Email: 386860 Autolearn: 0 AvgScore: 2.29 AvgScanTime: 2.88 sec Spam: 99243 Autolearn: 0 AvgScore: 11.89 AvgScanTime: 3.58 sec Ham: 287617 Autolearn: 0 AvgScore: -1.02 AvgScanTime: 2.63 sec Time Spent Running SA: 309.10 hours Time Spent Processing Spam: 98.75 hours Time Spent Processing Ham: 210.35 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 91848 79.22 92.55 74.62 2 DKIM_SIGNED 76863 70.86 77.45 68.59 3 DCC_CHECK 73817 51.74 74.38 43.92 4 XM_DK_Pass 73222 69.22 73.78 67.65 5 DKIM_VALID 69452 66.65 69.98 65.50 6 XMListUnsubscribeExists 66720 53.88 67.23 49.27 7 DKIM_VALID_AU 60309 53.91 60.77 51.54 8 XM_H_QuotedFrom 50677 48.30 51.06 47.34 9 BAYES_50 50065 54.82 50.45 56.32 10 LOC_TINY_FONT_1 37626 28.34 37.91 25.04 11 HTML_FONT_LOW_CONTRAST 35279 31.38 35.55 29.94 12 XM_DK_Undo_02 32920 14.98 33.17 8.71 13 MIME_HTML_ONLY 30746 24.45 30.98 22.19 14 BAYES_99 25348 11.70 25.54 6.93 15 DCC_CHECK_NEGATIVE 24352 47.23 24.54 55.07 16 XMSubLong 24314 21.34 24.50 20.26 17 FVGT_m_MULTI_ODD 21921 19.82 22.09 19.04 18 BOTNET 21730 7.50 21.90 2.53 19 TR_DCC_Bayes_99 21422 8.76 21.59 4.34 20 BAYES_999 20920 9.84 21.08 5.96 21 XM_Body_Dirty_Words 19402 14.50 19.55 12.75 22 HTML_IMAGE_RATIO_02 19108 12.63 19.25 10.35 23 T_TM2_M_HEADER_IN_MSG 17663 19.60 17.80 20.23 24 LOTS_OF_MONEY 17626 10.70 17.76 8.27 25 XM_Multi_Part_URI 17242 13.95 17.37 12.76 26 T_KAM_HTML_FONT_INVALID 16732 13.70 16.86 12.62 27 RELAYCOUNTRY_META 16373 7.28 16.50 4.10 28 XM_Evil_Numbers_Gen 15748 10.17 15.87 8.20 29 DKIM_VALID_EF 14930 23.76 15.04 26.76 30 MultiRelay 14453 12.87 14.56 12.28 31 BOTNET_IPINHOSTNAME 13519 8.81 13.62 7.15 32 XMSexyCombo_05 10787 5.96 10.87 4.27 33 HTML_IMAGE_RATIO_04 10693 8.03 10.77 7.09 34 RCVD_IN_RP_RNBL 10412 2.72 10.49 0.04 35 FROM_EXCESS_BASE64 10290 5.85 10.37 4.28 36 TR_LOTS_OF_MONEY2 9883 2.92 9.96 0.49 37 T_MONEY_PERCENT 9883 2.92 9.96 0.49 38 XM_OfRef6 9824 3.66 9.90 1.51 39 UNTRUSTED_Relay 9810 3.42 9.88 1.19 40 FSL_BULK_SIG 9231 8.03 9.30 7.59 41 MPART_ALT_DIFF 8820 4.79 8.89 3.38 42 XM_OfRef7 8684 2.40 8.75 0.20 43 BOUNCE_MESSAGE 8534 4.18 8.60 2.66 44 ANY_BOUNCE_MESSAGE 8534 4.18 8.60 2.66 45 FILL_THIS_FORM 8372 2.67 8.44 0.68 46 MONEY_FRAUD_8 8336 2.17 8.40 0.01 47 MONEY_FORM 8251 2.14 8.31 0.01 48 T_FILL_THIS_FORM_LOAN 8222 2.57 8.28 0.59 49 SHARE_50_50 8109 2.10 8.17 0.01 50 T_XMDrugObfuBody_14 8021 6.24 8.08 5.61 51 XM_B_Phish_Phrases 7825 6.04 7.88 5.40 52 TR_XM_DocInvoice 7518 4.58 7.58 3.55 53 DKIM_INVALID 7411 4.21 7.47 3.08 54 XMSubMetaSx_00 7379 4.50 7.44 3.49 55 TooManyTo_001 6621 5.66 6.67 5.31 56 XM_H_Long_From01 6584 5.75 6.63 5.45 57 BAYES_60 6278 7.32 6.33 7.67 58 BAYES_80 6101 4.12 6.15 3.42 59 XM_UncommonTLD01 5921 4.18 5.97 3.56 60 XM_OfRef8 5368 1.43 5.41 0.06 61 LotsOfNums_01 5280 6.33 5.32 6.67 62 XM_UB50 4825 1.68 4.86 0.58 63 MIME_HTML_MOSTLY 4775 3.73 4.81 3.36 64 ALL_TRUSTED 4282 20.97 4.31 26.72 65 XMNumbers 4226 3.88 4.26 3.75 66 RCVD_IN_RP_SAFE 4058 10.31 4.09 12.46 67 HTML_IMAGE_RATIO_06 3967 3.56 4.00 3.40 68 MIME_HTML_ONLY_MULTI 3852 1.95 3.88 1.29 69 XM_DIRTYINTL 3705 2.08 3.73 1.51 70 RELAYCOUNTRY_CA 3449 2.07 3.48 1.58 71 URI_HEX 3421 2.01 3.45 1.52 72 T_REMOTE_IMAGE 3348 2.84 3.37 2.66 73 XMStrtUSub 3270 3.96 3.29 4.19 74 BAYES_95 3145 2.16 3.17 1.81 75 TM2_M_URI_OPT_OUT 3090 2.07 3.11 1.72 76 RCVD_IN_RP_CERTIFIED 3039 9.11 3.06 11.20 77 HTML_MIME_NO_HTML_TAG 2969 3.18 2.99 3.24 78 XM_CamelCaseFrm001 2959 2.04 2.98 1.71 79 MultiRelay_CC 2910 0.87 2.93 0.15 80 MultiRelay_Combo 2910 0.87 2.93 0.15 81 RCVD_IN_MSPIKE_H2 2881 3.93 2.90 4.29 82 XMSubMetaI_00 2880 1.67 2.90 1.24 83 URI_WP_HACKED_2 2857 5.67 2.88 6.63 84 XM_SendGrid 2818 4.74 2.84 5.39 85 SpammyFromTLD_02 2774 0.87 2.80 0.21 86 XM_BadFromFormat 2646 0.87 2.67 0.25 87 XM_SPF_SoftFail 2611 1.77 2.63 1.47 88 SUBJ_ALL_CAPS 2561 1.90 2.58 1.67 89 BAYES_00 2548 11.88 2.57 15.09 90 SUBJ_DOLLARS 2531 1.12 2.55 0.63 91 T_HTML_TAG_BALANCE_CENTER 2493 0.73 2.51 0.12 92 T_TooManySym_01 2425 5.38 2.44 6.39 93 UNPARSEABLE_RELAY 2232 3.80 2.25 4.34 94 BAYES_40 2166 3.42 2.18 3.85 95 BAYES_20 2135 2.65 2.15 2.82 96 XMDiploma_00 2091 1.35 2.11 1.09 97 XMBdyGiftCard01 2070 1.76 2.09 1.65 98 XMSexyCombo_01 2030 0.90 2.05 0.50 99 HTML_IMAGE_RATIO_08 2004 2.02 2.02 2.02 100 RELAYCOUNTRY_AT 1955 0.72 1.97 0.29 101 TR_XM_DK_Bayes 1942 9.40 1.96 11.97 102 RELAYCOUNTRY_CN 1932 0.52 1.95 0.03 103 BOTNET_NORDNS 1875 0.49 1.89 0.00 104 BODY_ENHANCEMENT 1860 0.51 1.87 0.04 105 TR_XM_DK_Bayes1 1842 9.12 1.86 11.62 106 DKIM_ADSP_CUSTOM_MED 1771 1.04 1.78 0.78 107 T_XMDrugObfuBody_08 1739 1.19 1.75 0.99 108 RELAYCOUNTRY_FR 1734 0.61 1.75 0.21 109 NML_ADSP_CUSTOM_MED 1728 0.83 1.74 0.52 110 RCVD_IN_BL_SPAMCOP_NET 1706 0.63 1.72 0.26 111 MIME_QP_LONG_LINE 1681 3.15 1.69 3.66 112 URIBL_DBL_SPAM 1680 0.45 1.69 0.02 113 DKIM_ADSP_NXDOMAIN 1659 0.89 1.67 0.62 114 SHORT_URI 1642 0.61 1.65 0.25 115 XM_salutation 1636 0.60 1.65 0.24 116 T_XMHurry_00 1609 0.87 1.62 0.60 117 HTML_SHORT_LINK_IMG_1 1600 0.43 1.61 0.03 118 TR_XM_DK_Bayes2 1577 7.76 1.59 9.90 119 TO_MALFORMED 1535 3.76 1.55 4.52 120 XMSubEmpty 1523 3.45 1.53 4.11 121 XM_URI_RBL 1514 0.70 1.53 0.41 122 XMGppyBdWords 1510 0.52 1.52 0.18 123 XMPhish30 1472 0.90 1.48 0.70 124 XMGenDplmaNmb 1463 0.77 1.47 0.52 125 BAYES_05 1457 1.92 1.47 2.08 126 URIBL_BLACK 1438 0.47 1.45 0.13 127 XMNoSubject 1434 3.35 1.44 4.00 128 MISSING_SUBJECT 1434 3.35 1.44 4.00 129 HTML_IMAGE_ONLY_12 1424 0.55 1.43 0.25 130 DIET_1 1417 0.66 1.43 0.39 131 SpammyFromTLD_01 1371 0.59 1.38 0.32 132 XM_H_Long_From02 1345 0.99 1.36 0.87 133 XMBody_17 1333 1.02 1.34 0.91 134 MAILING_LIST_MULTI 1294 1.37 1.30 1.40 135 URI_TRY_3LD 1284 1.33 1.29 1.34 136 XMStockSpam_06 1273 1.43 1.28 1.48 137 T_XMDrugObfuBody_00 1241 0.68 1.25 0.48 138 FORGED_MUA_MOZILLA 1239 0.42 1.25 0.14 139 XM_UB60 1197 0.36 1.21 0.06 140 XM_RXBody 1173 0.74 1.18 0.58 141 TR_Mismatch_TLD_02 1172 0.35 1.18 0.06 142 BODY_URI_ONLY 1137 0.31 1.15 0.03 143 NO_PRESCRIPTION 1127 0.31 1.14 0.03 144 XM_DK_Undo_01 1123 1.28 1.13 1.33 145 XMSubMetaD_03 1122 0.34 1.13 0.07 146 XMHTMLBadTable_001 1119 0.93 1.13 0.86 147 RCVD_IN_IADB_LISTED 1111 2.91 1.12 3.53 148 XM_B_REG_HTML 1109 0.86 1.12 0.77 149 TR_XM_RelayPhish 1099 0.58 1.11 0.40 150 T_TVD_MIME_EPI 1097 0.33 1.11 0.06 151 XMLngstWrd_00 1095 0.56 1.10 0.37 152 MSGID_RANDY 1089 1.02 1.10 0.99 153 RELAYCOUNTRY_DE 1078 0.49 1.09 0.28 154 XMLngstWrd_01 1074 0.53 1.08 0.34 155 FORGED_GMAIL_RCVD 1058 0.55 1.07 0.37 156 MPART_ALT_DIFF_COUNT 1041 0.46 1.05 0.26 157 TM2_M_VERY_LONG_WORD 1034 0.98 1.04 0.95 158 XMPhish11 1021 0.87 1.03 0.81 159 URIBL_DBL_ABUSE_SPAM 1018 0.98 1.03 0.96 160 XM_B_COPY_HTML 999 0.63 1.01 0.50 161 TM2_M_A_HREF_HREF 981 0.78 0.99 0.71 162 XM_ProductURIs 964 0.85 0.97 0.81 163 XMLngstWrd_02 962 0.41 0.97 0.21 164 XM_Body_Obfu01 959 0.32 0.97 0.10 165 RCVD_IN_IADB_SPF 955 2.58 0.96 3.14 166 XMSubMetaSSx_00 955 0.39 0.96 0.20 167 FROM_SUSPICIOUS_NTLD 947 0.31 0.95 0.09 168 US_DOLLARS_3 946 1.61 0.95 1.84 169 XMBody_78 945 0.57 0.95 0.44 170 RCVD_IN_IADB_SENDERID 928 2.36 0.94 2.85 171 XMLngstWrd_03 923 0.35 0.93 0.16 172 XM_Hitman 918 0.25 0.93 0.01 173 XMMoneyMeta_00 917 0.35 0.92 0.15 174 RCVD_IN_IADB_DK 911 2.31 0.92 2.79 175 SUBJ_ILLEGAL_CHARS 903 0.24 0.91 0.00 176 SUBJECT_NEEDS_ENCODING 903 0.24 0.91 0.00 177 LongTLD 902 0.33 0.91 0.13 178 XM_H_PHPOS 891 0.78 0.90 0.74 179 XMPhish14 888 0.49 0.89 0.35 180 LOW_PRICE 858 0.34 0.86 0.15 181 XM_UB99 853 0.23 0.86 0.01 182 SHORTENER_SHORT_IMG 841 0.22 0.85 0.00 183 URI_BUFFLY 841 0.22 0.85 0.00 184 XMSexyCombo_04 820 0.30 0.83 0.11 185 RDNS_DYNAMIC 804 0.55 0.81 0.46 186 SINGLETS_LOW_CONTRAST 804 0.22 0.81 0.02 187 URIBL_CR_SURBL 804 0.66 0.81 0.61 188 XM_UB80 801 0.22 0.81 0.02 189 RELAYCOUNTRY_GB 788 0.49 0.79 0.38 190 TR_Symld_Words 776 1.41 0.78 1.63 191 XM_ShortIntro_01 736 0.88 0.74 0.92 192 XM_OverStock_LProb 731 0.21 0.74 0.03 193 RCVD_IN_IADB_VOUCHED 728 1.74 0.73 2.08 194 RCVD_IN_MSPIKE_WL 727 1.53 0.73 1.80 195 HTML_TAG_BALANCE_BODY 718 0.41 0.72 0.30 196 RCVD_IN_MSPIKE_H3 716 1.52 0.72 1.80 197 HTML_FONT_SIZE_LARGE 715 0.27 0.72 0.12 198 HTML_IMAGE_ONLY_08 713 0.24 0.72 0.08 199 XMSubMetaSxObfu_03 712 0.45 0.72 0.36 200 URI_NOVOWEL 711 0.49 0.72 0.41 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 214621 79.22 92.55 74.62 2 DKIM_SIGNED 197268 70.86 77.45 68.59 3 XM_DK_Pass 194560 69.22 73.78 67.65 4 DKIM_VALID 188401 66.65 69.98 65.50 5 BAYES_50 161998 54.82 50.45 56.32 6 DCC_CHECK_NEGATIVE 158381 47.23 24.54 55.07 7 DKIM_VALID_AU 148249 53.91 60.77 51.54 8 XMListUnsubscribeExists 141715 53.88 67.23 49.27 9 XM_H_QuotedFrom 136166 48.30 51.06 47.34 10 DCC_CHECK 126334 51.74 74.38 43.92 11 HTML_FONT_LOW_CONTRAST 86118 31.38 35.55 29.94 12 DKIM_VALID_EF 76969 23.76 15.04 26.76 13 ALL_TRUSTED 76843 20.97 4.31 26.72 14 LOC_TINY_FONT_1 72018 28.34 37.91 25.04 15 MIME_HTML_ONLY 63830 24.45 30.98 22.19 16 XMSubLong 58258 21.34 24.50 20.26 17 T_TM2_M_HEADER_IN_MSG 58179 19.60 17.80 20.23 18 FVGT_m_MULTI_ODD 54753 19.82 22.09 19.04 19 BAYES_00 43415 11.88 2.57 15.09 20 XM_DKIMWhitelistDomains 40291 10.42 0.01 14.01 21 XM_Multi_Part_URI 36712 13.95 17.37 12.76 22 XM_Body_Dirty_Words 36679 14.50 19.55 12.75 23 T_KAM_HTML_FONT_INVALID 36285 13.70 16.86 12.62 24 RCVD_IN_RP_SAFE 35834 10.31 4.09 12.46 25 MultiRelay 35317 12.87 14.56 12.28 26 TR_XM_DK_Bayes 34429 9.40 1.96 11.97 27 TR_XM_DK_Bayes1 33433 9.12 1.86 11.62 28 RCVD_IN_RP_CERTIFIED 32209 9.11 3.06 11.20 29 HTML_IMAGE_RATIO_02 29771 12.63 19.25 10.35 30 TR_XM_DK_Bayes2 28460 7.76 1.59 9.90 31 XM_DK_Undo_02 25043 14.98 33.17 8.71 32 LOTS_OF_MONEY 23782 10.70 17.76 8.27 33 XM_Evil_Numbers_Gen 23583 10.17 15.87 8.20 34 BAYES_60 22050 7.32 6.33 7.67 35 FSL_BULK_SIG 21818 8.03 9.30 7.59 36 BOTNET_IPINHOSTNAME 20562 8.81 13.62 7.15 37 HTML_IMAGE_RATIO_04 20378 8.03 10.77 7.09 38 BAYES_99 19932 11.70 25.54 6.93 39 LotsOfNums_01 19190 6.33 5.32 6.67 40 URI_WP_HACKED_2 19075 5.67 2.88 6.63 41 T_TooManySym_01 18381 5.38 2.44 6.39 42 BAYES_999 17129 9.84 21.08 5.96 43 T_XMDrugObfuBody_14 16134 6.24 8.08 5.61 44 XM_H_Long_From01 15668 5.75 6.63 5.45 45 XM_B_Phish_Phrases 15533 6.04 7.88 5.40 46 XM_SendGrid 15507 4.74 2.84 5.39 47 TooManyTo_001 15274 5.66 6.67 5.31 48 TO_MALFORMED 13004 3.76 1.55 4.52 49 TVD_RCVD_IP 12520 3.29 0.21 4.35 50 TR_DCC_Bayes_99 12484 8.76 21.59 4.34 51 UNPARSEABLE_RELAY 12478 3.80 2.25 4.34 52 RCVD_IN_MSPIKE_H2 12337 3.93 2.90 4.29 53 FROM_EXCESS_BASE64 12322 5.85 10.37 4.28 54 XMSexyCombo_05 12285 5.96 10.87 4.27 55 XMStrtUSub 12048 3.96 3.29 4.19 56 XMSubEmpty 11815 3.45 1.53 4.11 57 RELAYCOUNTRY_META 11785 7.28 16.50 4.10 58 MISSING_SUBJECT 11514 3.35 1.44 4.00 59 XMNoSubject 11514 3.35 1.44 4.00 60 BAYES_40 11063 3.42 2.18 3.85 61 XMNumbers 10785 3.88 4.26 3.75 62 MIME_QP_LONG_LINE 10522 3.15 1.69 3.66 63 XM_UncommonTLD01 10238 4.18 5.97 3.56 64 TR_XM_DocInvoice 10213 4.58 7.58 3.55 65 RCVD_IN_IADB_LISTED 10153 2.91 1.12 3.53 66 XMSubMetaSx_00 10045 4.50 7.44 3.49 67 BAYES_80 9837 4.12 6.15 3.42 68 HTML_IMAGE_RATIO_06 9793 3.56 4.00 3.40 69 MPART_ALT_DIFF 9724 4.79 8.89 3.38 70 MIME_HTML_MOSTLY 9666 3.73 4.81 3.36 71 HTML_MIME_NO_HTML_TAG 9328 3.18 2.99 3.24 72 RCVD_IN_IADB_SPF 9043 2.58 0.96 3.14 73 DKIM_INVALID 8867 4.21 7.47 3.08 74 IN_ZIMBRA_NJ_WHITELIST 8410 2.18 0.01 2.92 75 RCVD_IN_IADB_SENDERID 8192 2.36 0.94 2.85 76 BAYES_20 8116 2.65 2.15 2.82 77 RCVD_IN_IADB_DK 8017 2.31 0.92 2.79 78 ANY_BOUNCE_MESSAGE 7641 4.18 8.60 2.66 79 T_REMOTE_IMAGE 7641 2.84 3.37 2.66 80 BOUNCE_MESSAGE 7640 4.18 8.60 2.66 81 T_TooManySym_02 7337 2.00 0.41 2.55 82 BOTNET 7286 7.50 21.90 2.53 83 INVALID_MSGID 6907 1.84 0.23 2.40 84 HTML_FONT_SIZE_HUGE 6406 1.79 0.52 2.23 85 HTTP_ESCAPED_HOST 6059 1.69 0.49 2.11 86 BAYES_05 5988 1.92 1.47 2.08 87 RCVD_IN_IADB_VOUCHED 5988 1.74 0.73 2.08 88 HTML_IMAGE_RATIO_08 5820 2.02 2.02 2.02 89 USER_IN_DEF_DKIM_WL 5553 1.44 0.02 1.93 90 US_DOLLARS_3 5299 1.61 0.95 1.84 91 BAYES_95 5218 2.16 3.17 1.81 92 RCVD_IN_MSPIKE_WL 5184 1.53 0.73 1.80 93 RCVD_IN_MSPIKE_H3 5181 1.52 0.72 1.80 94 TR_MetaPhish_Combo_01 5035 1.39 0.36 1.75 95 TM2_M_URI_OPT_OUT 4933 2.07 3.11 1.72 96 XM_CamelCaseFrm001 4924 2.04 2.98 1.71 97 SUBJ_ALL_CAPS 4808 1.90 2.58 1.67 98 XMBdyGiftCard01 4734 1.76 2.09 1.65 99 TooManyTo_002 4723 1.40 0.69 1.64 100 TR_Symld_Words 4680 1.41 0.78 1.63 101 RELAYCOUNTRY_CA 4547 2.07 3.48 1.58 102 IN_HORDE_ADDRESS_BOOK 4431 1.16 0.05 1.54 103 URI_HEX 4370 2.01 3.45 1.52 104 XM_OfRef6 4346 3.66 9.90 1.51 105 XM_DIRTYINTL 4336 2.08 3.73 1.51 106 XMStockSpam_06 4265 1.43 1.28 1.48 107 XM_SPF_SoftFail 4237 1.77 2.63 1.47 108 MAILING_LIST_MULTI 4019 1.37 1.30 1.40 109 XM_PDF 4006 1.09 0.22 1.39 110 URI_TRY_3LD 3858 1.33 1.29 1.34 111 XM_DK_Undo_01 3836 1.28 1.13 1.33 112 MIME_HTML_ONLY_MULTI 3698 1.95 3.88 1.29 113 RCVD_IN_IADB_OPTIN 3633 1.08 0.56 1.26 114 XMSubMetaI_00 3566 1.67 2.90 1.24 115 UNTRUSTED_Relay 3414 3.42 9.88 1.19 116 XMDiploma_00 3131 1.35 2.11 1.09 117 XM_GoogleGroups 2920 0.85 0.38 1.02 118 MSGID_RANDY 2855 1.02 1.10 0.99 119 T_XMDrugObfuBody_08 2847 1.19 1.75 0.99 120 URIBL_DBL_ABUSE_SPAM 2771 0.98 1.03 0.96 121 TM2_M_VERY_LONG_WORD 2743 0.98 1.04 0.95 122 T_TooManySym_03 2686 0.72 0.09 0.93 123 XM_ShortIntro_01 2652 0.88 0.74 0.92 124 XMBody_17 2617 1.02 1.34 0.91 125 XM_H_Long_From02 2498 0.99 1.36 0.87 126 XMHTMLBadTable_001 2487 0.93 1.13 0.86 127 XMBody_95 2414 0.65 0.09 0.84 128 XMPhish11 2336 0.87 1.03 0.81 129 XM_ProductURIs 2317 0.85 0.97 0.81 130 DKIM_ADSP_CUSTOM_MED 2249 1.04 1.78 0.78 131 XM_B_REG_HTML 2212 0.86 1.12 0.77 132 USER_IN_WHITELIST 2164 0.56 0.00 0.75 133 XM_H_PHPOS 2135 0.78 0.90 0.74 134 TM2_M_A_HREF_HREF 2042 0.78 0.99 0.71 135 XM_shorewaves_Whitelist 2016 0.52 0.00 0.70 136 XMPhish30 2006 0.90 1.48 0.70 137 FILL_THIS_FORM 1943 2.67 8.44 0.68 138 TooManyTo_003 1890 0.64 0.60 0.66 139 XMSubMetaSxObfu_02 1859 0.57 0.36 0.65 140 SUBJ_DOLLARS 1821 1.12 2.55 0.63 141 DKIM_ADSP_NXDOMAIN 1789 0.89 1.67 0.62 142 URIBL_CR_SURBL 1762 0.66 0.81 0.61 143 T_FILL_THIS_FORM_LONG 1746 0.49 0.14 0.61 144 T_XMHurry_00 1740 0.87 1.62 0.60 145 XM_H_PHPMailer 1718 0.60 0.62 0.60 146 T_FILL_THIS_FORM_LOAN 1704 2.57 8.28 0.59 147 XM_RXBody 1680 0.74 1.18 0.58 148 XM_UB50 1657 1.68 4.86 0.58 149 TooManyTo_004 1538 0.51 0.45 0.53 150 NML_ADSP_CUSTOM_MED 1500 0.83 1.74 0.52 151 XMGenDplmaNmb 1498 0.77 1.47 0.52 152 XMSexyCombo_01 1439 0.90 2.05 0.50 153 XM_B_COPY_HTML 1427 0.63 1.01 0.50 154 T_MONEY_PERCENT 1399 2.92 9.96 0.49 155 TR_LOTS_OF_MONEY2 1399 2.92 9.96 0.49 156 T_XMDrugObfuBody_00 1389 0.68 1.25 0.48 157 NO_DNS_FOR_FROM 1362 0.50 0.57 0.47 158 TooManyTo_005 1360 0.44 0.33 0.47 159 RDNS_DYNAMIC 1311 0.55 0.81 0.46 160 XMBody_78 1275 0.57 0.95 0.44 161 TVD_SPACE_RATIO 1248 0.40 0.30 0.43 162 HELO_NODOT 1242 0.37 0.18 0.43 163 HTML_FONT_FACE_BAD 1196 0.48 0.67 0.42 164 XM_URI_RBL 1190 0.70 1.53 0.41 165 T_FILL_THIS_FORM_SHORT 1188 0.44 0.50 0.41 166 URI_NOVOWEL 1175 0.49 0.72 0.41 167 TR_XM_RelayPhish 1144 0.58 1.11 0.40 168 XM_H_PHPOS_M 1125 0.39 0.39 0.39 169 T_TooManySym_04 1125 0.30 0.03 0.39 170 URIBL_SBL_A 1120 0.38 0.36 0.39 171 DIET_1 1119 0.66 1.43 0.39 172 RELAYCOUNTRY_GB 1107 0.49 0.79 0.38 173 XMBrknScrpt_02 1105 0.41 0.48 0.38 174 XMNoVowels 1098 0.35 0.26 0.38 175 XMHTML_After_End 1076 0.36 0.33 0.37 176 FORGED_GMAIL_RCVD 1070 0.55 1.07 0.37 177 XMLngstWrd_00 1069 0.56 1.10 0.37 178 XMSubMetaSxObfu_03 1039 0.45 0.72 0.36 179 XMPhish14 1013 0.49 0.89 0.35 180 XMLngstWrd_01 988 0.53 1.08 0.34 181 XM_Walgreens_Forge 966 0.30 0.20 0.34 182 HTTPS_HTTP_MISMATCH 957 0.33 0.32 0.33 183 SpammyFromTLD_01 929 0.59 1.38 0.32 184 XM_D_tchamptons_WL 881 0.23 0.00 0.31 185 XMGappySubj_01 880 0.31 0.34 0.31 186 RELAYCOUNTRY_AU 874 0.36 0.50 0.30 187 XM_Akamai 865 0.23 0.03 0.30 188 HTML_TAG_BALANCE_BODY 861 0.41 0.72 0.30 189 XMSubGiftCard1 845 0.26 0.14 0.29 190 RELAYCOUNTRY_AT 839 0.72 1.97 0.29 191 XMDateMe_00 839 0.27 0.19 0.29 192 TR_Orig_Subnet 838 0.25 0.15 0.29 193 T_Symld_Words_02 827 0.34 0.50 0.29 194 XMSubject_48 827 0.29 0.28 0.29 195 RELAYCOUNTRY_DE 818 0.49 1.09 0.28 196 XMRcvdHeader_15 800 0.21 0.00 0.28 197 XMCapTrack 788 0.24 0.14 0.27 198 MPART_ALT_DIFF_COUNT 749 0.46 1.05 0.26 199 RCVD_IN_BL_SPAMCOP_NET 745 0.63 1.72 0.26 200 XM_Lotto 741 0.31 0.46 0.26 ----------------------------------------------------------------------