Email: 661447 Autolearn: 0 AvgScore: 1.90 AvgScanTime: 1.86 sec Spam: 140206 Autolearn: 0 AvgScore: 13.01 AvgScanTime: 2.23 sec Ham: 521241 Autolearn: 0 AvgScore: -1.09 AvgScanTime: 1.76 sec Time Spent Running SA: 342.42 hours Time Spent Processing Spam: 86.92 hours Time Spent Processing Ham: 255.50 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 132469 89.71 94.48 88.43 2 DCC_CHECK 100527 47.32 71.70 40.76 3 DKIM_SIGNED 95687 72.16 68.25 73.21 4 XM_DK_Pass 92747 70.71 66.15 71.94 5 DKIM_VALID 87163 67.13 62.17 68.46 6 XMListUnsubscribeExists 84249 51.18 60.09 48.79 7 DKIM_VALID_AU 70019 49.99 49.94 50.01 8 XM_H_QuotedFrom 62635 40.26 44.67 39.08 9 BAYES_50 58367 54.68 41.63 58.19 10 MIME_HTML_ONLY 57562 24.42 41.06 19.95 11 BAYES_99 48006 10.98 34.24 4.73 12 HTML_FONT_LOW_CONTRAST 47833 28.70 34.12 27.24 13 XM_DK_Undo_02 44838 11.91 31.98 6.51 14 LOC_TINY_FONT_1 40062 23.58 28.57 22.24 15 BAYES_999 39943 9.19 28.49 4.00 16 DCC_CHECK_NEGATIVE 37314 50.71 26.61 57.19 17 RELAYCOUNTRY_META 36344 9.32 25.92 4.85 18 XMSubLong 35381 21.25 25.24 20.17 19 FVGT_m_MULTI_ODD 33549 20.64 23.93 19.75 20 TR_DCC_Bayes_99 30367 6.45 21.66 2.36 21 UNTRUSTED_Relay 25898 4.83 18.47 1.16 22 BOTNET_IPINHOSTNAME 25202 7.54 17.97 4.74 23 DKIM_VALID_EF 25088 24.51 17.89 26.29 24 BOTNET 24934 5.28 17.78 1.91 25 XM_Body_Dirty_Words 24670 13.13 17.60 11.93 26 T_TM2_M_HEADER_IN_MSG 24481 27.23 17.46 29.86 27 FROM_EXCESS_BASE64 23214 6.83 16.56 4.22 28 T_KAM_HTML_FONT_INVALID 21845 16.44 15.58 16.67 29 HTML_MIME_NO_HTML_TAG 21532 5.17 15.36 2.43 30 T_REMOTE_IMAGE 21442 6.36 15.29 3.95 31 MultiRelay 19989 17.69 14.26 18.61 32 FSL_BULK_SIG 19983 8.31 14.25 6.71 33 XM_Multi_Part_URI 19833 12.53 14.15 12.09 34 BODY_URI_ONLY 18249 2.84 13.02 0.10 35 HTML_SHORT_LINK_IMG_1 18208 2.78 12.99 0.03 36 MIME_HEADER_CTYPE_ONLY 17579 2.78 12.54 0.16 37 LOTS_OF_MONEY 16975 9.35 12.11 8.61 38 MISSING_HEADERS 16872 2.92 12.03 0.47 39 HTML_IMAGE_ONLY_04 16858 2.59 12.02 0.06 40 XM_UncommonTLD01 16564 5.92 11.81 4.33 41 HTML_IMAGE_RATIO_02 16382 9.53 11.68 8.95 42 XMSexyCombo_05 16289 5.78 11.62 4.21 43 XM_Evil_Numbers_Gen 16072 10.27 11.46 9.95 44 XMSubMetaSx_00 14747 5.99 10.52 4.77 45 HTML_SHORT_CENTER 14346 2.17 10.23 0.01 46 RELAYCOUNTRY_FR 13813 2.28 9.85 0.24 47 XM_JunkDunk 12685 1.92 9.05 0.00 48 XM_H_Long_From01 12373 6.58 8.82 5.98 49 XMNumbers 12208 4.06 8.71 2.81 50 XM_UB99 11768 1.79 8.39 0.02 51 TooManyTo_001 10542 8.26 7.52 8.45 52 T_XMDrugObfuBody_14 10541 7.74 7.52 7.80 53 BAYES_80 9568 3.54 6.82 2.66 54 XM_UB999 9455 1.44 6.74 0.02 55 BAYES_60 9371 5.00 6.68 4.55 56 MPART_ALT_DIFF 9037 3.79 6.45 3.07 57 DKIM_INVALID 8524 5.03 6.08 4.75 58 HTML_IMAGE_RATIO_04 8104 5.29 5.78 5.15 59 XM_B_Phish_Phrases 8025 5.60 5.72 5.56 60 XM_UB50 7244 1.59 5.17 0.63 61 HTML_IMAGE_RATIO_06 6984 3.68 4.98 3.33 62 LotsOfNums_01 6981 8.00 4.98 8.81 63 XM_DIRTYINTL 6608 2.49 4.71 1.89 64 SpammyFromTLD_02 6184 1.11 4.41 0.22 65 MIME_HTML_ONLY_MULTI 5906 1.97 4.21 1.36 66 XM_SPF_SoftFail 5877 2.72 4.19 2.32 67 XMStrtUSub 5828 4.94 4.16 5.16 68 BAYES_95 5655 2.06 4.03 1.53 69 XM_OfRef6 5573 2.06 3.97 1.54 70 FROM_SUSPICIOUS_NTLD 5491 0.93 3.92 0.13 71 TM2_M_URI_OPT_OUT 5382 2.53 3.84 2.17 72 XM_URI_RBL 5354 1.20 3.82 0.49 73 RCVD_IN_RP_RNBL 5066 0.80 3.61 0.04 74 HTML_IMAGE_RATIO_08 5033 2.54 3.59 2.25 75 URI_HEX 4740 2.04 3.38 1.68 76 MultiRelay_CC 4616 0.82 3.29 0.16 77 MultiRelay_Combo 4616 0.82 3.29 0.16 78 XM_CamelCaseFrm001 4380 2.14 3.12 1.88 79 RELAYCOUNTRY_CA 4296 1.80 3.06 1.46 80 RELAYCOUNTRY_GB 4129 1.42 2.94 1.01 81 MIME_HTML_MOSTLY 4116 2.91 2.94 2.91 82 XMSexyCombo_01 3921 1.32 2.80 0.92 83 XM_H_Long_From02 3871 1.35 2.76 0.97 84 XM_SendGrid 3766 5.20 2.69 5.88 85 NORDNS_LOW_CONTRAST 3745 0.58 2.67 0.02 86 T_XMDrugObfuBody_08 3739 1.69 2.67 1.43 87 DIET_1 3562 0.89 2.54 0.44 88 RCVD_IN_MSPIKE_H2 3386 4.07 2.42 4.52 89 MIME_QP_LONG_LINE 3369 4.79 2.40 5.43 90 T_TooManySym_01 3344 3.85 2.39 4.24 91 XMDiploma_00 3317 1.92 2.37 1.80 92 XM_OfRef7 3229 0.68 2.30 0.24 93 XMSubMetaI_00 3099 1.13 2.21 0.84 94 RCVD_IN_RP_SAFE 3089 8.20 2.20 9.81 95 BAYES_40 2983 4.15 2.13 4.69 96 NO_DNS_FOR_FROM 2930 1.32 2.09 1.11 97 XMBdyGiftCard01 2865 1.16 2.04 0.92 98 BAYES_20 2858 3.37 2.04 3.72 99 BOTNET_NORDNS 2846 0.45 2.03 0.02 100 T_FILL_THIS_FORM_SHORT 2758 1.24 1.97 1.04 101 RCVD_IN_BL_SPAMCOP_NET 2645 0.69 1.89 0.36 102 SHORTENER_SHORT_IMG 2616 0.40 1.87 0.00 103 HTML_IMAGE_ONLY_28 2592 0.72 1.85 0.41 104 SUBJ_ALL_CAPS 2560 1.71 1.83 1.68 105 XMGenDplmaNmb 2511 1.27 1.79 1.13 106 XM_UB60 2483 0.42 1.77 0.06 107 RCVD_IN_RP_CERTIFIED 2455 6.97 1.75 8.38 108 BOUNCE_MESSAGE 2408 1.97 1.72 2.03 109 XMSlimDrugH 2408 0.70 1.72 0.43 110 ANY_BOUNCE_MESSAGE 2408 1.97 1.72 2.03 111 RELAYCOUNTRY_CN 2326 0.39 1.66 0.05 112 T_XMDrugObfuBody_00 2301 1.14 1.64 1.01 113 XM_salutation2 2299 0.96 1.64 0.78 114 XMSubMetaSSx_00 2255 0.59 1.61 0.31 115 MAILING_LIST_MULTI 2239 2.03 1.60 2.15 116 BODY_ENHANCEMENT 2188 0.35 1.56 0.03 117 UNPARSEABLE_RELAY 2157 2.39 1.54 2.61 118 XMSexyCombo_04 2154 0.72 1.54 0.50 119 XMHTML_After_End 2113 0.72 1.51 0.51 120 FILL_THIS_FORM 2092 0.66 1.49 0.44 121 XMBody_78 2044 0.68 1.46 0.47 122 TM2_M_VERY_LONG_WORD 2003 1.10 1.43 1.01 123 HTML_FONT_SIZE_LARGE 1970 0.70 1.41 0.51 124 SpammyFromTLD_01 1951 0.83 1.39 0.68 125 TR_XM_RelayPhish 1926 0.84 1.37 0.69 126 XMSubMetaSxObfu_03 1922 1.33 1.37 1.32 127 XMSubject_48 1898 0.32 1.35 0.05 128 ALL_TRUSTED 1882 14.47 1.34 18.00 129 FILL_THIS_FORM_LOAN 1873 0.53 1.34 0.32 130 MONEY_FORM_SHORT 1869 0.29 1.33 0.01 131 XM_UB95 1841 0.29 1.31 0.01 132 T_XMHurry_00 1837 0.76 1.31 0.62 133 XMGppyBdWords 1825 0.50 1.30 0.28 134 XMPhish30 1824 0.64 1.30 0.47 135 XMStockSpam_06 1801 1.36 1.28 1.38 136 RCVD_IN_IADB_LISTED 1797 4.56 1.28 5.44 137 XMWghtMeta_00 1766 0.28 1.26 0.02 138 XMBody_17 1752 0.81 1.25 0.70 139 REPLYTO_WITHOUT_TO_CC 1736 0.30 1.24 0.04 140 INVALID_DATE 1700 0.32 1.21 0.08 141 XM_H_PHPOS 1684 1.08 1.20 1.05 142 BAYES_00 1674 13.92 1.19 17.35 143 TVD_SPACE_RATIO_MINFP 1652 0.26 1.18 0.01 144 HK_RANDOM_FROM 1634 0.39 1.17 0.18 145 URIBL_BLACK 1629 0.29 1.16 0.06 146 HK_SCAM_N2 1627 0.25 1.16 0.01 147 URI_TRY_3LD 1621 1.16 1.16 1.17 148 MIME_CHARSET_FARAWAY 1576 0.32 1.12 0.10 149 DKIM_ADSP_CUSTOM_MED 1552 1.00 1.11 0.97 150 RCVD_IN_IADB_SPF 1544 4.05 1.10 4.84 151 XMPhish14 1531 0.65 1.09 0.53 152 T_Symld_Words_02 1524 0.84 1.09 0.78 153 TR_Symld_Words 1502 1.40 1.07 1.48 154 NML_ADSP_CUSTOM_MED 1495 0.78 1.07 0.71 155 XMSubGiftCard1 1492 0.56 1.06 0.42 156 XMPhish11 1490 1.13 1.06 1.14 157 RCVD_IN_IADB_SENDERID 1469 3.61 1.05 4.30 158 RCVD_IN_IADB_DK 1429 3.53 1.02 4.21 159 BAYES_05 1428 2.05 1.02 2.33 160 XMMoneyMeta_00 1400 0.71 1.00 0.63 161 FSL_THIS_IS_ADV 1393 0.43 0.99 0.28 162 MONEY_FRAUD_8 1390 0.21 0.99 0.00 163 XM_H_TOP 1384 0.21 0.99 0.00 164 LONG_HEX_URI 1381 0.37 0.98 0.20 165 FORGED_GMAIL_RCVD 1374 0.58 0.98 0.48 166 HELO_NODOT 1367 1.76 0.97 1.97 167 RELAYCOUNTRY_AT 1357 0.39 0.97 0.23 168 TR_Mismatch_TLD_02 1343 0.24 0.96 0.05 169 SUBJ_DOLLARS 1341 0.40 0.96 0.25 170 XM_PDF 1328 4.62 0.95 5.61 171 HTML_FONT_FACE_BAD 1316 0.62 0.94 0.53 172 DATE_IN_PAST_06_12 1311 0.23 0.94 0.04 173 XMBrknScrpt_02 1298 0.66 0.93 0.59 174 XMSubGiftCard2 1278 0.33 0.91 0.17 175 T_MONEY_PERCENT 1274 0.49 0.91 0.37 176 TR_LOTS_OF_MONEY2 1274 0.49 0.91 0.37 177 XM_UB80 1233 0.20 0.88 0.02 178 FORM_FRAUD_5 1219 0.18 0.87 0.00 179 TR_LOTS_OF_MONEY1 1214 0.20 0.87 0.02 180 LONG_JUNK_URI 1213 0.24 0.87 0.07 181 MONEY_FORM 1208 0.19 0.86 0.01 182 FROM_MISSP_REPLYTO 1205 0.20 0.86 0.02 183 TO_NO_BRKTS_MSFT 1188 0.18 0.85 0.00 184 XM_HighProb1 1185 0.19 0.85 0.01 185 TO_NO_BRKTS_FROM_MSSP 1182 0.19 0.84 0.02 186 FROM_MISSP_EH_MATCH 1168 0.19 0.83 0.01 187 FORGED_MUA_OUTLOOK 1162 0.19 0.83 0.02 188 XM_RXBody 1129 0.52 0.81 0.44 189 THIS_AD 1127 0.27 0.80 0.12 190 TR_XM_DK_Bayes 1121 10.94 0.80 13.66 191 FORGED_OUTLOOK_HTML 1121 0.17 0.80 0.00 192 MONEY_FROM_MISSP 1116 0.17 0.80 0.00 193 XM_H_PHPMailer 1113 0.71 0.79 0.69 194 PLING_QUERY 1110 0.50 0.79 0.42 195 RCVD_IN_IADB_VOUCHED 1108 2.85 0.79 3.41 196 XM_DK_Undo_01 1100 1.50 0.78 1.69 197 FROM_MISSPACED 1097 0.17 0.78 0.00 198 T_FILL_THIS_FORM_FRAUD_PHISH 1079 0.22 0.77 0.07 199 FROM_MISSP_MSFT 1075 0.16 0.77 0.00 200 FROM_MISSP_XPRIO 1075 0.16 0.77 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 460917 89.71 94.48 88.43 2 DKIM_SIGNED 381587 72.16 68.25 73.21 3 XM_DK_Pass 374967 70.71 66.15 71.94 4 DKIM_VALID 356853 67.13 62.17 68.46 5 BAYES_50 303316 54.68 41.63 58.19 6 DCC_CHECK_NEGATIVE 298080 50.71 26.61 57.19 7 DKIM_VALID_AU 260650 49.99 49.94 50.01 8 XMListUnsubscribeExists 254310 51.18 60.09 48.79 9 DCC_CHECK 212466 47.32 71.70 40.76 10 XM_H_QuotedFrom 203682 40.26 44.67 39.08 11 T_TM2_M_HEADER_IN_MSG 155643 27.23 17.46 29.86 12 HTML_FONT_LOW_CONTRAST 141979 28.70 34.12 27.24 13 DKIM_VALID_EF 137050 24.51 17.89 26.29 14 LOC_TINY_FONT_1 115940 23.58 28.57 22.24 15 XMSubLong 105152 21.25 25.24 20.17 16 MIME_HTML_ONLY 103992 24.42 41.06 19.95 17 FVGT_m_MULTI_ODD 102946 20.64 23.93 19.75 18 MultiRelay 97020 17.69 14.26 18.61 19 ALL_TRUSTED 93816 14.47 1.34 18.00 20 BAYES_00 90410 13.92 1.19 17.35 21 T_KAM_HTML_FONT_INVALID 86865 16.44 15.58 16.67 22 TR_XM_DK_Bayes 71214 10.94 0.80 13.66 23 TR_XM_DK_Bayes1 68129 10.44 0.66 13.07 24 XM_Multi_Part_URI 63026 12.53 14.15 12.09 25 XM_Body_Dirty_Words 62183 13.13 17.60 11.93 26 XM_DKIMWhitelistDomains 60391 9.15 0.08 11.59 27 TR_XM_DK_Bayes2 58700 8.99 0.54 11.26 28 XM_Evil_Numbers_Gen 51852 10.27 11.46 9.95 29 RCVD_IN_RP_SAFE 51144 8.20 2.20 9.81 30 HTML_IMAGE_RATIO_02 46631 9.53 11.68 8.95 31 LotsOfNums_01 45930 8.00 4.98 8.81 32 LOTS_OF_MONEY 44885 9.35 12.11 8.61 33 TooManyTo_001 44065 8.26 7.52 8.45 34 RCVD_IN_RP_CERTIFIED 43674 6.97 1.75 8.38 35 T_XMDrugObfuBody_14 40662 7.74 7.52 7.80 36 FSL_BULK_SIG 34965 8.31 14.25 6.71 37 XM_DK_Undo_02 33915 11.91 31.98 6.51 38 XM_H_Long_From01 31181 6.58 8.82 5.98 39 XM_SendGrid 30626 5.20 2.69 5.88 40 XM_PDF 29220 4.62 0.95 5.61 41 XM_B_Phish_Phrases 28995 5.60 5.72 5.56 42 RCVD_IN_IADB_LISTED 28354 4.56 1.28 5.44 43 MIME_QP_LONG_LINE 28301 4.79 2.40 5.43 44 XMStrtUSub 26873 4.94 4.16 5.16 45 HTML_IMAGE_RATIO_04 26865 5.29 5.78 5.15 46 RELAYCOUNTRY_META 25298 9.32 25.92 4.85 47 RCVD_IN_IADB_SPF 25235 4.05 1.10 4.84 48 XMSubMetaSx_00 24869 5.99 10.52 4.77 49 DKIM_INVALID 24734 5.03 6.08 4.75 50 BOTNET_IPINHOSTNAME 24690 7.54 17.97 4.74 51 BAYES_99 24653 10.98 34.24 4.73 52 BAYES_40 24449 4.15 2.13 4.69 53 BAYES_60 23705 5.00 6.68 4.55 54 RCVD_IN_MSPIKE_H2 23543 4.07 2.42 4.52 55 XM_UncommonTLD01 22567 5.92 11.81 4.33 56 RCVD_IN_IADB_SENDERID 22402 3.61 1.05 4.30 57 T_TooManySym_01 22106 3.85 2.39 4.24 58 FROM_EXCESS_BASE64 21986 6.83 16.56 4.22 59 RCVD_IN_IADB_DK 21949 3.53 1.02 4.21 60 XMSexyCombo_05 21920 5.78 11.62 4.21 61 BAYES_999 20832 9.19 28.49 4.00 62 T_REMOTE_IMAGE 20606 6.36 15.29 3.95 63 IN_ZIMBRA_NJ_WHITELIST 19815 3.00 0.02 3.80 64 BAYES_20 19407 3.37 2.04 3.72 65 RCVD_IN_IADB_VOUCHED 17765 2.85 0.79 3.41 66 HTML_IMAGE_RATIO_06 17345 3.68 4.98 3.33 67 MPART_ALT_DIFF 15999 3.79 6.45 3.07 68 MIME_HTML_MOSTLY 15150 2.91 2.94 2.91 69 XMNumbers 14621 4.06 8.71 2.81 70 BAYES_80 13875 3.54 6.82 2.66 71 UNPARSEABLE_RELAY 13626 2.39 1.54 2.61 72 HTML_MIME_NO_HTML_TAG 12668 5.17 15.36 2.43 73 TR_DCC_Bayes_99 12306 6.45 21.66 2.36 74 BAYES_05 12120 2.05 1.02 2.33 75 XM_SPF_SoftFail 12099 2.72 4.19 2.32 76 TooManyTo_002 12017 1.96 0.69 2.31 77 TVD_RCVD_IP 11776 1.85 0.34 2.26 78 HTML_IMAGE_RATIO_08 11744 2.54 3.59 2.25 79 TO_MALFORMED 11633 1.77 0.04 2.23 80 TM2_M_URI_OPT_OUT 11326 2.53 3.84 2.17 81 MAILING_LIST_MULTI 11199 2.03 1.60 2.15 82 RCVD_IN_IADB_OPTIN 11018 1.80 0.65 2.11 83 ANY_BOUNCE_MESSAGE 10607 1.97 1.72 2.03 84 BOUNCE_MESSAGE 10604 1.97 1.72 2.03 85 HELO_NODOT 10285 1.76 0.97 1.97 86 BOTNET 9971 5.28 17.78 1.91 87 XM_DIRTYINTL 9871 2.49 4.71 1.89 88 XM_CamelCaseFrm001 9779 2.14 3.12 1.88 89 XMDiploma_00 9361 1.92 2.37 1.80 90 RCVD_IN_MSPIKE_WL 9055 1.48 0.52 1.74 91 RCVD_IN_MSPIKE_H3 9037 1.48 0.52 1.73 92 IN_HORDE_ADDRESS_BOOK 8812 1.34 0.05 1.69 93 XM_DK_Undo_01 8803 1.50 0.78 1.69 94 SUBJ_ALL_CAPS 8751 1.71 1.83 1.68 95 URI_HEX 8748 2.04 3.38 1.68 96 TooManyTo_003 8191 1.36 0.55 1.57 97 XM_OfRef6 8049 2.06 3.97 1.54 98 BAYES_95 7980 2.06 4.03 1.53 99 T_TooManySym_02 7747 1.31 0.68 1.49 100 TR_Symld_Words 7740 1.40 1.07 1.48 101 RELAYCOUNTRY_CA 7593 1.80 3.06 1.46 102 T_XMDrugObfuBody_08 7433 1.69 2.67 1.43 103 XMCapTrack 7381 1.17 0.27 1.42 104 TR_MetaPhish_Combo_01 7314 1.21 0.49 1.40 105 INVALID_MSGID 7224 1.13 0.20 1.39 106 XMStockSpam_06 7181 1.36 1.28 1.38 107 MIME_HTML_ONLY_MULTI 7107 1.97 4.21 1.36 108 XMSubMetaSxObfu_03 6870 1.33 1.37 1.32 109 USER_IN_DEF_DKIM_WL 6548 0.99 0.02 1.26 110 URI_TRY_3LD 6082 1.16 1.16 1.17 111 TooManyTo_004 6067 1.00 0.39 1.16 112 UNTRUSTED_Relay 6025 4.83 18.47 1.16 113 XMPhish11 5957 1.13 1.06 1.14 114 XMGenDplmaNmb 5912 1.27 1.79 1.13 115 NO_DNS_FOR_FROM 5788 1.32 2.09 1.11 116 XM_GoogleGroups 5614 0.94 0.44 1.08 117 XM_H_PHPOS 5477 1.08 1.20 1.05 118 T_FILL_THIS_FORM_SHORT 5433 1.24 1.97 1.04 119 RELAYCOUNTRY_GB 5284 1.42 2.94 1.01 120 TM2_M_VERY_LONG_WORD 5275 1.10 1.43 1.01 121 T_XMDrugObfuBody_00 5256 1.14 1.64 1.01 122 URI_WPADMIN 5173 0.80 0.09 0.99 123 TooManyTo_005 5140 0.85 0.35 0.99 124 DKIM_ADSP_CUSTOM_MED 5066 1.00 1.11 0.97 125 XM_H_Long_From02 5045 1.35 2.76 0.97 126 XM_ProductURIs 4952 0.90 0.71 0.95 127 XMBdyGiftCard01 4821 1.16 2.04 0.92 128 XMSexyCombo_01 4793 1.32 2.80 0.92 129 T_OBFU_PDF_ATTACH 4458 0.74 0.33 0.86 130 XMSubMetaI_00 4391 1.13 2.21 0.84 131 T_Symld_Words_02 4056 0.84 1.09 0.78 132 XM_salutation2 4046 0.96 1.64 0.78 133 NML_ADSP_CUSTOM_MED 3685 0.78 1.07 0.71 134 XMBody_17 3636 0.81 1.25 0.70 135 TR_XM_RelayPhish 3607 0.84 1.37 0.69 136 XM_H_PHPMailer 3582 0.71 0.79 0.69 137 SpammyFromTLD_01 3564 0.83 1.39 0.68 138 XMBody_95 3519 0.55 0.08 0.68 139 XM_UB50 3287 1.59 5.17 0.63 140 XMMoneyMeta_00 3279 0.71 1.00 0.63 141 XM_B_REG_HTML 3268 0.59 0.47 0.63 142 T_XMHurry_00 3221 0.76 1.31 0.62 143 URI_NOVOWEL 3180 0.64 0.75 0.61 144 XMBrknScrpt_02 3087 0.66 0.93 0.59 145 XM_ShortIntro_01 3073 0.62 0.71 0.59 146 HTTPS_HTTP_MISMATCH 3066 0.60 0.66 0.59 147 XMHTMLBadTable_001 2976 0.56 0.50 0.57 148 HTML_TAG_BALANCE_BODY 2945 0.54 0.46 0.56 149 FROM_GOV_SPOOF 2902 0.48 0.18 0.56 150 XM_B_COPY_HTML 2782 0.54 0.55 0.53 151 XMPhish14 2770 0.65 1.09 0.53 152 HTML_FONT_FACE_BAD 2764 0.62 0.94 0.53 153 AC_DIV_BONANZA 2717 0.45 0.17 0.52 154 HTML_FONT_SIZE_LARGE 2654 0.70 1.41 0.51 155 XMHTML_After_End 2646 0.72 1.51 0.51 156 XMNoVowels 2643 0.51 0.52 0.51 157 T_TooManySym_03 2631 0.44 0.22 0.50 158 XMSexyCombo_04 2626 0.72 1.54 0.50 159 DKIM_ADSP_NXDOMAIN 2568 0.54 0.70 0.49 160 USER_IN_WHITELIST 2563 0.39 0.00 0.49 161 XM_URI_RBL 2559 1.20 3.82 0.49 162 FORGED_GMAIL_RCVD 2492 0.58 0.98 0.48 163 XMLngstWrd_00 2489 0.44 0.31 0.48 164 RELAYCOUNTRY_AU 2477 0.50 0.61 0.48 165 XMPhish30 2442 0.64 1.30 0.47 166 XMBody_78 2439 0.68 1.46 0.47 167 MISSING_HEADERS 2438 2.92 12.03 0.47 168 TM2_M_A_HREF_HREF 2331 0.47 0.57 0.45 169 XM_RXBody 2312 0.52 0.81 0.44 170 FILL_THIS_FORM 2304 0.66 1.49 0.44 171 DIET_1 2296 0.89 2.54 0.44 172 XMLngstWrd_01 2293 0.41 0.30 0.44 173 REMOVE_BEFORE_LINK 2284 0.42 0.33 0.44 174 XMSlimDrugH 2247 0.70 1.72 0.43 175 SHORT_HELO_AND_INLINE_IMAGE 2209 0.35 0.06 0.42 176 PLING_QUERY 2197 0.50 0.79 0.42 177 XMSubGiftCard1 2189 0.56 1.06 0.42 178 HTML_IMAGE_ONLY_32 2164 0.40 0.34 0.42 179 HTML_IMAGE_ONLY_28 2142 0.72 1.85 0.41 180 XMGappySubj_01 2141 0.47 0.71 0.41 181 T_MANY_PILL_PRICE 2099 0.33 0.06 0.40 182 RDNS_DYNAMIC 2082 0.46 0.66 0.40 183 TM2_M_BODY_EMPTY 2072 0.35 0.18 0.40 184 FROM_GOV_DKIM_AU 2046 0.34 0.13 0.39 185 RCVD_IN_SORBS_DUL 2005 0.39 0.41 0.38 186 TR_LOTS_OF_MONEY2 1942 0.49 0.91 0.37 187 T_MONEY_PERCENT 1942 0.49 0.91 0.37 188 XMDateMe_00 1922 0.35 0.28 0.37 189 XMSubMetaSxObfu_02 1917 0.34 0.25 0.37 190 RCVD_IN_BL_SPAMCOP_NET 1894 0.69 1.89 0.36 191 HTML_IMAGE_ONLY_24 1805 0.42 0.68 0.35 192 FILL_THIS_FORM_LONG 1794 0.42 0.71 0.34 193 XM_H_PHPOS_M 1786 0.35 0.40 0.34 194 TVD_SPACE_RATIO 1754 0.31 0.22 0.34 195 XMSolicitRefs_0 1661 0.32 0.33 0.32 196 FILL_THIS_FORM_LOAN 1655 0.53 1.34 0.32 197 XMSubMetaSSx_00 1640 0.59 1.61 0.31 198 XM_USANA_RCVD 1596 0.24 0.00 0.31 199 HTML_IMAGE_ONLY_16 1582 0.33 0.41 0.30 200 XM_S_JOY_D 1558 0.32 0.41 0.30 ----------------------------------------------------------------------