Email: 377039 Autolearn: 0 AvgScore: 2.03 AvgScanTime: 2.43 sec Spam: 79148 Autolearn: 0 AvgScore: 12.53 AvgScanTime: 3.59 sec Ham: 297891 Autolearn: 0 AvgScore: -0.76 AvgScanTime: 2.13 sec Time Spent Running SA: 255.01 hours Time Spent Processing Spam: 78.89 hours Time Spent Processing Ham: 176.12 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 75028 89.96 94.79 88.67 2 DCC_CHECK 65196 59.55 82.37 53.48 3 DKIM_SIGNED 64235 82.83 81.16 83.28 4 XM_DK_Pass 62034 81.39 78.38 82.19 5 DKIM_VALID 58402 78.05 73.79 79.19 6 XM_B_Unicode 57912 75.09 73.17 75.60 7 XMListUnsubscribeExists 55176 63.90 69.71 62.35 8 DKIM_VALID_AU 47806 62.78 60.40 63.41 9 XM_B_Unicode3 41070 48.48 51.89 47.57 10 BAYES_50 35228 54.17 44.51 56.73 11 HTML_FONT_LOW_CONTRAST 34300 36.38 43.34 34.53 12 LOC_TINY_FONT_1 31050 33.65 39.23 32.17 13 XM_DK_Undo_02 30502 14.67 38.54 8.32 14 MIME_HTML_ONLY 24954 26.66 31.53 25.37 15 BAYES_99 22845 9.79 28.86 4.73 16 DKIM_VALID_EF 20905 28.06 26.41 28.50 17 FVGT_m_MULTI_ODD 20273 22.74 25.61 21.98 18 XMSubLong 20058 23.90 25.34 23.52 19 XM_Body_Dirty_Words 18576 19.47 23.47 18.41 20 TR_DCC_Bayes_99 18357 6.64 23.19 2.24 21 RELAYCOUNTRY_META 18002 8.66 22.74 4.92 22 BAYES_999 17790 7.71 22.48 3.78 23 XM_Multi_Part_URI 15689 15.23 19.82 14.01 24 MultiRelay 15346 16.52 19.39 15.76 25 XM_UncommonTLD01 15147 6.87 19.14 3.61 26 HTML_IMAGE_RATIO_02 14331 13.43 18.11 12.19 27 BOTNET_IPINHOSTNAME 14261 8.55 18.02 6.03 28 FSL_BULK_SIG 13215 9.55 16.70 7.65 29 BOTNET 12998 5.22 16.42 2.24 30 T_KAM_HTML_FONT_INVALID 12982 18.13 16.40 18.59 31 DCC_CHECK_NEGATIVE 12938 39.28 16.35 45.38 32 SpammyFromTLD_02 12028 3.40 15.20 0.26 33 T_TM2_M_HEADER_IN_MSG 11970 20.90 15.12 22.44 34 UNTRUSTED_Relay 11205 4.25 14.16 1.62 35 XM_B_SpammyTLD 11159 4.75 14.10 2.26 36 TooManyTo_001 10005 7.74 12.64 6.44 37 XM_B_Unsub 9935 11.77 12.55 11.56 38 XMSexyCombo_05 9281 7.99 11.73 7.00 39 LOTS_OF_MONEY 8606 11.19 10.87 11.27 40 XM_Evil_Numbers_Gen 8527 11.31 10.77 11.45 41 MPART_ALT_DIFF 7694 5.47 9.72 4.34 42 XMSubMetaSx_00 7566 5.70 9.56 4.68 43 T_XMDrugObfuBody_14 7167 7.92 9.06 7.62 44 XM_H_Long_From01 6299 7.63 7.96 7.55 45 XM_B_Phish_Phrases 6138 7.82 7.76 7.83 46 DKIM_INVALID 5833 4.78 7.37 4.09 47 FROM_SUSPICIOUS_NTLD 5757 1.57 7.27 0.06 48 FROM_SUSPICIOUS_NTLD_FP 5730 1.56 7.24 0.05 49 XM_DIRTYINTL 5659 4.13 7.15 3.33 50 MIME_HTML_MOSTLY 5644 4.09 7.13 3.29 51 KHOP_HELO_FCRDNS 5439 2.35 6.87 1.15 52 HTML_IMAGE_RATIO_04 5422 7.06 6.85 7.12 53 XM_UB50 5258 2.16 6.64 0.97 54 BAYES_80 5009 3.51 6.33 2.76 55 XM_H_TOP 4909 1.31 6.20 0.00 56 XM_SendGrid 4908 6.64 6.20 6.76 57 T_REMOTE_IMAGE 4785 4.22 6.05 3.74 58 LotsOfNums_01 4491 7.86 5.67 8.44 59 XMBdyGiftCard01 4101 3.13 5.18 2.59 60 MIME_HTML_ONLY_MULTI 4082 2.74 5.16 2.10 61 TR_M_TOP_BAYES 3777 1.00 4.77 0.00 62 BAYES_60 3750 5.26 4.74 5.40 63 URI_HEX 3470 2.95 4.38 2.57 64 HTML_IMAGE_RATIO_06 3439 4.18 4.35 4.14 65 MIME_QP_LONG_LINE 3428 4.69 4.33 4.78 66 BAYES_40 3309 4.56 4.18 4.67 67 XMNumbers 3209 4.00 4.05 3.99 68 BAYES_95 3077 2.07 3.89 1.58 69 TR_XM_DK_SendGrid 3046 3.79 3.85 3.78 70 RCVD_IN_BL_SPAMCOP_NET 3017 2.12 3.81 1.67 71 DATE_IN_PAST_06_12 2968 0.87 3.75 0.10 72 RCVD_IN_MSPIKE_H2 2963 5.15 3.74 5.53 73 HTML_SHORT_LINK_IMG_1 2890 0.78 3.65 0.02 74 US_DOLLARS_3 2882 3.19 3.64 3.07 75 HDRS_LCASE_IMGONLY 2793 0.76 3.53 0.02 76 HTML_MIME_NO_HTML_TAG 2782 2.69 3.51 2.47 77 RELAYCOUNTRY_GB 2780 1.19 3.51 0.58 78 RELAYCOUNTRY_CA 2775 2.38 3.51 2.08 79 T_TooManySym_01 2769 4.54 3.50 4.82 80 TM2_M_VERY_LONG_WORD 2660 1.79 3.36 1.37 81 BAYES_20 2634 3.51 3.33 3.56 82 FROM_EXCESS_BASE64 2578 4.75 3.26 5.15 83 NO_DNS_FOR_FROM 2564 1.64 3.24 1.21 84 RCVD_IN_PSBL 2452 0.78 3.10 0.16 85 XM_CamelCaseFrm001 2443 2.60 3.09 2.47 86 REPLYTO_WITHOUT_TO_CC 2420 0.66 3.06 0.03 87 XMStrtUSub 2418 4.45 3.06 4.82 88 HTML_IMAGE_ONLY_12 2416 0.73 3.05 0.11 89 RCVD_IN_RP_RNBL 2333 0.67 2.95 0.06 90 MIME_HEADER_CTYPE_ONLY 2327 0.71 2.94 0.12 91 XMSexyCombo_01 2298 1.35 2.90 0.94 92 TO_EQ_FM_DOM_HTML_IMG 2225 0.59 2.81 0.00 93 XMDiploma_00 2201 1.55 2.78 1.23 94 RCVD_IN_MSPIKE_BL 2195 0.80 2.77 0.28 95 RELAYCOUNTRY_UA 2191 0.58 2.77 0.00 96 XM_URI_RBL 2182 0.93 2.76 0.44 97 XMBody_17 2157 1.21 2.73 0.81 98 XM_SPF_SoftFail 2098 1.62 2.65 1.34 99 TR_XM_RelayPhish 2087 1.79 2.64 1.57 100 XM_UB99 1982 0.53 2.50 0.01 101 RCVD_IN_MSPIKE_L5 1969 0.56 2.49 0.05 102 TM2_M_URI_OPT_OUT 1949 1.63 2.46 1.41 103 RELAYCOUNTRY_FR 1947 0.75 2.46 0.29 104 DKIM_ADSP_NXDOMAIN 1911 0.93 2.41 0.53 105 TR_Mismatch_TLD_02 1902 0.55 2.40 0.05 106 TR_XM_PHPDW 1894 0.99 2.39 0.61 107 TR_XM_PHPForged 1855 0.96 2.34 0.60 108 TR_XM_FormFill2 1838 0.95 2.32 0.59 109 XM_H_PHPOS 1835 0.95 2.32 0.59 110 DIET_1 1820 1.00 2.30 0.66 111 TR_XM_INV_DKIM 1802 0.75 2.28 0.34 112 BAYES_05 1763 2.18 2.23 2.17 113 SUBJ_ALL_CAPS 1748 2.34 2.21 2.37 114 RDNS_DYNAMIC 1747 0.80 2.21 0.43 115 MultiRelay_CC 1733 0.62 2.19 0.20 116 MultiRelay_Combo 1733 0.62 2.19 0.20 117 RCVD_IN_RP_SAFE 1674 11.89 2.12 14.49 118 XMGenDplmaNmb 1619 0.91 2.05 0.61 119 TR_Symld_Words 1601 1.57 2.02 1.45 120 XM_B_Unsub2 1587 2.20 2.01 2.25 121 NORDNS_LOW_CONTRAST 1581 0.42 2.00 0.00 122 ALL_TRUSTED 1548 10.49 1.96 12.76 123 XMStockSpam_06 1503 1.63 1.90 1.56 124 HTML_IMAGE_RATIO_08 1500 2.35 1.90 2.46 125 XM_OfRef6 1490 1.55 1.88 1.46 126 BOTNET_NORDNS 1455 0.41 1.84 0.03 127 XMSubGiftCard1 1445 0.43 1.83 0.06 128 XM_Combo_Sbj 1426 0.60 1.80 0.28 129 TM2_M_A_HREF_HREF 1393 0.97 1.76 0.77 130 DATE_IN_PAST_03_06 1391 0.48 1.76 0.14 131 XMSubGiftCard2 1367 0.38 1.73 0.03 132 BAYES_00 1348 14.67 1.70 18.12 133 RCVD_IN_MSPIKE_WL 1337 3.72 1.69 4.26 134 XM_H_PHPMailer 1313 0.80 1.66 0.58 135 XM_H_Long_From02 1304 1.21 1.65 1.10 136 RELAYCOUNTRY_AT 1275 0.54 1.61 0.26 137 XM_BadFromFormat 1252 0.42 1.58 0.11 138 RCVD_IN_IADB_LISTED 1202 4.02 1.52 4.69 139 T_XMDrugObfuBody_00 1193 1.35 1.51 1.30 140 URI_TRY_3LD 1183 1.78 1.49 1.86 141 XM_H_PHPOS_M 1154 0.53 1.46 0.29 142 T_XMDrugObfuBody_08 1152 1.33 1.46 1.29 143 RCVD_IN_RP_CERTIFIED 1128 10.89 1.43 13.41 144 HTML_FONT_FACE_BAD 1127 0.75 1.42 0.57 145 RELAYCOUNTRY_IN 1127 0.35 1.42 0.06 146 RCVD_IN_IADB_SPF 1115 3.48 1.41 4.03 147 RCVD_IN_IADB_SENDERID 1094 3.11 1.38 3.57 148 RCVD_IN_IADB_DK 1093 3.03 1.38 3.47 149 UNPARSEABLE_RELAY 1089 3.16 1.38 3.63 150 XMSubMetaI_00 1079 1.10 1.36 1.03 151 SpammyFromTLD_01 1030 0.64 1.30 0.46 152 XM_UB999 1019 0.28 1.29 0.01 153 XMPhish30 1012 0.75 1.28 0.61 154 XM_UB80 993 0.28 1.25 0.02 155 T_XMHurry_00 987 1.00 1.25 0.93 156 XMSubMetaSxObfu_03 973 0.76 1.23 0.64 157 XMBrknScrpt_02 971 0.80 1.23 0.68 158 FROM_MISSP_REPLYTO 882 0.24 1.11 0.00 159 PLING_QUERY 874 0.81 1.10 0.73 160 TR_XM_DK_Bayes 871 13.48 1.10 16.76 161 MPART_ALT_DIFF_COUNT 868 0.44 1.10 0.26 162 XM_ProductURIs 844 1.04 1.07 1.03 163 RCVD_IN_MSPIKE_H3 843 2.95 1.07 3.45 164 HTML_IMAGE_ONLY_20 837 0.34 1.06 0.15 165 T_MONEY_PERCENT 818 0.87 1.03 0.82 166 TR_LOTS_OF_MONEY2 818 0.87 1.03 0.82 167 THIS_AD 816 0.50 1.03 0.36 168 MAILING_LIST_MULTI 809 1.48 1.02 1.60 169 XMSexyCombo_04 806 0.34 1.02 0.15 170 T_FILL_THIS_FORM_SHORT 802 0.64 1.01 0.54 171 XMPhish11 795 0.90 1.00 0.88 172 XM_UB60 791 0.26 1.00 0.06 173 TooManyTo_002 786 1.49 0.99 1.63 174 TR_XM_DK_Bayes1 774 12.98 0.98 16.17 175 XMHTML_After_End 755 1.17 0.95 1.23 176 T_HTML_TAG_BALANCE_CENTER 745 0.30 0.94 0.13 177 XM_DK_Undo_01 738 1.19 0.93 1.25 178 XMBody_29 732 0.41 0.92 0.28 179 TRACKER_ID 731 0.30 0.92 0.14 180 LOW_PRICE 730 0.49 0.92 0.37 181 XM_UB95 729 0.20 0.92 0.01 182 XM_B_COPY_HTML 725 0.62 0.92 0.54 183 FROM_MISSP_DYNIP 701 0.19 0.89 0.00 184 XMHTMLBadTable_001 696 0.75 0.88 0.72 185 TO_NO_BRKTS_DYNIP 694 0.19 0.88 0.00 186 HTML_IMAGE_ONLY_08 690 0.24 0.87 0.08 187 HK_RANDOM_REPLYTO 681 0.42 0.86 0.30 188 TooManyTo_003 660 1.10 0.83 1.17 189 SUBJ_DOLLARS 651 0.96 0.82 1.00 190 T_Symld_Words_02 650 0.54 0.82 0.47 191 SHOPIFY_IMG_NOT_RCVD_SFY 644 0.32 0.81 0.19 192 DKIM_ADSP_CUSTOM_MED 641 0.90 0.81 0.93 193 XM_XX_Yahoo 639 0.25 0.81 0.10 194 LONG_JUNK_URI2 638 0.20 0.81 0.04 195 RELAYCOUNTRY_RU 629 0.18 0.79 0.02 196 BODY_URI_ONLY 628 0.19 0.79 0.03 197 URIBL_DBL_ABUSE_REDIR 627 0.17 0.79 0.00 198 XMPhish14 598 0.41 0.76 0.32 199 XMSubNoVowel 586 0.31 0.74 0.19 200 FORGED_GMAIL_RCVD 568 0.66 0.72 0.65 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 264153 89.96 94.79 88.67 2 DKIM_SIGNED 248072 82.83 81.16 83.28 3 XM_DK_Pass 244837 81.39 78.38 82.19 4 DKIM_VALID 235886 78.05 73.79 79.19 5 XM_B_Unicode 225208 75.09 73.17 75.60 6 DKIM_VALID_AU 188898 62.78 60.40 63.41 7 XMListUnsubscribeExists 185737 63.90 69.71 62.35 8 BAYES_50 169003 54.17 44.51 56.73 9 DCC_CHECK 159317 59.55 82.37 53.48 10 XM_B_Unicode3 141703 48.48 51.89 47.57 11 DCC_CHECK_NEGATIVE 135174 39.28 16.35 45.38 12 HTML_FONT_LOW_CONTRAST 102875 36.38 43.34 34.53 13 LOC_TINY_FONT_1 95822 33.65 39.23 32.17 14 DKIM_VALID_EF 84909 28.06 26.41 28.50 15 MIME_HTML_ONLY 75580 26.66 31.53 25.37 16 XMSubLong 70060 23.90 25.34 23.52 17 T_TM2_M_HEADER_IN_MSG 66840 20.90 15.12 22.44 18 FVGT_m_MULTI_ODD 65471 22.74 25.61 21.98 19 T_KAM_HTML_FONT_INVALID 55382 18.13 16.40 18.59 20 XM_Body_Dirty_Words 54836 19.47 23.47 18.41 21 BAYES_00 53973 14.67 1.70 18.12 22 TR_XM_DK_Bayes 49938 13.48 1.10 16.76 23 TR_XM_DK_Bayes1 48167 12.98 0.98 16.17 24 MultiRelay 46953 16.52 19.39 15.76 25 TR_XM_DK_Bayes2 43790 11.76 0.68 14.70 26 RCVD_IN_RP_SAFE 43165 11.89 2.12 14.49 27 XM_Multi_Part_URI 41749 15.23 19.82 14.01 28 RCVD_IN_RP_CERTIFIED 39945 10.89 1.43 13.41 29 ALL_TRUSTED 37999 10.49 1.96 12.76 30 HTML_IMAGE_RATIO_02 36303 13.43 18.11 12.19 31 XM_B_Unsub 34431 11.77 12.55 11.56 32 XM_Evil_Numbers_Gen 34108 11.31 10.77 11.45 33 LOTS_OF_MONEY 33568 11.19 10.87 11.27 34 XM_DKIMWhitelistDomains 31707 8.42 0.05 10.64 35 LotsOfNums_01 25142 7.86 5.67 8.44 36 XM_DK_Undo_02 24796 14.67 38.54 8.32 37 XM_B_Phish_Phrases 23336 7.82 7.76 7.83 38 FSL_BULK_SIG 22798 9.55 16.70 7.65 39 T_XMDrugObfuBody_14 22703 7.92 9.06 7.62 40 XM_H_Long_From01 22485 7.63 7.96 7.55 41 HTML_IMAGE_RATIO_04 21209 7.06 6.85 7.12 42 XMSexyCombo_05 20853 7.99 11.73 7.00 43 XM_SendGrid 20144 6.64 6.20 6.76 44 TooManyTo_001 19189 7.74 12.64 6.44 45 BOTNET_IPINHOSTNAME 17964 8.55 18.02 6.03 46 RCVD_IN_MSPIKE_H2 16461 5.15 3.74 5.53 47 BAYES_60 16084 5.26 4.74 5.40 48 FROM_EXCESS_BASE64 15339 4.75 3.26 5.15 49 RELAYCOUNTRY_META 14650 8.66 22.74 4.92 50 T_TooManySym_01 14349 4.54 3.50 4.82 51 XMStrtUSub 14347 4.45 3.06 4.82 52 MIME_QP_LONG_LINE 14241 4.69 4.33 4.78 53 BAYES_99 14085 9.79 28.86 4.73 54 RCVD_IN_IADB_LISTED 13970 4.02 1.52 4.69 55 XMSubMetaSx_00 13942 5.70 9.56 4.68 56 BAYES_40 13902 4.56 4.18 4.67 57 MPART_ALT_DIFF 12924 5.47 9.72 4.34 58 RCVD_IN_MSPIKE_WL 12682 3.72 1.69 4.26 59 HTML_IMAGE_RATIO_06 12324 4.18 4.35 4.14 60 DKIM_INVALID 12186 4.78 7.37 4.09 61 RCVD_IN_IADB_SPF 12017 3.48 1.41 4.03 62 XMNumbers 11881 4.00 4.05 3.99 63 BAYES_999 11261 7.71 22.48 3.78 64 TR_XM_DK_SendGrid 11256 3.79 3.85 3.78 65 T_REMOTE_IMAGE 11129 4.22 6.05 3.74 66 UNPARSEABLE_RELAY 10812 3.16 1.38 3.63 67 XM_UncommonTLD01 10758 6.87 19.14 3.61 68 RCVD_IN_IADB_SENDERID 10640 3.11 1.38 3.57 69 BAYES_20 10597 3.51 3.33 3.56 70 RCVD_IN_IADB_DK 10336 3.03 1.38 3.47 71 RCVD_IN_MSPIKE_H3 10282 2.95 1.07 3.45 72 XM_DIRTYINTL 9930 4.13 7.15 3.33 73 MIME_HTML_MOSTLY 9786 4.09 7.13 3.29 74 IN_ZIMBRA_NJ_WHITELIST 9643 2.56 0.02 3.24 75 US_DOLLARS_3 9149 3.19 3.64 3.07 76 TVD_RCVD_IP 9039 2.53 0.61 3.03 77 RCVD_IN_IADB_VOUCHED 8795 2.41 0.37 2.95 78 BAYES_80 8219 3.51 6.33 2.76 79 XM_PDF 8100 2.27 0.56 2.72 80 XMBdyGiftCard01 7707 3.13 5.18 2.59 81 URI_HEX 7652 2.95 4.38 2.57 82 CK_HELO_DYNAMIC_SPLIT_IP 7551 2.14 0.65 2.53 83 HELO_DYNAMIC_IPADDR2 7522 2.04 0.21 2.53 84 INVALID_MSGID 7365 2.00 0.24 2.47 85 HTML_MIME_NO_HTML_TAG 7360 2.69 3.51 2.47 86 XM_CamelCaseFrm001 7349 2.60 3.09 2.47 87 HTML_IMAGE_RATIO_08 7343 2.35 1.90 2.46 88 SUBJ_ALL_CAPS 7067 2.34 2.21 2.37 89 T_TooManySym_02 6969 1.96 0.52 2.34 90 XM_B_SpammyTLD 6746 4.75 14.10 2.26 91 TO_MALFORMED 6744 1.82 0.14 2.26 92 XM_B_Unsub2 6692 2.20 2.01 2.25 93 BOTNET 6675 5.22 16.42 2.24 94 TR_DCC_Bayes_99 6662 6.64 23.19 2.24 95 BAYES_05 6451 2.18 2.23 2.17 96 MIME_HTML_ONLY_MULTI 6246 2.74 5.16 2.10 97 RELAYCOUNTRY_CA 6205 2.38 3.51 2.08 98 RCVD_IN_IADB_OPTIN 5603 1.57 0.39 1.88 99 URI_TRY_3LD 5533 1.78 1.49 1.86 100 USER_IN_DEF_DKIM_WL 5219 1.39 0.01 1.75 101 IN_HORDE_ADDRESS_BOOK 4994 1.33 0.03 1.68 102 RCVD_IN_BL_SPAMCOP_NET 4963 2.12 3.81 1.67 103 TooManyTo_002 4844 1.49 0.99 1.63 104 UNTRUSTED_Relay 4827 4.25 14.16 1.62 105 MAILING_LIST_MULTI 4768 1.48 1.02 1.60 106 BAYES_95 4718 2.07 3.89 1.58 107 TR_XM_RelayPhish 4677 1.79 2.64 1.57 108 XMStockSpam_06 4640 1.63 1.90 1.56 109 XM_OfRef6 4352 1.55 1.88 1.46 110 TR_Symld_Words 4319 1.57 2.02 1.45 111 TM2_M_URI_OPT_OUT 4200 1.63 2.46 1.41 112 TM2_M_VERY_LONG_WORD 4084 1.79 3.36 1.37 113 XM_SPF_SoftFail 4006 1.62 2.65 1.34 114 ANY_BOUNCE_MESSAGE 3972 1.12 0.33 1.33 115 BOUNCE_MESSAGE 3969 1.12 0.33 1.33 116 T_XMDrugObfuBody_00 3884 1.35 1.51 1.30 117 T_XMDrugObfuBody_08 3853 1.33 1.46 1.29 118 XM_DK_Undo_01 3733 1.19 0.93 1.25 119 XMHTML_After_End 3661 1.17 0.95 1.23 120 XMDiploma_00 3652 1.55 2.78 1.23 121 NO_DNS_FOR_FROM 3614 1.64 3.24 1.21 122 TooManyTo_003 3479 1.10 0.83 1.17 123 KHOP_HELO_FCRDNS 3418 2.35 6.87 1.15 124 XMGappySubj_01 3312 0.95 0.35 1.11 125 XM_H_Long_From02 3269 1.21 1.65 1.10 126 XM_GoogleGroups 3163 0.93 0.45 1.06 127 XM_B_REG_HTML 3112 0.94 0.56 1.04 128 XM_ProductURIs 3079 1.04 1.07 1.03 129 XMSubMetaI_00 3058 1.10 1.36 1.03 130 XMBody_95 3055 0.85 0.21 1.03 131 SUBJ_DOLLARS 2977 0.96 0.82 1.00 132 XM_UB50 2879 2.16 6.64 0.97 133 XMSexyCombo_01 2806 1.35 2.90 0.94 134 T_XMHurry_00 2767 1.00 1.25 0.93 135 TooManyTo_004 2763 0.88 0.69 0.93 136 DKIM_ADSP_CUSTOM_MED 2759 0.90 0.81 0.93 137 XMPhish11 2611 0.90 1.00 0.88 138 TR_MetaPhish_Combo_01 2462 0.75 0.46 0.83 139 T_MONEY_PERCENT 2446 0.87 1.03 0.82 140 TR_LOTS_OF_MONEY2 2446 0.87 1.03 0.82 141 XMBody_17 2409 1.21 2.73 0.81 142 TM2_M_A_HREF_HREF 2280 0.97 1.76 0.77 143 USER_IN_WHITELIST 2198 0.58 0.00 0.74 144 TooManyTo_005 2179 0.70 0.57 0.73 145 PLING_QUERY 2177 0.81 1.10 0.73 146 RCVD_IN_MSPIKE_H4 2156 0.66 0.42 0.72 147 XMHTMLBadTable_001 2141 0.75 0.88 0.72 148 URI_NOVOWEL 2104 0.67 0.55 0.71 149 HTML_TAG_BALANCE_BODY 2064 0.62 0.34 0.69 150 XMBrknScrpt_02 2036 0.80 1.23 0.68 151 NML_ADSP_CUSTOM_MED 2001 0.68 0.70 0.67 152 DIET_1 1967 1.00 2.30 0.66 153 FORGED_GMAIL_RCVD 1936 0.66 0.72 0.65 154 XMSubMetaSxObfu_03 1892 0.76 1.23 0.64 155 XMPhish30 1830 0.75 1.28 0.61 156 XMGenDplmaNmb 1827 0.91 2.05 0.61 157 TR_XM_PHPDW 1825 0.99 2.39 0.61 158 XM_D_tchamptons_WL 1805 0.48 0.00 0.61 159 TR_XM_PHPForged 1773 0.96 2.34 0.60 160 XMSubMetaSxObfu_02 1757 0.53 0.29 0.59 161 TR_XM_FormFill2 1753 0.95 2.32 0.59 162 XM_H_PHPOS 1744 0.95 2.32 0.59 163 RELAYCOUNTRY_GB 1723 1.19 3.51 0.58 164 XMBSHREFv2 1719 0.53 0.36 0.58 165 XM_H_PHPMailer 1717 0.80 1.66 0.58 166 HTML_FONT_FACE_BAD 1706 0.75 1.42 0.57 167 XM_Body_Obfu01 1693 0.52 0.35 0.57 168 XM_RXBody 1690 0.50 0.26 0.57 169 T_FILL_THIS_FORM_SHORT 1623 0.64 1.01 0.54 170 FILL_THIS_FORM 1616 0.54 0.53 0.54 171 XM_B_COPY_HTML 1603 0.62 0.92 0.54 172 FSL_THIS_IS_ADV 1597 0.53 0.51 0.54 173 DKIM_ADSP_NXDOMAIN 1588 0.93 2.41 0.53 174 T_TooManySym_03 1555 0.44 0.15 0.52 175 XMBody_78 1522 0.49 0.40 0.51 176 XMLngstWrd_00 1449 0.47 0.39 0.49 177 TR_Mismatch_TLD_01 1414 0.50 0.62 0.47 178 T_Symld_Words_02 1400 0.54 0.82 0.47 179 FILL_THIS_FORM_LONG 1386 0.47 0.48 0.47 180 SpammyFromTLD_01 1375 0.64 1.30 0.46 181 TR_LOTS_OF_MONEY3 1366 0.49 0.62 0.46 182 XMLngstWrd_01 1344 0.43 0.37 0.45 183 XMSlimDrugH 1337 0.48 0.61 0.45 184 T_FILL_THIS_FORM_LOAN 1328 0.40 0.25 0.45 185 XM_URI_RBL 1319 0.93 2.76 0.44 186 RDNS_DYNAMIC 1280 0.80 2.21 0.43 187 XMCapTrack 1267 0.38 0.20 0.43 188 HTTPS_HTTP_MISMATCH 1241 0.39 0.28 0.42 189 NUMERIC_HTTP_ADDR 1213 0.43 0.49 0.41 190 HELO_NODOT 1152 0.41 0.48 0.39 191 HELO_NO_DOMAIN 1151 0.40 0.47 0.39 192 RELAYCOUNTRY_AU 1140 0.37 0.34 0.38 193 LOW_PRICE 1113 0.49 0.92 0.37 194 XM_SPF_Unknown 1102 0.36 0.34 0.37 195 FSL_HELO_FAKE 1098 0.29 0.00 0.37 196 XMNoVowels 1077 0.38 0.43 0.36 197 BODY_ENHANCEMENT 1069 0.29 0.03 0.36 198 THIS_AD 1060 0.50 1.03 0.36 199 RELAYCOUNTRY_DE 1045 0.42 0.66 0.35 200 TR_XM_INV_DKIM 1012 0.75 2.28 0.34 ----------------------------------------------------------------------