Email: 657587 Autolearn: 0 AvgScore: 0.47 AvgScanTime: 1.98 sec Spam: 103947 Autolearn: 0 AvgScore: 11.87 AvgScanTime: 3.97 sec Ham: 553640 Autolearn: 0 AvgScore: -1.68 AvgScanTime: 1.61 sec Time Spent Running SA: 362.52 hours Time Spent Processing Spam: 114.63 hours Time Spent Processing Ham: 247.89 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 99283 84.26 95.51 82.14 2 DKIM_SIGNED 82920 70.52 79.77 68.79 3 XM_DK_Pass 80250 69.11 77.20 67.59 4 DCC_CHECK 79877 43.03 76.84 36.68 5 XM_B_Unicode 76811 66.56 73.89 65.18 6 XMListUnsubscribeExists 68915 50.05 66.30 46.99 7 DKIM_VALID 68162 64.13 65.57 63.86 8 BAYES_50 50557 47.68 48.64 47.50 9 DKIM_VALID_AU 49700 47.86 47.81 47.87 10 XM_B_Unicode3 47356 40.39 45.56 39.42 11 MIME_HTML_ONLY 38497 24.04 37.04 21.60 12 XM_DK_Undo_02 37983 11.30 36.54 6.56 13 LOC_TINY_FONT_1 34812 23.43 33.49 21.55 14 HTML_FONT_LOW_CONTRAST 34768 26.77 33.45 25.51 15 XMSubLong 28405 20.26 27.33 18.94 16 FVGT_m_MULTI_ODD 27946 19.82 26.88 18.49 17 DKIM_VALID_EF 27117 24.80 26.09 24.55 18 RELAYCOUNTRY_META 25120 8.19 24.17 5.19 19 BOTNET 24510 5.94 23.58 2.62 20 XM_Body_Dirty_Words 23776 14.04 22.87 12.39 21 T_KAM_HTML_FONT_INVALID 23539 17.50 22.65 16.53 22 DCC_CHECK_NEGATIVE 22044 55.17 21.21 61.55 23 MultiRelay 21989 17.31 21.15 16.59 24 BAYES_99 21878 5.91 21.05 3.07 25 T_TM2_M_HEADER_IN_MSG 21317 26.31 20.51 27.40 26 XM_Multi_Part_URI 19766 14.10 19.02 13.18 27 XM_B_Unsub 17911 11.81 17.23 10.79 28 BAYES_999 16730 4.66 16.09 2.51 29 XM_UncommonTLD01 16600 4.76 15.97 2.65 30 HTML_IMAGE_RATIO_02 16479 8.61 15.85 7.25 31 TR_DCC_Bayes_99 15940 3.82 15.33 1.66 32 LOTS_OF_MONEY 15700 10.25 15.10 9.34 33 FSL_BULK_SIG 15686 7.42 15.09 5.98 34 BOTNET_IPINHOSTNAME 14969 5.71 14.40 4.08 35 UNTRUSTED_Relay 14891 3.36 14.33 1.31 36 DKIM_INVALID 14758 6.39 14.20 4.93 37 XMSexyCombo_05 14498 5.54 13.95 3.96 38 NO_DNS_FOR_FROM 11394 4.06 10.96 2.77 39 XM_Evil_Numbers_Gen 11245 8.30 10.82 7.83 40 XMSubMetaSx_00 9818 4.95 9.45 4.11 41 RCVD_IN_MSPIKE_H2 9818 10.41 9.45 10.60 42 XM_B_Phish_Phrases 8581 6.38 8.26 6.02 43 LotsOfNums_01 8382 7.25 8.06 7.09 44 XM_UB50 8375 1.86 8.06 0.69 45 XM_H_Long_From01 8222 5.90 7.91 5.52 46 MPART_ALT_DIFF 8122 6.13 7.81 5.82 47 BAYES_60 8060 4.59 7.75 4.00 48 BAYES_80 8049 2.87 7.74 1.96 49 XM_DIRTYINTL 7888 3.45 7.59 2.67 50 MIME_HTML_MOSTLY 6414 3.12 6.17 2.55 51 HTML_IMAGE_RATIO_04 5984 5.84 5.76 5.86 52 TooManyTo_001 5949 7.16 5.72 7.43 53 RELAYCOUNTRY_CA 5889 2.25 5.67 1.61 54 T_REMOTE_IMAGE 5872 3.59 5.65 3.20 55 HTML_MIME_NO_HTML_TAG 5777 2.68 5.56 2.14 56 SpammyFromTLD_02 5666 1.15 5.45 0.34 57 XM_SendGrid 5501 5.36 5.29 5.38 58 XMNumbers 5083 3.43 4.89 3.15 59 XMStrtUSub 5040 4.19 4.85 4.06 60 RCVD_IN_BL_SPAMCOP_NET 4907 1.58 4.72 0.99 61 XM_B_SpammyTLD 4871 2.93 4.69 2.60 62 FROM_EXCESS_BASE64 4720 3.00 4.54 2.71 63 MIME_QP_LONG_LINE 4691 4.88 4.51 4.95 64 SpammyFromTLD_01 4668 1.18 4.49 0.56 65 TM2_M_URI_OPT_OUT 4660 10.17 4.48 11.23 66 XM_SPF_SoftFail 4631 1.98 4.46 1.52 67 RCVD_IN_MSPIKE_WL 4353 7.79 4.19 8.47 68 RCVD_IN_MSPIKE_H3 4353 7.79 4.19 8.47 69 KHOP_HELO_FCRDNS 4250 1.99 4.09 1.59 70 RELAYCOUNTRY_FR 4223 0.85 4.06 0.25 71 RCVD_IN_MSPIKE_BL 4097 1.44 3.94 0.97 72 MIME_HTML_ONLY_MULTI 4044 4.01 3.89 4.04 73 XM_OfRef6 3905 1.86 3.76 1.51 74 DATE_IN_PAST_03_06 3878 0.68 3.73 0.11 75 XMHTML_After_End 3772 1.44 3.63 1.02 76 PDS_OTHER_BAD_TLD 3732 0.94 3.59 0.45 77 XMDiploma_00 3622 2.10 3.48 1.84 78 HTML_SHORT_LINK_IMG_1 3609 0.56 3.47 0.01 79 TR_Mismatch_TLD_02 3569 0.60 3.43 0.07 80 BAYES_40 3565 5.47 3.43 5.85 81 XM_CamelCaseFrm001 3536 2.32 3.40 2.12 82 XM_URI_RBL 3532 0.74 3.40 0.24 83 FROM_SUSPICIOUS_NTLD 3531 0.58 3.40 0.05 84 FROM_SUSPICIOUS_NTLD_FP 3510 0.57 3.38 0.05 85 XM_B_Unsub2 3493 2.82 3.36 2.72 86 BAYES_95 3454 1.52 3.32 1.18 87 BAYES_00 3385 23.79 3.26 27.64 88 HTML_IMAGE_RATIO_06 3317 4.09 3.19 4.26 89 MultiRelay_CC 3298 0.64 3.17 0.16 90 MultiRelay_Combo 3298 0.64 3.17 0.16 91 RDNS_DYNAMIC 3145 0.72 3.03 0.29 92 XMSexyCombo_01 3138 1.38 3.02 1.07 93 LongTLD 3079 0.60 2.96 0.16 94 T_XMDrugObfuBody_08 2933 1.49 2.82 1.23 95 T_TooManySym_01 2931 4.15 2.82 4.40 96 BAYES_20 2916 4.52 2.81 4.84 97 RCVD_IN_RP_RNBL 2852 0.50 2.74 0.08 98 BODY_URI_ONLY 2749 0.49 2.64 0.08 99 BOTNET_NORDNS 2738 0.45 2.63 0.04 100 HTML_IMAGE_RATIO_08 2675 2.36 2.57 2.32 101 HDRS_LCASE_IMGONLY 2655 0.42 2.55 0.02 102 URI_HEX 2604 1.41 2.51 1.20 103 T_XMDrugObfuBody_14 2603 1.78 2.50 1.64 104 HTML_TAG_BALANCE_CENTER 2544 0.47 2.45 0.09 105 TR_XM_DK_Bayes 2539 12.95 2.44 14.93 106 RELAYCOUNTRY_DE 2523 0.65 2.43 0.31 107 TR_XM_RelayPhish 2481 1.19 2.39 0.97 108 T_FILL_THIS_FORM_SHORT 2401 1.79 2.31 1.70 109 RELAYCOUNTRY_GB 2372 1.48 2.28 1.33 110 TR_XM_INV_DKIM 2284 0.46 2.20 0.13 111 TR_XM_PHPDW 2270 1.44 2.18 1.31 112 TR_XM_PHPForged 2222 1.42 2.14 1.28 113 XMStockSpam_06 2213 1.26 2.13 1.09 114 RCVD_IN_RP_SAFE 2202 7.55 2.12 8.57 115 TR_XM_FormFill2 2193 1.41 2.11 1.28 116 XM_H_PHPOS 2184 1.41 2.10 1.28 117 ALL_TRUSTED 2164 18.14 2.08 21.15 118 HTML_IMAGE_ONLY_08 2148 0.42 2.07 0.11 119 TM2_M_VERY_LONG_WORD 2142 1.29 2.06 1.15 120 XMBody_17 2124 0.88 2.04 0.66 121 XMBdyGiftCard01 2099 1.31 2.02 1.17 122 HTML_IMAGE_ONLY_12 2082 0.43 2.00 0.14 123 RCVD_IN_MSPIKE_L3 2044 0.70 1.97 0.46 124 XM_BadFromFormat 2024 0.40 1.95 0.11 125 RCVD_IN_RP_CERTIFIED 1982 6.96 1.91 7.91 126 RELAYCOUNTRY_IN 1925 0.38 1.85 0.11 127 TR_XM_DK_SendGrid 1913 2.73 1.84 2.90 128 XMGenDplmaNmb 1912 1.24 1.84 1.12 129 TR_Symld_Words 1898 1.60 1.83 1.56 130 SUBJ_ALL_CAPS 1864 1.54 1.79 1.49 131 DIET_1 1855 0.60 1.78 0.38 132 URI_TRY_3LD 1817 1.17 1.75 1.06 133 FSL_THIS_IS_ADV 1810 0.40 1.74 0.15 134 REPLYTO_WITHOUT_TO_CC 1743 0.29 1.68 0.03 135 BAYES_05 1734 3.48 1.67 3.81 136 TR_XM_DK_Bayes1 1726 12.07 1.66 14.02 137 RCVD_IN_IADB_LISTED 1713 4.12 1.65 4.58 138 TR_Mismatch_TLD_01 1702 0.44 1.64 0.22 139 T_XMDrugObfuBody_00 1655 0.93 1.59 0.81 140 NUMERIC_HTTP_ADDR 1644 0.49 1.58 0.28 141 XMPhish11 1639 1.15 1.58 1.07 142 XMPhish08 1636 0.50 1.57 0.29 143 XM_UB60 1587 0.28 1.53 0.05 144 RCVD_IN_IADB_SPF 1563 3.55 1.50 3.93 145 URI_NO_WWW_INFO_CGI 1554 0.25 1.49 0.02 146 TR_LOTS_OF_MONEY3 1545 0.57 1.49 0.40 147 DKIM_ADSP_NXDOMAIN 1533 0.47 1.47 0.28 148 RCVD_IN_IADB_SENDERID 1510 3.10 1.45 3.41 149 RCVD_IN_MSPIKE_L5 1500 0.40 1.44 0.21 150 MAILING_LIST_MULTI 1497 1.83 1.44 1.91 151 XMSubject_48 1495 0.24 1.44 0.02 152 TR_XM_DK_Bayes2 1493 10.57 1.44 12.29 153 RCVD_IN_IADB_DK 1485 3.04 1.43 3.34 154 RELAYCOUNTRY_IE 1481 0.35 1.42 0.15 155 XM_H_PHPMailer 1437 0.58 1.38 0.43 156 URIBL_CSS 1434 0.31 1.38 0.11 157 URIBL_CSS_A 1434 0.31 1.38 0.11 158 URIBL_SBL_A 1426 0.48 1.37 0.31 159 MIME_HEADER_CTYPE_ONLY 1407 1.06 1.35 1.00 160 T_XMHurry_00 1363 0.65 1.31 0.52 161 REMOVE_BEFORE_LINK 1361 0.68 1.31 0.56 162 DATE_IN_PAST_06_12 1351 0.24 1.30 0.04 163 XMSubMetaI_00 1315 0.75 1.27 0.65 164 NORDNS_LOW_CONTRAST 1315 0.20 1.27 0.00 165 TO_EQ_FM_DOM_HTML_IMG 1309 0.20 1.26 0.00 166 XM_DK_Undo_01 1288 1.39 1.24 1.42 167 XMPhish14 1271 0.75 1.22 0.66 168 XM_UB99 1266 0.20 1.22 0.01 169 RCVD_IN_PSBL 1230 0.21 1.18 0.03 170 DKIM_ADSP_CUSTOM_MED 1228 1.12 1.18 1.10 171 URIBL_DBL_ABUSE_REDIR 1190 0.19 1.14 0.01 172 XMSubMetaSSx_00 1171 0.36 1.13 0.22 173 XM_H_PHPOS_M 1167 0.30 1.12 0.14 174 XMSexyCombo_04 1159 0.65 1.11 0.57 175 TM2_M_A_HREF_HREF 1158 0.70 1.11 0.62 176 XMSubMetaSxObfu_03 1141 0.54 1.10 0.43 177 XM_H_Long_From02 1135 1.04 1.09 1.03 178 LOW_PRICE 1107 0.31 1.06 0.17 179 THIS_AD 1098 0.37 1.06 0.24 180 PLING_QUERY 1090 0.67 1.05 0.60 181 RELAYCOUNTRY_AT 1086 0.30 1.04 0.16 182 HK_RANDOM_REPLYTO 1082 0.31 1.04 0.18 183 XM_ProductURIs 1073 0.60 1.03 0.52 184 ADMITS_SPAM 1047 0.19 1.01 0.03 185 XM_Nigeria_01 1046 0.18 1.01 0.02 186 FORGED_GMAIL_RCVD 1037 0.63 1.00 0.56 187 NML_ADSP_CUSTOM_MED 1019 0.85 0.98 0.82 188 XM_Lotto 1005 0.20 0.97 0.06 189 XMMoneyMeta_00 1001 0.54 0.96 0.46 190 URIBL_DBL_SPAM 992 0.16 0.95 0.01 191 XMPhish30 990 0.82 0.95 0.80 192 XMHTMLBadTable_001 987 0.56 0.95 0.49 193 T_Symld_Words_02 969 0.60 0.93 0.54 194 T_MONEY_PERCENT 967 0.61 0.93 0.55 195 TR_LOTS_OF_MONEY2 967 0.61 0.93 0.55 196 XM_UB80 965 0.16 0.93 0.01 197 XMBody_78 961 0.44 0.92 0.34 198 TooManyTo_002 955 1.86 0.92 2.03 199 XMBrknScrpt_02 952 0.67 0.92 0.62 200 XM_B_COPY_HTML 946 0.51 0.91 0.43 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 454783 84.26 95.51 82.14 2 DKIM_SIGNED 380837 70.52 79.77 68.79 3 XM_DK_Pass 374232 69.11 77.20 67.59 4 XM_B_Unicode 360852 66.56 73.89 65.18 5 DKIM_VALID 353551 64.13 65.57 63.86 6 DCC_CHECK_NEGATIVE 340777 55.17 21.21 61.55 7 DKIM_VALID_AU 265034 47.86 47.81 47.87 8 BAYES_50 262968 47.68 48.64 47.50 9 XMListUnsubscribeExists 260177 50.05 66.30 46.99 10 XM_B_Unicode3 218256 40.39 45.56 39.42 11 DCC_CHECK 203094 43.03 76.84 36.68 12 BAYES_00 153037 23.79 3.26 27.64 13 T_TM2_M_HEADER_IN_MSG 151684 26.31 20.51 27.40 14 HTML_FONT_LOW_CONTRAST 141240 26.77 33.45 25.51 15 DKIM_VALID_EF 135937 24.80 26.09 24.55 16 MIME_HTML_ONLY 119566 24.04 37.04 21.60 17 LOC_TINY_FONT_1 119292 23.43 33.49 21.55 18 ALL_TRUSTED 117090 18.14 2.08 21.15 19 XMSubLong 104846 20.26 27.33 18.94 20 FVGT_m_MULTI_ODD 102387 19.82 26.88 18.49 21 MultiRelay 91864 17.31 21.15 16.59 22 T_KAM_HTML_FONT_INVALID 91506 17.50 22.65 16.53 23 TR_XM_DK_Bayes 82637 12.95 2.44 14.93 24 TR_XM_DK_Bayes1 77646 12.07 1.66 14.02 25 XM_Multi_Part_URI 72957 14.10 19.02 13.18 26 XM_Body_Dirty_Words 68579 14.04 22.87 12.39 27 TR_XM_DK_Bayes2 68025 10.57 1.44 12.29 28 TM2_M_URI_OPT_OUT 62199 10.17 4.48 11.23 29 XM_B_Unsub 59754 11.81 17.23 10.79 30 RCVD_IN_MSPIKE_H2 58662 10.41 9.45 10.60 31 ANY_BOUNCE_MESSAGE 55995 8.60 0.54 10.11 32 BOUNCE_MESSAGE 55995 8.60 0.54 10.11 33 LOTS_OF_MONEY 51695 10.25 15.10 9.34 34 RCVD_IN_RP_SAFE 47451 7.55 2.12 8.57 35 RCVD_IN_MSPIKE_H3 46885 7.79 4.19 8.47 36 RCVD_IN_MSPIKE_WL 46885 7.79 4.19 8.47 37 RCVD_IN_RP_CERTIFIED 43808 6.96 1.91 7.91 38 XM_Evil_Numbers_Gen 43330 8.30 10.82 7.83 39 TooManyTo_001 41109 7.16 5.72 7.43 40 HTML_IMAGE_RATIO_02 40161 8.61 15.85 7.25 41 LotsOfNums_01 39270 7.25 8.06 7.09 42 XM_DK_Undo_02 36299 11.30 36.54 6.56 43 XM_DKIMWhitelistDomains 34588 5.28 0.10 6.25 44 XM_B_Phish_Phrases 33348 6.38 8.26 6.02 45 FSL_BULK_SIG 33098 7.42 15.09 5.98 46 HTML_IMAGE_RATIO_04 32442 5.84 5.76 5.86 47 BAYES_40 32401 5.47 3.43 5.85 48 MPART_ALT_DIFF 32218 6.13 7.81 5.82 49 XM_H_Long_From01 30578 5.90 7.91 5.52 50 XM_SendGrid 29764 5.36 5.29 5.38 51 RELAYCOUNTRY_META 28748 8.19 24.17 5.19 52 MIME_QP_LONG_LINE 27384 4.88 4.51 4.95 53 DKIM_INVALID 27286 6.39 14.20 4.93 54 BAYES_20 26793 4.52 2.81 4.84 55 RCVD_IN_IADB_LISTED 25352 4.12 1.65 4.58 56 T_TooManySym_01 24334 4.15 2.82 4.40 57 HTML_IMAGE_RATIO_06 23609 4.09 3.19 4.26 58 XM_PDF 23459 3.70 0.82 4.24 59 XMSubMetaSx_00 22738 4.95 9.45 4.11 60 BOTNET_IPINHOSTNAME 22585 5.71 14.40 4.08 61 XMStrtUSub 22487 4.19 4.85 4.06 62 XM_H_Trusted_IP 22365 3.40 0.00 4.04 63 MIME_HTML_ONLY_MULTI 22348 4.01 3.89 4.04 64 BAYES_60 22123 4.59 7.75 4.00 65 XMSexyCombo_05 21920 5.54 13.95 3.96 66 RCVD_IN_IADB_SPF 21770 3.55 1.50 3.93 67 BAYES_05 21120 3.48 1.67 3.81 68 IN_ZIMBRA_NJ_WHITELIST 20048 3.05 0.01 3.62 69 RCVD_IN_IADB_SENDERID 18900 3.10 1.45 3.41 70 RCVD_IN_IADB_DK 18480 3.04 1.43 3.34 71 T_REMOTE_IMAGE 17709 3.59 5.65 3.20 72 XMNumbers 17444 3.43 4.89 3.15 73 BAYES_99 17015 5.91 21.05 3.07 74 RCVD_IN_IADB_VOUCHED 16822 2.65 0.55 3.04 75 TR_XM_DK_SendGrid 16030 2.73 1.84 2.90 76 NO_DNS_FOR_FROM 15325 4.06 10.96 2.77 77 XM_B_Unsub2 15062 2.82 3.36 2.72 78 FROM_EXCESS_BASE64 15013 3.00 4.54 2.71 79 XM_DIRTYINTL 14782 3.45 7.59 2.67 80 XM_UncommonTLD01 14669 4.76 15.97 2.65 81 BOTNET 14533 5.94 23.58 2.62 82 XM_B_SpammyTLD 14380 2.93 4.69 2.60 83 MIME_HTML_MOSTLY 14109 3.12 6.17 2.55 84 BAYES_999 13885 4.66 16.09 2.51 85 HTML_IMAGE_RATIO_08 12831 2.36 2.57 2.32 86 HTML_MIME_NO_HTML_TAG 11835 2.68 5.56 2.14 87 T_TooManySym_02 11770 1.89 0.66 2.13 88 XM_CamelCaseFrm001 11743 2.32 3.40 2.12 89 TooManyTo_002 11244 1.86 0.92 2.03 90 UNPARSEABLE_RELAY 10905 1.79 0.82 1.97 91 BAYES_80 10853 2.87 7.74 1.96 92 RCVD_IN_IADB_OPTIN 10600 1.68 0.42 1.91 93 MAILING_LIST_MULTI 10552 1.83 1.44 1.91 94 XMDiploma_00 10191 2.10 3.48 1.84 95 HTML_FONT_FACE_BAD 9462 1.57 0.85 1.71 96 URI_OPTOUT_3LD 9408 1.45 0.15 1.70 97 T_FILL_THIS_FORM_SHORT 9401 1.79 2.31 1.70 98 TR_DCC_Bayes_99 9183 3.82 15.33 1.66 99 T_XMDrugObfuBody_14 9073 1.78 2.50 1.64 100 RELAYCOUNTRY_CA 8920 2.25 5.67 1.61 101 KHOP_HELO_FCRDNS 8823 1.99 4.09 1.59 102 TR_Symld_Words 8655 1.60 1.83 1.56 103 XM_SPF_SoftFail 8408 1.98 4.46 1.52 104 XM_OfRef6 8337 1.86 3.76 1.51 105 SUBJ_ALL_CAPS 8271 1.54 1.79 1.49 106 TVD_RCVD_IP 8124 1.28 0.28 1.47 107 XM_DK_Undo_01 7844 1.39 1.24 1.42 108 INVALID_MSGID 7625 1.19 0.22 1.38 109 IN_HORDE_ADDRESS_BOOK 7611 1.16 0.04 1.37 110 TooManyTo_003 7574 1.26 0.69 1.37 111 RELAYCOUNTRY_GB 7371 1.48 2.28 1.33 112 HELO_NODOT 7280 1.19 0.53 1.31 113 HELO_NO_DOMAIN 7237 1.18 0.53 1.31 114 UNTRUSTED_Relay 7229 3.36 14.33 1.31 115 TR_XM_PHPDW 7228 1.44 2.18 1.31 116 TR_XM_FormFill2 7111 1.41 2.11 1.28 117 TR_XM_PHPForged 7111 1.42 2.14 1.28 118 XM_H_PHPOS 7090 1.41 2.10 1.28 119 T_XMDrugObfuBody_08 6836 1.49 2.82 1.23 120 TO_MALFORMED 6827 1.04 0.03 1.23 121 XMGappySubj_01 6811 1.09 0.35 1.23 122 XMSubNoVowel 6766 1.10 0.45 1.22 123 URI_HEX 6642 1.41 2.51 1.20 124 BAYES_95 6547 1.52 3.32 1.18 125 XMBdyGiftCard01 6488 1.31 2.02 1.17 126 TM2_M_VERY_LONG_WORD 6346 1.29 2.06 1.15 127 XMGenDplmaNmb 6216 1.24 1.84 1.12 128 CK_HELO_DYNAMIC_SPLIT_IP 6210 0.96 0.11 1.12 129 HELO_DYNAMIC_IPADDR2 6209 0.95 0.05 1.12 130 DKIM_ADSP_CUSTOM_MED 6110 1.12 1.18 1.10 131 XMStockSpam_06 6057 1.26 2.13 1.09 132 XM_GoogleGroups 6045 1.00 0.54 1.09 133 XMSexyCombo_01 5950 1.38 3.02 1.07 134 XMPhish11 5920 1.15 1.58 1.07 135 XMCapTrack 5900 0.97 0.47 1.07 136 URI_TRY_3LD 5868 1.17 1.75 1.06 137 USER_IN_DEF_DKIM_WL 5852 0.89 0.01 1.06 138 XM_H_Long_From02 5729 1.04 1.09 1.03 139 XMHTML_After_End 5672 1.44 3.63 1.02 140 MIME_HEADER_CTYPE_ONLY 5562 1.06 1.35 1.00 141 TooManyTo_004 5496 0.93 0.57 0.99 142 RCVD_IN_BL_SPAMCOP_NET 5477 1.58 4.72 0.99 143 TR_XM_RelayPhish 5371 1.19 2.39 0.97 144 RCVD_IN_MSPIKE_BL 5371 1.44 3.94 0.97 145 NML_ADSP_CUSTOM_MED 4553 0.85 0.98 0.82 146 T_XMDrugObfuBody_00 4458 0.93 1.59 0.81 147 TooManyTo_005 4425 0.75 0.50 0.80 148 XMPhish30 4405 0.82 0.95 0.80 149 TR_MetaPhish_Combo_01 3924 0.74 0.88 0.71 150 XM_UB50 3831 1.86 8.06 0.69 151 HTML_IMAGE_ONLY_20 3716 0.61 0.31 0.67 152 XMBody_17 3681 0.88 2.04 0.66 153 XMPhish14 3646 0.75 1.22 0.66 154 XMSubMetaI_00 3622 0.75 1.27 0.65 155 XMBrknScrpt_02 3431 0.67 0.92 0.62 156 FILL_THIS_FORM 3424 0.57 0.32 0.62 157 TM2_M_A_HREF_HREF 3414 0.70 1.11 0.62 158 PLING_QUERY 3323 0.67 1.05 0.60 159 T_OBFU_PDF_ATTACH 3276 0.53 0.23 0.59 160 XMSexyCombo_04 3138 0.65 1.11 0.57 161 REMOVE_BEFORE_LINK 3125 0.68 1.31 0.56 162 SpammyFromTLD_01 3093 1.18 4.49 0.56 163 XM_UCStrings02 3086 0.50 0.19 0.56 164 FORGED_GMAIL_RCVD 3085 0.63 1.00 0.56 165 XMBody_95 3061 0.49 0.17 0.55 166 TR_LOTS_OF_MONEY2 3029 0.61 0.93 0.55 167 T_MONEY_PERCENT 3029 0.61 0.93 0.55 168 XM_SPF_Unknown 3027 0.55 0.56 0.55 169 HTTPS_HTTP_MISMATCH 3003 0.57 0.70 0.54 170 T_Symld_Words_02 2999 0.60 0.93 0.54 171 XM_RXBody 2966 0.51 0.34 0.54 172 T_XMHurry_00 2882 0.65 1.31 0.52 173 XM_ProductURIs 2876 0.60 1.03 0.52 174 XM_B_REG_HTML 2790 0.50 0.45 0.50 175 FILL_THIS_FORM_LONG 2782 0.46 0.23 0.50 176 XMNoVowels 2757 0.55 0.80 0.50 177 T_TooManySym_03 2741 0.45 0.20 0.50 178 FROM_GOV_DKIM_AU 2739 0.46 0.25 0.49 179 XMHTMLBadTable_001 2699 0.56 0.95 0.49 180 XM_ShortIntro_01 2641 0.47 0.44 0.48 181 XMSlimDrugH 2578 0.53 0.86 0.47 182 RCVD_IN_MSPIKE_L3 2539 0.70 1.97 0.46 183 XMMoneyMeta_00 2533 0.54 0.96 0.46 184 PDS_OTHER_BAD_TLD 2471 0.94 3.59 0.45 185 T_FILL_THIS_FORM_LOAN 2470 0.39 0.10 0.45 186 XMGappySubj_02 2469 0.39 0.09 0.45 187 HTML_TAG_BALANCE_BODY 2468 0.47 0.59 0.45 188 RELAYCOUNTRY_AU 2404 0.46 0.59 0.43 189 XMSubMetaSxObfu_03 2378 0.54 1.10 0.43 190 XM_B_COPY_HTML 2377 0.51 0.91 0.43 191 USER_IN_WHITELIST 2376 0.36 0.00 0.43 192 MISSING_HEADERS 2362 0.44 0.50 0.43 193 XM_H_PHPMailer 2353 0.58 1.38 0.43 194 TM2_M_BODY_EMPTY 2311 0.36 0.07 0.42 195 SUBJ_DOLLARS 2281 0.43 0.54 0.41 196 FROM_GOV_SPOOF 2224 0.39 0.35 0.40 197 TR_LOTS_OF_MONEY3 2220 0.57 1.49 0.40 198 DIET_1 2102 0.60 1.78 0.38 199 XMLngstWrd_00 2080 0.40 0.51 0.38 200 XMRcvdHeader_15 2050 0.31 0.00 0.37 ----------------------------------------------------------------------