Email: 594726 Autolearn: 0 AvgScore: 2.67 AvgScanTime: 1.99 sec Spam: 143021 Autolearn: 0 AvgScore: 12.05 AvgScanTime: 2.60 sec Ham: 451705 Autolearn: 0 AvgScore: -0.29 AvgScanTime: 1.80 sec Time Spent Running SA: 328.57 hours Time Spent Processing Spam: 103.29 hours Time Spent Processing Ham: 225.28 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 134711 88.40 94.19 86.57 2 DKIM_SIGNED 117930 75.39 82.46 73.15 3 DCC_CHECK 114644 49.07 80.16 39.22 4 XM_DK_Pass 113292 73.62 79.21 71.85 5 DKIM_VALID 110797 71.15 77.47 69.15 6 XM_B_Unicode 110630 69.87 77.35 67.50 7 XMListUnsubscribeExists 108050 53.74 75.55 46.83 8 DKIM_VALID_AU 85870 53.54 60.04 51.48 9 XM_DK_Undo_02 69761 21.81 48.78 13.27 10 BAYES_99 60994 18.74 42.65 11.17 11 HTML_FONT_LOW_CONTRAST 56498 30.02 39.50 27.01 12 BAYES_999 50700 15.99 35.45 9.83 13 LOC_TINY_FONT_1 50344 25.09 35.20 21.88 14 TR_DCC_Bayes_99 49496 12.30 34.61 5.24 15 BAYES_50 47296 48.38 33.07 53.23 16 MIME_HTML_ONLY 44615 23.44 31.19 20.98 17 FVGT_m_MULTI_ODD 39964 22.66 27.94 20.99 18 XMSubLong 36131 23.23 25.26 22.59 19 XM_Body_Dirty_Words 31996 14.85 22.37 12.47 20 DKIM_VALID_EF 30986 26.57 21.67 28.12 21 T_KAM_HTML_FONT_INVALID 30648 17.62 21.43 16.41 22 T_TM2_M_HEADER_IN_MSG 30543 30.27 21.36 33.10 23 XM_Multi_Part_URI 26395 13.50 18.46 11.93 24 DCC_CHECK_NEGATIVE 25999 48.83 18.18 58.53 25 RELAYCOUNTRY_META 25729 8.37 17.99 5.33 26 BOTNET 23709 5.61 16.58 2.14 27 MultiRelay 23667 19.34 16.55 20.23 28 BOTNET_IPINHOSTNAME 21178 7.04 14.81 4.58 29 XM_Evil_Numbers_Gen 20242 9.74 14.15 8.35 30 HTML_IMAGE_RATIO_02 17719 8.62 12.39 7.43 31 LOTS_OF_MONEY 17232 9.13 12.05 8.20 32 UNTRUSTED_Relay 16493 3.86 11.53 1.44 33 FSL_BULK_SIG 15142 8.62 10.59 7.99 34 XMSexyCombo_05 14696 5.52 10.28 4.01 35 LotsOfNums_01 13077 7.70 9.14 7.24 36 T_XMDrugObfuBody_14 12439 9.30 8.70 9.49 37 XM_H_Long_From01 11805 6.44 8.25 5.87 38 HTML_IMAGE_RATIO_04 11763 5.88 8.22 5.14 39 BAYES_80 11263 4.64 7.88 3.61 40 XM_B_Phish_Phrases 11246 6.11 7.86 5.55 41 XMSubMetaSx_00 11001 4.83 7.69 3.92 42 XM_UncommonTLD01 10870 5.01 7.60 4.19 43 RCVD_IN_MSPIKE_H2 10643 9.66 7.44 10.36 44 TooManyTo_001 10064 8.62 7.04 9.13 45 BAYES_60 10017 6.17 7.00 5.90 46 XM_DIRTYINTL 9407 3.94 6.58 3.11 47 MPART_ALT_DIFF 9243 4.58 6.46 3.99 48 MIME_QP_LONG_LINE 7643 5.29 5.34 5.28 49 XM_UB50 7496 1.92 5.24 0.87 50 DKIM_INVALID 7133 4.23 4.99 3.99 51 FROM_EXCESS_BASE64 7078 3.89 4.95 3.55 52 BAYES_95 7017 3.06 4.91 2.47 53 HTML_IMAGE_RATIO_06 6783 3.53 4.74 3.15 54 RCVD_IN_BL_SPAMCOP_NET 6569 1.83 4.59 0.96 55 XMNumbers 6561 3.23 4.59 2.80 56 RCVD_IN_RP_SAFE 6360 8.39 4.45 9.64 57 RCVD_IN_PSBL 6319 1.11 4.42 0.06 58 RCVD_IN_MSPIKE_BL 5723 2.35 4.00 1.83 59 RELAYCOUNTRY_CA 5630 2.07 3.94 1.48 60 XMSubMetaI_00 5430 1.53 3.80 0.81 61 XM_SPF_SoftFail 5427 2.35 3.79 1.89 62 URI_HEX 5404 2.16 3.78 1.64 63 XMStrtUSub 5267 4.08 3.68 4.20 64 XM_SendGrid 5175 5.76 3.62 6.44 65 RCVD_IN_RP_CERTIFIED 5072 7.37 3.55 8.58 66 MIME_HTML_ONLY_MULTI 5009 2.74 3.50 2.49 67 MIME_HTML_MOSTLY 4961 2.64 3.47 2.38 68 TM2_M_URI_OPT_OUT 4929 2.16 3.45 1.75 69 XMDiploma_00 4896 2.18 3.42 1.78 70 RELAYCOUNTRY_FR 4837 1.00 3.38 0.25 71 XM_CamelCaseFrm001 4646 2.32 3.25 2.03 72 T_REMOTE_IMAGE 4620 3.87 3.23 4.07 73 HTML_IMAGE_RATIO_08 4588 2.61 3.21 2.43 74 SpammyFromTLD_02 4505 0.94 3.15 0.24 75 RCVD_IN_MSPIKE_WL 4500 5.11 3.15 5.73 76 XM_ProductURIs 4343 1.34 3.04 0.81 77 RCVD_IN_IADB_LISTED 4339 4.43 3.03 4.87 78 HTML_MIME_NO_HTML_TAG 4295 3.15 3.00 3.19 79 RCVD_IN_MSPIKE_H3 4292 4.69 3.00 5.22 80 XMBdyGiftCard01 4208 1.16 2.94 0.59 81 XM_URI_RBL 4146 0.94 2.90 0.32 82 XM_B_SpammyTLD 4098 3.16 2.87 3.25 83 T_TooManySym_01 4085 4.70 2.86 5.28 84 XMSexyCombo_01 4027 1.02 2.82 0.45 85 KHOP_HELO_FCRDNS 4020 2.25 2.81 2.08 86 RCVD_IN_MSPIKE_L5 3941 1.28 2.76 0.81 87 SUBJ_ALL_CAPS 3930 1.84 2.75 1.55 88 BOTNET_NORDNS 3916 0.68 2.74 0.03 89 RCVD_IN_IADB_SPF 3828 3.87 2.68 4.24 90 DKIM_ADSP_NXDOMAIN 3724 1.04 2.60 0.54 91 NO_DNS_FOR_FROM 3706 1.41 2.59 1.04 92 RCVD_IN_IADB_DK 3631 3.35 2.54 3.61 93 RCVD_IN_IADB_SENDERID 3615 3.40 2.53 3.68 94 XM_OfRef6 3517 1.92 2.46 1.74 95 MultiRelay_CC 3465 0.77 2.42 0.25 96 MultiRelay_Combo 3465 0.77 2.42 0.25 97 TM2_M_VERY_LONG_WORD 3391 1.49 2.37 1.21 98 TR_XM_PHPDW 3329 1.20 2.33 0.84 99 TR_XM_PHPForged 3312 1.17 2.32 0.81 100 TR_XM_FormFill2 3275 1.14 2.29 0.78 101 XM_H_PHPOS 3255 1.14 2.28 0.78 102 XM_UB99 3218 0.55 2.25 0.01 103 RCVD_IN_RP_RNBL 3157 0.56 2.21 0.04 104 T_XMDrugObfuBody_08 3118 1.51 2.18 1.30 105 ALL_TRUSTED 2780 13.21 1.94 16.77 106 DIET_1 2701 0.80 1.89 0.45 107 THIS_AD 2697 0.57 1.89 0.16 108 XMGenDplmaNmb 2685 1.31 1.88 1.14 109 XMBody_78 2672 0.81 1.87 0.47 110 URI_TRY_3LD 2660 1.48 1.86 1.36 111 XM_UB999 2584 0.44 1.81 0.01 112 NUMERIC_HTTP_ADDR 2552 0.65 1.78 0.29 113 TR_XM_DK_SendGrid 2509 2.99 1.75 3.38 114 US_DOLLARS_3 2494 0.89 1.74 0.61 115 TR_Mismatch_TLD_01 2449 0.52 1.71 0.15 116 FROM_SUSPICIOUS_NTLD 2376 0.42 1.66 0.03 117 XM_H_Long_From02 2373 1.47 1.66 1.41 118 FROM_SUSPICIOUS_NTLD_FP 2312 0.41 1.62 0.03 119 BAYES_40 2301 3.73 1.61 4.40 120 RCVD_IN_IADB_VOUCHED 2263 2.91 1.58 3.33 121 XMBody_17 2230 0.87 1.56 0.66 122 TR_Symld_Words 2223 1.64 1.55 1.66 123 T_XMHurry_00 2216 0.94 1.55 0.75 124 SpammyFromTLD_01 2147 0.96 1.50 0.78 125 MIME_HEADER_CTYPE_ONLY 2132 0.46 1.49 0.14 126 MAILING_LIST_MULTI 2131 2.03 1.49 2.20 127 TR_XM_RelayPhish 2097 0.97 1.47 0.82 128 XMPhish11 1991 1.17 1.39 1.10 129 XM_UB60 1960 0.40 1.37 0.10 130 XM_B_REG_HTML 1957 0.56 1.37 0.30 131 XM_H_PHPMailer 1927 0.82 1.35 0.66 132 NORMAL_HTTP_TO_IP 1920 0.36 1.34 0.04 133 XMStockSpam_06 1888 1.34 1.32 1.34 134 BAYES_20 1845 2.92 1.29 3.44 135 T_XMDrugObfuBody_00 1844 0.89 1.29 0.77 136 DKIM_ADSP_CUSTOM_MED 1837 1.13 1.28 1.08 137 XMSubMetaSxObfu_03 1831 0.64 1.28 0.43 138 XMHTML_After_End 1830 0.60 1.28 0.39 139 HTML_IMAGE_ONLY_24 1809 0.58 1.26 0.37 140 URIBL_BLACK 1764 0.34 1.23 0.05 141 XMHTMLBadTable_001 1744 0.67 1.22 0.49 142 RELAYCOUNTRY_AT 1728 0.43 1.21 0.19 143 XM_DK_Undo_01 1722 1.65 1.20 1.79 144 HDRS_LCASE_IMGONLY 1710 0.33 1.20 0.05 145 TR_Caps_n_Bayes_99 1689 0.39 1.18 0.14 146 XM_H_PHPOS_M 1644 0.43 1.15 0.20 147 XMBrknScrpt_02 1643 0.81 1.15 0.70 148 XM_UB80 1632 0.29 1.14 0.02 149 FORGED_GMAIL_RCVD 1614 0.67 1.13 0.53 150 XMPhish30 1610 0.60 1.13 0.43 151 XMSexyCombo_04 1588 0.31 1.11 0.06 152 T_Symld_Words_02 1580 0.74 1.10 0.63 153 RELAYCOUNTRY_IN 1539 0.36 1.08 0.13 154 TR_LOTS_OF_MONEY3 1515 0.61 1.06 0.47 155 XM_HighProb1 1491 0.26 1.04 0.01 156 TR_LOTS_OF_MONEY2 1486 0.56 1.04 0.40 157 T_MONEY_PERCENT 1486 0.56 1.04 0.40 158 TooManyTo_002 1467 2.29 1.03 2.69 159 BODY_ENHANCEMENT 1430 0.26 1.00 0.03 160 HTML_FONT_FACE_BAD 1384 0.67 0.97 0.57 161 UNPARSEABLE_RELAY 1369 2.14 0.96 2.52 162 NML_ADSP_CUSTOM_MED 1363 0.82 0.95 0.77 163 TR_Mismatch_TLD_02 1358 0.28 0.95 0.06 164 RELAYCOUNTRY_DE 1353 0.55 0.95 0.43 165 XMMoneyMeta_00 1345 0.65 0.94 0.56 166 RELAYCOUNTRY_GB 1332 1.15 0.93 1.22 167 RCVD_IN_MSPIKE_L3 1318 0.63 0.92 0.53 168 HTTPS_HTTP_MISMATCH 1309 0.69 0.92 0.62 169 TM2_M_A_HREF_HREF 1294 0.47 0.90 0.33 170 RDNS_DYNAMIC 1268 0.51 0.89 0.39 171 DATE_IN_PAST_03_06 1241 0.30 0.87 0.12 172 TooManyTo_003 1227 1.61 0.86 1.85 173 XM_B_COPY_HTML 1224 0.63 0.86 0.56 174 TR_MetaPhish_Combo_01 1200 1.44 0.84 1.63 175 LongTLD 1183 0.31 0.83 0.14 176 ANY_BOUNCE_MESSAGE 1178 1.85 0.82 2.17 177 BOUNCE_MESSAGE 1178 1.85 0.82 2.17 178 RCVD_IN_IADB_OPTIN 1172 1.84 0.82 2.16 179 XMSubMetaI_01 1119 0.22 0.78 0.04 180 PDS_TO_EQ_FROM_NAME 1119 0.22 0.78 0.04 181 URI_NOVOWEL 1118 0.64 0.78 0.60 182 NORDNS_LOW_CONTRAST 1115 0.20 0.78 0.01 183 XM_RXBody 1114 0.63 0.78 0.58 184 BAYES_00 1089 10.40 0.76 13.45 185 T_TooManySym_02 1051 1.45 0.73 1.67 186 URIBL_DBL_ABUSE_REDIR 1044 0.19 0.73 0.02 187 TooManyTo_004 1040 1.24 0.73 1.40 188 MPART_ALT_DIFF_COUNT 1013 0.44 0.71 0.35 189 XMPhish14 1010 0.46 0.71 0.38 190 XMLngstWrd_00 998 0.63 0.70 0.61 191 DATE_IN_PAST_06_12 996 0.20 0.70 0.04 192 XMSubMetaD_03 995 0.29 0.70 0.16 193 BAYES_05 984 1.78 0.69 2.12 194 HTML_TAG_BALANCE_BODY 984 0.53 0.69 0.49 195 SUBJ_DOLLARS 981 0.40 0.69 0.31 196 XMLngstWrd_01 977 0.60 0.68 0.58 197 XMSubMetaSSx_00 966 0.29 0.68 0.17 198 XMClaimOffer 959 0.24 0.67 0.10 199 FILL_THIS_FORM 934 0.83 0.65 0.89 200 HELO_NODOT 931 1.78 0.65 2.14 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 391033 88.40 94.19 86.57 2 DKIM_SIGNED 330405 75.39 82.46 73.15 3 XM_DK_Pass 324553 73.62 79.21 71.85 4 DKIM_VALID 312367 71.15 77.47 69.15 5 XM_B_Unicode 304897 69.87 77.35 67.50 6 DCC_CHECK_NEGATIVE 264404 48.83 18.18 58.53 7 BAYES_50 240426 48.38 33.07 53.23 8 DKIM_VALID_AU 232543 53.54 60.04 51.48 9 XMListUnsubscribeExists 211541 53.74 75.55 46.83 10 DCC_CHECK 177168 49.07 80.16 39.22 11 T_TM2_M_HEADER_IN_MSG 149505 30.27 21.36 33.10 12 DKIM_VALID_EF 127008 26.57 21.67 28.12 13 HTML_FONT_LOW_CONTRAST 122022 30.02 39.50 27.01 14 XMSubLong 102025 23.23 25.26 22.59 15 LOC_TINY_FONT_1 98850 25.09 35.20 21.88 16 FVGT_m_MULTI_ODD 94825 22.66 27.94 20.99 17 MIME_HTML_ONLY 94775 23.44 31.19 20.98 18 MultiRelay 91379 19.34 16.55 20.23 19 ALL_TRUSTED 75772 13.21 1.94 16.77 20 T_KAM_HTML_FONT_INVALID 74115 17.62 21.43 16.41 21 BAYES_00 60773 10.40 0.76 13.45 22 XM_DK_Undo_02 59939 21.81 48.78 13.27 23 XM_Body_Dirty_Words 56313 14.85 22.37 12.47 24 XM_Multi_Part_URI 53910 13.50 18.46 11.93 25 BAYES_99 50441 18.74 42.65 11.17 26 RCVD_IN_MSPIKE_H2 46781 9.66 7.44 10.36 27 BAYES_999 44410 15.99 35.45 9.83 28 TR_XM_DK_Bayes 44335 7.54 0.34 9.82 29 RCVD_IN_RP_SAFE 43546 8.39 4.45 9.64 30 T_XMDrugObfuBody_14 42869 9.30 8.70 9.49 31 TR_XM_DK_Bayes1 42799 7.27 0.31 9.47 32 TooManyTo_001 41230 8.62 7.04 9.13 33 RCVD_IN_RP_CERTIFIED 38748 7.37 3.55 8.58 34 XM_Evil_Numbers_Gen 37712 9.74 14.15 8.35 35 XM_DKIMWhitelistDomains 37500 6.31 0.04 8.30 36 LOTS_OF_MONEY 37047 9.13 12.05 8.20 37 TR_XM_DK_Bayes2 36451 6.17 0.15 8.07 38 FSL_BULK_SIG 36112 8.62 10.59 7.99 39 HTML_IMAGE_RATIO_02 33547 8.62 12.39 7.43 40 LotsOfNums_01 32725 7.70 9.14 7.24 41 XM_SendGrid 29088 5.76 3.62 6.44 42 XM_PDF 26742 4.65 0.65 5.92 43 BAYES_60 26668 6.17 7.00 5.90 44 XM_H_Long_From01 26523 6.44 8.25 5.87 45 RCVD_IN_MSPIKE_WL 25893 5.11 3.15 5.73 46 XM_B_Phish_Phrases 25091 6.11 7.86 5.55 47 TO_MALFORMED 24491 4.14 0.10 5.42 48 RELAYCOUNTRY_META 24077 8.37 17.99 5.33 49 T_TooManySym_01 23863 4.70 2.86 5.28 50 MIME_QP_LONG_LINE 23841 5.29 5.34 5.28 51 TR_DCC_Bayes_99 23661 12.30 34.61 5.24 52 RCVD_IN_MSPIKE_H3 23581 4.69 3.00 5.22 53 HTML_IMAGE_RATIO_04 23213 5.88 8.22 5.14 54 RCVD_IN_IADB_LISTED 22013 4.43 3.03 4.87 55 IN_ZIMBRA_NJ_WHITELIST 21739 3.66 0.02 4.81 56 BOTNET_IPINHOSTNAME 20682 7.04 14.81 4.58 57 BAYES_40 19865 3.73 1.61 4.40 58 RCVD_IN_IADB_SPF 19165 3.87 2.68 4.24 59 XMStrtUSub 18994 4.08 3.68 4.20 60 XM_UncommonTLD01 18934 5.01 7.60 4.19 61 T_REMOTE_IMAGE 18371 3.87 3.23 4.07 62 XMSexyCombo_05 18111 5.52 10.28 4.01 63 DKIM_INVALID 18038 4.23 4.99 3.99 64 MPART_ALT_DIFF 18010 4.58 6.46 3.99 65 XMSubMetaSx_00 17713 4.83 7.69 3.92 66 RCVD_IN_IADB_SENDERID 16613 3.40 2.53 3.68 67 BAYES_80 16329 4.64 7.88 3.61 68 RCVD_IN_IADB_DK 16310 3.35 2.54 3.61 69 FROM_EXCESS_BASE64 16045 3.89 4.95 3.55 70 BAYES_20 15536 2.92 1.29 3.44 71 TR_XM_DK_SendGrid 15276 2.99 1.75 3.38 72 RCVD_IN_IADB_VOUCHED 15025 2.91 1.58 3.33 73 XM_B_SpammyTLD 14681 3.16 2.87 3.25 74 HTML_MIME_NO_HTML_TAG 14411 3.15 3.00 3.19 75 HTML_IMAGE_RATIO_06 14215 3.53 4.74 3.15 76 XM_DIRTYINTL 14029 3.94 6.58 3.11 77 XMNumbers 12643 3.23 4.59 2.80 78 TooManyTo_002 12142 2.29 1.03 2.69 79 UNPARSEABLE_RELAY 11366 2.14 0.96 2.52 80 MIME_HTML_ONLY_MULTI 11268 2.74 3.50 2.49 81 BAYES_95 11158 3.06 4.91 2.47 82 HTML_IMAGE_RATIO_08 10960 2.61 3.21 2.43 83 INVALID_MSGID 10888 1.86 0.11 2.41 84 MIME_HTML_MOSTLY 10762 2.64 3.47 2.38 85 MAILING_LIST_MULTI 9916 2.03 1.49 2.20 86 ANY_BOUNCE_MESSAGE 9817 1.85 0.82 2.17 87 BOUNCE_MESSAGE 9815 1.85 0.82 2.17 88 RCVD_IN_IADB_OPTIN 9777 1.84 0.82 2.16 89 TVD_RCVD_IP 9730 1.77 0.55 2.15 90 BOTNET 9680 5.61 16.58 2.14 91 HELO_NODOT 9644 1.78 0.65 2.14 92 HELO_NO_DOMAIN 9642 1.78 0.64 2.13 93 BAYES_05 9575 1.78 0.69 2.12 94 KHOP_HELO_FCRDNS 9373 2.25 2.81 2.08 95 XM_CamelCaseFrm001 9179 2.32 3.25 2.03 96 XM_SPF_SoftFail 8523 2.35 3.79 1.89 97 USER_IN_DEF_DKIM_WL 8366 1.41 0.02 1.85 98 TooManyTo_003 8341 1.61 0.86 1.85 99 RCVD_IN_MSPIKE_BL 8250 2.35 4.00 1.83 100 IN_HORDE_ADDRESS_BOOK 8217 1.39 0.03 1.82 101 XM_DK_Undo_01 8079 1.65 1.20 1.79 102 XMDiploma_00 8056 2.18 3.42 1.78 103 TM2_M_URI_OPT_OUT 7927 2.16 3.45 1.75 104 XM_OfRef6 7874 1.92 2.46 1.74 105 T_TooManySym_02 7545 1.45 0.73 1.67 106 TR_Symld_Words 7516 1.64 1.55 1.66 107 XMCapTrack 7423 1.34 0.36 1.64 108 URI_HEX 7418 2.16 3.78 1.64 109 TR_MetaPhish_Combo_01 7380 1.44 0.84 1.63 110 SUBJ_ALL_CAPS 7016 1.84 2.75 1.55 111 RELAYCOUNTRY_CA 6686 2.07 3.94 1.48 112 UNTRUSTED_Relay 6489 3.86 11.53 1.44 113 XM_H_Long_From02 6362 1.47 1.66 1.41 114 TooManyTo_004 6310 1.24 0.73 1.40 115 URI_TRY_3LD 6136 1.48 1.86 1.36 116 XMStockSpam_06 6060 1.34 1.32 1.34 117 T_XMDrugObfuBody_08 5888 1.51 2.18 1.30 118 XM_GoogleGroups 5560 1.05 0.46 1.23 119 RELAYCOUNTRY_GB 5498 1.15 0.93 1.22 120 TM2_M_VERY_LONG_WORD 5453 1.49 2.37 1.21 121 TooManyTo_005 5333 1.04 0.60 1.18 122 XMGenDplmaNmb 5127 1.31 1.88 1.14 123 XMPhish11 4985 1.17 1.39 1.10 124 DKIM_ADSP_CUSTOM_MED 4866 1.13 1.28 1.08 125 NO_DNS_FOR_FROM 4703 1.41 2.59 1.04 126 RCVD_IN_BL_SPAMCOP_NET 4320 1.83 4.59 0.96 127 FILL_THIS_FORM 4004 0.83 0.65 0.89 128 XM_UB50 3945 1.92 5.24 0.87 129 T_FILL_THIS_FORM_SHORT 3814 0.79 0.61 0.84 130 TR_XM_PHPDW 3803 1.20 2.33 0.84 131 TR_XM_RelayPhish 3692 0.97 1.47 0.82 132 RCVD_IN_MSPIKE_L5 3678 1.28 2.76 0.81 133 TR_XM_PHPForged 3659 1.17 2.32 0.81 134 XM_ProductURIs 3656 1.34 3.04 0.81 135 XMSubMetaI_00 3649 1.53 3.80 0.81 136 T_OBFU_PDF_ATTACH 3584 0.64 0.14 0.79 137 SpammyFromTLD_01 3539 0.96 1.50 0.78 138 TR_XM_FormFill2 3525 1.14 2.29 0.78 139 XM_H_PHPOS 3511 1.14 2.28 0.78 140 NML_ADSP_CUSTOM_MED 3488 0.82 0.95 0.77 141 PLING_QUERY 3481 0.69 0.42 0.77 142 T_XMDrugObfuBody_00 3470 0.89 1.29 0.77 143 XM_UCStrings02 3401 0.58 0.04 0.75 144 T_XMHurry_00 3367 0.94 1.55 0.75 145 XMBrknScrpt_02 3160 0.81 1.15 0.70 146 XMBody_95 2984 0.53 0.13 0.66 147 XM_H_PHPMailer 2975 0.82 1.35 0.66 148 XMBody_17 2960 0.87 1.56 0.66 149 XMNoVowels 2903 0.63 0.59 0.64 150 T_Symld_Words_02 2847 0.74 1.10 0.63 151 XM_ShortIntro_01 2830 0.59 0.47 0.63 152 HTTPS_HTTP_MISMATCH 2818 0.69 0.92 0.62 153 US_DOLLARS_3 2771 0.89 1.74 0.61 154 XMLngstWrd_00 2754 0.63 0.70 0.61 155 URI_NOVOWEL 2709 0.64 0.78 0.60 156 SHORT_HELO_AND_INLINE_IMAGE 2696 0.46 0.05 0.60 157 XMBdyGiftCard01 2666 1.16 2.94 0.59 158 XM_RXBody 2613 0.63 0.78 0.58 159 XMLngstWrd_01 2610 0.60 0.68 0.58 160 MISSING_HEADERS 2594 0.56 0.51 0.57 161 HTML_FONT_FACE_BAD 2577 0.67 0.97 0.57 162 XMGappySubj_01 2574 0.57 0.56 0.57 163 AC_DIV_BONANZA 2560 0.45 0.10 0.57 164 XMMoneyMeta_00 2540 0.65 0.94 0.56 165 XM_B_COPY_HTML 2528 0.63 0.86 0.56 166 T_FILL_THIS_FORM_LONG 2472 0.53 0.47 0.55 167 BODY_QUOTE_MALF_MSGID 2459 0.55 0.57 0.54 168 DKIM_ADSP_NXDOMAIN 2445 1.04 2.60 0.54 169 RCVD_IN_MSPIKE_L3 2409 0.63 0.92 0.53 170 USER_IN_WHITELIST 2405 0.40 0.00 0.53 171 RELAYCOUNTRY_AU 2388 0.53 0.55 0.53 172 LOW_PRICE 2387 0.49 0.39 0.53 173 FORGED_GMAIL_RCVD 2382 0.67 1.13 0.53 174 TM2_M_BODY_EMPTY 2373 0.42 0.09 0.53 175 T_FILL_THIS_FORM_LOAN 2366 0.41 0.07 0.52 176 T_TooManySym_03 2305 0.44 0.22 0.51 177 T_MANY_PILL_PRICE 2267 0.38 0.00 0.50 178 RCVD_IN_SORBS_DUL 2250 0.43 0.22 0.50 179 XMHTMLBadTable_001 2217 0.67 1.22 0.49 180 HTML_TAG_BALANCE_BODY 2191 0.53 0.69 0.49 181 XMSubMetaSxObfu_02 2174 0.47 0.45 0.48 182 RCVD_IN_MSPIKE_L4 2163 0.44 0.32 0.48 183 XMBody_78 2117 0.81 1.87 0.47 184 TR_LOTS_OF_MONEY3 2117 0.61 1.06 0.47 185 HTML_IMAGE_ONLY_32 2052 0.50 0.63 0.45 186 DIET_1 2039 0.80 1.89 0.45 187 XMSexyCombo_01 2034 1.02 2.82 0.45 188 FROM_GOV_DKIM_AU 1989 0.37 0.13 0.44 189 FROM_GOV_SPOOF 1989 0.40 0.28 0.44 190 XMPhish30 1955 0.60 1.13 0.43 191 XMSubMetaSxObfu_03 1950 0.64 1.28 0.43 192 RELAYCOUNTRY_DE 1947 0.55 0.95 0.43 193 XMDateMe_00 1874 0.40 0.34 0.41 194 HTML_IMAGE_ONLY_28 1871 0.40 0.38 0.41 195 T_MONEY_PERCENT 1828 0.56 1.04 0.40 196 TR_LOTS_OF_MONEY2 1828 0.56 1.04 0.40 197 XM_Body_Obfu01 1804 0.41 0.46 0.40 198 XMSlimDrugH 1787 0.45 0.63 0.40 199 RDNS_DYNAMIC 1762 0.51 0.89 0.39 200 XMHTML_After_End 1740 0.60 1.28 0.39 ----------------------------------------------------------------------