Email: 301546 Autolearn: 0 AvgScore: 0.90 AvgScanTime: 2.03 sec Spam: 78350 Autolearn: 0 AvgScore: 13.07 AvgScanTime: 2.40 sec Ham: 223196 Autolearn: 0 AvgScore: -3.37 AvgScanTime: 1.90 sec Time Spent Running SA: 169.99 hours Time Spent Processing Spam: 52.13 hours Time Spent Processing Ham: 117.86 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 74622 78.06 95.24 72.02 2 DKIM_SIGNED 65059 61.09 83.04 53.38 3 DCC_CHECK 64217 47.94 81.96 36.00 4 XM_DK_Pass 63438 60.20 80.97 52.91 5 DKIM_VALID 62541 59.21 79.82 51.97 6 XMListUnsubscribeExists 61908 48.21 79.01 37.39 7 DKIM_VALID_AU 51887 49.19 66.22 43.21 8 XM_DK_Undo_02 42708 27.11 54.51 17.49 9 BAYES_99 39107 25.62 49.91 17.10 10 XM_H_QuotedFrom 38595 42.62 49.26 40.29 11 BAYES_999 34468 22.89 43.99 15.48 12 TR_DCC_Bayes_99 32265 17.40 41.18 9.05 13 HTML_FONT_LOW_CONTRAST 26574 25.95 33.92 23.15 14 LOC_TINY_FONT_1 25883 23.06 33.04 19.56 15 MIME_HTML_ONLY 23258 30.80 29.68 31.19 16 FVGT_m_MULTI_ODD 22116 18.89 28.23 15.61 17 BAYES_50 21765 45.15 27.78 51.25 18 XMSubLong 19014 20.83 24.27 19.62 19 HTML_IMAGE_RATIO_02 15957 10.26 20.37 6.71 20 BOTNET_IPINHOSTNAME 15532 9.73 19.82 6.18 21 XM_Body_Dirty_Words 15319 11.03 19.55 8.04 22 BOTNET 14431 5.45 18.42 0.89 23 T_TM2_M_HEADER_IN_MSG 13308 16.68 16.99 16.57 24 RELAYCOUNTRY_META 12999 6.49 16.59 2.94 25 DCC_CHECK_NEGATIVE 12739 50.85 16.26 62.99 26 XM_Multi_Part_URI 12343 10.61 15.75 8.80 27 MultiRelay 12209 10.67 15.58 8.95 28 DKIM_VALID_EF 11960 18.03 15.26 19.00 29 URIBL_RHS_DOB 11306 6.05 14.43 3.11 30 XM_UncommonTLD01 9831 6.15 12.55 3.91 31 XM_Evil_Numbers_Gen 9795 7.69 12.50 6.01 32 T_KAM_HTML_FONT_INVALID 9648 8.49 12.31 7.15 33 HTML_IMAGE_RATIO_04 8423 5.55 10.75 3.72 34 UNTRUSTED_Relay 8412 3.58 10.74 1.07 35 XMSexyCombo_05 8105 5.20 10.34 3.40 36 RCVD_IN_RP_SAFE 7158 11.85 9.14 12.80 37 LotsOfNums_01 6697 6.61 8.55 5.93 38 XM_B_Phish_Phrases 6497 5.30 8.29 4.25 39 RCVD_IN_RP_RNBL 6469 2.19 8.26 0.06 40 T_XMDrugObfuBody_14 6113 4.66 7.80 3.55 41 TooManyTo_001 6061 4.99 7.74 4.03 42 RCVD_IN_RP_CERTIFIED 6017 10.18 7.68 11.05 43 XM_H_Long_From01 6003 4.66 7.66 3.61 44 FROM_EXCESS_BASE64 5676 4.56 7.24 3.62 45 FSL_BULK_SIG 5620 7.82 7.17 8.04 46 MPART_ALT_DIFF 5526 14.68 7.05 17.36 47 LOTS_OF_MONEY 5462 3.69 6.97 2.54 48 BAYES_80 5092 4.09 6.50 3.24 49 BAYES_60 4908 5.24 6.26 4.87 50 XMSubMetaSx_00 4811 3.61 6.14 2.72 51 TR_XM_DocInvoice 4801 3.30 6.13 2.30 52 RCVD_IN_MSPIKE_H2 4375 4.77 5.58 4.48 53 HTML_IMAGE_RATIO_06 3673 2.80 4.69 2.14 54 T_TooManySym_01 3449 3.73 4.40 3.50 55 MIME_HTML_MOSTLY 3444 2.88 4.40 2.35 56 XMNumbers 3231 3.94 4.12 3.87 57 XM_SendGrid 3223 3.44 4.11 3.20 58 XM_CamelCaseFrm001 3118 1.91 3.98 1.19 59 XM_DIRTYINTL 3098 1.69 3.95 0.89 60 BAYES_95 3069 2.76 3.92 2.35 61 XM_UB50 2922 1.43 3.73 0.63 62 HTML_IMAGE_RATIO_08 2709 1.75 3.46 1.15 63 MIME_HTML_ONLY_MULTI 2656 12.67 3.39 15.93 64 XM_H_Long_From02 2602 1.22 3.32 0.48 65 MultiRelay_Combo 2555 0.99 3.26 0.19 66 MultiRelay_CC 2555 0.99 3.26 0.19 67 DKIM_INVALID 2518 1.88 3.21 1.41 68 TM2_M_URI_OPT_OUT 2379 1.39 3.04 0.82 69 RCVD_IN_BL_SPAMCOP_NET 2368 0.94 3.02 0.21 70 XM_XX_Yahoo 2362 0.83 3.01 0.07 71 RELAYCOUNTRY_CA 2305 1.47 2.94 0.95 72 XMStrtUSub 2296 2.95 2.93 2.96 73 T_REMOTE_IMAGE 2263 1.83 2.89 1.46 74 URI_HEX 2230 1.45 2.85 0.96 75 MIME_QP_LONG_LINE 2194 2.44 2.80 2.32 76 T_MIXED_ES 2065 1.55 2.64 1.16 77 XM_OfRef6 2011 1.09 2.57 0.57 78 XM_SPF_SoftFail 1859 1.15 2.37 0.73 79 RELAYCOUNTRY_FR 1844 0.81 2.35 0.27 80 XMSubMetaI_00 1827 1.15 2.33 0.74 81 URIBL_BLACK 1795 0.62 2.29 0.03 82 BAYES_00 1721 13.33 2.20 17.24 83 XM_UB99 1701 0.57 2.17 0.01 84 XM_URI_RBL 1646 0.61 2.10 0.08 85 URIBL_DBL_SPAM 1631 0.55 2.08 0.01 86 HTML_MIME_NO_HTML_TAG 1628 1.26 2.08 0.98 87 XMBdyGiftCard01 1616 1.25 2.06 0.97 88 XMPhish30 1609 1.03 2.05 0.67 89 SpammyFromTLD_01 1595 0.76 2.04 0.31 90 TR_XM_DK_Bayes 1529 3.57 1.95 4.14 91 TR_XM_DK_Bayes1 1524 3.51 1.95 4.06 92 TR_XM_DK_Bayes2 1453 3.40 1.85 3.94 93 RELAYCOUNTRY_AT 1445 0.55 1.84 0.09 94 XM_ProductURIs 1430 1.49 1.83 1.37 95 XM_UB999 1401 0.47 1.79 0.01 96 SUBJ_ALL_CAPS 1368 0.83 1.75 0.50 97 XM_BadFromFormat 1319 0.57 1.68 0.18 98 XM_UB60 1310 0.46 1.67 0.04 99 T_XMDrugObfuBody_08 1232 0.82 1.57 0.56 100 SUBJ_DOLLARS 1231 0.54 1.57 0.18 101 XMSexyCombo_01 1193 0.54 1.52 0.20 102 XMStockSpam_06 1179 0.63 1.50 0.32 103 HTML_SHORT_LINK_IMG_1 1161 0.40 1.48 0.02 104 DIET_1 1159 0.49 1.48 0.14 105 TR_Mismatch_TLD_02 1157 0.41 1.48 0.03 106 XM_H_PHPOS 1151 1.92 1.47 2.07 107 BAYES_40 1135 1.62 1.45 1.68 108 XMBody_78 1134 0.69 1.45 0.42 109 TM2_M_VERY_LONG_WORD 1130 0.85 1.44 0.64 110 XM_B_COPY_HTML 1096 0.98 1.40 0.84 111 MAILING_LIST_MULTI 1088 1.10 1.39 0.99 112 T_TooManySym_02 1087 1.61 1.39 1.69 113 TR_XM_RelayPhish 1085 0.52 1.38 0.21 114 UNPARSEABLE_RELAY 1076 4.46 1.37 5.55 115 BOTNET_NORDNS 1047 0.35 1.34 0.01 116 XMHTMLBadTable_001 1044 0.77 1.33 0.58 117 XM_B_REG_HTML 1018 1.08 1.30 1.00 118 RDNS_DYNAMIC 1017 0.63 1.30 0.40 119 XMDiploma_00 1006 0.75 1.28 0.56 120 XMBody_17 998 0.49 1.27 0.22 121 RCVD_IN_IADB_LISTED 986 1.68 1.26 1.82 122 XM_DK_Undo_01 971 1.14 1.24 1.11 123 BODY_URI_ONLY 963 0.33 1.23 0.02 124 BAYES_20 954 1.46 1.22 1.55 125 TR_Symld_Words 949 3.02 1.21 3.65 126 XMPhish14 941 0.45 1.20 0.19 127 XM_HighProb1 925 0.32 1.18 0.01 128 LONG_JUNK_URI 925 0.36 1.18 0.07 129 FILL_THIS_FORM 924 0.46 1.18 0.21 130 ALL_TRUSTED 865 20.88 1.10 27.83 131 RCVD_IN_IADB_SPF 840 1.48 1.07 1.62 132 HTML_IMAGE_ONLY_08 839 0.37 1.07 0.13 133 HTML_FONT_SIZE_HUGE 821 0.38 1.05 0.15 134 T_Symld_Words_02 818 0.39 1.04 0.15 135 RCVD_IN_IADB_DK 808 1.34 1.03 1.45 136 RCVD_IN_IADB_SENDERID 804 1.35 1.03 1.46 137 BODY_ENHANCEMENT 797 0.27 1.02 0.01 138 T_XMDrugObfuBody_00 786 0.41 1.00 0.21 139 LONG_JUNK_URI3 769 0.34 0.98 0.11 140 RELAYCOUNTRY_GB 769 0.54 0.98 0.39 141 SpammyFromTLD_02 767 0.34 0.98 0.12 142 MPART_ALT_DIFF_COUNT 765 0.43 0.98 0.24 143 HTML_FONT_FACE_BAD 744 0.43 0.95 0.25 144 XM_H_PHPMailer 720 0.70 0.92 0.62 145 RELAYCOUNTRY_CN 715 0.29 0.91 0.07 146 NO_DNS_FOR_FROM 710 0.54 0.91 0.41 147 RCVD_IN_PSBL 699 0.42 0.89 0.26 148 T_FILL_THIS_FORM_SHORT 696 0.38 0.89 0.20 149 XMPhish11 694 0.76 0.89 0.72 150 T_XMDrugObfuBody_12 681 0.32 0.87 0.12 151 MONEY_BACK 674 0.24 0.86 0.02 152 RELAYCOUNTRY_DE 670 0.40 0.86 0.24 153 XM_RXBody 669 0.35 0.85 0.17 154 DKIM_ADSP_NXDOMAIN 666 0.50 0.85 0.38 155 FROM_LOCAL_HEX 659 0.26 0.84 0.05 156 T_XMHurry_00 653 0.48 0.83 0.35 157 XM_H_Long_From03 653 0.24 0.83 0.03 158 XM_OfRef7 644 0.25 0.82 0.04 159 XMSubMetaSSx_00 640 0.28 0.82 0.09 160 FROM_LOCAL_DIGITS 639 0.23 0.82 0.03 161 XMLongAddy 635 0.23 0.81 0.02 162 RELAYCOUNTRY_JP 624 0.23 0.80 0.03 163 XM_H_Undi_Recip 614 0.33 0.78 0.17 164 HTML_IMAGE_ONLY_32 606 0.33 0.77 0.17 165 T_HTML_TAG_BALANCE_CENTER 602 0.29 0.77 0.13 166 XM_UB80 601 0.21 0.77 0.02 167 FILL_THIS_FORM_LONG 599 0.31 0.76 0.16 168 BAYES_05 599 0.73 0.76 0.72 169 RCVD_IN_MSPIKE_WL 596 1.26 0.76 1.44 170 RCVD_IN_MSPIKE_H3 596 1.26 0.76 1.44 171 FILL_THIS_FORM_LOAN 585 0.32 0.75 0.17 172 XMMoneyMeta_00 576 0.27 0.74 0.11 173 XMSubNoVowel 567 3.26 0.72 4.15 174 TooManyTo_002 562 0.84 0.72 0.89 175 XMBrknScrpt_02 543 0.56 0.69 0.51 176 XM_H_PHPOS_M 539 0.50 0.69 0.44 177 FSL_THIS_IS_ADV 525 0.26 0.67 0.12 178 LongTLD 516 0.25 0.66 0.11 179 RCVD_IN_IADB_VOUCHED 511 1.21 0.65 1.40 180 TooManyTo_003 507 0.61 0.65 0.60 181 FORGED_MUA_OUTLOOK 505 0.20 0.64 0.04 182 DKIM_ADSP_CUSTOM_MED 504 0.69 0.64 0.70 183 DATE_IN_PAST_03_06 500 0.22 0.64 0.07 184 XMCmmnCold 498 0.18 0.64 0.02 185 XMHTML_After_End 498 0.29 0.64 0.16 186 HDRS_LCASE_IMGONLY 491 0.18 0.63 0.02 187 XMSubMetaI_01 487 0.20 0.62 0.05 188 RELAYCOUNTRY_NG 480 0.16 0.61 0.00 189 URI_TRY_3LD 473 0.46 0.60 0.41 190 MSOE_MID_WRONG_CASE 472 0.16 0.60 0.01 191 DATE_IN_FUTURE_06_12 471 0.16 0.60 0.01 192 XMSexyCombo_04 471 0.19 0.60 0.04 193 T_MONEY_PERCENT 465 0.20 0.59 0.07 194 XM_Body_Obfu01 465 0.30 0.59 0.19 195 TR_LOTS_OF_MONEY2 465 0.20 0.59 0.07 196 RELAYCOUNTRY_AL 457 0.15 0.58 0.00 197 XM_GoogleGroups 449 0.76 0.57 0.82 198 BOUNCE_MESSAGE 445 12.20 0.57 16.28 199 HTML_IMAGE_ONLY_24 445 0.27 0.57 0.17 200 ANY_BOUNCE_MESSAGE 445 12.20 0.57 16.28 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 160754 78.06 95.24 72.02 2 DCC_CHECK_NEGATIVE 140586 50.85 16.26 62.99 3 DKIM_SIGNED 119141 61.09 83.04 53.38 4 XM_DK_Pass 118100 60.20 80.97 52.91 5 DKIM_VALID 115993 59.21 79.82 51.97 6 BAYES_50 114395 45.15 27.78 51.25 7 DKIM_VALID_AU 96444 49.19 66.22 43.21 8 XM_H_QuotedFrom 89918 42.62 49.26 40.29 9 XMListUnsubscribeExists 83454 48.21 79.01 37.39 10 DCC_CHECK 80347 47.94 81.96 36.00 11 MIME_HTML_ONLY 69623 30.80 29.68 31.19 12 ALL_TRUSTED 62107 20.88 1.10 27.83 13 HTML_FONT_LOW_CONTRAST 51663 25.95 33.92 23.15 14 XMSubLong 43791 20.83 24.27 19.62 15 LOC_TINY_FONT_1 43653 23.06 33.04 19.56 16 DKIM_VALID_EF 42414 18.03 15.26 19.00 17 IN_ZIMBRA_NJ_WHITELIST 41988 13.94 0.05 18.81 18 XM_DK_Undo_02 39032 27.11 54.51 17.49 19 MPART_ALT_DIFF 38751 14.68 7.05 17.36 20 BAYES_00 38473 13.33 2.20 17.24 21 BAYES_99 38163 25.62 49.91 17.10 22 T_TM2_M_HEADER_IN_MSG 36980 16.68 16.99 16.57 23 ANY_BOUNCE_MESSAGE 36330 12.20 0.57 16.28 24 BOUNCE_MESSAGE 36329 12.20 0.57 16.28 25 MIME_HTML_ONLY_MULTI 35564 12.67 3.39 15.93 26 FVGT_m_MULTI_ODD 34833 18.89 28.23 15.61 27 BAYES_999 34554 22.89 43.99 15.48 28 XM_DKIMWhitelistDomains 32014 10.63 0.07 14.34 29 RCVD_IN_RP_SAFE 28576 11.85 9.14 12.80 30 RCVD_IN_RP_CERTIFIED 24666 10.18 7.68 11.05 31 TR_DCC_Bayes_99 20193 17.40 41.18 9.05 32 MultiRelay 19968 10.67 15.58 8.95 33 XM_Multi_Part_URI 19637 10.61 15.75 8.80 34 FSL_BULK_SIG 17954 7.82 7.17 8.04 35 XM_Body_Dirty_Words 17939 11.03 19.55 8.04 36 T_KAM_HTML_FONT_INVALID 15965 8.49 12.31 7.15 37 HTML_IMAGE_RATIO_02 14977 10.26 20.37 6.71 38 BOTNET_IPINHOSTNAME 13802 9.73 19.82 6.18 39 XM_Evil_Numbers_Gen 13407 7.69 12.50 6.01 40 LotsOfNums_01 13228 6.61 8.55 5.93 41 UNPARSEABLE_RELAY 12379 4.46 1.37 5.55 42 BAYES_60 10878 5.24 6.26 4.87 43 RCVD_IN_MSPIKE_H2 10002 4.77 5.58 4.48 44 XM_B_Phish_Phrases 9476 5.30 8.29 4.25 45 XMSubNoVowel 9264 3.26 0.72 4.15 46 TR_XM_DK_Bayes 9244 3.57 1.95 4.14 47 TR_XM_DK_Bayes1 9053 3.51 1.95 4.06 48 TooManyTo_001 8992 4.99 7.74 4.03 49 TR_XM_DK_Bayes2 8790 3.40 1.85 3.94 50 XM_UncommonTLD01 8727 6.15 12.55 3.91 51 XMNumbers 8642 3.94 4.12 3.87 52 XMSubLongNoVowel 8622 2.88 0.10 3.86 53 UPPERCASE_50_75 8445 2.84 0.14 3.78 54 HTML_IMAGE_RATIO_04 8299 5.55 10.75 3.72 55 TR_Symld_Words 8149 3.02 1.21 3.65 56 FROM_EXCESS_BASE64 8086 4.56 7.24 3.62 57 XM_H_Long_From01 8064 4.66 7.66 3.61 58 T_XMDrugObfuBody_14 7932 4.66 7.80 3.55 59 TVD_RCVD_IP 7910 2.72 0.39 3.54 60 T_TooManySym_01 7805 3.73 4.40 3.50 61 XMSexyCombo_05 7585 5.20 10.34 3.40 62 BAYES_80 7239 4.09 6.50 3.24 63 XM_SendGrid 7146 3.44 4.11 3.20 64 URIBL_RHS_DOB 6935 6.05 14.43 3.11 65 XMStrtUSub 6607 2.95 2.93 2.96 66 RELAYCOUNTRY_META 6568 6.49 16.59 2.94 67 INVALID_MSGID 6502 2.23 0.28 2.91 68 TO_MALFORMED 6334 2.11 0.04 2.84 69 XMSubMetaSx_00 6064 3.61 6.14 2.72 70 LOTS_OF_MONEY 5661 3.69 6.97 2.54 71 MIME_HTML_MOSTLY 5255 2.88 4.40 2.35 72 BAYES_95 5254 2.76 3.92 2.35 73 MIME_QP_LONG_LINE 5176 2.44 2.80 2.32 74 TR_XM_DocInvoice 5135 3.30 6.13 2.30 75 HTML_IMAGE_RATIO_06 4766 2.80 4.69 2.14 76 XM_H_PHPOS 4631 1.92 1.47 2.07 77 IN_HORDE_ADDRESS_BOOK 4260 1.44 0.11 1.91 78 RCVD_IN_IADB_LISTED 4065 1.68 1.26 1.82 79 T_TooManySym_02 3771 1.61 1.39 1.69 80 BAYES_40 3740 1.62 1.45 1.68 81 RCVD_IN_IADB_SPF 3614 1.48 1.07 1.62 82 XM_E_Blogspot 3598 1.21 0.08 1.61 83 BAYES_20 3451 1.46 1.22 1.55 84 T_REMOTE_IMAGE 3269 1.83 2.89 1.46 85 RCVD_IN_IADB_SENDERID 3264 1.35 1.03 1.46 86 RCVD_IN_IADB_DK 3226 1.34 1.03 1.45 87 RCVD_IN_MSPIKE_H3 3217 1.26 0.76 1.44 88 RCVD_IN_MSPIKE_WL 3217 1.26 0.76 1.44 89 DKIM_INVALID 3148 1.88 3.21 1.41 90 RCVD_IN_IADB_VOUCHED 3127 1.21 0.65 1.40 91 USER_IN_DEF_DKIM_WL 3081 1.02 0.00 1.38 92 XM_ProductURIs 3050 1.49 1.83 1.37 93 XM_CamelCaseFrm001 2648 1.91 3.98 1.19 94 T_MIXED_ES 2597 1.55 2.64 1.16 95 USER_IN_WHITELIST 2578 0.85 0.00 1.16 96 HTML_IMAGE_RATIO_08 2559 1.75 3.46 1.15 97 XM_DK_Undo_01 2476 1.14 1.24 1.11 98 UNTRUSTED_Relay 2393 3.58 10.74 1.07 99 XMSubMetaSxObfu_02 2392 0.86 0.27 1.07 100 T_TooManySym_03 2301 0.80 0.15 1.03 101 XM_B_REG_HTML 2238 1.08 1.30 1.00 102 MAILING_LIST_MULTI 2220 1.10 1.39 0.99 103 HTML_MIME_NO_HTML_TAG 2184 1.26 2.08 0.98 104 XMBdyGiftCard01 2164 1.25 2.06 0.97 105 TO_NO_BRKTS_HTML_ONLY 2155 0.75 0.14 0.97 106 URI_HEX 2143 1.45 2.85 0.96 107 RELAYCOUNTRY_CA 2121 1.47 2.94 0.95 108 BOTNET 1993 5.45 18.42 0.89 109 XM_DIRTYINTL 1993 1.69 3.95 0.89 110 TooManyTo_002 1978 0.84 0.72 0.89 111 XM_B_COPY_HTML 1865 0.98 1.40 0.84 112 XM_GoogleGroups 1835 0.76 0.57 0.82 113 TM2_M_URI_OPT_OUT 1822 1.39 3.04 0.82 114 XMBody_95 1651 0.59 0.16 0.74 115 XMSubMetaI_00 1649 1.15 2.33 0.74 116 XM_SPF_SoftFail 1621 1.15 2.37 0.73 117 XM_PDF 1617 0.61 0.29 0.72 118 XMPhish11 1611 0.76 0.89 0.72 119 BAYES_05 1603 0.73 0.76 0.72 120 DKIM_ADSP_CUSTOM_MED 1563 0.69 0.64 0.70 121 T_TooManySym_04 1504 0.50 0.02 0.67 122 XMPhish30 1494 1.03 2.05 0.67 123 TM2_M_VERY_LONG_WORD 1425 0.85 1.44 0.64 124 XM_UB50 1401 1.43 3.73 0.63 125 XM_H_PHPMailer 1390 0.70 0.92 0.62 126 TooManyTo_003 1345 0.61 0.65 0.60 127 XMHTMLBadTable_001 1284 0.77 1.33 0.58 128 XM_OfRef6 1277 1.09 2.57 0.57 129 XMDiploma_00 1259 0.75 1.28 0.56 130 NML_ADSP_CUSTOM_MED 1258 0.56 0.54 0.56 131 T_XMDrugObfuBody_08 1253 0.82 1.57 0.56 132 TR_MetaPhish_Combo_01 1240 0.53 0.46 0.56 133 RCVD_IN_IADB_OPTIN 1166 0.46 0.27 0.52 134 XMBrknScrpt_02 1145 0.56 0.69 0.51 135 SUBJ_ALL_CAPS 1127 0.83 1.75 0.50 136 XM_H_Long_From02 1070 1.22 3.32 0.48 137 TooManyTo_004 1022 0.47 0.52 0.46 138 XM_H_PHPOS_M 974 0.50 0.69 0.44 139 XMBody_78 941 0.69 1.45 0.42 140 URI_TRY_3LD 925 0.46 0.60 0.41 141 NO_DNS_FOR_FROM 904 0.54 0.91 0.41 142 RDNS_DYNAMIC 894 0.63 1.30 0.40 143 XMLngstWrd_00 877 0.36 0.26 0.39 144 TooManyTo_005 875 0.41 0.48 0.39 145 RELAYCOUNTRY_GB 870 0.54 0.98 0.39 146 DKIM_ADSP_NXDOMAIN 845 0.50 0.85 0.38 147 XM_Walgreens_Forge 818 0.27 0.01 0.37 148 XMLngstWrd_01 811 0.33 0.24 0.36 149 XM_B_TRADE_HTML 789 0.36 0.37 0.35 150 T_XMHurry_00 780 0.48 0.83 0.35 151 REMOVE_BEFORE_LINK 735 0.38 0.53 0.33 152 XMStockSpam_06 724 0.63 1.50 0.32 153 XMRcvdHeader_15 722 0.24 0.00 0.32 154 XMLngstWrd_02 716 0.29 0.21 0.32 155 XM_ShortIntro_01 712 0.32 0.34 0.32 156 SpammyFromTLD_01 686 0.76 2.04 0.31 157 XM_H_SpoofStaff4 685 0.26 0.14 0.31 158 XMGenDplmaNmb 656 0.34 0.46 0.29 159 XMLngstWrd_03 647 0.25 0.15 0.29 160 XMSUPPORT 626 0.21 0.00 0.28 161 HTML_TAG_BALANCE_BODY 610 0.33 0.49 0.27 162 XMLngstWrd_04 604 0.22 0.09 0.27 163 XMNoVowels 604 0.25 0.21 0.27 164 RELAYCOUNTRY_FR 597 0.81 2.35 0.27 165 TVD_SPACE_RATIO 597 0.29 0.34 0.27 166 URI_NOVOWEL 596 0.34 0.55 0.27 167 RCVD_IN_PSBL 581 0.42 0.89 0.26 168 HELO_NODOT 576 0.23 0.13 0.26 169 HTML_FONT_FACE_BAD 564 0.43 0.95 0.25 170 TR_MetaPhish_Combo_01b 550 0.20 0.08 0.25 171 RELAYCOUNTRY_DE 533 0.40 0.86 0.24 172 MPART_ALT_DIFF_COUNT 532 0.43 0.98 0.24 173 XMGappySubj_01 494 0.25 0.32 0.22 174 XM_RedBox 486 0.16 0.01 0.22 175 XMCapTrack 483 0.26 0.39 0.22 176 XMBody_17 481 0.49 1.27 0.22 177 TR_XM_RelayPhish 478 0.52 1.38 0.21 178 RCVD_IN_BL_SPAMCOP_NET 470 0.94 3.02 0.21 179 FILL_THIS_FORM 465 0.46 1.18 0.21 180 T_XMDrugObfuBody_00 461 0.41 1.00 0.21 181 T_TooManySym_05 461 0.16 0.01 0.21 182 T_FILL_THIS_FORM_SHORT 447 0.38 0.89 0.20 183 XMSubEmpty 445 0.24 0.35 0.20 184 TM2_M_BODY_EMPTY 440 0.24 0.38 0.20 185 FORGED_GMAIL_RCVD 439 0.26 0.46 0.20 186 XMSexyCombo_01 436 0.54 1.52 0.20 187 XM_Body_Obfu01 434 0.30 0.59 0.19 188 MultiRelay_CC 433 0.99 3.26 0.19 189 MultiRelay_Combo 433 0.99 3.26 0.19 190 HTML_IMAGE_ONLY_28 429 0.22 0.29 0.19 191 MISSING_HEADERS 424 0.23 0.33 0.19 192 XMPhish14 414 0.45 1.20 0.19 193 MSGID_FROM_MTA_HEADER 410 0.21 0.30 0.18 194 XM_BadFromFormat 406 0.57 1.68 0.18 195 SUBJ_DOLLARS 395 0.54 1.57 0.18 196 HTML_IMAGE_ONLY_32 386 0.33 0.77 0.17 197 HTML_IMAGE_ONLY_24 380 0.27 0.57 0.17 198 XM_RXBody 379 0.35 0.85 0.17 199 XM_S_JOY_D 379 0.20 0.30 0.17 200 RCVD_IN_IADB_DOPTIN 376 0.13 0.03 0.17 ----------------------------------------------------------------------