Email: 636814 Autolearn: 0 AvgScore: 2.00 AvgScanTime: 1.96 sec Spam: 139277 Autolearn: 0 AvgScore: 12.35 AvgScanTime: 3.29 sec Ham: 497537 Autolearn: 0 AvgScore: -0.90 AvgScanTime: 1.59 sec Time Spent Running SA: 347.27 hours Time Spent Processing Spam: 127.43 hours Time Spent Processing Ham: 219.84 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 132877 87.79 95.40 85.66 2 DCC_CHECK 108987 46.74 78.25 37.92 3 RELAYCOUNTRY_US 108268 77.23 77.74 77.09 4 DKIM_SIGNED 104153 72.20 74.78 71.48 5 XM_DK_Pass 101304 70.74 72.74 70.19 6 XM_B_Unicode 98724 67.54 70.88 66.61 7 DKIM_VALID 87694 65.68 62.96 66.44 8 XMListUnsubscribeExists 86455 51.16 62.07 48.11 9 BAYES_50 66342 51.19 47.63 52.19 10 DKIM_VALID_AU 66183 50.23 47.52 50.99 11 XM_B_Unicode3 60532 40.21 43.46 39.30 12 MIME_HTML_ONLY 58936 24.21 42.32 19.14 13 HTML_FONT_LOW_CONTRAST 44379 26.21 31.86 24.63 14 XM_DK_Undo_02 44154 11.90 31.70 6.36 15 LOC_TINY_FONT_1 43544 24.17 31.26 22.19 16 XMSubLong 38388 21.59 27.56 19.91 17 DKIM_VALID_EF 32680 24.80 23.46 25.17 18 FVGT_m_MULTI_ODD 31977 22.36 22.96 22.19 19 RELAYCOUNTRY_META 30693 9.41 22.04 5.87 20 T_KAM_HTML_FONT_INVALID 29668 17.06 21.30 15.87 21 XM_Body_Dirty_Words 29449 15.40 21.14 13.79 22 BOTNET 28751 6.51 20.64 2.55 23 T_TM2_M_HEADER_IN_MSG 28513 27.65 20.47 29.65 24 DCC_CHECK_NEGATIVE 27532 51.30 19.77 60.13 25 BAYES_99 26859 6.51 19.28 2.93 26 FSL_BULK_SIG 26044 9.25 18.70 6.61 27 XM_Multi_Part_URI 23001 12.52 16.51 11.40 28 XM_B_Unsub 21557 10.78 15.48 9.46 29 HTML_MIME_NO_HTML_TAG 20978 5.32 15.06 2.60 30 UNTRUSTED_Relay 19973 4.42 14.34 1.64 31 BAYES_999 19924 4.95 14.31 2.33 32 TR_DCC_Bayes_99 19637 4.37 14.10 1.65 33 BOTNET_IPINHOSTNAME 19381 6.19 13.92 4.03 34 XMSexyCombo_05 18323 5.96 13.16 3.95 35 HTML_IMAGE_RATIO_02 17094 7.75 12.27 6.48 36 LOTS_OF_MONEY 16977 9.39 12.19 8.60 37 DKIM_INVALID 16459 6.52 11.82 5.04 38 XM_UncommonTLD01 16040 4.97 11.52 3.13 39 XM_Evil_Numbers_Gen 15359 8.80 11.03 8.18 40 HTML_SHORT_LINK_IMG_1 14565 2.31 10.46 0.03 41 XM_BadFromFormat 14492 2.36 10.41 0.11 42 T_REMOTE_IMAGE 13784 4.94 9.90 3.56 43 NO_DNS_FOR_FROM 13698 4.26 9.84 2.70 44 KHOP_HELO_FCRDNS 13477 3.69 9.68 2.01 45 XMSubMetaSx_00 13236 5.10 9.50 3.87 46 HTML_IMAGE_ONLY_08 13223 2.16 9.49 0.11 47 RCVD_IN_MSPIKE_H2 12268 11.48 8.81 12.23 48 XMNumbers 11889 4.52 8.54 3.40 49 MPART_ALT_DIFF 11780 4.83 8.46 3.82 50 LotsOfNums_01 11776 7.62 8.46 7.39 51 BAYES_80 11491 3.57 8.25 2.26 52 HDRS_LCASE_IMGONLY 11386 1.80 8.18 0.02 53 XM_B_Phish_Phrases 11251 6.99 8.08 6.68 54 XM_UB50 10905 2.42 7.83 0.90 55 BAYES_60 10341 5.59 7.42 5.08 56 HTML_TAG_BALANCE_CENTER 10217 1.64 7.34 0.04 57 XM_H_Long_From01 10134 5.79 7.28 5.37 58 BODY_URI_ONLY 9677 1.58 6.95 0.08 59 HTML_IMAGE_RATIO_04 8305 5.31 5.96 5.12 60 RCVD_IN_MSPIKE_BL 8287 1.95 5.95 0.83 61 DKIM_ADSP_NXDOMAIN 8021 1.69 5.76 0.55 62 RDNS_DYNAMIC 8012 1.48 5.75 0.29 63 RELAYCOUNTRY_FR 7793 1.46 5.60 0.31 64 TooManyTo_001 7468 8.02 5.36 8.76 65 XM_SPF_SoftFail 7299 2.81 5.24 2.13 66 MIME_QP_LONG_LINE 6952 5.14 4.99 5.18 67 MIME_HTML_MOSTLY 6376 2.50 4.58 1.92 68 BAYES_40 6232 5.65 4.47 5.98 69 XM_SendGrid 6030 5.59 4.33 5.95 70 TM2_M_URI_OPT_OUT 5984 2.87 4.30 2.47 71 BAYES_95 5814 1.92 4.17 1.29 72 FROM_EXCESS_BASE64 5635 2.95 4.05 2.64 73 RCVD_IN_MSPIKE_L3 5589 1.26 4.01 0.48 74 MIME_HTML_ONLY_MULTI 5576 2.88 4.00 2.57 75 RCVD_IN_MSPIKE_H3 5534 8.20 3.97 9.38 76 RCVD_IN_MSPIKE_WL 5534 8.20 3.97 9.38 77 XMStrtUSub 5412 4.27 3.89 4.38 78 RELAYCOUNTRY_CA 5351 2.17 3.84 1.70 79 XM_B_SpammyTLD 5225 5.50 3.75 5.99 80 RCVD_IN_BL_SPAMCOP_NET 5051 1.63 3.63 1.07 81 TR_Mismatch_TLD_02 4955 0.83 3.56 0.06 82 HTML_IMAGE_RATIO_06 4889 3.71 3.51 3.77 83 XM_B_Unsub2 4855 2.54 3.49 2.28 84 XM_DIRTYINTL 4617 1.14 3.31 0.53 85 BAYES_00 4578 18.06 3.29 22.19 86 DATE_IN_PAST_03_06 4552 0.81 3.27 0.12 87 BAYES_20 4507 4.40 3.24 4.73 88 XM_CamelCaseFrm001 4472 2.37 3.21 2.14 89 XMSexyCombo_01 4291 1.35 3.08 0.87 90 RELAYCOUNTRY_GB 4174 1.72 3.00 1.36 91 XM_URI_RBL 4102 0.81 2.95 0.22 92 HTML_IMAGE_RATIO_08 4058 2.67 2.91 2.61 93 T_XMDrugObfuBody_08 3949 1.82 2.84 1.54 94 XMDiploma_00 3833 1.88 2.75 1.63 95 PDS_OTHER_BAD_TLD 3818 3.85 2.74 4.16 96 TR_Symld_Words 3696 3.09 2.65 3.21 97 FROM_MISSP_REPLYTO 3636 0.58 2.61 0.01 98 URI_HEX 3562 1.63 2.56 1.37 99 SpammyFromTLD_01 3459 1.09 2.48 0.70 100 XM_OfRef6 3402 1.62 2.44 1.38 101 URIBL_DBL_ABUSE_REDIR 3396 0.55 2.44 0.02 102 TR_XM_DK_Bayes 3383 13.65 2.43 16.80 103 FROM_MISSP_DYNIP 3375 0.53 2.42 0.00 104 HTML_FONT_SIZE_LARGE 3330 0.64 2.39 0.16 105 T_TooManySym_01 3321 4.01 2.38 4.47 106 SpammyFromTLD_02 3275 0.77 2.35 0.32 107 T_XMDrugObfuBody_14 3260 1.75 2.34 1.59 108 TR_XM_PHPDW 3034 0.87 2.18 0.50 109 RCVD_IN_IADB_LISTED 2968 3.94 2.13 4.44 110 SUBJ_ALL_CAPS 2813 3.01 2.02 3.29 111 ALL_TRUSTED 2768 15.53 1.99 19.32 112 RCVD_IN_IADB_SPF 2754 3.43 1.98 3.83 113 XMSexyCombo_04 2750 0.81 1.97 0.49 114 BAYES_05 2737 2.96 1.97 3.24 115 RCVD_IN_IADB_SENDERID 2680 3.03 1.92 3.34 116 DATE_IN_PAST_06_12 2677 0.46 1.92 0.05 117 RCVD_IN_IADB_DK 2673 2.97 1.92 3.26 118 XMSubMetaSx_01 2655 0.50 1.91 0.11 119 TR_XM_PHPForged 2640 0.79 1.90 0.48 120 BOTNET_NORDNS 2636 0.50 1.89 0.11 121 RELAYCOUNTRY_DE 2621 0.79 1.88 0.49 122 TR_XM_FormFill2 2582 0.78 1.85 0.48 123 XM_H_PHPOS 2573 0.77 1.85 0.47 124 XMGenDplmaNmb 2555 1.23 1.83 1.06 125 TR_XM_DK_SendGrid 2538 3.13 1.82 3.49 126 TM2_M_VERY_LONG_WORD 2508 1.33 1.80 1.20 127 RCVD_IN_RP_RNBL 2465 0.46 1.77 0.09 128 XMHTML_After_End 2452 0.93 1.76 0.70 129 XMBrknScrpt_02 2432 0.81 1.75 0.55 130 HDRS_MISSP 2432 0.39 1.75 0.01 131 URI_TRY_3LD 2419 1.47 1.74 1.39 132 URI_NOVOWEL 2414 0.62 1.73 0.31 133 TR_XM_INV_DKIM 2404 0.47 1.73 0.12 134 FROM_SUSPICIOUS_NTLD 2362 0.41 1.70 0.05 135 FROM_SUSPICIOUS_NTLD_FP 2334 0.40 1.68 0.05 136 MIME_HEADER_CTYPE_ONLY 2330 0.56 1.67 0.25 137 RCVD_IN_RP_SAFE 2322 7.35 1.67 8.94 138 TR_XM_DK_Bayes1 2266 12.72 1.63 15.83 139 HK_RANDOM_FROM 2255 0.45 1.62 0.13 140 T_XMDrugObfuBody_00 2253 0.84 1.62 0.62 141 XM_DK_Undo_01 2169 1.59 1.56 1.60 142 XM_UB60 2149 0.39 1.54 0.07 143 XMSubMetaI_00 2133 0.76 1.53 0.54 144 RELAYCOUNTRY_IN 2116 0.45 1.52 0.16 145 XM_H_PHPMailer 2106 0.75 1.51 0.53 146 XMBody_17 2102 0.97 1.51 0.82 147 XMStockSpam_06 2086 1.13 1.50 1.02 148 DIET_1 2081 0.74 1.49 0.53 149 RCVD_IN_MSPIKE_L5 2040 0.40 1.46 0.10 150 T_MONEY_PERCENT 2040 0.68 1.46 0.46 151 TR_LOTS_OF_MONEY2 2040 0.68 1.46 0.46 152 DKIM_ADSP_CUSTOM_MED 1991 1.14 1.43 1.05 153 T_FILL_THIS_FORM_SHORT 1978 1.12 1.42 1.04 154 XMSubMetaSxObfu_03 1972 0.91 1.42 0.77 155 T_XMHurry_00 1964 0.82 1.41 0.66 156 REMOVE_BEFORE_LINK 1928 0.57 1.38 0.34 157 LongTLD 1893 0.45 1.36 0.19 158 FSL_THIS_IS_ADV 1817 0.42 1.30 0.18 159 RCVD_IN_RP_CERTIFIED 1816 6.66 1.30 8.15 160 FORGED_GMAIL_RCVD 1796 0.70 1.29 0.54 161 NML_ADSP_CUSTOM_MED 1752 0.87 1.26 0.76 162 HTML_IMAGE_ONLY_12 1731 0.40 1.24 0.17 163 MAILING_LIST_MULTI 1723 2.27 1.24 2.56 164 TR_XM_DK_Bayes2 1577 11.32 1.13 14.17 165 NO_FM_NAME_IP_HOSTN 1576 0.25 1.13 0.00 166 URIBL_SBL_A 1552 0.46 1.11 0.28 167 XMBdyGiftCard01 1549 0.92 1.11 0.86 168 XM_UB80 1532 0.25 1.10 0.02 169 XM_ProductURIs 1529 0.69 1.10 0.58 170 XMMoneyMeta_00 1515 0.64 1.09 0.52 171 XMSlimDrugH 1515 0.52 1.09 0.36 172 MPART_ALT_DIFF_COUNT 1501 0.47 1.08 0.29 173 XMPhish14 1486 0.56 1.07 0.42 174 HK_RANDOM_ENVFROM 1475 0.31 1.06 0.11 175 XMNoVowels 1472 0.84 1.06 0.77 176 FVGT_m_MULTI_ODD_EMAIL 1442 0.24 1.04 0.02 177 SUBJECT_NEEDS_ENCODING 1402 0.23 1.01 0.01 178 SUBJ_ILLEGAL_CHARS 1396 0.23 1.00 0.01 179 TR_LOTS_OF_MONEY3 1360 0.56 0.98 0.44 180 XM_H_PHPOS_M 1349 0.35 0.97 0.17 181 TR_MetaPhish_Combo_01 1319 0.93 0.95 0.92 182 RCVD_IN_PSBL 1308 0.23 0.94 0.03 183 XMBody_78 1294 0.43 0.93 0.29 184 XM_H_Long_From02 1291 1.07 0.93 1.11 185 XMPhish30 1283 0.72 0.92 0.66 186 XMPhish08 1269 0.61 0.91 0.52 187 THIS_AD 1248 0.28 0.90 0.11 188 TR_Mismatch_TLD_01 1243 0.39 0.89 0.25 189 UNPARSEABLE_RELAY 1243 1.87 0.89 2.15 190 XMSubMetaSSx_00 1233 0.36 0.89 0.21 191 HTML_FONT_FACE_BAD 1218 0.91 0.87 0.92 192 XM_UB99 1203 0.19 0.86 0.00 193 XM_PDF 1181 5.20 0.85 6.42 194 T_Symld_Words_02 1178 0.64 0.85 0.58 195 URIBL_ABUSE_SURBL 1155 0.28 0.83 0.13 196 XMSexyCombo_02 1140 0.20 0.82 0.02 197 XM_OfRef7 1128 0.30 0.81 0.16 198 DATE_IN_PAST_12_24 1118 0.23 0.80 0.07 199 SUBJ_DOLLARS 1105 0.44 0.79 0.35 200 PLING_QUERY 1099 0.53 0.79 0.45 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 426193 87.79 95.40 85.66 2 RELAYCOUNTRY_US 383527 77.23 77.74 77.09 3 DKIM_SIGNED 355633 72.20 74.78 71.48 4 XM_DK_Pass 349207 70.74 72.74 70.19 5 XM_B_Unicode 331388 67.54 70.88 66.61 6 DKIM_VALID 330575 65.68 62.96 66.44 7 DCC_CHECK_NEGATIVE 299168 51.30 19.77 60.13 8 BAYES_50 259640 51.19 47.63 52.19 9 DKIM_VALID_AU 253686 50.23 47.52 50.99 10 XMListUnsubscribeExists 239361 51.16 62.07 48.11 11 XM_B_Unicode3 195512 40.21 43.46 39.30 12 DCC_CHECK 188662 46.74 78.25 37.92 13 T_TM2_M_HEADER_IN_MSG 147536 27.65 20.47 29.65 14 DKIM_VALID_EF 125231 24.80 23.46 25.17 15 HTML_FONT_LOW_CONTRAST 122553 26.21 31.86 24.63 16 FVGT_m_MULTI_ODD 110427 22.36 22.96 22.19 17 BAYES_00 110400 18.06 3.29 22.19 18 LOC_TINY_FONT_1 110395 24.17 31.26 22.19 19 XMSubLong 99081 21.59 27.56 19.91 20 ALL_TRUSTED 96107 15.53 1.99 19.32 21 MIME_HTML_ONLY 95213 24.21 42.32 19.14 22 TR_XM_DK_Bayes 83572 13.65 2.43 16.80 23 T_KAM_HTML_FONT_INVALID 78956 17.06 21.30 15.87 24 TR_XM_DK_Bayes1 78746 12.72 1.63 15.83 25 TR_XM_DK_Bayes2 70485 11.32 1.13 14.17 26 XM_Body_Dirty_Words 68590 15.40 21.14 13.79 27 RCVD_IN_MSPIKE_H2 60868 11.48 8.81 12.23 28 XM_Multi_Part_URI 56714 12.52 16.51 11.40 29 XM_B_Unsub 47085 10.78 15.48 9.46 30 RCVD_IN_MSPIKE_WL 46675 8.20 3.97 9.38 31 RCVD_IN_MSPIKE_H3 46675 8.20 3.97 9.38 32 RCVD_IN_RP_SAFE 44472 7.35 1.67 8.94 33 TooManyTo_001 43608 8.02 5.36 8.76 34 LOTS_OF_MONEY 42798 9.39 12.19 8.60 35 XM_Evil_Numbers_Gen 40707 8.80 11.03 8.18 36 RCVD_IN_RP_CERTIFIED 40573 6.66 1.30 8.15 37 LotsOfNums_01 36770 7.62 8.46 7.39 38 XM_DKIMWhitelistDomains 35031 5.52 0.08 7.04 39 XM_B_Phish_Phrases 33240 6.99 8.08 6.68 40 FSL_BULK_SIG 32863 9.25 18.70 6.61 41 HTML_IMAGE_RATIO_02 32238 7.75 12.27 6.48 42 XM_PDF 31919 5.20 0.85 6.42 43 XM_DK_Undo_02 31638 11.90 31.70 6.36 44 XM_B_SpammyTLD 29827 5.50 3.75 5.99 45 BAYES_40 29743 5.65 4.47 5.98 46 XM_SendGrid 29590 5.59 4.33 5.95 47 RELAYCOUNTRY_META 29214 9.41 22.04 5.87 48 XM_H_Long_From01 26729 5.79 7.28 5.37 49 MIME_QP_LONG_LINE 25797 5.14 4.99 5.18 50 IN_ZIMBRA_NJ_WHITELIST 25712 4.04 0.02 5.17 51 HTML_IMAGE_RATIO_04 25482 5.31 5.96 5.12 52 BAYES_60 25258 5.59 7.42 5.08 53 DKIM_INVALID 25058 6.52 11.82 5.04 54 BAYES_20 23542 4.40 3.24 4.73 55 T_TooManySym_01 22240 4.01 2.38 4.47 56 RCVD_IN_IADB_LISTED 22108 3.94 2.13 4.44 57 XMStrtUSub 21771 4.27 3.89 4.38 58 PDS_OTHER_BAD_TLD 20686 3.85 2.74 4.16 59 BOTNET_IPINHOSTNAME 20066 6.19 13.92 4.03 60 XMSexyCombo_05 19658 5.96 13.16 3.95 61 XMSubMetaSx_00 19263 5.10 9.50 3.87 62 RCVD_IN_IADB_SPF 19067 3.43 1.98 3.83 63 MPART_ALT_DIFF 19009 4.83 8.46 3.82 64 HTML_IMAGE_RATIO_06 18736 3.71 3.51 3.77 65 T_REMOTE_IMAGE 17695 4.94 9.90 3.56 66 TR_XM_DK_SendGrid 17367 3.13 1.82 3.49 67 XMNumbers 16909 4.52 8.54 3.40 68 RCVD_IN_IADB_SENDERID 16615 3.03 1.92 3.34 69 ANY_BOUNCE_MESSAGE 16515 2.74 0.66 3.32 70 BOUNCE_MESSAGE 16514 2.74 0.66 3.32 71 SUBJ_ALL_CAPS 16384 3.01 2.02 3.29 72 RCVD_IN_IADB_DK 16212 2.97 1.92 3.26 73 BAYES_05 16124 2.96 1.97 3.24 74 TR_Symld_Words 15993 3.09 2.65 3.21 75 XM_UncommonTLD01 15592 4.97 11.52 3.13 76 BAYES_99 14587 6.51 19.28 2.93 77 RCVD_IN_IADB_VOUCHED 14498 2.41 0.63 2.91 78 NO_DNS_FOR_FROM 13447 4.26 9.84 2.70 79 FROM_EXCESS_BASE64 13133 2.95 4.05 2.64 80 HTML_IMAGE_RATIO_08 12972 2.67 2.91 2.61 81 HTML_MIME_NO_HTML_TAG 12928 5.32 15.06 2.60 82 MIME_HTML_ONLY_MULTI 12766 2.88 4.00 2.57 83 MAILING_LIST_MULTI 12716 2.27 1.24 2.56 84 BOTNET 12710 6.51 20.64 2.55 85 TM2_M_URI_OPT_OUT 12313 2.87 4.30 2.47 86 T_OBFU_PDF_ATTACH 11610 1.88 0.26 2.33 87 BAYES_999 11603 4.95 14.31 2.33 88 XM_B_Unsub2 11347 2.54 3.49 2.28 89 BAYES_80 11233 3.57 8.25 2.26 90 UNPARSEABLE_RELAY 10697 1.87 0.89 2.15 91 T_TooManySym_02 10643 1.83 0.73 2.14 92 XM_CamelCaseFrm001 10624 2.37 3.21 2.14 93 XM_SPF_SoftFail 10596 2.81 5.24 2.13 94 TooManyTo_002 10328 1.77 0.68 2.08 95 KHOP_HELO_FCRDNS 10016 3.69 9.68 2.01 96 MIME_HTML_MOSTLY 9559 2.50 4.58 1.92 97 RCVD_IN_IADB_OPTIN 9248 1.54 0.39 1.86 98 TVD_RCVD_IP 9224 1.53 0.38 1.85 99 UPPERCASE_75_100 8710 1.38 0.06 1.75 100 XM_H_Trusted_IP 8654 1.36 0.00 1.74 101 RELAYCOUNTRY_CA 8472 2.17 3.84 1.70 102 HELO_NODOT 8354 1.44 0.61 1.68 103 HELO_NO_DOMAIN 8342 1.44 0.58 1.68 104 TR_DCC_Bayes_99 8215 4.37 14.10 1.65 105 UNTRUSTED_Relay 8148 4.42 14.34 1.64 106 XMDiploma_00 8113 1.88 2.75 1.63 107 XM_DK_Undo_01 7960 1.59 1.56 1.60 108 T_XMDrugObfuBody_14 7900 1.75 2.34 1.59 109 T_XMDrugObfuBody_08 7670 1.82 2.84 1.54 110 INVALID_MSGID 7583 1.26 0.30 1.52 111 IN_HORDE_ADDRESS_BOOK 7448 1.18 0.03 1.50 112 TO_MALFORMED 7041 1.11 0.02 1.42 113 URI_TRY_3LD 6939 1.47 1.74 1.39 114 TooManyTo_003 6937 1.20 0.50 1.39 115 XM_OfRef6 6886 1.62 2.44 1.38 116 XMCapTrack 6836 1.16 0.40 1.37 117 URI_HEX 6830 1.63 2.56 1.37 118 RELAYCOUNTRY_GB 6777 1.72 3.00 1.36 119 BAYES_95 6415 1.92 4.17 1.29 120 XM_GoogleGroups 6330 1.09 0.44 1.27 121 CK_HELO_DYNAMIC_SPLIT_IP 6184 1.00 0.12 1.24 122 HELO_DYNAMIC_IPADDR2 6177 0.98 0.04 1.24 123 TM2_M_VERY_LONG_WORD 5993 1.33 1.80 1.20 124 USER_IN_DEF_DKIM_WL 5635 0.89 0.01 1.13 125 XM_H_Long_From02 5527 1.07 0.93 1.11 126 TR_MSPIKEBAYES00 5504 0.87 0.02 1.11 127 RCVD_IN_BL_SPAMCOP_NET 5325 1.63 3.63 1.07 128 XMGappySubj_01 5323 0.90 0.28 1.07 129 XMGenDplmaNmb 5269 1.23 1.83 1.06 130 DKIM_ADSP_CUSTOM_MED 5247 1.14 1.43 1.05 131 T_FILL_THIS_FORM_SHORT 5160 1.12 1.42 1.04 132 URI_OPTOUT_3LD 5149 0.88 0.32 1.03 133 XMStockSpam_06 5081 1.13 1.50 1.02 134 TooManyTo_004 5011 0.88 0.45 1.01 135 XMSubNoVowel 4643 0.83 0.46 0.93 136 TR_MetaPhish_Combo_01 4585 0.93 0.95 0.92 137 HTML_FONT_FACE_BAD 4568 0.91 0.87 0.92 138 XM_UB50 4490 2.42 7.83 0.90 139 XMSexyCombo_01 4311 1.35 3.08 0.87 140 XMBdyGiftCard01 4288 0.92 1.11 0.86 141 TooManyTo_005 4195 0.75 0.40 0.84 142 RCVD_IN_MSPIKE_BL 4121 1.95 5.95 0.83 143 XMBody_17 4100 0.97 1.51 0.82 144 XMNoVowels 3851 0.84 1.06 0.77 145 XMSubMetaSxObfu_03 3827 0.91 1.42 0.77 146 NML_ADSP_CUSTOM_MED 3774 0.87 1.26 0.76 147 SpammyFromTLD_01 3501 1.09 2.48 0.70 148 XMHTML_After_End 3488 0.93 1.76 0.70 149 XMBody_95 3354 0.55 0.09 0.67 150 XMPhish30 3279 0.72 0.92 0.66 151 T_XMHurry_00 3275 0.82 1.41 0.66 152 XM_SPF_Unknown 3136 0.66 0.77 0.63 153 T_XMDrugObfuBody_00 3072 0.84 1.62 0.62 154 XM_B_REG_HTML 2987 0.60 0.60 0.60 155 HTTPS_HTTP_MISMATCH 2930 0.61 0.67 0.59 156 XM_ProductURIs 2883 0.69 1.10 0.58 157 T_Symld_Words_02 2878 0.64 0.85 0.58 158 FILL_THIS_FORM 2748 0.48 0.24 0.55 159 XMBrknScrpt_02 2741 0.81 1.75 0.55 160 DKIM_ADSP_NXDOMAIN 2714 1.69 5.76 0.55 161 XMSubMetaI_00 2709 0.76 1.53 0.54 162 FORGED_GMAIL_RCVD 2667 0.70 1.29 0.54 163 XM_H_PHPMailer 2646 0.75 1.51 0.53 164 DIET_1 2633 0.74 1.49 0.53 165 XM_DIRTYINTL 2625 1.14 3.31 0.53 166 T_TooManySym_03 2620 0.46 0.22 0.53 167 FROM_GOV_SPOOF 2595 0.45 0.19 0.52 168 XMPhish08 2586 0.61 0.91 0.52 169 XMMoneyMeta_00 2563 0.64 1.09 0.52 170 AC_DIV_BONANZA 2500 0.43 0.15 0.50 171 XM_ShortIntro_01 2486 0.47 0.35 0.50 172 TR_XM_PHPDW 2482 0.87 2.18 0.50 173 FROM_GOV_DKIM_AU 2440 0.47 0.39 0.49 174 RELAYCOUNTRY_DE 2429 0.79 1.88 0.49 175 XMSexyCombo_04 2414 0.81 1.97 0.49 176 RCVD_IN_MSPIKE_L3 2408 1.26 4.01 0.48 177 TR_XM_PHPForged 2394 0.79 1.90 0.48 178 TR_XM_FormFill2 2391 0.78 1.85 0.48 179 TM2_M_A_HREF_HREF 2369 0.51 0.62 0.48 180 USER_IN_WHITELIST 2368 0.37 0.00 0.48 181 XM_H_PHPOS 2361 0.77 1.85 0.47 182 MISSING_HEADERS 2360 0.48 0.50 0.47 183 TM2_M_BODY_EMPTY 2342 0.40 0.13 0.47 184 HTML_TAG_BALANCE_BODY 2275 0.47 0.53 0.46 185 SHORT_HELO_AND_INLINE_IMAGE 2275 0.36 0.03 0.46 186 TR_LOTS_OF_MONEY2 2268 0.68 1.46 0.46 187 T_MONEY_PERCENT 2268 0.68 1.46 0.46 188 PLING_QUERY 2252 0.53 0.79 0.45 189 FILL_THIS_FORM_LONG 2229 0.39 0.19 0.45 190 TR_LOTS_OF_MONEY3 2207 0.56 0.98 0.44 191 RELAYCOUNTRY_AU 2172 0.44 0.44 0.44 192 XMPhish14 2105 0.56 1.07 0.42 193 HTML_IMAGE_ONLY_20 2105 0.38 0.22 0.42 194 HTML_IMAGE_ONLY_32 2097 0.37 0.19 0.42 195 XMHTMLBadTable_001 2078 0.48 0.70 0.42 196 T_FILL_THIS_FORM_LOAN 2001 0.34 0.10 0.40 197 XMLngstWrd_00 1980 0.43 0.55 0.40 198 HTML_IMAGE_ONLY_28 1884 0.41 0.53 0.38 199 XMDateMe_00 1825 0.36 0.34 0.37 200 XMLngstWrd_01 1793 0.40 0.53 0.36 ----------------------------------------------------------------------