Email: 679889 Autolearn: 0 AvgScore: 2.05 AvgScanTime: 3.94 sec Spam: 168293 Autolearn: 0 AvgScore: 14.58 AvgScanTime: 4.64 sec Ham: 511596 Autolearn: 0 AvgScore: -2.08 AvgScanTime: 3.71 sec Time Spent Running SA: 744.33 hours Time Spent Processing Spam: 216.82 hours Time Spent Processing Ham: 527.51 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 158216 88.94 94.01 87.26 2 DCC_CHECK 129833 48.63 77.15 39.25 3 XM_B_Unicode 108855 68.14 64.68 69.28 4 DKIM_SIGNED 101701 72.54 60.43 76.53 5 XM_DK_Pass 97692 70.82 58.05 75.02 6 DKIM_VALID 94286 68.20 56.02 72.20 7 MIME_HTML_ONLY 84511 27.73 50.22 20.33 8 XMListUnsubscribeExists 82055 51.36 48.76 52.21 9 DKIM_VALID_AU 73234 51.48 43.52 54.09 10 BAYES_50 72262 51.39 42.94 54.17 11 XM_B_Unicode3 64235 39.89 38.17 40.46 12 FSL_BULK_SIG 53177 12.36 31.60 6.03 13 XM_DK_Undo_02 46528 11.44 27.65 6.11 14 RELAYCOUNTRY_META 45382 11.01 26.97 5.77 15 HTML_FONT_LOW_CONTRAST 44494 26.73 26.44 26.83 16 LOC_TINY_FONT_1 42846 23.90 25.46 23.39 17 XM_UncommonTLD01 40371 8.83 23.99 3.85 18 BOTNET 37643 6.97 22.37 1.90 19 XM_B_Unsub 37560 13.27 22.32 10.30 20 T_TM2_M_HEADER_IN_MSG 36973 29.31 21.97 31.72 21 XMSubLong 36500 22.51 21.69 22.77 22 BAYES_99 35327 7.54 20.99 3.12 23 DCC_CHECK_NEGATIVE 35217 49.21 20.93 58.52 24 XM_Body_Dirty_Words 35047 14.60 20.82 12.56 25 DKIM_VALID_EF 33984 26.43 20.19 28.48 26 FVGT_m_MULTI_ODD 31481 20.98 18.71 21.73 27 MultiRelay 29921 18.93 17.78 19.31 28 XM_Multi_Part_URI 29733 12.99 17.67 11.45 29 BOTNET_IPINHOSTNAME 28267 7.36 16.80 4.26 30 TR_DCC_Bayes_99 27944 5.01 16.60 1.20 31 UNTRUSTED_Relay 27847 5.25 16.55 1.53 32 BAYES_999 27782 5.97 16.51 2.50 33 XMSexyCombo_05 25967 6.66 15.43 3.77 34 FROM_EXCESS_BASE64 24707 6.07 14.68 3.24 35 T_KAM_HTML_FONT_INVALID 24248 17.49 14.41 18.50 36 HTML_SHORT_LINK_IMG_1 23473 3.49 13.95 0.05 37 HTML_IMAGE_RATIO_02 21899 9.06 13.01 7.75 38 SpammyFromTLD_02 21521 3.40 12.79 0.32 39 KHOP_HELO_FCRDNS 20658 5.36 12.28 3.08 40 HTML_MIME_NO_HTML_TAG 19595 4.74 11.64 2.47 41 XM_B_Phish_Phrases 19566 6.98 11.63 5.45 42 XM_SPF_SoftFail 18234 5.02 10.83 3.11 43 LOTS_OF_MONEY 17785 9.68 10.57 9.39 44 RCVD_IN_BL_SPAMCOP_NET 17710 3.61 10.52 1.34 45 RCVD_IN_RP_RNBL 16807 2.56 9.99 0.12 46 RDNS_DYNAMIC 16666 2.70 9.90 0.33 47 T_REMOTE_IMAGE 15817 5.42 9.40 4.11 48 XM_DIRTYINTL 14680 4.13 8.72 2.61 49 XM_Evil_Numbers_Gen 14622 8.75 8.69 8.77 50 XM_UB50 14311 2.78 8.50 0.90 51 TM2_M_URI_OPT_OUT 13447 3.56 7.99 2.10 52 XM_H_Long_From01 12998 6.53 7.72 6.14 53 XMSubMetaSx_00 12604 4.61 7.49 3.66 54 XMNumbers 12221 4.47 7.26 3.55 55 BAYES_60 12109 5.25 7.20 4.61 56 RCVD_IN_MSPIKE_BL 11939 2.74 7.09 1.30 57 BAYES_20 11784 5.33 7.00 4.78 58 XM_B_SpammyTLD 11732 3.19 6.97 1.95 59 FROM_SUSPICIOUS_NTLD 11648 1.73 6.92 0.02 60 FROM_SUSPICIOUS_NTLD_FP 11586 1.72 6.88 0.02 61 HTML_IMAGE_ONLY_12 11147 1.78 6.62 0.19 62 XMBody_78 11076 2.18 6.58 0.73 63 XMHTML_After_End 11033 2.32 6.56 0.93 64 ALL_TRUSTED 10932 11.37 6.50 12.98 65 XMPhish11 10924 2.46 6.49 1.13 66 BAYES_80 10899 3.35 6.48 2.32 67 LotsOfNums_01 10787 7.57 6.41 7.95 68 HTML_IMAGE_ONLY_08 10737 1.66 6.38 0.11 69 REPLYTO_WITHOUT_TO_CC 10328 1.55 6.14 0.04 70 RCVD_IN_MSPIKE_H2 10220 9.81 6.07 11.04 71 MIME_HEADER_CTYPE_ONLY 10070 1.53 5.98 0.07 72 XM_H_PHPMailer 9909 1.81 5.89 0.47 73 MPART_ALT_DIFF 9875 4.96 5.87 4.67 74 BOTNET_NORDNS 9864 1.48 5.86 0.04 75 HDRS_LCASE_IMGONLY 9540 1.41 5.67 0.01 76 TO_EQ_FM_DOM_HTML_IMG 9230 1.37 5.48 0.01 77 BAYES_40 9082 6.00 5.40 6.20 78 AMAZON_IMG_NOT_RCVD_AMZN 9047 1.36 5.38 0.04 79 FROM_NO_USER 8799 1.30 5.23 0.01 80 XM_NotFromAmazon 8795 1.31 5.23 0.02 81 URIBL_RHS_DOB 8787 1.30 5.22 0.01 82 DKIM_ADSP_NXDOMAIN 8570 2.10 5.09 1.11 83 RCVD_IN_MSPIKE_L5 8548 1.44 5.08 0.24 84 RCVD_IN_PSBL 8495 1.28 5.05 0.04 85 HTML_FONT_SIZE_LARGE 8367 1.36 4.97 0.17 86 HTML_IMAGE_RATIO_04 8146 5.96 4.84 6.33 87 TooManyTo_001 8135 7.84 4.83 8.83 88 SpammyFromTLD_01 7733 1.73 4.59 0.79 89 RELAYCOUNTRY_GB 7489 1.99 4.45 1.19 90 DKIM_INVALID 7415 4.35 4.41 4.33 91 PDS_OTHER_BAD_TLD 7229 1.33 4.30 0.36 92 TR_Mismatch_TLD_02 7175 1.14 4.26 0.12 93 RCVD_IN_MSPIKE_H3 7088 9.01 4.21 10.59 94 RCVD_IN_MSPIKE_WL 7088 9.01 4.21 10.59 95 BAYES_00 6677 16.18 3.97 20.20 96 HTML_EXTRA_CLOSE 6617 1.01 3.93 0.05 97 XM_SendGrid 6423 5.38 3.82 5.89 98 MultiRelay_CC 6412 1.10 3.81 0.21 99 MultiRelay_Combo 6412 1.10 3.81 0.21 100 HTML_TAG_BALANCE_CENTER 6408 1.05 3.81 0.15 101 RELAYCOUNTRY_CA 6314 2.19 3.75 1.67 102 RELAYCOUNTRY_FR 6287 1.17 3.74 0.33 103 BODY_URI_ONLY 6269 0.97 3.73 0.07 104 XM_BadFromFormat 6136 0.99 3.65 0.12 105 FROM_MISSP_REPLYTO 6076 0.90 3.61 0.01 106 XM_CamelCaseFrm001 5807 2.49 3.45 2.18 107 SHORT_IMG_SUSP_NTLD 5658 0.83 3.36 0.00 108 MIME_HTML_MOSTLY 5651 2.81 3.36 2.63 109 HDRS_MISSP 5566 0.82 3.31 0.00 110 TO_MALFORMED 5509 1.77 3.27 1.28 111 DIET_1 5429 1.18 3.23 0.51 112 MIME_HTML_ONLY_MULTI 5332 3.04 3.17 2.99 113 MIME_QP_LONG_LINE 5298 5.26 3.15 5.96 114 BAYES_95 5285 1.75 3.14 1.30 115 FROM_MISSP_DYNIP 5086 0.75 3.02 0.00 116 SHORTENER_SHORT_IMG 5083 0.75 3.02 0.00 117 XMStrtUSub 5036 4.02 2.99 4.36 118 XMSexyCombo_01 4887 1.23 2.90 0.68 119 HK_RANDOM_FROM 4517 0.78 2.68 0.15 120 BAYES_05 4322 2.92 2.57 3.04 121 T_TooManySym_01 4190 4.98 2.49 5.80 122 NO_DNS_FOR_FROM 4152 1.73 2.47 1.49 123 BODY_SINGLE_WORD 4060 0.61 2.41 0.01 124 XM_UB99 4030 0.60 2.39 0.00 125 BODY_SINGLE_URI 3998 0.60 2.38 0.01 126 SUBJ_ALL_CAPS 3950 1.94 2.35 1.80 127 HTML_IMAGE_ONLY_04 3897 0.61 2.32 0.05 128 XM_URI_RBL 3865 0.76 2.30 0.26 129 DKIM_ADSP_CUSTOM_MED 3857 1.31 2.29 0.99 130 XM_B_Unsub2 3852 2.59 2.29 2.70 131 RELAYCOUNTRY_CN 3818 0.61 2.27 0.07 132 FROM_NTLD_LINKBAIT 3745 0.55 2.23 0.00 133 HTML_IMAGE_RATIO_06 3722 3.29 2.21 3.64 134 HTML_SHORT_CENTER 3717 0.55 2.21 0.00 135 RELAYCOUNTRY_RU 3713 0.58 2.21 0.04 136 XM_SPF_Unknown 3601 1.07 2.14 0.72 137 TR_XM_DK_SendGrid 3531 2.80 2.10 3.03 138 T_XMDrugObfuBody_14 3530 1.72 2.10 1.60 139 NML_ADSP_CUSTOM_MED 3511 1.07 2.09 0.74 140 T_XMDrugObfuBody_08 3486 1.65 2.07 1.52 141 FORGED_GMAIL_RCVD 3397 0.88 2.02 0.50 142 HTML_IMAGE_RATIO_08 3337 2.45 1.98 2.60 143 T_Symld_Words_02 3309 0.98 1.97 0.66 144 XMSlimDrugH 3308 0.75 1.97 0.35 145 XM_UB999 3290 0.49 1.95 0.00 146 XMSexyCombo_04 3181 0.56 1.89 0.13 147 CHARSET_FARAWAY_HEADER 3153 0.50 1.87 0.05 148 XMDiploma_00 3134 2.00 1.86 2.05 149 XM_OfRef6 3115 1.63 1.85 1.56 150 TR_XM_RelayPhish 3046 1.03 1.81 0.77 151 MIME_CHARSET_FARAWAY 3031 0.55 1.80 0.14 152 DATE_IN_PAST_03_06 2950 0.53 1.75 0.13 153 NORDNS_LOW_CONTRAST 2760 0.41 1.64 0.01 154 UNPARSEABLE_RELAY 2742 1.95 1.63 2.05 155 URI_HEX 2694 1.53 1.60 1.50 156 XM_ProductURIs 2524 0.85 1.50 0.64 157 XMWghtMeta_00 2521 0.39 1.50 0.03 158 XMSubPhish11 2428 0.57 1.44 0.28 159 XMSlimDrugs 2414 0.37 1.43 0.02 160 T_XMDrugObfuBody_00 2396 0.93 1.42 0.76 161 RCVD_IN_MSPIKE_L3 2372 0.89 1.41 0.71 162 TR_XM_PHPDW 2358 0.73 1.40 0.51 163 T_FILL_THIS_FORM_SHORT 2355 1.12 1.40 1.03 164 RCVD_IN_IADB_LISTED 2348 4.27 1.40 5.21 165 T_MONEY_PERCENT 2346 0.99 1.39 0.85 166 TR_LOTS_OF_MONEY2 2346 0.99 1.39 0.85 167 TM2_M_VERY_LONG_WORD 2315 1.22 1.38 1.17 168 TR_Symld_Words 2300 1.58 1.37 1.65 169 TR_XM_PHPForged 2273 0.69 1.35 0.48 170 HK_RANDOM_REPLYTO 2269 0.46 1.35 0.17 171 TR_XM_FormFill2 2255 0.69 1.34 0.48 172 XM_UB60 2255 0.38 1.34 0.07 173 XM_H_PHPOS 2249 0.69 1.34 0.47 174 URI_TRY_3LD 2238 1.28 1.33 1.26 175 FVGT_m_MULTI_ODD_EMAIL 2216 0.35 1.32 0.03 176 XMStockSpam_06 2212 1.20 1.31 1.16 177 URIBL_DBL_SPAM 2211 0.35 1.31 0.03 178 RCVD_IN_IADB_SPF 2187 3.72 1.30 4.52 179 XMMoneyMeta_00 2162 0.67 1.28 0.47 180 MAILING_LIST_MULTI 2161 2.75 1.28 3.23 181 XMSubNoVowel 2157 1.12 1.28 1.06 182 RCVD_IN_IADB_SENDERID 2148 3.26 1.28 3.91 183 RCVD_IN_IADB_DK 2147 3.24 1.28 3.89 184 FSL_THIS_IS_ADV 2097 0.43 1.25 0.16 185 CHARSET_FARAWAY 2040 0.30 1.21 0.00 186 XMGenDplmaNmb 2024 1.28 1.20 1.31 187 XMSubMetaI_00 2022 0.74 1.20 0.58 188 SERGIO_SUBJECT_PORN014 2016 0.30 1.20 0.00 189 TR_XM_DK_Bayes 2012 11.43 1.20 14.79 190 LongTLD 2011 0.41 1.19 0.15 191 INVALID_MSGID 2003 1.42 1.19 1.49 192 XM_B_REG_HTML 1994 0.61 1.18 0.42 193 URIBL_DBL_ABUSE_REDIR 1973 0.30 1.17 0.01 194 RELAYCOUNTRY_DE 1971 0.60 1.17 0.41 195 DATE_IN_PAST_06_12 1925 0.33 1.14 0.06 196 TR_XM_DK_Bayes1 1914 11.02 1.14 14.27 197 HTML_SHORT_LINK_IMG_2 1902 0.31 1.13 0.04 198 XM_H_Long_From02 1843 1.30 1.10 1.37 199 TVD_SPACE_RATIO_MINFP 1833 0.27 1.09 0.00 200 XMBody_17 1760 0.89 1.05 0.84 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 446444 88.94 94.01 87.26 2 DKIM_SIGNED 391524 72.54 60.43 76.53 3 XM_DK_Pass 383785 70.82 58.05 75.02 4 DKIM_VALID 369394 68.20 56.02 72.20 5 XM_B_Unicode 354440 68.14 64.68 69.28 6 DCC_CHECK_NEGATIVE 299373 49.21 20.93 58.52 7 BAYES_50 277131 51.39 42.94 54.17 8 DKIM_VALID_AU 276742 51.48 43.52 54.09 9 XMListUnsubscribeExists 267115 51.36 48.76 52.21 10 XM_B_Unicode3 206987 39.89 38.17 40.46 11 DCC_CHECK 200808 48.63 77.15 39.25 12 T_TM2_M_HEADER_IN_MSG 162302 29.31 21.97 31.72 13 DKIM_VALID_EF 145713 26.43 20.19 28.48 14 HTML_FONT_LOW_CONTRAST 137272 26.73 26.44 26.83 15 LOC_TINY_FONT_1 119656 23.90 25.46 23.39 16 XMSubLong 116514 22.51 21.69 22.77 17 FVGT_m_MULTI_ODD 111152 20.98 18.71 21.73 18 MIME_HTML_ONLY 104013 27.73 50.22 20.33 19 BAYES_00 103349 16.18 3.97 20.20 20 MultiRelay 98805 18.93 17.78 19.31 21 T_KAM_HTML_FONT_INVALID 94642 17.49 14.41 18.50 22 TR_XM_DK_Bayes 75682 11.43 1.20 14.79 23 TR_XM_DK_Bayes1 73002 11.02 1.14 14.27 24 ALL_TRUSTED 66392 11.37 6.50 12.98 25 TR_XM_DK_Bayes2 64645 9.72 0.84 12.64 26 XM_Body_Dirty_Words 64231 14.60 20.82 12.56 27 XM_Multi_Part_URI 58572 12.99 17.67 11.45 28 RCVD_IN_MSPIKE_H2 56464 9.81 6.07 11.04 29 RCVD_IN_MSPIKE_WL 54184 9.01 4.21 10.59 30 RCVD_IN_MSPIKE_H3 54182 9.01 4.21 10.59 31 XM_B_Unsub 52683 13.27 22.32 10.30 32 LOTS_OF_MONEY 48025 9.68 10.57 9.39 33 TooManyTo_001 45196 7.84 4.83 8.83 34 XM_Evil_Numbers_Gen 44880 8.75 8.69 8.77 35 LotsOfNums_01 40688 7.57 6.41 7.95 36 HTML_IMAGE_RATIO_02 39674 9.06 13.01 7.75 37 XM_DKIMWhitelistDomains 37311 5.49 0.01 7.29 38 HTML_IMAGE_RATIO_04 32371 5.96 4.84 6.33 39 BAYES_40 31728 6.00 5.40 6.20 40 XM_H_Long_From01 31415 6.53 7.72 6.14 41 XM_DK_Undo_02 31258 11.44 27.65 6.11 42 FSL_BULK_SIG 30864 12.36 31.60 6.03 43 MIME_QP_LONG_LINE 30476 5.26 3.15 5.96 44 XM_SendGrid 30131 5.38 3.82 5.89 45 T_TooManySym_01 29665 4.98 2.49 5.80 46 RELAYCOUNTRY_META 29504 11.01 26.97 5.77 47 XM_B_Phish_Phrases 27872 6.98 11.63 5.45 48 RCVD_IN_IADB_LISTED 26666 4.27 1.40 5.21 49 BAYES_20 24460 5.33 7.00 4.78 50 MPART_ALT_DIFF 23868 4.96 5.87 4.67 51 BAYES_60 23564 5.25 7.20 4.61 52 XM_PDF 23400 3.58 0.56 4.57 53 RCVD_IN_IADB_SPF 23120 3.72 1.30 4.52 54 XMStrtUSub 22292 4.02 2.99 4.36 55 DKIM_INVALID 22130 4.35 4.41 4.33 56 BOTNET_IPINHOSTNAME 21790 7.36 16.80 4.26 57 T_REMOTE_IMAGE 21015 5.42 9.40 4.11 58 RCVD_IN_IADB_SENDERID 20008 3.26 1.28 3.91 59 RCVD_IN_IADB_DK 19915 3.24 1.28 3.89 60 XM_UncommonTLD01 19690 8.83 23.99 3.85 61 XMSexyCombo_05 19292 6.66 15.43 3.77 62 XMSubMetaSx_00 18717 4.61 7.49 3.66 63 IN_ZIMBRA_NJ_WHITELIST 18685 2.75 0.02 3.65 64 RCVD_IN_RP_SAFE 18668 2.95 0.84 3.65 65 HTML_IMAGE_RATIO_06 18626 3.29 2.21 3.64 66 XMNumbers 18144 4.47 7.26 3.55 67 RCVD_IN_IADB_VOUCHED 17464 2.68 0.43 3.41 68 RCVD_IN_RP_CERTIFIED 17270 2.67 0.53 3.38 69 FROM_EXCESS_BASE64 16584 6.07 14.68 3.24 70 MAILING_LIST_MULTI 16505 2.75 1.28 3.23 71 BAYES_99 15938 7.54 20.99 3.12 72 XM_SPF_SoftFail 15886 5.02 10.83 3.11 73 KHOP_HELO_FCRDNS 15766 5.36 12.28 3.08 74 BAYES_05 15529 2.92 2.57 3.04 75 TR_XM_DK_SendGrid 15478 2.80 2.10 3.03 76 MIME_HTML_ONLY_MULTI 15308 3.04 3.17 2.99 77 TVD_RCVD_IP 14908 2.32 0.52 2.91 78 T_TooManySym_02 14722 2.34 0.70 2.88 79 XM_B_Unsub2 13788 2.59 2.29 2.70 80 MIME_HTML_MOSTLY 13437 2.81 3.36 2.63 81 XM_DIRTYINTL 13369 4.13 8.72 2.61 82 HTML_IMAGE_RATIO_08 13318 2.45 1.98 2.60 83 BAYES_999 12792 5.97 16.51 2.50 84 HTML_MIME_NO_HTML_TAG 12661 4.74 11.64 2.47 85 BAYES_80 11870 3.35 6.48 2.32 86 XM_CamelCaseFrm001 11129 2.49 3.45 2.18 87 TooManyTo_002 10947 1.77 0.67 2.14 88 RCVD_IN_IADB_OPTIN 10791 1.66 0.28 2.11 89 TM2_M_URI_OPT_OUT 10762 3.56 7.99 2.10 90 UNPARSEABLE_RELAY 10501 1.95 1.63 2.05 91 XMDiploma_00 10480 2.00 1.86 2.05 92 ANY_BOUNCE_MESSAGE 10392 1.65 0.47 2.03 93 BOUNCE_MESSAGE 10391 1.65 0.47 2.03 94 XM_B_SpammyTLD 9957 3.19 6.97 1.95 95 BOTNET 9734 6.97 22.37 1.90 96 XM_H_Trusted_IP 9275 1.36 0.00 1.81 97 SUBJ_ALL_CAPS 9209 1.94 2.35 1.80 98 XM_DK_Undo_01 8947 1.52 0.81 1.75 99 RELAYCOUNTRY_CA 8560 2.19 3.75 1.67 100 TR_Symld_Words 8463 1.58 1.37 1.65 101 HELO_NODOT 8407 1.45 0.85 1.64 102 HELO_NO_DOMAIN 8369 1.44 0.84 1.64 103 T_XMDrugObfuBody_14 8190 1.72 2.10 1.60 104 XM_OfRef6 7988 1.63 1.85 1.56 105 UNTRUSTED_Relay 7827 5.25 16.55 1.53 106 T_XMDrugObfuBody_08 7752 1.65 2.07 1.52 107 IN_HORDE_ADDRESS_BOOK 7700 1.14 0.02 1.51 108 URI_HEX 7687 1.53 1.60 1.50 109 NO_DNS_FOR_FROM 7638 1.73 2.47 1.49 110 INVALID_MSGID 7632 1.42 1.19 1.49 111 TooManyTo_003 7201 1.19 0.53 1.41 112 XM_H_Long_From02 7022 1.30 1.10 1.37 113 XM_shorewaves_Whitelist 6991 1.03 0.00 1.37 114 USER_IN_DEF_DKIM_WL 6949 1.03 0.03 1.36 115 RCVD_IN_BL_SPAMCOP_NET 6832 3.61 10.52 1.34 116 XMGenDplmaNmb 6701 1.28 1.20 1.31 117 RCVD_IN_MSPIKE_BL 6658 2.74 7.09 1.30 118 BAYES_95 6644 1.75 3.14 1.30 119 XMCapTrack 6641 1.03 0.23 1.30 120 CK_HELO_DYNAMIC_SPLIT_IP 6597 1.11 0.58 1.29 121 HELO_DYNAMIC_IPADDR2 6595 1.03 0.25 1.29 122 TO_MALFORMED 6556 1.77 3.27 1.28 123 URI_TRY_3LD 6444 1.28 1.33 1.26 124 TR_DCC_Bayes_99 6122 5.01 16.60 1.20 125 RELAYCOUNTRY_GB 6071 1.99 4.45 1.19 126 TM2_M_VERY_LONG_WORD 5964 1.22 1.38 1.17 127 XM_GoogleGroups 5959 0.95 0.32 1.16 128 XMStockSpam_06 5944 1.20 1.31 1.16 129 XMPhish11 5793 2.46 6.49 1.13 130 XMGappySubj_01 5754 0.95 0.40 1.12 131 DKIM_ADSP_NXDOMAIN 5699 2.10 5.09 1.11 132 XMBdyGiftCard01 5545 0.98 0.66 1.08 133 XMSubNoVowel 5440 1.12 1.28 1.06 134 T_FILL_THIS_FORM_SHORT 5291 1.12 1.40 1.03 135 TooManyTo_004 5218 0.88 0.45 1.02 136 TR_MetaPhish_Combo_01 5153 0.97 0.84 1.01 137 DKIM_ADSP_CUSTOM_MED 5041 1.31 2.29 0.99 138 HTML_FONT_FACE_BAD 4778 0.88 0.73 0.93 139 XMHTML_After_End 4742 2.32 6.56 0.93 140 XM_UB50 4584 2.78 8.50 0.90 141 TR_LOTS_OF_MONEY2 4353 0.99 1.39 0.85 142 T_MONEY_PERCENT 4353 0.99 1.39 0.85 143 TooManyTo_005 4301 0.73 0.39 0.84 144 XMBody_17 4286 0.89 1.05 0.84 145 SpammyFromTLD_01 4048 1.73 4.59 0.79 146 XMNoVowels 4003 0.78 0.78 0.78 147 TR_XM_RelayPhish 3961 1.03 1.81 0.77 148 T_XMDrugObfuBody_00 3909 0.93 1.42 0.76 149 AC_FROM_MANY_DOTS 3855 0.57 0.03 0.75 150 T_TooManySym_03 3850 0.62 0.23 0.75 151 NML_ADSP_CUSTOM_MED 3786 1.07 2.09 0.74 152 XMBody_78 3755 2.18 6.58 0.73 153 XM_SPF_Unknown 3668 1.07 2.14 0.72 154 RCVD_IN_MSPIKE_L3 3656 0.89 1.41 0.71 155 XMBody_95 3610 0.55 0.09 0.71 156 HTTPS_HTTP_MISMATCH 3483 0.68 0.69 0.68 157 XMSexyCombo_01 3476 1.23 2.90 0.68 158 FILL_THIS_FORM 3375 0.73 0.96 0.66 159 T_Symld_Words_02 3361 0.98 1.97 0.66 160 HTML_TAG_BALANCE_BODY 3349 0.64 0.60 0.65 161 T_XMHurry_00 3301 0.69 0.81 0.65 162 XM_ProductURIs 3286 0.85 1.50 0.64 163 XMLKML 3266 0.48 0.00 0.64 164 PLING_QUERY 3088 0.56 0.44 0.60 165 XMSubMetaI_00 2985 0.74 1.20 0.58 166 T_OBFU_PDF_ATTACH 2977 0.48 0.16 0.58 167 XM_ShortIntro_01 2958 0.55 0.45 0.58 168 XMBrknScrpt_02 2868 0.59 0.68 0.56 169 FROM_GOV_DKIM_AU 2855 0.46 0.17 0.56 170 AC_DIV_BONANZA 2756 0.44 0.13 0.54 171 RELAYCOUNTRY_AU 2725 0.52 0.49 0.53 172 DIET_1 2608 1.18 3.23 0.51 173 TR_XM_PHPDW 2594 0.73 1.40 0.51 174 FORGED_GMAIL_RCVD 2562 0.88 2.02 0.50 175 FILL_THIS_FORM_LONG 2485 0.59 0.89 0.49 176 USER_IN_WHITELIST 2476 0.36 0.00 0.48 177 XM_Body_Obfu01 2467 0.50 0.57 0.48 178 TR_XM_PHPForged 2442 0.69 1.35 0.48 179 TR_XM_FormFill2 2437 0.69 1.34 0.48 180 XMHTMLBadTable_001 2432 0.50 0.59 0.48 181 TR_LOTS_OF_MONEY3 2426 0.51 0.62 0.47 182 T_FILL_THIS_FORM_LOAN 2420 0.45 0.37 0.47 183 XM_H_PHPOS 2413 0.69 1.34 0.47 184 HTML_IMAGE_ONLY_20 2408 0.46 0.43 0.47 185 XMMoneyMeta_00 2389 0.67 1.28 0.47 186 XM_H_PHPMailer 2388 1.81 5.89 0.47 187 XMSubMetaSxObfu_03 2360 0.56 0.84 0.46 188 SHORT_HELO_AND_INLINE_IMAGE 2324 0.35 0.03 0.45 189 REMOVE_BEFORE_LINK 2309 0.51 0.67 0.45 190 XMPhish30 2298 0.54 0.81 0.45 191 XMSubMetaSxObfu_02 2293 0.41 0.28 0.45 192 TM2_M_A_HREF_HREF 2266 0.55 0.88 0.44 193 MISSING_HEADERS 2238 0.52 0.76 0.44 194 XM_B_REG_HTML 2148 0.61 1.18 0.42 195 HTML_IMAGE_ONLY_28 2130 0.41 0.37 0.42 196 RELAYCOUNTRY_DE 2109 0.60 1.17 0.41 197 FROM_GOV_SPOOF 2091 0.39 0.35 0.41 198 T_TooManySym_04 2074 0.32 0.05 0.41 199 XMDateMe_00 2044 0.38 0.31 0.40 200 XMOemUri 1980 0.34 0.18 0.39 ----------------------------------------------------------------------