Email: 590670 Autolearn: 0 AvgScore: 1.37 AvgScanTime: 2.09 sec Spam: 97322 Autolearn: 0 AvgScore: 12.11 AvgScanTime: 2.83 sec Ham: 493348 Autolearn: 0 AvgScore: -0.75 AvgScanTime: 1.94 sec Time Spent Running SA: 342.37 hours Time Spent Processing Spam: 76.62 hours Time Spent Processing Ham: 265.75 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 91949 88.13 94.48 86.88 2 DCC_CHECK 77064 49.22 79.18 43.31 3 DKIM_SIGNED 73849 76.64 75.88 76.79 4 XM_DK_Pass 70201 74.97 72.13 75.53 5 XM_B_Unicode 68183 69.13 70.06 68.94 6 XMListUnsubscribeExists 67423 55.38 69.28 52.64 7 DKIM_VALID 65787 71.19 67.60 71.90 8 DKIM_VALID_AU 50831 54.10 52.23 54.47 9 BAYES_50 48575 52.42 49.91 52.92 10 XM_B_Unicode3 44180 41.23 45.40 40.41 11 HTML_FONT_LOW_CONTRAST 36620 30.12 37.63 28.63 12 MIME_HTML_ONLY 34405 22.23 35.35 19.64 13 LOC_TINY_FONT_1 32698 25.85 33.60 24.32 14 XM_DK_Undo_02 30601 9.20 31.44 4.81 15 RELAYCOUNTRY_META 26827 9.30 27.57 5.70 16 XMSubLong 23533 22.92 24.18 22.67 17 FVGT_m_MULTI_ODD 23404 22.87 24.05 22.64 18 DKIM_VALID_EF 21883 26.51 22.49 27.30 19 XM_Body_Dirty_Words 21374 14.92 21.96 13.53 20 BOTNET 20764 5.36 21.34 2.21 21 BOTNET_IPINHOSTNAME 20197 7.51 20.75 4.90 22 BAYES_99 19650 5.47 20.19 2.56 23 MultiRelay 19420 19.09 19.95 18.91 24 XM_Multi_Part_URI 18797 12.70 19.31 11.40 25 DCC_CHECK_NEGATIVE 18319 48.68 18.82 54.57 26 T_TM2_M_HEADER_IN_MSG 18187 28.43 18.69 30.35 27 XM_UncommonTLD01 16766 5.93 17.23 3.71 28 T_KAM_HTML_FONT_INVALID 16689 17.92 17.15 18.07 29 FSL_BULK_SIG 15914 8.90 16.35 7.44 30 TR_DCC_Bayes_99 15680 3.61 16.11 1.14 31 BAYES_999 14792 4.22 15.20 2.05 32 UNTRUSTED_Relay 14447 3.73 14.84 1.54 33 LOTS_OF_MONEY 11979 9.10 12.31 8.47 34 XM_Evil_Numbers_Gen 11678 10.24 12.00 9.89 35 TooManyTo_001 11317 8.96 11.63 8.43 36 HTML_IMAGE_RATIO_02 10711 9.37 11.01 9.05 37 SpammyFromTLD_02 10576 1.99 10.87 0.24 38 XMSexyCombo_05 10200 5.45 10.48 4.46 39 T_XMDrugObfuBody_14 9999 8.81 10.27 8.53 40 XM_B_SpammyTLD 9625 4.25 9.89 3.14 41 XMSubMetaSx_00 9205 4.97 9.46 4.08 42 XM_DIRTYINTL 8215 3.90 8.44 3.01 43 XM_UB50 8073 2.06 8.30 0.83 44 DKIM_INVALID 8062 5.44 8.28 4.88 45 MPART_ALT_DIFF 7378 4.10 7.58 3.41 46 LotsOfNums_01 7354 8.16 7.56 8.28 47 XM_H_Long_From01 7326 6.67 7.53 6.50 48 XM_B_Phish_Phrases 7197 6.11 7.40 5.86 49 T_REMOTE_IMAGE 7183 4.34 7.38 3.74 50 HTML_IMAGE_RATIO_04 6379 5.37 6.55 5.13 51 HTML_MIME_NO_HTML_TAG 5931 2.87 6.09 2.24 52 RCVD_IN_MSPIKE_H2 5559 7.48 5.71 7.83 53 KHOP_HELO_FCRDNS 5521 2.66 5.67 2.07 54 BAYES_80 5226 2.47 5.37 1.89 55 RELAYCOUNTRY_GB 5135 1.91 5.28 1.24 56 BAYES_60 5085 3.95 5.22 3.70 57 HTML_SHORT_LINK_IMG_1 5042 0.89 5.18 0.04 58 BAYES_40 4927 6.14 5.06 6.35 59 XMNumbers 4860 3.45 4.99 3.15 60 MIME_QP_LONG_LINE 4710 5.35 4.84 5.45 61 HDRS_LCASE_IMGONLY 4686 0.83 4.81 0.04 62 FROM_SUSPICIOUS_NTLD 4650 0.81 4.78 0.03 63 FROM_SUSPICIOUS_NTLD_FP 4593 0.80 4.72 0.02 64 MIME_HTML_ONLY_MULTI 4560 2.37 4.69 1.91 65 XM_SendGrid 4509 6.01 4.63 6.28 66 BAYES_00 4481 19.71 4.60 22.70 67 HTML_IMAGE_RATIO_06 4452 3.53 4.57 3.33 68 MIME_HTML_MOSTLY 4422 2.81 4.54 2.47 69 XM_SPF_SoftFail 4406 2.47 4.53 2.06 70 RCVD_IN_BL_SPAMCOP_NET 4288 1.17 4.41 0.53 71 RELAYCOUNTRY_CA 4129 2.13 4.24 1.71 72 XMSexyCombo_01 4087 1.49 4.20 0.96 73 BAYES_20 4058 4.87 4.17 5.01 74 REPLYTO_WITHOUT_TO_CC 4004 0.71 4.11 0.04 75 T_TooManySym_01 3956 5.75 4.06 6.09 76 XMStrtUSub 3952 4.68 4.06 4.81 77 XM_H_TOP 3850 0.66 3.96 0.00 78 XM_URI_RBL 3788 0.91 3.89 0.32 79 TM2_M_URI_OPT_OUT 3608 3.09 3.71 2.97 80 URI_HEX 3566 2.17 3.66 1.88 81 BOTNET_NORDNS 3408 0.61 3.50 0.04 82 HTML_IMAGE_ONLY_12 3250 0.73 3.34 0.21 83 DKIM_ADSP_NXDOMAIN 3210 0.93 3.30 0.46 84 MIME_HEADER_CTYPE_ONLY 3125 0.61 3.21 0.10 85 FROM_EXCESS_BASE64 2989 3.36 3.07 3.42 86 TR_XM_PHPDW 2937 1.07 3.02 0.68 87 MultiRelay_CC 2931 0.69 3.01 0.24 88 MultiRelay_Combo 2931 0.69 3.01 0.24 89 RCVD_IN_RP_RNBL 2890 0.53 2.97 0.05 90 TR_XM_PHPForged 2880 1.04 2.96 0.66 91 TR_XM_FormFill2 2830 1.02 2.91 0.65 92 XM_H_PHPOS 2825 1.02 2.90 0.65 93 RELAYCOUNTRY_FR 2789 0.79 2.87 0.38 94 HTML_IMAGE_RATIO_08 2787 2.38 2.86 2.29 95 TO_EQ_FM_DOM_HTML_IMG 2769 0.48 2.85 0.02 96 TR_XM_DK_SendGrid 2735 3.28 2.81 3.37 97 XM_CamelCaseFrm001 2722 2.28 2.80 2.17 98 TR_XM_RelayPhish 2721 1.04 2.80 0.69 99 BAYES_95 2706 1.40 2.78 1.13 100 RCVD_IN_PSBL 2676 0.49 2.75 0.04 101 XMSubMetaI_00 2617 1.28 2.69 1.00 102 T_XMDrugObfuBody_08 2598 1.65 2.67 1.45 103 NORDNS_LOW_CONTRAST 2547 0.44 2.62 0.01 104 NO_DNS_FOR_FROM 2541 1.38 2.61 1.14 105 TR_Mismatch_TLD_02 2540 0.50 2.61 0.08 106 XMDiploma_00 2494 1.80 2.56 1.65 107 BODY_URI_ONLY 2458 0.53 2.53 0.14 108 DATE_IN_PAST_06_12 2453 0.46 2.52 0.05 109 TM2_M_VERY_LONG_WORD 2379 1.39 2.44 1.18 110 XM_BadFromFormat 2374 0.49 2.44 0.11 111 XM_OfRef6 2357 1.83 2.42 1.71 112 BAYES_05 2285 3.21 2.35 3.39 113 HTML_IMAGE_ONLY_08 2229 0.48 2.29 0.13 114 T_XMHurry_00 2168 1.14 2.23 0.92 115 RELAYCOUNTRY_NL 2099 0.52 2.16 0.19 116 RELAYCOUNTRY_DE 2085 0.64 2.14 0.34 117 RCVD_IN_IADB_LISTED 2053 4.37 2.11 4.82 118 UNPARSEABLE_RELAY 2028 2.33 2.08 2.38 119 T_FILL_THIS_FORM_SHORT 2014 1.10 2.07 0.91 120 HTML_FONT_FACE_BAD 1981 0.89 2.04 0.66 121 SUBJ_DOLLARS 1970 0.68 2.02 0.42 122 RCVD_IN_IADB_SPF 1966 3.84 2.02 4.20 123 RCVD_IN_IADB_DK 1939 3.38 1.99 3.65 124 RCVD_IN_IADB_SENDERID 1936 3.40 1.99 3.68 125 SUBJ_ALL_CAPS 1933 1.98 1.99 1.97 126 T_Symld_Words_02 1933 0.93 1.99 0.72 127 ALL_TRUSTED 1899 12.78 1.95 14.91 128 XMGenDplmaNmb 1844 1.24 1.89 1.11 129 XMStockSpam_06 1841 1.39 1.89 1.29 130 XMBody_17 1816 0.89 1.87 0.70 131 XMBdyGiftCard01 1772 1.64 1.82 1.61 132 TR_XM_INV_DKIM 1769 0.43 1.82 0.16 133 TR_XM_DK_Bayes 1720 15.54 1.77 18.26 134 INVALID_DATE 1690 0.35 1.74 0.08 135 XM_H_Long_From02 1638 1.27 1.68 1.18 136 RELAYCOUNTRY_RU 1615 0.29 1.66 0.02 137 URIBL_SBL_A 1610 0.65 1.65 0.45 138 T_HTML_TAG_BALANCE_CENTER 1606 0.48 1.65 0.25 139 DIET_1 1582 0.61 1.63 0.41 140 XM_H_PHPMailer 1564 0.76 1.61 0.59 141 RCVD_IN_RP_SAFE 1558 8.16 1.60 9.46 142 TR_Symld_Words 1553 1.42 1.60 1.38 143 SpammyFromTLD_01 1547 0.88 1.59 0.74 144 TR_XM_DK_Bayes1 1534 14.84 1.58 17.46 145 DATE_IN_PAST_03_06 1504 0.38 1.55 0.15 146 HTML_FONT_SIZE_HUGE 1424 0.33 1.46 0.10 147 RELAYCOUNTRY_AT 1421 0.45 1.46 0.26 148 XM_H_PHPOS_M 1420 0.43 1.46 0.23 149 XMPhish30 1380 0.69 1.42 0.54 150 T_XMDrugObfuBody_00 1374 0.91 1.41 0.82 151 XMPhish11 1371 1.24 1.41 1.21 152 URIBL_DBL_ABUSE_REDIR 1298 0.23 1.33 0.01 153 TR_LOTS_OF_MONEY3 1285 0.59 1.32 0.44 154 TooManyTo_002 1273 2.16 1.31 2.33 155 XM_UB60 1266 0.27 1.30 0.06 156 T_MONEY_PERCENT 1249 0.61 1.28 0.48 157 TR_LOTS_OF_MONEY2 1249 0.61 1.28 0.48 158 XMHTML_After_End 1235 0.66 1.27 0.54 159 HTML_TAG_BALANCE_HEAD 1230 0.29 1.26 0.09 160 NUMERIC_HTTP_ADDR 1225 0.49 1.26 0.34 161 MAILING_LIST_MULTI 1209 1.99 1.24 2.13 162 RCVD_IN_MSPIKE_BL 1186 0.23 1.22 0.04 163 XMBrknScrpt_02 1185 0.87 1.22 0.80 164 LOADSA_MONEY_COMBO 1181 0.25 1.21 0.06 165 MPART_ALT_DIFF_COUNT 1180 0.43 1.21 0.28 166 DKIM_ADSP_CUSTOM_MED 1172 1.05 1.20 1.02 167 XMSubject_70 1156 0.21 1.19 0.02 168 XMBody_78 1153 0.65 1.18 0.54 169 XMSexyCombo_04 1143 0.66 1.17 0.55 170 XM_DK_Undo_01 1119 1.55 1.15 1.63 171 MISSING_HEADERS 1115 0.62 1.15 0.52 172 NO_MEDICAL 1102 0.19 1.13 0.00 173 RDNS_DYNAMIC 1079 0.49 1.11 0.37 174 URI_TRY_3LD 1063 1.68 1.09 1.79 175 FORGED_GMAIL_RCVD 1061 0.64 1.09 0.56 176 XMPhish14 1060 0.62 1.09 0.53 177 TooManyTo_003 1058 1.50 1.09 1.58 178 XM_Sft_Co_L33T 1057 0.27 1.09 0.10 179 RCVD_IN_MSPIKE_WL 1057 4.39 1.09 5.04 180 FROM_MISSP_REPLYTO 1054 0.18 1.08 0.01 181 HK_RANDOM_REPLYTO 1053 0.56 1.08 0.46 182 XM_ProductURIs 1034 1.04 1.06 1.04 183 URIBL_DBL_SPAM 1032 0.20 1.06 0.04 184 RCVD_IN_MSPIKE_L5 1007 0.18 1.03 0.01 185 XMSubMetaSSx_00 1001 0.35 1.03 0.21 186 XMSubMetaSxObfu_03 991 0.86 1.02 0.83 187 HTML_TEXT_INVISIBLE_STYLE 961 0.26 0.99 0.11 188 HTML_EXTRA_CLOSE 940 0.18 0.97 0.03 189 HELO_NODOT 931 1.61 0.96 1.74 190 HELO_NO_DOMAIN 924 1.61 0.95 1.74 191 RCVD_IN_MSPIKE_H3 924 3.94 0.95 4.53 192 XM_UB99 920 0.16 0.95 0.00 193 XM_PDF 895 4.14 0.92 4.78 194 TooManyTo_004 876 1.17 0.90 1.23 195 NML_ADSP_CUSTOM_MED 876 0.76 0.90 0.73 196 FILL_THIS_FORM 871 0.76 0.89 0.74 197 URIBL_BLACK 868 0.17 0.89 0.03 198 XM_OfRef7 866 0.31 0.89 0.19 199 HTML_TAG_BALANCE_BODY 828 0.59 0.85 0.54 200 TR_XM_SEO3 807 0.51 0.83 0.44 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 428614 88.13 94.48 86.88 2 DKIM_SIGNED 378825 76.64 75.88 76.79 3 XM_DK_Pass 372635 74.97 72.13 75.53 4 DKIM_VALID 354740 71.19 67.60 71.90 5 XM_B_Unicode 340137 69.13 70.06 68.94 6 DCC_CHECK_NEGATIVE 269237 48.68 18.82 54.57 7 DKIM_VALID_AU 268714 54.10 52.23 54.47 8 BAYES_50 261061 52.42 49.91 52.92 9 XMListUnsubscribeExists 259718 55.38 69.28 52.64 10 DCC_CHECK 213650 49.22 79.18 43.31 11 XM_B_Unicode3 199358 41.23 45.40 40.41 12 T_TM2_M_HEADER_IN_MSG 149743 28.43 18.69 30.35 13 HTML_FONT_LOW_CONTRAST 141266 30.12 37.63 28.63 14 DKIM_VALID_EF 134684 26.51 22.49 27.30 15 LOC_TINY_FONT_1 119961 25.85 33.60 24.32 16 BAYES_00 111969 19.71 4.60 22.70 17 XMSubLong 111827 22.92 24.18 22.67 18 FVGT_m_MULTI_ODD 111701 22.87 24.05 22.64 19 MIME_HTML_ONLY 96873 22.23 35.35 19.64 20 MultiRelay 93314 19.09 19.95 18.91 21 TR_XM_DK_Bayes 90073 15.54 1.77 18.26 22 T_KAM_HTML_FONT_INVALID 89172 17.92 17.15 18.07 23 TR_XM_DK_Bayes1 86143 14.84 1.58 17.46 24 TR_XM_DK_Bayes2 74126 12.67 0.76 15.03 25 ALL_TRUSTED 73579 12.78 1.95 14.91 26 XM_Body_Dirty_Words 66732 14.92 21.96 13.53 27 XM_Multi_Part_URI 56231 12.70 19.31 11.40 28 XM_Evil_Numbers_Gen 48808 10.24 12.00 9.89 29 RCVD_IN_RP_SAFE 46648 8.16 1.60 9.46 30 HTML_IMAGE_RATIO_02 44627 9.37 11.01 9.05 31 T_XMDrugObfuBody_14 42061 8.81 10.27 8.53 32 LOTS_OF_MONEY 41776 9.10 12.31 8.47 33 TooManyTo_001 41602 8.96 11.63 8.43 34 LotsOfNums_01 40851 8.16 7.56 8.28 35 XM_DKIMWhitelistDomains 38775 6.58 0.10 7.86 36 RCVD_IN_RP_CERTIFIED 38729 6.66 0.61 7.85 37 RCVD_IN_MSPIKE_H2 38645 7.48 5.71 7.83 38 FSL_BULK_SIG 36682 8.90 16.35 7.44 39 XM_H_Long_From01 32077 6.67 7.53 6.50 40 BAYES_40 31331 6.14 5.06 6.35 41 XM_SendGrid 31002 6.01 4.63 6.28 42 T_TooManySym_01 30028 5.75 4.06 6.09 43 XM_B_Phish_Phrases 28915 6.11 7.40 5.86 44 RELAYCOUNTRY_META 28122 9.30 27.57 5.70 45 MIME_QP_LONG_LINE 26899 5.35 4.84 5.45 46 HTML_IMAGE_RATIO_04 25324 5.37 6.55 5.13 47 RCVD_IN_MSPIKE_WL 24871 4.39 1.09 5.04 48 BAYES_20 24717 4.87 4.17 5.01 49 BOTNET_IPINHOSTNAME 24179 7.51 20.75 4.90 50 DKIM_INVALID 24085 5.44 8.28 4.88 51 RCVD_IN_IADB_LISTED 23770 4.37 2.11 4.82 52 XM_DK_Undo_02 23747 9.20 31.44 4.81 53 XMStrtUSub 23706 4.68 4.06 4.81 54 XM_PDF 23558 4.14 0.92 4.78 55 RCVD_IN_MSPIKE_H3 22337 3.94 0.95 4.53 56 XMSexyCombo_05 21981 5.45 10.48 4.46 57 RCVD_IN_IADB_SPF 20704 3.84 2.02 4.20 58 XMSubMetaSx_00 20143 4.97 9.46 4.08 59 T_REMOTE_IMAGE 18459 4.34 7.38 3.74 60 XM_UncommonTLD01 18289 5.93 17.23 3.71 61 BAYES_60 18273 3.95 5.22 3.70 62 RCVD_IN_IADB_SENDERID 18134 3.40 1.99 3.68 63 RCVD_IN_IADB_DK 18003 3.38 1.99 3.65 64 IN_ZIMBRA_NJ_WHITELIST 17573 2.98 0.02 3.56 65 FROM_EXCESS_BASE64 16873 3.36 3.07 3.42 66 MPART_ALT_DIFF 16834 4.10 7.58 3.41 67 BAYES_05 16703 3.21 2.35 3.39 68 TR_XM_DK_SendGrid 16623 3.28 2.81 3.37 69 HTML_IMAGE_RATIO_06 16413 3.53 4.57 3.33 70 TO_MALFORMED 15963 2.71 0.05 3.24 71 XMNumbers 15527 3.45 4.99 3.15 72 XM_B_SpammyTLD 15506 4.25 9.89 3.14 73 RCVD_IN_IADB_VOUCHED 15241 2.67 0.53 3.09 74 XM_DIRTYINTL 14849 3.90 8.44 3.01 75 TM2_M_URI_OPT_OUT 14657 3.09 3.71 2.97 76 BAYES_99 12638 5.47 20.19 2.56 77 ANY_BOUNCE_MESSAGE 12484 2.18 0.42 2.53 78 BOUNCE_MESSAGE 12479 2.18 0.42 2.53 79 MIME_HTML_MOSTLY 12170 2.81 4.54 2.47 80 UNPARSEABLE_RELAY 11723 2.33 2.08 2.38 81 TooManyTo_002 11477 2.16 1.31 2.33 82 HTML_IMAGE_RATIO_08 11293 2.38 2.86 2.29 83 T_TooManySym_02 11096 2.01 0.77 2.25 84 HTML_MIME_NO_HTML_TAG 11040 2.87 6.09 2.24 85 BOTNET 10920 5.36 21.34 2.21 86 XM_CamelCaseFrm001 10722 2.28 2.80 2.17 87 MAILING_LIST_MULTI 10525 1.99 1.24 2.13 88 KHOP_HELO_FCRDNS 10193 2.66 5.67 2.07 89 XM_SPF_SoftFail 10177 2.47 4.53 2.06 90 BAYES_999 10126 4.22 15.20 2.05 91 TVD_RCVD_IP 9983 1.78 0.52 2.02 92 TR_MetaPhish_Combo_01 9813 1.80 0.82 1.99 93 SUBJ_ALL_CAPS 9739 1.98 1.99 1.97 94 INVALID_MSGID 9520 1.73 0.71 1.93 95 RCVD_IN_IADB_OPTIN 9459 1.67 0.43 1.92 96 MIME_HTML_ONLY_MULTI 9426 2.37 4.69 1.91 97 BAYES_80 9343 2.47 5.37 1.89 98 URI_HEX 9261 2.17 3.66 1.88 99 URI_TRY_3LD 8855 1.68 1.09 1.79 100 HELO_NODOT 8586 1.61 0.96 1.74 101 HELO_NO_DOMAIN 8584 1.61 0.95 1.74 102 RELAYCOUNTRY_CA 8448 2.13 4.24 1.71 103 XM_OfRef6 8432 1.83 2.42 1.71 104 CK_HELO_DYNAMIC_SPLIT_IP 8296 1.49 0.50 1.68 105 HELO_DYNAMIC_IPADDR2 8267 1.42 0.11 1.68 106 XMDiploma_00 8157 1.80 2.56 1.65 107 XM_DK_Undo_01 8056 1.55 1.15 1.63 108 XMBdyGiftCard01 7924 1.64 1.82 1.61 109 TooManyTo_003 7811 1.50 1.09 1.58 110 IN_HORDE_ADDRESS_BOOK 7760 1.32 0.03 1.57 111 UNTRUSTED_Relay 7610 3.73 14.84 1.54 112 T_XMDrugObfuBody_08 7168 1.65 2.67 1.45 113 TR_Symld_Words 6832 1.42 1.60 1.38 114 XMCapTrack 6781 1.20 0.35 1.37 115 XMStockSpam_06 6388 1.39 1.89 1.29 116 RELAYCOUNTRY_GB 6142 1.91 5.28 1.24 117 TooManyTo_004 6050 1.17 0.90 1.23 118 XMPhish11 5960 1.24 1.41 1.21 119 XM_H_Long_From02 5834 1.27 1.68 1.18 120 TM2_M_VERY_LONG_WORD 5826 1.39 2.44 1.18 121 USER_IN_DEF_DKIM_WL 5648 0.96 0.02 1.14 122 NO_DNS_FOR_FROM 5633 1.38 2.61 1.14 123 TR_DCC_Bayes_99 5615 3.61 16.11 1.14 124 BAYES_95 5561 1.40 2.78 1.13 125 XMGenDplmaNmb 5471 1.24 1.89 1.11 126 XMGappySubj_01 5140 0.91 0.25 1.04 127 XM_ProductURIs 5134 1.04 1.06 1.04 128 XM_GoogleGroups 5129 0.95 0.51 1.04 129 TooManyTo_005 5110 0.99 0.74 1.04 130 DKIM_ADSP_CUSTOM_MED 5037 1.05 1.20 1.02 131 XMSubMetaI_00 4949 1.28 2.69 1.00 132 XMSexyCombo_01 4743 1.49 4.20 0.96 133 T_XMHurry_00 4557 1.14 2.23 0.92 134 T_FILL_THIS_FORM_SHORT 4504 1.10 2.07 0.91 135 XMSubMetaSxObfu_03 4089 0.86 1.02 0.83 136 XM_UB50 4077 2.06 8.30 0.83 137 T_XMDrugObfuBody_00 4026 0.91 1.41 0.82 138 XMBrknScrpt_02 3937 0.87 1.22 0.80 139 FILL_THIS_FORM 3634 0.76 0.89 0.74 140 SpammyFromTLD_01 3631 0.88 1.59 0.74 141 NML_ADSP_CUSTOM_MED 3595 0.76 0.90 0.73 142 T_Symld_Words_02 3542 0.93 1.99 0.72 143 XMBody_17 3451 0.89 1.87 0.70 144 TR_XM_RelayPhish 3408 1.04 2.80 0.69 145 TR_XM_PHPDW 3356 1.07 3.02 0.68 146 HTML_FONT_FACE_BAD 3268 0.89 2.04 0.66 147 TR_XM_PHPForged 3245 1.04 2.96 0.66 148 TR_XM_FormFill2 3213 1.02 2.91 0.65 149 FILL_THIS_FORM_LONG 3207 0.68 0.83 0.65 150 XM_H_PHPOS 3187 1.02 2.90 0.65 151 T_OBFU_PDF_ATTACH 3122 0.57 0.26 0.63 152 XMHTMLBadTable_001 3084 0.66 0.82 0.63 153 XM_H_PHPMailer 2922 0.76 1.61 0.59 154 HTTPS_HTTP_MISMATCH 2827 0.60 0.73 0.57 155 XM_ShortIntro_01 2824 0.55 0.45 0.57 156 FORGED_GMAIL_RCVD 2746 0.64 1.09 0.56 157 XMSexyCombo_04 2736 0.66 1.17 0.55 158 XM_B_REG_HTML 2731 0.52 0.32 0.55 159 XMBody_78 2688 0.65 1.18 0.54 160 URI_OPTOUT_3LD 2687 0.47 0.11 0.54 161 XMPhish30 2682 0.69 1.42 0.54 162 XMNoVowels 2677 0.54 0.50 0.54 163 HTML_TAG_BALANCE_BODY 2661 0.59 0.85 0.54 164 XMHTML_After_End 2645 0.66 1.27 0.54 165 RCVD_IN_BL_SPAMCOP_NET 2636 1.17 4.41 0.53 166 AC_DIV_BONANZA 2629 0.47 0.15 0.53 167 XMPhish14 2619 0.62 1.09 0.53 168 T_TooManySym_03 2597 0.47 0.20 0.53 169 TM2_M_BODY_EMPTY 2593 0.46 0.13 0.53 170 MISSING_HEADERS 2556 0.62 1.15 0.52 171 XMBody_95 2548 0.46 0.14 0.52 172 XMMoneyMeta_00 2541 0.56 0.76 0.52 173 USER_IN_WHITELIST 2470 0.42 0.00 0.50 174 URI_NOVOWEL 2466 0.50 0.48 0.50 175 RELAYCOUNTRY_AU 2466 0.47 0.35 0.50 176 TR_LOTS_OF_MONEY2 2366 0.61 1.28 0.48 177 T_MONEY_PERCENT 2366 0.61 1.28 0.48 178 XM_B_COPY_HTML 2358 0.49 0.52 0.48 179 PLING_QUERY 2314 0.45 0.37 0.47 180 DKIM_ADSP_NXDOMAIN 2279 0.93 3.30 0.46 181 XMSlimDrugH 2272 0.47 0.53 0.46 182 SHORT_HELO_AND_INLINE_IMAGE 2265 0.39 0.07 0.46 183 HK_RANDOM_REPLYTO 2253 0.56 1.08 0.46 184 URIBL_SBL_A 2241 0.65 1.65 0.45 185 HTML_IMAGE_ONLY_28 2236 0.48 0.61 0.45 186 TR_LOTS_OF_MONEY3 2188 0.59 1.32 0.44 187 TR_XM_SEO3 2184 0.51 0.83 0.44 188 XM_H_Undi_Recip 2182 0.50 0.81 0.44 189 HTML_IMAGE_ONLY_32 2162 0.44 0.45 0.44 190 FROM_GOV_DKIM_AU 2158 0.39 0.16 0.44 191 XMLngstWrd_00 2144 0.43 0.43 0.43 192 FILL_THIS_FORM_LOAN 2126 0.42 0.39 0.43 193 SUBJ_DOLLARS 2065 0.68 2.02 0.42 194 XMSubMetaSxObfu_02 2057 0.44 0.53 0.42 195 RCVD_IN_SORBS_DUL 2030 0.40 0.37 0.41 196 DIET_1 2027 0.61 1.63 0.41 197 XMLngstWrd_01 1977 0.40 0.40 0.40 198 XMDateMe_00 1901 0.38 0.34 0.39 199 RELAYCOUNTRY_FR 1881 0.79 2.87 0.38 200 TM2_M_A_HREF_HREF 1816 0.39 0.52 0.37 ----------------------------------------------------------------------