.71 0.86 122 XMGenDplmaNmb 2810 1.36 1.69 1.24 123 TVD_IP_SING_HEX 2807 0.44 1.69 0.00 124 URI_HEX_IP 2807 0.44 1.69 0.00 125 XMSubMetaSxObfu_03 2787 0.81 1.67 0.51 126 XMBody_17 2777 0.80 1.67 0.50 127 ANY_BOUNCE_MESSAGE 2748 2.24 1.65 2.44 128 BOUNCE_MESSAGE 2747 2.24 1.65 2.44 129 XM_UB99 2699 0.43 1.62 0.01 130 DIET_1 2661 0.68 1.60 0.36 131 UNPARSEABLE_RELAY 2658 2.27 1.60 2.51 132 XM_ProductURIs 2553 0.85 1.53 0.61 133 XMLngstWrd_03 2552 0.91 1.53 0.70 134 MAILING_LIST_MULTI 2509 2.18 1.51 2.42 135 FSL_THIS_IS_ADV 2481 0.62 1.49 0.31 136 XMGappySubj_02 2469 0.61 1.48 0.31 137 XMBody_78 2465 0.76 1.48 0.50 138 RELAYCOUNTRY_GB 2410 1.18 1.45 1.08 139 RCVD_IN_IADB_LISTED 2406 4.35 1.45 5.37 140 TM2_M_VERY_LONG_WORD 2373 1.21 1.43 1.14 141 RELAYCOUNTRY_IN 2247 0.44 1.35 0.12 142 TR_XM_DK_SendGrid 2216 2.61 1.33 3.06 143 T_Symld_Words_02 2185 0.81 1.31 0.63 144 XMSubGiftCard1 2184 0.40 1.31 0.08 145 XMPhish11 2129 1.39 1.28 1.43 146 XMStockSpam_06 2106 1.26 1.27 1.26 147 XMSubGiftCard2 2060 0.34 1.24 0.02 148 XMHTML_After_End 2056 0.60 1.24 0.38 149 XM_UB999 2041 0.32 1.23 0.01 150 RCVD_IN_IADB_SPF 2032 3.85 1.22 4.77 151 BAD_ENC_HEADER 2031 0.33 1.22 0.02 152 URI_TRY_3LD 2015 1.47 1.21 1.56 153 T_XMHurry_00 2003 0.71 1.20 0.54 154 XMPhish30 1958 0.62 1.18 0.43 155 XM_B_REG_HTML 1927 0.59 1.16 0.39 156 XM_H_PHPMailer 1926 0.70 1.16 0.55 157 MIME_HEADER_CTYPE_ONLY 1917 0.38 1.15 0.11 158 DATE_IN_PAST_06_12 1915 0.34 1.15 0.06 159 PLING_QUERY 1847 0.71 1.11 0.58 160 URIBL_BLACK 1844 0.33 1.11 0.06 161 RCVD_IN_IADB_SENDERID 1838 3.44 1.10 4.26 162 XMBounce_01 1824 0.52 1.10 0.32 163 RCVD_IN_IADB_DK 1821 3.41 1.09 4.22 164 DATE_IN_PAST_24_48 1759 0.29 1.06 0.03 165 T_XMDrugObfuBody_00 1747 0.97 1.05 0.94 166 BAYES_05 1710 1.71 1.03 1.95 167 ADMITS_SPAM 1668 0.29 1.00 0.04 168 DATE_IN_PAST_03_06 1650 0.36 0.99 0.14 169 XM_UB80 1645 0.29 0.99 0.04 170 RELAYCOUNTRY_AT 1643 0.39 0.99 0.17 171 HTML_TAG_BALANCE_BODY 1599 0.57 0.96 0.44 172 XM_H_PHPOS_M 1561 0.39 0.94 0.20 173 BODY_ENHANCEMENT 1559 0.27 0.94 0.03 174 XM_H_Undi_Recip 1475 0.45 0.89 0.29 175 TR_LOTS_OF_MONEY2 1439 0.42 0.86 0.27 176 XMSlimDrugH 1439 0.59 0.86 0.49 177 T_MONEY_PERCENT 1439 0.42 0.86 0.27 178 XM_HighProb1 1405 0.23 0.84 0.01 179 SHORT_URI_3 1401 0.34 0.84 0.16 180 BAYES_00 1399 10.45 0.84 13.82 181 HTML_FONT_FACE_BAD 1397 0.67 0.84 0.61 182 XMHTMLBadTable_001 1377 0.55 0.83 0.45 183 RDNS_DYNAMIC 1367 0.49 0.82 0.38 184 T_FILL_THIS_FORM_SHORT 1365 1.12 0.82 1.22 185 RCVD_IN_IADB_VOUCHED 1350 2.57 0.81 3.18 186 XMPhish14 1343 0.53 0.81 0.43 187 XMLngstWrd_04 1335 0.56 0.80 0.48 188 T_TooManySym_05 1329 0.34 0.80 0.18 189 HK_SCAM 1328 0.36 0.80 0.21 190 XMSubMetaSSx_00 1326 0.35 0.80 0.20 191 RELAYCOUNTRY_IT 1314 0.24 0.79 0.05 192 FILL_THIS_FORM 1313 0.50 0.79 0.40 193 REMOVE_BEFORE_LINK 1312 0.40 0.79 0.26 194 TR_LOTS_OF_MONEY3 1312 0.41 0.79 0.28 195 XM_DK_Undo_01 1305 1.58 0.78 1.86 196 URIBL_DBL_SPAM 1294 0.21 0.78 0.01 197 XMMailDelErr 1285 0.30 0.77 0.13 198 XMBrknScrpt_02 1256 0.69 0.75 0.66 199 XMEqualsVooDoo_00 1248 0.35 0.75 0.21 200 MPART_ALT_DIFF_COUNT 1220 0.36 0.73 0.23 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 407042 86.91 90.31 85.72 2 DKIM_SIGNED 345380 73.15 74.36 72.73 3 XM_DK_Pass 339180 71.29 70.89 71.42 4 DKIM_VALID 321886 67.68 67.40 67.78 5 DCC_CHECK_NEGATIVE 285326 51.06 25.32 60.08 6 BAYES_50 249352 49.02 39.06 52.51 7 DKIM_VALID_AU 233990 50.58 54.29 49.27 8 XMListUnsubscribeExists 230530 54.06 69.80 48.55 9 DCC_CHECK 179385 46.96 73.17 37.77 10 XM_H_QuotedFrom 175315 40.19 49.51 36.92 11 T_TM2_M_HEADER_IN_MSG 142577 26.80 17.61 30.02 12 HTML_FONT_LOW_CONTRAST 129081 29.05 34.39 27.18 13 DKIM_VALID_EF 124350 24.69 20.44 26.19 14 XMSubLong 115648 25.29 27.96 24.35 15 FVGT_m_MULTI_ODD 108700 24.87 30.54 22.89 16 LOC_TINY_FONT_1 101864 24.25 32.26 21.45 17 MIME_HTML_ONLY 95568 22.72 30.14 20.12 18 MultiRelay 88445 18.11 16.63 18.62 19 ALL_TRUSTED 84460 14.73 6.02 17.79 20 T_KAM_HTML_FONT_INVALID 76001 16.74 18.83 16.00 21 BAYES_00 65628 10.45 0.84 13.82 22 XM_DK_Undo_02 64596 20.53 40.31 13.60 23 XM_Body_Dirty_Words 62024 15.89 23.95 13.06 24 XM_Multi_Part_URI 58861 13.46 16.49 12.39 25 XM_DKIMWhitelistDomains 57673 9.01 0.08 12.14 26 BAYES_99 56656 17.85 34.76 11.93 27 TR_XM_DK_Bayes 50290 7.97 0.51 10.59 28 BAYES_999 49762 15.29 29.01 10.48 29 TR_XM_DK_Bayes1 47906 7.58 0.43 10.09 30 LotsOfNums_01 47542 9.70 8.81 10.01 31 RCVD_IN_RP_SAFE 47368 8.18 3.04 9.97 32 LOTS_OF_MONEY 44466 9.93 11.55 9.36 33 RCVD_IN_RP_CERTIFIED 42787 7.33 2.55 9.01 34 XM_Evil_Numbers_Gen 40934 9.46 11.85 8.62 35 TR_XM_DK_Bayes2 40685 6.44 0.37 8.57 36 T_XMDrugObfuBody_14 40157 8.74 9.57 8.46 37 TooManyTo_001 38656 7.97 7.50 8.14 38 HTML_IMAGE_RATIO_02 37541 8.67 10.84 7.91 39 T_TooManySym_01 37192 7.49 6.52 7.83 40 FSL_BULK_SIG 32075 8.28 12.63 6.75 41 XM_B_Phish_Phrases 30679 6.51 6.65 6.46 42 MIME_QP_LONG_LINE 30082 5.62 3.57 6.33 43 XM_H_Long_From01 29952 6.79 8.15 6.31 44 HTML_IMAGE_RATIO_04 29601 6.47 7.13 6.23 45 BAYES_60 29152 6.47 7.42 6.14 46 TR_DCC_Bayes_99 28095 11.45 27.23 5.92 47 XM_SendGrid 28014 5.23 3.33 5.90 48 RCVD_IN_IADB_LISTED 25512 4.35 1.45 5.37 49 XM_PDF 24496 3.99 0.66 5.16 50 XMNumbers 24211 5.76 7.64 5.10 51 RELAYCOUNTRY_META 23807 8.96 20.23 5.01 52 DKIM_INVALID 23494 5.47 6.95 4.95 53 RCVD_IN_IADB_SPF 22661 3.85 1.22 4.77 54 BOTNET_IPINHOSTNAME 22642 7.97 17.11 4.77 55 IN_ZIMBRA_NJ_WHITELIST 20687 3.23 0.02 4.36 56 RCVD_IN_MSPIKE_H2 20641 3.85 2.44 4.35 57 XMStrtUSub 20534 4.30 4.25 4.32 58 FROM_EXCESS_BASE64 20415 4.03 3.25 4.30 59 RCVD_IN_IADB_SENDERID 20225 3.44 1.10 4.26 60 RCVD_IN_IADB_DK 20023 3.41 1.09 4.22 61 T_TooManySym_02 19786 4.30 4.70 4.17 62 T_REMOTE_IMAGE 19400 4.23 4.64 4.09 63 TR_Symld_Words 19000 4.25 4.95 4.00 64 XMSexyCombo_05 18885 5.82 11.07 3.98 65 BAYES_80 18520 4.86 7.59 3.90 66 BAYES_40 18183 3.63 3.08 3.83 67 XM_UncommonTLD01 17937 6.25 13.31 3.78 68 TO_MALFORMED 17537 2.74 0.03 3.69 69 HTML_IMAGE_RATIO_06 16394 3.87 5.07 3.45 70 XMSubMetaSx_00 16312 4.63 8.03 3.43 71 MPART_ALT_DIFF 15510 3.94 5.86 3.27 72 RCVD_IN_IADB_VOUCHED 15122 2.57 0.81 3.18 73 TR_XM_DK_SendGrid 14535 2.61 1.33 3.06 74 HTML_MIME_NO_HTML_TAG 13978 3.24 4.07 2.94 75 BAYES_20 13847 2.73 2.21 2.92 76 XM_H_SpoofStaff4 12600 3.03 4.11 2.65 77 XM_DIRTYINTL 12372 3.71 6.88 2.61 78 BAYES_95 12299 2.88 3.72 2.59 79 UNPARSEABLE_RELAY 11896 2.27 1.60 2.51 80 ANY_BOUNCE_MESSAGE 11593 2.24 1.65 2.44 81 BOUNCE_MESSAGE 11589 2.24 1.65 2.44 82 MAILING_LIST_MULTI 11493 2.18 1.51 2.42 83 MIME_HTML_MOSTLY 11015 2.67 3.67 2.32 84 TooManyTo_002 10744 1.84 0.63 2.26 85 XMSubject_78 10559 2.69 4.03 2.22 86 XMLngstWrd_00 10054 2.67 4.25 2.12 87 TVD_RCVD_IP 10043 1.68 0.46 2.11 88 SUBJ_ALL_CAPS 10032 2.03 1.79 2.11 89 HTML_IMAGE_RATIO_08 9903 2.40 3.30 2.09 90 URI_HEX 9684 2.39 3.37 2.04 91 BOTNET 9588 6.08 17.68 2.02 92 RCVD_IN_IADB_OPTIN 9314 1.60 0.58 1.96 93 XMDiploma_00 9314 2.21 2.92 1.96 94 BAYES_05 9239 1.71 1.03 1.95 95 XM_SPF_SoftFail 9207 2.57 4.39 1.94 96 RCVD_IN_MSPIKE_WL 9084 1.52 0.39 1.91 97 RCVD_IN_MSPIKE_H3 9066 1.51 0.39 1.91 98 XM_CamelCaseFrm001 9054 2.32 3.49 1.91 99 XM_DK_Undo_01 8824 1.58 0.78 1.86 100 TM2_M_URI_OPT_OUT 8620 2.21 3.35 1.82 101 XMLngstWrd_01 8454 2.28 3.69 1.78 102 HELO_NODOT 8394 1.43 0.47 1.77 103 HELO_NO_DOMAIN 8393 1.43 0.47 1.77 104 TR_MetaPhish_Combo_01 8007 1.39 0.54 1.69 105 XM_OfRef6 7989 1.99 2.87 1.68 106 IN_HORDE_ADDRESS_BOOK 7883 1.24 0.03 1.66 107 T_TooManySym_03 7765 2.00 3.04 1.64 108 MIME_HTML_ONLY_MULTI 7687 2.04 3.23 1.62 109 INVALID_MSGID 7597 1.22 0.15 1.60 110 URI_TRY_3LD 7395 1.47 1.21 1.56 111 UNTRUSTED_Relay 7050 4.34 12.48 1.48 112 TooManyTo_003 7038 1.21 0.44 1.48 113 XMCapTrack 6963 1.16 0.30 1.47 114 T_XMDrugObfuBody_08 6872 1.70 2.42 1.45 115 XMPhish11 6796 1.39 1.28 1.43 116 RELAYCOUNTRY_CA 6624 1.95 3.52 1.39 117 USER_IN_DEF_DKIM_WL 6057 0.95 0.02 1.28 118 XMStockSpam_06 6006 1.26 1.27 1.26 119 XMGenDplmaNmb 5911 1.36 1.69 1.24 120 T_FILL_THIS_FORM_SHORT 5816 1.12 0.82 1.22 121 XM_GoogleGroups 5744 1.00 0.41 1.21 122 XMLngstWrd_02 5494 1.50 2.48 1.16 123 TM2_M_VERY_LONG_WORD 5410 1.21 1.43 1.14 124 NO_DNS_FOR_FROM 5237 1.29 1.81 1.10 125 RELAYCOUNTRY_GB 5148 1.18 1.45 1.08 126 TooManyTo_004 5125 0.89 0.35 1.08 127 DKIM_ADSP_CUSTOM_MED 4788 0.92 0.67 1.01 128 SpammyFromTLD_01 4685 1.57 3.24 0.99 129 XMSubMetaI_00 4680 1.18 1.75 0.99 130 XMBdyGiftCard01 4595 1.71 3.81 0.97 131 TR_XM_PHPDW 4594 1.55 3.20 0.97 132 TR_XM_FormFill2 4524 1.53 3.17 0.95 133 XM_H_Long_From02 4516 1.17 1.81 0.95 134 TR_XM_PHPForged 4497 1.53 3.19 0.95 135 T_XMDrugObfuBody_00 4460 0.97 1.05 0.94 136 XM_H_PHPOS 4456 1.51 3.15 0.94 137 TooManyTo_005 4202 0.73 0.29 0.88 138 TR_XM_RelayPhish 4091 1.08 1.71 0.86 139 XM_UB50 3770 1.93 5.19 0.79 140 TM2_M_A_HREF_HREF 3747 0.76 0.68 0.79 141 XMGappySubj_01 3389 1.03 1.94 0.71 142 NML_ADSP_CUSTOM_MED 3374 0.69 0.64 0.71 143 XMBody_95 3341 0.56 0.14 0.70 144 T_TooManySym_04 3336 1.07 2.13 0.70 145 XMLngstWrd_03 3306 0.91 1.53 0.70 146 XMBrknScrpt_02 3147 0.69 0.75 0.66 147 LOW_PRICE 3047 0.60 0.49 0.64 148 XM_E_Blogspot 2993 0.58 0.45 0.63 149 T_Symld_Words_02 2989 0.81 1.31 0.63 150 XM_ProductURIs 2914 0.85 1.53 0.61 151 HTML_FONT_FACE_BAD 2892 0.67 0.84 0.61 152 XMSubNoVowel 2844 0.52 0.31 0.60 153 XM_ShortIntro_01 2756 0.51 0.31 0.58 154 PLING_QUERY 2738 0.71 1.11 0.58 155 HTTPS_HTTP_MISMATCH 2726 0.56 0.52 0.57 156 T_OBFU_PDF_ATTACH 2682 0.46 0.17 0.56 157 FROM_GOV_SPOOF 2645 0.45 0.14 0.56 158 XM_H_PHPMailer 2592 0.70 1.16 0.55 159 AC_DIV_BONANZA 2589 0.43 0.10 0.55 160 T_XMHurry_00 2580 0.71 1.20 0.54 161 USER_IN_WHITELIST 2565 0.40 0.00 0.54 162 SHORT_HELO_AND_INLINE_IMAGE 2446 0.40 0.07 0.52 163 XMSubMetaSxObfu_03 2403 0.81 1.67 0.51 164 XMBody_78 2389 0.76 1.48 0.50 165 XMSexyCombo_01 2388 1.18 3.12 0.50 166 XMBody_17 2372 0.80 1.67 0.50 167 XMSlimDrugH 2350 0.59 0.86 0.49 168 XMMoneyMeta_00 2320 1.20 3.22 0.49 169 XM_B_COPY_HTML 2303 0.53 0.65 0.48 170 XMNoVowels 2288 0.46 0.40 0.48 171 FROM_GOV_DKIM_AU 2272 0.38 0.10 0.48 172 RELAYCOUNTRY_DE 2266 0.96 2.36 0.48 173 XMLngstWrd_04 2258 0.56 0.80 0.48 174 MISSING_HEADERS 2244 0.43 0.32 0.47 175 T_MANY_PILL_PRICE 2183 0.36 0.06 0.46 176 DKIM_ADSP_NXDOMAIN 2150 1.57 4.77 0.45 177 FORGED_GMAIL_RCVD 2148 0.48 0.57 0.45 178 RCVD_IN_BL_SPAMCOP_NET 2143 0.86 2.03 0.45 179 XMHTMLBadTable_001 2139 0.55 0.83 0.45 180 XMDateMe_00 2135 0.43 0.36 0.45 181 XMSubMetaSxObfu_02 2130 0.43 0.37 0.45 182 HTML_TAG_BALANCE_BODY 2085 0.57 0.96 0.44 183 XMPhish14 2060 0.53 0.81 0.43 184 RELAYCOUNTRY_AU 2044 0.48 0.61 0.43 185 TM2_M_BODY_EMPTY 2034 0.36 0.18 0.43 186 XMBSHREFv2 2032 0.45 0.52 0.43 187 XMPhish30 2019 0.62 1.18 0.43 188 URI_NOVOWEL 1957 0.47 0.65 0.41 189 HTML_IMAGE_ONLY_28 1930 0.47 0.63 0.41 190 HTML_IMAGE_ONLY_32 1922 0.47 0.64 0.40 191 HTML_IMAGE_ONLY_16 1901 0.34 0.18 0.40 192 FILL_THIS_FORM 1886 0.50 0.79 0.40 193 XM_B_REG_HTML 1840 0.59 1.16 0.39 194 RCVD_IN_SORBS_DUL 1798 0.36 0.32 0.38 195 XMHTML_After_End 1792 0.60 1.24 0.38 196 RDNS_DYNAMIC 1785 0.49 0.82 0.38 197 SpammyFromTLD_02 1775 1.38 4.23 0.37 198 DIET_1 1718 0.68 1.60 0.36 199 XM_URI_RBL 1716 1.01 2.86 0.36 200 NUMERIC_HTTP_ADDR 1702 1.22 3.68 0.36 ----------------------------------------------------------------------