Email: 633610 Autolearn: 0 AvgScore: 0.92 AvgScanTime: 1.99 sec Spam: 109431 Autolearn: 0 AvgScore: 11.90 AvgScanTime: 3.69 sec Ham: 524179 Autolearn: 0 AvgScore: -1.37 AvgScanTime: 1.64 sec Time Spent Running SA: 350.61 hours Time Spent Processing Spam: 112.31 hours Time Spent Processing Ham: 238.30 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 103478 85.62 94.56 83.76 2 DKIM_SIGNED 89156 72.97 81.47 71.20 3 XM_DK_Pass 86433 71.62 78.98 70.08 4 XM_B_Unicode 85790 68.57 78.40 66.52 5 DCC_CHECK 83772 43.70 76.55 36.84 6 XMListUnsubscribeExists 74687 51.02 68.25 47.43 7 DKIM_VALID 73253 65.94 66.94 65.74 8 DKIM_VALID_AU 54565 49.59 49.86 49.54 9 XM_B_Unicode3 49456 40.41 45.19 39.41 10 BAYES_50 49243 48.22 45.00 48.89 11 XM_DK_Undo_02 41809 12.66 38.21 7.33 12 MIME_HTML_ONLY 39704 21.95 36.28 18.95 13 LOC_TINY_FONT_1 37367 23.79 34.15 21.62 14 HTML_FONT_LOW_CONTRAST 37022 28.19 33.83 27.02 15 DKIM_VALID_EF 28864 26.15 26.38 26.10 16 XMSubLong 28362 21.07 25.92 20.06 17 BAYES_99 27774 7.53 25.38 3.81 18 FVGT_m_MULTI_ODD 27502 21.18 25.13 20.35 19 T_KAM_HTML_FONT_INVALID 24790 17.11 22.65 15.96 20 BOTNET 24760 6.15 22.63 2.71 21 RELAYCOUNTRY_META 24007 8.13 21.94 5.25 22 XM_Body_Dirty_Words 23693 14.00 21.65 12.40 23 DCC_CHECK_NEGATIVE 23451 54.48 21.43 61.38 24 MultiRelay 22450 18.64 20.52 18.24 25 TR_DCC_Bayes_99 21475 5.28 19.62 2.28 26 T_TM2_M_HEADER_IN_MSG 21413 28.73 19.57 30.65 27 BAYES_999 20972 5.93 19.16 3.17 28 HTML_IMAGE_RATIO_02 18224 9.30 16.65 7.76 29 XM_Multi_Part_URI 18078 13.84 16.52 13.28 30 XM_UncommonTLD01 16983 5.07 15.52 2.89 31 UNTRUSTED_Relay 16199 3.68 14.80 1.36 32 BOTNET_IPINHOSTNAME 15970 6.45 14.59 4.74 33 DKIM_INVALID 15903 7.03 14.53 5.46 34 XM_B_Unsub 15745 9.99 14.39 9.07 35 FSL_BULK_SIG 15144 7.54 13.84 6.23 36 LOTS_OF_MONEY 15085 9.22 13.78 8.27 37 XMSexyCombo_05 14441 5.46 13.20 3.84 38 XM_Evil_Numbers_Gen 14158 9.27 12.94 8.50 39 NO_DNS_FOR_FROM 12323 4.46 11.26 3.04 40 XM_H_Long_From01 10624 6.33 9.71 5.63 41 XMSubMetaSx_00 10507 5.83 9.60 5.04 42 XMPhish08 10297 3.24 9.41 1.95 43 RCVD_IN_MSPIKE_H2 10200 11.03 9.32 11.38 44 XM_B_Phish_Phrases 9803 7.52 8.96 7.22 45 XM_UB50 9768 2.14 8.93 0.72 46 LotsOfNums_01 8959 7.45 8.19 7.29 47 XM_DIRTYINTL 8573 3.25 7.83 2.29 48 MPART_ALT_DIFF 8533 4.91 7.80 4.30 49 BAYES_80 7702 2.94 7.04 2.09 50 HTML_IMAGE_RATIO_04 7573 6.55 6.92 6.47 51 KHOP_HELO_FCRDNS 6859 2.67 6.27 1.92 52 MIME_HTML_MOSTLY 6782 3.02 6.20 2.35 53 TooManyTo_001 6736 7.88 6.16 8.24 54 BAYES_60 6679 4.40 6.10 4.05 55 XM_SendGrid 6189 5.52 5.66 5.49 56 HTML_MIME_NO_HTML_TAG 6154 2.79 5.62 2.20 57 MIME_QP_LONG_LINE 5293 4.99 4.84 5.02 58 RELAYCOUNTRY_CA 4976 2.05 4.55 1.53 59 XMNumbers 4946 3.76 4.52 3.60 60 SpammyFromTLD_01 4826 1.26 4.41 0.61 61 XM_SPF_SoftFail 4804 2.18 4.39 1.72 62 TM2_M_URI_OPT_OUT 4782 7.69 4.37 8.38 63 RELAYCOUNTRY_FR 4776 0.95 4.36 0.24 64 RCVD_IN_BL_SPAMCOP_NET 4702 1.54 4.30 0.96 65 SpammyFromTLD_02 4666 0.89 4.26 0.19 66 TR_Mismatch_TLD_02 4664 0.78 4.26 0.06 67 XMStrtUSub 4663 4.73 4.26 4.83 68 T_XMDrugObfuBody_08 4605 2.00 4.21 1.54 69 RCVD_IN_MSPIKE_WL 4460 8.28 4.08 9.16 70 RCVD_IN_MSPIKE_H3 4460 8.28 4.08 9.16 71 BAYES_95 4341 1.79 3.97 1.34 72 BAYES_00 4252 22.22 3.89 26.05 73 XM_URI_RBL 4244 0.90 3.88 0.28 74 RDNS_DYNAMIC 4119 0.88 3.76 0.28 75 MIME_HTML_ONLY_MULTI 4070 2.90 3.72 2.73 76 XM_OfRef6 4063 1.78 3.71 1.38 77 XMSexyCombo_01 4039 1.46 3.69 0.99 78 HTML_IMAGE_RATIO_06 4036 3.47 3.69 3.42 79 BAYES_40 3958 5.24 3.62 5.57 80 XM_B_SpammyTLD 3940 1.89 3.60 1.54 81 FROM_EXCESS_BASE64 3918 2.99 3.58 2.86 82 XMHTML_After_End 3697 1.46 3.38 1.06 83 PDS_OTHER_BAD_TLD 3547 0.86 3.24 0.36 84 TR_XM_DK_Bayes 3524 13.43 3.22 15.56 85 T_TooManySym_01 3476 4.27 3.18 4.50 86 T_REMOTE_IMAGE 3467 3.43 3.17 3.48 87 MultiRelay_Combo 3362 0.70 3.07 0.21 88 MultiRelay_CC 3362 0.70 3.07 0.21 89 XMStockSpam_06 3347 1.32 3.06 0.96 90 XM_CamelCaseFrm001 3326 2.28 3.04 2.13 91 RCVD_IN_RP_RNBL 3183 0.59 2.91 0.11 92 TR_XM_RelayPhish 3145 1.56 2.87 1.28 93 BAYES_20 3128 4.21 2.86 4.50 94 XMDiploma_00 3031 1.98 2.77 1.81 95 XMSexyCombo_04 2814 0.74 2.57 0.36 96 FROM_SUSPICIOUS_NTLD 2794 0.46 2.55 0.03 97 FROM_SUSPICIOUS_NTLD_FP 2759 0.46 2.52 0.02 98 URI_HEX 2742 1.36 2.51 1.12 99 TR_XM_INV_DKIM 2741 0.54 2.50 0.13 100 RCVD_IN_RP_SAFE 2721 7.58 2.49 8.64 101 TR_XM_PHPDW 2718 1.15 2.48 0.87 102 TR_XM_PHPForged 2717 1.13 2.48 0.84 103 XM_B_Unsub2 2713 2.36 2.48 2.34 104 DATE_IN_PAST_03_06 2689 0.52 2.46 0.12 105 TR_XM_FormFill2 2667 1.12 2.44 0.84 106 XM_H_PHPOS 2661 1.11 2.43 0.83 107 RCVD_IN_MSPIKE_BL 2659 1.23 2.43 0.98 108 HTML_IMAGE_RATIO_08 2601 2.16 2.38 2.11 109 TR_XM_DK_SendGrid 2587 2.88 2.36 2.99 110 ALL_TRUSTED 2545 16.38 2.33 19.32 111 BOTNET_NORDNS 2501 0.44 2.29 0.05 112 TR_XM_DK_Bayes1 2488 12.44 2.27 14.56 113 T_XMDrugObfuBody_14 2368 1.81 2.16 1.74 114 RCVD_IN_RP_CERTIFIED 2323 6.90 2.12 7.90 115 TR_LOTS_OF_MONEY2 2268 0.70 2.07 0.41 116 T_MONEY_PERCENT 2268 0.70 2.07 0.41 117 BAYES_05 2155 3.33 1.97 3.61 118 T_XMHurry_00 2101 0.88 1.92 0.66 119 T_FILL_THIS_FORM_SHORT 2080 1.16 1.90 1.00 120 XMPhish11 2065 1.21 1.89 1.07 121 XMGenDplmaNmb 2047 1.28 1.87 1.15 122 LongTLD 1993 0.44 1.82 0.16 123 RELAYCOUNTRY_IN 1943 0.40 1.78 0.11 124 TM2_M_VERY_LONG_WORD 1942 1.33 1.77 1.23 125 TR_XM_DK_Bayes2 1940 11.02 1.77 12.95 126 RCVD_IN_IADB_LISTED 1875 3.81 1.71 4.24 127 SUBJ_ALL_CAPS 1871 1.55 1.71 1.52 128 URI_TRY_3LD 1866 1.35 1.71 1.27 129 XMBody_17 1848 1.08 1.69 0.95 130 RCVD_IN_MSPIKE_L3 1845 0.72 1.69 0.52 131 XM_H_PHPMailer 1841 0.75 1.68 0.55 132 RELAYCOUNTRY_GB 1780 1.43 1.63 1.39 133 RCVD_IN_IADB_SPF 1714 3.30 1.57 3.67 134 DATE_IN_PAST_06_12 1703 0.31 1.56 0.05 135 RCVD_IN_IADB_SENDERID 1678 2.91 1.53 3.20 136 RCVD_IN_IADB_DK 1678 2.89 1.53 3.17 137 XMBdyGiftCard01 1676 1.41 1.53 1.38 138 XM_H_PHPOS_M 1640 0.68 1.50 0.51 139 RELAYCOUNTRY_DE 1610 0.54 1.47 0.34 140 XMBody_78 1575 0.51 1.44 0.31 141 TR_LOTS_OF_MONEY3 1532 1.19 1.40 1.14 142 HTML_TAG_BALANCE_CENTER 1532 0.29 1.40 0.06 143 DIET_1 1514 0.59 1.38 0.43 144 MAILING_LIST_MULTI 1487 2.29 1.36 2.48 145 RCVD_IN_PSBL 1445 0.24 1.32 0.02 146 THIS_AD 1425 0.34 1.30 0.14 147 XM_UB60 1421 0.27 1.30 0.06 148 DKIM_ADSP_CUSTOM_MED 1400 1.16 1.28 1.14 149 URIBL_SBL_A 1363 0.40 1.25 0.22 150 TR_Symld_Words 1331 1.34 1.22 1.37 151 XM_UB99 1319 0.21 1.21 0.00 152 XMSubMetaI_00 1311 0.75 1.20 0.65 153 T_Symld_Words_02 1303 0.59 1.19 0.46 154 XM_ProductURIs 1299 0.63 1.19 0.52 155 REPLYTO_WITHOUT_TO_CC 1246 0.29 1.14 0.11 156 XM_DK_Undo_01 1230 1.46 1.12 1.53 157 FORGED_GMAIL_RCVD 1224 0.69 1.12 0.61 158 T_XMDrugObfuBody_00 1201 1.27 1.10 1.30 159 NML_ADSP_CUSTOM_MED 1180 0.86 1.08 0.81 160 XM_B_COPY_HTML 1165 0.53 1.06 0.42 161 TR_Mismatch_TLD_01 1160 0.42 1.06 0.28 162 HTML_SHORT_LINK_IMG_1 1145 0.20 1.05 0.03 163 TooManyTo_002 1136 2.06 1.04 2.27 164 XM_H_Long_From02 1128 1.17 1.03 1.20 165 XMSubMetaSxObfu_03 1125 1.17 1.03 1.20 166 XMHTMLBadTable_001 1110 0.57 1.01 0.47 167 PLING_QUERY 1107 0.62 1.01 0.54 168 URI_NO_WWW_INFO_CGI 1096 0.18 1.00 0.01 169 XM_UB80 1088 0.18 0.99 0.01 170 FSL_THIS_IS_ADV 1080 0.39 0.99 0.26 171 REMOVE_BEFORE_LINK 1076 0.50 0.98 0.40 172 HTTPS_HTTP_MISMATCH 1075 0.68 0.98 0.62 173 XM_PDF 1033 4.06 0.94 4.71 174 XM_H_MailChimp 1033 0.31 0.94 0.17 175 XMPhish14 1006 0.44 0.92 0.34 176 XMPhish30 1003 0.57 0.92 0.50 177 HTML_IMAGE_ONLY_12 972 0.29 0.89 0.17 178 HDRS_LCASE_IMGONLY 968 0.17 0.88 0.03 179 XMBrknScrpt_02 968 0.78 0.88 0.76 180 URIBL_BLACK 947 0.16 0.87 0.02 181 HTML_FONT_SIZE_HUGE 940 0.23 0.86 0.10 182 HTML_FONT_FACE_BAD 927 0.91 0.85 0.92 183 XMSlimDrugH 924 0.47 0.84 0.39 184 BODY_URI_ONLY 916 0.23 0.84 0.11 185 MPART_ALT_DIFF_COUNT 892 0.36 0.82 0.26 186 UNPARSEABLE_RELAY 876 1.68 0.80 1.86 187 XMSubMetaSSx_00 872 0.49 0.80 0.43 188 TooManyTo_003 866 1.43 0.79 1.56 189 TR_MetaPhish_Combo_01 859 0.67 0.78 0.64 190 URIBL_DBL_SPAM 851 0.15 0.78 0.02 191 XM_OfRef7 847 0.23 0.77 0.12 192 LOW_PRICE 846 0.29 0.77 0.19 193 MISSING_HEADERS 835 0.53 0.76 0.49 194 T_TooManySym_02 815 2.11 0.74 2.40 195 RELAYCOUNTRY_AT 809 0.32 0.74 0.23 196 XMMoneyMeta_00 789 0.53 0.72 0.49 197 XM_SPF_Unknown 773 0.70 0.71 0.70 198 XM_UB999 767 0.12 0.70 0.00 199 XM_BadFromFormat 758 0.20 0.69 0.09 200 URIBL_DBL_ABUSE_REDIR 753 0.46 0.69 0.41 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 439042 85.62 94.56 83.76 2 DKIM_SIGNED 373218 72.97 81.47 71.20 3 XM_DK_Pass 367345 71.62 78.98 70.08 4 XM_B_Unicode 348701 68.57 78.40 66.52 5 DKIM_VALID 344577 65.94 66.94 65.74 6 DCC_CHECK_NEGATIVE 321724 54.48 21.43 61.38 7 DKIM_VALID_AU 259669 49.59 49.86 49.54 8 BAYES_50 256256 48.22 45.00 48.89 9 XMListUnsubscribeExists 248601 51.02 68.25 47.43 10 XM_B_Unicode3 206583 40.41 45.19 39.41 11 DCC_CHECK 193086 43.70 76.55 36.84 12 T_TM2_M_HEADER_IN_MSG 160652 28.73 19.57 30.65 13 HTML_FONT_LOW_CONTRAST 141607 28.19 33.83 27.02 14 DKIM_VALID_EF 136821 26.15 26.38 26.10 15 BAYES_00 136562 22.22 3.89 26.05 16 LOC_TINY_FONT_1 113348 23.79 34.15 21.62 17 FVGT_m_MULTI_ODD 106666 21.18 25.13 20.35 18 XMSubLong 105154 21.07 25.92 20.06 19 ALL_TRUSTED 101269 16.38 2.33 19.32 20 MIME_HTML_ONLY 99355 21.95 36.28 18.95 21 MultiRelay 95636 18.64 20.52 18.24 22 T_KAM_HTML_FONT_INVALID 83642 17.11 22.65 15.96 23 TR_XM_DK_Bayes 81559 13.43 3.22 15.56 24 TR_XM_DK_Bayes1 76313 12.44 2.27 14.56 25 XM_Multi_Part_URI 69625 13.84 16.52 13.28 26 TR_XM_DK_Bayes2 67859 11.02 1.77 12.95 27 XM_Body_Dirty_Words 65017 14.00 21.65 12.40 28 RCVD_IN_MSPIKE_H2 59662 11.03 9.32 11.38 29 RCVD_IN_MSPIKE_WL 47997 8.28 4.08 9.16 30 RCVD_IN_MSPIKE_H3 47997 8.28 4.08 9.16 31 XM_B_Unsub 47521 9.99 14.39 9.07 32 RCVD_IN_RP_SAFE 45313 7.58 2.49 8.64 33 XM_Evil_Numbers_Gen 44564 9.27 12.94 8.50 34 TM2_M_URI_OPT_OUT 43940 7.69 4.37 8.38 35 LOTS_OF_MONEY 43347 9.22 13.78 8.27 36 TooManyTo_001 43190 7.88 6.16 8.24 37 RCVD_IN_RP_CERTIFIED 41425 6.90 2.12 7.90 38 ANY_BOUNCE_MESSAGE 41060 6.58 0.59 7.83 39 BOUNCE_MESSAGE 41058 6.58 0.58 7.83 40 HTML_IMAGE_RATIO_02 40682 9.30 16.65 7.76 41 XM_DK_Undo_02 38433 12.66 38.21 7.33 42 LotsOfNums_01 38229 7.45 8.19 7.29 43 XM_B_Phish_Phrases 37835 7.52 8.96 7.22 44 XM_DKIMWhitelistDomains 37486 6.03 0.65 7.15 45 HTML_IMAGE_RATIO_04 33909 6.55 6.92 6.47 46 FSL_BULK_SIG 32656 7.54 13.84 6.23 47 XM_H_Long_From01 29491 6.33 9.71 5.63 48 BAYES_40 29215 5.24 3.62 5.57 49 XM_SendGrid 28779 5.52 5.66 5.49 50 DKIM_INVALID 28641 7.03 14.53 5.46 51 RELAYCOUNTRY_META 27528 8.13 21.94 5.25 52 XMSubMetaSx_00 26414 5.83 9.60 5.04 53 MIME_QP_LONG_LINE 26324 4.99 4.84 5.02 54 XMStrtUSub 25319 4.73 4.26 4.83 55 BOTNET_IPINHOSTNAME 24870 6.45 14.59 4.74 56 XM_PDF 24674 4.06 0.94 4.71 57 T_TooManySym_01 23563 4.27 3.18 4.50 58 BAYES_20 23562 4.21 2.86 4.50 59 MPART_ALT_DIFF 22559 4.91 7.80 4.30 60 RCVD_IN_IADB_LISTED 22238 3.81 1.71 4.24 61 BAYES_60 21218 4.40 6.10 4.05 62 XMSexyCombo_05 20148 5.46 13.20 3.84 63 BAYES_99 19952 7.53 25.38 3.81 64 IN_ZIMBRA_NJ_WHITELIST 19485 3.08 0.01 3.72 65 RCVD_IN_IADB_SPF 19226 3.30 1.57 3.67 66 BAYES_05 18942 3.33 1.97 3.61 67 XMNumbers 18890 3.76 4.52 3.60 68 T_REMOTE_IMAGE 18236 3.43 3.17 3.48 69 HTML_IMAGE_RATIO_06 17926 3.47 3.69 3.42 70 RCVD_IN_IADB_SENDERID 16764 2.91 1.53 3.20 71 RCVD_IN_IADB_DK 16640 2.89 1.53 3.17 72 BAYES_999 16623 5.93 19.16 3.17 73 NO_DNS_FOR_FROM 15937 4.46 11.26 3.04 74 TR_XM_DK_SendGrid 15670 2.88 2.36 2.99 75 XM_UncommonTLD01 15162 5.07 15.52 2.89 76 FROM_EXCESS_BASE64 14996 2.99 3.58 2.86 77 RCVD_IN_IADB_VOUCHED 14464 2.37 0.49 2.76 78 MIME_HTML_ONLY_MULTI 14297 2.90 3.72 2.73 79 BOTNET 14222 6.15 22.63 2.71 80 MAILING_LIST_MULTI 12997 2.29 1.36 2.48 81 XM_H_Trusted_IP 12847 2.03 0.00 2.45 82 T_TooManySym_02 12585 2.11 0.74 2.40 83 MIME_HTML_MOSTLY 12336 3.02 6.20 2.35 84 XM_B_Unsub2 12264 2.36 2.48 2.34 85 XM_DIRTYINTL 12011 3.25 7.83 2.29 86 TR_DCC_Bayes_99 11965 5.28 19.62 2.28 87 TooManyTo_002 11907 2.06 1.04 2.27 88 HTML_MIME_NO_HTML_TAG 11517 2.79 5.62 2.20 89 XM_CamelCaseFrm001 11146 2.28 3.04 2.13 90 HTML_IMAGE_RATIO_08 11063 2.16 2.38 2.11 91 BAYES_80 10930 2.94 7.04 2.09 92 XMPhish08 10207 3.24 9.41 1.95 93 KHOP_HELO_FCRDNS 10053 2.67 6.27 1.92 94 UNPARSEABLE_RELAY 9775 1.68 0.80 1.86 95 XMDiploma_00 9492 1.98 2.77 1.81 96 T_XMDrugObfuBody_14 9128 1.81 2.16 1.74 97 RCVD_IN_IADB_OPTIN 9088 1.50 0.36 1.73 98 XM_SPF_SoftFail 9004 2.18 4.39 1.72 99 HELO_NODOT 8985 1.53 0.64 1.71 100 HELO_NO_DOMAIN 8942 1.52 0.63 1.71 101 TVD_RCVD_IP 8205 1.38 0.49 1.57 102 TooManyTo_003 8167 1.43 0.79 1.56 103 T_XMDrugObfuBody_08 8082 2.00 4.21 1.54 104 XM_B_SpammyTLD 8052 1.89 3.60 1.54 105 XM_DK_Undo_01 8037 1.46 1.12 1.53 106 RELAYCOUNTRY_CA 8018 2.05 4.55 1.53 107 SUBJ_ALL_CAPS 7960 1.55 1.71 1.52 108 IN_HORDE_ADDRESS_BOOK 7882 1.25 0.05 1.50 109 INVALID_MSGID 7763 1.27 0.27 1.48 110 XMCapTrack 7533 1.29 0.60 1.44 111 XMSubNoVowel 7349 1.25 0.50 1.40 112 RELAYCOUNTRY_GB 7280 1.43 1.63 1.39 113 XMBdyGiftCard01 7245 1.41 1.53 1.38 114 XM_OfRef6 7217 1.78 3.71 1.38 115 TR_Symld_Words 7173 1.34 1.22 1.37 116 UNTRUSTED_Relay 7123 3.68 14.80 1.36 117 BAYES_95 7008 1.79 3.97 1.34 118 T_XMDrugObfuBody_00 6833 1.27 1.10 1.30 119 TO_MALFORMED 6829 1.08 0.02 1.30 120 TR_XM_RelayPhish 6708 1.56 2.87 1.28 121 URI_TRY_3LD 6663 1.35 1.71 1.27 122 TM2_M_VERY_LONG_WORD 6463 1.33 1.77 1.23 123 XM_H_Long_From02 6276 1.17 1.03 1.20 124 XMSubMetaSxObfu_03 6270 1.17 1.03 1.20 125 TooManyTo_004 6212 1.09 0.65 1.19 126 CK_HELO_DYNAMIC_SPLIT_IP 6089 0.98 0.08 1.16 127 HELO_DYNAMIC_IPADDR2 6087 0.97 0.04 1.16 128 USER_IN_DEF_DKIM_WL 6084 0.96 0.02 1.16 129 XMGenDplmaNmb 6052 1.28 1.87 1.15 130 TR_LOTS_OF_MONEY3 5979 1.19 1.40 1.14 131 DKIM_ADSP_CUSTOM_MED 5964 1.16 1.28 1.14 132 URI_HEX 5859 1.36 2.51 1.12 133 XM_GoogleGroups 5691 0.98 0.50 1.09 134 XMPhish11 5615 1.21 1.89 1.07 135 XMHTML_After_End 5551 1.46 3.38 1.06 136 T_FILL_THIS_FORM_SHORT 5265 1.16 1.90 1.00 137 XMGappySubj_01 5258 0.89 0.35 1.00 138 XMNoVowels 5245 0.94 0.64 1.00 139 XMSexyCombo_01 5197 1.46 3.69 0.99 140 TooManyTo_005 5180 0.91 0.55 0.99 141 RCVD_IN_MSPIKE_BL 5163 1.23 2.43 0.98 142 RCVD_IN_BL_SPAMCOP_NET 5037 1.54 4.30 0.96 143 XMStockSpam_06 5011 1.32 3.06 0.96 144 XMBody_17 5000 1.08 1.69 0.95 145 HTML_FONT_FACE_BAD 4842 0.91 0.85 0.92 146 TR_XM_PHPDW 4541 1.15 2.48 0.87 147 TR_XM_PHPForged 4421 1.13 2.48 0.84 148 TR_XM_FormFill2 4400 1.12 2.44 0.84 149 XM_H_PHPOS 4370 1.11 2.43 0.83 150 NML_ADSP_CUSTOM_MED 4248 0.86 1.08 0.81 151 XMBrknScrpt_02 3998 0.78 0.88 0.76 152 XM_GRM 3904 0.62 0.00 0.74 153 XM_UB50 3792 2.14 8.93 0.72 154 XMBody_95 3727 0.62 0.19 0.71 155 XM_E_Blogspot 3721 0.61 0.11 0.71 156 XM_SPF_Unknown 3682 0.70 0.71 0.70 157 T_XMHurry_00 3456 0.88 1.92 0.66 158 XMSubMetaI_00 3416 0.75 1.20 0.65 159 TR_MetaPhish_Combo_01 3363 0.67 0.78 0.64 160 XM_B_REG_HTML 3361 0.62 0.52 0.64 161 XM_ShortIntro_01 3325 0.62 0.54 0.63 162 HTTPS_HTTP_MISMATCH 3224 0.68 0.98 0.62 163 SpammyFromTLD_01 3185 1.26 4.41 0.61 164 FORGED_GMAIL_RCVD 3178 0.69 1.12 0.61 165 T_OBFU_PDF_ATTACH 3082 0.52 0.21 0.59 166 XM_RXBody 3063 0.55 0.39 0.58 167 HTML_IMAGE_ONLY_20 3050 0.57 0.52 0.58 168 FILL_THIS_FORM 2978 0.55 0.44 0.57 169 XM_H_PHPMailer 2894 0.75 1.68 0.55 170 PLING_QUERY 2806 0.62 1.01 0.54 171 T_TooManySym_03 2792 0.48 0.25 0.53 172 XM_ProductURIs 2723 0.63 1.19 0.52 173 RCVD_IN_MSPIKE_L3 2717 0.72 1.69 0.52 174 XM_H_PHPOS_M 2653 0.68 1.50 0.51 175 AC_DIV_BONANZA 2625 0.44 0.16 0.50 176 XMPhish30 2610 0.57 0.92 0.50 177 XMMoneyMeta_00 2565 0.53 0.72 0.49 178 MISSING_HEADERS 2546 0.53 0.76 0.49 179 XMHTMLBadTable_001 2486 0.57 1.01 0.47 180 SHORT_HELO_AND_INLINE_IMAGE 2455 0.39 0.03 0.47 181 USER_IN_WHITELIST 2453 0.39 0.00 0.47 182 T_Symld_Words_02 2434 0.59 1.19 0.46 183 SHORT_SHORTNER 2340 0.40 0.17 0.45 184 FROM_GOV_SPOOF 2330 0.42 0.32 0.44 185 FILL_THIS_FORM_LONG 2320 0.43 0.37 0.44 186 TM2_M_BODY_EMPTY 2285 0.38 0.11 0.44 187 HTML_TAG_BALANCE_BODY 2274 0.45 0.52 0.43 188 DIET_1 2249 0.59 1.38 0.43 189 XMSubMetaSSx_00 2232 0.49 0.80 0.43 190 HTML_IMAGE_ONLY_32 2224 0.40 0.29 0.42 191 XMDateMe_00 2212 0.41 0.36 0.42 192 T_FILL_THIS_FORM_LOAN 2201 0.37 0.11 0.42 193 XM_B_COPY_HTML 2190 0.53 1.06 0.42 194 URIBL_DBL_ABUSE_REDIR 2175 0.46 0.69 0.41 195 RCVD_IN_SORBS_DUL 2169 0.38 0.22 0.41 196 TR_LOTS_OF_MONEY2 2149 0.70 2.07 0.41 197 T_MONEY_PERCENT 2149 0.70 2.07 0.41 198 HTML_IMAGE_ONLY_28 2117 0.43 0.53 0.40 199 REMOVE_BEFORE_LINK 2084 0.50 0.98 0.40 200 RELAYCOUNTRY_AU 2067 0.42 0.54 0.39 ----------------------------------------------------------------------