Email: 720095 Autolearn: 0 AvgScore: 0.93 AvgScanTime: 1.74 sec Spam: 153863 Autolearn: 0 AvgScore: 12.39 AvgScanTime: 2.80 sec Ham: 566232 Autolearn: 0 AvgScore: -2.19 AvgScanTime: 1.45 sec Time Spent Running SA: 348.55 hours Time Spent Processing Spam: 119.79 hours Time Spent Processing Ham: 228.76 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 142734 89.70 92.77 88.86 2 RELAYCOUNTRY_US 120362 80.00 78.23 80.48 3 DCC_CHECK 119277 45.02 77.52 36.18 4 DKIM_SIGNED 112270 67.39 72.97 65.87 5 XM_DK_Pass 107720 65.84 70.01 64.71 6 XM_B_Unicode 105700 70.85 68.70 71.44 7 XMListUnsubscribeExists 94902 48.50 61.68 44.92 8 DKIM_VALID 94799 61.63 61.61 61.63 9 BAYES_50 77681 47.83 50.49 47.10 10 DKIM_VALID_AU 71698 46.59 46.60 46.58 11 XM_B_Unicode3 63306 42.84 41.14 43.29 12 MIME_HTML_ONLY 59866 25.81 38.91 22.26 13 LOC_TINY_FONT_1 50969 22.44 33.13 19.54 14 HTML_FONT_LOW_CONTRAST 45461 26.01 29.55 25.05 15 XM_DK_Undo_02 44642 10.81 29.01 5.86 16 FVGT_m_MULTI_ODD 37332 20.24 24.26 19.14 17 XMSubLong 36773 21.01 23.90 20.23 18 DKIM_VALID_EF 36726 23.65 23.87 23.59 19 RELAYCOUNTRY_META 33935 8.99 22.06 5.44 20 T_KAM_HTML_FONT_INVALID 32035 16.90 20.82 15.84 21 DCC_CHECK_NEGATIVE 30684 53.01 19.94 62.00 22 XM_Body_Dirty_Words 30340 13.80 19.72 12.19 23 FSL_BULK_SIG 30029 9.92 19.52 7.32 24 BAYES_99 28071 6.14 18.24 2.85 25 T_TM2_M_HEADER_IN_MSG 27546 24.53 17.90 26.33 26 BOTNET 27282 5.53 17.73 2.22 27 XM_UncommonTLD01 24821 5.73 16.13 2.91 28 HTML_IMAGE_RATIO_02 24643 8.66 16.02 6.66 29 XM_B_Unsub 24446 10.55 15.89 9.10 30 UNTRUSTED_Relay 22487 4.41 14.61 1.63 31 XM_Multi_Part_URI 22485 11.28 14.61 10.37 32 BAYES_999 20544 4.68 13.35 2.32 33 TR_DCC_Bayes_99 20472 4.07 13.31 1.56 34 LOTS_OF_MONEY 20075 9.34 13.05 8.33 35 BOTNET_IPINHOSTNAME 19247 5.52 12.51 3.62 36 KHOP_HELO_FCRDNS 19096 4.43 12.41 2.27 37 DKIM_INVALID 17471 5.76 11.35 4.24 38 HTML_MIME_NO_HTML_TAG 17346 4.05 11.27 2.09 39 XMSexyCombo_05 17227 5.44 11.20 3.88 40 T_REMOTE_IMAGE 16195 4.78 10.53 3.22 41 XM_Evil_Numbers_Gen 15417 9.06 10.02 8.80 42 RCVD_IN_MSPIKE_H2 14474 10.58 9.41 10.90 43 RDNS_DYNAMIC 13343 2.09 8.67 0.30 44 XM_UB50 13265 2.57 8.62 0.92 45 XMNumbers 13223 4.30 8.59 3.14 46 BODY_URI_ONLY 13039 1.87 8.47 0.08 47 BAYES_80 13035 3.35 8.47 1.96 48 LotsOfNums_01 12702 7.25 8.26 6.98 49 NO_DNS_FOR_FROM 12367 3.46 8.04 2.22 50 XMSubMetaSx_00 11756 4.33 7.64 3.43 51 HTML_IMAGE_ONLY_08 11723 1.70 7.62 0.10 52 BAYES_60 11529 5.18 7.49 4.55 53 XM_B_Phish_Phrases 11370 6.54 7.39 6.31 54 MPART_ALT_DIFF 11219 7.35 7.29 7.37 55 TR_Mismatch_TLD_02 10692 1.54 6.95 0.07 56 TooManyTo_001 10420 7.33 6.77 7.49 57 HTML_SHORT_LINK_IMG_1 10280 1.44 6.68 0.02 58 XM_BadFromFormat 10097 1.49 6.56 0.12 59 XM_H_Long_From01 9875 5.48 6.42 5.23 60 DKIM_ADSP_NXDOMAIN 9019 1.53 5.86 0.35 61 XM_SPF_SoftFail 8684 2.39 5.64 1.51 62 HTML_IMAGE_RATIO_04 8246 11.65 5.36 13.36 63 HDRS_LCASE_IMGONLY 8007 1.13 5.20 0.02 64 HTML_TAG_BALANCE_CENTER 7788 1.14 5.06 0.07 65 MIME_QP_LONG_LINE 7755 5.30 5.04 5.37 66 RCVD_IN_MSPIKE_BL 7682 1.66 4.99 0.76 67 XM_B_SpammyTLD 7661 4.31 4.98 4.13 68 PDS_OTHER_BAD_TLD 7122 3.11 4.63 2.70 69 RCVD_IN_BL_SPAMCOP_NET 7119 1.73 4.63 0.94 70 BAYES_95 7042 1.87 4.58 1.14 71 XMCapTrack 7038 1.89 4.57 1.16 72 XM_SendGrid 6968 5.34 4.53 5.55 73 FROM_MISSP_REPLYTO 6954 0.98 4.52 0.02 74 DATE_IN_PAST_03_06 6860 1.02 4.46 0.08 75 MIME_HTML_MOSTLY 6709 2.44 4.36 1.91 76 SpammyFromTLD_02 6628 1.20 4.31 0.36 77 RELAYCOUNTRY_FR 6592 1.20 4.28 0.36 78 RCVD_IN_RP_RNBL 5816 0.92 3.78 0.14 79 XM_DIRTYINTL 5800 1.18 3.77 0.47 80 FROM_EXCESS_BASE64 5640 3.19 3.67 3.05 81 MIME_HTML_ONLY_MULTI 5639 5.51 3.66 6.01 82 URI_HEX 5638 1.79 3.66 1.28 83 BAYES_40 5610 5.68 3.65 6.23 84 RELAYCOUNTRY_CA 5583 2.04 3.63 1.61 85 XMStrtUSub 5386 7.24 3.50 8.25 86 XM_CamelCaseFrm001 5132 2.38 3.34 2.12 87 RCVD_IN_MSPIKE_L3 5122 1.12 3.33 0.52 88 FROM_SUSPICIOUS_NTLD 5097 0.73 3.31 0.03 89 TM2_M_URI_OPT_OUT 5060 2.65 3.29 2.47 90 FROM_SUSPICIOUS_NTLD_FP 5053 0.72 3.28 0.02 91 FROM_MISSP_DYNIP 4990 0.69 3.24 0.00 92 XM_OfRef6 4929 1.69 3.20 1.28 93 XM_B_Unsub2 4884 2.33 3.17 2.11 94 RCVD_IN_MSPIKE_H3 4808 7.58 3.12 8.79 95 RCVD_IN_MSPIKE_WL 4808 7.58 3.12 8.79 96 HTML_IMAGE_RATIO_06 4776 4.63 3.10 5.05 97 XMDiploma_00 4529 1.93 2.94 1.65 98 XM_URI_RBL 4439 0.75 2.89 0.17 99 BOTNET_NORDNS 4243 0.65 2.76 0.08 100 BAYES_00 4220 20.91 2.74 25.84 101 BAYES_20 4057 5.11 2.64 5.78 102 T_TooManySym_01 4036 3.89 2.62 4.23 103 T_XMDrugObfuBody_08 3933 1.79 2.56 1.58 104 HTML_IMAGE_RATIO_08 3880 2.51 2.52 2.50 105 DATE_IN_PAST_06_12 3845 0.59 2.50 0.07 106 SpammyFromTLD_01 3827 1.04 2.49 0.65 107 RELAYCOUNTRY_GB 3549 1.45 2.31 1.22 108 XMSexyCombo_01 3475 1.04 2.26 0.71 109 SUBJ_ALL_CAPS 3433 1.98 2.23 1.91 110 XMGenDplmaNmb 3373 1.22 2.19 0.96 111 TR_XM_DK_Bayes 3282 12.01 2.13 14.70 112 ALL_TRUSTED 3185 13.00 2.07 15.97 113 RCVD_IN_PSBL 3076 0.44 2.00 0.02 114 T_XMDrugObfuBody_14 3021 1.53 1.96 1.42 115 TR_XM_PHPDW 2979 0.77 1.94 0.46 116 URIBL_DBL_ABUSE_REDIR 2952 0.53 1.92 0.15 117 TR_XM_DK_SendGrid 2825 2.78 1.84 3.04 118 HTML_FONT_SIZE_HUGE 2805 0.45 1.82 0.07 119 TR_XM_PHPForged 2796 0.73 1.82 0.44 120 TR_XM_FormFill2 2763 0.73 1.80 0.44 121 XM_H_PHPOS 2756 0.72 1.79 0.43 122 RCVD_IN_RP_SAFE 2740 6.69 1.78 8.02 123 TM2_M_VERY_LONG_WORD 2740 1.23 1.78 1.08 124 HTML_IMAGE_ONLY_12 2708 0.49 1.76 0.15 125 RCVD_IN_IADB_LISTED 2677 3.87 1.74 4.45 126 XMBody_17 2649 0.91 1.72 0.69 127 REMOVE_BEFORE_LINK 2516 0.71 1.64 0.46 128 RCVD_IN_RP_CERTIFIED 2513 6.16 1.63 7.39 129 HK_RANDOM_FROM 2508 0.45 1.63 0.13 130 XMHTML_After_End 2485 0.87 1.62 0.67 131 XMBdyGiftCard01 2483 1.13 1.61 1.00 132 DIET_1 2475 0.63 1.61 0.37 133 RCVD_IN_IADB_SPF 2454 3.38 1.59 3.87 134 RCVD_IN_IADB_SENDERID 2388 3.00 1.55 3.39 135 TR_XM_INV_DKIM 2385 0.43 1.55 0.13 136 RCVD_IN_IADB_DK 2377 2.95 1.54 3.33 137 TR_XM_DK_Bayes1 2366 11.30 1.54 13.95 138 BAYES_05 2354 3.83 1.53 4.45 139 T_XMHurry_00 2323 0.79 1.51 0.59 140 RELAYCOUNTRY_DE 2278 0.58 1.48 0.34 141 XMStockSpam_06 2242 0.94 1.46 0.80 142 XM_DK_Undo_01 2230 1.43 1.45 1.43 143 XM_OfRef7 2212 0.39 1.44 0.10 144 DEAR_BENEFICIARY 2191 0.31 1.42 0.00 145 XM_ProductURIs 2170 0.75 1.41 0.57 146 LongTLD 2158 0.44 1.40 0.18 147 XM_UB60 2152 0.38 1.40 0.10 148 TR_LOTS_OF_MONEY2 2146 0.60 1.39 0.38 149 T_MONEY_PERCENT 2146 0.60 1.39 0.38 150 T_FILL_THIS_FORM_SHORT 2143 1.08 1.39 1.00 151 XM_H_TOP 2133 0.30 1.39 0.00 152 HTML_EXTRA_CLOSE 2127 0.31 1.38 0.01 153 URI_TRY_3LD 2095 1.13 1.36 1.07 154 RCVD_IN_MSPIKE_L5 2043 0.30 1.33 0.02 155 MISSING_HEADERS 2017 0.61 1.31 0.42 156 HK_RANDOM_ENVFROM 2010 0.37 1.31 0.12 157 TR_XM_DK_Bayes2 1999 10.05 1.30 12.42 158 RELAYCOUNTRY_IN 1976 0.35 1.28 0.09 159 XMSubMetaI_00 1953 0.79 1.27 0.66 160 XM_H_PHPMailer 1910 0.61 1.24 0.44 161 MAILING_LIST_MULTI 1866 1.95 1.21 2.14 162 XM_UB80 1833 0.27 1.19 0.02 163 XMMoneyMeta_00 1819 0.64 1.18 0.50 164 FILL_THIS_FORM 1819 0.78 1.18 0.67 165 XMPhish08 1814 0.60 1.18 0.45 166 XMPhish14 1759 0.61 1.14 0.47 167 TR_Symld_Words 1754 1.49 1.14 1.59 168 XM_H_PHPOS_M 1727 0.37 1.12 0.16 169 FORM_FRAUD_5 1726 0.24 1.12 0.00 170 XMBrknScrpt_02 1712 0.65 1.11 0.53 171 MONEY_FORM 1654 0.24 1.07 0.01 172 T_XMDrugObfuBody_00 1646 0.75 1.07 0.67 173 URIBL_SBL_A 1620 0.43 1.05 0.26 174 XM_SPF_Unknown 1603 0.64 1.04 0.53 175 THIS_AD 1554 0.33 1.01 0.15 176 REPLYTO_WITHOUT_TO_CC 1528 0.25 0.99 0.05 177 XM_OfRef8 1518 0.23 0.99 0.02 178 XMBody_78 1510 0.43 0.98 0.28 179 XMSlimDrugH 1507 0.41 0.98 0.25 180 TVD_RCVD_IP 1486 1.38 0.97 1.49 181 T_Symld_Words_02 1485 0.61 0.97 0.51 182 DKIM_ADSP_CUSTOM_MED 1482 0.90 0.96 0.88 183 RELAYCOUNTRY_TW 1480 0.26 0.96 0.07 184 SUBJECT_NEEDS_ENCODING 1438 0.20 0.93 0.00 185 TR_LOTS_OF_MONEY3 1436 0.48 0.93 0.36 186 XMSexyCombo_04 1435 0.31 0.93 0.14 187 SUBJ_ILLEGAL_CHARS 1433 0.20 0.93 0.00 188 TR_XM_RelayPhish 1407 0.36 0.91 0.21 189 RELAYCOUNTRY_JP 1395 0.23 0.91 0.04 190 HTTPS_HTTP_MISMATCH 1377 0.61 0.89 0.53 191 MPART_ALT_DIFF_COUNT 1371 0.43 0.89 0.30 192 FVGT_m_MULTI_ODD_EMAIL 1361 0.20 0.88 0.02 193 PLING_QUERY 1341 0.67 0.87 0.62 194 NUMERIC_HTTP_ADDR 1326 0.35 0.86 0.22 195 XM_H_Undi_Recip 1317 0.37 0.86 0.23 196 FORGED_GMAIL_RCVD 1307 0.49 0.85 0.39 197 TR_Mismatch_TLD_01 1302 0.39 0.85 0.26 198 MIME_HEADER_CTYPE_ONLY 1299 0.37 0.84 0.24 199 XM_Combo_Sbj 1290 0.40 0.84 0.28 200 XMPhish30 1289 0.52 0.84 0.43 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 503166 89.70 92.77 88.86 2 RELAYCOUNTRY_US 455725 80.00 78.23 80.48 3 XM_B_Unicode 404491 70.85 68.70 71.44 4 DKIM_SIGNED 372973 67.39 72.97 65.87 5 XM_DK_Pass 366404 65.84 70.01 64.71 6 DCC_CHECK_NEGATIVE 351052 53.01 19.94 62.00 7 DKIM_VALID 348983 61.63 61.61 61.63 8 BAYES_50 266719 47.83 50.49 47.10 9 DKIM_VALID_AU 263773 46.59 46.60 46.58 10 XMListUnsubscribeExists 254359 48.50 61.68 44.92 11 XM_B_Unicode3 245148 42.84 41.14 43.29 12 DCC_CHECK 204875 45.02 77.52 36.18 13 T_TM2_M_HEADER_IN_MSG 149092 24.53 17.90 26.33 14 BAYES_00 146329 20.91 2.74 25.84 15 HTML_FONT_LOW_CONTRAST 141814 26.01 29.55 25.05 16 DKIM_VALID_EF 133594 23.65 23.87 23.59 17 MIME_HTML_ONLY 126025 25.81 38.91 22.26 18 XMSubLong 114533 21.01 23.90 20.23 19 LOC_TINY_FONT_1 110652 22.44 33.13 19.54 20 FVGT_m_MULTI_ODD 108384 20.24 24.26 19.14 21 ALL_TRUSTED 90414 13.00 2.07 15.97 22 T_KAM_HTML_FONT_INVALID 89676 16.90 20.82 15.84 23 TR_XM_DK_Bayes 83227 12.01 2.13 14.70 24 TR_XM_DK_Bayes1 79013 11.30 1.54 13.95 25 HTML_IMAGE_RATIO_04 75673 11.65 5.36 13.36 26 TR_XM_DK_Bayes2 70340 10.05 1.30 12.42 27 XM_Body_Dirty_Words 69040 13.80 19.72 12.19 28 RCVD_IN_MSPIKE_H2 61714 10.58 9.41 10.90 29 HTML_FONT_FACE_BAD 58890 8.33 0.71 10.40 30 XM_Multi_Part_URI 58727 11.28 14.61 10.37 31 XM_H_Trusted_IP 57443 7.98 0.00 10.14 32 XM_B_Unsub 51531 10.55 15.89 9.10 33 XM_Evil_Numbers_Gen 49854 9.06 10.02 8.80 34 RCVD_IN_MSPIKE_WL 49754 7.58 3.12 8.79 35 RCVD_IN_MSPIKE_H3 49754 7.58 3.12 8.79 36 LOTS_OF_MONEY 47160 9.34 13.05 8.33 37 XMStrtUSub 46717 7.24 3.50 8.25 38 RCVD_IN_RP_SAFE 45435 6.69 1.78 8.02 39 TooManyTo_001 42392 7.33 6.77 7.49 40 RCVD_IN_RP_CERTIFIED 41852 6.16 1.63 7.39 41 MPART_ALT_DIFF 41734 7.35 7.29 7.37 42 FSL_BULK_SIG 41425 9.92 19.52 7.32 43 LotsOfNums_01 39505 7.25 8.26 6.98 44 XM_DKIMWhitelistDomains 38218 5.31 0.01 6.75 45 HTML_IMAGE_RATIO_02 37719 8.66 16.02 6.66 46 XM_B_Phish_Phrases 35733 6.54 7.39 6.31 47 BAYES_40 35298 5.68 3.65 6.23 48 MIME_HTML_ONLY_MULTI 34011 5.51 3.66 6.01 49 XM_DK_Undo_02 33173 10.81 29.01 5.86 50 BAYES_20 32747 5.11 2.64 5.78 51 XM_SendGrid 31450 5.34 4.53 5.55 52 RELAYCOUNTRY_META 30790 8.99 22.06 5.44 53 MIME_QP_LONG_LINE 30430 5.30 5.04 5.37 54 XM_H_Long_From01 29616 5.48 6.42 5.23 55 HTML_IMAGE_RATIO_06 28600 4.63 3.10 5.05 56 BAYES_60 25745 5.18 7.49 4.55 57 IN_ZIMBRA_NJ_WHITELIST 25482 3.54 0.01 4.50 58 XM_PDF 25356 3.68 0.74 4.48 59 BAYES_05 25203 3.83 1.53 4.45 60 RCVD_IN_IADB_LISTED 25188 3.87 1.74 4.45 61 DKIM_INVALID 23990 5.76 11.35 4.24 62 T_TooManySym_01 23960 3.89 2.62 4.23 63 XM_B_SpammyTLD 23365 4.31 4.98 4.13 64 XMSubNoVowel 23317 3.36 0.58 4.12 65 XMSexyCombo_05 21973 5.44 11.20 3.88 66 RCVD_IN_IADB_SPF 21903 3.38 1.59 3.87 67 BOTNET_IPINHOSTNAME 20493 5.52 12.51 3.62 68 ANY_BOUNCE_MESSAGE 19423 2.86 0.78 3.43 69 BOUNCE_MESSAGE 19418 2.86 0.78 3.43 70 XMSubMetaSx_00 19411 4.33 7.64 3.43 71 RCVD_IN_IADB_SENDERID 19221 3.00 1.55 3.39 72 RCVD_IN_IADB_DK 18840 2.95 1.54 3.33 73 T_REMOTE_IMAGE 18257 4.78 10.53 3.22 74 XMNumbers 17774 4.30 8.59 3.14 75 FROM_EXCESS_BASE64 17297 3.19 3.67 3.05 76 TR_XM_DK_SendGrid 17209 2.78 1.84 3.04 77 XM_UncommonTLD01 16476 5.73 16.13 2.91 78 RCVD_IN_IADB_VOUCHED 16221 2.37 0.55 2.86 79 BAYES_99 16116 6.14 18.24 2.85 80 PDS_OTHER_BAD_TLD 15271 3.11 4.63 2.70 81 HTML_IMAGE_RATIO_08 14174 2.51 2.52 2.50 82 TM2_M_URI_OPT_OUT 13992 2.65 3.29 2.47 83 BAYES_999 13145 4.68 13.35 2.32 84 KHOP_HELO_FCRDNS 12833 4.43 12.41 2.27 85 BOTNET 12572 5.53 17.73 2.22 86 NO_DNS_FOR_FROM 12559 3.46 8.04 2.22 87 MAILING_LIST_MULTI 12145 1.95 1.21 2.14 88 XM_CamelCaseFrm001 11977 2.38 3.34 2.12 89 XM_B_Unsub2 11929 2.33 3.17 2.11 90 HTML_MIME_NO_HTML_TAG 11832 4.05 11.27 2.09 91 TooManyTo_002 11533 1.72 0.56 2.04 92 T_TooManySym_02 11401 1.76 0.81 2.01 93 BAYES_80 11090 3.35 8.47 1.96 94 UNPARSEABLE_RELAY 10853 1.67 0.76 1.92 95 SUBJ_ALL_CAPS 10831 1.98 2.23 1.91 96 MIME_HTML_MOSTLY 10831 2.44 4.36 1.91 97 RCVD_IN_IADB_OPTIN 10424 1.53 0.40 1.84 98 XMDiploma_00 9352 1.93 2.94 1.65 99 UNTRUSTED_Relay 9257 4.41 14.61 1.63 100 RELAYCOUNTRY_CA 9105 2.04 3.63 1.61 101 TR_Symld_Words 8987 1.49 1.14 1.59 102 T_XMDrugObfuBody_08 8952 1.79 2.56 1.58 103 TR_DCC_Bayes_99 8844 4.07 13.31 1.56 104 XM_SPF_SoftFail 8539 2.39 5.64 1.51 105 TVD_RCVD_IP 8421 1.38 0.97 1.49 106 HELO_NODOT 8390 1.29 0.58 1.48 107 HELO_NO_DOMAIN 8381 1.28 0.56 1.48 108 XM_DK_Undo_01 8076 1.43 1.45 1.43 109 T_XMDrugObfuBody_14 8019 1.53 1.96 1.42 110 TooManyTo_003 7702 1.16 0.43 1.36 111 INVALID_MSGID 7672 1.14 0.37 1.35 112 IN_HORDE_ADDRESS_BOOK 7631 1.06 0.02 1.35 113 URI_HEX 7270 1.79 3.66 1.28 114 XM_OfRef6 7250 1.69 3.20 1.28 115 TO_MALFORMED 7103 1.00 0.08 1.25 116 XMSubGarbage 7034 0.99 0.05 1.24 117 RELAYCOUNTRY_GB 6880 1.45 2.31 1.22 118 XMSubLongNoVowel 6811 0.98 0.15 1.20 119 XMGappySubj_01 6772 1.00 0.30 1.20 120 XMCapTrack 6541 1.89 4.57 1.16 121 XM_H_Long_From02 6536 1.08 0.83 1.15 122 BAYES_95 6443 1.87 4.58 1.14 123 CK_HELO_DYNAMIC_SPLIT_IP 6258 0.89 0.10 1.11 124 HELO_DYNAMIC_IPADDR2 6256 0.88 0.03 1.10 125 TM2_M_VERY_LONG_WORD 6127 1.23 1.78 1.08 126 USER_IN_DEF_DKIM_WL 6112 0.86 0.04 1.08 127 URI_TRY_3LD 6039 1.13 1.36 1.07 128 XM_GoogleGroups 5721 0.87 0.36 1.01 129 T_FILL_THIS_FORM_SHORT 5649 1.08 1.39 1.00 130 XMBdyGiftCard01 5648 1.13 1.61 1.00 131 TooManyTo_004 5606 0.85 0.35 0.99 132 XM_E_Blogspot 5481 0.78 0.08 0.97 133 XMGenDplmaNmb 5438 1.22 2.19 0.96 134 RCVD_IN_BL_SPAMCOP_NET 5340 1.73 4.63 0.94 135 XM_UB50 5222 2.57 8.62 0.92 136 DKIM_ADSP_CUSTOM_MED 5008 0.90 0.96 0.88 137 TR_MSPIKEBAYES00 4881 0.68 0.02 0.86 138 T_OBFU_PDF_ATTACH 4802 0.71 0.21 0.85 139 TooManyTo_005 4570 0.70 0.30 0.81 140 XMStockSpam_06 4517 0.94 1.46 0.80 141 RCVD_IN_MSPIKE_BL 4300 1.66 4.99 0.76 142 XMNoVowels 4158 0.74 0.75 0.73 143 XMSexyCombo_01 4007 1.04 2.26 0.71 144 TR_MetaPhish_Combo_01 3925 0.70 0.72 0.69 145 XMBody_17 3907 0.91 1.72 0.69 146 XMSolicitRefs_0 3902 0.61 0.33 0.69 147 XMBody_95 3885 0.56 0.09 0.69 148 NML_ADSP_CUSTOM_MED 3791 0.67 0.69 0.67 149 FILL_THIS_FORM 3776 0.78 1.18 0.67 150 T_XMDrugObfuBody_00 3775 0.75 1.07 0.67 151 XMHTML_After_End 3773 0.87 1.62 0.67 152 XMSubMetaI_00 3729 0.79 1.27 0.66 153 HTML_TAG_BALANCE_BODY 3680 0.66 0.69 0.65 154 URI_OPTOUT_3LD 3673 0.59 0.38 0.65 155 SpammyFromTLD_01 3654 1.04 2.49 0.65 156 PLING_QUERY 3505 0.67 0.87 0.62 157 T_XMHurry_00 3353 0.79 1.51 0.59 158 XM_ProductURIs 3223 0.75 1.41 0.57 159 HTML_IMAGE_ONLY_20 3132 0.48 0.21 0.55 160 XMBrknScrpt_02 3003 0.65 1.11 0.53 161 HTTPS_HTTP_MISMATCH 3001 0.61 0.89 0.53 162 XM_SPF_Unknown 2979 0.64 1.04 0.53 163 RCVD_IN_MSPIKE_L3 2921 1.12 3.33 0.52 164 T_Symld_Words_02 2891 0.61 0.97 0.51 165 XM_RXBody 2818 0.49 0.45 0.50 166 XM_B_REG_HTML 2813 0.49 0.47 0.50 167 XMMoneyMeta_00 2803 0.64 1.18 0.50 168 FILL_THIS_FORM_LONG 2774 0.49 0.50 0.49 169 RELAYCOUNTRY_AU 2695 0.47 0.44 0.48 170 FROM_GOV_DKIM_AU 2691 0.42 0.22 0.48 171 XM_DIRTYINTL 2670 1.18 3.77 0.47 172 XMPhish14 2665 0.61 1.14 0.47 173 FROM_GOV_SPOOF 2664 0.42 0.21 0.47 174 XM_ShortIntro_01 2619 0.42 0.27 0.46 175 REMOVE_BEFORE_LINK 2600 0.71 1.64 0.46 176 TR_XM_PHPDW 2593 0.77 1.94 0.46 177 T_TooManySym_03 2548 0.38 0.14 0.45 178 XMPhish08 2530 0.60 1.18 0.45 179 XM_H_PHPMailer 2515 0.61 1.24 0.44 180 TR_XM_PHPForged 2493 0.73 1.82 0.44 181 TR_XM_FormFill2 2488 0.73 1.80 0.44 182 XMPhish30 2458 0.52 0.84 0.43 183 XMGappySubj_02 2446 0.37 0.16 0.43 184 XM_H_PHPOS 2445 0.72 1.79 0.43 185 SHORT_HELO_AND_INLINE_IMAGE 2443 0.35 0.03 0.43 186 T_FILL_THIS_FORM_LOAN 2440 0.49 0.71 0.43 187 TM2_M_BODY_EMPTY 2404 0.38 0.20 0.42 188 SUBJ_DOLLARS 2403 0.46 0.58 0.42 189 USER_IN_WHITELIST 2369 0.33 0.00 0.42 190 MISSING_HEADERS 2365 0.61 1.31 0.42 191 TM2_M_A_HREF_HREF 2326 0.48 0.75 0.41 192 XMSubMetaSxObfu_03 2309 0.47 0.72 0.41 193 FORGED_GMAIL_RCVD 2232 0.49 0.85 0.39 194 MY_SERVERS_FOUND 2204 0.33 0.12 0.39 195 XM_Body_Obfu01 2191 0.39 0.40 0.39 196 T_MONEY_PERCENT 2145 0.60 1.39 0.38 197 TR_LOTS_OF_MONEY2 2145 0.60 1.39 0.38 198 XMHTMLBadTable_001 2141 0.42 0.59 0.38 199 XMLngstWrd_00 2126 0.40 0.48 0.38 200 HTML_IMAGE_ONLY_28 2101 0.39 0.47 0.37 ----------------------------------------------------------------------