Email: 534709 Autolearn: 0 AvgScore: 3.16 AvgScanTime: 1.96 sec Spam: 151879 Autolearn: 0 AvgScore: 12.79 AvgScanTime: 2.45 sec Ham: 382830 Autolearn: 0 AvgScore: -0.66 AvgScanTime: 1.77 sec Time Spent Running SA: 291.69 hours Time Spent Processing Spam: 103.49 hours Time Spent Processing Ham: 188.21 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 137129 82.11 90.29 78.87 2 DKIM_SIGNED 120159 66.47 79.11 61.46 3 XM_DK_Pass 115989 64.76 76.37 60.16 4 DKIM_VALID 114511 62.92 75.40 57.97 5 DCC_CHECK 113842 41.84 74.96 28.70 6 XMListUnsubscribeExists 103423 46.11 68.10 37.39 7 DKIM_VALID_AU 90018 46.33 59.27 41.20 8 XM_H_QuotedFrom 84612 38.07 55.71 31.07 9 XM_DK_Undo_02 70560 21.22 46.46 11.20 10 BAYES_99 65738 20.06 43.28 10.85 11 BAYES_999 56053 17.26 36.91 9.47 12 TR_DCC_Bayes_99 51831 13.26 34.13 4.98 13 LOC_TINY_FONT_1 50134 21.29 33.01 16.64 14 BAYES_50 49167 50.51 32.37 57.70 15 HTML_FONT_LOW_CONTRAST 49128 23.46 32.35 19.93 16 MIME_HTML_ONLY 44392 22.46 29.23 19.78 17 FVGT_m_MULTI_ODD 40740 19.60 26.82 16.73 18 XMSubLong 39155 20.52 25.78 18.44 19 DCC_CHECK_NEGATIVE 33942 55.77 22.35 69.03 20 T_TM2_M_HEADER_IN_MSG 32317 28.98 21.28 32.03 21 XM_Body_Dirty_Words 29990 12.12 19.75 9.10 22 RELAYCOUNTRY_META 28943 9.07 19.06 5.10 23 DKIM_VALID_EF 28910 20.11 19.03 20.53 24 T_KAM_HTML_FONT_INVALID 25346 13.07 16.69 11.64 25 MultiRelay 25310 18.71 16.66 19.53 26 XM_Multi_Part_URI 24544 11.25 16.16 9.30 27 BOTNET 23581 5.04 15.53 0.87 28 HTML_IMAGE_RATIO_02 23554 8.34 15.51 5.49 29 XM_Evil_Numbers_Gen 23207 8.92 15.28 6.40 30 BOTNET_IPINHOSTNAME 20908 6.70 13.77 3.89 31 LOTS_OF_MONEY 19914 8.48 13.11 6.64 32 FSL_BULK_SIG 18826 8.32 12.40 6.70 33 UNTRUSTED_Relay 17553 4.18 11.56 1.26 34 T_XMDrugObfuBody_14 15973 8.10 10.52 7.14 35 XMSexyCombo_05 15271 4.53 10.05 2.34 36 LotsOfNums_01 13842 7.05 9.11 6.23 37 HTML_IMAGE_RATIO_04 13727 4.90 9.04 3.26 38 XM_B_Phish_Phrases 13679 5.27 9.01 3.79 39 XM_UncommonTLD01 12842 4.94 8.46 3.54 40 TR_XM_DocInvoice 12801 5.07 8.43 3.73 41 BAYES_80 12463 5.44 8.21 4.35 42 TooManyTo_001 12256 12.34 8.07 14.04 43 BAYES_60 11138 7.62 7.33 7.73 44 MPART_ALT_DIFF 10453 4.86 6.88 4.06 45 XM_H_Long_From01 9959 5.36 6.56 4.88 46 XMSubMetaSx_00 9620 4.54 6.33 3.83 47 FROM_EXCESS_BASE64 9374 3.68 6.17 2.69 48 XMStrtUSub 9032 4.96 5.95 4.57 49 RCVD_IN_RP_SAFE 8406 7.52 5.53 8.30 50 XMNumbers 8380 3.74 5.52 3.03 51 MIME_QP_LONG_LINE 8039 4.75 5.29 4.53 52 XM_SPF_SoftFail 7433 3.02 4.89 2.28 53 BAYES_95 7128 3.17 4.69 2.57 54 RCVD_IN_RP_CERTIFIED 7126 6.92 4.69 7.80 55 HTML_IMAGE_RATIO_06 6734 3.01 4.43 2.45 56 TM2_M_URI_OPT_OUT 6607 2.27 4.35 1.45 57 XM_SendGrid 6492 4.63 4.27 4.77 58 XM_OfRef6 6445 2.47 4.24 1.76 59 XM_DIRTYINTL 6340 2.34 4.17 1.61 60 XM_UB50 6330 1.74 4.17 0.78 61 T_REMOTE_IMAGE 6165 4.14 4.06 4.17 62 ALL_TRUSTED 6114 19.61 4.03 25.80 63 XM_URI_RBL 5930 1.20 3.90 0.13 64 MIME_HTML_MOSTLY 5880 2.45 3.87 1.88 65 RELAYCOUNTRY_CA 5819 1.94 3.83 1.18 66 BOTNET_NORDNS 5653 1.10 3.72 0.06 67 DKIM_INVALID 5648 3.55 3.72 3.48 68 RELAYCOUNTRY_FR 5226 1.20 3.44 0.31 69 RCVD_IN_MSPIKE_H2 4946 3.81 3.26 4.03 70 MIME_HTML_ONLY_MULTI 4861 2.94 3.20 2.84 71 HTML_MIME_NO_HTML_TAG 4812 2.61 3.17 2.38 72 URI_HEX 4623 1.48 3.04 0.85 73 XM_CamelCaseFrm001 4604 1.94 3.03 1.51 74 TR_Mismatch_TLD_01 4400 0.97 2.90 0.21 75 SUBJ_ALL_CAPS 4348 2.21 2.86 1.95 76 XMBody_17 4305 1.02 2.83 0.30 77 T_TooManySym_01 4171 3.61 2.75 3.96 78 HTML_IMAGE_RATIO_08 4146 2.02 2.73 1.74 79 MultiRelay_CC 4132 0.97 2.72 0.28 80 MultiRelay_Combo 4132 0.97 2.72 0.28 81 XM_OfRef7 3809 1.07 2.51 0.50 82 RCVD_IN_RP_RNBL 3781 0.73 2.49 0.03 83 FILL_THIS_FORM 3760 1.35 2.48 0.90 84 MAILING_LIST_MULTI 3709 2.48 2.44 2.49 85 XMStockSpam_06 3610 1.15 2.38 0.66 86 XM_H_Long_From02 3565 1.20 2.35 0.74 87 XM_UB99 3540 0.67 2.33 0.01 88 RCVD_IN_IADB_LISTED 3509 3.89 2.31 4.52 89 TM2_M_VERY_LONG_WORD 3478 1.21 2.29 0.78 90 XM_HighProb1 3349 0.64 2.21 0.02 91 UNPARSEABLE_RELAY 3317 2.93 2.18 3.23 92 RCVD_IN_BL_SPAMCOP_NET 3208 0.83 2.11 0.32 93 XMDiploma_00 3181 1.73 2.09 1.58 94 HTML_FONT_FACE_BAD 3165 2.19 2.08 2.24 95 T_FILL_THIS_FORM_LOAN 3127 0.89 2.06 0.43 96 RCVD_IN_IADB_SPF 3103 3.41 2.04 3.95 97 T_XMDrugObfuBody_08 3073 1.43 2.02 1.19 98 BOUNCE_MESSAGE 2927 2.84 1.93 3.20 99 ANY_BOUNCE_MESSAGE 2927 2.84 1.93 3.20 100 RCVD_IN_IADB_SENDERID 2920 3.06 1.92 3.51 101 RCVD_IN_IADB_DK 2873 2.99 1.89 3.43 102 XM_UB999 2804 0.53 1.85 0.01 103 XM_UB60 2747 0.56 1.81 0.07 104 XMSubMetaI_00 2716 0.82 1.79 0.44 105 RCVD_IN_PSBL 2695 0.59 1.77 0.13 106 TR_Mismatch_TLD_02 2656 0.56 1.75 0.09 107 SpammyFromTLD_02 2618 0.65 1.72 0.22 108 XM_Lotto 2575 0.50 1.70 0.03 109 URI_WP_HACKED_2 2566 1.18 1.69 0.97 110 XM_RXBody 2528 0.69 1.66 0.30 111 RELAYCOUNTRY_CN 2513 0.51 1.65 0.06 112 URIBL_BLACK 2494 0.49 1.64 0.04 113 T_XMHurry_00 2488 0.77 1.64 0.42 114 URI_TRY_3LD 2476 1.24 1.63 1.08 115 SUSPICIOUS_RECIPS 2454 0.89 1.62 0.60 116 TR_XM_RelayPhish 2442 0.80 1.61 0.48 117 XMSexyCombo_01 2431 0.82 1.60 0.50 118 SpammyFromTLD_01 2428 0.99 1.60 0.75 119 MONEY_FRAUD_5 2383 0.45 1.57 0.00 120 XM_OfRef8 2364 0.46 1.56 0.03 121 XMHTML_After_End 2345 0.66 1.54 0.31 122 XMPhish30 2331 0.65 1.53 0.29 123 FORM_FRAUD_5 2330 0.44 1.53 0.00 124 XMBdyGiftCard01 2305 0.91 1.52 0.66 125 SUBJ_DOLLARS 2305 0.53 1.52 0.14 126 RELAYCOUNTRY_RS 2268 0.43 1.49 0.00 127 HK_LOTTO 2257 0.42 1.49 0.00 128 XMRefNum 2251 0.42 1.48 0.00 129 RDNS_DYNAMIC 2200 0.67 1.45 0.36 130 TooManyTo_002 2182 5.36 1.44 6.92 131 DIET_1 2117 0.64 1.39 0.34 132 LOW_PRICE 2093 0.52 1.38 0.18 133 T_XMDrugObfuBody_00 2061 0.79 1.36 0.56 134 XMLngstWrd_00 2028 0.61 1.34 0.32 135 XMLngstWrd_01 1987 0.58 1.31 0.29 136 XM_UB80 1983 0.39 1.31 0.02 137 XMGenDplmaNmb 1945 1.11 1.28 1.04 138 PHOTO_EDITING_FREEM 1936 0.36 1.27 0.00 139 PHOTO_EDITING_DIRECT 1925 0.36 1.27 0.00 140 BAYES_40 1916 3.48 1.26 4.36 141 LONG_JUNK_URI 1879 0.41 1.24 0.09 142 XM_DK_Undo_01 1846 1.65 1.22 1.82 143 TooManyTo_003 1836 4.00 1.21 5.10 144 LONG_JUNK_URI3 1832 0.38 1.21 0.05 145 T_Symld_Words_02 1825 0.61 1.20 0.38 146 REMOVE_BEFORE_LINK 1816 0.53 1.20 0.27 147 MPART_ALT_DIFF_COUNT 1797 0.50 1.18 0.23 148 XM_ProductURIs 1796 1.21 1.18 1.22 149 BAYES_00 1786 5.80 1.18 7.64 150 XMBrknScrpt_02 1776 0.69 1.17 0.50 151 IMPOTENCE 1700 0.73 1.12 0.57 152 XMSlimDrugH 1665 0.61 1.10 0.42 153 TR_Symld_Words 1624 1.69 1.07 1.94 154 RELAYCOUNTRY_GB 1611 1.15 1.06 1.18 155 BAYES_20 1575 2.45 1.04 3.02 156 XM_B_COPY_HTML 1575 0.65 1.04 0.50 157 RCVD_IN_IADB_VOUCHED 1556 2.47 1.02 3.04 158 URIBL_DBL_SPAM 1540 0.30 1.01 0.02 159 TooManyTo_004 1528 3.03 1.01 3.83 160 T_MONEY_PERCENT 1515 0.42 1.00 0.19 161 TR_LOTS_OF_MONEY2 1515 0.42 1.00 0.19 162 XM_UB95 1506 0.29 0.99 0.01 163 DKIM_ADSP_CUSTOM_MED 1496 1.08 0.98 1.12 164 XMBody_78 1493 0.56 0.98 0.39 165 T_FILL_THIS_FORM_SHORT 1493 0.97 0.98 0.97 166 SORTED_RECIPS 1489 0.38 0.98 0.14 167 XM_PDF 1447 3.91 0.95 5.09 168 RELAYCOUNTRY_AT 1446 0.37 0.95 0.14 169 XM_BadFromFormat 1440 0.42 0.95 0.22 170 TR_XM_DK_Bayes 1414 3.58 0.93 4.63 171 HTML_IMAGE_ONLY_28 1400 0.59 0.92 0.45 172 FSL_THIS_IS_ADV 1396 0.29 0.92 0.04 173 T_HTML_TAG_BALANCE_CENTER 1396 0.35 0.92 0.13 174 TR_XM_DK_Bayes1 1379 3.43 0.91 4.43 175 XM_DKIMWhitelistDomains 1373 5.97 0.90 7.97 176 TR_MetaPhish_Combo_01 1368 0.79 0.90 0.74 177 XMSubMetaSSx_00 1365 0.56 0.90 0.43 178 XMPhish11 1361 1.08 0.90 1.15 179 PLING_QUERY 1358 0.40 0.89 0.20 180 XMDateMe_00 1355 0.64 0.89 0.54 181 LONG_JUNK_URI2 1337 0.26 0.88 0.01 182 TR_XM_DK_Bayes2 1329 2.70 0.88 3.43 183 HTML_TAG_BALANCE_BODY 1306 0.60 0.86 0.49 184 XM_H_PHPOS 1299 1.19 0.86 1.32 185 BODY_ENHANCEMENT 1290 0.31 0.85 0.10 186 MILLION_USD 1285 0.25 0.85 0.01 187 TooManyTo_005 1284 2.22 0.85 2.76 188 XMHTMLBadTable_001 1275 0.50 0.84 0.37 189 URI_NOVOWEL 1263 0.43 0.83 0.27 190 XMPhish14 1248 0.47 0.82 0.33 191 HTTPS_HTTP_MISMATCH 1228 0.59 0.81 0.50 192 HTML_FONT_SIZE_HUGE 1228 0.31 0.81 0.12 193 MONEY_FRAUD_8 1216 0.23 0.80 0.00 194 T_DEAR_BENEFICIARY 1206 0.23 0.79 0.00 195 NML_ADSP_CUSTOM_MED 1200 0.82 0.79 0.83 196 XMMoneyMeta_00 1178 0.56 0.78 0.48 197 XM_ShortIntro_01 1162 1.25 0.77 1.45 198 T_FILL_THIS_FORM_LONG 1159 0.76 0.76 0.76 199 TM2_M_BODY_EMPTY 1133 0.53 0.75 0.45 200 T_MANY_PILL_PRICE 1116 0.28 0.73 0.09 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 301930 82.11 90.29 78.87 2 DCC_CHECK_NEGATIVE 264262 55.77 22.35 69.03 3 DKIM_SIGNED 235275 66.47 79.11 61.46 4 XM_DK_Pass 230311 64.76 76.37 60.16 5 DKIM_VALID 221942 62.92 75.40 57.97 6 BAYES_50 220896 50.51 32.37 57.70 7 DKIM_VALID_AU 157716 46.33 59.27 41.20 8 XMListUnsubscribeExists 143157 46.11 68.10 37.39 9 T_TM2_M_HEADER_IN_MSG 122633 28.98 21.28 32.03 10 XM_H_QuotedFrom 118942 38.07 55.71 31.07 11 DCC_CHECK 109869 41.84 74.96 28.70 12 ALL_TRUSTED 98769 19.61 4.03 25.80 13 DKIM_VALID_EF 78600 20.11 19.03 20.53 14 HTML_FONT_LOW_CONTRAST 76313 23.46 32.35 19.93 15 MIME_HTML_ONLY 75717 22.46 29.23 19.78 16 MultiRelay 74760 18.71 16.66 19.53 17 XMSubLong 70592 20.52 25.78 18.44 18 FVGT_m_MULTI_ODD 64061 19.60 26.82 16.73 19 LOC_TINY_FONT_1 63720 21.29 33.01 16.64 20 TooManyTo_001 53746 12.34 8.07 14.04 21 T_KAM_HTML_FONT_INVALID 44549 13.07 16.69 11.64 22 XM_DK_Undo_02 42895 21.22 46.46 11.20 23 BAYES_99 41522 20.06 43.28 10.85 24 BAYES_999 36236 17.26 36.91 9.47 25 XM_Multi_Part_URI 35586 11.25 16.16 9.30 26 XM_Body_Dirty_Words 34831 12.12 19.75 9.10 27 RCVD_IN_RP_SAFE 31793 7.52 5.53 8.30 28 XM_DKIMWhitelistDomains 30526 5.97 0.90 7.97 29 RCVD_IN_RP_CERTIFIED 29869 6.92 4.69 7.80 30 BAYES_60 29588 7.62 7.33 7.73 31 BAYES_00 29235 5.80 1.18 7.64 32 IN_ZIMBRA_NJ_WHITELIST 27957 5.24 0.04 7.30 33 T_XMDrugObfuBody_14 27336 8.10 10.52 7.14 34 TooManyTo_002 26481 5.36 1.44 6.92 35 FSL_BULK_SIG 25647 8.32 12.40 6.70 36 LOTS_OF_MONEY 25417 8.48 13.11 6.64 37 XM_Evil_Numbers_Gen 24504 8.92 15.28 6.40 38 LotsOfNums_01 23832 7.05 9.11 6.23 39 HTML_IMAGE_RATIO_02 21017 8.34 15.51 5.49 40 TooManyTo_003 19536 4.00 1.21 5.10 41 RELAYCOUNTRY_META 19534 9.07 19.06 5.10 42 XM_PDF 19485 3.91 0.95 5.09 43 TR_DCC_Bayes_99 19072 13.26 34.13 4.98 44 XM_H_Long_From01 18701 5.36 6.56 4.88 45 XM_SendGrid 18261 4.63 4.27 4.77 46 TR_XM_DK_Bayes 17737 3.58 0.93 4.63 47 XMStrtUSub 17510 4.96 5.95 4.57 48 MIME_QP_LONG_LINE 17346 4.75 5.29 4.53 49 RCVD_IN_IADB_LISTED 17287 3.89 2.31 4.52 50 TR_XM_DK_Bayes1 16958 3.43 0.91 4.43 51 BAYES_40 16681 3.48 1.26 4.36 52 BAYES_80 16636 5.44 8.21 4.35 53 T_REMOTE_IMAGE 15961 4.14 4.06 4.17 54 MPART_ALT_DIFF 15549 4.86 6.88 4.06 55 RCVD_IN_MSPIKE_H2 15427 3.81 3.26 4.03 56 T_TooManySym_01 15151 3.61 2.75 3.96 57 RCVD_IN_IADB_SPF 15140 3.41 2.04 3.95 58 BOTNET_IPINHOSTNAME 14897 6.70 13.77 3.89 59 XMSubMetaSx_00 14676 4.54 6.33 3.83 60 TooManyTo_004 14674 3.03 1.01 3.83 61 XM_B_Phish_Phrases 14518 5.27 9.01 3.79 62 TR_XM_DocInvoice 14286 5.07 8.43 3.73 63 XM_UncommonTLD01 13550 4.94 8.46 3.54 64 RCVD_IN_IADB_SENDERID 13445 3.06 1.92 3.51 65 DKIM_INVALID 13333 3.55 3.72 3.48 66 TR_XM_DK_Bayes2 13124 2.70 0.88 3.43 67 RCVD_IN_IADB_DK 13120 2.99 1.89 3.43 68 HTML_IMAGE_RATIO_04 12473 4.90 9.04 3.26 69 UNPARSEABLE_RELAY 12375 2.93 2.18 3.23 70 ANY_BOUNCE_MESSAGE 12263 2.84 1.93 3.20 71 BOUNCE_MESSAGE 12260 2.84 1.93 3.20 72 RCVD_IN_IADB_VOUCHED 11639 2.47 1.02 3.04 73 XMNumbers 11604 3.74 5.52 3.03 74 BAYES_20 11548 2.45 1.04 3.02 75 MIME_HTML_ONLY_MULTI 10855 2.94 3.20 2.84 76 TVD_RCVD_IP 10803 2.07 0.17 2.82 77 TooManyTo_005 10580 2.22 0.85 2.76 78 HELO_NODOT 10395 2.14 0.68 2.72 79 FROM_EXCESS_BASE64 10302 3.68 6.17 2.69 80 BAYES_95 9831 3.17 4.69 2.57 81 MAILING_LIST_MULTI 9532 2.48 2.44 2.49 82 HTML_IMAGE_RATIO_06 9368 3.01 4.43 2.45 83 HTML_MIME_NO_HTML_TAG 9120 2.61 3.17 2.38 84 XMSexyCombo_05 8952 4.53 10.05 2.34 85 XM_SPF_SoftFail 8734 3.02 4.89 2.28 86 HTML_FONT_FACE_BAD 8570 2.19 2.08 2.24 87 TO_MALFORMED 8203 1.56 0.08 2.14 88 IN_HORDE_ADDRESS_BOOK 8183 1.55 0.06 2.14 89 SUBJ_ALL_CAPS 7479 2.21 2.86 1.95 90 TR_Symld_Words 7439 1.69 1.07 1.94 91 MIME_HTML_MOSTLY 7201 2.45 3.87 1.88 92 XM_DK_Undo_01 6986 1.65 1.22 1.82 93 INVALID_MSGID 6929 1.36 0.21 1.81 94 BAYES_05 6893 1.47 0.64 1.80 95 XM_OfRef6 6737 2.47 4.24 1.76 96 T_TooManySym_02 6694 1.45 0.68 1.75 97 HTML_IMAGE_RATIO_08 6673 2.02 2.73 1.74 98 RCVD_IN_MSPIKE_H3 6362 1.34 0.52 1.66 99 RCVD_IN_MSPIKE_WL 6362 1.34 0.52 1.66 100 XM_DIRTYINTL 6165 2.34 4.17 1.61 101 XMDiploma_00 6046 1.73 2.09 1.58 102 XMCapTrack 5860 1.28 0.65 1.53 103 XM_CamelCaseFrm001 5767 1.94 3.03 1.51 104 XM_ShortIntro_01 5541 1.25 0.77 1.45 105 TM2_M_URI_OPT_OUT 5537 2.27 4.35 1.45 106 RCVD_IN_IADB_OPTIN 5492 1.20 0.60 1.43 107 XM_GoogleGroups 5071 1.10 0.52 1.32 108 XM_H_PHPOS 5058 1.19 0.86 1.32 109 UNTRUSTED_Relay 4815 4.18 11.56 1.26 110 XM_ProductURIs 4670 1.21 1.18 1.22 111 T_XMDrugObfuBody_08 4559 1.43 2.02 1.19 112 RELAYCOUNTRY_GB 4534 1.15 1.06 1.18 113 RELAYCOUNTRY_CA 4532 1.94 3.83 1.18 114 XMPhish11 4399 1.08 0.90 1.15 115 DKIM_ADSP_CUSTOM_MED 4283 1.08 0.98 1.12 116 URI_TRY_3LD 4136 1.24 1.63 1.08 117 USER_IN_DEF_DKIM_WL 4030 0.76 0.01 1.05 118 XMGenDplmaNmb 3999 1.11 1.28 1.04 119 XM_H_PHPMailer 3959 0.93 0.68 1.03 120 URI_WP_HACKED_2 3730 1.18 1.69 0.97 121 T_FILL_THIS_FORM_SHORT 3700 0.97 0.98 0.97 122 FILL_THIS_FORM 3456 1.35 2.48 0.90 123 BOTNET 3343 5.04 15.53 0.87 124 URI_HEX 3265 1.48 3.04 0.85 125 NML_ADSP_CUSTOM_MED 3185 0.82 0.79 0.83 126 XM_UB50 2991 1.74 4.17 0.78 127 TM2_M_VERY_LONG_WORD 2970 1.21 2.29 0.78 128 T_FILL_THIS_FORM_LONG 2909 0.76 0.76 0.76 129 SpammyFromTLD_01 2879 0.99 1.60 0.75 130 USER_IN_WHITELIST 2851 0.53 0.00 0.74 131 TR_MetaPhish_Combo_01 2835 0.79 0.90 0.74 132 XM_H_Long_From02 2832 1.20 2.35 0.74 133 XMSubNoVowel 2805 0.61 0.29 0.73 134 T_TooManySym_03 2793 0.57 0.16 0.73 135 XM_B_REG_HTML 2648 0.66 0.58 0.69 136 SHORT_HELO_AND_INLINE_IMAGE 2620 0.51 0.08 0.68 137 XMBdyGiftCard01 2543 0.91 1.52 0.66 138 XMStockSpam_06 2518 1.15 2.38 0.66 139 MISSING_HEADERS 2509 0.63 0.55 0.66 140 XMNoVowels 2481 0.62 0.55 0.65 141 RCVD_IN_SORBS_DUL 2393 0.52 0.25 0.63 142 T_OBFU_PDF_ATTACH 2327 0.49 0.19 0.61 143 SUSPICIOUS_RECIPS 2284 0.89 1.62 0.60 144 RCVD_IN_IADB_DOPTIN 2230 0.44 0.08 0.58 145 IMPOTENCE 2191 0.73 1.12 0.57 146 T_XMDrugObfuBody_00 2161 0.79 1.36 0.56 147 RELAYCOUNTRY_DE 2156 0.59 0.67 0.56 148 XMGappySubj_01 2066 0.54 0.54 0.54 149 XMDateMe_00 2058 0.64 0.89 0.54 150 HTML_IMAGE_ONLY_32 1995 0.46 0.32 0.52 151 XMSexyCombo_01 1930 0.82 1.60 0.50 152 XM_OfRef7 1919 1.07 2.51 0.50 153 XMBrknScrpt_02 1912 0.69 1.17 0.50 154 XM_B_COPY_HTML 1907 0.65 1.04 0.50 155 HTTPS_HTTP_MISMATCH 1901 0.59 0.81 0.50 156 HTML_TAG_BALANCE_BODY 1887 0.60 0.86 0.49 157 XMMoneyMeta_00 1836 0.56 0.78 0.48 158 TR_XM_RelayPhish 1825 0.80 1.61 0.48 159 AC_DIV_BONANZA 1777 0.36 0.10 0.46 160 XMBody_95 1768 0.38 0.17 0.46 161 HTML_IMAGE_ONLY_28 1733 0.59 0.92 0.45 162 XM_B_TRADE_HTML 1724 0.47 0.51 0.45 163 TM2_M_BODY_EMPTY 1709 0.53 0.75 0.45 164 XMSubMetaI_00 1680 0.82 1.79 0.44 165 FORGED_GMAIL_RCVD 1673 0.52 0.73 0.44 166 T_FILL_THIS_FORM_LOAN 1652 0.89 2.06 0.43 167 XMSubMetaSSx_00 1639 0.56 0.90 0.43 168 T_XMHurry_00 1627 0.77 1.64 0.42 169 URIBL_DBL_ABUSE_SPAM 1624 0.36 0.21 0.42 170 XMSlimDrugH 1610 0.61 1.10 0.42 171 TVD_SPACE_RATIO 1597 0.35 0.19 0.42 172 URIBL_SBL_A 1586 0.47 0.60 0.41 173 RELAYCOUNTRY_AU 1546 0.44 0.55 0.40 174 XMSubMetaSxObfu_02 1545 0.34 0.17 0.40 175 XMRcvdHeader_15 1534 0.29 0.00 0.40 176 TM2_M_A_HREF_HREF 1519 0.39 0.38 0.40 177 XMBody_78 1496 0.56 0.98 0.39 178 HTML_IMAGE_ONLY_24 1489 0.39 0.39 0.39 179 XM_H_PHPOS_M 1475 0.37 0.32 0.39 180 T_Symld_Words_02 1446 0.61 1.20 0.38 181 XMHTMLBadTable_001 1408 0.50 0.84 0.37 182 XMSubEmpty 1381 0.31 0.18 0.36 183 DKIM_ADSP_NXDOMAIN 1378 0.35 0.31 0.36 184 XM_Combo_Sbj 1370 0.36 0.37 0.36 185 RDNS_DYNAMIC 1369 0.67 1.45 0.36 186 FORGED_MUA_OUTLOOK 1363 0.33 0.27 0.36 187 DIET_1 1298 0.64 1.39 0.34 188 T_TooManySym_04 1282 0.25 0.04 0.33 189 XMPhish14 1248 0.47 0.82 0.33 190 HTML_IMAGE_ONLY_20 1233 0.32 0.31 0.32 191 RCVD_IN_BL_SPAMCOP_NET 1224 0.83 2.11 0.32 192 XMLngstWrd_00 1219 0.61 1.34 0.32 193 XMHTML_After_End 1186 0.66 1.54 0.31 194 ONLINE_PHARMACY 1182 0.39 0.60 0.31 195 RELAYCOUNTRY_FR 1179 1.20 3.44 0.31 196 HTML_IMAGE_ONLY_16 1160 0.27 0.20 0.30 197 XMLKML 1156 0.22 0.00 0.30 198 DOS_OUTLOOK_TO_MX 1152 0.25 0.11 0.30 199 XMBody_17 1146 1.02 2.83 0.30 200 XM_H_SpoofStaff4 1145 0.23 0.05 0.30 ----------------------------------------------------------------------