Email: 406552 Autolearn: 0 AvgScore: 3.83 AvgScanTime: 2.87 sec Spam: 126292 Autolearn: 0 AvgScore: 12.94 AvgScanTime: 3.43 sec Ham: 280260 Autolearn: 0 AvgScore: -0.27 AvgScanTime: 2.62 sec Time Spent Running SA: 324.48 hours Time Spent Processing Spam: 120.30 hours Time Spent Processing Ham: 204.18 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 119993 80.30 95.01 73.67 2 DKIM_SIGNED 89420 75.08 70.80 77.01 3 DCC_CHECK 86778 51.87 68.71 44.29 4 XM_DK_Pass 85662 73.55 67.83 76.12 5 DKIM_VALID 82417 71.10 65.26 73.73 6 XMListUnsubscribeExists 77051 59.33 61.01 58.57 7 DKIM_VALID_AU 70004 59.63 55.43 61.52 8 XM_H_QuotedFrom 57331 38.07 45.40 34.77 9 MIME_HTML_ONLY 56131 26.32 44.45 18.15 10 BAYES_50 44464 44.68 35.21 48.95 11 XM_DK_Undo_02 43546 19.54 34.48 12.81 12 LOC_TINY_FONT_1 40703 29.13 32.23 27.73 13 HTML_FONT_LOW_CONTRAST 38985 30.08 30.87 29.73 14 BAYES_99 38397 17.55 30.40 11.76 15 DCC_CHECK_NEGATIVE 38164 47.17 30.22 54.81 16 FROM_EXCESS_BASE64 34229 11.55 27.10 4.54 17 BAYES_999 32064 14.53 25.39 9.64 18 BOTNET 31683 9.05 25.09 1.83 19 TR_DCC_Bayes_99 31424 12.15 24.88 6.42 20 FVGT_m_MULTI_ODD 28559 20.42 22.61 19.43 21 HTML_MIME_NO_HTML_TAG 27768 7.61 21.99 1.14 22 XMSubLong 27455 20.67 21.74 20.19 23 T_REMOTE_IMAGE 27379 8.66 21.68 2.79 24 BODY_URI_ONLY 25655 6.34 20.31 0.04 25 HTML_SHORT_LINK_IMG_1 25385 6.27 20.10 0.04 26 MISSING_HEADERS 25334 6.75 20.06 0.75 27 MIME_HEADER_CTYPE_ONLY 25291 6.31 20.03 0.13 28 HTML_IMAGE_RATIO_02 23449 13.09 18.57 10.62 29 HTML_IMAGE_ONLY_04 22981 5.68 18.20 0.04 30 T_TM2_M_HEADER_IN_MSG 21616 19.02 17.12 19.88 31 DKIM_VALID_EF 21580 23.43 17.09 26.29 32 XM_Body_Dirty_Words 20914 13.40 16.56 11.98 33 HTML_SHORT_CENTER 20552 5.06 16.27 0.01 34 T_KAM_HTML_FONT_INVALID 20449 13.41 16.19 12.15 35 RCVD_IN_RP_RNBL 18706 4.61 14.81 0.02 36 XM_Multi_Part_URI 16602 12.59 13.15 12.34 37 MultiRelay 16291 16.39 12.90 17.97 38 RELAYCOUNTRY_META 16196 6.46 12.82 3.59 39 XM_Evil_Numbers_Gen 15208 9.41 12.04 8.22 40 BAYES_60 14951 8.33 11.84 6.75 41 BAYES_80 14568 6.95 11.54 4.88 42 FSL_BULK_SIG 14014 8.68 11.10 7.58 43 XMSexyCombo_05 13978 6.39 11.07 4.28 44 BOTNET_IPINHOSTNAME 13266 8.82 10.50 8.06 45 XMSubMetaSx_00 11386 5.80 9.02 4.35 46 XMNumbers 11139 10.43 8.82 11.15 47 LOTS_OF_MONEY 10081 6.02 7.98 5.13 48 HTML_IMAGE_RATIO_04 9644 6.20 7.64 5.55 49 UNTRUSTED_Relay 8937 2.92 7.08 1.05 50 TR_XM_DocInvoice 8819 4.65 6.98 3.60 51 XM_B_Phish_Phrases 8631 6.13 6.83 5.81 52 BAYES_95 8606 4.37 6.81 3.26 53 T_XMDrugObfuBody_14 8441 6.58 6.68 6.54 54 TooManyTo_001 8118 8.18 6.43 8.97 55 XM_H_Long_From01 8083 5.72 6.40 5.41 56 XM_UncommonTLD01 7319 9.13 5.80 10.63 57 DKIM_INVALID 7003 3.99 5.55 3.28 58 MPART_ALT_DIFF 6949 3.38 5.50 2.42 59 LotsOfNums_01 6797 6.99 5.38 7.71 60 XMStrtUSub 6444 4.97 5.10 4.90 61 XM_DIRTYINTL 4688 2.01 3.71 1.25 62 TM2_M_URI_OPT_OUT 4688 2.21 3.71 1.54 63 MIME_HTML_MOSTLY 4547 2.81 3.60 2.45 64 XM_SendGrid 4270 4.27 3.38 4.67 65 HTML_IMAGE_RATIO_06 4108 2.85 3.25 2.67 66 XM_UB50 4051 1.33 3.21 0.48 67 MIME_QP_LONG_LINE 3923 3.77 3.11 4.08 68 URI_HEX 3852 2.05 3.05 1.60 69 MIME_HTML_ONLY_MULTI 3812 1.73 3.02 1.15 70 T_TooManySym_01 3690 6.14 2.92 7.59 71 RCVD_IN_MSPIKE_H2 3688 4.18 2.92 4.75 72 DIET_1 3649 1.15 2.89 0.37 73 RELAYCOUNTRY_CA 3599 1.88 2.85 1.45 74 XMBody_17 3375 1.23 2.67 0.59 75 XM_CamelCaseFrm001 3365 1.96 2.66 1.64 76 XMSubMetaI_00 3308 1.40 2.62 0.85 77 MultiRelay_Combo 3166 0.87 2.51 0.14 78 MultiRelay_CC 3166 0.87 2.51 0.14 79 XMDiploma_00 3130 1.45 2.48 0.98 80 XM_BadFromFormat 3128 0.88 2.48 0.17 81 XM_OfRef6 3108 1.70 2.46 1.36 82 RCVD_IN_RP_SAFE 3039 10.34 2.41 13.92 83 XM_SPF_SoftFail 2963 3.81 2.35 4.47 84 HTML_IMAGE_RATIO_08 2846 2.69 2.25 2.88 85 PLING_QUERY 2709 0.84 2.15 0.25 86 XMBdyGiftCard01 2620 2.16 2.07 2.20 87 HTML_IMAGE_ONLY_08 2433 0.66 1.93 0.08 88 T_XMDrugObfuBody_08 2375 1.13 1.88 0.79 89 UNPARSEABLE_RELAY 2315 4.66 1.83 5.93 90 RCVD_IN_RP_CERTIFIED 2273 9.57 1.80 13.08 91 ALL_TRUSTED 2222 14.22 1.76 19.84 92 T_XMDrugObfuBody_00 2177 0.87 1.72 0.48 93 MPART_ALT_DIFF_COUNT 2139 0.70 1.69 0.25 94 URI_TRY_3LD 2107 1.13 1.67 0.89 95 XMSexyCombo_01 2080 1.05 1.65 0.79 96 HTML_FONT_SIZE_LARGE 2055 0.58 1.63 0.11 97 XMGenDplmaNmb 1981 0.87 1.57 0.55 98 BOTNET_NORDNS 1926 0.48 1.53 0.01 99 SpammyFromTLD_02 1922 0.58 1.52 0.16 100 TR_Mismatch_TLD_02 1861 0.50 1.47 0.06 101 SUBJ_ALL_CAPS 1844 6.19 1.46 8.32 102 URIBL_BLACK 1818 0.49 1.44 0.06 103 XM_H_Long_From02 1774 1.07 1.40 0.92 104 RCVD_IN_BL_SPAMCOP_NET 1770 0.55 1.40 0.17 105 SpammyFromTLD_01 1750 5.58 1.39 7.48 106 T_HTML_TAG_BALANCE_CENTER 1724 0.53 1.37 0.15 107 BAYES_40 1695 2.93 1.34 3.64 108 NO_PRESCRIPTION 1682 0.41 1.33 0.00 109 XMMoneyMeta_00 1638 0.57 1.30 0.24 110 DKIM_ADSP_NXDOMAIN 1623 0.76 1.29 0.52 111 BAYES_20 1593 3.54 1.26 4.56 112 XM_URI_RBL 1577 0.68 1.25 0.42 113 RELAYCOUNTRY_AT 1572 0.55 1.24 0.23 114 XMHTML_After_End 1567 0.55 1.24 0.24 115 T_TooManySym_02 1551 2.02 1.23 2.37 116 XM_GoogleGroups 1520 1.06 1.20 1.00 117 XMSlimDrugH 1495 0.60 1.18 0.34 118 XMPhish14 1488 0.73 1.18 0.53 119 TM2_M_VERY_LONG_WORD 1462 0.86 1.16 0.73 120 MAILING_LIST_MULTI 1460 1.30 1.16 1.37 121 RELAYCOUNTRY_GB 1453 0.62 1.15 0.39 122 TR_LOTS_OF_MONEY2 1448 0.54 1.15 0.26 123 T_MONEY_PERCENT 1448 0.54 1.15 0.26 124 BODY_ENHANCEMENT 1442 0.38 1.14 0.04 125 TR_XM_RelayPhish 1440 0.54 1.14 0.28 126 T_XMHurry_00 1423 0.80 1.13 0.65 127 XMStockSpam_06 1412 1.32 1.12 1.41 128 XMPhish30 1406 0.64 1.11 0.42 129 TR_LOTS_OF_MONEY1 1381 0.34 1.09 0.00 130 XM_H_PHPOS 1376 5.85 1.09 8.00 131 XMSubMetaI_01 1364 0.40 1.08 0.09 132 BAYES_00 1354 8.52 1.07 11.88 133 XMPhish11 1350 0.98 1.07 0.94 134 URIBL_DBL_SPAM 1342 0.35 1.06 0.04 135 TR_Symld_Words 1293 1.04 1.02 1.05 136 GUARANTEED_100_PERCENT 1259 0.32 1.00 0.02 137 BANG_GUAR 1234 0.32 0.98 0.02 138 RCVD_IN_IADB_LISTED 1233 2.73 0.98 3.52 139 XMWghtMeta_00 1208 0.31 0.96 0.01 140 XMSubject_09 1177 0.29 0.93 0.01 141 XMSubMetaI_02 1167 0.29 0.92 0.00 142 RELAYCOUNTRY_CN 1163 0.31 0.92 0.04 143 XM_UB99 1145 0.31 0.91 0.04 144 FVGT_m_MULTI_ODD_EMAIL 1143 0.35 0.91 0.10 145 XM_DK_Undo_01 1137 1.13 0.90 1.23 146 TO_MALFORMED 1128 3.46 0.89 4.61 147 XM_UB60 1125 0.32 0.89 0.07 148 FILL_THIS_FORM 1121 0.73 0.89 0.66 149 RELAYCOUNTRY_JP 1115 0.29 0.88 0.02 150 XM_OfRef7 1096 0.34 0.87 0.10 151 XMWarranty1 1090 0.27 0.86 0.00 152 MALE_ENHANCE 1084 0.27 0.86 0.00 153 XMSubject_47 1082 0.27 0.86 0.00 154 XM_B_COPY_HTML 1081 0.65 0.86 0.56 155 RCVD_IN_IADB_SPF 1077 2.44 0.85 3.16 156 T_FILL_THIS_FORM_LONG 1075 0.68 0.85 0.61 157 XMSubMetaSxObfu_03 1073 0.51 0.85 0.35 158 XM_ProductURIs 1058 1.00 0.84 1.07 159 XM_H_PHPMailer 1045 0.67 0.83 0.60 160 RCVD_IN_IADB_SENDERID 1030 2.23 0.82 2.87 161 RCVD_IN_IADB_DK 1019 2.19 0.81 2.81 162 RELAYCOUNTRY_FR 1018 0.35 0.81 0.14 163 T_FILL_THIS_FORM_LOAN 1014 0.66 0.80 0.60 164 LongTLD 998 0.33 0.79 0.13 165 HTML_TAG_BALANCE_BODY 992 0.54 0.79 0.43 166 RELAYCOUNTRY_DE 989 0.47 0.78 0.34 167 T_FROM_SUSPICIOUS_NTLD 983 0.26 0.78 0.02 168 XM_Body_Obfu01 979 0.32 0.78 0.12 169 RDNS_DYNAMIC 971 0.58 0.77 0.50 170 TR_LOTS_OF_MONEY3 966 0.37 0.76 0.19 171 TooManyTo_002 962 3.28 0.76 4.41 172 XMBody_78 941 0.54 0.75 0.45 173 XMHTMLBadTable_001 933 0.89 0.74 0.96 174 RELAYCOUNTRY_IN 908 0.26 0.72 0.06 175 XM_UB95 897 0.25 0.71 0.04 176 TVD_PH_BODY_ACCOUNTS_PRE 859 0.26 0.68 0.08 177 XM_UB80 858 0.24 0.68 0.05 178 XMSubMetaSxObfu_02 858 1.05 0.68 1.22 179 URI_NOVOWEL 850 0.44 0.67 0.33 180 XMBrknScrpt_02 849 0.67 0.67 0.67 181 XM_UB999 845 0.23 0.67 0.03 182 SUBJ_DOLLARS 845 0.41 0.67 0.29 183 TooManyTo_003 842 2.59 0.67 3.46 184 TR_XM_DK_Bayes 841 6.96 0.67 9.79 185 LOW_PRICE 840 0.28 0.67 0.11 186 RCVD_IN_MSPIKE_WL 838 1.75 0.66 2.24 187 TR_XM_DK_Bayes1 818 6.74 0.65 9.48 188 DKIM_ADSP_CUSTOM_MED 804 0.72 0.64 0.75 189 RCVD_IN_MSPIKE_H3 773 1.72 0.61 2.22 190 T_TVD_MIME_EPI 773 0.20 0.61 0.01 191 XM_S_JOY_D 770 0.37 0.61 0.26 192 TR_XM_DK_Bayes2 768 6.35 0.61 8.94 193 XMGppyBdWords 766 0.26 0.61 0.11 194 NO_DNS_FOR_FROM 760 0.55 0.60 0.52 195 NML_ADSP_CUSTOM_MED 753 0.54 0.60 0.52 196 XM_H_PHPOS_M 750 0.43 0.59 0.36 197 RELAYCOUNTRY_IE 747 0.27 0.59 0.12 198 HTTPS_HTTP_MISMATCH 746 0.39 0.59 0.30 199 XMSexyCombo_04 741 0.24 0.59 0.08 200 HTML_FONT_FACE_BAD 730 0.53 0.58 0.51 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DKIM_SIGNED 215830 75.08 70.80 77.01 2 XM_DK_Pass 213346 73.55 67.83 76.12 3 DKIM_VALID 206629 71.10 65.26 73.73 4 HTML_MESSAGE 206456 80.30 95.01 73.67 5 DKIM_VALID_AU 172429 59.63 55.43 61.52 6 XMListUnsubscribeExists 164146 59.33 61.01 58.57 7 DCC_CHECK_NEGATIVE 153604 47.17 30.22 54.81 8 BAYES_50 137180 44.68 35.21 48.95 9 DCC_CHECK 124116 51.87 68.71 44.29 10 XM_H_QuotedFrom 97455 38.07 45.40 34.77 11 HTML_FONT_LOW_CONTRAST 83322 30.08 30.87 29.73 12 LOC_TINY_FONT_1 77725 29.13 32.23 27.73 13 DKIM_VALID_EF 73674 23.43 17.09 26.29 14 XMSubLong 56574 20.67 21.74 20.19 15 T_TM2_M_HEADER_IN_MSG 55729 19.02 17.12 19.88 16 ALL_TRUSTED 55590 14.22 1.76 19.84 17 FVGT_m_MULTI_ODD 54459 20.42 22.61 19.43 18 MIME_HTML_ONLY 50862 26.32 44.45 18.15 19 MultiRelay 50355 16.39 12.90 17.97 20 XM_DKIMWhitelistDomains 45182 11.13 0.04 16.12 21 RCVD_IN_RP_SAFE 39006 10.34 2.41 13.92 22 RCVD_IN_RP_CERTIFIED 36651 9.57 1.80 13.08 23 XM_DK_Undo_02 35914 19.54 34.48 12.81 24 XM_Multi_Part_URI 34589 12.59 13.15 12.34 25 T_KAM_HTML_FONT_INVALID 34054 13.41 16.19 12.15 26 XM_Body_Dirty_Words 33579 13.40 16.56 11.98 27 BAYES_00 33289 8.52 1.07 11.88 28 BAYES_99 32947 17.55 30.40 11.76 29 XMNumbers 31250 10.43 8.82 11.15 30 XM_UncommonTLD01 29798 9.13 5.80 10.63 31 HTML_IMAGE_RATIO_02 29775 13.09 18.57 10.62 32 TR_XM_DK_Bayes 27437 6.96 0.67 9.79 33 BAYES_999 27015 14.53 25.39 9.64 34 TR_XM_DK_Bayes1 26564 6.74 0.65 9.48 35 TooManyTo_001 25138 8.18 6.43 8.97 36 TR_XM_DK_Bayes2 25047 6.35 0.61 8.94 37 SUBJ_ALL_CAPS 23325 6.19 1.46 8.32 38 XM_Evil_Numbers_Gen 23041 9.41 12.04 8.22 39 BOTNET_IPINHOSTNAME 22595 8.82 10.50 8.06 40 XM_H_PHPOS 22422 5.85 1.09 8.00 41 LotsOfNums_01 21608 6.99 5.38 7.71 42 T_TooManySym_01 21275 6.14 2.92 7.59 43 FSL_BULK_SIG 21256 8.68 11.10 7.58 44 SpammyFromTLD_01 20951 5.58 1.39 7.48 45 BAYES_60 18914 8.33 11.84 6.75 46 T_XMDrugObfuBody_14 18323 6.58 6.68 6.54 47 TR_DCC_Bayes_99 17984 12.15 24.88 6.42 48 UNPARSEABLE_RELAY 16615 4.66 1.83 5.93 49 XM_B_Phish_Phrases 16279 6.13 6.83 5.81 50 HTML_IMAGE_RATIO_04 15554 6.20 7.64 5.55 51 TVD_RCVD_IP 15554 3.88 0.19 5.55 52 XM_H_Long_From01 15162 5.72 6.40 5.41 53 LOTS_OF_MONEY 14375 6.02 7.98 5.13 54 XMStrtUSub 13743 4.97 5.10 4.90 55 BAYES_80 13685 6.95 11.54 4.88 56 RCVD_IN_MSPIKE_H2 13308 4.18 2.92 4.75 57 XM_SendGrid 13102 4.27 3.38 4.67 58 TO_MALFORMED 12933 3.46 0.89 4.61 59 BAYES_20 12782 3.54 1.26 4.56 60 FROM_EXCESS_BASE64 12718 11.55 27.10 4.54 61 XM_SPF_SoftFail 12530 3.81 2.35 4.47 62 TooManyTo_002 12356 3.28 0.76 4.41 63 XMSubMetaSx_00 12191 5.80 9.02 4.35 64 BAYES_05 12103 3.14 0.53 4.32 65 XMSexyCombo_05 12009 6.39 11.07 4.28 66 MIME_QP_LONG_LINE 11421 3.77 3.11 4.08 67 BAYES_40 10213 2.93 1.34 3.64 68 TR_XM_DocInvoice 10076 4.65 6.98 3.60 69 RELAYCOUNTRY_META 10060 6.46 12.82 3.59 70 ANY_BOUNCE_MESSAGE 9909 2.49 0.18 3.54 71 BOUNCE_MESSAGE 9907 2.49 0.18 3.53 72 RCVD_IN_IADB_LISTED 9869 2.73 0.98 3.52 73 TooManyTo_003 9687 2.59 0.67 3.46 74 DKIM_INVALID 9201 3.99 5.55 3.28 75 BAYES_95 9146 4.37 6.81 3.26 76 RCVD_IN_IADB_SPF 8853 2.44 0.85 3.16 77 IN_ZIMBRA_NJ_WHITELIST 8272 2.04 0.02 2.95 78 HTML_IMAGE_RATIO_08 8084 2.69 2.25 2.88 79 RCVD_IN_IADB_SENDERID 8036 2.23 0.82 2.87 80 RCVD_IN_IADB_DK 7883 2.19 0.81 2.81 81 T_REMOTE_IMAGE 7821 8.66 21.68 2.79 82 HTML_IMAGE_RATIO_06 7474 2.85 3.25 2.67 83 TooManyTo_004 7355 1.97 0.53 2.62 84 MIME_HTML_MOSTLY 6878 2.81 3.60 2.45 85 MPART_ALT_DIFF 6774 3.38 5.50 2.42 86 INVALID_MSGID 6709 1.70 0.16 2.39 87 T_TooManySym_02 6646 2.02 1.23 2.37 88 RCVD_IN_MSPIKE_WL 6265 1.75 0.66 2.24 89 RCVD_IN_MSPIKE_H3 6234 1.72 0.61 2.22 90 XMBdyGiftCard01 6158 2.16 2.07 2.20 91 RCVD_IN_IADB_VOUCHED 5863 1.61 0.55 2.09 92 USER_IN_DEF_DKIM_WL 5848 1.44 0.01 2.09 93 TooManyTo_005 5320 1.44 0.41 1.90 94 BOTNET 5129 9.05 25.09 1.83 95 TR_MetaPhish_Combo_01 5096 1.35 0.31 1.82 96 IN_HORDE_ADDRESS_BOOK 4678 1.16 0.03 1.67 97 XM_CamelCaseFrm001 4599 1.96 2.66 1.64 98 URI_HEX 4489 2.05 3.05 1.60 99 TM2_M_URI_OPT_OUT 4302 2.21 3.71 1.54 100 RELAYCOUNTRY_CA 4060 1.88 2.85 1.45 101 XMStockSpam_06 3949 1.32 1.12 1.41 102 MAILING_LIST_MULTI 3838 1.30 1.16 1.37 103 XM_OfRef6 3807 1.70 2.46 1.36 104 XM_PDF 3600 0.97 0.27 1.28 105 RCVD_IN_IADB_OPTIN 3503 1.00 0.44 1.25 106 XM_DIRTYINTL 3494 2.01 3.71 1.25 107 XM_DK_Undo_01 3437 1.13 0.90 1.23 108 XMSubMetaSxObfu_02 3411 1.05 0.68 1.22 109 XM_B_REG_HTML 3339 0.94 0.39 1.19 110 MIME_HTML_ONLY_MULTI 3220 1.73 3.02 1.15 111 HTML_MIME_NO_HTML_TAG 3190 7.61 21.99 1.14 112 XM_ProductURIs 3000 1.00 0.84 1.07 113 UNTRUSTED_Relay 2951 2.92 7.08 1.05 114 TR_Symld_Words 2935 1.04 1.02 1.05 115 XM_GoogleGroups 2796 1.06 1.20 1.00 116 XMDiploma_00 2748 1.45 2.48 0.98 117 XMHTMLBadTable_001 2690 0.89 0.74 0.96 118 XMPhish11 2622 0.98 1.07 0.94 119 XMBody_95 2575 0.68 0.16 0.92 120 XM_H_Long_From02 2571 1.07 1.40 0.92 121 URI_TRY_3LD 2486 1.13 1.67 0.89 122 XMSubMetaI_00 2383 1.40 2.62 0.85 123 T_XMDrugObfuBody_08 2216 1.13 1.88 0.79 124 XMSexyCombo_01 2205 1.05 1.65 0.79 125 USER_IN_WHITELIST 2177 0.54 0.00 0.78 126 DKIM_ADSP_CUSTOM_MED 2111 0.72 0.64 0.75 127 MISSING_HEADERS 2094 6.75 20.06 0.75 128 TM2_M_VERY_LONG_WORD 2038 0.86 1.16 0.73 129 T_TooManySym_03 1901 0.55 0.26 0.68 130 XMBrknScrpt_02 1887 0.67 0.67 0.67 131 FILL_THIS_FORM 1854 0.73 0.89 0.66 132 T_XMHurry_00 1833 0.80 1.13 0.65 133 T_FILL_THIS_FORM_LONG 1704 0.68 0.85 0.61 134 T_FILL_THIS_FORM_LOAN 1669 0.66 0.80 0.60 135 XM_H_PHPMailer 1669 0.67 0.83 0.60 136 XMBody_17 1640 1.23 2.67 0.59 137 XM_ShortIntro_01 1577 0.50 0.36 0.56 138 XM_B_COPY_HTML 1566 0.65 0.86 0.56 139 XMGenDplmaNmb 1544 0.87 1.57 0.55 140 XMPhish14 1487 0.73 1.18 0.53 141 NO_DNS_FOR_FROM 1460 0.55 0.60 0.52 142 NML_ADSP_CUSTOM_MED 1456 0.54 0.60 0.52 143 DKIM_ADSP_NXDOMAIN 1449 0.76 1.29 0.52 144 TM2_M_A_HREF_HREF 1442 0.45 0.32 0.51 145 HTML_FONT_FACE_BAD 1435 0.53 0.58 0.51 146 RDNS_DYNAMIC 1398 0.58 0.77 0.50 147 XM_UB50 1358 1.33 3.21 0.48 148 T_XMDrugObfuBody_00 1351 0.87 1.72 0.48 149 REPLYTO_WITHOUT_TO_CC 1319 0.42 0.31 0.47 150 MSGID_RANDY 1307 0.34 0.07 0.47 151 REMOVE_BEFORE_LINK 1280 0.42 0.35 0.46 152 XMBody_78 1259 0.54 0.75 0.45 153 XM_Ancestry_Forge 1240 0.34 0.13 0.44 154 HTML_TAG_BALANCE_BODY 1198 0.54 0.79 0.43 155 XMPhish30 1191 0.64 1.11 0.42 156 XM_URI_RBL 1180 0.68 1.25 0.42 157 XMLngstWrd_00 1159 0.41 0.41 0.41 158 T_TooManySym_04 1111 0.28 0.02 0.40 159 FORGED_GMAIL_RCVD 1107 0.44 0.54 0.39 160 RELAYCOUNTRY_GB 1085 0.62 1.15 0.39 161 URIBL_DBL_ABUSE_SPAM 1075 0.31 0.15 0.38 162 HELO_NODOT 1039 0.29 0.12 0.37 163 DIET_1 1032 1.15 2.89 0.37 164 XM_H_PHPOS_M 1018 0.43 0.59 0.36 165 XMLngstWrd_01 1014 0.37 0.40 0.36 166 XM_Akamai 1007 0.25 0.02 0.36 167 XMSubMetaSxObfu_03 986 0.51 0.85 0.35 168 XMSolicitRefs_0 962 0.36 0.40 0.34 169 XM_Walgreens_Forge 955 0.28 0.15 0.34 170 XMSlimDrugH 946 0.60 1.18 0.34 171 XMCapTrack 944 0.28 0.14 0.34 172 RELAYCOUNTRY_DE 941 0.47 0.78 0.34 173 URI_NOVOWEL 924 0.44 0.67 0.33 174 XMClaimOffer 911 0.33 0.33 0.33 175 XMNoVowels 882 0.27 0.16 0.31 176 T_FILL_THIS_FORM_SHORT 865 0.39 0.57 0.31 177 URIBL_SBL_A 854 0.32 0.35 0.30 178 HTTPS_HTTP_MISMATCH 844 0.39 0.59 0.30 179 XM_Combo_Sbj 835 0.28 0.24 0.30 180 SUBJ_DOLLARS 820 0.41 0.67 0.29 181 TR_XM_RelayPhish 773 0.54 1.14 0.28 182 URIBL_RHS_DOB 763 0.26 0.22 0.27 183 RELAYCOUNTRY_AU 761 0.28 0.31 0.27 184 TR_LOTS_OF_MONEY2 735 0.54 1.15 0.26 185 T_MONEY_PERCENT 735 0.54 1.15 0.26 186 XM_S_JOY_D 731 0.37 0.61 0.26 187 XMSubGiftCard1 727 0.25 0.24 0.26 188 XMRcvdHeader_15 723 0.18 0.00 0.26 189 XMDateMe_00 705 0.21 0.11 0.25 190 PLING_QUERY 705 0.84 2.15 0.25 191 MPART_ALT_DIFF_COUNT 702 0.70 1.69 0.25 192 XMSubMetaSSx_00 696 0.27 0.32 0.25 193 TVD_SPACE_RATIO 695 0.24 0.22 0.25 194 XMHTML_After_End 674 0.55 1.24 0.24 195 XMMoneyMeta_00 665 0.57 1.30 0.24 196 RELAYCOUNTRY_AT 655 0.55 1.24 0.23 197 XMSubNoVowel 639 0.25 0.30 0.23 198 XMSUPPORT 612 0.15 0.00 0.22 199 HTML_IMAGE_ONLY_32 606 0.20 0.17 0.22 200 XMBody_29 604 0.23 0.25 0.22 ----------------------------------------------------------------------