Email: 295764 Autolearn: 0 AvgScore: 3.51 AvgScanTime: 6.68 sec Spam: 104247 Autolearn: 0 AvgScore: 12.55 AvgScanTime: 7.59 sec Ham: 191517 Autolearn: 0 AvgScore: -1.41 AvgScanTime: 6.18 sec Time Spent Running SA: 548.53 hours Time Spent Processing Spam: 219.71 hours Time Spent Processing Ham: 328.82 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 100293 89.12 96.21 85.27 2 DKIM_SIGNED 93286 83.43 89.49 80.13 3 XM_DK_Pass 90506 81.86 86.82 79.16 4 DCC_CHECK 85761 59.44 82.27 47.01 5 XMListUnsubscribeExists 82322 61.74 78.97 52.36 6 DKIM_VALID 61735 60.44 59.22 61.10 7 XM_H_QuotedFrom 59289 45.43 56.87 39.20 8 DKIM_VALID_AU 53305 50.19 51.13 49.68 9 XM_DK_Undo_02 52179 30.07 50.05 19.19 10 BAYES_99 47278 27.94 45.35 18.46 11 LOC_TINY_FONT_1 44792 33.18 42.97 27.85 12 HTML_FONT_LOW_CONTRAST 41592 34.03 39.90 30.84 13 BAYES_999 40709 24.39 39.05 16.42 14 TR_DCC_Bayes_99 38146 19.83 36.59 10.70 15 BAYES_50 33287 45.03 31.93 52.16 16 DKIM_INVALID 31551 22.99 30.27 19.03 17 MIME_HTML_ONLY 31471 24.79 30.19 21.85 18 FVGT_m_MULTI_ODD 27253 23.25 26.14 21.68 19 HTML_IMAGE_RATIO_02 23677 13.58 22.71 8.61 20 XM_Body_Dirty_Words 23657 15.47 22.69 11.54 21 XMSubLong 23636 21.71 22.67 21.18 22 T_KAM_HTML_FONT_INVALID 17748 13.94 17.02 12.27 23 XM_Multi_Part_URI 17085 15.46 16.39 14.95 24 DCC_CHECK_NEGATIVE 16656 38.96 15.98 51.48 25 RELAYCOUNTRY_META 16450 8.37 15.78 4.33 26 T_TM2_M_HEADER_IN_MSG 16441 20.05 15.77 22.38 27 XM_Evil_Numbers_Gen 15970 11.63 15.32 9.63 28 MultiRelay 15582 15.73 14.95 16.15 29 BOTNET_IPINHOSTNAME 14733 9.65 14.13 7.22 30 HTML_IMAGE_RATIO_04 13152 9.07 12.62 7.14 31 BOTNET 12753 5.09 12.23 1.20 32 XMSexyCombo_05 10812 6.40 10.37 4.24 33 FSL_BULK_SIG 10625 9.95 10.19 9.81 34 T_XMDrugObfuBody_14 10472 7.57 10.05 6.23 35 XM_B_Phish_Phrases 10183 7.20 9.77 5.80 36 UNTRUSTED_Relay 10053 4.22 9.64 1.26 37 FROM_EXCESS_BASE64 9926 6.27 9.52 4.50 38 LOTS_OF_MONEY 9652 8.90 9.26 8.70 39 LotsOfNums_01 9589 8.86 9.20 8.67 40 XM_H_Long_From01 9510 7.81 9.12 7.10 41 DKIM_VALID_EF 9492 14.42 9.11 17.31 42 TooManyTo_001 8776 7.70 8.42 7.31 43 RCVD_IN_RP_SAFE 7372 11.81 7.07 14.39 44 MPART_ALT_DIFF 7352 4.55 7.05 3.19 45 TR_XM_DocInvoice 7323 5.95 7.02 5.36 46 BAYES_80 7158 5.00 6.87 3.99 47 XMSubMetaSx_00 6924 5.19 6.64 4.39 48 XMStrtUSub 6751 7.17 6.48 7.55 49 MIME_HTML_MOSTLY 6071 4.11 5.82 3.18 50 BAYES_60 5912 6.01 5.67 6.19 51 RCVD_IN_RP_CERTIFIED 5374 9.89 5.16 12.46 52 XM_UB50 5352 2.27 5.13 0.70 53 XM_UncommonTLD01 5156 4.91 4.95 4.90 54 BAYES_95 4595 3.54 4.41 3.07 55 URI_HEX 4549 2.79 4.36 1.93 56 XM_CamelCaseFrm001 4538 2.80 4.35 1.95 57 MIME_QP_LONG_LINE 4338 3.99 4.16 3.89 58 HTML_IMAGE_RATIO_06 4322 4.19 4.15 4.22 59 T_TooManySym_01 4024 5.51 3.86 6.41 60 XM_SendGrid 3925 5.14 3.77 5.89 61 XM_DIRTYINTL 3901 2.34 3.74 1.57 62 TM2_M_URI_OPT_OUT 3779 2.48 3.63 1.85 63 XMBdyGiftCard01 3696 2.55 3.55 2.01 64 MultiRelay_CC 3502 1.33 3.36 0.23 65 MultiRelay_Combo 3502 1.33 3.36 0.23 66 XM_SPF_SoftFail 3414 1.97 3.27 1.26 67 RELAYCOUNTRY_CA 3367 1.93 3.23 1.22 68 T_REMOTE_IMAGE 3036 3.75 2.91 4.21 69 XMNumbers 3033 2.68 2.91 2.56 70 XMBody_17 2886 1.36 2.77 0.59 71 MIME_HTML_ONLY_MULTI 2884 1.76 2.77 1.22 72 SUBJ_ALL_CAPS 2783 1.96 2.67 1.57 73 RCVD_IN_BL_SPAMCOP_NET 2677 1.03 2.57 0.19 74 XM_OfRef6 2538 2.00 2.43 1.76 75 BODY_ENHANCEMENT 2490 0.86 2.39 0.03 76 XM_ProductURIs 2456 1.95 2.36 1.74 77 HTML_IMAGE_RATIO_08 2454 2.03 2.35 1.86 78 XMSubMetaI_00 2353 1.09 2.26 0.46 79 RCVD_IN_RP_RNBL 2204 0.76 2.11 0.03 80 BAYES_00 2143 6.40 2.06 8.77 81 XMSexyCombo_01 2068 0.96 1.98 0.41 82 XM_B_REG_HTML 2055 1.18 1.97 0.75 83 XMSubNoVowel 2018 0.90 1.94 0.33 84 XMPhish30 1970 0.94 1.89 0.42 85 RELAYCOUNTRY_FR 1930 0.85 1.85 0.30 86 MAILING_LIST_MULTI 1889 2.19 1.81 2.40 87 HTML_FONT_FACE_BAD 1852 1.00 1.78 0.58 88 T_MONEY_PERCENT 1843 0.80 1.77 0.28 89 TR_LOTS_OF_MONEY2 1843 0.80 1.77 0.28 90 XM_RXBody 1840 0.88 1.77 0.39 91 RCVD_IN_MSPIKE_H2 1827 2.56 1.75 3.00 92 TR_XM_DK_Bayes 1827 5.28 1.75 7.19 93 HTML_MIME_NO_HTML_TAG 1821 2.08 1.75 2.26 94 LONG_JUNK_URI 1755 0.68 1.68 0.13 95 UNPARSEABLE_RELAY 1746 4.96 1.67 6.74 96 T_XMHurry_00 1719 0.93 1.65 0.54 97 XMDiploma_00 1715 1.39 1.65 1.26 98 XM_URI_RBL 1689 0.65 1.62 0.12 99 BAYES_40 1663 2.72 1.60 3.34 100 TM2_M_VERY_LONG_WORD 1624 1.24 1.56 1.07 101 XMSubGiftCard1 1605 0.93 1.54 0.60 102 XMGppyBdWords 1603 1.21 1.54 1.03 103 XM_B_COPY_HTML 1531 0.81 1.47 0.45 104 XM_H_Long_From02 1530 1.02 1.47 0.77 105 T_FILL_THIS_FORM_SHORT 1521 0.91 1.46 0.61 106 XM_S_JOY_D 1512 1.09 1.45 0.90 107 LONG_JUNK_URI3 1511 0.60 1.45 0.14 108 TooManyTo_002 1510 1.72 1.45 1.86 109 RELAYCOUNTRY_CN 1497 0.57 1.44 0.09 110 SpammyFromTLD_02 1427 0.59 1.37 0.17 111 T_XMDrugObfuBody_08 1408 1.81 1.35 2.06 112 URIBL_BLACK 1385 0.50 1.33 0.05 113 TooManyTo_003 1373 1.33 1.32 1.33 114 RELAYCOUNTRY_AT 1373 0.54 1.32 0.11 115 BAYES_20 1358 2.00 1.30 2.38 116 XMBody_78 1337 0.87 1.28 0.65 117 XM_UB99 1334 0.45 1.28 0.00 118 SUBJ_DOLLARS 1328 0.55 1.27 0.16 119 BOTNET_NORDNS 1303 0.45 1.25 0.02 120 RCVD_IN_PSBL 1284 0.51 1.23 0.12 121 XMStockSpam_06 1270 1.40 1.22 1.49 122 XM_BadFromFormat 1239 0.60 1.19 0.28 123 XMPhish11 1237 0.96 1.19 0.84 124 RDNS_DYNAMIC 1219 0.81 1.17 0.61 125 TooManyTo_004 1179 1.08 1.13 1.05 126 XM_DK_Undo_01 1175 1.59 1.13 1.84 127 T_HTML_TAG_BALANCE_CENTER 1172 0.54 1.12 0.22 128 XMSubEmpty 1165 0.58 1.12 0.28 129 XMSubMetaSSx_00 1158 0.51 1.11 0.18 130 TR_XM_DK_Bayes1 1154 3.90 1.11 5.41 131 MPART_ALT_DIFF_COUNT 1128 0.58 1.08 0.31 132 TVD_RCVD_IP 1123 3.99 1.08 5.58 133 LOW_PRICE 1120 0.68 1.07 0.46 134 DEAR_SOMETHING 1107 0.82 1.06 0.69 135 RCVD_IN_IADB_LISTED 1105 2.45 1.06 3.20 136 TR_XM_RelayPhish 1102 0.65 1.06 0.43 137 TooManyTo_005 1085 0.94 1.04 0.89 138 SpammyFromTLD_01 1078 0.58 1.03 0.33 139 URI_TRY_3LD 1075 0.95 1.03 0.91 140 HTML_FONT_SIZE_HUGE 1053 0.48 1.01 0.19 141 RELAYCOUNTRY_JP 1046 0.38 1.00 0.03 142 TR_XM_DK_Bayes2 1044 3.44 1.00 4.77 143 XM_UB999 1025 0.35 0.98 0.00 144 RELAYCOUNTRY_GB 1016 0.74 0.97 0.61 145 XMGenDplmaNmb 1007 0.74 0.97 0.61 146 XM_HighProb1 996 0.35 0.96 0.02 147 FORM_FRAUD_5 978 0.34 0.94 0.01 148 XMBrknScrpt_02 966 1.11 0.93 1.21 149 XM_UB60 965 0.38 0.93 0.08 150 ALL_TRUSTED 964 8.30 0.92 12.31 151 URIBL_DBL_SPAM 957 0.33 0.92 0.01 152 TR_Mismatch_TLD_02 950 0.36 0.91 0.06 153 XM_Hitman 932 0.34 0.89 0.04 154 XMGappySubj_01 918 0.93 0.88 0.96 155 RCVD_IN_IADB_SPF 915 2.12 0.88 2.79 156 XMHTMLBadTable_001 893 0.79 0.86 0.75 157 MIME_CHARSET_FARAWAY 885 0.38 0.85 0.13 158 TR_Caps_n_Bayes_99 876 0.35 0.84 0.08 159 XMBody_95 871 0.99 0.84 1.08 160 T_FILL_THIS_FORM_FRAUD_PHISH 869 0.37 0.83 0.12 161 T_XMDrugObfuBody_00 857 0.61 0.82 0.49 162 XMHTML_After_End 855 0.59 0.82 0.47 163 BAYES_05 853 1.35 0.82 1.64 164 RCVD_IN_IADB_SENDERID 853 1.89 0.82 2.47 165 PLING_QUERY 853 0.44 0.82 0.24 166 RCVD_IN_IADB_DK 851 1.86 0.82 2.43 167 DIET_1 848 0.68 0.81 0.60 168 XM_Body_Obfu01 824 0.39 0.79 0.17 169 XM_GoogleGroups 822 1.14 0.79 1.34 170 CHARSET_FARAWAY_HEADER 821 0.34 0.79 0.09 171 TR_LOTS_OF_MONEY3 817 0.41 0.78 0.20 172 BASE64_LENGTH_79_INF 815 0.39 0.78 0.18 173 XMMoneyMeta_00 813 0.41 0.78 0.21 174 THIS_AD 807 0.38 0.77 0.16 175 RCVD_IN_MSPIKE_WL 805 2.02 0.77 2.71 176 RCVD_IN_MSPIKE_H3 802 2.01 0.77 2.69 177 XM_OverStock_LProb 785 0.31 0.75 0.06 178 ADVANCE_FEE_4_NEW 782 0.27 0.75 0.00 179 XMPhish14 782 0.40 0.75 0.21 180 T_Symld_Words_02 735 0.60 0.71 0.55 181 TR_XM_FormFill 727 0.26 0.70 0.02 182 TR_Symld_Words 717 1.37 0.69 1.74 183 T_TooManySym_02 717 1.74 0.69 2.31 184 TVD_SPACE_ENCODED 714 0.24 0.68 0.00 185 XM_ShortIntro_01 713 0.68 0.68 0.67 186 RELAYCOUNTRY_DE 710 0.45 0.68 0.33 187 HTML_TAG_BALANCE_BODY 706 0.49 0.68 0.39 188 MONEY_BACK 705 0.28 0.68 0.07 189 RELAYCOUNTRY_BR 680 0.26 0.65 0.04 190 XM_H_PHPOS 679 0.96 0.65 1.13 191 FILL_THIS_FORM 659 0.90 0.63 1.04 192 RCVD_IN_MSPIKE_BL 646 0.41 0.62 0.30 193 FORGED_OUTLOOK_HTML 635 0.21 0.61 0.00 194 DKIM_ADSP_CUSTOM_MED 631 0.81 0.61 0.93 195 XM_UB80 624 0.23 0.60 0.04 196 XM_H_PHPMailer 607 0.70 0.58 0.76 197 XMClaimOffer 588 0.69 0.56 0.77 198 TVD_SPACE_RATIO_MINFP 577 0.20 0.55 0.00 199 NUMERIC_HTTP_ADDR 572 0.28 0.55 0.13 200 XMBody_29 563 0.57 0.54 0.59 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 163299 89.12 96.21 85.27 2 DKIM_SIGNED 153458 83.43 89.49 80.13 3 XM_DK_Pass 151601 81.86 86.82 79.16 4 DKIM_VALID 117015 60.44 59.22 61.10 5 XMListUnsubscribeExists 100274 61.74 78.97 52.36 6 BAYES_50 99894 45.03 31.93 52.16 7 DCC_CHECK_NEGATIVE 98586 38.96 15.98 51.48 8 DKIM_VALID_AU 95145 50.19 51.13 49.68 9 DCC_CHECK 90038 59.44 82.27 47.01 10 XM_H_QuotedFrom 75084 45.43 56.87 39.20 11 HTML_FONT_LOW_CONTRAST 59068 34.03 39.90 30.84 12 LOC_TINY_FONT_1 53345 33.18 42.97 27.85 13 T_TM2_M_HEADER_IN_MSG 42859 20.05 15.77 22.38 14 MIME_HTML_ONLY 41843 24.79 30.19 21.85 15 FVGT_m_MULTI_ODD 41522 23.25 26.14 21.68 16 XMSubLong 40561 21.71 22.67 21.18 17 XM_DK_Undo_02 36760 30.07 50.05 19.19 18 DKIM_INVALID 36443 22.99 30.27 19.03 19 XM_DKIMWhitelistDomains 35861 12.14 0.04 18.72 20 BAYES_99 35360 27.94 45.35 18.46 21 DKIM_VALID_EF 33148 14.42 9.11 17.31 22 BAYES_999 31441 24.39 39.05 16.42 23 MultiRelay 30937 15.73 14.95 16.15 24 XM_Multi_Part_URI 28631 15.46 16.39 14.95 25 RCVD_IN_RP_SAFE 27566 11.81 7.07 14.39 26 RCVD_IN_RP_CERTIFIED 23865 9.89 5.16 12.46 27 ALL_TRUSTED 23580 8.30 0.92 12.31 28 T_KAM_HTML_FONT_INVALID 23491 13.94 17.02 12.27 29 XM_Body_Dirty_Words 22094 15.47 22.69 11.54 30 TR_DCC_Bayes_99 20500 19.83 36.59 10.70 31 FSL_BULK_SIG 18795 9.95 10.19 9.81 32 XM_Evil_Numbers_Gen 18434 11.63 15.32 9.63 33 BAYES_00 16794 6.40 2.06 8.77 34 LOTS_OF_MONEY 16667 8.90 9.26 8.70 35 LotsOfNums_01 16602 8.86 9.20 8.67 36 HTML_IMAGE_RATIO_02 16496 13.58 22.71 8.61 37 XMStrtUSub 14460 7.17 6.48 7.55 38 TooManyTo_001 14001 7.70 8.42 7.31 39 BOTNET_IPINHOSTNAME 13819 9.65 14.13 7.22 40 TR_XM_DK_Bayes 13775 5.28 1.75 7.19 41 HTML_IMAGE_RATIO_04 13672 9.07 12.62 7.14 42 XM_H_Long_From01 13596 7.81 9.12 7.10 43 UNPARSEABLE_RELAY 12914 4.96 1.67 6.74 44 T_TooManySym_01 12279 5.51 3.86 6.41 45 T_XMDrugObfuBody_14 11926 7.57 10.05 6.23 46 BAYES_60 11860 6.01 5.67 6.19 47 XM_SendGrid 11274 5.14 3.77 5.89 48 XM_B_Phish_Phrases 11115 7.20 9.77 5.80 49 TVD_RCVD_IP 10678 3.99 1.08 5.58 50 IN_ZIMBRA_NJ_WHITELIST 10556 3.58 0.02 5.51 51 TR_XM_DK_Bayes1 10370 3.90 1.11 5.41 52 TR_XM_DocInvoice 10267 5.95 7.02 5.36 53 XM_UncommonTLD01 9380 4.91 4.95 4.90 54 TR_XM_DK_Bayes2 9133 3.44 1.00 4.77 55 FROM_EXCESS_BASE64 8616 6.27 9.52 4.50 56 XMSubMetaSx_00 8412 5.19 6.64 4.39 57 RELAYCOUNTRY_META 8291 8.37 15.78 4.33 58 XMSexyCombo_05 8123 6.40 10.37 4.24 59 HTML_IMAGE_RATIO_06 8080 4.19 4.15 4.22 60 T_REMOTE_IMAGE 8057 3.75 2.91 4.21 61 INVALID_MSGID 7864 2.81 0.43 4.11 62 BAYES_80 7637 5.00 6.87 3.99 63 MIME_QP_LONG_LINE 7450 3.99 4.16 3.89 64 BAYES_40 6392 2.72 1.60 3.34 65 TO_MALFORMED 6300 2.14 0.02 3.29 66 RCVD_IN_IADB_LISTED 6132 2.45 1.06 3.20 67 MPART_ALT_DIFF 6117 4.55 7.05 3.19 68 MIME_HTML_MOSTLY 6088 4.11 5.82 3.18 69 BAYES_95 5883 3.54 4.41 3.07 70 RCVD_IN_MSPIKE_H2 5743 2.56 1.75 3.00 71 IN_HORDE_ADDRESS_BOOK 5735 1.96 0.07 2.99 72 RCVD_IN_IADB_SPF 5350 2.12 0.88 2.79 73 RCVD_IN_MSPIKE_WL 5181 2.02 0.77 2.71 74 RCVD_IN_MSPIKE_H3 5146 2.01 0.77 2.69 75 XMNumbers 4894 2.68 2.91 2.56 76 RCVD_IN_IADB_SENDERID 4726 1.89 0.82 2.47 77 RCVD_IN_IADB_DK 4660 1.86 0.82 2.43 78 MAILING_LIST_MULTI 4589 2.19 1.81 2.40 79 BAYES_20 4553 2.00 1.30 2.38 80 T_TooManySym_02 4418 1.74 0.69 2.31 81 HTML_MIME_NO_HTML_TAG 4330 2.08 1.75 2.26 82 RCVD_IN_IADB_VOUCHED 4103 1.56 0.49 2.14 83 T_XMDrugObfuBody_08 3940 1.81 1.35 2.06 84 XM_PDF 3872 1.39 0.24 2.02 85 XMBdyGiftCard01 3851 2.55 3.55 2.01 86 XM_CamelCaseFrm001 3740 2.80 4.35 1.95 87 URI_HEX 3703 2.79 4.36 1.93 88 TooManyTo_002 3566 1.72 1.45 1.86 89 HTML_IMAGE_RATIO_08 3560 2.03 2.35 1.86 90 TM2_M_URI_OPT_OUT 3543 2.48 3.63 1.85 91 XM_DK_Undo_01 3530 1.59 1.13 1.84 92 XM_OfRef6 3379 2.00 2.43 1.76 93 USER_IN_DEF_DKIM_WL 3362 1.16 0.08 1.76 94 TR_Symld_Words 3332 1.37 0.69 1.74 95 XM_ProductURIs 3323 1.95 2.36 1.74 96 ANY_BOUNCE_MESSAGE 3180 1.19 0.33 1.66 97 BOUNCE_MESSAGE 3179 1.19 0.33 1.66 98 BAYES_05 3143 1.35 0.82 1.64 99 XM_DIRTYINTL 3016 2.34 3.74 1.57 100 SUBJ_ALL_CAPS 3008 1.96 2.67 1.57 101 XMStockSpam_06 2862 1.40 1.22 1.49 102 USER_IN_WHITELIST 2602 0.88 0.00 1.36 103 XM_GoogleGroups 2563 1.14 0.79 1.34 104 TooManyTo_003 2550 1.33 1.32 1.33 105 XMSubMetaSxObfu_02 2536 1.00 0.40 1.32 106 UNTRUSTED_Relay 2415 4.22 9.64 1.26 107 XM_SPF_SoftFail 2412 1.97 3.27 1.26 108 XMDiploma_00 2408 1.39 1.65 1.26 109 RELAYCOUNTRY_CA 2342 1.93 3.23 1.22 110 MIME_HTML_ONLY_MULTI 2332 1.76 2.77 1.22 111 XMBrknScrpt_02 2324 1.11 0.93 1.21 112 BOTNET 2297 5.09 12.23 1.20 113 XM_H_PHPOS 2173 0.96 0.65 1.13 114 T_TooManySym_03 2112 0.75 0.10 1.10 115 XMBody_95 2067 0.99 0.84 1.08 116 TM2_M_VERY_LONG_WORD 2053 1.24 1.56 1.07 117 TooManyTo_004 2009 1.08 1.13 1.05 118 FILL_THIS_FORM 1999 0.90 0.63 1.04 119 XMGppyBdWords 1976 1.21 1.54 1.03 120 RCVD_IN_IADB_OPTIN 1948 0.76 0.28 1.02 121 XMGappySubj_01 1832 0.93 0.88 0.96 122 DKIM_ADSP_CUSTOM_MED 1776 0.81 0.61 0.93 123 URI_TRY_3LD 1734 0.95 1.03 0.91 124 XM_S_JOY_D 1723 1.09 1.45 0.90 125 TooManyTo_005 1707 0.94 1.04 0.89 126 T_FILL_THIS_FORM_LONG 1677 0.64 0.20 0.88 127 T_FILL_THIS_FORM_LOAN 1664 0.60 0.12 0.87 128 XMPhish11 1614 0.96 1.19 0.84 129 XM_H_Long_From02 1473 1.02 1.47 0.77 130 XMClaimOffer 1466 0.69 0.56 0.77 131 XM_H_PHPMailer 1454 0.70 0.58 0.76 132 HELO_NODOT 1449 0.52 0.09 0.76 133 XMHTMLBadTable_001 1437 0.79 0.86 0.75 134 XM_B_REG_HTML 1435 1.18 1.97 0.75 135 XMGappySubj_02 1353 0.53 0.20 0.71 136 XM_UB50 1348 2.27 5.13 0.70 137 DEAR_SOMETHING 1329 0.82 1.06 0.69 138 XM_ShortIntro_01 1284 0.68 0.68 0.67 139 NML_ADSP_CUSTOM_MED 1263 0.61 0.52 0.66 140 XMBody_78 1249 0.87 1.28 0.65 141 XMGenDplmaNmb 1174 0.74 0.97 0.61 142 T_FILL_THIS_FORM_SHORT 1172 0.91 1.46 0.61 143 RDNS_DYNAMIC 1172 0.81 1.17 0.61 144 RELAYCOUNTRY_GB 1168 0.74 0.97 0.61 145 DIET_1 1153 0.68 0.81 0.60 146 XMSubGiftCard1 1147 0.93 1.54 0.60 147 XM_Walgreens_Forge 1146 0.39 0.01 0.60 148 XMBody_17 1129 1.36 2.77 0.59 149 XMBody_29 1125 0.57 0.54 0.59 150 HTML_FONT_FACE_BAD 1108 1.00 1.78 0.58 151 T_TooManySym_04 1105 0.38 0.01 0.58 152 XM_D_tchamptons_WL 1093 0.37 0.00 0.57 153 T_Symld_Words_02 1053 0.60 0.71 0.55 154 T_XMHurry_00 1025 0.93 1.65 0.54 155 T_XMDrugObfuBody_00 943 0.61 0.82 0.49 156 XM_B_TRADE_HTML 942 0.47 0.43 0.49 157 TR_MetaPhish_Combo_01 939 0.44 0.35 0.49 158 XMSolicitRefs_0 935 0.47 0.44 0.49 159 XMNoVowels 919 0.41 0.28 0.48 160 XMHTML_After_End 898 0.59 0.82 0.47 161 XMSubMetaI_00 884 1.09 2.26 0.46 162 LOW_PRICE 880 0.68 1.07 0.46 163 XM_B_COPY_HTML 871 0.81 1.47 0.45 164 XM_H_PHPOS_M 865 0.43 0.38 0.45 165 TM2_M_A_HREF_HREF 816 0.37 0.27 0.43 166 TR_XM_RelayPhish 815 0.65 1.06 0.43 167 XMPhish30 807 0.94 1.89 0.42 168 XMRcvdHeader_15 801 0.27 0.00 0.42 169 DKIM_ADSP_NXDOMAIN 797 0.46 0.54 0.42 170 XMSexyCombo_01 776 0.96 1.98 0.41 171 MISSING_HEADERS 761 0.41 0.42 0.40 172 NO_DNS_FOR_FROM 758 0.41 0.44 0.40 173 XM_RXBody 752 0.88 1.77 0.39 174 HTML_TAG_BALANCE_BODY 745 0.49 0.68 0.39 175 XMCapTrack 745 0.36 0.30 0.39 176 HTML_IMAGE_ONLY_28 725 0.36 0.32 0.38 177 RCVD_IN_IADB_DOPTIN 705 0.25 0.04 0.37 178 XM_Lotto 704 0.35 0.31 0.37 179 XM_H_SpoofStaff4 681 0.23 0.01 0.36 180 FROM_EGROUPS 678 0.23 0.00 0.35 181 T_OBFU_PDF_ATTACH 676 0.25 0.07 0.35 182 UPPERCASE_50_75 658 0.28 0.16 0.34 183 XMSUPPORT 648 0.22 0.00 0.34 184 RELAYCOUNTRY_AU 644 0.36 0.41 0.34 185 XMSubNoVowel 634 0.90 1.94 0.33 186 SpammyFromTLD_01 630 0.58 1.03 0.33 187 RELAYCOUNTRY_DE 625 0.45 0.68 0.33 188 XMSlimDrugH 618 0.38 0.49 0.32 189 XMSubGiftCard2 601 0.21 0.02 0.31 190 XMSubMetaSxObfu_03 597 0.32 0.34 0.31 191 XMDateMe_00 597 0.28 0.21 0.31 192 HTML_IMAGE_ONLY_24 595 0.27 0.20 0.31 193 T_TooManySym_05 593 0.20 0.01 0.31 194 MPART_ALT_DIFF_COUNT 589 0.58 1.08 0.31 195 MSGID_FROM_MTA_HEADER 587 0.26 0.17 0.31 196 TVD_PH_BODY_META_ALL 587 0.25 0.16 0.31 197 HTML_IMAGE_ONLY_32 581 0.27 0.22 0.30 198 TR_MetaPhish_Combo_01b 580 0.25 0.15 0.30 199 RELAYCOUNTRY_FR 577 0.85 1.85 0.30 200 XMSolicitRefs_4 575 0.26 0.18 0.30 ----------------------------------------------------------------------