Email: 335575 Autolearn: 0 AvgScore: 3.03 AvgScanTime: 2.07 sec Spam: 99528 Autolearn: 0 AvgScore: 12.54 AvgScanTime: 2.42 sec Ham: 236047 Autolearn: 0 AvgScore: -0.98 AvgScanTime: 1.93 sec Time Spent Running SA: 193.22 hours Time Spent Processing Spam: 66.77 hours Time Spent Processing Ham: 126.46 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 92935 86.49 93.38 83.58 2 DKIM_SIGNED 79436 77.85 79.81 77.02 3 XM_DK_Pass 77808 76.69 78.18 76.06 4 DCC_CHECK 77794 54.38 78.16 44.36 5 DKIM_VALID 73588 72.01 73.94 71.20 6 XMListUnsubscribeExists 71169 60.12 71.51 55.32 7 DKIM_VALID_AU 63469 58.87 63.77 56.81 8 XM_H_QuotedFrom 49696 43.20 49.93 40.37 9 XM_DK_Undo_02 48959 30.24 49.19 22.25 10 BAYES_99 44951 27.96 45.16 20.70 11 BAYES_999 38637 24.79 38.82 18.87 12 HTML_FONT_LOW_CONTRAST 38575 33.24 38.76 30.91 13 LOC_TINY_FONT_1 37595 30.63 37.77 27.62 14 TR_DCC_Bayes_99 36131 19.17 36.30 11.95 15 MIME_HTML_ONLY 33269 24.71 33.43 21.04 16 BAYES_50 32497 43.85 32.65 48.57 17 FVGT_m_MULTI_ODD 25553 21.32 25.67 19.48 18 XMSubLong 24441 22.77 24.56 22.02 19 XM_Body_Dirty_Words 21512 14.82 21.61 11.95 20 DCC_CHECK_NEGATIVE 20037 44.35 20.13 54.56 21 RELAYCOUNTRY_META 17935 11.14 18.02 8.24 22 BOTNET 17285 6.66 17.37 2.14 23 T_KAM_HTML_FONT_INVALID 17220 14.89 17.30 13.87 24 HTML_IMAGE_RATIO_02 17181 12.23 17.26 10.10 25 T_TM2_M_HEADER_IN_MSG 16998 24.32 17.08 27.37 26 DKIM_VALID_EF 16460 25.66 16.54 29.51 27 XM_Multi_Part_URI 16000 14.93 16.08 14.44 28 BOTNET_IPINHOSTNAME 14917 9.40 14.99 7.05 29 MultiRelay 13453 15.24 13.52 15.96 30 XM_Evil_Numbers_Gen 12820 10.09 12.88 8.92 31 XMSexyCombo_05 12687 6.72 12.75 4.18 32 UNTRUSTED_Relay 12048 7.17 12.11 5.09 33 LOTS_OF_MONEY 10991 8.86 11.04 7.94 34 FSL_BULK_SIG 10630 8.25 10.68 7.23 35 HTML_IMAGE_RATIO_04 10597 7.91 10.65 6.75 36 MPART_ALT_DIFF 10399 5.44 10.45 3.32 37 XMSubMetaSx_00 9912 6.43 9.96 4.94 38 T_XMDrugObfuBody_14 9739 8.00 9.79 7.25 39 XM_UncommonTLD01 8863 5.55 8.91 4.13 40 XM_H_Long_From01 8203 6.75 8.24 6.12 41 XM_B_Phish_Phrases 7630 7.64 7.67 7.63 42 FROM_EXCESS_BASE64 7599 5.73 7.64 4.93 43 TooManyTo_001 7308 8.98 7.34 9.67 44 LotsOfNums_01 6947 7.26 6.98 7.38 45 BAYES_60 6921 6.05 6.95 5.67 46 BAYES_80 6544 4.64 6.58 3.83 47 XM_UB50 6542 5.09 6.57 4.46 48 RCVD_IN_RP_SAFE 6118 12.65 6.15 15.39 49 MIME_HTML_MOSTLY 6100 3.56 6.13 2.47 50 DKIM_INVALID 5848 5.84 5.88 5.83 51 HTML_IMAGE_RATIO_06 5838 3.78 5.87 2.89 52 XM_DIRTYINTL 5168 2.59 5.19 1.49 53 RCVD_IN_RP_RNBL 4850 1.48 4.87 0.05 54 RCVD_IN_RP_CERTIFIED 4849 11.16 4.87 13.81 55 XMBdyGiftCard01 4780 2.57 4.80 1.63 56 XMStrtUSub 4334 5.06 4.35 5.36 57 HTML_IMAGE_RATIO_08 4316 2.73 4.34 2.06 58 RCVD_IN_PSBL 4053 1.30 4.07 0.13 59 RELAYCOUNTRY_CA 3963 2.36 3.98 1.68 60 XM_SendGrid 3920 5.10 3.94 5.58 61 XM_CamelCaseFrm001 3781 2.34 3.80 1.73 62 HTML_MIME_NO_HTML_TAG 3627 2.40 3.64 1.87 63 DKIM_ADSP_NXDOMAIN 3619 1.47 3.64 0.55 64 BAYES_95 3618 3.02 3.64 2.76 65 T_REMOTE_IMAGE 3617 3.10 3.63 2.88 66 XM_SPF_SoftFail 3472 1.70 3.49 0.95 67 ALL_TRUSTED 3406 11.64 3.42 15.11 68 XMNumbers 3395 4.78 3.41 5.36 69 MIME_HTML_ONLY_MULTI 3273 2.09 3.29 1.58 70 FROM_SUSPICIOUS_NTLD 3214 0.99 3.23 0.04 71 XMSexyCombo_01 3201 1.48 3.22 0.75 72 URI_HEX 3201 2.27 3.22 1.87 73 TM2_M_URI_OPT_OUT 3064 2.15 3.08 1.76 74 T_XMDrugObfuBody_08 2966 1.69 2.98 1.15 75 MIME_QP_LONG_LINE 2741 3.52 2.75 3.85 76 T_TooManySym_01 2649 5.93 2.66 7.30 77 XMSubNoVowel 2608 1.02 2.62 0.35 78 MIME_HEADER_CTYPE_ONLY 2602 0.99 2.61 0.30 79 XM_OfRef6 2590 2.39 2.60 2.29 80 MultiRelay_CC 2525 0.84 2.54 0.13 81 MultiRelay_Combo 2525 0.84 2.54 0.13 82 XMSubMetaI_00 2450 1.54 2.46 1.16 83 RCVD_IN_MSPIKE_H2 2438 4.14 2.45 4.85 84 SUBJ_ILLEGAL_CHARS 2338 0.70 2.35 0.01 85 XMDiploma_00 2285 1.45 2.30 1.09 86 URIBL_RHS_DOB 2276 0.81 2.29 0.18 87 XMSexyCombo_04 2211 0.73 2.22 0.10 88 TO_NO_BRKTS_HTML_IMG 2208 0.77 2.22 0.16 89 XMSubEmpty 2207 0.92 2.22 0.37 90 BASE64_LENGTH_79_INF 2201 0.94 2.21 0.41 91 XM_UB60 2190 0.74 2.20 0.12 92 NORDNS_LOW_CONTRAST 2175 0.65 2.19 0.00 93 HTML_FONT_SIZE_HUGE 2140 0.77 2.15 0.19 94 UNPARSEABLE_RELAY 2139 4.00 2.15 4.78 95 XMBody_17 2127 1.08 2.14 0.64 96 XM_H_Long_From02 2127 3.76 2.14 4.45 97 ANY_BOUNCE_MESSAGE 2115 2.12 2.13 2.11 98 BOUNCE_MESSAGE 2115 2.12 2.13 2.11 99 HTML_IMAGE_ONLY_28 2022 0.77 2.03 0.23 100 XM_RXBody 2010 0.96 2.02 0.52 101 NO_DNS_FOR_FROM 2007 1.60 2.02 1.43 102 TR_Mismatch_TLD_02 1918 0.63 1.93 0.08 103 BOTNET_NORDNS 1916 0.58 1.93 0.01 104 SpammyFromTLD_02 1879 0.71 1.89 0.21 105 XM_ProductURIs 1865 1.16 1.87 0.86 106 XM_salutation2 1862 0.99 1.87 0.61 107 XM_URI_RBL 1858 1.13 1.87 0.82 108 RELAYCOUNTRY_DE 1845 0.88 1.85 0.46 109 BAYES_40 1781 3.24 1.79 3.84 110 HTML_OFF_PAGE 1761 0.53 1.77 0.01 111 FILL_THIS_FORM_LONG 1755 0.91 1.76 0.55 112 SUBJ_ALL_CAPS 1701 1.45 1.71 1.35 113 XM_B_REG_HTML 1557 1.01 1.56 0.77 114 T_HTML_TAG_BALANCE_CENTER 1546 0.54 1.55 0.12 115 XMSubMetaSx_01 1539 0.53 1.55 0.09 116 RELAYCOUNTRY_CN 1506 0.48 1.51 0.05 117 URI_TRY_3LD 1483 1.78 1.49 1.91 118 FILL_THIS_FORM 1473 0.88 1.48 0.63 119 RCVD_IN_BL_SPAMCOP_NET 1463 0.54 1.47 0.15 120 BAYES_20 1438 2.30 1.44 2.67 121 XMSexyCombo_02 1435 0.45 1.44 0.03 122 XM_UB99 1423 0.46 1.43 0.06 123 T_XMHurry_00 1421 1.23 1.43 1.14 124 DIET_1 1420 0.82 1.43 0.56 125 XMGenDplmaNmb 1413 0.81 1.42 0.55 126 XMBrknScrpt_02 1401 0.83 1.41 0.59 127 BODY_ENHANCEMENT 1394 0.47 1.40 0.07 128 RELAYCOUNTRY_IN 1392 0.46 1.40 0.06 129 XM_Doc_Oz_Body 1364 0.61 1.37 0.28 130 XMHTMLBadTable_001 1353 1.05 1.36 0.92 131 RELAYCOUNTRY_FR 1350 0.57 1.36 0.24 132 RELAYCOUNTRY_AT 1343 0.55 1.35 0.21 133 HTML_FONT_SIZE_LARGE 1329 0.47 1.34 0.10 134 TR_LOTS_OF_MONEY2 1327 0.79 1.33 0.56 135 T_MONEY_PERCENT 1327 0.79 1.33 0.56 136 PLING_QUERY 1320 0.91 1.33 0.74 137 XMPhish30 1318 0.69 1.32 0.42 138 T_Symld_Words_02 1292 0.79 1.30 0.58 139 NUMERIC_HTTP_ADDR 1280 0.63 1.29 0.35 140 XMPhish11 1274 1.09 1.28 1.01 141 SUBJ_DOLLARS 1273 0.92 1.28 0.77 142 SpammyFromTLD_01 1266 0.63 1.27 0.36 143 TVD_SPACE_RATIO_MINFP 1256 0.40 1.26 0.04 144 BAD_ENC_HEADER 1250 0.40 1.26 0.04 145 RELAYCOUNTRY_FI 1248 0.40 1.25 0.04 146 MALE_ENHANCE 1246 0.37 1.25 0.00 147 FROM_ILLEGAL_CHARS 1245 0.37 1.25 0.00 148 TVD_INCREASE_SIZE 1244 0.37 1.25 0.00 149 URIBL_BLACK 1223 0.41 1.23 0.07 150 TR_XM_RelayPhish 1214 0.68 1.22 0.45 151 XMStockSpam_06 1211 0.83 1.22 0.67 152 MAILING_LIST_MULTI 1210 3.45 1.22 4.39 153 FILL_THIS_FORM_LOAN 1194 0.73 1.20 0.53 154 XMSexyCombo_03 1191 0.36 1.20 0.00 155 BODY_URI_ONLY 1158 0.38 1.16 0.04 156 TM2_M_VERY_LONG_WORD 1157 0.90 1.16 0.79 157 RCVD_IN_IADB_LISTED 1157 3.01 1.16 3.79 158 HTML_SHORT_LINK_IMG_2 1134 0.38 1.14 0.06 159 XM_H_PHPOS 1125 1.02 1.13 0.97 160 LONG_JUNK_URI 1124 0.40 1.13 0.09 161 HTML_IMAGE_ONLY_16 1121 0.52 1.13 0.27 162 XM_B_COPY_HTML 1091 0.77 1.10 0.64 163 XM_UB999 1083 0.34 1.09 0.03 164 NORMAL_HTTP_TO_IP 1074 0.35 1.08 0.05 165 XM_BadFromFormat 1052 0.41 1.06 0.14 166 XMLngstWrd_00 1042 0.63 1.05 0.46 167 TR_MetaPhish_Combo_01 1039 2.48 1.04 3.08 168 XMPhish14 1028 0.59 1.03 0.40 169 LongTLD 1028 0.41 1.03 0.15 170 HTML_TAG_BALANCE_BODY 1008 0.58 1.01 0.40 171 XMLngstWrd_01 1001 0.58 1.01 0.40 172 RCVD_IN_IADB_SPF 998 2.67 1.00 3.38 173 TR_Symld_Words 986 1.23 0.99 1.33 174 XMLngstWrd_02 947 0.42 0.95 0.20 175 HTML_FONT_FACE_BAD 942 0.63 0.95 0.49 176 RCVD_IN_IADB_SENDERID 918 2.39 0.92 3.01 177 XMLngstWrd_03 909 0.37 0.91 0.15 178 REPLYTO_WITHOUT_TO_CC 900 0.31 0.90 0.05 179 RCVD_IN_IADB_DK 892 2.34 0.90 2.94 180 URI_NOVOWEL 883 0.54 0.89 0.40 181 RDNS_DYNAMIC 882 0.62 0.89 0.51 182 T_XMDrugObfuBody_00 877 0.67 0.88 0.59 183 XM_UB80 875 0.30 0.88 0.05 184 T_FILL_THIS_FORM_SHORT 863 0.65 0.87 0.56 185 XMBody_78 853 0.62 0.86 0.52 186 BAYES_05 843 1.33 0.85 1.54 187 XMSubMetaSxObfu_03 841 0.56 0.84 0.44 188 XMClaimOffer 834 0.33 0.84 0.11 189 XMSubMetaSSx_00 829 0.41 0.83 0.23 190 HK_RANDOM_FROM 826 0.33 0.83 0.12 191 TR_Caps_n_Bayes_99 778 0.30 0.78 0.10 192 DKIM_ADSP_CUSTOM_MED 771 0.93 0.77 1.00 193 LOW_PRICE 762 0.42 0.77 0.27 194 THIS_AD 757 0.45 0.76 0.32 195 URIBL_DBL_SPAM 751 0.23 0.75 0.01 196 MISSING_HEADERS 737 0.41 0.74 0.27 197 RELAYCOUNTRY_GB 731 0.60 0.73 0.54 198 XM_ShortIntro_01 724 0.41 0.73 0.28 199 XM_H_PHPMailer 721 0.72 0.72 0.71 200 BAYES_00 717 7.25 0.72 10.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 197288 86.49 93.38 83.58 2 DKIM_SIGNED 181815 77.85 79.81 77.02 3 XM_DK_Pass 179528 76.69 78.18 76.06 4 DKIM_VALID 168059 72.01 73.94 71.20 5 DKIM_VALID_AU 134097 58.87 63.77 56.81 6 XMListUnsubscribeExists 130571 60.12 71.51 55.32 7 DCC_CHECK_NEGATIVE 128796 44.35 20.13 54.56 8 BAYES_50 114656 43.85 32.65 48.57 9 DCC_CHECK 104699 54.38 78.16 44.36 10 XM_H_QuotedFrom 95283 43.20 49.93 40.37 11 HTML_FONT_LOW_CONTRAST 72971 33.24 38.76 30.91 12 DKIM_VALID_EF 69665 25.66 16.54 29.51 13 LOC_TINY_FONT_1 65200 30.63 37.77 27.62 14 T_TM2_M_HEADER_IN_MSG 64607 24.32 17.08 27.37 15 XM_DK_Undo_02 52523 30.24 49.19 22.25 16 XMSubLong 51981 22.77 24.56 22.02 17 MIME_HTML_ONLY 49667 24.71 33.43 21.04 18 BAYES_99 48870 27.96 45.16 20.70 19 FVGT_m_MULTI_ODD 45986 21.32 25.67 19.48 20 BAYES_999 44551 24.79 38.82 18.87 21 XM_DKIMWhitelistDomains 38011 11.34 0.05 16.10 22 MultiRelay 37677 15.24 13.52 15.96 23 RCVD_IN_RP_SAFE 36332 12.65 6.15 15.39 24 ALL_TRUSTED 35664 11.64 3.42 15.11 25 XM_Multi_Part_URI 34086 14.93 16.08 14.44 26 T_KAM_HTML_FONT_INVALID 32742 14.89 17.30 13.87 27 RCVD_IN_RP_CERTIFIED 32589 11.16 4.87 13.81 28 XM_Body_Dirty_Words 28219 14.82 21.61 11.95 29 TR_DCC_Bayes_99 28198 19.17 36.30 11.95 30 HTML_IMAGE_RATIO_02 23851 12.23 17.26 10.10 31 BAYES_00 23628 7.25 0.72 10.01 32 TooManyTo_001 22819 8.98 7.34 9.67 33 TR_XM_DK_Bayes 21194 6.47 0.50 8.98 34 XM_Evil_Numbers_Gen 21047 10.09 12.88 8.92 35 TR_XM_DK_Bayes1 20242 6.16 0.44 8.58 36 RELAYCOUNTRY_META 19450 11.14 18.02 8.24 37 LOTS_OF_MONEY 18747 8.86 11.04 7.94 38 TR_XM_DK_Bayes2 18671 5.68 0.38 7.91 39 XM_B_Phish_Phrases 18005 7.64 7.67 7.63 40 LotsOfNums_01 17424 7.26 6.98 7.38 41 T_TooManySym_01 17234 5.93 2.66 7.30 42 T_XMDrugObfuBody_14 17109 8.00 9.79 7.25 43 FSL_BULK_SIG 17071 8.25 10.68 7.23 44 BOTNET_IPINHOSTNAME 16635 9.40 14.99 7.05 45 HTML_IMAGE_RATIO_04 15933 7.91 10.65 6.75 46 XM_H_Long_From01 14452 6.75 8.24 6.12 47 DKIM_INVALID 13756 5.84 5.88 5.83 48 BAYES_60 13379 6.05 6.95 5.67 49 XM_SendGrid 13180 5.10 3.94 5.58 50 XMNumbers 12644 4.78 3.41 5.36 51 XMStrtUSub 12641 5.06 4.35 5.36 52 TO_MALFORMED 12256 3.65 0.01 5.19 53 UNTRUSTED_Relay 12025 7.17 12.11 5.09 54 XMSubMetaSx_00 11650 6.43 9.96 4.94 55 FROM_EXCESS_BASE64 11629 5.73 7.64 4.93 56 RCVD_IN_MSPIKE_H2 11443 4.14 2.45 4.85 57 UNPARSEABLE_RELAY 11282 4.00 2.15 4.78 58 XM_UB50 10526 5.09 6.57 4.46 59 XM_H_Long_From02 10493 3.76 2.14 4.45 60 MAILING_LIST_MULTI 10368 3.45 1.22 4.39 61 XMSexyCombo_05 9855 6.72 12.75 4.18 62 XM_UncommonTLD01 9750 5.55 8.91 4.13 63 TVD_RCVD_IP 9744 3.03 0.42 4.13 64 MIME_QP_LONG_LINE 9081 3.52 2.75 3.85 65 BAYES_40 9076 3.24 1.79 3.84 66 BAYES_80 9037 4.64 6.58 3.83 67 RCVD_IN_IADB_LISTED 8937 3.01 1.16 3.79 68 RELAYCOUNTRY_PH 8670 2.59 0.02 3.67 69 XM_DK_Undo_01 8647 2.77 0.66 3.66 70 IN_ZIMBRA_NJ_WHITELIST 8526 2.55 0.02 3.61 71 XM_GoogleGroups 8209 2.57 0.41 3.48 72 RCVD_IN_IADB_SPF 7975 2.67 1.00 3.38 73 MPART_ALT_DIFF 7848 5.44 10.45 3.32 74 TR_MetaPhish_Combo_01 7271 2.48 1.04 3.08 75 RCVD_IN_IADB_SENDERID 7115 2.39 0.92 3.01 76 INVALID_MSGID 7096 2.22 0.37 3.01 77 RCVD_IN_IADB_DK 6950 2.34 0.90 2.94 78 HTML_IMAGE_RATIO_06 6831 3.78 5.87 2.89 79 T_REMOTE_IMAGE 6794 3.10 3.63 2.88 80 BAYES_95 6512 3.02 3.64 2.76 81 BAYES_20 6296 2.30 1.44 2.67 82 RCVD_IN_MSPIKE_WL 6068 1.90 0.31 2.57 83 RCVD_IN_MSPIKE_H3 6068 1.90 0.31 2.57 84 MIME_HTML_MOSTLY 5840 3.56 6.13 2.47 85 RCVD_IN_IADB_VOUCHED 5768 1.93 0.71 2.44 86 T_TooManySym_02 5759 1.86 0.47 2.44 87 XM_OfRef6 5415 2.39 2.60 2.29 88 XM_PDF 5108 1.59 0.23 2.16 89 BOTNET 5055 6.66 17.37 2.14 90 ANY_BOUNCE_MESSAGE 4986 2.12 2.13 2.11 91 BOUNCE_MESSAGE 4985 2.12 2.13 2.11 92 HTML_IMAGE_RATIO_08 4851 2.73 4.34 2.06 93 IN_HORDE_ADDRESS_BOOK 4754 1.43 0.05 2.01 94 URI_TRY_3LD 4504 1.78 1.49 1.91 95 HTML_MIME_NO_HTML_TAG 4412 2.40 3.64 1.87 96 URI_HEX 4403 2.27 3.22 1.87 97 USER_IN_DEF_DKIM_WL 4199 1.25 0.00 1.78 98 TM2_M_URI_OPT_OUT 4156 2.15 3.08 1.76 99 XM_CamelCaseFrm001 4077 2.34 3.80 1.73 100 RELAYCOUNTRY_CA 3958 2.36 3.98 1.68 101 XMBdyGiftCard01 3855 2.57 4.80 1.63 102 MIME_HTML_ONLY_MULTI 3729 2.09 3.29 1.58 103 BAYES_05 3632 1.33 0.85 1.54 104 XM_DIRTYINTL 3520 2.59 5.19 1.49 105 RCVD_IN_IADB_OPTIN 3481 1.19 0.53 1.47 106 NO_DNS_FOR_FROM 3366 1.60 2.02 1.43 107 SUBJ_ALL_CAPS 3176 1.45 1.71 1.35 108 TR_Symld_Words 3140 1.23 0.99 1.33 109 TooManyTo_002 3099 1.08 0.52 1.31 110 XMBody_95 2848 0.87 0.07 1.21 111 XMSubMetaI_00 2728 1.54 2.46 1.16 112 T_XMDrugObfuBody_08 2706 1.69 2.98 1.15 113 T_XMHurry_00 2702 1.23 1.43 1.14 114 XMDiploma_00 2580 1.45 2.30 1.09 115 XMPhish11 2384 1.09 1.28 1.01 116 DKIM_ADSP_CUSTOM_MED 2361 0.93 0.77 1.00 117 TooManyTo_003 2303 0.82 0.44 0.98 118 XM_H_PHPOS 2286 1.02 1.13 0.97 119 XM_SPF_SoftFail 2240 1.70 3.49 0.95 120 XMHTMLBadTable_001 2182 1.05 1.36 0.92 121 USER_IN_WHITELIST 2173 0.65 0.00 0.92 122 T_TooManySym_03 2050 0.66 0.16 0.87 123 XM_ProductURIs 2040 1.16 1.87 0.86 124 XM_OfRef7 2024 0.68 0.27 0.86 125 XM_URI_RBL 1928 1.13 1.87 0.82 126 TooManyTo_004 1892 0.67 0.35 0.80 127 TM2_M_VERY_LONG_WORD 1861 0.90 1.16 0.79 128 XMSubMetaSxObfu_02 1834 0.66 0.39 0.78 129 XM_B_REG_HTML 1822 1.01 1.56 0.77 130 SUBJ_DOLLARS 1811 0.92 1.28 0.77 131 XMSexyCombo_01 1782 1.48 3.22 0.75 132 PLING_QUERY 1750 0.91 1.33 0.74 133 XM_H_PHPMailer 1683 0.72 0.72 0.71 134 TooManyTo_005 1664 0.59 0.31 0.70 135 NML_ADSP_CUSTOM_MED 1598 0.69 0.72 0.68 136 XMStockSpam_06 1590 0.83 1.22 0.67 137 XM_B_COPY_HTML 1503 0.77 1.10 0.64 138 XMBody_17 1501 1.08 2.14 0.64 139 FILL_THIS_FORM 1490 0.88 1.48 0.63 140 XM_salutation2 1448 0.99 1.87 0.61 141 XMBrknScrpt_02 1391 0.83 1.41 0.59 142 T_XMDrugObfuBody_00 1385 0.67 0.88 0.59 143 T_Symld_Words_02 1360 0.79 1.30 0.58 144 DIET_1 1327 0.82 1.43 0.56 145 TR_LOTS_OF_MONEY2 1325 0.79 1.33 0.56 146 T_MONEY_PERCENT 1325 0.79 1.33 0.56 147 T_FILL_THIS_FORM_SHORT 1320 0.65 0.87 0.56 148 FILL_THIS_FORM_LONG 1305 0.91 1.76 0.55 149 DKIM_ADSP_NXDOMAIN 1305 1.47 3.64 0.55 150 XMGenDplmaNmb 1302 0.81 1.42 0.55 151 RELAYCOUNTRY_GB 1280 0.60 0.73 0.54 152 FILL_THIS_FORM_LOAN 1247 0.73 1.20 0.53 153 XMBody_78 1232 0.62 0.86 0.52 154 XM_RXBody 1225 0.96 2.02 0.52 155 RDNS_DYNAMIC 1208 0.62 0.89 0.51 156 HTML_FONT_FACE_BAD 1166 0.63 0.95 0.49 157 TM2_M_A_HREF_HREF 1146 0.42 0.27 0.49 158 HELO_NODOT 1143 0.45 0.35 0.48 159 T_TooManySym_04 1109 0.34 0.02 0.47 160 RELAYCOUNTRY_DE 1096 0.88 1.85 0.46 161 XMLngstWrd_00 1087 0.63 1.05 0.46 162 FORGED_GMAIL_RCVD 1085 0.51 0.61 0.46 163 TR_XM_RelayPhish 1074 0.68 1.22 0.45 164 XM_H_PHPOS_M 1068 0.46 0.48 0.45 165 HELO_NO_DOMAIN 1049 0.42 0.35 0.44 166 XMSubMetaSxObfu_03 1044 0.56 0.84 0.44 167 XMHTML_After_End 1013 0.50 0.66 0.43 168 HTTPS_HTTP_MISMATCH 1005 0.36 0.20 0.43 169 XMPhish30 984 0.69 1.32 0.42 170 XMNoVowels 966 0.42 0.43 0.41 171 BASE64_LENGTH_79_INF 961 0.94 2.21 0.41 172 URI_NOVOWEL 938 0.54 0.89 0.40 173 HTML_TAG_BALANCE_BODY 937 0.58 1.01 0.40 174 XMPhish14 937 0.59 1.03 0.40 175 XM_Akamai 934 0.28 0.01 0.40 176 XMLngstWrd_01 934 0.58 1.01 0.40 177 XMCapTrack 926 0.32 0.15 0.39 178 XMSlimDrugH 882 0.44 0.60 0.37 179 HTML_IMAGE_ONLY_32 878 0.44 0.60 0.37 180 XMSubEmpty 878 0.92 2.22 0.37 181 XMSolicitRefs_0 857 0.41 0.54 0.36 182 XMRcvdHeader_15 848 0.25 0.00 0.36 183 REMOVE_BEFORE_LINK 843 0.34 0.30 0.36 184 SpammyFromTLD_01 841 0.63 1.27 0.36 185 XMSubNoVowel 826 1.02 2.62 0.35 186 NUMERIC_HTTP_ADDR 818 0.63 1.29 0.35 187 THIS_AD 758 0.45 0.76 0.32 188 XMSUPPORT 748 0.22 0.00 0.32 189 XMBSHREFv2 747 0.28 0.20 0.32 190 MIME_HEADER_CTYPE_ONLY 719 0.99 2.61 0.30 191 XM_D_tchamptons_WL 709 0.21 0.00 0.30 192 XM_Walgreens_Forge 701 0.39 0.60 0.30 193 RELAYCOUNTRY_AU 694 0.32 0.38 0.29 194 XM_H_SpoofStaff4 694 0.22 0.04 0.29 195 XM_Doc_Oz_Body 670 0.61 1.37 0.28 196 XM_ShortIntro_01 663 0.41 0.73 0.28 197 MISSING_HEADERS 648 0.41 0.74 0.27 198 LOW_PRICE 637 0.42 0.77 0.27 199 HTML_IMAGE_ONLY_16 629 0.52 1.13 0.27 200 XMDateMe_00 629 0.25 0.22 0.27 ----------------------------------------------------------------------