Email: 357391 Autolearn: 0 AvgScore: 4.24 AvgScanTime: 3.07 sec Spam: 120212 Autolearn: 0 AvgScore: 12.51 AvgScanTime: 3.71 sec Ham: 237179 Autolearn: 0 AvgScore: 0.04 AvgScanTime: 2.74 sec Time Spent Running SA: 304.36 hours Time Spent Processing Spam: 123.94 hours Time Spent Processing Ham: 180.43 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 107839 74.53 89.71 66.83 2 DKIM_SIGNED 89726 64.22 74.64 58.94 3 DCC_CHECK 88276 44.94 73.43 30.49 4 XM_DK_Pass 87803 63.20 73.04 58.21 5 DKIM_VALID 83309 59.99 69.30 55.27 6 XMListUnsubscribeExists 77380 47.08 64.37 38.32 7 XM_H_QuotedFrom 71198 48.94 59.23 43.72 8 DKIM_VALID_AU 68102 45.88 56.65 40.42 9 XM_DK_Undo_02 53908 24.80 44.84 14.65 10 BAYES_99 50795 23.92 42.25 14.62 11 BAYES_999 41478 20.29 34.50 13.08 12 MIME_HTML_ONLY 41255 23.17 34.32 17.52 13 LOC_TINY_FONT_1 41036 23.49 34.14 18.09 14 BAYES_50 40015 50.53 33.29 59.26 15 TR_DCC_Bayes_99 39756 15.67 33.07 6.84 16 HTML_FONT_LOW_CONTRAST 38738 26.11 32.22 23.00 17 XMSubLong 33180 26.25 27.60 25.57 18 DCC_CHECK_NEGATIVE 30196 53.80 25.12 68.34 19 FVGT_m_MULTI_ODD 27764 18.90 23.10 16.78 20 DKIM_VALID_EF 22412 21.94 18.64 23.61 21 T_KAM_HTML_FONT_INVALID 21939 13.68 18.25 11.36 22 XM_Body_Dirty_Words 20395 12.14 16.97 9.70 23 HTML_IMAGE_RATIO_02 20165 9.95 16.77 6.49 24 RELAYCOUNTRY_META 19129 7.76 15.91 3.63 25 T_TM2_M_HEADER_IN_MSG 18186 20.76 15.13 23.62 26 HTML_IMAGE_RATIO_04 16996 8.41 14.14 5.50 27 FSL_BULK_SIG 16893 9.20 14.05 6.74 28 XM_Multi_Part_URI 16866 11.60 14.03 10.37 29 MultiRelay 16798 13.53 13.97 13.31 30 BOTNET 16277 5.12 13.54 0.85 31 LOTS_OF_MONEY 15217 10.89 12.66 9.99 32 XM_Evil_Numbers_Gen 14791 7.98 12.30 5.79 33 ALL_TRUSTED 14703 28.19 12.23 36.28 34 BOTNET_IPINHOSTNAME 14023 7.09 11.67 4.77 35 XMSubMetaSx_00 13677 10.47 11.38 10.01 36 UNTRUSTED_Relay 13339 4.54 11.10 1.22 37 XMSexyCombo_05 11136 4.88 9.26 2.66 38 TM2_M_URI_OPT_OUT 11005 16.08 9.15 19.59 39 MIME_QP_LONG_LINE 10749 17.39 8.94 21.67 40 T_XMDrugObfuBody_14 9787 6.60 8.14 5.82 41 XM_H_Long_From01 9404 5.54 7.82 4.39 42 HTML_MIME_NO_HTML_TAG 8992 4.16 7.48 2.48 43 MPART_ALT_DIFF 8828 4.32 7.34 2.79 44 BAYES_80 8718 5.18 7.25 4.13 45 XM_B_Phish_Phrases 8376 4.63 6.97 3.44 46 BAYES_95 8263 4.63 6.87 3.50 47 FROM_EXCESS_BASE64 8192 4.48 6.81 3.30 48 TooManyTo_001 8138 7.83 6.77 8.37 49 TR_XM_DocInvoice 8040 3.74 6.69 2.25 50 LotsOfNums_01 7788 5.78 6.48 5.43 51 BAYES_60 7582 6.22 6.31 6.18 52 RCVD_IN_RP_SAFE 7343 7.59 6.11 8.35 53 XM_UncommonTLD01 6938 4.88 5.77 4.43 54 XM_UB50 6662 2.42 5.54 0.83 55 DKIM_INVALID 6417 4.23 5.34 3.66 56 HTML_IMAGE_RATIO_06 6334 3.71 5.27 2.92 57 RCVD_IN_RP_CERTIFIED 5876 6.77 4.89 7.73 58 MIME_HTML_MOSTLY 5541 3.19 4.61 2.47 59 URI_WP_HACKED_2 4866 7.53 4.05 9.30 60 XMNumbers 4685 3.59 3.90 3.44 61 XM_SendGrid 4565 4.16 3.80 4.35 62 IMPOTENCE 4481 5.35 3.73 6.18 63 XMStrtUSub 4381 3.53 3.64 3.47 64 XM_SPF_SoftFail 4287 2.00 3.57 1.21 65 XM_DIRTYINTL 4267 2.28 3.55 1.63 66 BOTNET_NORDNS 4142 1.17 3.45 0.01 67 RELAYCOUNTRY_FR 4003 1.40 3.33 0.42 68 XM_CamelCaseFrm001 3994 1.97 3.32 1.28 69 T_REMOTE_IMAGE 3938 3.68 3.28 3.88 70 SUBJ_ALL_CAPS 3772 3.33 3.14 3.42 71 RCVD_IN_RP_RNBL 3738 1.07 3.11 0.03 72 RCVD_IN_MSPIKE_H2 3399 3.42 2.83 3.73 73 RCVD_IN_BL_SPAMCOP_NET 3397 1.15 2.83 0.31 74 XMSubMetaSSx_00 3242 1.91 2.70 1.51 75 XM_OfRef6 3218 1.56 2.68 1.00 76 URI_HEX 3207 1.70 2.67 1.21 77 XM_BadFromFormat 3192 1.12 2.66 0.34 78 HTML_IMAGE_RATIO_08 3166 1.85 2.63 1.45 79 MultiRelay_Combo 3161 0.99 2.63 0.16 80 MultiRelay_CC 3161 0.99 2.63 0.16 81 NO_DNS_FOR_FROM 3118 1.83 2.59 1.45 82 MIME_HTML_ONLY_MULTI 3108 1.56 2.59 1.04 83 RELAYCOUNTRY_CA 3087 1.54 2.57 1.02 84 T_TooManySym_01 2955 3.26 2.46 3.66 85 XMSexyCombo_01 2913 1.31 2.42 0.75 86 T_XMDrugObfuBody_00 2892 1.23 2.41 0.63 87 XMSlimDrugH 2798 1.54 2.33 1.14 88 XM_RXBody 2669 1.14 2.22 0.59 89 URIBL_BLACK 2530 0.73 2.10 0.03 90 UNPARSEABLE_RELAY 2487 3.25 2.07 3.85 91 XMClaimOffer 2356 0.85 1.96 0.28 92 XMSlimDrugs 2302 1.29 1.91 0.98 93 URIBL_DBL_SPAM 2226 0.66 1.85 0.06 94 SpammyFromTLD_02 2219 0.73 1.85 0.16 95 ADVANCE_FEE_3_NEW_MONEY 2208 0.68 1.84 0.09 96 T_XMDrugObfuBody_08 2206 1.26 1.84 0.97 97 DKIM_ADSP_CUSTOM_MED 2136 1.02 1.78 0.64 98 NO_PRESCRIPTION 2114 0.94 1.76 0.53 99 RELAYCOUNTRY_CN 2107 0.60 1.75 0.02 100 XMSubMetaI_00 2098 0.77 1.75 0.27 101 XM_ProductURIs 2082 1.34 1.73 1.14 102 XM_URI_RBL 2081 0.67 1.73 0.13 103 URIBL_DBL_ABUSE_SPAM 2013 1.84 1.67 1.92 104 FORGED_GMAIL_RCVD 1994 0.76 1.66 0.30 105 XM_UB60 1953 0.60 1.62 0.08 106 RCVD_IN_IADB_LISTED 1932 3.54 1.61 4.52 107 ONLINE_PHARMACY 1928 3.09 1.60 3.85 108 NML_ADSP_CUSTOM_MED 1914 0.83 1.59 0.44 109 XMBdyGiftCard01 1913 1.05 1.59 0.77 110 SpammyFromTLD_01 1908 0.82 1.59 0.44 111 MAILING_LIST_MULTI 1906 1.60 1.59 1.60 112 HTML_FONT_FACE_BAD 1895 0.79 1.58 0.39 113 TVD_SPACE_RATIO_MINFP 1812 0.51 1.51 0.00 114 DIET_1 1797 0.70 1.49 0.29 115 TM2_M_VERY_LONG_WORD 1787 0.91 1.49 0.61 116 TVD_VISIT_PHARMA 1785 2.50 1.48 3.02 117 XM_UB99 1780 0.51 1.48 0.02 118 XMPhish30 1767 0.82 1.47 0.49 119 XM_B_REG_HTML 1738 0.94 1.45 0.68 120 BAYES_40 1695 2.73 1.41 3.41 121 RCVD_IN_IADB_SPF 1643 3.00 1.37 3.82 122 BODY_ENHANCEMENT 1587 0.47 1.32 0.04 123 RCVD_IN_IADB_SENDERID 1555 2.61 1.29 3.27 124 T_XMHurry_00 1553 0.99 1.29 0.83 125 XM_H_Long_From02 1541 0.83 1.28 0.60 126 XM_DK_Undo_01 1531 1.48 1.27 1.58 127 RCVD_IN_IADB_DK 1521 2.51 1.27 3.14 128 DKIM_ADSP_NXDOMAIN 1507 0.68 1.25 0.39 129 XMBody_17 1505 0.62 1.25 0.30 130 XMDiploma_00 1492 1.13 1.24 1.08 131 XMNoVowels 1488 1.43 1.24 1.53 132 TooManyTo_002 1451 3.28 1.21 4.33 133 URI_TRY_3LD 1377 1.15 1.15 1.15 134 XM_UB999 1365 0.39 1.14 0.01 135 XMLongAddy 1342 0.44 1.12 0.10 136 XM_H_Undi_Recip 1341 0.49 1.12 0.17 137 DRUGS_ERECTILE 1322 0.42 1.10 0.07 138 TooManyTo_003 1312 2.71 1.09 3.53 139 MONEY_FRAUD_8 1308 0.37 1.09 0.00 140 MPART_ALT_DIFF_COUNT 1308 1.22 1.09 1.28 141 TR_Symld_Words 1302 1.71 1.08 2.03 142 ADVANCE_FEE_5_NEW_MONEY 1299 0.37 1.08 0.00 143 RELAYCOUNTRY_AT 1272 0.41 1.06 0.09 144 ANY_BOUNCE_MESSAGE 1255 3.34 1.04 4.50 145 BOUNCE_MESSAGE 1254 3.34 1.04 4.50 146 XMHTMLBadTable_001 1252 0.54 1.04 0.29 147 XM_B_COPY_HTML 1251 0.80 1.04 0.68 148 TR_XM_Undi_Recip5 1234 0.35 1.03 0.01 149 BAYES_20 1214 1.67 1.01 2.01 150 TR_XM_Undi_Recip2 1192 0.34 0.99 0.01 151 BASE64_LENGTH_79_INF 1190 0.43 0.99 0.14 152 BAYES_00 1179 3.97 0.98 5.49 153 BOMB_MONEY 1169 0.33 0.97 0.00 154 XM_HighProb1 1164 0.35 0.97 0.03 155 TR_XM_RelayPhish 1159 0.50 0.96 0.26 156 T_HTML_TAG_BALANCE_CENTER 1153 0.41 0.96 0.13 157 XMSubMetaD_00 1146 0.36 0.95 0.05 158 XMStockSpam_06 1146 0.65 0.95 0.50 159 XMHTML_After_End 1139 0.46 0.95 0.22 160 XM_H_PHPOS 1133 1.06 0.94 1.12 161 XMBody_78 1115 0.57 0.93 0.38 162 XMSubMetaSx_01 1113 0.95 0.93 0.96 163 TM2_M_BODY_EMPTY 1092 0.52 0.91 0.32 164 RELAYCOUNTRY_RU 1085 0.32 0.90 0.02 165 XMPhish11 1077 0.81 0.90 0.77 166 XMEmptyBody_01 1067 0.42 0.89 0.18 167 FILL_THIS_FORM 1056 0.55 0.88 0.39 168 DRUG_ED_ONLINE 1046 0.30 0.87 0.01 169 HTML_TAG_BALANCE_BODY 1036 0.52 0.86 0.35 170 DRUG_ED_CAPS 1026 0.29 0.85 0.00 171 SERGIO_SUBJECT_VIAGRA01 1023 0.29 0.85 0.00 172 XMSexyCombo_04 1004 0.36 0.84 0.12 173 T_FILL_THIS_FORM_LONG 1004 0.49 0.84 0.32 174 SUBJ_DOLLARS 996 0.43 0.83 0.23 175 XM_UB80 992 0.29 0.83 0.02 176 T_Symld_Words_02 989 0.65 0.82 0.56 177 XM_H_Long_From03 978 0.35 0.81 0.11 178 T_FILL_THIS_FORM_SHORT 954 0.60 0.79 0.50 179 TR_Mismatch_TLD_02 943 0.31 0.78 0.08 180 HTML_FONT_SIZE_HUGE 926 0.35 0.77 0.14 181 RCVD_IN_IADB_VOUCHED 917 2.44 0.76 3.30 182 LONG_JUNK_URI3 901 0.31 0.75 0.09 183 RELAYCOUNTRY_GB 879 0.62 0.73 0.56 184 TR_Caps_n_Bayes_99 872 0.29 0.73 0.07 185 BODY_URI_ONLY 860 0.27 0.72 0.05 186 RDNS_DYNAMIC 837 0.51 0.70 0.41 187 XMGenDplmaNmb 833 0.64 0.69 0.61 188 RCVD_IN_MSPIKE_WL 822 1.45 0.68 1.84 189 FILL_THIS_FORM_LOAN 822 0.43 0.68 0.30 190 XM_H_PHPMailer 820 0.66 0.68 0.65 191 URI_NOVOWEL 815 0.42 0.68 0.28 192 TR_XM_DK_Bayes 812 2.73 0.68 3.77 193 RCVD_IN_MSPIKE_H3 808 1.45 0.67 1.84 194 REMOVE_BEFORE_LINK 800 0.38 0.67 0.24 195 T_TooManySym_02 800 1.32 0.67 1.66 196 RELAYCOUNTRY_DE 778 0.50 0.65 0.43 197 XM_Body_Obfu01 761 0.30 0.63 0.13 198 HTML_IMAGE_ONLY_08 759 0.28 0.63 0.10 199 TR_XM_DK_Bayes1 757 2.53 0.63 3.50 200 HTML_SHORT_LINK_IMG_1 739 0.22 0.61 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 162094 53.80 25.12 68.34 2 HTML_MESSAGE 158515 74.53 89.71 66.83 3 BAYES_50 140562 50.53 33.29 59.26 4 DKIM_SIGNED 139782 64.22 74.64 58.94 5 XM_DK_Pass 138060 63.20 73.04 58.21 6 DKIM_VALID 131092 59.99 69.30 55.27 7 XM_H_QuotedFrom 103699 48.94 59.23 43.72 8 DKIM_VALID_AU 95857 45.88 56.65 40.42 9 XMListUnsubscribeExists 90895 47.08 64.37 38.32 10 ALL_TRUSTED 86058 28.19 12.23 36.28 11 DCC_CHECK 72327 44.94 73.43 30.49 12 XMSubLong 60639 26.25 27.60 25.57 13 T_TM2_M_HEADER_IN_MSG 56026 20.76 15.13 23.62 14 DKIM_VALID_EF 55998 21.94 18.64 23.61 15 HTML_FONT_LOW_CONTRAST 54563 26.11 32.22 23.00 16 MIME_QP_LONG_LINE 51397 17.39 8.94 21.67 17 TM2_M_URI_OPT_OUT 46468 16.08 9.15 19.59 18 LOC_TINY_FONT_1 42910 23.49 34.14 18.09 19 MIME_HTML_ONLY 41564 23.17 34.32 17.52 20 FVGT_m_MULTI_ODD 39799 18.90 23.10 16.78 21 XM_DK_Undo_02 34739 24.80 44.84 14.65 22 BAYES_99 34682 23.92 42.25 14.62 23 MultiRelay 31563 13.53 13.97 13.31 24 BAYES_999 31031 20.29 34.50 13.08 25 T_KAM_HTML_FONT_INVALID 26940 13.68 18.25 11.36 26 XM_Multi_Part_URI 24599 11.60 14.03 10.37 27 XM_DKIMWhitelistDomains 24413 6.86 0.10 10.29 28 XMSubMetaSx_00 23750 10.47 11.38 10.01 29 LOTS_OF_MONEY 23687 10.89 12.66 9.99 30 XM_Body_Dirty_Words 23003 12.14 16.97 9.70 31 URI_WP_HACKED_2 22058 7.53 4.05 9.30 32 TooManyTo_001 19853 7.83 6.77 8.37 33 RCVD_IN_RP_SAFE 19799 7.59 6.11 8.35 34 RCVD_IN_RP_CERTIFIED 18335 6.77 4.89 7.73 35 TR_DCC_Bayes_99 16232 15.67 33.07 6.84 36 FSL_BULK_SIG 15986 9.20 14.05 6.74 37 HTML_IMAGE_RATIO_02 15404 9.95 16.77 6.49 38 BAYES_60 14665 6.22 6.31 6.18 39 IMPOTENCE 14651 5.35 3.73 6.18 40 T_XMDrugObfuBody_14 13794 6.60 8.14 5.82 41 XM_Evil_Numbers_Gen 13724 7.98 12.30 5.79 42 HTML_IMAGE_RATIO_04 13047 8.41 14.14 5.50 43 BAYES_00 13025 3.97 0.98 5.49 44 LotsOfNums_01 12887 5.78 6.48 5.43 45 BOTNET_IPINHOSTNAME 11308 7.09 11.67 4.77 46 RCVD_IN_IADB_LISTED 10713 3.54 1.61 4.52 47 ANY_BOUNCE_MESSAGE 10680 3.34 1.04 4.50 48 BOUNCE_MESSAGE 10680 3.34 1.04 4.50 49 XM_UncommonTLD01 10500 4.88 5.77 4.43 50 IN_ZIMBRA_NJ_WHITELIST 10482 2.94 0.02 4.42 51 XM_H_Long_From01 10407 5.54 7.82 4.39 52 XM_SendGrid 10308 4.16 3.80 4.35 53 TooManyTo_002 10267 3.28 1.21 4.33 54 BAYES_80 9802 5.18 7.25 4.13 55 T_REMOTE_IMAGE 9201 3.68 3.28 3.88 56 ONLINE_PHARMACY 9130 3.09 1.60 3.85 57 UNPARSEABLE_RELAY 9122 3.25 2.07 3.85 58 RCVD_IN_IADB_SPF 9072 3.00 1.37 3.82 59 TR_XM_DK_Bayes 8939 2.73 0.68 3.77 60 RCVD_IN_MSPIKE_H2 8840 3.42 2.83 3.73 61 DKIM_INVALID 8690 4.23 5.34 3.66 62 T_TooManySym_01 8682 3.26 2.46 3.66 63 TVD_RCVD_IP 8613 2.48 0.19 3.63 64 RELAYCOUNTRY_META 8611 7.76 15.91 3.63 65 TooManyTo_003 8370 2.71 1.09 3.53 66 TR_XM_DK_Bayes1 8294 2.53 0.63 3.50 67 BAYES_95 8293 4.63 6.87 3.50 68 XMStrtUSub 8236 3.53 3.64 3.47 69 XM_B_Phish_Phrases 8159 4.63 6.97 3.44 70 XMNumbers 8158 3.59 3.90 3.44 71 SUBJ_ALL_CAPS 8119 3.33 3.14 3.42 72 BAYES_40 8076 2.73 1.41 3.41 73 FROM_EXCESS_BASE64 7836 4.48 6.81 3.30 74 RCVD_IN_IADB_VOUCHED 7816 2.44 0.76 3.30 75 RCVD_IN_IADB_SENDERID 7766 2.61 1.29 3.27 76 RCVD_IN_IADB_DK 7458 2.51 1.27 3.14 77 TVD_VISIT_PHARMA 7161 2.50 1.48 3.02 78 HTML_IMAGE_RATIO_06 6917 3.71 5.27 2.92 79 INVALID_MSGID 6747 1.96 0.22 2.84 80 MPART_ALT_DIFF 6612 4.32 7.34 2.79 81 TR_XM_DK_Bayes2 6490 1.99 0.52 2.74 82 TO_MALFORMED 6309 1.77 0.01 2.66 83 XMSexyCombo_05 6307 4.88 9.26 2.66 84 HTML_MIME_NO_HTML_TAG 5871 4.16 7.48 2.48 85 MIME_HTML_MOSTLY 5858 3.19 4.61 2.47 86 TR_XM_DocInvoice 5325 3.74 6.69 2.25 87 IN_HORDE_ADDRESS_BOOK 5168 1.46 0.05 2.18 88 RCVD_IN_IADB_OPTIN 5168 1.61 0.49 2.18 89 TR_Symld_Words 4823 1.71 1.08 2.03 90 BAYES_20 4772 1.67 1.01 2.01 91 URIBL_DBL_ABUSE_SPAM 4551 1.84 1.67 1.92 92 RCVD_IN_MSPIKE_WL 4373 1.45 0.68 1.84 93 RCVD_IN_MSPIKE_H3 4366 1.45 0.67 1.84 94 TooManyTo_004 4094 1.34 0.59 1.73 95 XM_PDF 4090 1.30 0.47 1.72 96 T_TooManySym_02 3926 1.32 0.67 1.66 97 XM_DIRTYINTL 3870 2.28 3.55 1.63 98 MAILING_LIST_MULTI 3798 1.60 1.59 1.60 99 XM_DK_Undo_01 3742 1.48 1.27 1.58 100 XMNoVowels 3629 1.43 1.24 1.53 101 USER_IN_DEF_DKIM_WL 3618 1.04 0.09 1.53 102 XMSubMetaSSx_00 3572 1.91 2.70 1.51 103 HTML_IMAGE_RATIO_08 3436 1.85 2.63 1.45 104 NO_DNS_FOR_FROM 3434 1.83 2.59 1.45 105 BAYES_05 3167 1.08 0.58 1.34 106 TooManyTo_005 3064 1.02 0.49 1.29 107 XM_CamelCaseFrm001 3047 1.97 3.32 1.28 108 MPART_ALT_DIFF_COUNT 3042 1.22 1.09 1.28 109 UNTRUSTED_Relay 2882 4.54 11.10 1.22 110 URI_HEX 2867 1.70 2.67 1.21 111 XM_SPF_SoftFail 2860 2.00 3.57 1.21 112 URI_TRY_3LD 2722 1.15 1.15 1.15 113 XM_ProductURIs 2713 1.34 1.73 1.14 114 XMSlimDrugH 2707 1.54 2.33 1.14 115 XM_D_tchamptons_WL 2700 0.76 0.00 1.14 116 XM_H_PHPOS 2656 1.06 0.94 1.12 117 XMDiploma_00 2555 1.13 1.24 1.08 118 XM_GoogleGroups 2503 0.85 0.46 1.06 119 MIME_HTML_ONLY_MULTI 2455 1.56 2.59 1.04 120 USER_IN_WHITELIST 2437 0.68 0.00 1.03 121 RELAYCOUNTRY_CA 2413 1.54 2.57 1.02 122 XM_OfRef6 2374 1.56 2.68 1.00 123 XMSlimDrugs 2323 1.29 1.91 0.98 124 T_XMDrugObfuBody_08 2300 1.26 1.84 0.97 125 XMSubMetaSx_01 2279 0.95 0.93 0.96 126 BOTNET 2010 5.12 13.54 0.85 127 XMBody_95 1991 0.61 0.15 0.84 128 XM_UB50 1975 2.42 5.54 0.83 129 T_XMHurry_00 1970 0.99 1.29 0.83 130 TM2_M_A_HREF_HREF 1903 0.68 0.44 0.80 131 XMPhish11 1829 0.81 0.90 0.77 132 XMBdyGiftCard01 1823 1.05 1.59 0.77 133 T_TooManySym_03 1802 0.54 0.11 0.76 134 XMSexyCombo_01 1780 1.31 2.42 0.75 135 HELO_NODOT 1647 0.52 0.17 0.69 136 XM_B_COPY_HTML 1621 0.80 1.04 0.68 137 XM_B_REG_HTML 1618 0.94 1.45 0.68 138 XM_ShortIntro_01 1577 0.53 0.25 0.66 139 XM_H_PHPMailer 1547 0.66 0.68 0.65 140 DKIM_ADSP_CUSTOM_MED 1518 1.02 1.78 0.64 141 TR_MetaPhish_Combo_01 1504 0.61 0.56 0.63 142 T_XMDrugObfuBody_00 1498 1.23 2.41 0.63 143 XMSubMetaSxObfu_02 1469 0.54 0.38 0.62 144 TM2_M_VERY_LONG_WORD 1458 0.91 1.49 0.61 145 PLING_QUERY 1447 0.61 0.60 0.61 146 XMGenDplmaNmb 1438 0.64 0.69 0.61 147 XM_H_Long_From02 1422 0.83 1.28 0.60 148 XM_RXBody 1400 1.14 2.22 0.59 149 RELAYCOUNTRY_GB 1340 0.62 0.73 0.56 150 T_Symld_Words_02 1322 0.65 0.82 0.56 151 NO_PRESCRIPTION 1249 0.94 1.76 0.53 152 MISSING_HEADERS 1249 0.51 0.46 0.53 153 XMLngstWrd_00 1223 0.51 0.49 0.52 154 T_FILL_THIS_FORM_SHORT 1184 0.60 0.79 0.50 155 XMStockSpam_06 1180 0.65 0.95 0.50 156 XMPhish30 1152 0.82 1.47 0.49 157 XMLngstWrd_01 1112 0.47 0.48 0.47 158 XMBrknScrpt_02 1084 0.46 0.46 0.46 159 XMCapTrack 1064 0.39 0.27 0.45 160 NML_ADSP_CUSTOM_MED 1050 0.83 1.59 0.44 161 SpammyFromTLD_01 1033 0.82 1.59 0.44 162 URIBL_SBL_A 1022 0.44 0.47 0.43 163 RELAYCOUNTRY_DE 1016 0.50 0.65 0.43 164 T_TooManySym_04 1004 0.29 0.02 0.42 165 RELAYCOUNTRY_FR 996 1.40 3.33 0.42 166 XM_H_PHPOS_M 985 0.43 0.45 0.42 167 RDNS_DYNAMIC 970 0.51 0.70 0.41 168 XM_S_JOY_D 947 0.38 0.36 0.40 169 DKIM_ADSP_NXDOMAIN 925 0.68 1.25 0.39 170 FILL_THIS_FORM 921 0.55 0.88 0.39 171 HTML_FONT_FACE_BAD 915 0.79 1.58 0.39 172 XMBody_78 906 0.57 0.93 0.38 173 XM_E_VN 860 0.44 0.59 0.36 174 HTML_TAG_BALANCE_BODY 837 0.52 0.86 0.35 175 XM_BadFromFormat 816 1.12 2.66 0.34 176 XMRcvdHeader_15 797 0.22 0.00 0.34 177 T_MONEY_PERCENT 782 0.41 0.58 0.33 178 TR_LOTS_OF_MONEY2 782 0.41 0.58 0.33 179 KHOP_DYNAMIC 780 0.33 0.32 0.33 180 TM2_M_BODY_EMPTY 758 0.52 0.91 0.32 181 UPPERCASE_50_75 756 0.26 0.16 0.32 182 T_FILL_THIS_FORM_LONG 750 0.49 0.84 0.32 183 XMDateMe_00 747 0.29 0.24 0.31 184 RCVD_IN_BL_SPAMCOP_NET 728 1.15 2.83 0.31 185 XMBody_17 723 0.62 1.25 0.30 186 FORGED_GMAIL_RCVD 712 0.76 1.66 0.30 187 TVD_SPACE_RATIO 704 0.33 0.39 0.30 188 FILL_THIS_FORM_LOAN 704 0.43 0.68 0.30 189 DIET_1 697 0.70 1.49 0.29 190 XMHTMLBadTable_001 688 0.54 1.04 0.29 191 XMSUPPORT 683 0.19 0.00 0.29 192 TR_MetaPhish_Combo_01b 677 0.21 0.05 0.29 193 URI_NOVOWEL 670 0.42 0.68 0.28 194 XMClaimOffer 666 0.85 1.96 0.28 195 URIBL_CR_SURBL 666 0.32 0.39 0.28 196 RELAYCOUNTRY_AU 660 0.35 0.49 0.28 197 XM_Combo_Sbj 659 0.33 0.44 0.28 198 HTTPS_HTTP_MISMATCH 657 0.33 0.43 0.28 199 XM_H_SpoofStaff4 643 0.18 0.01 0.27 200 XMSubMetaI_00 637 0.77 1.75 0.27 ----------------------------------------------------------------------