Email: 599997 Autolearn: 0 AvgScore: 3.26 AvgScanTime: 2.09 sec Spam: 159586 Autolearn: 0 AvgScore: 12.82 AvgScanTime: 2.56 sec Ham: 440411 Autolearn: 0 AvgScore: -0.20 AvgScanTime: 1.92 sec Time Spent Running SA: 348.66 hours Time Spent Processing Spam: 113.65 hours Time Spent Processing Ham: 235.01 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 152232 88.40 95.39 85.86 2 DCC_CHECK 123515 50.40 77.40 40.62 3 DKIM_SIGNED 120102 75.23 75.26 75.22 4 XM_DK_Pass 114477 73.18 71.73 73.70 5 XMListUnsubscribeExists 113433 55.31 71.08 49.59 6 XM_B_Unicode 112216 68.47 70.32 67.81 7 DKIM_VALID 110438 70.36 69.20 70.77 8 DKIM_VALID_AU 82859 51.21 51.92 50.95 9 XM_B_Unicode2 76263 43.19 47.79 41.52 10 XM_DK_Undo_02 70686 22.06 44.29 14.00 11 BAYES_99 63972 19.45 40.09 11.98 12 MIME_HTML_ONLY 59075 24.78 37.02 20.35 13 BAYES_50 56388 48.30 35.33 53.00 14 HTML_FONT_LOW_CONTRAST 54328 29.54 34.04 27.90 15 BAYES_999 53099 16.61 33.27 10.57 16 TR_DCC_Bayes_99 50976 12.74 31.94 5.78 17 LOC_TINY_FONT_1 48122 25.10 30.15 23.27 18 FVGT_m_MULTI_ODD 40471 22.32 25.36 21.21 19 XMSubLong 38444 23.86 24.09 23.78 20 RELAYCOUNTRY_META 38190 10.03 23.93 5.00 21 XM_Body_Dirty_Words 37693 16.39 23.62 13.77 22 DCC_CHECK_NEGATIVE 32896 47.63 20.61 57.43 23 DKIM_VALID_EF 31571 25.39 19.78 27.42 24 BOTNET 30691 6.54 19.23 1.95 25 T_KAM_HTML_FONT_INVALID 29908 17.23 18.74 16.68 26 T_TM2_M_HEADER_IN_MSG 29715 26.93 18.62 29.94 27 UNTRUSTED_Relay 27626 5.58 17.31 1.34 28 HTML_IMAGE_RATIO_02 25942 9.88 16.26 7.57 29 XM_Multi_Part_URI 25076 13.17 15.71 12.24 30 BOTNET_IPINHOSTNAME 24074 7.36 15.09 4.56 31 MultiRelay 23470 18.27 14.71 19.57 32 LOTS_OF_MONEY 21651 11.36 13.57 10.57 33 XMSexyCombo_05 19631 6.24 12.30 4.05 34 XM_Evil_Numbers_Gen 18903 9.55 11.85 8.72 35 FSL_BULK_SIG 16002 8.60 10.03 8.08 36 LotsOfNums_01 14816 8.38 9.28 8.05 37 HTML_IMAGE_RATIO_04 14035 6.73 8.79 5.98 38 XM_UncommonTLD01 13880 5.38 8.70 4.17 39 XMSubMetaSx_00 13522 5.88 8.47 4.94 40 BAYES_80 13270 5.28 8.32 4.18 41 T_XMDrugObfuBody_14 12027 7.56 7.54 7.56 42 XM_H_Long_From01 11932 6.39 7.48 5.99 43 XM_UB50 11684 2.57 7.32 0.85 44 MPART_ALT_DIFF 11449 4.20 7.17 3.12 45 BAYES_60 11350 6.66 7.11 6.49 46 XM_B_Phish_Phrases 10955 6.71 6.86 6.65 47 XM_DIRTYINTL 10778 3.69 6.75 2.57 48 TooManyTo_001 10507 7.92 6.58 8.40 49 DKIM_ADSP_NXDOMAIN 10475 2.13 6.56 0.52 50 RELAYCOUNTRY_IN 9871 1.75 6.19 0.14 51 RCVD_IN_MSPIKE_H2 9859 7.66 6.18 8.20 52 DKIM_INVALID 9664 4.88 6.06 4.45 53 RCVD_IN_MSPIKE_BL 9496 3.30 5.95 2.34 54 NUMERIC_HTTP_ADDR 8925 1.73 5.59 0.34 55 T_REMOTE_IMAGE 8797 4.64 5.51 4.32 56 MIME_QP_LONG_LINE 8677 5.62 5.44 5.69 57 NORMAL_HTTP_TO_IP 8400 1.44 5.26 0.05 58 MIME_HEADER_CTYPE_ONLY 8211 1.48 5.15 0.15 59 RCVD_IN_PSBL 7971 1.37 4.99 0.06 60 HTML_MIME_NO_HTML_TAG 7489 3.17 4.69 2.62 61 BAYES_95 7451 3.27 4.67 2.76 62 RELAYCOUNTRY_FR 7231 1.38 4.53 0.24 63 RCVD_IN_MSPIKE_L5 7068 2.03 4.43 1.15 64 XMStrtUSub 7059 4.28 4.42 4.23 65 SpammyFromTLD_02 6998 1.45 4.39 0.39 66 FROM_EXCESS_BASE64 6669 3.81 4.18 3.67 67 XM_B_SpammyTLD 6394 3.78 4.01 3.69 68 HTML_IMAGE_RATIO_06 6227 3.18 3.90 2.92 69 RCVD_IN_RP_SAFE 5837 8.47 3.66 10.21 70 MIME_HTML_ONLY_MULTI 5817 2.20 3.65 1.67 71 RELAYCOUNTRY_CA 5775 2.00 3.62 1.41 72 XM_SPF_SoftFail 5756 2.26 3.61 1.77 73 XM_SendGrid 5710 5.63 3.58 6.38 74 XMNumbers 5584 3.01 3.50 2.83 75 URI_HEX 5504 2.40 3.45 2.02 76 XMSexyCombo_01 5440 1.99 3.41 1.47 77 MIME_HTML_MOSTLY 5364 2.41 3.36 2.06 78 RCVD_IN_BL_SPAMCOP_NET 5328 1.71 3.34 1.12 79 XMSubMetaI_00 5038 1.26 3.16 0.57 80 XMDiploma_00 4957 2.13 3.11 1.78 81 TM2_M_URI_OPT_OUT 4900 1.94 3.07 1.53 82 SUBJ_DOLLARS 4865 1.15 3.05 0.46 83 XM_UB99 4780 0.81 3.00 0.02 84 BODY_URI_ONLY 4613 0.84 2.89 0.10 85 XMBody_17 4498 1.12 2.82 0.51 86 US_DOLLARS_3 4387 2.47 2.75 2.37 87 XM_UB60 4303 0.77 2.70 0.08 88 FROM_SUSPICIOUS_NTLD 4295 0.74 2.69 0.04 89 FROM_SUSPICIOUS_NTLD_FP 4270 0.74 2.68 0.03 90 RCVD_IN_IADB_LISTED 4264 4.86 2.67 5.66 91 BOTNET_NORDNS 4228 0.72 2.65 0.02 92 XM_CamelCaseFrm001 4133 2.06 2.59 1.87 93 NO_DNS_FOR_FROM 4118 1.47 2.58 1.07 94 XMBdyGiftCard01 4101 1.45 2.57 1.04 95 SUBJ_ALL_CAPS 4069 2.39 2.55 2.34 96 HTML_IMAGE_RATIO_08 4061 2.76 2.54 2.83 97 KHOP_HELO_FCRDNS 3988 2.15 2.50 2.02 98 T_TooManySym_01 3978 4.70 2.49 5.51 99 RCVD_IN_RP_CERTIFIED 3961 7.36 2.48 9.13 100 XM_URI_RBL 3884 0.89 2.43 0.34 101 HDRS_LCASE_IMGONLY 3862 0.69 2.42 0.06 102 ALL_TRUSTED 3830 12.87 2.40 16.67 103 XM_OfRef6 3706 1.97 2.32 1.84 104 HTML_IMAGE_ONLY_20 3705 0.83 2.32 0.29 105 RCVD_IN_IADB_SPF 3689 4.16 2.31 4.83 106 TR_XM_PHPForged 3687 1.21 2.31 0.82 107 TR_XM_PHPDW 3674 1.24 2.30 0.85 108 TR_XM_FormFill2 3633 1.11 2.28 0.69 109 XM_H_PHPOS 3612 1.11 2.26 0.69 110 RCVD_IN_IADB_DK 3554 3.54 2.23 4.02 111 RCVD_IN_IADB_SENDERID 3552 3.63 2.23 4.14 112 XM_ProductURIs 3539 1.96 2.22 1.86 113 XM_UB80 3469 0.60 2.17 0.02 114 T_XMDrugObfuBody_08 3444 1.60 2.16 1.40 115 XMBody_78 3434 0.90 2.15 0.44 116 MultiRelay_Combo 3383 0.71 2.12 0.20 117 MultiRelay_CC 3383 0.71 2.12 0.20 118 XMGenDplmaNmb 3368 1.37 2.11 1.10 119 ALIBABA_IMG_NOT_RCVD_ALI 3301 0.55 2.07 0.00 120 XM_DrugUnitList 3299 0.55 2.07 0.00 121 RCVD_IN_MSPIKE_WL 3282 5.35 2.06 6.54 122 XM_UB999 3199 0.54 2.00 0.01 123 XMMoneyMeta_00 3142 1.01 1.97 0.66 124 XMHTMLBadTable_001 3040 0.98 1.90 0.64 125 RCVD_IN_MSPIKE_H3 3035 4.90 1.90 5.99 126 DATE_IN_PAST_03_06 2997 0.57 1.88 0.10 127 RCVD_IN_RP_RNBL 2961 0.53 1.86 0.04 128 HOSTED_IMG_MULTI 2869 0.48 1.80 0.00 129 HOSTED_IMG_DIRECT_MX 2868 0.48 1.80 0.00 130 SpammyFromTLD_01 2801 1.04 1.76 0.78 131 THIS_AD 2801 0.54 1.76 0.10 132 MISSING_HEADERS 2789 0.79 1.75 0.44 133 URI_TRY_3LD 2773 1.69 1.74 1.68 134 BAYES_40 2733 3.54 1.71 4.21 135 URIBL_DBL_ABUSE_REDIR 2643 0.46 1.66 0.02 136 IMPOTENCE 2634 0.62 1.65 0.25 137 TM2_M_VERY_LONG_WORD 2601 1.21 1.63 1.05 138 T_XMHurry_00 2592 0.88 1.62 0.61 139 T_XMDrugObfuBody_00 2580 1.04 1.62 0.82 140 DRUGS_ERECTILE 2547 0.47 1.60 0.06 141 HK_SCAM 2533 0.45 1.59 0.04 142 PDS_TO_EQ_FROM_NAME 2529 0.45 1.58 0.03 143 XMSubMetaD_00 2526 0.47 1.58 0.07 144 RELAYCOUNTRY_BR 2514 0.43 1.58 0.02 145 XMPhish11 2407 1.32 1.51 1.25 146 MAILING_LIST_MULTI 2357 1.91 1.48 2.07 147 HTML_IMAGE_ONLY_24 2347 0.63 1.47 0.32 148 XMSexyCombo_04 2308 0.86 1.45 0.64 149 XM_H_Long_From02 2288 1.09 1.43 0.97 150 TR_XM_RelayPhish 2276 0.89 1.43 0.70 151 XMStockSpam_06 2265 1.35 1.42 1.32 152 TR_LOTS_OF_MONEY1 2247 0.39 1.41 0.02 153 DATE_IN_PAST_06_12 2221 0.41 1.39 0.05 154 TR_XM_DK_SendGrid 2211 2.68 1.39 3.16 155 MONEY_FRAUD_5 2203 0.37 1.38 0.00 156 RELAYCOUNTRY_DE 2164 0.61 1.36 0.34 157 XMBrknScrpt_02 2156 0.91 1.35 0.75 158 LOW_PRICE 2141 0.56 1.34 0.28 159 HTML_IMAGE_ONLY_16 2115 0.55 1.33 0.27 160 DKIM_ADSP_CUSTOM_MED 2092 1.16 1.31 1.10 161 SERGIO_SUBJECT_VIAGRA01 2065 0.34 1.29 0.00 162 XM_DK_Undo_01 2042 1.63 1.28 1.75 163 TR_Caps_n_Bayes_99 2038 0.64 1.28 0.41 164 DIET_1 1969 0.53 1.23 0.27 165 HTML_SHORT_LINK_IMG_2 1912 0.37 1.20 0.07 166 TR_Symld_Words 1885 1.68 1.18 1.86 167 FORGED_GMAIL_RCVD 1867 0.68 1.17 0.50 168 XM_UB95 1857 0.32 1.16 0.01 169 RCVD_IN_IADB_VOUCHED 1835 3.28 1.15 4.05 170 XM_B_REG_HTML 1815 0.50 1.14 0.26 171 BAYES_20 1815 2.61 1.14 3.14 172 HK_RANDOM_FROM 1766 0.40 1.11 0.15 173 EBAY_IMG_NOT_RCVD_EBAY 1679 0.28 1.05 0.00 174 TooManyTo_002 1676 2.11 1.05 2.49 175 XM_H_PHPMailer 1654 0.76 1.04 0.66 176 T_Symld_Words_02 1650 0.68 1.03 0.54 177 RDNS_DYNAMIC 1602 0.60 1.00 0.45 178 XMSubMetaSxObfu_03 1600 0.96 1.00 0.95 179 NML_ADSP_CUSTOM_MED 1599 0.90 1.00 0.87 180 TM2_M_A_HREF_HREF 1586 0.76 0.99 0.67 181 TR_LOTS_OF_MONEY3 1578 0.50 0.99 0.32 182 RELAYCOUNTRY_GB 1569 1.02 0.98 1.04 183 XMHTML_After_End 1565 0.52 0.98 0.36 184 HTTPS_HTTP_MISMATCH 1519 0.69 0.95 0.60 185 XMSlimDrugH 1498 0.56 0.94 0.42 186 UNPARSEABLE_RELAY 1496 2.22 0.94 2.68 187 T_MONEY_PERCENT 1495 0.66 0.94 0.56 188 TR_LOTS_OF_MONEY2 1495 0.66 0.94 0.56 189 URIBL_BLACK 1476 0.28 0.92 0.05 190 URIBL_CSS 1453 0.48 0.91 0.32 191 URIBL_CSS_A 1453 0.48 0.91 0.32 192 XM_Combo_Sbj 1443 0.48 0.90 0.33 193 TooManyTo_003 1408 1.50 0.88 1.72 194 LongTLD 1398 0.35 0.88 0.16 195 XMPhish30 1377 0.59 0.86 0.49 196 XM_H_PHPOS_M 1329 0.35 0.83 0.18 197 TR_Mismatch_TLD_02 1318 0.27 0.83 0.07 198 RCVD_IN_MSPIKE_L4 1299 0.62 0.81 0.55 199 XM_OfRef7 1288 0.35 0.81 0.18 200 BAYES_00 1286 8.91 0.81 11.85 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 378142 88.40 95.39 85.86 2 DKIM_SIGNED 331283 75.23 75.26 75.22 3 XM_DK_Pass 324600 73.18 71.73 73.70 4 DKIM_VALID 311692 70.36 69.20 70.77 5 XM_B_Unicode 298628 68.47 70.32 67.81 6 DCC_CHECK_NEGATIVE 252912 47.63 20.61 57.43 7 BAYES_50 233399 48.30 35.33 53.00 8 DKIM_VALID_AU 224382 51.21 51.92 50.95 9 XMListUnsubscribeExists 218407 55.31 71.08 49.59 10 XM_B_Unicode2 182877 43.19 47.79 41.52 11 DCC_CHECK 178894 50.40 77.40 40.62 12 T_TM2_M_HEADER_IN_MSG 131858 26.93 18.62 29.94 13 HTML_FONT_LOW_CONTRAST 122893 29.54 34.04 27.90 14 DKIM_VALID_EF 120743 25.39 19.78 27.42 15 XMSubLong 104716 23.86 24.09 23.78 16 LOC_TINY_FONT_1 102505 25.10 30.15 23.27 17 FVGT_m_MULTI_ODD 93432 22.32 25.36 21.21 18 MIME_HTML_ONLY 89628 24.78 37.02 20.35 19 MultiRelay 86173 18.27 14.71 19.57 20 T_KAM_HTML_FONT_INVALID 73444 17.23 18.74 16.68 21 ALL_TRUSTED 73403 12.87 2.40 16.67 22 XM_DK_Undo_02 61660 22.06 44.29 14.00 23 XM_Body_Dirty_Words 60664 16.39 23.62 13.77 24 XM_Multi_Part_URI 53915 13.17 15.71 12.24 25 BAYES_99 52756 19.45 40.09 11.98 26 BAYES_00 52172 8.91 0.81 11.85 27 BAYES_999 46568 16.61 33.27 10.57 28 LOTS_OF_MONEY 46536 11.36 13.57 10.57 29 RCVD_IN_RP_SAFE 44977 8.47 3.66 10.21 30 TR_XM_DK_Bayes 42057 7.11 0.37 9.55 31 XM_DKIMWhitelistDomains 41107 6.88 0.09 9.33 32 TR_XM_DK_Bayes1 40313 6.81 0.33 9.15 33 RCVD_IN_RP_CERTIFIED 40198 7.36 2.48 9.13 34 XM_Evil_Numbers_Gen 38412 9.55 11.85 8.72 35 TooManyTo_001 36987 7.92 6.58 8.40 36 RCVD_IN_MSPIKE_H2 36116 7.66 6.18 8.20 37 FSL_BULK_SIG 35602 8.60 10.03 8.08 38 LotsOfNums_01 35465 8.38 9.28 8.05 39 HTML_IMAGE_RATIO_02 33334 9.88 16.26 7.57 40 TR_XM_DK_Bayes2 33307 5.62 0.24 7.56 41 T_XMDrugObfuBody_14 33306 7.56 7.54 7.56 42 XM_B_Phish_Phrases 29307 6.71 6.86 6.65 43 RCVD_IN_MSPIKE_WL 28817 5.35 2.06 6.54 44 BAYES_60 28589 6.66 7.11 6.49 45 XM_SendGrid 28098 5.63 3.58 6.38 46 RCVD_IN_MSPIKE_H3 26391 4.90 1.90 5.99 47 XM_H_Long_From01 26389 6.39 7.48 5.99 48 HTML_IMAGE_RATIO_04 26352 6.73 8.79 5.98 49 TR_DCC_Bayes_99 25441 12.74 31.94 5.78 50 MIME_QP_LONG_LINE 25065 5.62 5.44 5.69 51 RCVD_IN_IADB_LISTED 24914 4.86 2.67 5.66 52 TO_MALFORMED 24515 4.12 0.14 5.57 53 T_TooManySym_01 24247 4.70 2.49 5.51 54 XM_PDF 22055 3.82 0.53 5.01 55 RELAYCOUNTRY_META 22017 10.03 23.93 5.00 56 XMSubMetaSx_00 21746 5.88 8.47 4.94 57 RCVD_IN_IADB_SPF 21292 4.16 2.31 4.83 58 BOTNET_IPINHOSTNAME 20087 7.36 15.09 4.56 59 DKIM_INVALID 19591 4.88 6.06 4.45 60 T_REMOTE_IMAGE 19037 4.64 5.51 4.32 61 XMStrtUSub 18643 4.28 4.42 4.23 62 BAYES_40 18525 3.54 1.71 4.21 63 BAYES_80 18397 5.28 8.32 4.18 64 XM_UncommonTLD01 18381 5.38 8.70 4.17 65 RCVD_IN_IADB_SENDERID 18246 3.63 2.23 4.14 66 IN_ZIMBRA_NJ_WHITELIST 18099 3.02 0.02 4.11 67 RCVD_IN_IADB_VOUCHED 17855 3.28 1.15 4.05 68 XMSexyCombo_05 17823 6.24 12.30 4.05 69 RCVD_IN_IADB_DK 17701 3.54 2.23 4.02 70 XM_B_SpammyTLD 16269 3.78 4.01 3.69 71 FROM_EXCESS_BASE64 16184 3.81 4.18 3.67 72 TR_XM_DK_SendGrid 13897 2.68 1.39 3.16 73 BAYES_20 13819 2.61 1.14 3.14 74 MPART_ALT_DIFF 13728 4.20 7.17 3.12 75 HTML_IMAGE_RATIO_06 12847 3.18 3.90 2.92 76 HTML_IMAGE_RATIO_08 12471 2.76 2.54 2.83 77 XMNumbers 12447 3.01 3.50 2.83 78 BAYES_95 12175 3.27 4.67 2.76 79 UNPARSEABLE_RELAY 11800 2.22 0.94 2.68 80 RCVD_IN_IADB_OPTIN 11565 2.08 0.57 2.63 81 HTML_MIME_NO_HTML_TAG 11534 3.17 4.69 2.62 82 XM_DIRTYINTL 11338 3.69 6.75 2.57 83 TooManyTo_002 10964 2.11 1.05 2.49 84 INVALID_MSGID 10862 1.83 0.07 2.47 85 US_DOLLARS_3 10456 2.47 2.75 2.37 86 RCVD_IN_MSPIKE_BL 10312 3.30 5.95 2.34 87 SUBJ_ALL_CAPS 10289 2.39 2.55 2.34 88 ANY_BOUNCE_MESSAGE 10112 1.87 0.68 2.30 89 BOUNCE_MESSAGE 10108 1.87 0.68 2.30 90 TVD_RCVD_IP 9940 1.86 0.78 2.26 91 BAYES_05 9204 1.71 0.64 2.09 92 MAILING_LIST_MULTI 9107 1.91 1.48 2.07 93 MIME_HTML_MOSTLY 9086 2.41 3.36 2.06 94 URI_HEX 8917 2.40 3.45 2.02 95 KHOP_HELO_FCRDNS 8916 2.15 2.50 2.02 96 BOTNET 8577 6.54 19.23 1.95 97 XM_CamelCaseFrm001 8247 2.06 2.59 1.87 98 XM_ProductURIs 8193 1.96 2.22 1.86 99 TR_Symld_Words 8189 1.68 1.18 1.86 100 XM_OfRef6 8105 1.97 2.32 1.84 101 XMDiploma_00 7832 2.13 3.11 1.78 102 XM_SPF_SoftFail 7785 2.26 3.61 1.77 103 XM_DK_Undo_01 7709 1.63 1.28 1.75 104 IN_HORDE_ADDRESS_BOOK 7672 1.29 0.06 1.74 105 TooManyTo_003 7596 1.50 0.88 1.72 106 T_TooManySym_02 7459 1.45 0.77 1.69 107 HELO_NODOT 7437 1.37 0.50 1.69 108 HELO_NO_DOMAIN 7436 1.37 0.50 1.69 109 URI_TRY_3LD 7381 1.69 1.74 1.68 110 MIME_HTML_ONLY_MULTI 7374 2.20 3.65 1.67 111 TR_MetaPhish_Combo_01 7226 1.39 0.70 1.64 112 TM2_M_URI_OPT_OUT 6755 1.94 3.07 1.53 113 XMSexyCombo_01 6496 1.99 3.41 1.47 114 RELAYCOUNTRY_CA 6208 2.00 3.62 1.41 115 USER_IN_DEF_DKIM_WL 6203 1.04 0.02 1.41 116 T_XMDrugObfuBody_08 6148 1.60 2.16 1.40 117 UNTRUSTED_Relay 5882 5.58 17.31 1.34 118 XMStockSpam_06 5831 1.35 1.42 1.32 119 XMCapTrack 5829 1.05 0.30 1.32 120 XMPhish11 5527 1.32 1.51 1.25 121 TooManyTo_004 5436 1.09 0.68 1.23 122 XM_GoogleGroups 5391 1.01 0.41 1.22 123 RCVD_IN_MSPIKE_L5 5083 2.03 4.43 1.15 124 RCVD_IN_BL_SPAMCOP_NET 4951 1.71 3.34 1.12 125 XMGenDplmaNmb 4847 1.37 2.11 1.10 126 DKIM_ADSP_CUSTOM_MED 4839 1.16 1.31 1.10 127 NO_DNS_FOR_FROM 4699 1.47 2.58 1.07 128 T_FILL_THIS_FORM_SHORT 4643 0.97 0.73 1.05 129 TM2_M_VERY_LONG_WORD 4630 1.21 1.63 1.05 130 XMBdyGiftCard01 4577 1.45 2.57 1.04 131 RELAYCOUNTRY_GB 4577 1.02 0.98 1.04 132 TooManyTo_005 4370 0.88 0.58 0.99 133 XM_H_Long_From02 4264 1.09 1.43 0.97 134 XMSubMetaSxObfu_03 4183 0.96 1.00 0.95 135 XMGappySubj_01 3882 0.72 0.29 0.88 136 NML_ADSP_CUSTOM_MED 3822 0.90 1.00 0.87 137 XM_UB50 3759 2.57 7.32 0.85 138 TR_XM_PHPDW 3741 1.24 2.30 0.85 139 T_XMDrugObfuBody_00 3632 1.04 1.62 0.82 140 XM_D_tchamptons_WL 3597 0.60 0.00 0.82 141 TR_XM_PHPForged 3590 1.21 2.31 0.82 142 SpammyFromTLD_01 3431 1.04 1.76 0.78 143 XMBrknScrpt_02 3324 0.91 1.35 0.75 144 XM_RXBody 3149 0.69 0.62 0.72 145 FILL_THIS_FORM 3126 0.60 0.31 0.71 146 TR_XM_RelayPhish 3086 0.89 1.43 0.70 147 TR_XM_FormFill2 3050 1.11 2.28 0.69 148 XM_H_PHPOS 3036 1.11 2.26 0.69 149 HTML_FONT_FACE_BAD 3020 0.70 0.73 0.69 150 TM2_M_A_HREF_HREF 2958 0.76 0.99 0.67 151 XMMoneyMeta_00 2915 1.01 1.97 0.66 152 XM_H_PHPMailer 2911 0.76 1.04 0.66 153 XMNoVowels 2894 0.67 0.70 0.66 154 T_OBFU_PDF_ATTACH 2867 0.53 0.18 0.65 155 XMSexyCombo_04 2827 0.86 1.45 0.64 156 XMHTMLBadTable_001 2820 0.98 1.90 0.64 157 RCVD_IN_MSPIKE_L3 2803 0.66 0.71 0.64 158 T_FILL_THIS_FORM_LONG 2751 0.51 0.20 0.62 159 T_FILL_THIS_FORM_LOAN 2683 0.46 0.04 0.61 160 T_XMHurry_00 2680 0.88 1.62 0.61 161 HTTPS_HTTP_MISMATCH 2642 0.69 0.95 0.60 162 BODY_QUOTE_MALF_MSGID 2627 0.62 0.67 0.60 163 XMBody_95 2594 0.47 0.13 0.59 164 XMPhish14 2542 0.59 0.62 0.58 165 XM_B_COPY_HTML 2499 0.60 0.67 0.57 166 XMSubMetaI_00 2499 1.26 3.16 0.57 167 TR_LOTS_OF_MONEY2 2473 0.66 0.94 0.56 168 T_MONEY_PERCENT 2473 0.66 0.94 0.56 169 XM_ShortIntro_01 2447 0.49 0.29 0.56 170 RCVD_IN_MSPIKE_L4 2426 0.62 0.81 0.55 171 T_Symld_Words_02 2400 0.68 1.03 0.54 172 RELAYCOUNTRY_AU 2384 0.57 0.63 0.54 173 USER_IN_WHITELIST 2332 0.39 0.00 0.53 174 T_TooManySym_03 2288 0.43 0.19 0.52 175 HTML_TAG_BALANCE_BODY 2285 0.59 0.79 0.52 176 DKIM_ADSP_NXDOMAIN 2276 2.13 6.56 0.52 177 XMLngstWrd_00 2260 0.57 0.73 0.51 178 XMBody_17 2236 1.12 2.82 0.51 179 FROM_GOV_SPOOF 2233 0.46 0.32 0.51 180 XMGappySubj_02 2214 0.38 0.05 0.50 181 FORGED_GMAIL_RCVD 2195 0.68 1.17 0.50 182 XMBSHREFv2 2193 0.45 0.31 0.50 183 T_MANY_PILL_PRICE 2185 0.38 0.05 0.50 184 XMPhish30 2156 0.59 0.86 0.49 185 XMLngstWrd_01 2123 0.54 0.70 0.48 186 TM2_M_BODY_EMPTY 2042 0.36 0.08 0.46 187 SUBJ_DOLLARS 2017 1.15 3.05 0.46 188 RDNS_DYNAMIC 2003 0.60 1.00 0.45 189 SHORT_HELO_AND_INLINE_IMAGE 1997 0.35 0.05 0.45 190 XMBody_78 1951 0.90 2.15 0.44 191 MISSING_HEADERS 1949 0.79 1.75 0.44 192 PLING_QUERY 1920 0.45 0.48 0.44 193 XMSlimDrugH 1838 0.56 0.94 0.42 194 TR_Caps_n_Bayes_99 1803 0.64 1.28 0.41 195 AC_DIV_BONANZA 1795 0.33 0.13 0.41 196 XMDateMe_00 1760 0.38 0.31 0.40 197 HTML_IMAGE_ONLY_32 1735 0.46 0.63 0.39 198 FROM_GOV_DKIM_AU 1722 0.32 0.12 0.39 199 HTML_IMAGE_ONLY_28 1720 0.41 0.47 0.39 200 URI_NOVOWEL 1720 0.42 0.50 0.39 ----------------------------------------------------------------------