Email: 681598 Autolearn: 0 AvgScore: 1.50 AvgScanTime: 2.11 sec Spam: 121341 Autolearn: 0 AvgScore: 11.72 AvgScanTime: 4.05 sec Ham: 560257 Autolearn: 0 AvgScore: -0.72 AvgScanTime: 1.69 sec Time Spent Running SA: 399.84 hours Time Spent Processing Spam: 136.54 hours Time Spent Processing Ham: 263.30 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 114533 89.84 94.39 88.85 2 DKIM_SIGNED 103812 74.76 85.55 72.43 3 XM_DK_Pass 100448 73.16 82.78 71.07 4 RELAYCOUNTRY_US 97816 79.33 80.61 79.05 5 XM_B_Unicode 91211 73.08 75.17 72.63 6 DCC_CHECK 90861 45.49 74.88 39.12 7 DKIM_VALID 83450 67.27 68.77 66.95 8 XMListUnsubscribeExists 83431 52.87 68.76 49.43 9 DKIM_VALID_AU 60859 49.12 50.16 48.89 10 BAYES_50 58408 54.36 48.14 55.71 11 XM_B_Unicode3 54354 43.55 44.79 43.28 12 XM_DK_Undo_02 52032 14.37 42.88 8.19 13 LOC_TINY_FONT_1 44896 28.65 37.00 26.84 14 MIME_HTML_ONLY 39315 22.30 32.40 20.11 15 HTML_FONT_LOW_CONTRAST 38220 26.32 31.50 25.20 16 FVGT_m_MULTI_ODD 37098 21.80 30.57 19.90 17 DKIM_VALID_EF 33357 25.02 27.49 24.49 18 BAYES_99 30359 7.75 25.02 4.01 19 BOTNET 29087 6.83 23.97 3.12 20 DCC_CHECK_NEGATIVE 28211 52.59 23.25 58.94 21 XMSubLong 27070 19.94 22.31 19.43 22 T_KAM_HTML_FONT_INVALID 26586 18.48 21.91 17.74 23 T_TM2_M_HEADER_IN_MSG 26585 26.20 21.91 27.13 24 RELAYCOUNTRY_META 25347 7.79 20.89 4.95 25 XM_Body_Dirty_Words 24096 12.45 19.86 10.85 26 XM_Multi_Part_URI 24003 16.08 19.78 15.28 27 TR_DCC_Bayes_99 23697 5.46 19.53 2.41 28 BAYES_999 23271 5.99 19.18 3.13 29 DKIM_INVALID 20362 7.49 16.78 5.48 30 BOTNET_IPINHOSTNAME 19788 6.67 16.31 4.58 31 XM_B_Phish_Phrases 17331 9.15 14.28 8.04 32 XM_UncommonTLD01 17022 5.01 14.03 3.06 33 UNTRUSTED_Relay 14980 3.37 12.35 1.43 34 HTML_IMAGE_RATIO_02 14928 7.15 12.30 6.03 35 NO_DNS_FOR_FROM 14378 4.65 11.85 3.09 36 LOTS_OF_MONEY 14166 8.21 11.67 7.46 37 XM_Evil_Numbers_Gen 14013 9.25 11.55 8.75 38 FSL_BULK_SIG 13935 7.82 11.48 7.02 39 XM_B_Unsub 13801 10.09 11.37 9.81 40 RCVD_IN_MSPIKE_H2 12092 12.11 9.97 12.58 41 LotsOfNums_01 11770 8.65 9.70 8.42 42 XMSexyCombo_05 11550 4.25 9.52 3.11 43 XM_UB50 8959 2.00 7.38 0.83 44 TooManyTo_001 8868 8.28 7.31 8.49 45 MPART_ALT_DIFF 8536 5.39 7.03 5.03 46 XM_H_Long_From01 8281 5.49 6.82 5.19 47 BAYES_80 7989 3.52 6.58 2.86 48 HTML_IMAGE_RATIO_04 7487 5.53 6.17 5.39 49 XM_B_SpammyTLD 7357 3.33 6.06 2.74 50 XMSubMetaSx_00 7277 3.58 6.00 3.06 51 UNPARSEABLE_RELAY 7007 7.32 5.77 7.65 52 BAYES_60 6882 5.35 5.67 5.29 53 PDS_OTHER_BAD_TLD 6670 1.12 5.50 0.17 54 XM_SPF_SoftFail 6566 2.25 5.41 1.56 55 RCVD_IN_MSPIKE_BL 6455 2.15 5.32 1.46 56 XM_SendGrid 6389 5.90 5.27 6.04 57 MIME_QP_LONG_LINE 6362 6.01 5.24 6.17 58 RCVD_IN_MSPIKE_L3 6293 2.02 5.19 1.34 59 SpammyFromTLD_02 6161 1.26 5.08 0.43 60 MIME_HTML_MOSTLY 5977 2.82 4.93 2.37 61 RELAYCOUNTRY_CA 5952 2.04 4.91 1.41 62 XM_CamelCaseFrm001 5752 2.31 4.74 1.78 63 FROM_SUSPICIOUS_NTLD 5704 0.89 4.70 0.06 64 HTML_MIME_NO_HTML_TAG 5604 2.88 4.62 2.50 65 FROM_SUSPICIOUS_NTLD_FP 5578 0.86 4.60 0.06 66 URI_OPTOUT_3LD 5559 0.90 4.58 0.10 67 XMNumbers 5495 3.33 4.53 3.07 68 BAYES_40 5093 5.32 4.20 5.56 69 XMStrtUSub 4960 7.41 4.09 8.13 70 XM_URI_RBL 4877 0.87 4.02 0.19 71 T_XMDrugObfuBody_08 4777 2.10 3.94 1.70 72 XM_DK_Undo_01 4745 2.20 3.91 1.83 73 TM2_M_URI_OPT_OUT 4564 2.94 3.76 2.76 74 RCVD_IN_BL_SPAMCOP_NET 4425 1.71 3.65 1.29 75 HTML_IMAGE_RATIO_06 4188 3.16 3.45 3.10 76 FROM_EXCESS_BASE64 4126 3.20 3.40 3.16 77 RCVD_IN_RP_RNBL 4069 0.64 3.35 0.05 78 BAYES_95 4049 1.99 3.34 1.70 79 XM_DIRTYINTL 3960 0.96 3.26 0.46 80 MIME_HTML_ONLY_MULTI 3834 3.34 3.16 3.38 81 BAYES_20 3822 3.92 3.15 4.09 82 RELAYCOUNTRY_FR 3774 0.74 3.11 0.23 83 KHOP_HELO_FCRDNS 3716 1.99 3.06 1.75 84 XM_OfRef6 3638 1.61 3.00 1.31 85 LongTLD 3556 0.66 2.93 0.17 86 XMSubEmpty 3524 0.72 2.90 0.25 87 TR_Sbj_FN_Bdy 3509 0.71 2.89 0.24 88 RCVD_IN_MSPIKE_WL 3463 7.89 2.85 8.98 89 RCVD_IN_MSPIKE_H3 3463 7.89 2.85 8.98 90 SUBJ_ALL_CAPS 3367 2.00 2.77 1.83 91 T_TooManySym_01 3341 3.72 2.75 3.92 92 XM_B_Unsub2 3304 1.92 2.72 1.74 93 T_REMOTE_IMAGE 3173 3.55 2.61 3.75 94 TR_XM_INV_DKIM 3166 0.55 2.61 0.10 95 MISSING_SUBJECT 3125 0.52 2.58 0.08 96 XMNoSubject 3125 0.52 2.58 0.08 97 XMBody_17 3112 0.95 2.56 0.59 98 XMDiploma_00 3078 1.67 2.54 1.48 99 HTML_IMAGE_RATIO_08 3054 2.15 2.52 2.07 100 RCVD_IN_RP_SAFE 3041 6.98 2.51 7.95 101 ANY_BOUNCE_MESSAGE 3011 2.41 2.48 2.39 102 BOUNCE_MESSAGE 3008 2.40 2.48 2.39 103 XMNoVowels 2984 1.79 2.46 1.64 104 URI_HEX 2971 1.39 2.45 1.16 105 DATE_IN_PAST_06_12 2862 0.54 2.36 0.14 106 BAYES_00 2706 15.15 2.23 17.95 107 SpammyFromTLD_01 2685 1.04 2.21 0.78 108 URI_TRY_3LD 2637 1.32 2.17 1.14 109 URIBL_SBL_A 2611 0.49 2.15 0.13 110 UNICODE_OBFU_ASC 2579 3.82 2.13 4.19 111 RCVD_IN_RP_CERTIFIED 2480 6.18 2.04 7.07 112 RCVD_IN_IADB_LISTED 2422 4.84 2.00 5.46 113 T_XMDrugObfuBody_14 2419 1.69 1.99 1.63 114 BOTNET_NORDNS 2377 0.37 1.96 0.02 115 TM2_M_VERY_LONG_WORD 2323 1.30 1.91 1.17 116 XMGenDplmaNmb 2304 1.10 1.90 0.92 117 RELAYCOUNTRY_DE 2274 0.73 1.87 0.49 118 RCVD_IN_IADB_SPF 2238 4.23 1.84 4.75 119 XMSexyCombo_01 2198 0.82 1.81 0.61 120 TR_XM_DK_SendGrid 2197 2.83 1.81 3.05 121 RCVD_IN_IADB_DK 2195 3.70 1.81 4.10 122 RCVD_IN_IADB_SENDERID 2185 3.70 1.80 4.12 123 XM_ProductURIs 2183 1.01 1.80 0.84 124 TR_Symld_Words 2174 1.22 1.79 1.10 125 TR_XM_DK_Bayes 2102 10.44 1.73 12.33 126 ALL_TRUSTED 2071 14.81 1.71 17.65 127 TR_MetaPhish_Combo_01 2068 1.21 1.70 1.10 128 TR_XM_RelayPhish 2055 0.48 1.69 0.21 129 XMLngstWrd_00 2033 0.66 1.68 0.44 130 BAYES_05 2029 2.62 1.67 2.83 131 XMStockSpam_06 2024 1.11 1.67 0.99 132 RELAYCOUNTRY_GB 2009 1.18 1.66 1.08 133 XMLngstWrd_01 1986 0.63 1.64 0.41 134 TR_XM_PHPDW 1953 0.74 1.61 0.55 135 TR_Mismatch_TLD_02 1950 0.36 1.61 0.09 136 T_FILL_THIS_FORM_SHORT 1931 0.98 1.59 0.85 137 T_XMDrugObfuBody_00 1922 0.76 1.58 0.58 138 T_XMHurry_00 1894 0.69 1.56 0.51 139 TR_XM_PHPForged 1888 0.71 1.56 0.53 140 TR_XM_FormFill2 1882 0.71 1.55 0.53 141 XM_H_PHPOS 1874 0.71 1.54 0.53 142 XMPhish30 1847 0.84 1.52 0.69 143 DKIM_ADSP_CUSTOM_MED 1839 1.32 1.52 1.27 144 XMBody_78 1829 0.48 1.51 0.26 145 TR_LOTS_OF_MONEY3 1786 0.61 1.47 0.43 146 TR_XM_MaxBayes 1747 0.26 1.44 0.01 147 XMSubMetaI_00 1673 0.82 1.38 0.70 148 MAILING_LIST_MULTI 1672 2.35 1.38 2.56 149 FORGED_GMAIL_RCVD 1652 0.67 1.36 0.52 150 NML_ADSP_CUSTOM_MED 1611 1.00 1.33 0.93 151 XM_B_COPY_HTML 1560 0.53 1.29 0.36 152 XMBrknScrpt_02 1533 0.64 1.26 0.51 153 MY_SERVERS_FOUND 1448 0.30 1.19 0.11 154 XM_H_Long_From02 1443 1.28 1.19 1.30 155 DIET_1 1417 0.45 1.17 0.30 156 DATE_IN_PAST_03_06 1403 0.27 1.16 0.08 157 XM_H_MailChimp 1402 0.40 1.16 0.23 158 TR_XM_DK_Bayes1 1377 9.65 1.13 11.50 159 XM_H_TOP 1373 0.20 1.13 0.00 160 XM_UB60 1351 0.25 1.11 0.07 161 DATE_IN_PAST_12_24 1314 0.25 1.08 0.07 162 TR_XM_MaxSPIKE 1307 0.23 1.08 0.05 163 NORDNS_LOW_CONTRAST 1298 0.19 1.07 0.00 164 RDNS_DYNAMIC 1295 0.41 1.07 0.27 165 XMPhish08 1277 0.53 1.05 0.42 166 HTTPS_HTTP_MISMATCH 1268 0.87 1.04 0.83 167 XM_H_PHPMailer 1265 0.69 1.04 0.61 168 XMSubMetaSxObfu_03 1250 0.46 1.03 0.34 169 XMHTML_After_End 1241 0.66 1.02 0.58 170 T_MONEY_PERCENT 1221 0.72 1.01 0.66 171 TR_LOTS_OF_MONEY2 1221 0.72 1.01 0.66 172 XMMoneyMeta_00 1213 0.67 1.00 0.60 173 RELAYCOUNTRY_NL 1186 0.27 0.98 0.12 174 TR_XM_DK_Bayes2 1181 8.47 0.97 10.09 175 RELAYCOUNTRY_IN 1150 0.23 0.95 0.07 176 INVALID_MSGID 1141 1.34 0.94 1.43 177 XM_UB99 1141 0.17 0.94 0.00 178 TM2_M_A_HREF_HREF 1117 0.46 0.92 0.37 179 XM_OfRef7 1114 0.27 0.92 0.13 180 XMPhish14 1073 0.37 0.88 0.25 181 RCVD_IN_PSBL 1047 0.18 0.86 0.03 182 RELAYCOUNTRY_AT 1025 0.29 0.84 0.16 183 XMBdyGiftCard01 1020 0.90 0.84 0.92 184 XM_H_Undi_Recip 1005 0.37 0.83 0.27 185 XMLngstWrd_02 998 0.40 0.82 0.31 186 XM_PDF 973 3.57 0.80 4.17 187 XM_H_PHPOS_M 970 0.38 0.80 0.29 188 TR_Mismatch_TLD_01 967 0.33 0.80 0.22 189 URIBL_BLACK 945 0.15 0.78 0.02 190 FILL_THIS_FORM 936 0.44 0.77 0.37 191 HK_RANDOM_REPLYTO 924 0.33 0.76 0.24 192 TooManyTo_002 905 2.18 0.75 2.49 193 XMLngstWrd_03 904 0.32 0.75 0.23 194 XMSexyCombo_04 875 0.27 0.72 0.17 195 LOW_PRICE 867 0.41 0.71 0.35 196 XM_UB999 856 0.13 0.71 0.00 197 XM_UB80 854 0.14 0.70 0.02 198 HTML_TAG_BALANCE_BODY 835 0.45 0.69 0.39 199 REMOVE_BEFORE_LINK 833 0.32 0.69 0.24 200 THIS_AD 828 0.49 0.68 0.45 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 497806 89.84 94.39 88.85 2 RELAYCOUNTRY_US 442884 79.33 80.61 79.05 3 XM_B_Unicode 406929 73.08 75.17 72.63 4 DKIM_SIGNED 405781 74.76 85.55 72.43 5 XM_DK_Pass 398199 73.16 82.78 71.07 6 DKIM_VALID 375092 67.27 68.77 66.95 7 DCC_CHECK_NEGATIVE 330232 52.59 23.25 58.94 8 BAYES_50 312136 54.36 48.14 55.71 9 XMListUnsubscribeExists 276950 52.87 68.76 49.43 10 DKIM_VALID_AU 273934 49.12 50.16 48.89 11 XM_B_Unicode3 242486 43.55 44.79 43.28 12 DCC_CHECK 219184 45.49 74.88 39.12 13 T_TM2_M_HEADER_IN_MSG 151971 26.20 21.91 27.13 14 LOC_TINY_FONT_1 150371 28.65 37.00 26.84 15 HTML_FONT_LOW_CONTRAST 141163 26.32 31.50 25.20 16 DKIM_VALID_EF 137207 25.02 27.49 24.49 17 MIME_HTML_ONLY 112691 22.30 32.40 20.11 18 FVGT_m_MULTI_ODD 111469 21.80 30.57 19.90 19 XMSubLong 108840 19.94 22.31 19.43 20 BAYES_00 100547 15.15 2.23 17.95 21 T_KAM_HTML_FONT_INVALID 99396 18.48 21.91 17.74 22 ALL_TRUSTED 98869 14.81 1.71 17.65 23 XM_Multi_Part_URI 85584 16.08 19.78 15.28 24 RCVD_IN_MSPIKE_H2 70457 12.11 9.97 12.58 25 TR_XM_DK_Bayes 69066 10.44 1.73 12.33 26 TR_XM_DK_Bayes1 64415 9.65 1.13 11.50 27 XM_Body_Dirty_Words 60785 12.45 19.86 10.85 28 TR_XM_DK_Bayes2 56526 8.47 0.97 10.09 29 XM_B_Unsub 54982 10.09 11.37 9.81 30 RCVD_IN_MSPIKE_H3 50284 7.89 2.85 8.98 31 RCVD_IN_MSPIKE_WL 50284 7.89 2.85 8.98 32 XM_Evil_Numbers_Gen 49002 9.25 11.55 8.75 33 TooManyTo_001 47573 8.28 7.31 8.49 34 LotsOfNums_01 47155 8.65 9.70 8.42 35 XM_DK_Undo_02 45884 14.37 42.88 8.19 36 XMStrtUSub 45565 7.41 4.09 8.13 37 XM_B_Phish_Phrases 45051 9.15 14.28 8.04 38 RCVD_IN_RP_SAFE 44513 6.98 2.51 7.95 39 UNPARSEABLE_RELAY 42862 7.32 5.77 7.65 40 LOTS_OF_MONEY 41812 8.21 11.67 7.46 41 XM_DKIMWhitelistDomains 39754 5.86 0.14 7.10 42 RCVD_IN_RP_CERTIFIED 39622 6.18 2.04 7.07 43 FSL_BULK_SIG 39340 7.82 11.48 7.02 44 MIME_QP_LONG_LINE 34592 6.01 5.24 6.17 45 XM_SendGrid 33836 5.90 5.27 6.04 46 HTML_IMAGE_RATIO_02 33795 7.15 12.30 6.03 47 BAYES_40 31139 5.32 4.20 5.56 48 DKIM_INVALID 30689 7.49 16.78 5.48 49 RCVD_IN_IADB_LISTED 30570 4.84 2.00 5.46 50 HTML_IMAGE_RATIO_04 30192 5.53 6.17 5.39 51 BAYES_60 29614 5.35 5.67 5.29 52 XM_H_Long_From01 29105 5.49 6.82 5.19 53 MPART_ALT_DIFF 28205 5.39 7.03 5.03 54 RELAYCOUNTRY_META 27755 7.79 20.89 4.95 55 RCVD_IN_IADB_SPF 26602 4.23 1.84 4.75 56 BOTNET_IPINHOSTNAME 25684 6.67 16.31 4.58 57 UPPERCASE_75_100 23507 3.47 0.13 4.20 58 UNICODE_OBFU_ASC 23473 3.82 2.13 4.19 59 XM_PDF 23375 3.57 0.80 4.17 60 RCVD_IN_IADB_SENDERID 23067 3.70 1.80 4.12 61 RCVD_IN_IADB_DK 22991 3.70 1.81 4.10 62 BAYES_20 22930 3.92 3.15 4.09 63 BAYES_99 22481 7.75 25.02 4.01 64 T_TooManySym_01 21981 3.72 2.75 3.92 65 T_REMOTE_IMAGE 21017 3.55 2.61 3.75 66 RCVD_IN_IADB_VOUCHED 19186 2.93 0.65 3.42 67 MIME_HTML_ONLY_MULTI 18962 3.34 3.16 3.38 68 IN_ZIMBRA_NJ_WHITELIST 18013 2.65 0.02 3.22 69 XM_H_Trusted_IP 17969 2.64 0.00 3.21 70 FROM_EXCESS_BASE64 17706 3.20 3.40 3.16 71 BAYES_999 17546 5.99 19.18 3.13 72 BOTNET 17477 6.83 23.97 3.12 73 XMSexyCombo_05 17407 4.25 9.52 3.11 74 HTML_IMAGE_RATIO_06 17359 3.16 3.45 3.10 75 NO_DNS_FOR_FROM 17322 4.65 11.85 3.09 76 XMNumbers 17172 3.33 4.53 3.07 77 XMSubMetaSx_00 17155 3.58 6.00 3.06 78 XM_UncommonTLD01 17123 5.01 14.03 3.06 79 TR_XM_DK_SendGrid 17066 2.83 1.81 3.05 80 BAYES_80 16033 3.52 6.58 2.86 81 BAYES_05 15828 2.62 1.67 2.83 82 TM2_M_URI_OPT_OUT 15464 2.94 3.76 2.76 83 XM_B_SpammyTLD 15364 3.33 6.06 2.74 84 MAILING_LIST_MULTI 14328 2.35 1.38 2.56 85 HTML_MIME_NO_HTML_TAG 14025 2.88 4.62 2.50 86 TooManyTo_002 13955 2.18 0.75 2.49 87 TR_DCC_Bayes_99 13488 5.46 19.53 2.41 88 ANY_BOUNCE_MESSAGE 13382 2.41 2.48 2.39 89 BOUNCE_MESSAGE 13379 2.40 2.48 2.39 90 MIME_HTML_MOSTLY 13271 2.82 4.93 2.37 91 RCVD_IN_IADB_OPTIN 12107 1.87 0.53 2.16 92 HTML_IMAGE_RATIO_08 11570 2.15 2.52 2.07 93 T_TooManySym_02 10605 1.67 0.65 1.89 94 SUBJ_ALL_CAPS 10259 2.00 2.77 1.83 95 XM_DK_Undo_01 10245 2.20 3.91 1.83 96 TVD_RCVD_IP 9987 1.57 0.57 1.78 97 XM_CamelCaseFrm001 9978 2.31 4.74 1.78 98 TooManyTo_003 9883 1.56 0.61 1.76 99 KHOP_HELO_FCRDNS 9816 1.99 3.06 1.75 100 XM_B_Unsub2 9755 1.92 2.72 1.74 101 T_XMDrugObfuBody_08 9541 2.10 3.94 1.70 102 BAYES_95 9530 1.99 3.34 1.70 103 XMNoVowels 9202 1.79 2.46 1.64 104 T_XMDrugObfuBody_14 9114 1.69 1.99 1.63 105 XM_SPF_SoftFail 8738 2.25 5.41 1.56 106 IN_HORDE_ADDRESS_BOOK 8663 1.29 0.08 1.55 107 XMDiploma_00 8278 1.67 2.54 1.48 108 RCVD_IN_MSPIKE_BL 8181 2.15 5.32 1.46 109 XM_GoogleGroups 8155 1.30 0.60 1.46 110 INVALID_MSGID 7996 1.34 0.94 1.43 111 HELO_NODOT 7992 1.27 0.54 1.43 112 HELO_NO_DOMAIN 7991 1.27 0.54 1.43 113 UNTRUSTED_Relay 7985 3.37 12.35 1.43 114 RELAYCOUNTRY_CA 7922 2.04 4.91 1.41 115 TooManyTo_004 7729 1.23 0.53 1.38 116 HTML_FONT_FACE_BAD 7688 1.24 0.65 1.37 117 RCVD_IN_MSPIKE_L3 7507 2.02 5.19 1.34 118 XM_OfRef6 7352 1.61 3.00 1.31 119 TO_MALFORMED 7277 1.08 0.05 1.30 120 XM_H_Long_From02 7259 1.28 1.19 1.30 121 RCVD_IN_BL_SPAMCOP_NET 7207 1.71 3.65 1.29 122 DKIM_ADSP_CUSTOM_MED 7127 1.32 1.52 1.27 123 CK_HELO_DYNAMIC_SPLIT_IP 7123 1.09 0.23 1.27 124 HELO_DYNAMIC_IPADDR2 7119 1.06 0.07 1.27 125 XMGappySubj_01 7013 1.06 0.20 1.25 126 XMCapTrack 6609 1.07 0.57 1.18 127 TM2_M_VERY_LONG_WORD 6546 1.30 1.91 1.17 128 URI_HEX 6514 1.39 2.45 1.16 129 TooManyTo_005 6468 1.03 0.46 1.15 130 URI_TRY_3LD 6366 1.32 2.17 1.14 131 TR_MetaPhish_Combo_01 6189 1.21 1.70 1.10 132 TR_Symld_Words 6165 1.22 1.79 1.10 133 RELAYCOUNTRY_GB 6031 1.18 1.66 1.08 134 XMSubNoVowel 5855 0.95 0.52 1.05 135 XMStockSpam_06 5546 1.11 1.67 0.99 136 NML_ADSP_CUSTOM_MED 5190 1.00 1.33 0.93 137 XMGenDplmaNmb 5180 1.10 1.90 0.92 138 XMBdyGiftCard01 5138 0.90 0.84 0.92 139 T_FILL_THIS_FORM_SHORT 4760 0.98 1.59 0.85 140 XM_ProductURIs 4706 1.01 1.80 0.84 141 USER_IN_DEF_DKIM_WL 4702 0.69 0.00 0.84 142 XM_UB50 4660 2.00 7.38 0.83 143 XM_ShortIntro_01 4641 0.75 0.38 0.83 144 HTTPS_HTTP_MISMATCH 4637 0.87 1.04 0.83 145 SpammyFromTLD_01 4374 1.04 2.21 0.78 146 HTML_IMAGE_ONLY_20 4290 0.66 0.19 0.77 147 FROM_GOV_DKIM_AU 4226 0.67 0.26 0.75 148 XMSubMetaI_00 3921 0.82 1.38 0.70 149 XMPhish30 3876 0.84 1.52 0.69 150 TR_LOTS_OF_MONEY2 3671 0.72 1.01 0.66 151 T_MONEY_PERCENT 3671 0.72 1.01 0.66 152 XM_H_PHPMailer 3434 0.69 1.04 0.61 153 TR_MSPIKEBAYES00 3418 0.50 0.00 0.61 154 XMSexyCombo_01 3405 0.82 1.81 0.61 155 XMMoneyMeta_00 3374 0.67 1.00 0.60 156 MISSING_HEADERS 3355 0.59 0.57 0.60 157 T_TooManySym_03 3355 0.53 0.21 0.60 158 XMBody_17 3331 0.95 2.56 0.59 159 XM_B_REG_HTML 3259 0.58 0.55 0.58 160 T_XMDrugObfuBody_00 3232 0.76 1.58 0.58 161 XMHTML_After_End 3229 0.66 1.02 0.58 162 TR_XM_PHPDW 3062 0.74 1.61 0.55 163 TR_XM_FormFill2 2985 0.71 1.55 0.53 164 TR_XM_PHPForged 2984 0.71 1.56 0.53 165 XM_SPF_Unknown 2959 0.52 0.46 0.53 166 XM_H_PHPOS 2950 0.71 1.54 0.53 167 RELAYCOUNTRY_AU 2921 0.54 0.64 0.52 168 FORGED_GMAIL_RCVD 2904 0.67 1.36 0.52 169 T_OBFU_PDF_ATTACH 2890 0.46 0.22 0.52 170 XMBrknScrpt_02 2854 0.64 1.26 0.51 171 T_XMHurry_00 2834 0.69 1.56 0.51 172 T_Symld_Words_02 2828 0.53 0.64 0.50 173 RELAYCOUNTRY_DE 2729 0.73 1.87 0.49 174 FROM_GOV_SPOOF 2708 0.48 0.44 0.48 175 XMSolicitRefs_0 2662 0.47 0.44 0.48 176 XMGappySubj_02 2636 0.40 0.05 0.47 177 XM_DIRTYINTL 2565 0.96 3.26 0.46 178 THIS_AD 2524 0.49 0.68 0.45 179 XMLngstWrd_00 2474 0.66 1.68 0.44 180 PLING_QUERY 2454 0.47 0.62 0.44 181 XM_RXBody 2454 0.44 0.45 0.44 182 SpammyFromTLD_02 2407 1.26 5.08 0.43 183 URI_WP_DIRINDEX 2403 0.43 0.44 0.43 184 TR_LOTS_OF_MONEY3 2401 0.61 1.47 0.43 185 XMPhish08 2358 0.53 1.05 0.42 186 RCVD_IN_SORBS_DUL 2338 0.39 0.25 0.42 187 XMLngstWrd_01 2289 0.63 1.64 0.41 188 HTML_TAG_BALANCE_BODY 2203 0.45 0.69 0.39 189 TM2_M_BODY_EMPTY 2166 0.34 0.10 0.39 190 FILL_THIS_FORM 2090 0.44 0.77 0.37 191 XMHTMLBadTable_001 2072 0.39 0.50 0.37 192 XMBody_95 2065 0.33 0.13 0.37 193 TM2_M_A_HREF_HREF 2051 0.46 0.92 0.37 194 MSGID_FROM_MTA_HEADER 2045 0.39 0.51 0.37 195 XM_B_COPY_HTML 2037 0.53 1.29 0.36 196 XM_Body_Obfu01 1999 0.38 0.47 0.36 197 USER_IN_WHITELIST 1984 0.29 0.00 0.35 198 HTML_IMAGE_ONLY_32 1983 0.33 0.20 0.35 199 LOW_PRICE 1960 0.41 0.71 0.35 200 SHORT_HELO_AND_INLINE_IMAGE 1933 0.29 0.03 0.35 ----------------------------------------------------------------------