Email: 563011 Autolearn: 0 AvgScore: 2.99 AvgScanTime: 2.01 sec Spam: 144456 Autolearn: 0 AvgScore: 12.53 AvgScanTime: 2.66 sec Ham: 418555 Autolearn: 0 AvgScore: -0.31 AvgScanTime: 1.79 sec Time Spent Running SA: 314.58 hours Time Spent Processing Spam: 106.93 hours Time Spent Processing Ham: 207.65 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 133318 87.56 92.29 85.92 2 DCC_CHECK 116706 51.22 80.79 41.02 3 DKIM_SIGNED 113999 76.48 78.92 75.64 4 XM_DK_Pass 110213 74.99 76.30 74.54 5 DKIM_VALID 107344 72.38 74.31 71.71 6 XMListUnsubscribeExists 104763 55.35 72.52 49.42 7 XM_B_Unicode 103160 69.04 71.41 68.22 8 DKIM_VALID_AU 83296 54.62 57.66 53.57 9 XM_B_Unicode3 68861 41.60 47.67 39.51 10 XM_DK_Undo_02 64551 20.64 44.69 12.34 11 BAYES_99 54628 17.47 37.82 10.45 12 BAYES_50 52712 48.96 36.49 53.27 13 MIME_HTML_ONLY 51035 24.33 35.33 20.53 14 HTML_FONT_LOW_CONTRAST 50810 29.66 35.17 27.75 15 LOC_TINY_FONT_1 48334 25.59 33.46 22.88 16 BAYES_999 45041 14.82 31.18 9.18 17 TR_DCC_Bayes_99 44710 11.59 30.95 4.91 18 FVGT_m_MULTI_ODD 36344 22.53 25.16 21.63 19 RELAYCOUNTRY_META 35537 10.42 24.60 5.52 20 XMSubLong 33730 23.00 23.35 22.88 21 XM_Body_Dirty_Words 31413 14.57 21.75 12.10 22 DKIM_VALID_EF 30030 26.68 20.79 28.71 23 T_KAM_HTML_FONT_INVALID 29624 17.59 20.51 16.58 24 XM_Multi_Part_URI 26297 13.25 18.20 11.54 25 T_TM2_M_HEADER_IN_MSG 25506 28.35 17.66 32.04 26 DCC_CHECK_NEGATIVE 25322 46.91 17.53 57.06 27 MultiRelay 24507 19.38 16.97 20.21 28 UNTRUSTED_Relay 24283 5.52 16.81 1.63 29 BOTNET 22428 5.46 15.53 1.98 30 FSL_BULK_SIG 21993 10.00 15.22 8.19 31 BOTNET_IPINHOSTNAME 21696 7.26 15.02 4.59 32 XM_UncommonTLD01 19594 6.40 13.56 3.93 33 XM_Evil_Numbers_Gen 19116 10.74 13.23 9.88 34 HTML_IMAGE_RATIO_02 18922 9.22 13.10 7.89 35 LOTS_OF_MONEY 17455 9.70 12.08 8.88 36 TooManyTo_001 16892 9.79 11.69 9.13 37 XMSexyCombo_05 16838 5.72 11.66 3.67 38 XM_UB50 13549 3.09 9.38 0.92 39 SpammyFromTLD_02 13070 2.52 9.05 0.27 40 HTML_IMAGE_RATIO_04 13034 6.75 9.02 5.97 41 KHOP_HELO_FCRDNS 12909 3.85 8.94 2.09 42 LotsOfNums_01 11754 8.18 8.14 8.20 43 T_REMOTE_IMAGE 11051 4.92 7.65 3.97 44 T_XMDrugObfuBody_14 10976 8.02 7.60 8.17 45 XMSubMetaSx_00 10855 4.55 7.51 3.53 46 MPART_ALT_DIFF 10591 4.33 7.33 3.29 47 BAYES_80 10546 4.85 7.30 4.00 48 XM_H_Long_From01 10171 6.59 7.04 6.44 49 XM_DIRTYINTL 9814 3.96 6.79 2.98 50 XM_B_Phish_Phrases 9640 5.76 6.67 5.45 51 BAYES_60 9368 6.44 6.49 6.42 52 HDRS_LCASE_IMGONLY 8696 1.60 6.02 0.07 53 BODY_URI_ONLY 8661 1.65 6.00 0.15 54 HTML_SHORT_LINK_IMG_1 8616 1.58 5.96 0.07 55 XMNumbers 7770 4.20 5.38 3.79 56 MIME_QP_LONG_LINE 7643 5.37 5.29 5.39 57 RCVD_IN_MSPIKE_H2 7065 7.09 4.89 7.85 58 HTML_IMAGE_ONLY_12 7062 1.42 4.89 0.22 59 NUMERIC_HTTP_ADDR 6894 1.45 4.77 0.30 60 XM_SPF_SoftFail 6843 2.57 4.74 1.82 61 MIME_HEADER_CTYPE_ONLY 6787 1.31 4.70 0.14 62 FROM_EXCESS_BASE64 6770 4.00 4.69 3.77 63 DKIM_INVALID 6655 4.10 4.61 3.93 64 NORMAL_HTTP_TO_IP 6402 1.20 4.43 0.08 65 URI_HEX_IP 6215 1.11 4.30 0.00 66 XMStrtUSub 6205 4.37 4.30 4.39 67 RELAYCOUNTRY_CA 6141 2.11 4.25 1.37 68 BAYES_95 6112 3.01 4.23 2.59 69 MIME_HTML_ONLY_MULTI 6062 2.31 4.20 1.66 70 RCVD_IN_RP_SAFE 5909 9.01 4.09 10.70 71 RCVD_IN_RP_RNBL 5619 1.04 3.89 0.06 72 HTML_IMAGE_RATIO_06 5469 3.48 3.79 3.38 73 XM_B_SpammyTLD 5387 3.52 3.73 3.45 74 URI_HEX 5372 2.25 3.72 1.74 75 RCVD_IN_BL_SPAMCOP_NET 5310 1.36 3.68 0.56 76 XM_SendGrid 5237 6.02 3.63 6.84 77 BAYES_40 5155 4.35 3.57 4.62 78 MIME_HTML_MOSTLY 4925 2.77 3.41 2.55 79 T_TooManySym_01 4870 5.69 3.37 6.49 80 SUBJ_ALL_CAPS 4828 2.56 3.34 2.30 81 MultiRelay_Combo 4708 1.03 3.26 0.26 82 MultiRelay_CC 4708 1.03 3.26 0.26 83 TM2_M_URI_OPT_OUT 4662 2.23 3.23 1.89 84 XMBdyGiftCard01 4629 1.56 3.20 1.00 85 US_DOLLARS_3 4506 1.59 3.12 1.06 86 NO_DNS_FOR_FROM 4494 1.65 3.11 1.14 87 RELAYCOUNTRY_FR 4400 0.97 3.05 0.25 88 HTML_IMAGE_RATIO_08 4237 2.49 2.93 2.33 89 RCVD_IN_RP_CERTIFIED 4203 7.96 2.91 9.70 90 XM_URI_RBL 4176 0.97 2.89 0.30 91 XMSexyCombo_01 4037 1.15 2.79 0.58 92 TR_XM_PHPDW 3987 1.77 2.76 1.43 93 TR_XM_PHPForged 3976 1.74 2.75 1.39 94 XMSubMetaI_00 3968 1.37 2.75 0.89 95 TR_XM_FormFill2 3962 1.73 2.74 1.39 96 XM_H_PHPOS 3957 1.73 2.74 1.38 97 XM_CamelCaseFrm001 3745 2.12 2.59 1.95 98 XM_OfRef6 3732 1.91 2.58 1.68 99 RCVD_IN_IADB_LISTED 3613 4.15 2.50 4.71 100 HTML_MIME_NO_HTML_TAG 3565 2.06 2.47 1.92 101 RCVD_IN_PSBL 3546 0.65 2.45 0.03 102 RELAYCOUNTRY_NL 3539 0.78 2.45 0.20 103 DKIM_ADSP_NXDOMAIN 3507 0.97 2.43 0.47 104 XMDiploma_00 3358 2.27 2.32 2.25 105 RCVD_IN_IADB_SPF 3314 3.60 2.29 4.05 106 SpammyFromTLD_01 3263 1.12 2.26 0.73 107 RCVD_IN_IADB_SENDERID 3173 3.17 2.20 3.51 108 RCVD_IN_IADB_DK 3167 3.14 2.19 3.47 109 T_XMDrugObfuBody_08 3105 1.72 2.15 1.57 110 BAYES_20 3073 3.11 2.13 3.45 111 XM_UB60 3059 0.62 2.12 0.10 112 XMBody_17 2958 0.96 2.05 0.59 113 XMMoneyMeta_00 2862 0.87 1.98 0.49 114 T_XMHurry_00 2812 1.09 1.95 0.80 115 BOTNET_NORDNS 2757 0.52 1.91 0.04 116 FROM_SUSPICIOUS_NTLD 2733 0.50 1.89 0.02 117 XM_BadFromFormat 2690 0.61 1.86 0.18 118 RELAYCOUNTRY_GB 2687 1.41 1.86 1.25 119 FROM_SUSPICIOUS_NTLD_FP 2680 0.49 1.86 0.02 120 RELAYCOUNTRY_DE 2602 0.79 1.80 0.44 121 RELAYCOUNTRY_IN 2553 0.57 1.77 0.16 122 XMGenDplmaNmb 2482 1.65 1.72 1.63 123 RELAYCOUNTRY_JP 2472 0.47 1.71 0.04 124 TM2_M_VERY_LONG_WORD 2426 1.28 1.68 1.14 125 T_FILL_THIS_FORM_SHORT 2388 1.17 1.65 1.01 126 TR_Symld_Words 2302 1.47 1.59 1.43 127 RCVD_IN_MSPIKE_WL 2290 4.09 1.59 4.95 128 URI_TRY_3LD 2238 1.49 1.55 1.47 129 XM_UB99 2196 0.40 1.52 0.01 130 TR_XM_DK_SendGrid 2194 2.87 1.52 3.33 131 THIS_AD 2153 0.81 1.49 0.58 132 XMStockSpam_06 2134 1.33 1.48 1.27 133 XM_H_Long_From02 2105 1.35 1.46 1.31 134 HTML_IMAGE_ONLY_08 2091 0.50 1.45 0.17 135 XM_ProductURIs 1998 1.01 1.38 0.88 136 XMBody_78 1977 0.74 1.37 0.53 137 T_Symld_Words_02 1975 0.71 1.37 0.48 138 DATE_IN_PAST_03_06 1956 0.43 1.35 0.10 139 NO_FM_NAME_IP_HOSTN 1937 0.35 1.34 0.00 140 XM_UB80 1901 0.36 1.32 0.04 141 ALL_TRUSTED 1893 12.14 1.31 15.87 142 XM_DK_Undo_01 1883 1.71 1.30 1.85 143 TR_Mismatch_TLD_02 1870 0.40 1.29 0.10 144 DIET_1 1866 0.65 1.29 0.42 145 HK_RANDOM_REPLYTO 1806 0.43 1.25 0.15 146 RELAYCOUNTRY_AT 1788 0.49 1.24 0.23 147 T_XMDrugObfuBody_00 1778 1.18 1.23 1.16 148 DATE_IN_PAST_06_12 1757 0.34 1.22 0.04 149 MAILING_LIST_MULTI 1751 1.95 1.21 2.21 150 XMHTML_After_End 1735 0.63 1.20 0.44 151 XMPhish11 1720 1.19 1.19 1.18 152 TR_XM_RelayPhish 1710 0.85 1.18 0.73 153 XM_B_REG_HTML 1702 0.64 1.18 0.45 154 TR_LOTS_OF_MONEY2 1680 0.77 1.16 0.63 155 T_MONEY_PERCENT 1680 0.77 1.16 0.63 156 XMSlimDrugH 1673 0.59 1.16 0.40 157 SUBJ_DOLLARS 1647 0.54 1.14 0.33 158 XM_H_PHPMailer 1617 0.77 1.12 0.65 159 XM_UB999 1615 0.29 1.12 0.01 160 RCVD_IN_MSPIKE_H3 1583 3.85 1.10 4.81 161 XMSexyCombo_04 1568 0.38 1.09 0.13 162 MONEY_FORM_SHORT 1525 0.29 1.06 0.03 163 XMGappySubj_01 1518 1.11 1.05 1.13 164 BAYES_00 1512 9.84 1.05 12.87 165 XMPhish30 1494 0.66 1.03 0.54 166 TVD_RCVD_IP 1488 2.00 1.03 2.33 167 XMSubMetaSx_01 1473 0.37 1.02 0.14 168 DKIM_ADSP_CUSTOM_MED 1470 1.08 1.02 1.10 169 RDNS_DYNAMIC 1438 0.56 1.00 0.41 170 XMBrknScrpt_02 1432 0.76 0.99 0.68 171 XM_H_PHPOS_M 1411 0.50 0.98 0.34 172 URIBL_SBL_A 1405 0.34 0.97 0.12 173 XM_RXBody 1396 0.85 0.97 0.80 174 UNPARSEABLE_RELAY 1394 2.24 0.96 2.68 175 TVD_SPACE_RATIO_MINFP 1385 0.25 0.96 0.01 176 FORM_FRAUD_5 1364 0.25 0.94 0.01 177 SUBJ_OBFU_PUNCT_FEW 1358 0.33 0.94 0.11 178 TooManyTo_002 1354 2.08 0.94 2.48 179 RCVD_IN_IADB_VOUCHED 1352 2.59 0.94 3.17 180 XMHTMLBadTable_001 1339 0.57 0.93 0.45 181 URIBL_BLACK 1316 0.27 0.91 0.05 182 BODY_ENHANCEMENT 1314 0.25 0.91 0.03 183 MONEY_FRAUD_5 1302 0.24 0.90 0.01 184 XM_HighProb1 1301 0.27 0.90 0.05 185 XM_B_COPY_HTML 1299 0.66 0.90 0.58 186 DEAR_SOMETHING 1297 0.33 0.90 0.14 187 TM2_M_BODY_EMPTY 1277 0.64 0.88 0.56 188 XM_OfRef7 1263 0.38 0.87 0.21 189 INVALID_DATE 1252 0.26 0.87 0.06 190 FORGED_GMAIL_RCVD 1247 0.56 0.86 0.46 191 XMBSHREFv2 1226 0.46 0.85 0.32 192 T_TooManySym_02 1225 2.07 0.85 2.49 193 DATE_IN_PAST_12_24 1216 0.27 0.84 0.07 194 XMEmptyBody_01 1214 0.42 0.84 0.28 195 XMGappySubj_02 1209 0.44 0.84 0.30 196 XMSubMetaSSx_00 1200 0.38 0.83 0.22 197 BAYES_05 1160 1.79 0.80 2.13 198 SUBJ_OBFU_PUNCT_MANY 1159 0.25 0.80 0.07 199 ADVANCE_FEE_3_NEW_MONEY 1149 0.21 0.80 0.00 200 XMPhish14 1140 0.54 0.79 0.45 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 359640 87.56 92.29 85.92 2 DKIM_SIGNED 316604 76.48 78.92 75.64 3 XM_DK_Pass 312011 74.99 76.30 74.54 4 DKIM_VALID 300151 72.38 74.31 71.71 5 XM_B_Unicode 285537 69.04 71.41 68.22 6 DCC_CHECK_NEGATIVE 238811 46.91 17.53 57.06 7 DKIM_VALID_AU 224224 54.62 57.66 53.57 8 BAYES_50 222960 48.96 36.49 53.27 9 XMListUnsubscribeExists 206836 55.35 72.52 49.42 10 DCC_CHECK 171691 51.22 80.79 41.02 11 XM_B_Unicode3 165361 41.60 47.67 39.51 12 T_TM2_M_HEADER_IN_MSG 134116 28.35 17.66 32.04 13 DKIM_VALID_EF 120180 26.68 20.79 28.71 14 HTML_FONT_LOW_CONTRAST 116164 29.66 35.17 27.75 15 XMSubLong 95783 23.00 23.35 22.88 16 LOC_TINY_FONT_1 95762 25.59 33.46 22.88 17 FVGT_m_MULTI_ODD 90521 22.53 25.16 21.63 18 MIME_HTML_ONLY 85936 24.33 35.33 20.53 19 MultiRelay 84586 19.38 16.97 20.21 20 T_KAM_HTML_FONT_INVALID 69385 17.59 20.51 16.58 21 ALL_TRUSTED 66444 12.14 1.31 15.87 22 BAYES_00 53888 9.84 1.05 12.87 23 XM_DK_Undo_02 51637 20.64 44.69 12.34 24 XM_Body_Dirty_Words 50628 14.57 21.75 12.10 25 XM_Multi_Part_URI 48318 13.25 18.20 11.54 26 RCVD_IN_RP_SAFE 44806 9.01 4.09 10.70 27 BAYES_99 43753 17.47 37.82 10.45 28 TR_XM_DK_Bayes 43104 7.74 0.32 10.30 29 TR_XM_DK_Bayes1 41479 7.44 0.30 9.91 30 XM_Evil_Numbers_Gen 41342 10.74 13.23 9.88 31 RCVD_IN_RP_CERTIFIED 40605 7.96 2.91 9.70 32 BAYES_999 38409 14.82 31.18 9.18 33 TooManyTo_001 38203 9.79 11.69 9.13 34 LOTS_OF_MONEY 37183 9.70 12.08 8.88 35 TR_XM_DK_Bayes2 35587 6.39 0.27 8.50 36 XM_DKIMWhitelistDomains 34629 6.18 0.12 8.27 37 LotsOfNums_01 34301 8.18 8.14 8.20 38 FSL_BULK_SIG 34297 10.00 15.22 8.19 39 T_XMDrugObfuBody_14 34196 8.02 7.60 8.17 40 HTML_IMAGE_RATIO_02 33011 9.22 13.10 7.89 41 RCVD_IN_MSPIKE_H2 32877 7.09 4.89 7.85 42 XM_SendGrid 28631 6.02 3.63 6.84 43 T_TooManySym_01 27183 5.69 3.37 6.49 44 XM_H_Long_From01 26950 6.59 7.04 6.44 45 BAYES_60 26867 6.44 6.49 6.42 46 HTML_IMAGE_RATIO_04 24996 6.75 9.02 5.97 47 RELAYCOUNTRY_META 23106 10.42 24.60 5.52 48 XM_B_Phish_Phrases 22806 5.76 6.67 5.45 49 MIME_QP_LONG_LINE 22565 5.37 5.29 5.39 50 RCVD_IN_MSPIKE_WL 20715 4.09 1.59 4.95 51 TR_DCC_Bayes_99 20565 11.59 30.95 4.91 52 RCVD_IN_MSPIKE_H3 20114 3.85 1.10 4.81 53 RCVD_IN_IADB_LISTED 19731 4.15 2.50 4.71 54 XM_PDF 19339 3.57 0.55 4.62 55 BAYES_40 19329 4.35 3.57 4.62 56 BOTNET_IPINHOSTNAME 19195 7.26 15.02 4.59 57 XMStrtUSub 18387 4.37 4.30 4.39 58 RCVD_IN_IADB_SPF 16961 3.60 2.29 4.05 59 BAYES_80 16733 4.85 7.30 4.00 60 T_REMOTE_IMAGE 16634 4.92 7.65 3.97 61 IN_ZIMBRA_NJ_WHITELIST 16527 2.94 0.02 3.95 62 DKIM_INVALID 16453 4.10 4.61 3.93 63 XM_UncommonTLD01 16448 6.40 13.56 3.93 64 XMNumbers 15862 4.20 5.38 3.79 65 TO_MALFORMED 15817 2.81 0.02 3.78 66 FROM_EXCESS_BASE64 15761 4.00 4.69 3.77 67 XMSexyCombo_05 15347 5.72 11.66 3.67 68 XMSubMetaSx_00 14771 4.55 7.51 3.53 69 RCVD_IN_IADB_SENDERID 14686 3.17 2.20 3.51 70 RCVD_IN_IADB_DK 14511 3.14 2.19 3.47 71 BAYES_20 14439 3.11 2.13 3.45 72 XM_B_SpammyTLD 14437 3.52 3.73 3.45 73 HTML_IMAGE_RATIO_06 14132 3.48 3.79 3.38 74 TR_XM_DK_SendGrid 13937 2.87 1.52 3.33 75 MPART_ALT_DIFF 13782 4.33 7.33 3.29 76 RCVD_IN_IADB_VOUCHED 13250 2.59 0.94 3.17 77 XM_DIRTYINTL 12482 3.96 6.79 2.98 78 UNPARSEABLE_RELAY 11226 2.24 0.96 2.68 79 BAYES_95 10850 3.01 4.23 2.59 80 MIME_HTML_MOSTLY 10675 2.77 3.41 2.55 81 T_TooManySym_02 10416 2.07 0.85 2.49 82 TooManyTo_002 10360 2.08 0.94 2.48 83 HTML_IMAGE_RATIO_08 9755 2.49 2.93 2.33 84 TVD_RCVD_IP 9751 2.00 1.03 2.33 85 SUBJ_ALL_CAPS 9607 2.56 3.34 2.30 86 XMDiploma_00 9406 2.27 2.32 2.25 87 INVALID_MSGID 9328 1.71 0.22 2.23 88 MAILING_LIST_MULTI 9238 1.95 1.21 2.21 89 BAYES_05 8906 1.79 0.80 2.13 90 KHOP_HELO_FCRDNS 8753 3.85 8.94 2.09 91 BOTNET 8302 5.46 15.53 1.98 92 RCVD_IN_IADB_OPTIN 8248 1.63 0.63 1.97 93 XM_CamelCaseFrm001 8180 2.12 2.59 1.95 94 CK_HELO_DYNAMIC_SPLIT_IP 8086 1.54 0.41 1.93 95 HELO_DYNAMIC_IPADDR2 8081 1.48 0.18 1.93 96 HTML_MIME_NO_HTML_TAG 8051 2.06 2.47 1.92 97 TM2_M_URI_OPT_OUT 7896 2.23 3.23 1.89 98 XM_DK_Undo_01 7737 1.71 1.30 1.85 99 XM_SPF_SoftFail 7621 2.57 4.74 1.82 100 IN_HORDE_ADDRESS_BOOK 7565 1.35 0.04 1.81 101 TR_MetaPhish_Combo_01 7534 1.47 0.51 1.80 102 HELO_NODOT 7519 1.52 0.73 1.80 103 HELO_NO_DOMAIN 7517 1.52 0.72 1.80 104 URI_HEX 7303 2.25 3.72 1.74 105 TooManyTo_003 7141 1.47 0.78 1.71 106 XM_OfRef6 7018 1.91 2.58 1.68 107 MIME_HTML_ONLY_MULTI 6936 2.31 4.20 1.66 108 XMGenDplmaNmb 6816 1.65 1.72 1.63 109 UNTRUSTED_Relay 6815 5.52 16.81 1.63 110 ANY_BOUNCE_MESSAGE 6809 1.30 0.34 1.63 111 BOUNCE_MESSAGE 6807 1.30 0.34 1.63 112 T_XMDrugObfuBody_08 6577 1.72 2.15 1.57 113 URI_TRY_3LD 6164 1.49 1.55 1.47 114 TR_Symld_Words 5981 1.47 1.59 1.43 115 TR_XM_PHPDW 5981 1.77 2.76 1.43 116 TR_XM_PHPForged 5835 1.74 2.75 1.39 117 TR_XM_FormFill2 5801 1.73 2.74 1.39 118 XM_H_PHPOS 5787 1.73 2.74 1.38 119 XMCapTrack 5765 1.09 0.24 1.38 120 RELAYCOUNTRY_CA 5754 2.11 4.25 1.37 121 USER_IN_DEF_DKIM_WL 5636 1.01 0.02 1.35 122 XM_H_Long_From02 5498 1.35 1.46 1.31 123 TooManyTo_004 5425 1.13 0.66 1.30 124 XMStockSpam_06 5331 1.33 1.48 1.27 125 RELAYCOUNTRY_GB 5241 1.41 1.86 1.25 126 XMPhish11 4952 1.19 1.19 1.18 127 T_XMDrugObfuBody_00 4854 1.18 1.23 1.16 128 XM_GoogleGroups 4795 0.95 0.39 1.15 129 NO_DNS_FOR_FROM 4792 1.65 3.11 1.14 130 TM2_M_VERY_LONG_WORD 4757 1.28 1.68 1.14 131 XMGappySubj_01 4730 1.11 1.05 1.13 132 DKIM_ADSP_CUSTOM_MED 4591 1.08 1.02 1.10 133 TooManyTo_005 4568 0.96 0.58 1.09 134 US_DOLLARS_3 4443 1.59 3.12 1.06 135 T_FILL_THIS_FORM_SHORT 4210 1.17 1.65 1.01 136 XMBdyGiftCard01 4168 1.56 3.20 1.00 137 XM_UB50 3855 3.09 9.38 0.92 138 XMSubMetaI_00 3721 1.37 2.75 0.89 139 XM_ProductURIs 3700 1.01 1.38 0.88 140 NML_ADSP_CUSTOM_MED 3541 0.83 0.77 0.85 141 XM_RXBody 3365 0.85 0.97 0.80 142 T_XMHurry_00 3342 1.09 1.95 0.80 143 FILL_THIS_FORM 3094 0.70 0.59 0.74 144 MISSING_HEADERS 3072 0.74 0.76 0.73 145 TR_XM_RelayPhish 3058 0.85 1.18 0.73 146 SpammyFromTLD_01 3058 1.12 2.26 0.73 147 XMBrknScrpt_02 2848 0.76 0.99 0.68 148 XM_H_PHPMailer 2707 0.77 1.12 0.65 149 XMBody_95 2705 0.51 0.10 0.65 150 FILL_THIS_FORM_LONG 2676 0.60 0.49 0.64 151 XM_ShortIntro_01 2669 0.62 0.56 0.64 152 TR_LOTS_OF_MONEY2 2643 0.77 1.16 0.63 153 T_MONEY_PERCENT 2643 0.77 1.16 0.63 154 FILL_THIS_FORM_LOAN 2612 0.52 0.22 0.62 155 TM2_M_A_HREF_HREF 2588 0.61 0.57 0.62 156 HTTPS_HTTP_MISMATCH 2563 0.63 0.68 0.61 157 T_OBFU_PDF_ATTACH 2552 0.49 0.16 0.61 158 AC_DIV_BONANZA 2512 0.46 0.07 0.60 159 USER_IN_WHITELIST 2475 0.44 0.00 0.59 160 XMBody_17 2455 0.96 2.05 0.59 161 XMSexyCombo_01 2444 1.15 2.79 0.58 162 THIS_AD 2435 0.81 1.49 0.58 163 XM_B_COPY_HTML 2411 0.66 0.90 0.58 164 RCVD_IN_BL_SPAMCOP_NET 2345 1.36 3.68 0.56 165 TM2_M_BODY_EMPTY 2343 0.64 0.88 0.56 166 T_TooManySym_03 2341 0.52 0.39 0.56 167 T_MANY_PILL_PRICE 2262 0.40 0.00 0.54 168 XMPhish30 2246 0.66 1.03 0.54 169 HTML_TAG_BALANCE_BODY 2206 0.54 0.59 0.53 170 XMBody_78 2204 0.74 1.37 0.53 171 RELAYCOUNTRY_AU 2125 0.49 0.43 0.51 172 HTML_FONT_FACE_BAD 2058 0.54 0.69 0.49 173 XMMoneyMeta_00 2035 0.87 1.98 0.49 174 T_Symld_Words_02 2003 0.71 1.37 0.48 175 RCVD_IN_SORBS_DUL 1977 0.40 0.18 0.47 176 DKIM_ADSP_NXDOMAIN 1966 0.97 2.43 0.47 177 XMNoVowels 1949 0.43 0.32 0.47 178 SHORT_HELO_AND_INLINE_IMAGE 1932 0.36 0.05 0.46 179 HTML_IMAGE_ONLY_28 1916 0.47 0.50 0.46 180 FORGED_GMAIL_RCVD 1913 0.56 0.86 0.46 181 XM_B_REG_HTML 1902 0.64 1.18 0.45 182 XMPhish14 1901 0.54 0.79 0.45 183 XMHTMLBadTable_001 1880 0.57 0.93 0.45 184 RELAYCOUNTRY_DE 1847 0.79 1.80 0.44 185 XMHTML_After_End 1828 0.63 1.20 0.44 186 URI_NOVOWEL 1828 0.50 0.67 0.44 187 TR_LOTS_OF_MONEY3 1784 0.48 0.64 0.43 188 XMLngstWrd_00 1782 0.41 0.36 0.43 189 DIET_1 1778 0.65 1.29 0.42 190 XMDateMe_00 1743 0.38 0.27 0.42 191 HTML_IMAGE_ONLY_32 1732 0.43 0.49 0.41 192 XMSubMetaSxObfu_02 1731 0.43 0.48 0.41 193 RDNS_DYNAMIC 1700 0.56 1.00 0.41 194 XMSubMetaSxObfu_03 1660 0.49 0.76 0.40 195 XMSlimDrugH 1655 0.59 1.16 0.40 196 XMLngstWrd_01 1615 0.37 0.32 0.39 197 XM_Body_Obfu01 1532 0.37 0.39 0.37 198 REMOVE_BEFORE_LINK 1526 0.38 0.44 0.36 199 XMSolicitRefs_0 1517 0.37 0.41 0.36 200 XMRcvdHeader_15 1459 0.26 0.00 0.35 ----------------------------------------------------------------------