Email: 451902 Autolearn: 0 AvgScore: 2.87 AvgScanTime: 1.76 sec Spam: 132175 Autolearn: 0 AvgScore: 12.25 AvgScanTime: 2.11 sec Ham: 319727 Autolearn: 0 AvgScore: -1.01 AvgScanTime: 1.62 sec Time Spent Running SA: 221.15 hours Time Spent Processing Spam: 77.64 hours Time Spent Processing Ham: 143.52 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 123888 78.36 93.73 72.00 2 DKIM_SIGNED 115040 70.30 87.04 63.38 3 XM_DK_Pass 111653 68.71 84.47 62.19 4 DKIM_VALID 110670 67.45 83.73 60.72 5 DCC_CHECK 104592 46.73 79.13 33.34 6 XMListUnsubscribeExists 103327 52.54 78.17 41.94 7 DKIM_VALID_AU 83838 50.39 63.43 45.00 8 XM_H_QuotedFrom 72596 39.57 54.92 33.23 9 XM_DK_Undo_02 70427 25.46 53.28 13.96 10 BAYES_99 64275 23.61 48.63 13.27 11 BAYES_999 55699 20.67 42.14 11.79 12 TR_DCC_Bayes_99 50006 15.35 37.83 6.05 13 HTML_FONT_LOW_CONTRAST 48495 27.02 36.69 23.02 14 LOC_TINY_FONT_1 48331 23.99 36.57 18.79 15 BAYES_50 39654 52.00 30.00 61.09 16 FVGT_m_MULTI_ODD 39454 22.02 29.85 18.78 17 MIME_HTML_ONLY 33419 18.66 25.28 15.93 18 XMSubLong 32542 20.06 24.62 18.17 19 T_TM2_M_HEADER_IN_MSG 27046 24.59 20.46 26.29 20 DCC_CHECK_NEGATIVE 25120 51.55 19.01 65.01 21 DKIM_VALID_EF 23866 21.13 18.06 22.40 22 XM_Body_Dirty_Words 22493 10.79 17.02 8.21 23 T_KAM_HTML_FONT_INVALID 21197 11.77 16.04 10.00 24 HTML_IMAGE_RATIO_02 21168 9.22 16.02 6.41 25 XM_Multi_Part_URI 20700 11.53 15.66 9.82 26 RELAYCOUNTRY_META 18525 7.60 14.02 4.95 27 LOTS_OF_MONEY 18463 9.14 13.97 7.14 28 XM_Evil_Numbers_Gen 17758 9.04 13.44 7.23 29 MultiRelay 17335 13.99 13.12 14.34 30 BOTNET 17303 4.43 13.09 0.84 31 BOTNET_IPINHOSTNAME 17149 7.46 12.97 5.18 32 T_XMDrugObfuBody_14 12992 6.71 9.83 5.42 33 XM_B_Phish_Phrases 12710 5.44 9.62 3.72 34 LotsOfNums_01 12520 7.90 9.47 7.25 35 HTML_IMAGE_RATIO_04 12115 5.31 9.17 3.71 36 UNTRUSTED_Relay 10737 3.74 8.12 1.92 37 XMSexyCombo_05 10649 4.24 8.06 2.66 38 RCVD_IN_RP_SAFE 10292 8.50 7.79 8.79 39 XM_H_Long_From01 10089 5.54 7.63 4.68 40 TooManyTo_001 9610 7.00 7.27 6.89 41 BAYES_80 9404 4.95 7.11 4.06 42 RCVD_IN_RP_CERTIFIED 8899 7.49 6.73 7.80 43 XM_UncommonTLD01 8504 4.36 6.43 3.50 44 XMSubMetaSx_00 8385 4.35 6.34 3.53 45 MPART_ALT_DIFF 8320 3.46 6.29 2.29 46 FSL_BULK_SIG 8212 5.97 6.21 5.87 47 BAYES_60 7779 6.59 5.89 6.88 48 TR_XM_DocInvoice 7752 4.00 5.86 3.23 49 FROM_EXCESS_BASE64 7255 3.45 5.49 2.61 50 XMStrtUSub 7171 4.19 5.43 3.68 51 TR_LOTS_OF_MONEY3 6579 2.43 4.98 1.38 52 RCVD_IN_MSPIKE_H2 6205 4.58 4.69 4.54 53 TM2_M_URI_OPT_OUT 6094 2.62 4.61 1.80 54 MIME_HTML_MOSTLY 5788 2.76 4.38 2.10 55 BAYES_95 5786 3.16 4.38 2.65 56 XMNumbers 5640 4.72 4.27 4.91 57 MIME_QP_LONG_LINE 5427 4.29 4.11 4.37 58 HTML_IMAGE_RATIO_06 5416 2.74 4.10 2.18 59 XM_SendGrid 5234 4.47 3.96 4.68 60 RELAYCOUNTRY_CA 5123 2.20 3.88 1.51 61 URI_HEX 4945 1.73 3.74 0.90 62 ALL_TRUSTED 4710 21.67 3.56 29.15 63 BOTNET_NORDNS 4656 1.04 3.52 0.02 64 XM_DIRTYINTL 4464 1.88 3.38 1.27 65 XM_OfRef6 4464 1.96 3.38 1.38 66 HTML_IMAGE_RATIO_08 4381 2.07 3.31 1.56 67 DKIM_INVALID 4370 2.85 3.31 2.65 68 SUBJ_ALL_CAPS 4343 2.07 3.29 1.56 69 T_XMHurry_00 4237 1.67 3.21 1.03 70 XM_CamelCaseFrm001 4159 2.01 3.15 1.55 71 XM_XX_Yahoo 4157 1.03 3.15 0.16 72 MIME_HTML_ONLY_MULTI 4126 1.49 3.12 0.82 73 XM_SPF_SoftFail 4087 2.10 3.09 1.68 74 T_TooManySym_01 3974 3.59 3.01 3.84 75 XM_UB50 3618 1.82 2.74 1.45 76 RCVD_IN_BL_SPAMCOP_NET 3487 1.25 2.64 0.68 77 T_REMOTE_IMAGE 3352 2.59 2.54 2.62 78 XMSubMetaI_00 3302 1.22 2.50 0.69 79 XM_URI_RBL 2968 0.74 2.25 0.12 80 XM_UB99 2730 0.61 2.07 0.01 81 T_XMDrugObfuBody_08 2717 1.43 2.06 1.17 82 MultiRelay_Combo 2684 0.70 2.03 0.16 83 MultiRelay_CC 2684 0.70 2.03 0.16 84 RELAYCOUNTRY_FR 2628 0.84 1.99 0.37 85 RCVD_IN_IADB_LISTED 2538 3.06 1.92 3.54 86 MAILING_LIST_MULTI 2499 1.69 1.89 1.61 87 XMDiploma_00 2483 1.43 1.88 1.24 88 T_MIXED_ES 2479 1.12 1.88 0.81 89 XMBody_17 2412 0.81 1.82 0.39 90 URI_WP_HACKED_2 2351 1.18 1.78 0.93 91 HTML_MIME_NO_HTML_TAG 2329 2.48 1.76 2.78 92 XM_ProductURIs 2306 1.13 1.74 0.87 93 RCVD_IN_IADB_SPF 2301 2.72 1.74 3.13 94 XM_DK_Undo_01 2233 1.57 1.69 1.52 95 SUSPICIOUS_RECIPS 2222 0.83 1.68 0.48 96 RCVD_IN_IADB_SENDERID 2212 2.48 1.67 2.82 97 RCVD_IN_IADB_DK 2181 2.43 1.65 2.75 98 DKIM_ADSP_CUSTOM_MED 2166 1.06 1.64 0.81 99 XMPhish30 2129 0.72 1.61 0.35 100 TR_XM_RelayPhish 2069 0.72 1.57 0.37 101 XM_UB999 2045 0.46 1.55 0.00 102 XMSubMetaD_03 2002 0.96 1.51 0.73 103 DIET_1 1978 0.83 1.50 0.56 104 TM2_M_VERY_LONG_WORD 1951 0.92 1.48 0.70 105 XMBdyGiftCard01 1940 0.84 1.47 0.58 106 SpammyFromTLD_02 1934 0.51 1.46 0.12 107 URIBL_BLACK 1909 0.45 1.44 0.04 108 XM_B_COPY_HTML 1892 0.87 1.43 0.63 109 XMSexyCombo_01 1885 0.60 1.43 0.26 110 XM_H_Long_From02 1882 1.06 1.42 0.91 111 NML_ADSP_CUSTOM_MED 1872 0.84 1.42 0.61 112 BAYES_00 1842 4.61 1.39 5.94 113 TR_Caps_n_Bayes_99 1824 0.43 1.38 0.04 114 HTML_FONT_FACE_BAD 1821 0.74 1.38 0.48 115 XMStockSpam_06 1816 1.31 1.37 1.28 116 LONG_JUNK_URI 1777 0.48 1.34 0.12 117 RELAYCOUNTRY_AT 1772 0.47 1.34 0.11 118 XM_RXBody 1742 0.56 1.32 0.25 119 XM_S_JOY_D 1714 0.78 1.30 0.56 120 IMPOTENCE 1699 0.94 1.29 0.80 121 FORGED_GMAIL_RCVD 1699 0.62 1.29 0.34 122 XM_B_REG_HTML 1678 0.79 1.27 0.59 123 SpammyFromTLD_01 1637 0.86 1.24 0.70 124 REMOVE_BEFORE_LINK 1611 0.55 1.22 0.27 125 XMGenDplmaNmb 1552 0.78 1.17 0.61 126 XMHTML_After_End 1539 0.54 1.16 0.28 127 XM_HighProb1 1535 0.35 1.16 0.02 128 TR_XM_DK_Bayes 1532 3.04 1.16 3.82 129 XMPhish14 1526 0.54 1.15 0.28 130 TR_XM_DK_Bayes1 1524 2.94 1.15 3.67 131 BAYES_40 1507 2.31 1.14 2.79 132 RCVD_IN_IADB_VOUCHED 1477 2.37 1.12 2.89 133 TR_XM_DK_Bayes2 1411 2.60 1.07 3.23 134 URIBL_DBL_SPAM 1402 0.32 1.06 0.01 135 XMBody_78 1396 0.75 1.06 0.62 136 RDNS_DYNAMIC 1365 0.58 1.03 0.39 137 T_TooManySym_02 1363 1.34 1.03 1.47 138 XMSlimDrugH 1351 0.59 1.02 0.42 139 T_XMDrugObfuBody_00 1342 0.54 1.02 0.34 140 T_MONEY_PERCENT 1320 0.38 1.00 0.13 141 TR_LOTS_OF_MONEY2 1320 0.38 1.00 0.13 142 URI_TRY_3LD 1285 0.69 0.97 0.58 143 SORTED_RECIPS 1283 0.37 0.97 0.12 144 TR_Mismatch_TLD_01 1273 0.36 0.96 0.11 145 RCVD_IN_RP_RNBL 1262 0.29 0.95 0.02 146 XM_H_PHPOS 1253 1.26 0.95 1.39 147 UNPARSEABLE_RELAY 1247 3.57 0.94 4.65 148 URI_NOVOWEL 1242 0.48 0.94 0.28 149 BAYES_20 1239 1.69 0.94 2.00 150 XMPhish11 1215 0.88 0.92 0.86 151 ANY_BOUNCE_MESSAGE 1190 10.25 0.90 14.11 152 BOUNCE_MESSAGE 1189 10.25 0.90 14.11 153 XM_Body_Obfu01 1175 0.51 0.89 0.35 154 XM_UB80 1136 0.26 0.86 0.01 155 RELAYCOUNTRY_JP 1127 0.27 0.85 0.03 156 RCVD_IN_PSBL 1114 0.35 0.84 0.14 157 TR_Symld_Words 1114 2.65 0.84 3.40 158 LOW_PRICE 1108 0.40 0.84 0.21 159 XMSubMetaSSx_00 1104 0.46 0.84 0.31 160 TR_Sbj_FN_Bdy 1102 0.35 0.83 0.15 161 SUBJ_DOLLARS 1087 0.34 0.82 0.14 162 XMHTMLBadTable_001 1084 0.47 0.82 0.32 163 XM_UB60 1071 0.27 0.81 0.04 164 GAPPY_SUBJECT 1065 0.30 0.81 0.10 165 FILL_THIS_FORM 1032 0.48 0.78 0.36 166 RELAYCOUNTRY_GB 1004 0.74 0.76 0.73 167 XMClaimOffer 993 0.32 0.75 0.15 168 XM_H_PHPMailer 980 0.71 0.74 0.70 169 XMSubMetaI_01 974 0.28 0.74 0.09 170 XMBSHREFv2 946 0.26 0.72 0.08 171 PLING_QUERY 941 0.32 0.71 0.16 172 XMSubMetaSx_01 934 0.35 0.71 0.20 173 ONLINE_PHARMACY 927 0.55 0.70 0.48 174 HTML_TAG_BALANCE_BODY 900 0.41 0.68 0.29 175 RELAYCOUNTRY_CI 891 0.20 0.67 0.00 176 XMBrknScrpt_02 886 0.54 0.67 0.48 177 BODY_ENHANCEMENT 886 0.23 0.67 0.04 178 RELAYCOUNTRY_CN 881 0.21 0.67 0.03 179 XMGppyBdWords 872 0.29 0.66 0.14 180 DEAR_FRIEND 869 0.28 0.66 0.12 181 XMSubMetaSxObfu_03 842 0.42 0.64 0.33 182 T_Symld_Words_02 837 0.33 0.63 0.21 183 XM_UB95 830 0.19 0.63 0.01 184 XMSlimDrugs 822 0.29 0.62 0.15 185 XM_BadFromFormat 814 0.51 0.62 0.46 186 TR_MetaPhish_Combo_01 800 1.11 0.61 1.32 187 XM_PDF 792 2.67 0.60 3.53 188 TooManyTo_002 787 1.66 0.60 2.09 189 XM_GoogleGroups 769 0.79 0.58 0.88 190 T_FILL_THIS_FORM_SHORT 769 0.51 0.58 0.49 191 BODY_URI_ONLY 764 0.19 0.58 0.03 192 DKIM_ADSP_NXDOMAIN 756 0.42 0.57 0.36 193 HTML_IMAGE_ONLY_08 756 0.26 0.57 0.13 194 RELAYCOUNTRY_AU 751 0.43 0.57 0.38 195 ADVANCE_FEE_5_NEW_MONEY 748 0.17 0.57 0.00 196 TM2_M_A_HREF_HREF 740 0.28 0.56 0.16 197 FSL_THIS_IS_ADV 740 0.20 0.56 0.05 198 XMSexyCombo_04 728 0.22 0.55 0.08 199 TVD_VISIT_PHARMA 713 0.33 0.54 0.24 200 RELAYCOUNTRY_DE 709 1.01 0.54 1.21 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 230206 78.36 93.73 72.00 2 DCC_CHECK_NEGATIVE 207857 51.55 19.01 65.01 3 DKIM_SIGNED 202638 70.30 87.04 63.38 4 XM_DK_Pass 198850 68.71 84.47 62.19 5 BAYES_50 195318 52.00 30.00 61.09 6 DKIM_VALID 194151 67.45 83.73 60.72 7 DKIM_VALID_AU 143881 50.39 63.43 45.00 8 XMListUnsubscribeExists 134093 52.54 78.17 41.94 9 DCC_CHECK 106588 46.73 79.13 33.34 10 XM_H_QuotedFrom 106232 39.57 54.92 33.23 11 ALL_TRUSTED 93205 21.67 3.56 29.15 12 T_TM2_M_HEADER_IN_MSG 84072 24.59 20.46 26.29 13 HTML_FONT_LOW_CONTRAST 73599 27.02 36.69 23.02 14 DKIM_VALID_EF 71630 21.13 18.06 22.40 15 LOC_TINY_FONT_1 60062 23.99 36.57 18.79 16 FVGT_m_MULTI_ODD 60045 22.02 29.85 18.78 17 XMSubLong 58103 20.06 24.62 18.17 18 MIME_HTML_ONLY 50922 18.66 25.28 15.93 19 MultiRelay 45864 13.99 13.12 14.34 20 ANY_BOUNCE_MESSAGE 45114 10.25 0.90 14.11 21 BOUNCE_MESSAGE 45114 10.25 0.90 14.11 22 XM_DK_Undo_02 44628 25.46 53.28 13.96 23 BAYES_99 42414 23.61 48.63 13.27 24 BAYES_999 37688 20.67 42.14 11.79 25 XM_DKIMWhitelistDomains 34479 7.67 0.13 10.78 26 T_KAM_HTML_FONT_INVALID 31977 11.77 16.04 10.00 27 XM_Multi_Part_URI 31413 11.53 15.66 9.82 28 RCVD_IN_RP_SAFE 28107 8.50 7.79 8.79 29 XM_Body_Dirty_Words 26265 10.79 17.02 8.21 30 RCVD_IN_RP_CERTIFIED 24937 7.49 6.73 7.80 31 LotsOfNums_01 23196 7.90 9.47 7.25 32 XM_Evil_Numbers_Gen 23114 9.04 13.44 7.23 33 LOTS_OF_MONEY 22834 9.14 13.97 7.14 34 TooManyTo_001 22034 7.00 7.27 6.89 35 BAYES_60 21992 6.59 5.89 6.88 36 HTML_IMAGE_RATIO_02 20480 9.22 16.02 6.41 37 TR_DCC_Bayes_99 19352 15.35 37.83 6.05 38 BAYES_00 18978 4.61 1.39 5.94 39 FSL_BULK_SIG 18764 5.97 6.21 5.87 40 T_XMDrugObfuBody_14 17342 6.71 9.83 5.42 41 IN_ZIMBRA_NJ_WHITELIST 16849 3.74 0.03 5.27 42 BOTNET_IPINHOSTNAME 16563 7.46 12.97 5.18 43 RELAYCOUNTRY_META 15842 7.60 14.02 4.95 44 XMNumbers 15696 4.72 4.27 4.91 45 XM_SendGrid 14966 4.47 3.96 4.68 46 XM_H_Long_From01 14955 5.54 7.63 4.68 47 UNPARSEABLE_RELAY 14879 3.57 0.94 4.65 48 RCVD_IN_MSPIKE_H2 14512 4.58 4.69 4.54 49 MIME_QP_LONG_LINE 13967 4.29 4.11 4.37 50 BAYES_80 12972 4.95 7.11 4.06 51 T_TooManySym_01 12271 3.59 3.01 3.84 52 TR_XM_DK_Bayes 12210 3.04 1.16 3.82 53 XM_B_Phish_Phrases 11879 5.44 9.62 3.72 54 HTML_IMAGE_RATIO_04 11875 5.31 9.17 3.71 55 XMStrtUSub 11758 4.19 5.43 3.68 56 TR_XM_DK_Bayes1 11748 2.94 1.15 3.67 57 RCVD_IN_IADB_LISTED 11311 3.06 1.92 3.54 58 XMSubMetaSx_00 11291 4.35 6.34 3.53 59 XM_PDF 11284 2.67 0.60 3.53 60 XM_UncommonTLD01 11202 4.36 6.43 3.50 61 TR_Symld_Words 10867 2.65 0.84 3.40 62 TR_XM_DocInvoice 10336 4.00 5.86 3.23 63 TR_XM_DK_Bayes2 10317 2.60 1.07 3.23 64 TVD_RCVD_IP 10118 2.29 0.18 3.16 65 RCVD_IN_IADB_SPF 9997 2.72 1.74 3.13 66 RCVD_IN_IADB_VOUCHED 9252 2.37 1.12 2.89 67 RCVD_IN_IADB_SENDERID 9014 2.48 1.67 2.82 68 BAYES_40 8926 2.31 1.14 2.79 69 HTML_MIME_NO_HTML_TAG 8884 2.48 1.76 2.78 70 RCVD_IN_IADB_DK 8780 2.43 1.65 2.75 71 XMSexyCombo_05 8494 4.24 8.06 2.66 72 BAYES_95 8488 3.16 4.38 2.65 73 DKIM_INVALID 8487 2.85 3.31 2.65 74 T_REMOTE_IMAGE 8365 2.59 2.54 2.62 75 FROM_EXCESS_BASE64 8358 3.45 5.49 2.61 76 IN_HORDE_ADDRESS_BOOK 7380 1.65 0.07 2.31 77 MPART_ALT_DIFF 7336 3.46 6.29 2.29 78 TO_MALFORMED 7019 1.56 0.01 2.20 79 HTML_IMAGE_RATIO_06 6966 2.74 4.10 2.18 80 MIME_HTML_MOSTLY 6699 2.76 4.38 2.10 81 TooManyTo_002 6695 1.66 0.60 2.09 82 INVALID_MSGID 6647 1.51 0.14 2.08 83 BAYES_20 6406 1.69 0.94 2.00 84 UNTRUSTED_Relay 6142 3.74 8.12 1.92 85 TM2_M_URI_OPT_OUT 5745 2.62 4.61 1.80 86 XM_SPF_SoftFail 5381 2.10 3.09 1.68 87 MAILING_LIST_MULTI 5152 1.69 1.89 1.61 88 HTML_IMAGE_RATIO_08 4994 2.07 3.31 1.56 89 SUBJ_ALL_CAPS 4990 2.07 3.29 1.56 90 XM_CamelCaseFrm001 4944 2.01 3.15 1.55 91 XM_DK_Undo_01 4862 1.57 1.69 1.52 92 RELAYCOUNTRY_CA 4835 2.20 3.88 1.51 93 T_TooManySym_02 4696 1.34 1.03 1.47 94 XM_UB50 4627 1.82 2.74 1.45 95 XM_H_PHPOS 4452 1.26 0.95 1.39 96 TR_LOTS_OF_MONEY3 4416 2.43 4.98 1.38 97 TooManyTo_003 4412 1.12 0.48 1.38 98 XM_OfRef6 4402 1.96 3.38 1.38 99 BAYES_05 4233 1.09 0.52 1.32 100 TR_MetaPhish_Combo_01 4228 1.11 0.61 1.32 101 RCVD_IN_MSPIKE_WL 4149 1.02 0.35 1.30 102 RCVD_IN_MSPIKE_H3 4149 1.02 0.35 1.30 103 USER_IN_DEF_DKIM_WL 4107 0.96 0.18 1.28 104 XMStockSpam_06 4091 1.31 1.37 1.28 105 XM_DIRTYINTL 4051 1.88 3.38 1.27 106 XMDiploma_00 3968 1.43 1.88 1.24 107 HELO_NODOT 3963 0.99 0.38 1.24 108 RELAYCOUNTRY_DE 3865 1.01 0.54 1.21 109 T_XMDrugObfuBody_08 3750 1.43 2.06 1.17 110 TooManyTo_004 3349 0.86 0.39 1.05 111 RCVD_IN_IADB_OPTIN 3345 0.85 0.39 1.05 112 USER_IN_WHITELIST 3318 0.73 0.00 1.04 113 T_XMHurry_00 3307 1.67 3.21 1.03 114 XM_H_Trusted_IP 3283 0.73 0.00 1.03 115 XM_D_omniadmin_Whitelist 2996 0.66 0.00 0.94 116 URI_WP_HACKED_2 2973 1.18 1.78 0.93 117 XM_H_Long_From02 2905 1.06 1.42 0.91 118 URI_HEX 2866 1.73 3.74 0.90 119 XM_GoogleGroups 2806 0.79 0.58 0.88 120 XM_ProductURIs 2788 1.13 1.74 0.87 121 TooManyTo_005 2762 0.71 0.34 0.86 122 XMBounce_01 2758 0.76 0.51 0.86 123 XMPhish11 2751 0.88 0.92 0.86 124 BOTNET 2699 4.43 13.09 0.84 125 MIME_HTML_ONLY_MULTI 2607 1.49 3.12 0.82 126 DKIM_ADSP_CUSTOM_MED 2605 1.06 1.64 0.81 127 T_MIXED_ES 2582 1.12 1.88 0.81 128 IMPOTENCE 2554 0.94 1.29 0.80 129 XMCapTrack 2411 0.66 0.45 0.75 130 RELAYCOUNTRY_GB 2338 0.74 0.76 0.73 131 XMSubMetaD_03 2323 0.96 1.51 0.73 132 SpammyFromTLD_01 2240 0.86 1.24 0.70 133 XM_H_PHPMailer 2240 0.71 0.74 0.70 134 TM2_M_VERY_LONG_WORD 2226 0.92 1.48 0.70 135 XMSubMetaI_00 2196 1.22 2.50 0.69 136 RCVD_IN_BL_SPAMCOP_NET 2173 1.25 2.64 0.68 137 T_TooManySym_03 2143 0.57 0.33 0.67 138 XMSubMetaSxObfu_02 2123 0.54 0.24 0.66 139 XM_B_COPY_HTML 2026 0.87 1.43 0.63 140 XMBody_78 1998 0.75 1.06 0.62 141 XMGenDplmaNmb 1965 0.78 1.17 0.61 142 NML_ADSP_CUSTOM_MED 1939 0.84 1.42 0.61 143 XMBody_95 1920 0.45 0.10 0.60 144 XM_B_REG_HTML 1895 0.79 1.27 0.59 145 XMBdyGiftCard01 1861 0.84 1.47 0.58 146 URI_TRY_3LD 1847 0.69 0.97 0.58 147 XM_ShortIntro_01 1818 0.49 0.31 0.57 148 XM_S_JOY_D 1792 0.78 1.30 0.56 149 DIET_1 1779 0.83 1.50 0.56 150 XMSolicitRefs_0 1654 0.46 0.32 0.52 151 XMNoVowels 1585 0.47 0.41 0.50 152 T_FILL_THIS_FORM_SHORT 1551 0.51 0.58 0.49 153 ONLINE_PHARMACY 1550 0.55 0.70 0.48 154 SUSPICIOUS_RECIPS 1548 0.83 1.68 0.48 155 XMBrknScrpt_02 1547 0.54 0.67 0.48 156 HTML_FONT_FACE_BAD 1530 0.74 1.38 0.48 157 MISSING_HEADERS 1520 0.48 0.51 0.48 158 XM_BadFromFormat 1486 0.51 0.62 0.46 159 TM2_M_BODY_EMPTY 1356 0.33 0.12 0.42 160 XM_B_TRADE_HTML 1337 0.41 0.38 0.42 161 XMSlimDrugH 1331 0.59 1.02 0.42 162 XM_D_omniadmin_Whitelist2 1319 0.29 0.00 0.41 163 T_OBFU_PDF_ATTACH 1317 0.32 0.11 0.41 164 RCVD_IN_IADB_DOPTIN 1295 0.30 0.06 0.41 165 XMRcvdHeader_15 1279 0.28 0.00 0.40 166 XM_H_PHPOS_M 1271 0.42 0.46 0.40 167 XMMoneyMeta_00 1259 0.38 0.36 0.39 168 RDNS_DYNAMIC 1253 0.58 1.03 0.39 169 XMBody_17 1251 0.81 1.82 0.39 170 RCVD_IN_SORBS_DUL 1242 0.31 0.13 0.39 171 XMGappySubj_01 1241 0.42 0.50 0.39 172 RELAYCOUNTRY_AU 1207 0.43 0.57 0.38 173 RELAYCOUNTRY_FR 1182 0.84 1.99 0.37 174 MPART_ALT_DIFF_COUNT 1172 0.41 0.50 0.37 175 TR_XM_RelayPhish 1171 0.72 1.57 0.37 176 FILL_THIS_FORM 1159 0.48 0.78 0.36 177 XMDateMe_00 1143 0.36 0.37 0.36 178 DKIM_ADSP_NXDOMAIN 1137 0.42 0.57 0.36 179 XMPhish30 1123 0.72 1.61 0.35 180 XM_Body_Obfu01 1114 0.51 0.89 0.35 181 T_XMDrugObfuBody_00 1095 0.54 1.02 0.34 182 HTTPS_HTTP_MISMATCH 1093 0.39 0.52 0.34 183 HTML_IMAGE_ONLY_32 1086 0.36 0.41 0.34 184 FORGED_GMAIL_RCVD 1085 0.62 1.29 0.34 185 T_TooManySym_04 1083 0.27 0.10 0.34 186 HTML_IMAGE_ONLY_28 1072 0.39 0.51 0.34 187 HTML_IMAGE_ONLY_24 1060 0.35 0.39 0.33 188 XMSubMetaSxObfu_03 1048 0.42 0.64 0.33 189 T_HTML_TAG_BALANCE_CENTER 1038 0.35 0.41 0.32 190 XMHTMLBadTable_001 1033 0.47 0.82 0.32 191 NO_DNS_FOR_FROM 1023 0.28 0.20 0.32 192 TVD_SPACE_RATIO 1020 0.26 0.11 0.32 193 MSGID_FROM_MTA_HEADER 989 0.28 0.22 0.31 194 XMSubMetaSSx_00 985 0.46 0.84 0.31 195 HTML_FONT_SIZE_HUGE 972 0.36 0.49 0.30 196 GMD_PDF_EMPTY_BODY 957 0.23 0.05 0.30 197 HTML_TAG_BALANCE_BODY 939 0.41 0.68 0.29 198 XMSubNoVowel 931 0.30 0.32 0.29 199 URI_NOVOWEL 911 0.48 0.94 0.28 200 SHORT_HELO_AND_INLINE_IMAGE 907 0.21 0.03 0.28 ----------------------------------------------------------------------