Email: 748199 Autolearn: 0 AvgScore: 0.25 AvgScanTime: 2.04 sec Spam: 163564 Autolearn: 0 AvgScore: 14.83 AvgScanTime: 2.53 sec Ham: 584635 Autolearn: 0 AvgScore: -3.83 AvgScanTime: 1.91 sec Time Spent Running SA: 424.41 hours Time Spent Processing Spam: 114.95 hours Time Spent Processing Ham: 309.46 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 149149 88.75 91.19 88.07 2 XM_B_Unicode 111277 66.87 68.03 66.54 3 DCC_CHECK 109632 41.91 67.03 34.88 4 DKIM_SIGNED 88906 65.51 54.36 68.63 5 XM_DK_Pass 86088 64.32 52.63 67.59 6 MIME_HTML_ONLY 82287 30.22 50.31 24.60 7 BAYES_50 81037 50.30 49.54 50.51 8 DKIM_VALID 80512 61.00 49.22 64.29 9 XM_B_Unicode3 75772 41.40 46.33 40.02 10 XMListUnsubscribeExists 69061 43.67 42.22 44.07 11 DKIM_VALID_AU 61198 47.09 37.42 49.80 12 HTML_FONT_LOW_CONTRAST 59464 26.07 36.36 23.19 13 DCC_CHECK_NEGATIVE 50943 56.33 31.15 63.38 14 RELAYCOUNTRY_META 46838 13.05 28.64 8.69 15 XM_DK_Undo_02 41354 9.82 25.28 5.49 16 XM_UncommonTLD01 40311 9.09 24.65 4.74 17 BOTNET 37638 6.35 23.01 1.69 18 FSL_BULK_SIG 37090 9.62 22.68 5.96 19 LOC_TINY_FONT_1 36772 20.54 22.48 20.00 20 XMSubLong 36685 20.56 22.43 20.04 21 UNTRUSTED_Relay 36615 8.95 22.39 5.19 22 XM_B_Unsub 31364 11.30 19.18 9.09 23 DKIM_VALID_EF 31213 25.43 19.08 27.21 24 XM_Body_Dirty_Words 30284 13.02 18.52 11.48 25 BAYES_99 30189 6.31 18.46 2.91 26 BOTNET_IPINHOSTNAME 28960 6.69 17.71 3.61 27 XM_B_Phish_Phrases 28238 7.83 17.26 5.20 28 FVGT_m_MULTI_ODD 27374 17.72 16.74 18.00 29 FROM_EXCESS_BASE64 27373 5.81 16.74 2.75 30 T_TM2_M_HEADER_IN_MSG 27031 23.70 16.53 25.70 31 HTML_MIME_NO_HTML_TAG 26293 8.31 16.08 6.14 32 MultiRelay 24880 15.90 15.21 16.09 33 KHOP_HELO_FCRDNS 23678 4.69 14.48 1.95 34 TR_DCC_Bayes_99 23648 4.21 14.46 1.35 35 BAYES_999 23280 4.92 14.23 2.32 36 T_KAM_HTML_FONT_INVALID 23063 14.72 14.10 14.89 37 TM2_M_URI_OPT_OUT 22429 4.40 13.71 1.79 38 T_REMOTE_IMAGE 21567 6.93 13.19 5.19 39 XMSexyCombo_05 20630 5.43 12.61 3.42 40 HTML_SHORT_LINK_IMG_1 20542 2.78 12.56 0.04 41 ALL_TRUSTED 20333 14.50 12.43 15.08 42 XMHTML_After_End 20306 3.45 12.41 0.94 43 XMPhish11 20191 3.53 12.34 1.06 44 XM_Multi_Part_URI 19857 10.42 12.14 9.93 45 XM_H_PHPMailer 19664 2.99 12.02 0.46 46 LOTS_OF_MONEY 19378 11.11 11.85 10.90 47 XMSubPhish11 18602 2.58 11.37 0.12 48 XMPhish04 18424 2.46 11.26 0.00 49 FROM_SUSPICIOUS_NTLD 17599 2.40 10.76 0.06 50 FROM_SUSPICIOUS_NTLD_FP 17533 2.39 10.72 0.06 51 XM_UB50 17404 5.85 10.64 4.51 52 SpammyFromTLD_02 17101 2.47 10.46 0.24 53 DKIM_ADSP_NXDOMAIN 16535 3.98 10.11 2.26 54 RCVD_IN_BL_SPAMCOP_NET 15502 2.79 9.48 0.92 55 HTML_IMAGE_RATIO_02 15003 7.28 9.17 6.75 56 RDNS_DYNAMIC 14393 2.14 8.80 0.28 57 XM_H_Long_From01 14363 6.02 8.78 5.25 58 BAYES_60 14168 5.28 8.66 4.34 59 HDRS_LCASE_IMGONLY 13969 1.87 8.54 0.01 60 RCVD_IN_RP_RNBL 13648 1.92 8.34 0.12 61 RCVD_IN_MSPIKE_BL 13292 2.57 8.13 1.02 62 XM_Evil_Numbers_Gen 13133 8.82 8.03 9.04 63 RCVD_IN_MSPIKE_H2 12736 9.54 7.79 10.03 64 XM_DIRTYINTL 12594 3.47 7.70 2.29 65 BODY_URI_ONLY 12569 1.73 7.68 0.07 66 RCVD_IN_PSBL 12460 1.67 7.62 0.00 67 BAYES_80 12058 3.17 7.37 2.00 68 XMSubMetaSx_00 12019 4.26 7.35 3.40 69 XM_B_SpammyTLD 11300 2.69 6.91 1.51 70 XM_BadFromFormat 11175 1.57 6.83 0.10 71 XM_SPF_SoftFail 10811 2.81 6.61 1.74 72 HTML_IMAGE_ONLY_08 10561 1.49 6.46 0.11 73 XMNumbers 10326 3.96 6.31 3.30 74 HTML_TAG_BALANCE_CENTER 9574 1.33 5.85 0.06 75 MIME_HEADER_CTYPE_ONLY 9496 1.32 5.81 0.06 76 LotsOfNums_01 8995 6.76 5.50 7.12 77 SHORT_IMG_SUSP_NTLD 8943 1.20 5.47 0.00 78 HDRS_MISSP 8677 1.16 5.30 0.00 79 MPART_ALT_DIFF 8670 7.01 5.30 7.49 80 LongTLD 8606 1.31 5.26 0.20 81 BOTNET_NORDNS 8407 1.15 5.14 0.03 82 DKIM_INVALID 8394 4.51 5.13 4.34 83 TooManyTo_001 8076 6.54 4.94 6.99 84 PDS_OTHER_BAD_TLD 7894 1.37 4.83 0.41 85 TR_Mismatch_TLD_02 7830 1.09 4.79 0.06 86 NO_DNS_FOR_FROM 7144 3.26 4.37 2.95 87 RCVD_IN_MSPIKE_L3 6988 1.44 4.27 0.64 88 HTML_IMAGE_RATIO_08 6831 2.65 4.18 2.22 89 HTML_IMAGE_ONLY_12 6730 1.01 4.11 0.14 90 HTML_IMAGE_RATIO_04 6509 10.61 3.98 12.47 91 BAYES_40 6493 6.36 3.97 7.03 92 RELAYCOUNTRY_FR 6288 1.16 3.84 0.41 93 RELAYCOUNTRY_DE 5895 3.91 3.60 3.99 94 RELAYCOUNTRY_CA 5855 1.95 3.58 1.50 95 SpammyFromTLD_01 5729 1.27 3.50 0.65 96 HTML_FONT_SIZE_LARGE 5711 0.85 3.49 0.11 97 RCVD_IN_MSPIKE_H3 5701 7.25 3.49 8.30 98 RCVD_IN_MSPIKE_WL 5701 7.25 3.49 8.30 99 MultiRelay_Combo 5613 0.90 3.43 0.19 100 MultiRelay_CC 5613 0.90 3.43 0.19 101 FROM_NTLD_LINKBAIT 5593 0.75 3.42 0.00 102 XM_SendGrid 5527 4.57 3.38 4.90 103 BODY_SINGLE_WORD 5521 0.74 3.38 0.01 104 RCVD_IN_MSPIKE_L5 5503 0.85 3.36 0.15 105 BODY_SINGLE_URI 5482 0.74 3.35 0.00 106 HTML_IMAGE_RATIO_06 5387 4.02 3.29 4.23 107 BAYES_20 5321 5.64 3.25 6.31 108 XMMoneyMeta_00 5246 1.05 3.21 0.44 109 BAYES_95 5183 1.63 3.17 1.19 110 BAYES_00 5124 17.60 3.13 21.65 111 MIME_QP_LONG_LINE 4972 4.66 3.04 5.11 112 HTML_IMAGE_ONLY_04 4921 0.69 3.01 0.04 113 MIME_HTML_MOSTLY 4841 2.54 2.96 2.42 114 REPLYTO_WITHOUT_TO_CC 4821 0.70 2.95 0.08 115 HTML_SHORT_CENTER 4730 0.64 2.89 0.01 116 XM_UB60 4718 0.68 2.88 0.06 117 RELAYCOUNTRY_GB 4700 1.39 2.87 0.98 118 XMSexyCombo_01 4547 1.15 2.78 0.70 119 MIME_HTML_ONLY_MULTI 4511 5.07 2.76 5.71 120 XM_B_Unsub2 4396 2.64 2.69 2.63 121 TO_MALFORMED 4290 1.45 2.62 1.13 122 DATE_IN_PAST_03_06 4199 1.16 2.57 0.76 123 XM_URI_RBL 4186 0.75 2.56 0.24 124 NO_FM_NAME_IP_HOSTN 4002 0.54 2.45 0.00 125 XMStrtUSub 3853 7.27 2.36 8.65 126 TO_EQ_FM_DOM_HTML_IMG 3811 0.52 2.33 0.01 127 DATE_IN_PAST_06_12 3772 0.56 2.31 0.07 128 T_XMDrugObfuBody_08 3685 1.61 2.25 1.43 129 TR_XM_RelayPhish 3683 1.10 2.25 0.78 130 T_TooManySym_01 3606 3.61 2.20 4.00 131 BAYES_05 3572 3.47 2.18 3.83 132 XMDiploma_00 3456 1.65 2.11 1.52 133 XM_CamelCaseFrm001 3424 1.84 2.09 1.77 134 FROM_MISSP_REPLYTO 3260 0.44 1.99 0.00 135 URIBL_DBL_ABUSE_REDIR 3247 0.44 1.99 0.01 136 HK_RANDOM_FROM 3181 0.51 1.94 0.11 137 MSGID_FROM_MTA_HEADER 3102 0.57 1.90 0.20 138 XMSubMetaSSx_00 2982 0.52 1.82 0.15 139 DIET_1 2964 0.78 1.81 0.49 140 SUBJ_ALL_CAPS 2946 1.42 1.80 1.31 141 HTML_EXTRA_CLOSE 2928 0.41 1.79 0.02 142 XM_UB80 2924 0.40 1.79 0.01 143 XMSexyCombo_04 2871 0.46 1.76 0.10 144 FROM_MISSP_DYNIP 2824 0.38 1.73 0.00 145 RELAYCOUNTRY_CN 2804 0.40 1.71 0.03 146 XMSlimDrugH 2780 0.61 1.70 0.30 147 FVGT_m_MULTI_ODD_EMAIL 2732 0.38 1.67 0.01 148 TR_XM_DK_SendGrid 2703 2.55 1.65 2.80 149 XM_UB99 2692 0.36 1.65 0.00 150 URI_HEX 2655 1.38 1.62 1.31 151 TR_XM_PHPDW 2629 0.71 1.61 0.46 152 XMPhish14 2609 0.68 1.60 0.42 153 RELAYCOUNTRY_RU 2550 0.35 1.56 0.01 154 XMGenDplmaNmb 2543 1.16 1.55 1.05 155 HTML_FONT_SIZE_HUGE 2520 0.42 1.54 0.10 156 TR_XM_PHPForged 2512 0.67 1.54 0.43 157 TR_XM_FormFill2 2489 0.67 1.52 0.43 158 XM_H_PHPOS 2479 0.66 1.52 0.43 159 T_XMDrugObfuBody_14 2474 1.45 1.51 1.43 160 TR_Symld_Words 2459 1.68 1.50 1.73 161 RCVD_IN_RP_SAFE 2216 6.54 1.35 7.99 162 TooManyTo_002 2215 1.76 1.35 1.88 163 XM_UB999 2165 0.29 1.32 0.00 164 PLING_QUERY 2160 0.57 1.32 0.36 165 RELAYCOUNTRY_IN 2125 0.37 1.30 0.11 166 XMBody_17 2090 0.84 1.28 0.72 167 TR_XM_INV_DKIM 2089 0.36 1.28 0.10 168 XM_OfRef6 2069 1.10 1.26 1.06 169 RCVD_IN_IADB_LISTED 2034 3.52 1.24 4.16 170 T_XMDrugObfuBody_00 2015 0.94 1.23 0.86 171 TM2_M_VERY_LONG_WORD 1989 1.09 1.22 1.06 172 RCVD_IN_IADB_SPF 1899 3.08 1.16 3.62 173 DKIM_ADSP_CUSTOM_MED 1889 0.88 1.15 0.80 174 XMSubMetaI_00 1880 0.63 1.15 0.49 175 TR_LOTS_OF_MONEY2 1876 0.58 1.15 0.42 176 T_MONEY_PERCENT 1876 0.58 1.15 0.42 177 RCVD_IN_IADB_SENDERID 1873 2.69 1.15 3.12 178 RCVD_IN_IADB_DK 1866 2.70 1.14 3.13 179 TooManyTo_003 1853 1.19 1.13 1.21 180 XMStockSpam_06 1816 0.97 1.11 0.93 181 DEAR_FRIEND 1784 0.28 1.09 0.05 182 T_Symld_Words_02 1782 0.59 1.09 0.45 183 XM_DK_Undo_01 1756 1.24 1.07 1.29 184 XMSubMetaSx_01 1706 0.31 1.04 0.11 185 RELAYCOUNTRY_SE 1704 0.24 1.04 0.02 186 XM_Combo_Sbj 1700 0.39 1.04 0.21 187 XMWghtMeta_00 1695 0.25 1.04 0.03 188 RCVD_IN_RP_CERTIFIED 1674 5.89 1.02 7.25 189 RELAYCOUNTRY_FI 1665 0.24 1.02 0.02 190 XMGappySubj_01 1655 1.00 1.01 1.00 191 NORDNS_LOW_CONTRAST 1647 0.22 1.01 0.01 192 TooManyTo_004 1601 0.91 0.98 0.89 193 MAILING_LIST_MULTI 1563 1.88 0.96 2.14 194 XMBdyGiftCard01 1560 0.87 0.95 0.84 195 URI_TRY_3LD 1555 0.90 0.95 0.89 196 DEAR_BENEFICIARY 1554 0.21 0.95 0.00 197 XMBrknScrpt_02 1552 0.94 0.95 0.94 198 NML_ADSP_CUSTOM_MED 1552 0.65 0.95 0.57 199 RELAYCOUNTRY_IT 1541 0.24 0.94 0.04 200 XMSubject_48 1540 0.23 0.94 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 514877 88.75 91.19 88.07 2 DKIM_SIGNED 401247 65.51 54.36 68.63 3 XM_DK_Pass 395158 64.32 52.63 67.59 4 XM_B_Unicode 389023 66.87 68.03 66.54 5 DKIM_VALID 375862 61.00 49.22 64.29 6 DCC_CHECK_NEGATIVE 370548 56.33 31.15 63.38 7 BAYES_50 295317 50.30 49.54 50.51 8 DKIM_VALID_AU 291144 47.09 37.42 49.80 9 XMListUnsubscribeExists 257641 43.67 42.22 44.07 10 XM_B_Unicode3 233980 41.40 46.33 40.02 11 DCC_CHECK 203940 41.91 67.03 34.88 12 DKIM_VALID_EF 159087 25.43 19.08 27.21 13 T_TM2_M_HEADER_IN_MSG 150275 23.70 16.53 25.70 14 MIME_HTML_ONLY 143844 30.22 50.31 24.60 15 HTML_FONT_LOW_CONTRAST 135567 26.07 36.36 23.19 16 BAYES_00 126587 17.60 3.13 21.65 17 XMSubLong 117166 20.56 22.43 20.04 18 LOC_TINY_FONT_1 116920 20.54 22.48 20.00 19 FVGT_m_MULTI_ODD 105223 17.72 16.74 18.00 20 MultiRelay 94075 15.90 15.21 16.09 21 ALL_TRUSTED 88182 14.50 12.43 15.08 22 T_KAM_HTML_FONT_INVALID 87044 14.72 14.10 14.89 23 XM_H_Trusted_IP 75570 10.10 0.00 12.93 24 TR_XM_DK_Bayes 74415 10.13 0.83 12.73 25 HTML_IMAGE_RATIO_04 72886 10.61 3.98 12.47 26 TR_XM_DK_Bayes1 71131 9.66 0.70 12.17 27 XM_Body_Dirty_Words 67118 13.02 18.52 11.48 28 LOTS_OF_MONEY 63710 11.11 11.85 10.90 29 TR_XM_DK_Bayes2 62892 8.53 0.59 10.76 30 RCVD_IN_MSPIKE_H2 58661 9.54 7.79 10.03 31 XM_Multi_Part_URI 58082 10.42 12.14 9.93 32 HTML_FONT_FACE_BAD 55289 7.52 0.59 9.46 33 XM_B_Unsub 53148 11.30 19.18 9.09 34 XM_Evil_Numbers_Gen 52825 8.82 8.03 9.04 35 RELAYCOUNTRY_META 50781 13.05 28.64 8.69 36 XMStrtUSub 50574 7.27 2.36 8.65 37 RCVD_IN_MSPIKE_WL 48531 7.25 3.49 8.30 38 RCVD_IN_MSPIKE_H3 48530 7.25 3.49 8.30 39 RCVD_IN_RP_SAFE 46741 6.54 1.35 7.99 40 ANY_BOUNCE_MESSAGE 46190 6.31 0.62 7.90 41 BOUNCE_MESSAGE 46181 6.31 0.61 7.90 42 MPART_ALT_DIFF 43794 7.01 5.30 7.49 43 RCVD_IN_RP_CERTIFIED 42378 5.89 1.02 7.25 44 LotsOfNums_01 41614 6.76 5.50 7.12 45 BAYES_40 41103 6.36 3.97 7.03 46 TooManyTo_001 40868 6.54 4.94 6.99 47 HTML_IMAGE_RATIO_02 39478 7.28 9.17 6.75 48 BAYES_20 36882 5.64 3.25 6.31 49 HTML_MIME_NO_HTML_TAG 35869 8.31 16.08 6.14 50 FSL_BULK_SIG 34868 9.62 22.68 5.96 51 XM_DKIMWhitelistDomains 33488 4.48 0.04 5.73 52 MIME_HTML_ONLY_MULTI 33406 5.07 2.76 5.71 53 XM_DK_Undo_02 32124 9.82 25.28 5.49 54 XM_H_Long_From01 30673 6.02 8.78 5.25 55 XM_B_Phish_Phrases 30377 7.83 17.26 5.20 56 UNTRUSTED_Relay 30323 8.95 22.39 5.19 57 T_REMOTE_IMAGE 30318 6.93 13.19 5.19 58 MIME_QP_LONG_LINE 29865 4.66 3.04 5.11 59 XM_SendGrid 28670 4.57 3.38 4.90 60 IN_ZIMBRA_NJ_WHITELIST 28073 3.76 0.02 4.80 61 XM_UncommonTLD01 27709 9.09 24.65 4.74 62 XM_PDF 26594 3.69 0.64 4.55 63 XM_UB50 26370 5.85 10.64 4.51 64 TR_MetaPhish_Combo_01 25853 3.56 0.49 4.42 65 DKIM_INVALID 25385 4.51 5.13 4.34 66 BAYES_60 25371 5.28 8.66 4.34 67 HTML_IMAGE_RATIO_06 24723 4.02 3.29 4.23 68 RCVD_IN_IADB_LISTED 24331 3.52 1.24 4.16 69 T_TooManySym_01 23394 3.61 2.20 4.00 70 RELAYCOUNTRY_DE 23349 3.91 3.60 3.99 71 BAYES_05 22381 3.47 2.18 3.83 72 XMBounce_01 22022 3.00 0.24 3.77 73 XM_D_omniadmin_Whitelist 21892 2.93 0.00 3.74 74 XM_D_omniadmin_Whitelist2 21747 2.91 0.00 3.72 75 RCVD_IN_IADB_SPF 21142 3.08 1.16 3.62 76 BOTNET_IPINHOSTNAME 21129 6.69 17.71 3.61 77 XMSexyCombo_05 20007 5.43 12.61 3.42 78 XMSubMetaSx_00 19891 4.26 7.35 3.40 79 XMNumbers 19315 3.96 6.31 3.30 80 XMSubNoVowel 19278 2.71 0.61 3.30 81 RCVD_IN_IADB_DK 18310 2.70 1.14 3.13 82 RCVD_IN_IADB_SENDERID 18263 2.69 1.15 3.12 83 NO_DNS_FOR_FROM 17253 3.26 4.37 2.95 84 BAYES_99 16994 6.31 18.46 2.91 85 TR_XM_DK_SendGrid 16379 2.55 1.65 2.80 86 FROM_EXCESS_BASE64 16091 5.81 16.74 2.75 87 RCVD_IN_IADB_VOUCHED 15415 2.13 0.31 2.64 88 XM_B_Unsub2 15357 2.64 2.69 2.63 89 MIME_HTML_MOSTLY 14159 2.54 2.96 2.42 90 BAYES_999 13539 4.92 14.23 2.32 91 XM_DIRTYINTL 13363 3.47 7.70 2.29 92 DKIM_ADSP_NXDOMAIN 13218 3.98 10.11 2.26 93 HTML_IMAGE_RATIO_08 12963 2.65 4.18 2.22 94 MAILING_LIST_MULTI 12515 1.88 0.96 2.14 95 BAYES_80 11687 3.17 7.37 2.00 96 T_TooManySym_02 11558 1.68 0.64 1.98 97 AC_FROM_MANY_DOTS 11443 1.53 0.02 1.96 98 KHOP_HELO_FCRDNS 11416 4.69 14.48 1.95 99 TooManyTo_002 10984 1.76 1.35 1.88 100 UNPARSEABLE_RELAY 10710 1.61 0.83 1.83 101 TM2_M_URI_OPT_OUT 10471 4.40 13.71 1.79 102 XM_CamelCaseFrm001 10360 1.84 2.09 1.77 103 XM_SPF_SoftFail 10185 2.81 6.61 1.74 104 TR_Symld_Words 10122 1.68 1.50 1.73 105 BOTNET 9886 6.35 23.01 1.69 106 TVD_RCVD_IP 9336 1.36 0.53 1.60 107 RCVD_IN_IADB_OPTIN 9290 1.29 0.23 1.59 108 XMDiploma_00 8875 1.65 2.11 1.52 109 XM_B_SpammyTLD 8837 2.69 6.91 1.51 110 HELO_NODOT 8780 1.29 0.51 1.50 111 RELAYCOUNTRY_CA 8768 1.95 3.58 1.50 112 HELO_NO_DOMAIN 8734 1.28 0.50 1.49 113 T_XMDrugObfuBody_08 8386 1.61 2.25 1.43 114 T_XMDrugObfuBody_14 8381 1.45 1.51 1.43 115 TR_DCC_Bayes_99 7866 4.21 14.46 1.35 116 INVALID_MSGID 7708 1.12 0.42 1.32 117 SUBJ_ALL_CAPS 7669 1.42 1.80 1.31 118 IN_HORDE_ADDRESS_BOOK 7662 1.04 0.09 1.31 119 URI_HEX 7645 1.38 1.62 1.31 120 XM_DK_Undo_01 7559 1.24 1.07 1.29 121 TooManyTo_003 7073 1.19 1.13 1.21 122 BAYES_95 6986 1.63 3.17 1.19 123 XMSubGarbage 6951 0.94 0.07 1.19 124 XMCapTrack 6811 0.97 0.28 1.17 125 XMSubLongNoVowel 6798 0.94 0.15 1.16 126 TO_MALFORMED 6590 1.45 2.62 1.13 127 CK_HELO_DYNAMIC_SPLIT_IP 6302 0.89 0.21 1.08 128 HELO_DYNAMIC_IPADDR2 6297 0.86 0.10 1.08 129 XMPhish11 6212 3.53 12.34 1.06 130 TM2_M_VERY_LONG_WORD 6194 1.09 1.22 1.06 131 XM_OfRef6 6189 1.10 1.26 1.06 132 XMGenDplmaNmb 6132 1.16 1.55 1.05 133 RCVD_IN_MSPIKE_BL 5964 2.57 8.13 1.02 134 XMGappySubj_01 5859 1.00 1.01 1.00 135 XM_H_Long_From02 5798 0.94 0.77 0.99 136 RELAYCOUNTRY_GB 5728 1.39 2.87 0.98 137 XM_GoogleGroups 5562 0.81 0.31 0.95 138 USER_IN_DEF_DKIM_WL 5555 0.74 0.01 0.95 139 XMHTML_After_End 5511 3.45 12.41 0.94 140 XMBrknScrpt_02 5476 0.94 0.95 0.94 141 XMStockSpam_06 5463 0.97 1.11 0.93 142 RCVD_IN_BL_SPAMCOP_NET 5391 2.79 9.48 0.92 143 XM_ProductURIs 5306 0.87 0.72 0.91 144 XM_E_Blogspot 5299 0.72 0.05 0.91 145 TooManyTo_004 5224 0.91 0.98 0.89 146 URI_TRY_3LD 5186 0.90 0.95 0.89 147 T_XMDrugObfuBody_00 5004 0.94 1.23 0.86 148 T_FILL_THIS_FORM_SHORT 4970 0.80 0.60 0.85 149 XMBdyGiftCard01 4928 0.87 0.95 0.84 150 DKIM_ADSP_CUSTOM_MED 4688 0.88 1.15 0.80 151 TR_XM_RelayPhish 4545 1.10 2.25 0.78 152 DATE_IN_PAST_03_06 4445 1.16 2.57 0.76 153 TooManyTo_005 4210 0.75 0.83 0.72 154 XMBody_17 4201 0.84 1.28 0.72 155 T_OBFU_PDF_ATTACH 4090 0.58 0.16 0.70 156 XMSexyCombo_01 4074 1.15 2.78 0.70 157 XMNoVowels 4015 0.67 0.61 0.69 158 SpammyFromTLD_01 3783 1.27 3.50 0.65 159 RCVD_IN_MSPIKE_L3 3749 1.44 4.27 0.64 160 XM_SPF_Unknown 3708 0.66 0.73 0.63 161 XMBody_95 3663 0.51 0.08 0.63 162 NML_ADSP_CUSTOM_MED 3314 0.65 0.95 0.57 163 XM_B_REG_HTML 3070 0.47 0.25 0.53 164 XMSubMetaSxObfu_03 3063 0.60 0.86 0.52 165 XM_RXBody 3063 0.45 0.21 0.52 166 HTTPS_HTTP_MISMATCH 3049 0.52 0.50 0.52 167 XMSubMetaI_00 2849 0.63 1.15 0.49 168 DIET_1 2848 0.78 1.81 0.49 169 XM_ShortIntro_01 2802 0.49 0.53 0.48 170 T_TooManySym_03 2773 0.43 0.27 0.47 171 HTML_TAG_BALANCE_BODY 2749 0.45 0.39 0.47 172 XM_H_PHPMailer 2679 2.99 12.02 0.46 173 TR_XM_PHPDW 2671 0.71 1.61 0.46 174 T_Symld_Words_02 2631 0.59 1.09 0.45 175 XMMoneyMeta_00 2597 1.05 3.21 0.44 176 TR_XM_PHPForged 2533 0.67 1.54 0.43 177 TR_XM_FormFill2 2517 0.67 1.52 0.43 178 FILL_THIS_FORM 2510 0.40 0.29 0.43 179 XM_H_PHPOS 2490 0.66 1.52 0.43 180 HTML_IMAGE_ONLY_24 2477 0.39 0.27 0.42 181 T_XMHurry_00 2464 0.50 0.76 0.42 182 T_MONEY_PERCENT 2462 0.58 1.15 0.42 183 TR_LOTS_OF_MONEY2 2462 0.58 1.15 0.42 184 FROM_GOV_DKIM_AU 2458 0.41 0.36 0.42 185 XMPhish14 2456 0.68 1.60 0.42 186 AC_DIV_BONANZA 2454 0.35 0.09 0.42 187 MISSING_HEADERS 2423 0.51 0.84 0.41 188 RELAYCOUNTRY_FR 2417 1.16 3.84 0.41 189 USER_IN_WHITELIST 2408 0.32 0.00 0.41 190 XMBody_78 2405 0.44 0.56 0.41 191 SUBJ_DOLLARS 2382 0.38 0.26 0.41 192 PDS_OTHER_BAD_TLD 2375 1.37 4.83 0.41 193 FORGED_GMAIL_RCVD 2353 0.52 0.94 0.40 194 SHORT_HELO_AND_INLINE_IMAGE 2324 0.32 0.04 0.40 195 XMPhish30 2297 0.45 0.66 0.39 196 XMHTMLBadTable_001 2282 0.39 0.38 0.39 197 HTML_IMAGE_ONLY_20 2257 0.42 0.55 0.39 198 TM2_M_A_HREF_HREF 2230 0.41 0.52 0.38 199 TR_LOTS_OF_MONEY3 2161 0.47 0.83 0.37 200 RELAYCOUNTRY_AU 2138 0.36 0.36 0.37 ----------------------------------------------------------------------