Email: 461623 Autolearn: 0 AvgScore: 5.86 AvgScanTime: 3.21 sec Spam: 185349 Autolearn: 0 AvgScore: 14.22 AvgScanTime: 3.70 sec Ham: 276274 Autolearn: 0 AvgScore: 0.26 AvgScanTime: 2.89 sec Time Spent Running SA: 412.15 hours Time Spent Processing Spam: 190.39 hours Time Spent Processing Ham: 221.76 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 178803 90.81 96.47 87.02 2 DKIM_SIGNED 114286 63.56 61.66 64.83 3 XM_DK_Pass 112323 62.75 60.60 64.19 4 DCC_CHECK 107583 46.24 58.04 38.32 5 DKIM_VALID 105614 59.36 56.98 60.96 6 XMListUnsubscribeExists 99869 48.64 53.88 45.12 7 MIME_HTML_ONLY 93373 31.00 50.38 18.00 8 DKIM_VALID_AU 90003 48.82 48.56 48.99 9 DCC_CHECK_NEGATIVE 76466 52.91 41.26 60.73 10 BAYES_99 75786 25.82 40.89 15.71 11 XM_H_QuotedFrom 72728 34.32 39.24 31.02 12 XM_DK_Undo_02 66974 24.19 36.13 16.17 13 BAYES_999 58829 20.86 31.74 13.57 14 LOC_TINY_FONT_1 54677 27.24 29.50 25.72 15 HTML_FONT_LOW_CONTRAST 50527 28.45 27.26 29.25 16 BAYES_50 50274 46.12 27.12 58.86 17 HTML_MIME_NO_HTML_TAG 50001 11.51 26.98 1.13 18 TR_DCC_Bayes_99 48272 15.64 26.04 8.66 19 XM_BadFromFormat 47910 10.48 25.85 0.18 20 MISSING_HEADERS 47291 10.45 25.51 0.34 21 BODY_URI_ONLY 46998 10.39 25.36 0.35 22 HTML_SHORT_LINK_IMG_1 46891 15.40 25.30 8.76 23 HTML_IMAGE_ONLY_08 46869 15.44 25.29 8.83 24 MIME_HEADER_CTYPE_ONLY 46836 10.22 25.27 0.13 25 SHORTENER_SHORT_IMG 46663 15.34 25.18 8.74 26 URI_BUFFLY 46623 15.33 25.15 8.74 27 XMSubLong 44830 20.70 24.19 18.36 28 RCVD_IN_RP_RNBL 36602 7.96 19.75 0.05 29 FVGT_m_MULTI_ODD 34591 19.64 18.66 20.30 30 HTML_IMAGE_RATIO_02 33963 13.66 18.32 10.54 31 XM_UncommonTLD01 28598 8.28 15.43 3.48 32 XM_Body_Dirty_Words 28181 13.06 15.20 11.63 33 RELAYCOUNTRY_META 27055 9.89 14.60 6.73 34 MultiRelay 26526 13.18 14.31 12.42 35 DKIM_VALID_EF 25826 21.47 13.93 26.52 36 T_KAM_HTML_FONT_INVALID 25220 11.99 13.61 10.91 37 T_TM2_M_HEADER_IN_MSG 24417 18.56 13.17 22.18 38 XM_Multi_Part_URI 24077 12.17 12.99 11.61 39 BOTNET 24060 5.84 12.98 1.05 40 BAYES_80 22548 7.15 12.17 3.78 41 XMNumbers 21696 6.75 11.71 3.42 42 SpammyFromTLD_02 21052 4.65 11.36 0.15 43 XM_Evil_Numbers_Gen 20146 8.85 10.87 7.50 44 UNTRUSTED_Relay 19598 6.69 10.57 4.09 45 XM_B_Phish_Phrases 18608 7.46 10.04 5.73 46 BOTNET_IPINHOSTNAME 17412 7.68 9.39 6.53 47 XMSexyCombo_05 16565 5.82 8.94 3.72 48 XM_JunkDunk 16403 3.55 8.85 0.00 49 FSL_BULK_SIG 15582 7.71 8.41 7.24 50 BAYES_95 14925 5.00 8.05 2.96 51 BAYES_60 14175 6.67 7.65 6.02 52 FROM_EXCESS_BASE64 13397 5.40 7.23 4.17 53 XMSubMetaSx_00 12244 5.56 6.61 4.86 54 XM_SPF_SoftFail 12217 3.49 6.59 1.42 55 LOTS_OF_MONEY 11473 6.71 6.19 7.07 56 TooManyTo_001 11442 8.48 6.17 10.03 57 T_XMDrugObfuBody_14 11360 5.57 6.13 5.19 58 LotsOfNums_01 11102 7.00 5.99 7.69 59 HTML_IMAGE_RATIO_04 10877 5.03 5.87 4.47 60 RCVD_IN_RP_SAFE 10838 8.76 5.85 10.72 61 XM_H_Long_From01 10618 4.87 5.73 4.29 62 TR_XM_DocInvoice 10375 4.15 5.60 3.17 63 TR_Symld_Words 9731 3.28 5.25 1.97 64 MPART_ALT_DIFF 9349 4.52 5.04 4.17 65 XMNoVowels 9064 3.24 4.89 2.13 66 DKIM_INVALID 8672 4.20 4.68 3.87 67 RCVD_IN_RP_CERTIFIED 8157 7.34 4.40 9.32 68 XMStrtUSub 8103 4.52 4.37 4.62 69 MIME_HTML_MOSTLY 7767 4.14 4.19 4.10 70 XM_UB50 7364 3.81 3.97 3.70 71 URI_HEX 6648 2.29 3.59 1.41 72 HTML_FONT_SIZE_LARGE 6553 2.21 3.54 1.31 73 TR_XM_RelayPhish 6492 1.56 3.50 0.26 74 HTML_IMAGE_RATIO_06 6424 3.19 3.47 3.00 75 MultiRelay_CC 6015 1.39 3.25 0.14 76 MultiRelay_Combo 6015 1.39 3.25 0.14 77 T_TooManySym_01 5857 3.80 3.16 4.23 78 RELAYCOUNTRY_RO 5679 1.24 3.06 0.01 79 MIME_QP_LONG_LINE 5306 3.88 2.86 4.57 80 XM_CamelCaseFrm001 5067 1.95 2.73 1.43 81 TM2_M_URI_OPT_OUT 4991 3.05 2.69 3.28 82 RCVD_IN_MSPIKE_H2 4637 3.35 2.50 3.92 83 XM_SendGrid 4585 3.43 2.47 4.07 84 BOTNET_NORDNS 4549 0.99 2.45 0.01 85 XM_DIRTYINTL 4540 1.93 2.45 1.59 86 DIET_1 4464 1.27 2.41 0.51 87 RELAYCOUNTRY_CA 4242 1.66 2.29 1.24 88 NO_DNS_FOR_FROM 4199 1.70 2.27 1.33 89 XM_OfRef6 4117 1.68 2.22 1.31 90 MIME_HTML_ONLY_MULTI 4076 1.64 2.20 1.27 91 SpammyFromTLD_01 4069 1.06 2.20 0.29 92 SUBJ_ALL_CAPS 4025 1.49 2.17 1.04 93 XMBdyGiftCard01 3907 1.59 2.11 1.24 94 XMSubMetaSSx_00 3862 1.12 2.08 0.48 95 XM_UB99 3737 0.82 2.02 0.02 96 HTML_IMAGE_RATIO_08 3694 2.17 1.99 2.29 97 XMSlimDrugH 3635 0.91 1.96 0.21 98 XM_URI_RBL 3229 0.75 1.74 0.08 99 SUBJ_DOLLARS 3208 0.97 1.73 0.46 100 XMDiploma_00 3200 1.53 1.73 1.40 101 T_Symld_Words_02 3196 1.06 1.72 0.62 102 TM2_M_VERY_LONG_WORD 3162 1.16 1.71 0.80 103 XM_UB60 2970 0.68 1.60 0.07 104 XMMoneyMeta_00 2914 0.74 1.57 0.18 105 RCVD_IN_BL_SPAMCOP_NET 2897 0.71 1.56 0.14 106 DATE_IN_PAST_12_24 2854 0.74 1.54 0.20 107 ALL_TRUSTED 2824 16.78 1.52 27.02 108 T_XMDrugObfuBody_08 2735 1.31 1.48 1.20 109 T_REMOTE_IMAGE 2733 2.51 1.47 3.21 110 XMBody_17 2629 0.83 1.42 0.44 111 XMSubject_48 2455 0.80 1.32 0.45 112 XM_UB80 2426 0.54 1.31 0.02 113 BAYES_40 2417 2.35 1.30 3.05 114 T_XMHurry_00 2402 0.84 1.30 0.54 115 XM_UB999 2386 0.52 1.29 0.01 116 BAYES_00 2375 4.18 1.28 6.12 117 URIBL_BLACK 2368 0.54 1.28 0.04 118 XMSexyCombo_01 2346 0.89 1.27 0.64 119 XMSlimDrugs 2338 0.51 1.26 0.01 120 RCVD_IN_IADB_LISTED 2328 2.60 1.26 3.50 121 XMPhish11 2267 1.14 1.22 1.09 122 UNPARSEABLE_RELAY 2256 3.91 1.22 5.72 123 DRUGS_ERECTILE 2159 0.53 1.16 0.11 124 T_FILL_THIS_FORM_SHORT 2139 0.74 1.15 0.46 125 DATE_IN_PAST_06_12 2107 0.48 1.14 0.04 126 XM_H_Long_From02 2067 2.80 1.12 3.93 127 DKIM_ADSP_CUSTOM_MED 2053 0.88 1.11 0.72 128 RCVD_IN_IADB_SPF 2043 2.30 1.10 3.11 129 RELAYCOUNTRY_FR 2037 0.57 1.10 0.22 130 TR_Caps_n_Bayes_99 2021 0.48 1.09 0.07 131 TR_XM_DK_Bayes 2014 2.79 1.09 3.93 132 XMSubMetaI_00 1991 0.62 1.07 0.32 133 URIBL_DBL_SPAM 1957 0.46 1.06 0.06 134 RCVD_IN_IADB_SENDERID 1935 2.06 1.04 2.74 135 XM_RXBody 1932 0.47 1.04 0.09 136 RCVD_IN_IADB_DK 1922 2.02 1.04 2.68 137 ONLINE_PHARMACY 1914 0.42 1.03 0.00 138 XMPhish30 1907 0.58 1.03 0.27 139 TR_XM_DK_Bayes1 1905 2.59 1.03 3.64 140 HTML_IMAGE_ONLY_24 1897 0.67 1.02 0.43 141 PLING_QUERY 1876 0.69 1.01 0.48 142 TVD_VISIT_PHARMA 1868 0.41 1.01 0.00 143 TooManyTo_002 1825 2.27 0.98 3.13 144 RELAYCOUNTRY_CN 1824 0.42 0.98 0.04 145 NML_ADSP_CUSTOM_MED 1796 0.69 0.97 0.51 146 FORGED_GMAIL_RCVD 1757 0.57 0.95 0.32 147 XM_ProductURIs 1749 1.16 0.94 1.31 148 TR_XM_DK_Bayes2 1746 2.31 0.94 3.23 149 BAYES_20 1731 1.58 0.93 2.02 150 TooManyTo_003 1717 2.03 0.93 2.77 151 DATE_IN_PAST_03_06 1676 0.41 0.90 0.07 152 RELAYCOUNTRY_AT 1666 0.41 0.90 0.09 153 XMGenDplmaNmb 1665 0.80 0.90 0.73 154 XMStockSpam_06 1661 1.23 0.90 1.45 155 FILL_THIS_FORM 1637 0.68 0.88 0.55 156 MAILING_LIST_MULTI 1630 1.43 0.88 1.81 157 URI_TRY_3LD 1625 1.07 0.88 1.20 158 XM_DK_Undo_01 1621 1.26 0.87 1.52 159 T_FILL_THIS_FORM_LONG 1558 0.62 0.84 0.47 160 BODY_ENHANCEMENT 1527 0.34 0.82 0.02 161 SHORTENED_URL_SRC 1502 0.44 0.81 0.20 162 XM_B_REG_HTML 1472 0.81 0.79 0.82 163 DRUG_ED_CAPS 1449 0.31 0.78 0.00 164 XMPhish14 1445 0.45 0.78 0.23 165 XM_UB95 1442 0.32 0.78 0.01 166 XMBody_78 1424 0.50 0.77 0.33 167 XM_HighProb1 1390 0.31 0.75 0.01 168 XM_H_PHPOS 1386 0.90 0.75 1.01 169 XMSubMetaSx_01 1382 0.61 0.75 0.52 170 XM_B_COPY_HTML 1350 0.57 0.73 0.47 171 XMHTMLBadTable_001 1333 0.78 0.72 0.82 172 RELAYCOUNTRY_BG 1319 0.29 0.71 0.00 173 DKIM_ADSP_NXDOMAIN 1317 0.52 0.71 0.39 174 XMGppyBdWords 1283 0.33 0.69 0.09 175 MPART_ALT_DIFF_COUNT 1265 1.29 0.68 1.69 176 XM_Body_Obfu01 1248 0.34 0.67 0.12 177 FILL_THIS_FORM_LOAN 1200 0.52 0.65 0.43 178 XM_H_PHPMailer 1178 0.66 0.64 0.68 179 TM2_M_A_HREF_HREF 1174 0.62 0.63 0.61 180 TooManyTo_004 1165 0.73 0.63 0.80 181 T_TooManySym_02 1161 1.48 0.63 2.06 182 HTML_FONT_SIZE_HUGE 1153 0.34 0.62 0.16 183 RCVD_IN_MSPIKE_WL 1147 1.37 0.62 1.87 184 XMClaimOffer 1141 0.30 0.62 0.09 185 TVD_SPACE_RATIO_MINFP 1138 0.25 0.61 0.00 186 RELAYCOUNTRY_IN 1135 0.27 0.61 0.05 187 RCVD_IN_MSPIKE_H3 1131 1.36 0.61 1.87 188 T_HTML_TAG_BALANCE_CENTER 1110 0.33 0.60 0.15 189 ANY_BOUNCE_MESSAGE 1097 9.50 0.59 15.48 190 BOUNCE_MESSAGE 1096 9.50 0.59 15.48 191 T_MONEY_PERCENT 1095 0.38 0.59 0.23 192 TR_LOTS_OF_MONEY2 1095 0.38 0.59 0.23 193 XMHTML_After_End 1085 0.41 0.59 0.29 194 RELAYCOUNTRY_DE 1078 0.38 0.58 0.25 195 KHOP_DYNAMIC 1063 0.41 0.57 0.30 196 RELAYCOUNTRY_NL 1059 0.33 0.57 0.18 197 FVGT_m_MULTI_ODD_EMAIL 1048 0.30 0.57 0.13 198 LOW_PRICE 1039 0.32 0.56 0.15 199 TooManyTo_005 1020 0.64 0.55 0.71 200 LONG_JUNK_URI3 1018 0.27 0.55 0.08 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 240417 90.81 96.47 87.02 2 DKIM_SIGNED 179116 63.56 61.66 64.83 3 XM_DK_Pass 177345 62.75 60.60 64.19 4 DKIM_VALID 168419 59.36 56.98 60.96 5 DCC_CHECK_NEGATIVE 167769 52.91 41.26 60.73 6 BAYES_50 162622 46.12 27.12 58.86 7 DKIM_VALID_AU 135353 48.82 48.56 48.99 8 XMListUnsubscribeExists 124657 48.64 53.88 45.12 9 DCC_CHECK 105873 46.24 58.04 38.32 10 XM_H_QuotedFrom 85688 34.32 39.24 31.02 11 HTML_FONT_LOW_CONTRAST 80821 28.45 27.26 29.25 12 ALL_TRUSTED 74640 16.78 1.52 27.02 13 DKIM_VALID_EF 73271 21.47 13.93 26.52 14 LOC_TINY_FONT_1 71052 27.24 29.50 25.72 15 T_TM2_M_HEADER_IN_MSG 61278 18.56 13.17 22.18 16 FVGT_m_MULTI_ODD 56075 19.64 18.66 20.30 17 XMSubLong 50726 20.70 24.19 18.36 18 MIME_HTML_ONLY 49717 31.00 50.38 18.00 19 XM_DK_Undo_02 44673 24.19 36.13 16.17 20 BAYES_99 43415 25.82 40.89 15.71 21 ANY_BOUNCE_MESSAGE 42757 9.50 0.59 15.48 22 BOUNCE_MESSAGE 42756 9.50 0.59 15.48 23 XM_DKIMWhitelistDomains 41323 8.95 0.01 14.96 24 BAYES_999 37485 20.86 31.74 13.57 25 MultiRelay 34325 13.18 14.31 12.42 26 XM_Body_Dirty_Words 32128 13.06 15.20 11.63 27 XM_Multi_Part_URI 32088 12.17 12.99 11.61 28 T_KAM_HTML_FONT_INVALID 30131 11.99 13.61 10.91 29 RCVD_IN_RP_SAFE 29614 8.76 5.85 10.72 30 HTML_IMAGE_RATIO_02 29115 13.66 18.32 10.54 31 TooManyTo_001 27707 8.48 6.17 10.03 32 RCVD_IN_RP_CERTIFIED 25736 7.34 4.40 9.32 33 HTML_IMAGE_ONLY_08 24391 15.44 25.29 8.83 34 HTML_SHORT_LINK_IMG_1 24195 15.40 25.30 8.76 35 SHORTENER_SHORT_IMG 24150 15.34 25.18 8.74 36 URI_BUFFLY 24150 15.33 25.15 8.74 37 TR_DCC_Bayes_99 23913 15.64 26.04 8.66 38 LotsOfNums_01 21234 7.00 5.99 7.69 39 XM_Evil_Numbers_Gen 20728 8.85 10.87 7.50 40 FSL_BULK_SIG 20013 7.71 8.41 7.24 41 LOTS_OF_MONEY 19519 6.71 6.19 7.07 42 RELAYCOUNTRY_META 18598 9.89 14.60 6.73 43 BOTNET_IPINHOSTNAME 18040 7.68 9.39 6.53 44 BAYES_00 16898 4.18 1.28 6.12 45 BAYES_60 16632 6.67 7.65 6.02 46 XM_B_Phish_Phrases 15823 7.46 10.04 5.73 47 UNPARSEABLE_RELAY 15813 3.91 1.22 5.72 48 TVD_RCVD_IP 14613 3.27 0.26 5.29 49 T_XMDrugObfuBody_14 14347 5.57 6.13 5.19 50 XMSubMetaSx_00 13428 5.56 6.61 4.86 51 XMStrtUSub 12754 4.52 4.37 4.62 52 MIME_QP_LONG_LINE 12626 3.88 2.86 4.57 53 HTML_IMAGE_RATIO_04 12340 5.03 5.87 4.47 54 XM_H_Long_From01 11855 4.87 5.73 4.29 55 T_TooManySym_01 11681 3.80 3.16 4.23 56 MPART_ALT_DIFF 11532 4.52 5.04 4.17 57 FROM_EXCESS_BASE64 11521 5.40 7.23 4.17 58 MIME_HTML_MOSTLY 11333 4.14 4.19 4.10 59 UNTRUSTED_Relay 11291 6.69 10.57 4.09 60 XM_SendGrid 11258 3.43 2.47 4.07 61 TR_XM_DK_Bayes 10869 2.79 1.09 3.93 62 XM_H_Long_From02 10862 2.80 1.12 3.93 63 RCVD_IN_MSPIKE_H2 10820 3.35 2.50 3.92 64 DKIM_INVALID 10697 4.20 4.68 3.87 65 BAYES_80 10445 7.15 12.17 3.78 66 XMSexyCombo_05 10289 5.82 8.94 3.72 67 XM_UB50 10235 3.81 3.97 3.70 68 TR_XM_DK_Bayes1 10057 2.59 1.03 3.64 69 RCVD_IN_IADB_LISTED 9667 2.60 1.26 3.50 70 XM_UncommonTLD01 9627 8.28 15.43 3.48 71 IN_ZIMBRA_NJ_WHITELIST 9464 2.06 0.02 3.43 72 XMNumbers 9447 6.75 11.71 3.42 73 TM2_M_URI_OPT_OUT 9071 3.05 2.69 3.28 74 TR_XM_DK_Bayes2 8934 2.31 0.94 3.23 75 T_REMOTE_IMAGE 8865 2.51 1.47 3.21 76 RELAYCOUNTRY_PH 8828 1.92 0.01 3.20 77 TR_XM_DocInvoice 8770 4.15 5.60 3.17 78 TooManyTo_002 8643 2.27 0.98 3.13 79 RCVD_IN_IADB_SPF 8579 2.30 1.10 3.11 80 BAYES_40 8425 2.35 1.30 3.05 81 HTML_IMAGE_RATIO_06 8294 3.19 3.47 3.00 82 BAYES_95 8170 5.00 8.05 2.96 83 TooManyTo_003 7652 2.03 0.93 2.77 84 RCVD_IN_IADB_SENDERID 7577 2.06 1.04 2.74 85 RCVD_IN_IADB_DK 7399 2.02 1.04 2.68 86 INVALID_MSGID 6756 1.55 0.21 2.45 87 TO_MALFORMED 6488 1.41 0.00 2.35 88 RCVD_IN_IADB_VOUCHED 6483 1.62 0.53 2.35 89 HTML_IMAGE_RATIO_08 6328 2.17 1.99 2.29 90 USER_IN_DEF_DKIM_WL 6043 1.31 0.01 2.19 91 XMNoVowels 5887 3.24 4.89 2.13 92 T_TooManySym_02 5687 1.48 0.63 2.06 93 BAYES_20 5573 1.58 0.93 2.02 94 TR_Symld_Words 5430 3.28 5.25 1.97 95 RCVD_IN_MSPIKE_WL 5163 1.37 0.62 1.87 96 RCVD_IN_MSPIKE_H3 5156 1.36 0.61 1.87 97 MAILING_LIST_MULTI 4991 1.43 0.88 1.81 98 IN_HORDE_ADDRESS_BOOK 4831 1.06 0.04 1.75 99 MPART_ALT_DIFF_COUNT 4668 1.29 0.68 1.69 100 XM_DIRTYINTL 4383 1.93 2.45 1.59 101 XM_DK_Undo_01 4197 1.26 0.87 1.52 102 RCVD_IN_IADB_OPTIN 4108 1.04 0.36 1.49 103 XMStockSpam_06 4012 1.23 0.90 1.45 104 XM_CamelCaseFrm001 3948 1.95 2.73 1.43 105 XM_SPF_SoftFail 3916 3.49 6.59 1.42 106 URI_HEX 3905 2.29 3.59 1.41 107 XMDiploma_00 3862 1.53 1.73 1.40 108 BAYES_05 3830 1.05 0.55 1.39 109 NO_DNS_FOR_FROM 3665 1.70 2.27 1.33 110 HTML_FONT_SIZE_LARGE 3626 2.21 3.54 1.31 111 XM_OfRef6 3622 1.68 2.22 1.31 112 XM_ProductURIs 3608 1.16 0.94 1.31 113 XM_PDF 3505 0.83 0.18 1.27 114 MIME_HTML_ONLY_MULTI 3500 1.64 2.20 1.27 115 XM_GoogleGroups 3446 0.87 0.30 1.25 116 RELAYCOUNTRY_CA 3424 1.66 2.29 1.24 117 XMBdyGiftCard01 3423 1.59 2.11 1.24 118 URI_TRY_3LD 3310 1.07 0.88 1.20 119 T_XMDrugObfuBody_08 3306 1.31 1.48 1.20 120 HTML_MIME_NO_HTML_TAG 3123 11.51 26.98 1.13 121 XMSubMetaSxObfu_02 3023 0.76 0.26 1.09 122 XMPhish11 3006 1.14 1.22 1.09 123 BOTNET 2901 5.84 12.98 1.05 124 SUBJ_ALL_CAPS 2869 1.49 2.17 1.04 125 XMLngstWrd_00 2858 0.75 0.32 1.03 126 T_TooManySym_03 2834 0.69 0.18 1.03 127 XM_H_PHPOS 2786 0.90 0.75 1.01 128 USER_IN_WHITELIST 2716 0.59 0.00 0.98 129 XMBody_95 2547 0.60 0.12 0.92 130 XMLngstWrd_01 2444 0.65 0.29 0.88 131 XMHTMLBadTable_001 2266 0.78 0.72 0.82 132 XM_B_REG_HTML 2255 0.81 0.79 0.82 133 TM2_M_VERY_LONG_WORD 2209 1.16 1.71 0.80 134 TooManyTo_004 2197 0.73 0.63 0.80 135 XMGenDplmaNmb 2007 0.80 0.90 0.73 136 DKIM_ADSP_CUSTOM_MED 1988 0.88 1.11 0.72 137 TooManyTo_005 1950 0.64 0.55 0.71 138 XM_H_PHPMailer 1876 0.66 0.64 0.68 139 XMSexyCombo_01 1760 0.89 1.27 0.64 140 T_Symld_Words_02 1711 1.06 1.72 0.62 141 HTML_EXTRA_CLOSE 1693 0.37 0.01 0.61 142 TM2_M_A_HREF_HREF 1692 0.62 0.63 0.61 143 XMLngstWrd_02 1600 0.44 0.24 0.58 144 XM_Walgreens_Forge 1549 0.34 0.01 0.56 145 RDNS_DYNAMIC 1543 0.55 0.54 0.56 146 FILL_THIS_FORM 1525 0.68 0.88 0.55 147 T_XMHurry_00 1482 0.84 1.30 0.54 148 XMSubMetaSx_01 1434 0.61 0.75 0.52 149 NML_ADSP_CUSTOM_MED 1409 0.69 0.97 0.51 150 DIET_1 1408 1.27 2.41 0.51 151 HELO_NODOT 1362 0.35 0.13 0.49 152 RELAYCOUNTRY_GB 1327 0.48 0.47 0.48 153 PLING_QUERY 1321 0.69 1.01 0.48 154 XMSubMetaSSx_00 1318 1.12 2.08 0.48 155 T_FILL_THIS_FORM_LONG 1308 0.62 0.84 0.47 156 XM_B_COPY_HTML 1290 0.57 0.73 0.47 157 T_FILL_THIS_FORM_SHORT 1282 0.74 1.15 0.46 158 SUBJ_DOLLARS 1273 0.97 1.73 0.46 159 T_XMDrugObfuBody_00 1267 0.49 0.53 0.46 160 XM_Lotto 1259 0.39 0.29 0.46 161 XMSubject_48 1253 0.80 1.32 0.45 162 XMBody_17 1222 0.83 1.42 0.44 163 T_TooManySym_04 1202 0.27 0.03 0.44 164 XM_D_tchamptons_WL 1198 0.26 0.00 0.43 165 HTML_IMAGE_ONLY_24 1180 0.67 1.02 0.43 166 FILL_THIS_FORM_LOAN 1178 0.52 0.65 0.43 167 TR_MetaPhish_Combo_01 1163 0.45 0.50 0.42 168 XMLngstWrd_03 1137 0.32 0.18 0.41 169 XM_H_PHPOS_M 1097 0.43 0.48 0.40 170 HTML_FONT_FACE_BAD 1083 0.40 0.42 0.39 171 URIBL_SBL_A 1080 0.34 0.26 0.39 172 DKIM_ADSP_NXDOMAIN 1076 0.52 0.71 0.39 173 HTML_NONELEMENT_30_40 1059 0.26 0.08 0.38 174 XMBrknScrpt_02 1035 0.39 0.41 0.37 175 SUBJ_ILLEGAL_CHARS 1024 0.38 0.38 0.37 176 SUBJECT_NEEDS_ENCODING 1024 0.38 0.38 0.37 177 REMOVE_BEFORE_LINK 995 0.37 0.39 0.36 178 XMBody_29 986 0.29 0.18 0.36 179 XMCapTrack 975 0.27 0.15 0.35 180 BODY_URI_ONLY 960 10.39 25.36 0.35 181 MISSING_HEADERS 950 10.45 25.51 0.34 182 URI_NOVOWEL 945 0.35 0.36 0.34 183 HTML_TAG_BALANCE_BODY 909 0.41 0.54 0.33 184 XMSubGiftCard1 903 0.23 0.08 0.33 185 XMBody_78 901 0.50 0.77 0.33 186 XMSubMetaI_00 878 0.62 1.07 0.32 187 FORGED_GMAIL_RCVD 871 0.57 0.95 0.32 188 XM_ShortIntro_01 859 0.37 0.47 0.31 189 RELAYCOUNTRY_AU 841 0.34 0.39 0.30 190 XMGappySubj_01 841 0.26 0.20 0.30 191 KHOP_DYNAMIC 821 0.41 0.57 0.30 192 XMSubGiftCard2 813 0.18 0.01 0.29 193 SpammyFromTLD_01 805 1.06 2.20 0.29 194 FROM_EGROUPS 802 0.18 0.01 0.29 195 XMHTML_After_End 793 0.41 0.59 0.29 196 HTML_IMAGE_ONLY_20 760 0.36 0.48 0.28 197 XMPhish30 752 0.58 1.03 0.27 198 HTML_IMAGE_ONLY_28 751 0.25 0.22 0.27 199 TR_XM_RelayPhish 726 1.56 3.50 0.26 200 UPPERCASE_50_75 725 0.18 0.06 0.26 ----------------------------------------------------------------------