Email: 649654 Autolearn: 0 AvgScore: 1.41 AvgScanTime: 2.03 sec Spam: 124530 Autolearn: 0 AvgScore: 12.18 AvgScanTime: 3.39 sec Ham: 525124 Autolearn: 0 AvgScore: -1.15 AvgScanTime: 1.70 sec Time Spent Running SA: 365.78 hours Time Spent Processing Spam: 117.13 hours Time Spent Processing Ham: 248.65 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 115438 89.94 92.70 89.28 2 DCC_CHECK 96008 47.52 77.10 40.51 3 DKIM_SIGNED 94022 75.71 75.50 75.76 4 XM_DK_Pass 91335 74.28 73.34 74.51 5 RELAYCOUNTRY_US 90129 79.56 72.38 81.26 6 XM_B_Unicode 86242 70.93 69.25 71.32 7 XMListUnsubscribeExists 80022 53.62 64.26 51.10 8 DKIM_VALID 78905 69.08 63.36 70.43 9 DKIM_VALID_AU 58987 51.57 47.37 52.56 10 BAYES_50 57122 51.15 45.87 52.40 11 XM_B_Unicode3 50331 40.79 40.42 40.88 12 XM_DK_Undo_02 47393 13.92 38.06 8.20 13 MIME_HTML_ONLY 45245 25.05 36.33 22.38 14 LOC_TINY_FONT_1 44943 25.63 36.09 23.15 15 HTML_FONT_LOW_CONTRAST 35055 28.31 28.15 28.35 16 DKIM_VALID_EF 34966 26.38 28.08 25.98 17 FVGT_m_MULTI_ODD 31262 21.75 25.10 20.96 18 BOTNET 31072 7.37 24.95 3.20 19 XMSubLong 30578 21.42 24.55 20.68 20 BAYES_99 29970 7.95 24.07 4.13 21 T_KAM_HTML_FONT_INVALID 28825 20.00 23.15 19.26 22 RELAYCOUNTRY_META 26799 8.74 21.52 5.71 23 XM_Body_Dirty_Words 26394 15.27 21.19 13.86 24 DCC_CHECK_NEGATIVE 26203 50.48 21.04 57.46 25 T_TM2_M_HEADER_IN_MSG 24821 28.68 19.93 30.76 26 BAYES_999 22703 6.17 18.23 3.31 27 TR_DCC_Bayes_99 22006 4.99 17.67 1.98 28 XM_UncommonTLD01 21833 5.92 17.53 3.17 29 LOTS_OF_MONEY 19770 11.18 15.88 10.07 30 UNTRUSTED_Relay 19602 4.55 15.74 1.90 31 XM_Multi_Part_URI 19330 12.26 15.52 11.49 32 FSL_BULK_SIG 18255 8.77 14.66 7.37 33 BOTNET_IPINHOSTNAME 18168 6.57 14.59 4.67 34 HTML_IMAGE_RATIO_02 16484 9.06 13.24 8.07 35 XM_B_Unsub 15771 11.29 12.66 10.96 36 DKIM_INVALID 15117 6.63 12.14 5.33 37 XMSexyCombo_05 13200 5.76 10.60 4.61 38 NO_DNS_FOR_FROM 11797 4.11 9.47 2.84 39 XM_Evil_Numbers_Gen 11690 8.84 9.39 8.71 40 XM_UB50 11485 2.67 9.22 1.12 41 BAYES_60 10668 6.12 8.57 5.54 42 XM_B_Phish_Phrases 10497 7.61 8.43 7.42 43 LotsOfNums_01 10398 7.84 8.35 7.72 44 SpammyFromTLD_02 9686 1.75 7.78 0.33 45 BAYES_80 9629 3.71 7.73 2.76 46 XMSubMetaSx_00 9622 4.37 7.73 3.58 47 XMNumbers 8954 4.14 7.19 3.42 48 MPART_ALT_DIFF 8630 5.41 6.93 5.05 49 TooManyTo_001 8040 7.70 6.46 8.00 50 ALL_TRUSTED 7999 13.16 6.42 14.75 51 RCVD_IN_BL_SPAMCOP_NET 7626 2.11 6.12 1.15 52 T_REMOTE_IMAGE 7442 4.56 5.98 4.23 53 XM_H_Long_From01 7276 5.64 5.84 5.59 54 RCVD_IN_MSPIKE_BL 7247 2.32 5.82 1.50 55 REPLYTO_WITHOUT_TO_CC 7223 1.37 5.80 0.31 56 HTML_IMAGE_RATIO_04 6883 5.58 5.53 5.60 57 RCVD_IN_RP_RNBL 6599 1.15 5.30 0.17 58 RCVD_IN_MSPIKE_L3 6592 1.90 5.29 1.10 59 MIME_QP_LONG_LINE 6200 5.34 4.98 5.42 60 XM_B_SpammyTLD 6112 2.55 4.91 1.99 61 RCVD_IN_MSPIKE_H2 5776 8.98 4.64 10.01 62 PDS_OTHER_BAD_TLD 5739 1.29 4.61 0.50 63 MIME_HTML_MOSTLY 5526 2.66 4.44 2.24 64 RELAYCOUNTRY_FR 5303 1.09 4.26 0.34 65 RELAYCOUNTRY_CA 5262 2.17 4.23 1.68 66 XM_SPF_SoftFail 5145 2.27 4.13 1.82 67 HTML_IMAGE_RATIO_06 5008 3.59 4.02 3.49 68 XM_CamelCaseFrm001 4926 2.59 3.96 2.26 69 HTML_IMAGE_ONLY_12 4840 0.90 3.89 0.20 70 XM_SendGrid 4823 6.29 3.87 6.86 71 BAYES_95 4738 2.05 3.80 1.63 72 FROM_SUSPICIOUS_NTLD 4623 0.75 3.71 0.04 73 HTML_SHORT_LINK_IMG_1 4601 0.72 3.69 0.01 74 MIME_HEADER_CTYPE_ONLY 4589 0.92 3.69 0.26 75 FROM_SUSPICIOUS_NTLD_FP 4546 0.73 3.65 0.04 76 RCVD_IN_MSPIKE_WL 4502 8.85 3.62 10.09 77 RCVD_IN_MSPIKE_H3 4502 8.85 3.62 10.09 78 TM2_M_URI_OPT_OUT 4436 2.97 3.56 2.83 79 HDRS_LCASE_IMGONLY 4432 0.70 3.56 0.02 80 XM_URI_RBL 4431 0.82 3.56 0.17 81 XM_DIRTYINTL 4379 1.14 3.52 0.58 82 XMStrtUSub 4273 3.89 3.43 4.00 83 TR_Mismatch_TLD_01 4252 0.82 3.41 0.20 84 BAYES_40 4155 5.27 3.34 5.73 85 T_XMDrugObfuBody_08 4154 1.87 3.34 1.52 86 T_TooManySym_01 4140 4.31 3.32 4.55 87 KHOP_HELO_FCRDNS 3985 2.24 3.20 2.02 88 XMBody_17 3892 1.26 3.13 0.82 89 BOTNET_NORDNS 3810 0.63 3.06 0.06 90 RCVD_IN_PSBL 3790 0.62 3.04 0.04 91 SpammyFromTLD_01 3745 1.18 3.01 0.75 92 SUBJ_DOLLARS 3709 0.90 2.98 0.40 93 MIME_HTML_ONLY_MULTI 3694 3.23 2.97 3.30 94 PDS_FROM_NAME_TO_DOMAIN 3681 0.57 2.96 0.00 95 PDS_FRNOM_TODOM_NAKED_TO 3678 0.57 2.95 0.00 96 XMLongAddy 3677 0.61 2.95 0.05 97 XMNoVowels 3663 2.35 2.94 2.22 98 XM_OfRef6 3630 1.85 2.91 1.60 99 XMDiploma_00 3593 2.09 2.89 1.91 100 FROM_EXCESS_BASE64 3503 3.57 2.81 3.75 101 XM_BadFromFormat 3482 0.64 2.80 0.13 102 XMSexyCombo_01 3469 1.02 2.79 0.61 103 LongTLD 3455 0.66 2.77 0.16 104 XM_B_Unsub2 3445 2.47 2.77 2.40 105 BAYES_20 3344 4.16 2.69 4.51 106 T_Symld_Words_02 3263 0.96 2.62 0.56 107 FROM_LOCAL_NOVOWEL 3188 0.52 2.56 0.04 108 FVGT_m_MULTI_ODD_EMAIL 3159 0.51 2.54 0.03 109 SUBJ_ALL_CAPS 3138 1.92 2.52 1.78 110 LOADSA_MONEY_COMBO 3131 0.52 2.51 0.04 111 TVD_SPACE_RATIO 3068 0.76 2.46 0.36 112 MISSING_HEADERS 3022 1.10 2.43 0.78 113 BASE64_LENGTH_79_INF 2934 0.87 2.36 0.51 114 T_XMDrugObfuBody_14 2865 1.79 2.30 1.67 115 BAYES_00 2847 16.65 2.29 20.06 116 TO_EQ_FM_DOM_HTML_IMG 2840 0.45 2.28 0.02 117 XMGenDplmaNmb 2815 1.52 2.26 1.35 118 URI_HEX 2804 1.63 2.25 1.49 119 RCVD_IN_IADB_LISTED 2794 4.82 2.24 5.43 120 DIET_1 2760 0.76 2.22 0.42 121 URIBL_SBL_A 2743 0.59 2.20 0.20 122 TO_NO_BRKTS_FROM_MSSP 2715 0.43 2.18 0.02 123 BODY_URI_ONLY 2676 0.45 2.15 0.05 124 XMMoneyMeta_00 2642 0.89 2.12 0.60 125 FROM_MISSP_EH_MATCH 2638 0.42 2.12 0.01 126 RELAYCOUNTRY_IN 2609 0.49 2.10 0.11 127 RCVD_IN_IADB_SPF 2566 4.18 2.06 4.68 128 TR_XM_PHPDW 2533 0.80 2.03 0.51 129 HTML_IMAGE_RATIO_08 2524 2.30 2.03 2.37 130 TR_XM_PHPForged 2500 0.78 2.01 0.49 131 RCVD_IN_IADB_SENDERID 2494 3.63 2.00 4.01 132 RCVD_IN_IADB_DK 2488 3.59 2.00 3.97 133 TR_XM_INV_DKIM 2463 0.54 1.98 0.20 134 TR_XM_FormFill2 2459 0.77 1.97 0.49 135 XM_H_PHPOS 2458 0.77 1.97 0.49 136 DATE_IN_PAST_03_06 2435 0.46 1.96 0.10 137 HTML_MIME_NO_HTML_TAG 2387 2.19 1.92 2.25 138 RCVD_IN_RP_SAFE 2385 6.99 1.92 8.19 139 XMSubMetaI_00 2260 0.77 1.81 0.53 140 FROM_MISSP_REPLYTO 2258 0.36 1.81 0.01 141 RELAYCOUNTRY_DE 2237 0.73 1.80 0.48 142 REMOVE_BEFORE_LINK 2157 0.62 1.73 0.36 143 TM2_M_VERY_LONG_WORD 2138 1.39 1.72 1.31 144 URI_TRY_3LD 2102 1.31 1.69 1.22 145 TR_XM_DK_Bayes 2097 12.19 1.68 14.68 146 XM_UB60 2059 0.37 1.65 0.07 147 SHORT_URI_4 1990 0.41 1.60 0.12 148 XMStockSpam_06 1988 1.07 1.60 0.95 149 TR_Symld_Words 1963 2.72 1.58 2.99 150 TR_XM_DK_SendGrid 1952 3.09 1.57 3.45 151 TR_Mismatch_TLD_02 1936 0.41 1.55 0.14 152 RELAYCOUNTRY_GB 1927 1.19 1.55 1.11 153 TR_LOTS_OF_MONEY2 1921 0.64 1.54 0.43 154 T_MONEY_PERCENT 1921 0.64 1.54 0.43 155 DKIM_ADSP_CUSTOM_MED 1895 1.24 1.52 1.17 156 SHORT_URI_3 1873 0.94 1.50 0.81 157 MAILING_LIST_MULTI 1852 2.22 1.49 2.40 158 RCVD_IN_RP_CERTIFIED 1793 6.40 1.44 7.57 159 DATE_IN_PAST_06_12 1769 0.30 1.42 0.04 160 XMHTML_After_End 1768 0.88 1.42 0.75 161 BAYES_05 1741 2.77 1.40 3.10 162 XM_H_PHPMailer 1713 0.71 1.38 0.55 163 FORGED_GMAIL_RCVD 1689 0.72 1.36 0.56 164 NML_ADSP_CUSTOM_MED 1664 0.93 1.34 0.84 165 XM_DK_Undo_01 1648 1.56 1.32 1.61 166 XM_UB99 1647 0.26 1.32 0.01 167 RDNS_DYNAMIC 1623 0.50 1.30 0.31 168 TR_XM_MaxBayes 1577 0.25 1.27 0.01 169 THIS_AD 1571 0.50 1.26 0.32 170 UNPARSEABLE_RELAY 1570 1.91 1.26 2.07 171 XMPhish08 1561 0.62 1.25 0.47 172 TR_XM_RelayPhish 1548 0.39 1.24 0.19 173 T_XMDrugObfuBody_00 1542 0.89 1.24 0.81 174 FILL_THIS_FORM_SHORT 1497 1.07 1.20 1.04 175 XM_H_PHPOS_M 1464 0.33 1.18 0.13 176 TR_XM_MaxSPIKE 1464 0.27 1.18 0.05 177 XMSexyCombo_04 1457 0.33 1.17 0.13 178 TR_XM_DK_Bayes1 1436 11.39 1.15 13.82 179 HK_RANDOM_REPLYTO 1373 0.37 1.10 0.20 180 XM_UB80 1325 0.22 1.06 0.02 181 T_XMHurry_00 1309 0.59 1.05 0.48 182 XM_ProductURIs 1273 0.97 1.02 0.96 183 TR_LOTS_OF_MONEY3 1243 0.55 1.00 0.44 184 TR_XM_DK_Bayes2 1225 10.02 0.98 12.16 185 HTTPS_HTTP_MISMATCH 1222 0.71 0.98 0.65 186 XM_H_MailChimp 1183 0.33 0.95 0.18 187 XMPhish30 1174 0.52 0.94 0.42 188 XMBrknScrpt_02 1131 0.80 0.91 0.78 189 XMBdyGiftCard01 1113 0.96 0.89 0.98 190 XM_UB999 1110 0.17 0.89 0.00 191 T_TooManySym_02 1102 2.01 0.88 2.27 192 XM_H_Long_From02 1101 1.41 0.88 1.54 193 XMPhish14 1090 0.55 0.88 0.47 194 TR_MetaPhish_Combo_01 1076 0.82 0.86 0.82 195 DKIM_ADSP_NXDOMAIN 1066 0.43 0.86 0.33 196 ANY_BOUNCE_MESSAGE 1038 2.09 0.83 2.39 197 XMBody_78 1024 0.45 0.82 0.36 198 BOUNCE_MESSAGE 1015 2.08 0.82 2.38 199 XMSubMetaSSx_00 1010 0.34 0.81 0.22 200 XM_OfRef7 1000 0.33 0.80 0.21 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 468854 89.94 92.70 89.28 2 RELAYCOUNTRY_US 426739 79.56 72.38 81.26 3 DKIM_SIGNED 397821 75.71 75.50 75.76 4 XM_DK_Pass 391248 74.28 73.34 74.51 5 XM_B_Unicode 374527 70.93 69.25 71.32 6 DKIM_VALID 369856 69.08 63.36 70.43 7 DCC_CHECK_NEGATIVE 301757 50.48 21.04 57.46 8 DKIM_VALID_AU 276010 51.57 47.37 52.56 9 BAYES_50 275152 51.15 45.87 52.40 10 XMListUnsubscribeExists 268349 53.62 64.26 51.10 11 XM_B_Unicode3 214652 40.79 40.42 40.88 12 DCC_CHECK 212739 47.52 77.10 40.51 13 T_TM2_M_HEADER_IN_MSG 161514 28.68 19.93 30.76 14 HTML_FONT_LOW_CONTRAST 148853 28.31 28.15 28.35 15 DKIM_VALID_EF 136409 26.38 28.08 25.98 16 LOC_TINY_FONT_1 121580 25.63 36.09 23.15 17 MIME_HTML_ONLY 117498 25.05 36.33 22.38 18 FVGT_m_MULTI_ODD 110067 21.75 25.10 20.96 19 XMSubLong 108588 21.42 24.55 20.68 20 BAYES_00 105330 16.65 2.29 20.06 21 T_KAM_HTML_FONT_INVALID 101115 20.00 23.15 19.26 22 ALL_TRUSTED 77474 13.16 6.42 14.75 23 TR_XM_DK_Bayes 77091 12.19 1.68 14.68 24 XM_Body_Dirty_Words 72803 15.27 21.19 13.86 25 TR_XM_DK_Bayes1 72581 11.39 1.15 13.82 26 TR_XM_DK_Bayes2 63876 10.02 0.98 12.16 27 XM_Multi_Part_URI 60324 12.26 15.52 11.49 28 XM_B_Unsub 57549 11.29 12.66 10.96 29 RCVD_IN_MSPIKE_WL 53011 8.85 3.62 10.09 30 RCVD_IN_MSPIKE_H3 53011 8.85 3.62 10.09 31 LOTS_OF_MONEY 52893 11.18 15.88 10.07 32 RCVD_IN_MSPIKE_H2 52544 8.98 4.64 10.01 33 XM_Evil_Numbers_Gen 45725 8.84 9.39 8.71 34 XM_DK_Undo_02 43055 13.92 38.06 8.20 35 RCVD_IN_RP_SAFE 43012 6.99 1.92 8.19 36 XM_DKIMWhitelistDomains 42812 6.59 0.02 8.15 37 HTML_IMAGE_RATIO_02 42386 9.06 13.24 8.07 38 TooManyTo_001 42006 7.70 6.46 8.00 39 LotsOfNums_01 40558 7.84 8.35 7.72 40 RCVD_IN_RP_CERTIFIED 39775 6.40 1.44 7.57 41 XM_B_Phish_Phrases 38966 7.61 8.43 7.42 42 FSL_BULK_SIG 38709 8.77 14.66 7.37 43 XM_SendGrid 36047 6.29 3.87 6.86 44 BAYES_40 30112 5.27 3.34 5.73 45 RELAYCOUNTRY_META 29983 8.74 21.52 5.71 46 HTML_IMAGE_RATIO_04 29382 5.58 5.53 5.60 47 XM_H_Long_From01 29336 5.64 5.84 5.59 48 BAYES_60 29084 6.12 8.57 5.54 49 RCVD_IN_IADB_LISTED 28509 4.82 2.24 5.43 50 MIME_QP_LONG_LINE 28462 5.34 4.98 5.42 51 DKIM_INVALID 27965 6.63 12.14 5.33 52 MPART_ALT_DIFF 26531 5.41 6.93 5.05 53 RCVD_IN_IADB_SPF 24564 4.18 2.06 4.68 54 BOTNET_IPINHOSTNAME 24523 6.57 14.59 4.67 55 XM_PDF 24332 3.88 0.70 4.63 56 XMSexyCombo_05 24219 5.76 10.60 4.61 57 T_TooManySym_01 23875 4.31 3.32 4.55 58 BAYES_20 23673 4.16 2.69 4.51 59 T_REMOTE_IMAGE 22204 4.56 5.98 4.23 60 BAYES_99 21685 7.95 24.07 4.13 61 RCVD_IN_IADB_SENDERID 21071 3.63 2.00 4.01 62 XMStrtUSub 20987 3.89 3.43 4.00 63 RCVD_IN_IADB_DK 20861 3.59 2.00 3.97 64 IN_ZIMBRA_NJ_WHITELIST 19779 3.05 0.01 3.77 65 FROM_EXCESS_BASE64 19703 3.57 2.81 3.75 66 RCVD_IN_IADB_VOUCHED 19197 3.10 0.74 3.66 67 XMSubMetaSx_00 18796 4.37 7.73 3.58 68 HTML_IMAGE_RATIO_06 18318 3.59 4.02 3.49 69 TR_XM_DK_SendGrid 18140 3.09 1.57 3.45 70 XMNumbers 17944 4.14 7.19 3.42 71 BAYES_999 17392 6.17 18.23 3.31 72 MIME_HTML_ONLY_MULTI 17307 3.23 2.97 3.30 73 BOTNET 16780 7.37 24.95 3.20 74 XM_UncommonTLD01 16636 5.92 17.53 3.17 75 BAYES_05 16253 2.77 1.40 3.10 76 TR_Symld_Words 15692 2.72 1.58 2.99 77 NO_DNS_FOR_FROM 14934 4.11 9.47 2.84 78 TM2_M_URI_OPT_OUT 14882 2.97 3.56 2.83 79 BAYES_80 14492 3.71 7.73 2.76 80 MAILING_LIST_MULTI 12594 2.22 1.49 2.40 81 XM_B_Unsub2 12578 2.47 2.77 2.40 82 ANY_BOUNCE_MESSAGE 12527 2.09 0.83 2.39 83 BOUNCE_MESSAGE 12506 2.08 0.82 2.38 84 HTML_IMAGE_RATIO_08 12448 2.30 2.03 2.37 85 RCVD_IN_IADB_OPTIN 12018 1.96 0.57 2.29 86 T_TooManySym_02 11940 2.01 0.88 2.27 87 XM_CamelCaseFrm001 11880 2.59 3.96 2.26 88 HTML_MIME_NO_HTML_TAG 11818 2.19 1.92 2.25 89 MIME_HTML_MOSTLY 11779 2.66 4.44 2.24 90 XMNoVowels 11634 2.35 2.94 2.22 91 UNPARSEABLE_RELAY 10869 1.91 1.26 2.07 92 TooManyTo_002 10812 1.77 0.56 2.06 93 KHOP_HELO_FCRDNS 10587 2.24 3.20 2.02 94 XM_B_SpammyTLD 10456 2.55 4.91 1.99 95 TR_DCC_Bayes_99 10403 4.99 17.67 1.98 96 XM_H_Trusted_IP 10340 1.59 0.00 1.97 97 XMDiploma_00 10017 2.09 2.89 1.91 98 UNTRUSTED_Relay 9969 4.55 15.74 1.90 99 XM_SPF_SoftFail 9572 2.27 4.13 1.82 100 SUBJ_ALL_CAPS 9326 1.92 2.52 1.78 101 HELO_NODOT 8956 1.48 0.52 1.71 102 HELO_NO_DOMAIN 8914 1.47 0.52 1.70 103 TVD_RCVD_IP 8843 1.46 0.51 1.68 104 RELAYCOUNTRY_CA 8805 2.17 4.23 1.68 105 T_XMDrugObfuBody_14 8766 1.79 2.30 1.67 106 BAYES_95 8577 2.05 3.80 1.63 107 XM_DK_Undo_01 8464 1.56 1.32 1.61 108 XM_OfRef6 8392 1.85 2.91 1.60 109 XM_H_Long_From02 8083 1.41 0.88 1.54 110 T_XMDrugObfuBody_08 7964 1.87 3.34 1.52 111 RCVD_IN_MSPIKE_BL 7856 2.32 5.82 1.50 112 URI_HEX 7805 1.63 2.25 1.49 113 INVALID_MSGID 7767 1.23 0.20 1.48 114 IN_HORDE_ADDRESS_BOOK 7718 1.19 0.02 1.47 115 TO_MALFORMED 7124 1.10 0.01 1.36 116 TooManyTo_003 7102 1.17 0.41 1.35 117 XMGenDplmaNmb 7070 1.52 2.26 1.35 118 TM2_M_VERY_LONG_WORD 6887 1.39 1.72 1.31 119 XMCapTrack 6885 1.12 0.29 1.31 120 CK_HELO_DYNAMIC_SPLIT_IP 6538 1.03 0.14 1.25 121 HELO_DYNAMIC_IPADDR2 6533 1.02 0.06 1.24 122 URI_TRY_3LD 6425 1.31 1.69 1.22 123 DKIM_ADSP_CUSTOM_MED 6141 1.24 1.52 1.17 124 RCVD_IN_BL_SPAMCOP_NET 6050 2.11 6.12 1.15 125 XM_UB50 5890 2.67 9.22 1.12 126 XM_GoogleGroups 5826 0.97 0.36 1.11 127 RELAYCOUNTRY_GB 5806 1.19 1.55 1.11 128 RCVD_IN_MSPIKE_L3 5754 1.90 5.29 1.10 129 FILL_THIS_FORM_SHORT 5465 1.07 1.20 1.04 130 TooManyTo_004 5233 0.86 0.31 1.00 131 USER_IN_DEF_DKIM_WL 5222 0.81 0.02 0.99 132 XMBdyGiftCard01 5156 0.96 0.89 0.98 133 FROM_GOV_DKIM_AU 5068 0.82 0.21 0.97 134 XM_ProductURIs 5029 0.97 1.02 0.96 135 XMStockSpam_06 4980 1.07 1.60 0.95 136 XMGappySubj_01 4871 0.79 0.19 0.93 137 HTML_FONT_FACE_BAD 4774 0.84 0.53 0.91 138 NML_ADSP_CUSTOM_MED 4388 0.93 1.34 0.84 139 TooManyTo_005 4385 0.73 0.27 0.84 140 XMBody_17 4307 1.26 3.13 0.82 141 XMSubNoVowel 4302 0.78 0.62 0.82 142 TR_MetaPhish_Combo_01 4281 0.82 0.86 0.82 143 T_XMDrugObfuBody_00 4238 0.89 1.24 0.81 144 SHORT_URI_3 4229 0.94 1.50 0.81 145 TR_MSPIKEBAYES00 4132 0.64 0.00 0.79 146 XMBrknScrpt_02 4098 0.80 0.91 0.78 147 MISSING_HEADERS 4095 1.10 2.43 0.78 148 XMBody_95 3956 0.63 0.11 0.75 149 SpammyFromTLD_01 3926 1.18 3.01 0.75 150 XMHTML_After_End 3917 0.88 1.42 0.75 151 PLING_QUERY 3504 0.68 0.71 0.67 152 HTTPS_HTTP_MISMATCH 3391 0.71 0.98 0.65 153 XM_ShortIntro_01 3360 0.59 0.37 0.64 154 HTML_TAG_BALANCE_BODY 3336 0.63 0.62 0.64 155 FILL_THIS_FORM 3257 0.61 0.56 0.62 156 XMSexyCombo_01 3180 1.02 2.79 0.61 157 XMMoneyMeta_00 3169 0.89 2.12 0.60 158 T_OBFU_PDF_ATTACH 3166 0.52 0.17 0.60 159 FROM_GOV_SPOOF 3091 0.51 0.17 0.59 160 XM_SPF_Unknown 3083 0.57 0.51 0.59 161 XM_DIRTYINTL 3036 1.14 3.52 0.58 162 FORGED_GMAIL_RCVD 2964 0.72 1.36 0.56 163 T_Symld_Words_02 2956 0.96 2.62 0.56 164 MPART_ALT_DIFF_COUNT 2911 0.58 0.67 0.55 165 TM2_M_A_HREF_HREF 2875 0.55 0.59 0.55 166 XM_H_PHPMailer 2873 0.71 1.38 0.55 167 RELAYCOUNTRY_AU 2838 0.54 0.56 0.54 168 XMHTMLBadTable_001 2770 0.55 0.66 0.53 169 XMSubMetaI_00 2770 0.77 1.81 0.53 170 BASE64_LENGTH_79_INF 2690 0.87 2.36 0.51 171 TR_XM_PHPDW 2690 0.80 2.03 0.51 172 T_TooManySym_03 2652 0.47 0.31 0.51 173 PDS_OTHER_BAD_TLD 2620 1.29 4.61 0.50 174 TR_XM_PHPForged 2595 0.78 2.01 0.49 175 FILL_THIS_FORM_LONG 2592 0.49 0.45 0.49 176 XM_B_REG_HTML 2573 0.47 0.41 0.49 177 HTML_OBFUSCATE_05_10 2572 0.42 0.11 0.49 178 TR_XM_FormFill2 2569 0.77 1.97 0.49 179 XM_H_PHPOS 2548 0.77 1.97 0.49 180 T_XMHurry_00 2545 0.59 1.05 0.48 181 RELAYCOUNTRY_DE 2504 0.73 1.80 0.48 182 HTML_IMAGE_ONLY_20 2496 0.45 0.33 0.48 183 XMPhish14 2485 0.55 0.88 0.47 184 SHORT_HELO_AND_INLINE_IMAGE 2482 0.39 0.02 0.47 185 XMPhish08 2474 0.62 1.25 0.47 186 HTML_IMAGE_ONLY_28 2474 0.46 0.42 0.47 187 FSL_THIS_IS_ADV 2438 0.47 0.47 0.46 188 TM2_M_BODY_EMPTY 2424 0.40 0.12 0.46 189 T_FILL_THIS_FORM_LOAN 2370 0.41 0.24 0.45 190 USER_IN_WHITELIST 2348 0.36 0.00 0.45 191 TR_LOTS_OF_MONEY3 2321 0.55 1.00 0.44 192 XMSubMetaSxObfu_03 2274 0.49 0.71 0.43 193 XMLngstWrd_00 2257 0.43 0.45 0.43 194 T_MONEY_PERCENT 2243 0.64 1.54 0.43 195 TR_LOTS_OF_MONEY2 2243 0.64 1.54 0.43 196 DIET_1 2205 0.76 2.22 0.42 197 XMPhish30 2205 0.52 0.94 0.42 198 XM_Body_Obfu01 2161 0.44 0.58 0.41 199 SUBJ_DOLLARS 2114 0.90 2.98 0.40 200 XM_B_COPY_HTML 2045 0.43 0.59 0.39 ----------------------------------------------------------------------