Email: 381713 Autolearn: 0 AvgScore: 0.71 AvgScanTime: 2.09 sec Spam: 56242 Autolearn: 0 AvgScore: 12.12 AvgScanTime: 2.81 sec Ham: 325471 Autolearn: 0 AvgScore: -1.26 AvgScanTime: 1.97 sec Time Spent Running SA: 221.57 hours Time Spent Processing Spam: 43.86 hours Time Spent Processing Ham: 177.71 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 50417 79.12 89.64 77.30 2 DKIM_SIGNED 41872 73.97 74.45 73.89 3 DCC_CHECK 41799 49.72 74.32 45.47 4 XM_B_Unicode 39847 66.26 70.85 65.47 5 XM_DK_Pass 39820 72.60 70.80 72.91 6 XMListUnsubscribeExists 38650 55.62 68.72 53.35 7 DKIM_VALID 37276 69.48 66.28 70.03 8 DKIM_VALID_AU 29286 54.56 52.07 54.99 9 XM_B_Unicode3 27487 43.10 48.87 42.10 10 BAYES_50 26042 50.36 46.30 51.06 11 XM_DK_Undo_02 19786 10.44 35.18 6.17 12 HTML_FONT_LOW_CONTRAST 19780 31.16 35.17 30.47 13 LOC_TINY_FONT_1 18278 27.87 32.50 27.07 14 MIME_HTML_ONLY 18257 23.44 32.46 21.88 15 FVGT_m_MULTI_ODD 15596 21.99 27.73 21.00 16 RELAYCOUNTRY_META 14458 7.48 25.71 4.33 17 XM_Body_Dirty_Words 13809 16.35 24.55 14.93 18 DCC_CHECK_NEGATIVE 13706 49.23 24.37 53.52 19 BAYES_99 13452 6.29 23.92 3.25 20 XMSubLong 12911 20.85 22.96 20.49 21 MultiRelay 12559 16.00 22.33 14.90 22 BOTNET_IPINHOSTNAME 11986 8.17 21.31 5.90 23 BOTNET 11079 4.94 19.70 2.38 24 DKIM_VALID_EF 10824 24.98 19.25 25.97 25 TR_DCC_Bayes_99 10044 3.72 17.86 1.28 26 BAYES_999 10006 4.88 17.79 2.64 27 T_TM2_M_HEADER_IN_MSG 9777 21.67 17.38 22.41 28 T_KAM_HTML_FONT_INVALID 9770 15.36 17.37 15.01 29 XM_Multi_Part_URI 9364 13.28 16.65 12.70 30 UNTRUSTED_Relay 8541 3.61 15.19 1.61 31 HTML_IMAGE_RATIO_02 7540 11.37 13.41 11.02 32 XM_UncommonTLD01 7424 4.82 13.20 3.38 33 LOTS_OF_MONEY 7347 10.53 13.06 10.09 34 XM_Evil_Numbers_Gen 7252 10.28 12.89 9.82 35 XMSexyCombo_05 7178 5.85 12.76 4.66 36 FSL_BULK_SIG 7121 8.25 12.66 7.49 37 MPART_ALT_DIFF 6040 4.96 10.74 3.96 38 T_XMDrugObfuBody_14 5366 7.21 9.54 6.80 39 XMSubMetaSx_00 5306 4.79 9.43 3.99 40 XM_H_Long_From01 5209 6.47 9.26 5.99 41 TooManyTo_001 5057 5.85 8.99 5.31 42 XM_DIRTYINTL 4790 3.74 8.52 2.92 43 DKIM_INVALID 4596 4.49 8.17 3.86 44 MIME_HTML_ONLY_MULTI 4486 3.04 7.98 2.19 45 XM_B_SpammyTLD 4358 5.37 7.75 4.96 46 XM_B_Phish_Phrases 4244 6.07 7.55 5.82 47 HTML_IMAGE_RATIO_04 4169 5.99 7.41 5.75 48 XM_UB50 4165 1.76 7.41 0.79 49 SpammyFromTLD_02 4113 1.40 7.31 0.38 50 RCVD_IN_MSPIKE_H2 3983 7.21 7.08 7.23 51 BAYES_80 3630 3.25 6.45 2.69 52 RCVD_IN_BL_SPAMCOP_NET 3412 1.83 6.07 1.09 53 LotsOfNums_01 3353 6.99 5.96 7.17 54 XMStrtUSub 3044 4.83 5.41 4.73 55 MIME_HTML_MOSTLY 3030 3.09 5.39 2.69 56 MultiRelay_CC 3014 0.95 5.36 0.18 57 MultiRelay_Combo 3014 0.95 5.36 0.18 58 XM_CamelCaseFrm001 2915 2.55 5.18 2.09 59 KHOP_HELO_FCRDNS 2813 2.01 5.00 1.49 60 XM_SendGrid 2731 6.13 4.86 6.35 61 FROM_EXCESS_BASE64 2633 4.27 4.68 4.20 62 BAYES_60 2553 5.18 4.54 5.29 63 XMNumbers 2553 3.24 4.54 3.01 64 MIME_QP_LONG_LINE 2502 4.01 4.45 3.94 65 RELAYCOUNTRY_CA 2488 1.92 4.42 1.48 66 XMSexyCombo_01 2434 1.14 4.33 0.59 67 ALL_TRUSTED 2405 19.18 4.28 21.76 68 BAYES_00 2404 20.35 4.27 23.13 69 XM_SPF_SoftFail 2390 1.64 4.25 1.19 70 URI_HEX 2378 2.77 4.23 2.51 71 HTML_IMAGE_RATIO_06 2362 3.55 4.20 3.43 72 BAYES_40 2294 4.98 4.08 5.14 73 RELAYCOUNTRY_FR 2291 0.87 4.07 0.32 74 BAYES_20 2248 4.42 4.00 4.49 75 XM_URI_RBL 2179 0.99 3.87 0.49 76 HTML_MIME_NO_HTML_TAG 2145 1.79 3.81 1.44 77 DKIM_ADSP_NXDOMAIN 2131 1.12 3.79 0.66 78 BAYES_95 2095 1.84 3.72 1.51 79 RCVD_IN_RP_RNBL 2021 0.57 3.59 0.04 80 T_REMOTE_IMAGE 1959 3.10 3.48 3.03 81 TR_XM_PHPDW 1956 0.97 3.48 0.54 82 TR_XM_PHPForged 1898 0.95 3.37 0.53 83 TR_XM_FormFill2 1889 0.94 3.36 0.52 84 XM_H_PHPOS 1879 0.93 3.34 0.52 85 NO_DNS_FOR_FROM 1821 1.56 3.24 1.27 86 XMDiploma_00 1779 1.82 3.16 1.59 87 TM2_M_URI_OPT_OUT 1712 5.27 3.04 5.66 88 T_XMDrugObfuBody_08 1676 1.66 2.98 1.43 89 NORDNS_LOW_CONTRAST 1647 0.43 2.93 0.00 90 SpammyFromTLD_01 1641 0.77 2.92 0.39 91 RCVD_IN_PSBL 1613 0.43 2.87 0.01 92 URIBL_DBL_ABUSE_REDIR 1589 0.48 2.83 0.07 93 SUBJ_ALL_CAPS 1573 2.35 2.80 2.27 94 UNPARSEABLE_RELAY 1558 3.39 2.77 3.50 95 REPLYTO_WITHOUT_TO_CC 1517 0.44 2.70 0.05 96 XMGenDplmaNmb 1479 1.14 2.63 0.88 97 TR_XM_DK_Bayes 1459 16.44 2.59 18.83 98 XM_H_PHPMailer 1419 0.85 2.52 0.56 99 BAYES_05 1373 3.06 2.44 3.16 100 DIET_1 1365 0.73 2.43 0.43 101 HTML_TAG_BALANCE_BODY 1363 0.93 2.42 0.67 102 TR_XM_RelayPhish 1342 1.25 2.39 1.06 103 T_XMDrugObfuBody_00 1336 1.23 2.38 1.03 104 BOTNET_NORDNS 1309 0.38 2.33 0.05 105 XMLngstWrd_00 1307 0.79 2.32 0.52 106 TR_XM_DK_Bayes1 1301 15.81 2.31 18.15 107 XMLngstWrd_01 1294 0.76 2.30 0.50 108 INVALID_DATE 1277 0.44 2.27 0.12 109 RCVD_IN_RP_SAFE 1274 11.52 2.27 13.12 110 XM_H_PHPOS_M 1246 0.58 2.22 0.30 111 HTML_IMAGE_RATIO_08 1237 1.79 2.20 1.72 112 T_TooManySym_01 1230 6.18 2.19 6.87 113 XMSexyCombo_04 1212 0.47 2.15 0.18 114 TM2_M_VERY_LONG_WORD 1197 1.54 2.13 1.44 115 ANY_BOUNCE_MESSAGE 1145 5.36 2.04 5.93 116 BOUNCE_MESSAGE 1145 5.36 2.04 5.93 117 RELAYCOUNTRY_GB 1136 0.65 2.02 0.41 118 HTML_FONT_SIZE_HUGE 1136 0.43 2.02 0.15 119 FROM_SUSPICIOUS_NTLD 1117 0.31 1.99 0.02 120 DKIM_ADSP_CUSTOM_MED 1113 0.91 1.98 0.73 121 RELAYCOUNTRY_RU 1109 0.36 1.97 0.08 122 URI_WP_HACKED_2 1108 2.81 1.97 2.95 123 FROM_SUSPICIOUS_NTLD_FP 1085 0.30 1.93 0.02 124 URI_TRY_3LD 1050 1.54 1.87 1.48 125 TR_Mismatch_TLD_02 1041 0.33 1.85 0.07 126 XMSubMetaI_00 1038 1.16 1.85 1.04 127 NML_ADSP_CUSTOM_MED 1011 0.64 1.80 0.44 128 RELAYCOUNTRY_PL 998 0.28 1.77 0.02 129 URI_OPTOUT_3LD 974 2.25 1.73 2.33 130 T_Symld_Words_02 949 0.78 1.69 0.62 131 FORGED_GMAIL_RCVD 948 0.62 1.69 0.44 132 XMStockSpam_06 928 1.11 1.65 1.01 133 RELAYCOUNTRY_AT 927 0.48 1.65 0.28 134 XM_OfRef6 922 1.48 1.64 1.45 135 XMBrknScrpt_02 920 0.73 1.64 0.57 136 TR_XM_DK_SendGrid 910 3.16 1.62 3.43 137 SHORT_URI 905 0.36 1.61 0.15 138 XM_UB99 905 0.24 1.61 0.00 139 TR_Symld_Words 868 2.17 1.54 2.28 140 RCVD_IN_MSPIKE_BL 861 0.25 1.53 0.03 141 XM_salutation 845 0.35 1.50 0.15 142 FSL_THIS_IS_ADV 844 0.49 1.50 0.31 143 RELAYCOUNTRY_BR 844 0.23 1.50 0.01 144 XMMoneyMeta_00 843 0.40 1.50 0.21 145 RELAYCOUNTRY_DE 843 0.49 1.50 0.32 146 XMBdyGiftCard01 838 2.23 1.49 2.35 147 TooManyTo_002 827 1.04 1.47 0.96 148 THIS_AD 821 0.67 1.46 0.53 149 RCVD_IN_MSPIKE_L5 797 0.23 1.42 0.02 150 XMSubMetaSxObfu_03 791 0.55 1.41 0.40 151 XMSlimDrugH 790 0.58 1.40 0.44 152 TR_XM_INV_DKIM 761 0.37 1.35 0.20 153 MSGID_RANDY 743 0.62 1.32 0.50 154 TM2_M_A_HREF_HREF 742 1.30 1.32 1.29 155 RCVD_IN_MSPIKE_WL 734 4.01 1.31 4.48 156 RDNS_DYNAMIC 730 0.56 1.30 0.44 157 HTML_IMAGE_ONLY_12 722 0.31 1.28 0.14 158 TooManyTo_003 700 0.77 1.24 0.68 159 URIBL_SBL_A 687 0.54 1.22 0.43 160 XM_Dr_From 687 0.29 1.22 0.13 161 XM_UB999 675 0.18 1.20 0.00 162 RCVD_IN_IADB_LISTED 656 3.24 1.17 3.60 163 MIME_HEADER_CTYPE_ONLY 644 0.32 1.15 0.18 164 TR_Caps_n_Bayes_99 638 0.23 1.13 0.08 165 XMPhish30 629 0.71 1.12 0.64 166 XMBody_17 627 1.06 1.11 1.05 167 XMSubNoVowel 625 0.29 1.11 0.15 168 URIBL_BLACK 622 0.17 1.11 0.01 169 T_XMHurry_00 612 1.01 1.09 1.00 170 RCVD_IN_MSPIKE_H3 610 3.55 1.08 3.98 171 RCVD_IN_IADB_SPF 607 2.79 1.08 3.09 172 HTML_SHORT_LINK_IMG_1 600 0.18 1.07 0.03 173 XMPhish11 599 0.82 1.07 0.78 174 XM_ProductURIs 597 1.16 1.06 1.17 175 XM_B_COPY_HTML 597 0.51 1.06 0.41 176 RCVD_IN_IADB_SENDERID 588 2.45 1.05 2.69 177 RCVD_IN_IADB_DK 587 2.37 1.04 2.60 178 XMLngstWrd_02 587 0.34 1.04 0.22 179 XM_BadFromFormat 584 0.24 1.04 0.10 180 TooManyTo_004 582 0.62 1.03 0.55 181 XM_UB60 581 0.19 1.03 0.05 182 HDRS_LCASE_IMGONLY 580 0.17 1.03 0.03 183 XMSubMetaSSx_00 573 0.32 1.02 0.20 184 MAILING_LIST_MULTI 567 1.34 1.01 1.40 185 XM_H_Long_From02 562 1.03 1.00 1.04 186 LONG_JUNK_URI2 559 0.24 0.99 0.11 187 HTML_FONT_FACE_BAD 558 0.64 0.99 0.58 188 PLING_QUERY 555 0.44 0.99 0.34 189 TO_EQ_FM_DOM_HTML_IMG 554 0.15 0.99 0.01 190 XMLngstWrd_03 554 0.30 0.99 0.18 191 MISSING_MIMEOLE 533 0.16 0.95 0.02 192 RELAYCOUNTRY_VN 533 0.16 0.95 0.02 193 TR_LOTS_OF_MONEY3 532 0.39 0.95 0.30 194 LongTLD 524 0.23 0.93 0.11 195 XM_XX_Yahoo 523 0.27 0.93 0.15 196 FROM_MISSP_REPLYTO 520 0.14 0.92 0.00 197 XM_Lotto 518 0.20 0.92 0.08 198 T_FILL_THIS_FORM_SHORT 516 0.59 0.92 0.53 199 RELAYCOUNTRY_NG 511 0.13 0.91 0.00 200 T_HTML_TAG_BALANCE_CENTER 507 0.21 0.90 0.09 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 251586 79.12 89.64 77.30 2 DKIM_SIGNED 240482 73.97 74.45 73.89 3 XM_DK_Pass 237285 72.60 70.80 72.91 4 DKIM_VALID 227928 69.48 66.28 70.03 5 XM_B_Unicode 213093 66.26 70.85 65.47 6 DKIM_VALID_AU 178976 54.56 52.07 54.99 7 DCC_CHECK_NEGATIVE 174204 49.23 24.37 53.52 8 XMListUnsubscribeExists 173646 55.62 68.72 53.35 9 BAYES_50 166182 50.36 46.30 51.06 10 DCC_CHECK 147992 49.72 74.32 45.47 11 XM_B_Unicode3 137013 43.10 48.87 42.10 12 HTML_FONT_LOW_CONTRAST 99171 31.16 35.17 30.47 13 LOC_TINY_FONT_1 88117 27.87 32.50 27.07 14 DKIM_VALID_EF 84524 24.98 19.25 25.97 15 BAYES_00 75271 20.35 4.27 23.13 16 T_TM2_M_HEADER_IN_MSG 72938 21.67 17.38 22.41 17 MIME_HTML_ONLY 71227 23.44 32.46 21.88 18 ALL_TRUSTED 70811 19.18 4.28 21.76 19 FVGT_m_MULTI_ODD 68354 21.99 27.73 21.00 20 XMSubLong 66694 20.85 22.96 20.49 21 TR_XM_DK_Bayes 61278 16.44 2.59 18.83 22 TR_XM_DK_Bayes1 59059 15.81 2.31 18.15 23 TR_XM_DK_Bayes2 52512 13.89 0.88 16.13 24 T_KAM_HTML_FONT_INVALID 48868 15.36 17.37 15.01 25 XM_Body_Dirty_Words 48591 16.35 24.55 14.93 26 MultiRelay 48496 16.00 22.33 14.90 27 RCVD_IN_RP_SAFE 42692 11.52 2.27 13.12 28 XM_Multi_Part_URI 41320 13.28 16.65 12.70 29 RCVD_IN_RP_CERTIFIED 36823 9.72 0.52 11.31 30 HTML_IMAGE_RATIO_02 35852 11.37 13.41 11.02 31 LOTS_OF_MONEY 32844 10.53 13.06 10.09 32 XM_Evil_Numbers_Gen 31970 10.28 12.89 9.82 33 XM_DKIMWhitelistDomains 28969 7.60 0.07 8.90 34 FSL_BULK_SIG 24381 8.25 12.66 7.49 35 RCVD_IN_MSPIKE_H2 23542 7.21 7.08 7.23 36 LotsOfNums_01 23342 6.99 5.96 7.17 37 T_TooManySym_01 22350 6.18 2.19 6.87 38 T_XMDrugObfuBody_14 22146 7.21 9.54 6.80 39 XM_SendGrid 20657 6.13 4.86 6.35 40 XM_DK_Undo_02 20076 10.44 35.18 6.17 41 XM_H_Long_From01 19499 6.47 9.26 5.99 42 ANY_BOUNCE_MESSAGE 19303 5.36 2.04 5.93 43 BOUNCE_MESSAGE 19302 5.36 2.04 5.93 44 BOTNET_IPINHOSTNAME 19206 8.17 21.31 5.90 45 XM_B_Phish_Phrases 18944 6.07 7.55 5.82 46 HTML_IMAGE_RATIO_04 18707 5.99 7.41 5.75 47 TM2_M_URI_OPT_OUT 18406 5.27 3.04 5.66 48 TooManyTo_001 17279 5.85 8.99 5.31 49 BAYES_60 17205 5.18 4.54 5.29 50 BAYES_40 16722 4.98 4.08 5.14 51 XM_B_SpammyTLD 16129 5.37 7.75 4.96 52 XMStrtUSub 15401 4.83 5.41 4.73 53 XMSexyCombo_05 15171 5.85 12.76 4.66 54 BAYES_20 14609 4.42 4.00 4.49 55 RCVD_IN_MSPIKE_WL 14567 4.01 1.31 4.48 56 RELAYCOUNTRY_META 14108 7.48 25.71 4.33 57 TO_MALFORMED 13792 3.62 0.02 4.24 58 FROM_EXCESS_BASE64 13685 4.27 4.68 4.20 59 XMSubMetaSx_00 12975 4.79 9.43 3.99 60 RCVD_IN_MSPIKE_H3 12949 3.55 1.08 3.98 61 MPART_ALT_DIFF 12879 4.96 10.74 3.96 62 MIME_QP_LONG_LINE 12817 4.01 4.45 3.94 63 DKIM_INVALID 12554 4.49 8.17 3.86 64 RCVD_IN_IADB_LISTED 11728 3.24 1.17 3.60 65 UNPARSEABLE_RELAY 11385 3.39 2.77 3.50 66 HTML_IMAGE_RATIO_06 11174 3.55 4.20 3.43 67 TR_XM_DK_SendGrid 11163 3.16 1.62 3.43 68 XM_UncommonTLD01 10985 4.82 13.20 3.38 69 BAYES_99 10573 6.29 23.92 3.25 70 BAYES_05 10301 3.06 2.44 3.16 71 RCVD_IN_IADB_SPF 10054 2.79 1.08 3.09 72 TVD_RCVD_IP 10048 2.71 0.53 3.09 73 T_REMOTE_IMAGE 9858 3.10 3.48 3.03 74 XMNumbers 9810 3.24 4.54 3.01 75 URI_WP_HACKED_2 9613 2.81 1.97 2.95 76 IN_ZIMBRA_NJ_WHITELIST 9585 2.51 0.00 2.94 77 XM_DIRTYINTL 9496 3.74 8.52 2.92 78 RCVD_IN_IADB_SENDERID 8768 2.45 1.05 2.69 79 BAYES_80 8759 3.25 6.45 2.69 80 MIME_HTML_MOSTLY 8747 3.09 5.39 2.69 81 BAYES_999 8606 4.88 17.79 2.64 82 CK_HELO_DYNAMIC_SPLIT_IP 8596 2.38 0.84 2.64 83 HELO_DYNAMIC_IPADDR2 8551 2.26 0.13 2.63 84 RCVD_IN_IADB_DK 8463 2.37 1.04 2.60 85 T_TooManySym_02 8214 2.24 0.62 2.52 86 URI_HEX 8182 2.77 4.23 2.51 87 RCVD_IN_IADB_VOUCHED 7812 2.10 0.37 2.40 88 BOTNET 7760 4.94 19.70 2.38 89 XMBdyGiftCard01 7658 2.23 1.49 2.35 90 URI_OPTOUT_3LD 7598 2.25 1.73 2.33 91 TR_Symld_Words 7421 2.17 1.54 2.28 92 INVALID_MSGID 7421 1.98 0.27 2.28 93 SUBJ_ALL_CAPS 7385 2.35 2.80 2.27 94 XMSubEmpty 7137 1.97 0.70 2.19 95 MIME_HTML_ONLY_MULTI 7118 3.04 7.98 2.19 96 XMNoSubject 6845 1.86 0.45 2.10 97 MISSING_SUBJECT 6845 1.86 0.45 2.10 98 XM_CamelCaseFrm001 6818 2.55 5.18 2.09 99 TR_MetaPhish_Combo_01 6558 1.78 0.45 2.01 100 XM_PDF 6019 1.65 0.49 1.85 101 HTML_IMAGE_RATIO_08 5592 1.79 2.20 1.72 102 UNTRUSTED_Relay 5240 3.61 15.19 1.61 103 XMDiploma_00 5181 1.82 3.16 1.59 104 RCVD_IN_IADB_OPTIN 5012 1.37 0.42 1.54 105 BAYES_95 4921 1.84 3.72 1.51 106 KHOP_HELO_FCRDNS 4847 2.01 5.00 1.49 107 RELAYCOUNTRY_CA 4825 1.92 4.42 1.48 108 URI_TRY_3LD 4810 1.54 1.87 1.48 109 IN_HORDE_ADDRESS_BOOK 4741 1.25 0.05 1.46 110 XM_OfRef6 4711 1.48 1.64 1.45 111 XM_DK_Undo_01 4699 1.36 0.87 1.44 112 TM2_M_VERY_LONG_WORD 4698 1.54 2.13 1.44 113 HTML_MIME_NO_HTML_TAG 4689 1.79 3.81 1.44 114 T_XMDrugObfuBody_08 4663 1.66 2.98 1.43 115 MAILING_LIST_MULTI 4565 1.34 1.01 1.40 116 USER_IN_DEF_DKIM_WL 4444 1.17 0.01 1.37 117 TM2_M_A_HREF_HREF 4210 1.30 1.32 1.29 118 TR_DCC_Bayes_99 4156 3.72 17.86 1.28 119 NO_DNS_FOR_FROM 4144 1.56 3.24 1.27 120 XMGappySubj_01 3920 1.07 0.28 1.20 121 XM_SPF_SoftFail 3870 1.64 4.25 1.19 122 XM_ProductURIs 3812 1.16 1.06 1.17 123 RCVD_IN_BL_SPAMCOP_NET 3562 1.83 6.07 1.09 124 TR_XM_RelayPhish 3443 1.25 2.39 1.06 125 XMBody_17 3406 1.06 1.11 1.05 126 XMSubMetaI_00 3388 1.16 1.85 1.04 127 XM_H_Long_From02 3386 1.03 1.00 1.04 128 T_XMDrugObfuBody_00 3357 1.23 2.38 1.03 129 XMStockSpam_06 3300 1.11 1.65 1.01 130 T_XMHurry_00 3252 1.01 1.09 1.00 131 XM_RXBody 3138 0.88 0.41 0.96 132 TooManyTo_002 3130 1.04 1.47 0.96 133 XM_GoogleGroups 3046 0.86 0.42 0.94 134 XMGenDplmaNmb 2859 1.14 2.63 0.88 135 XM_UB50 2564 1.76 7.41 0.79 136 XM_B_REG_HTML 2558 0.71 0.24 0.79 137 XMBody_95 2547 0.68 0.10 0.78 138 XMPhish11 2543 0.82 1.07 0.78 139 DKIM_ADSP_CUSTOM_MED 2375 0.91 1.98 0.73 140 USER_IN_WHITELIST 2226 0.58 0.00 0.68 141 TooManyTo_003 2225 0.77 1.24 0.68 142 HTML_TAG_BALANCE_BODY 2181 0.93 2.42 0.67 143 SUBJ_DOLLARS 2161 0.69 0.81 0.66 144 DKIM_ADSP_NXDOMAIN 2159 1.12 3.79 0.66 145 XMPhish30 2072 0.71 1.12 0.64 146 URI_NOVOWEL 2048 0.63 0.62 0.63 147 T_Symld_Words_02 2025 0.78 1.69 0.62 148 XM_ShortIntro_01 2005 0.64 0.76 0.62 149 XMSubMetaSxObfu_02 1912 0.57 0.48 0.59 150 XMSexyCombo_01 1908 1.14 4.33 0.59 151 HTML_FONT_FACE_BAD 1887 0.64 0.99 0.58 152 TVD_SPACE_RATIO 1884 0.53 0.23 0.58 153 XMBrknScrpt_02 1849 0.73 1.64 0.57 154 XM_H_PHPMailer 1830 0.85 2.52 0.56 155 TooManyTo_004 1791 0.62 1.03 0.55 156 XMHTMLBadTable_001 1778 0.53 0.46 0.55 157 T_TooManySym_03 1757 0.50 0.28 0.54 158 TR_XM_PHPDW 1757 0.97 3.48 0.54 159 XM_D_tchamptons_WL 1745 0.46 0.00 0.54 160 THIS_AD 1738 0.67 1.46 0.53 161 T_FILL_THIS_FORM_SHORT 1736 0.59 0.92 0.53 162 TR_XM_PHPForged 1729 0.95 3.37 0.53 163 XMLngstWrd_00 1698 0.79 2.32 0.52 164 FILL_THIS_FORM 1689 0.53 0.59 0.52 165 TR_XM_FormFill2 1687 0.94 3.36 0.52 166 HELO_NODOT 1678 0.53 0.62 0.52 167 XM_H_PHPOS 1678 0.93 3.34 0.52 168 HELO_NO_DOMAIN 1677 0.53 0.61 0.52 169 MSGID_RANDY 1627 0.62 1.32 0.50 170 XMLngstWrd_01 1614 0.76 2.30 0.50 171 XM_URI_RBL 1605 0.99 3.87 0.49 172 TooManyTo_005 1560 0.53 0.84 0.48 173 FILL_THIS_FORM_LONG 1495 0.46 0.47 0.46 174 NML_ADSP_CUSTOM_MED 1448 0.64 1.80 0.44 175 FORGED_GMAIL_RCVD 1429 0.62 1.69 0.44 176 RDNS_DYNAMIC 1424 0.56 1.30 0.44 177 XMSlimDrugH 1416 0.58 1.40 0.44 178 FILL_THIS_FORM_LOAN 1413 0.40 0.19 0.43 179 XMOemUri 1405 0.39 0.13 0.43 180 DIET_1 1403 0.73 2.43 0.43 181 XMBSHREFv2 1392 0.40 0.23 0.43 182 URIBL_SBL_A 1392 0.54 1.22 0.43 183 XMBody_78 1392 0.47 0.71 0.43 184 RELAYCOUNTRY_GB 1335 0.65 2.02 0.41 185 XM_B_COPY_HTML 1334 0.51 1.06 0.41 186 RELAYCOUNTRY_AU 1332 0.41 0.40 0.41 187 XMSubMetaSxObfu_03 1315 0.55 1.41 0.40 188 XMNoVowels 1315 0.41 0.48 0.40 189 SpammyFromTLD_01 1281 0.77 2.92 0.39 190 BODY_ENHANCEMENT 1275 0.34 0.03 0.39 191 SpammyFromTLD_02 1226 1.40 7.31 0.38 192 LOW_PRICE 1176 0.41 0.67 0.36 193 HTML_TITLE_SUBJ_DIFF 1175 0.36 0.35 0.36 194 HTTPS_HTTP_MISMATCH 1158 0.39 0.57 0.36 195 HK_RANDOM_REPLYTO 1135 0.43 0.90 0.35 196 XMCapTrack 1131 0.34 0.30 0.35 197 XM_Body_Obfu01 1123 0.36 0.46 0.35 198 PLING_QUERY 1109 0.44 0.99 0.34 199 XMHTML_After_End 1093 0.36 0.53 0.34 200 T_OBFU_PDF_ATTACH 1060 0.30 0.15 0.33 ----------------------------------------------------------------------