Email: 369505 Autolearn: 0 AvgScore: 2.93 AvgScanTime: 2.02 sec Spam: 106086 Autolearn: 0 AvgScore: 13.05 AvgScanTime: 2.44 sec Ham: 263419 Autolearn: 0 AvgScore: -1.15 AvgScanTime: 1.85 sec Time Spent Running SA: 207.47 hours Time Spent Processing Spam: 72.00 hours Time Spent Processing Ham: 135.47 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 98739 87.75 93.07 85.60 2 DCC_CHECK 80013 55.41 75.42 47.34 3 DKIM_SIGNED 79690 72.89 75.12 71.99 4 XMListUnsubscribeExists 78203 58.15 73.72 51.89 5 XM_DK_Pass 74416 70.75 70.15 71.00 6 DKIM_VALID 70503 67.63 66.46 68.10 7 DKIM_VALID_AU 60325 55.91 56.86 55.53 8 XM_H_QuotedFrom 55343 40.36 52.17 35.60 9 XM_DK_Undo_02 46724 25.35 44.04 17.82 10 BAYES_99 42845 23.03 40.39 16.04 11 MIME_HTML_ONLY 40315 30.82 38.00 27.93 12 HTML_FONT_LOW_CONTRAST 37052 32.40 34.93 31.38 13 BAYES_999 36875 20.26 34.76 14.42 14 BAYES_50 36821 46.83 34.71 51.71 15 LOC_TINY_FONT_1 35625 28.87 33.58 26.97 16 TR_DCC_Bayes_99 34009 15.57 32.06 8.93 17 RELAYCOUNTRY_META 28726 10.54 27.08 3.88 18 BOTNET 27432 8.92 25.86 2.10 19 FVGT_m_MULTI_ODD 27216 22.26 25.65 20.89 20 DCC_CHECK_NEGATIVE 24664 43.48 23.25 51.63 21 XMSubLong 21996 21.53 20.73 21.85 22 XM_Body_Dirty_Words 20654 14.98 19.47 13.17 23 T_TM2_M_HEADER_IN_MSG 20338 21.47 19.17 22.40 24 BOTNET_IPINHOSTNAME 19754 9.90 18.62 6.39 25 XM_Multi_Part_URI 19297 14.12 18.19 12.47 26 T_KAM_HTML_FONT_INVALID 18572 14.15 17.51 12.79 27 UNTRUSTED_Relay 18036 5.88 17.00 1.40 28 HTML_IMAGE_RATIO_02 17181 12.48 16.20 10.98 29 DKIM_VALID_EF 16305 23.19 15.37 26.33 30 MultiRelay 15419 13.87 14.53 13.60 31 FSL_BULK_SIG 14650 11.36 13.81 10.38 32 XM_Evil_Numbers_Gen 13723 10.48 12.94 9.50 33 LOTS_OF_MONEY 12573 8.92 11.85 7.74 34 XM_UncommonTLD01 11963 6.29 11.28 4.28 35 XMSexyCombo_05 11839 6.52 11.16 4.65 36 DKIM_INVALID 9187 5.26 8.66 3.89 37 HTML_IMAGE_RATIO_04 9012 6.92 8.49 6.28 38 DKIM_ADSP_NXDOMAIN 8971 2.95 8.46 0.74 39 XM_UB50 8751 2.95 8.25 0.82 40 FROM_EXCESS_BASE64 8736 11.45 8.23 12.74 41 XM_B_Phish_Phrases 8317 6.69 7.84 6.22 42 TooManyTo_001 7890 6.20 7.44 5.70 43 HTML_MIME_NO_HTML_TAG 7641 3.33 7.20 1.77 44 T_XMDrugObfuBody_14 7614 7.38 7.18 7.46 45 RELAYCOUNTRY_FR 7567 2.27 7.13 0.31 46 MPART_ALT_DIFF 7397 4.56 6.97 3.59 47 XMSubMetaSx_00 7392 5.11 6.97 4.36 48 HTML_IMAGE_RATIO_06 7129 4.00 6.72 2.91 49 BAYES_80 7035 4.83 6.63 4.10 50 T_REMOTE_IMAGE 7025 3.93 6.62 2.84 51 XM_H_Long_From01 6430 5.72 6.06 5.58 52 XMMoneyMeta_00 6152 1.92 5.80 0.35 53 PDS_TO_EQ_FROM_NAME 6085 1.75 5.74 0.15 54 XMStrtUSub 5987 5.22 5.64 5.05 55 URIBL_DBL_ABUSE_REDIR 5977 1.72 5.63 0.15 56 BAYES_60 5905 6.00 5.57 6.18 57 RCVD_IN_RP_SAFE 5802 12.17 5.47 14.86 58 LotsOfNums_01 5650 6.73 5.33 7.29 59 XMNumbers 5413 9.52 5.10 11.29 60 SpammyFromTLD_02 5396 1.61 5.09 0.21 61 ALL_TRUSTED 5001 18.10 4.71 23.48 62 XM_SPF_SoftFail 4898 2.61 4.62 1.81 63 RCVD_IN_RP_CERTIFIED 4884 10.80 4.60 13.30 64 XM_DIRTYINTL 4790 3.04 4.52 2.45 65 XMBdyGiftCard01 4734 2.38 4.46 1.55 66 BAYES_40 4716 3.48 4.45 3.09 67 AMAZON_IMG_NOT_RCVD_AMZN 4568 1.28 4.31 0.06 68 XM_DrugUnitList 4533 1.23 4.27 0.01 69 RELAYCOUNTRY_DE 4498 1.41 4.24 0.27 70 RELAYCOUNTRY_CA 4495 2.18 4.24 1.36 71 MIME_QP_LONG_LINE 4441 4.01 4.19 3.94 72 MIME_HTML_MOSTLY 4367 3.48 4.12 3.23 73 XM_URI_RBL 4308 1.71 4.06 0.76 74 BOTNET_NORDNS 4297 1.17 4.05 0.01 75 MIME_HTML_ONLY_MULTI 4261 2.29 4.02 1.59 76 FROM_SUSPICIOUS_NTLD 4229 1.20 3.99 0.08 77 HOSTED_IMG_DIRECT_MX 3895 1.05 3.67 0.00 78 XM_OfRef6 3749 1.89 3.53 1.23 79 URI_HEX 3680 2.09 3.47 1.54 80 BAYES_95 3608 2.81 3.40 2.57 81 RELAYCOUNTRY_GB 3607 1.31 3.40 0.46 82 XM_CamelCaseFrm001 3523 2.05 3.32 1.53 83 TR_Mismatch_TLD_02 3402 0.96 3.21 0.06 84 HTML_IMAGE_RATIO_08 3348 2.36 3.16 2.04 85 RCVD_IN_RP_RNBL 3313 0.93 3.12 0.05 86 XM_SendGrid 3020 5.37 2.85 6.39 87 MultiRelay_Combo 2994 0.89 2.82 0.11 88 MultiRelay_CC 2994 0.89 2.82 0.11 89 TR_XM_PHPDW 2953 1.24 2.78 0.62 90 TR_XM_PHPForged 2910 1.22 2.74 0.61 91 XMDiploma_00 2906 1.72 2.74 1.31 92 TR_XM_FormFill2 2885 1.21 2.72 0.60 93 XM_H_PHPOS 2868 1.20 2.70 0.60 94 XMSubMetaI_00 2731 1.32 2.57 0.82 95 HTML_IMAGE_ONLY_16 2615 0.85 2.46 0.20 96 NO_DNS_FOR_FROM 2579 1.64 2.43 1.32 97 T_XMDrugObfuBody_08 2546 1.43 2.40 1.04 98 HTML_IMAGE_ONLY_20 2535 0.83 2.39 0.20 99 TM2_M_URI_OPT_OUT 2507 1.87 2.36 1.67 100 BAYES_20 2490 2.37 2.35 2.37 101 T_Symld_Words_02 2432 1.19 2.29 0.74 102 SUBJ_ALL_CAPS 2432 1.59 2.29 1.31 103 T_TooManySym_01 2392 6.13 2.25 7.69 104 RCVD_IN_MSPIKE_H2 2336 3.72 2.20 4.33 105 XMStockSpam_06 2244 1.66 2.12 1.48 106 UNPARSEABLE_RELAY 2244 3.61 2.12 4.21 107 XMBody_17 2215 1.15 2.09 0.78 108 TR_XM_RelayPhish 2144 1.06 2.02 0.68 109 RCVD_IN_BL_SPAMCOP_NET 2135 0.84 2.01 0.37 110 XM_H_Long_From02 2128 1.17 2.01 0.83 111 NUMERIC_HTTP_ADDR 2120 0.88 2.00 0.43 112 HTML_TAG_BALANCE_BODY 2102 1.07 1.98 0.70 113 XM_UB60 2046 0.60 1.93 0.06 114 XMSexyCombo_01 2036 1.12 1.92 0.79 115 DATE_IN_PAST_03_06 2023 0.62 1.91 0.11 116 DATE_IN_PAST_06_12 1931 0.55 1.82 0.04 117 NORMAL_HTTP_TO_IP 1875 0.53 1.77 0.03 118 TM2_M_VERY_LONG_WORD 1871 1.48 1.76 1.37 119 T_HTML_TAG_BALANCE_CENTER 1855 0.58 1.75 0.11 120 XM_RXBody 1818 1.20 1.71 1.00 121 SpammyFromTLD_01 1782 0.74 1.68 0.37 122 FILL_THIS_FORM 1691 0.88 1.59 0.60 123 NO_FM_NAME_IP_HOSTN 1682 0.46 1.59 0.00 124 XMGenDplmaNmb 1668 1.03 1.57 0.81 125 XM_H_PHPMailer 1634 0.82 1.54 0.53 126 XM_ProductURIs 1617 0.98 1.52 0.77 127 XM_B_REG_HTML 1609 0.81 1.52 0.52 128 XM_H_Undi_Recip 1553 0.57 1.46 0.21 129 FILL_THIS_FORM_LOAN 1469 0.76 1.38 0.51 130 URI_TRY_3LD 1469 1.72 1.38 1.85 131 REMOVE_BEFORE_LINK 1465 0.54 1.38 0.20 132 DKIM_ADSP_CUSTOM_MED 1464 1.00 1.38 0.85 133 DATE_IN_PAST_12_24 1452 0.41 1.37 0.02 134 FROM_DOMAIN_NOVOWEL 1439 0.42 1.36 0.04 135 XM_H_PHPOS_M 1427 0.56 1.35 0.24 136 BAYES_05 1423 1.57 1.34 1.67 137 NML_ADSP_CUSTOM_MED 1407 0.80 1.33 0.59 138 XMHTMLBadTable_001 1346 0.77 1.27 0.57 139 FILL_THIS_FORM_LONG 1342 0.73 1.27 0.52 140 XM_UB80 1334 0.37 1.26 0.02 141 TR_XM_DK_SendGrid 1323 2.87 1.25 3.52 142 FORGED_GMAIL_RCVD 1315 0.66 1.24 0.42 143 T_FILL_THIS_FORM_SHORT 1307 0.76 1.23 0.57 144 XM_UB99 1291 0.37 1.22 0.03 145 RCVD_IN_IADB_LISTED 1289 2.84 1.22 3.49 146 SUBJ_DOLLARS 1263 0.66 1.19 0.44 147 MAILING_LIST_MULTI 1259 1.56 1.19 1.71 148 XMPhish30 1241 1.01 1.17 0.94 149 XMGppyBdWords 1225 0.39 1.15 0.08 150 TR_Symld_Words 1188 1.25 1.12 1.30 151 DATE_IN_PAST_24_48 1185 0.33 1.12 0.01 152 DIET_1 1173 0.67 1.11 0.50 153 XMBrknScrpt_02 1144 0.80 1.08 0.68 154 T_XMHurry_00 1140 0.80 1.07 0.69 155 URIBL_BLACK 1106 0.35 1.04 0.07 156 RCVD_IN_IADB_SPF 1100 2.48 1.04 3.06 157 XMSubMetaSSx_00 1096 0.51 1.03 0.30 158 XMSubMetaSxObfu_03 1042 0.63 0.98 0.49 159 SHORT_URI_3 1031 0.40 0.97 0.17 160 T_MONEY_PERCENT 1019 0.52 0.96 0.35 161 BAYES_00 1019 8.79 0.96 11.95 162 TR_LOTS_OF_MONEY2 1019 0.52 0.96 0.35 163 XM_UB999 1009 0.29 0.95 0.03 164 XMBody_78 1003 0.62 0.95 0.49 165 RCVD_IN_IADB_SENDERID 1002 2.24 0.94 2.76 166 RCVD_IN_IADB_DK 982 2.18 0.93 2.68 167 TR_XM_Undi_Recip5 973 0.27 0.92 0.02 168 HK_RANDOM_REPLYTO 958 0.40 0.90 0.19 169 LongTLD 951 0.39 0.90 0.19 170 RDNS_DYNAMIC 951 0.57 0.90 0.43 171 XMSexyCombo_04 950 0.35 0.90 0.13 172 XM_OfRef7 909 0.34 0.86 0.13 173 LONG_JUNK_URI 908 0.29 0.86 0.06 174 XMPhish11 906 0.84 0.85 0.83 175 RELAYCOUNTRY_AT 904 0.40 0.85 0.22 176 DEAR_BENEFICIARY 901 0.24 0.85 0.00 177 RELAYCOUNTRY_BR 899 0.25 0.85 0.01 178 XMSlimDrugH 891 0.50 0.84 0.37 179 XM_XX_Yahoo 868 0.34 0.82 0.15 180 PLING_QUERY 865 0.80 0.82 0.79 181 TR_Sbj_FN_Bdy 863 0.33 0.81 0.14 182 TR_Caps_n_Bayes_99 849 0.32 0.80 0.13 183 RELAYCOUNTRY_IN 848 0.25 0.80 0.03 184 MONEY_FORM_SHORT 838 0.26 0.79 0.05 185 RELAYCOUNTRY_NL 798 0.36 0.75 0.20 186 TR_Mismatch_TLD_01 786 0.30 0.74 0.12 187 TM2_M_A_HREF_HREF 776 0.59 0.73 0.53 188 XMSubMetaSx_01 764 0.30 0.72 0.13 189 MPART_ALT_DIFF_COUNT 750 0.38 0.71 0.25 190 XM_DK_Undo_01 741 1.23 0.70 1.44 191 XM_HighProb1 739 0.21 0.70 0.01 192 URI_NOVOWEL 731 0.39 0.69 0.27 193 XM_BadFromFormat 729 0.27 0.69 0.11 194 XM_B_COPY_HTML 705 0.59 0.66 0.56 195 BODY_ENHANCEMENT 692 0.21 0.65 0.03 196 RCVD_IN_IADB_VOUCHED 690 1.67 0.65 2.09 197 RELAYCOUNTRY_IE 689 0.30 0.65 0.15 198 HTML_IMAGE_ONLY_32 688 0.36 0.65 0.25 199 HK_SCAM 688 0.20 0.65 0.02 200 ADVANCE_FEE_3_NEW_MONEY 688 0.19 0.65 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 225486 87.75 93.07 85.60 2 DKIM_SIGNED 189644 72.89 75.12 71.99 3 XM_DK_Pass 187022 70.75 70.15 71.00 4 DKIM_VALID 179396 67.63 66.46 68.10 5 DKIM_VALID_AU 146275 55.91 56.86 55.53 6 XMListUnsubscribeExists 136681 58.15 73.72 51.89 7 BAYES_50 136215 46.83 34.71 51.71 8 DCC_CHECK_NEGATIVE 135995 43.48 23.25 51.63 9 DCC_CHECK 124713 55.41 75.42 47.34 10 XM_H_QuotedFrom 93777 40.36 52.17 35.60 11 HTML_FONT_LOW_CONTRAST 82674 32.40 34.93 31.38 12 MIME_HTML_ONLY 73584 30.82 38.00 27.93 13 LOC_TINY_FONT_1 71057 28.87 33.58 26.97 14 DKIM_VALID_EF 69371 23.19 15.37 26.33 15 ALL_TRUSTED 61863 18.10 4.71 23.48 16 T_TM2_M_HEADER_IN_MSG 59008 21.47 19.17 22.40 17 XMSubLong 57552 21.53 20.73 21.85 18 FVGT_m_MULTI_ODD 55018 22.26 25.65 20.89 19 XM_DK_Undo_02 46935 25.35 44.04 17.82 20 BAYES_99 42249 23.03 40.39 16.04 21 RCVD_IN_RP_SAFE 39155 12.17 5.47 14.86 22 BAYES_999 37996 20.26 34.76 14.42 23 XM_DKIMWhitelistDomains 37636 10.35 0.58 14.29 24 MultiRelay 35834 13.87 14.53 13.60 25 RCVD_IN_RP_CERTIFIED 35033 10.80 4.60 13.30 26 XM_Body_Dirty_Words 34689 14.98 19.47 13.17 27 T_KAM_HTML_FONT_INVALID 33698 14.15 17.51 12.79 28 FROM_EXCESS_BASE64 33555 11.45 8.23 12.74 29 XM_Multi_Part_URI 32859 14.12 18.19 12.47 30 BAYES_00 31475 8.79 0.96 11.95 31 XMNumbers 29751 9.52 5.10 11.29 32 HTML_IMAGE_RATIO_02 28916 12.48 16.20 10.98 33 TR_XM_DK_Bayes 27885 7.68 0.47 10.59 34 FSL_BULK_SIG 27342 11.36 13.81 10.38 35 TR_XM_DK_Bayes1 26790 7.36 0.38 10.17 36 XM_Evil_Numbers_Gen 25015 10.48 12.94 9.50 37 TR_XM_DK_Bayes2 24742 6.80 0.37 9.39 38 TR_DCC_Bayes_99 23532 15.57 32.06 8.93 39 LOTS_OF_MONEY 20396 8.92 11.85 7.74 40 T_TooManySym_01 20262 6.13 2.25 7.69 41 T_XMDrugObfuBody_14 19654 7.38 7.18 7.46 42 LotsOfNums_01 19213 6.73 5.33 7.29 43 TO_MALFORMED 17751 4.89 0.30 6.74 44 BOTNET_IPINHOSTNAME 16845 9.90 18.62 6.39 45 XM_SendGrid 16828 5.37 2.85 6.39 46 HTML_IMAGE_RATIO_04 16548 6.92 8.49 6.28 47 XM_B_Phish_Phrases 16385 6.69 7.84 6.22 48 BAYES_60 16269 6.00 5.57 6.18 49 TooManyTo_001 15006 6.20 7.44 5.70 50 XM_H_Long_From01 14707 5.72 6.06 5.58 51 XMStrtUSub 13312 5.22 5.64 5.05 52 XMSexyCombo_05 12242 6.52 11.16 4.65 53 XMSubMetaSx_00 11484 5.11 6.97 4.36 54 RCVD_IN_MSPIKE_H2 11417 3.72 2.20 4.33 55 XM_UncommonTLD01 11277 6.29 11.28 4.28 56 TVD_RCVD_IP 11101 3.12 0.40 4.21 57 UNPARSEABLE_RELAY 11092 3.61 2.12 4.21 58 BAYES_80 10800 4.83 6.63 4.10 59 MIME_QP_LONG_LINE 10373 4.01 4.19 3.94 60 DKIM_INVALID 10248 5.26 8.66 3.89 61 RELAYCOUNTRY_META 10228 10.54 27.08 3.88 62 XMBody_95 10137 2.91 0.59 3.85 63 MPART_ALT_DIFF 9451 4.56 6.97 3.59 64 TR_XM_DK_SendGrid 9270 2.87 1.25 3.52 65 RCVD_IN_IADB_LISTED 9193 2.84 1.22 3.49 66 IN_ZIMBRA_NJ_WHITELIST 9083 2.46 0.02 3.45 67 MIME_HTML_MOSTLY 8508 3.48 4.12 3.23 68 BAYES_40 8134 3.48 4.45 3.09 69 RCVD_IN_IADB_SPF 8057 2.48 1.04 3.06 70 HTML_IMAGE_RATIO_06 7660 4.00 6.72 2.91 71 ANY_BOUNCE_MESSAGE 7550 2.18 0.46 2.87 72 BOUNCE_MESSAGE 7550 2.18 0.46 2.87 73 T_REMOTE_IMAGE 7485 3.93 6.62 2.84 74 RCVD_IN_IADB_SENDERID 7267 2.24 0.94 2.76 75 INVALID_MSGID 7235 2.01 0.18 2.75 76 RCVD_IN_IADB_DK 7059 2.18 0.93 2.68 77 BAYES_95 6781 2.81 3.40 2.57 78 TR_MetaPhish_Combo_01 6573 1.87 0.31 2.50 79 XM_DIRTYINTL 6460 3.04 4.52 2.45 80 RCVD_IN_MSPIKE_WL 6271 1.77 0.25 2.38 81 RCVD_IN_MSPIKE_H3 6271 1.77 0.25 2.38 82 BAYES_20 6253 2.37 2.35 2.37 83 USER_IN_DEF_DKIM_WL 5744 1.56 0.02 2.18 84 T_TooManySym_02 5731 1.70 0.50 2.18 85 BOTNET 5531 8.92 25.86 2.10 86 RCVD_IN_IADB_VOUCHED 5498 1.67 0.65 2.09 87 HTML_IMAGE_RATIO_08 5376 2.36 3.16 2.04 88 IN_HORDE_ADDRESS_BOOK 5109 1.39 0.04 1.94 89 XM_PDF 4954 1.42 0.27 1.88 90 URI_TRY_3LD 4869 1.72 1.38 1.85 91 XM_SPF_SoftFail 4764 2.61 4.62 1.81 92 HTML_MIME_NO_HTML_TAG 4662 3.33 7.20 1.77 93 MAILING_LIST_MULTI 4507 1.56 1.19 1.71 94 TM2_M_URI_OPT_OUT 4404 1.87 2.36 1.67 95 BAYES_05 4391 1.57 1.34 1.67 96 MIME_HTML_ONLY_MULTI 4195 2.29 4.02 1.59 97 XMBdyGiftCard01 4073 2.38 4.46 1.55 98 URI_HEX 4055 2.09 3.47 1.54 99 XM_CamelCaseFrm001 4037 2.05 3.32 1.53 100 XMStockSpam_06 3895 1.66 2.12 1.48 101 XM_DK_Undo_01 3786 1.23 0.70 1.44 102 UNTRUSTED_Relay 3687 5.88 17.00 1.40 103 TM2_M_VERY_LONG_WORD 3611 1.48 1.76 1.37 104 RELAYCOUNTRY_CA 3575 2.18 4.24 1.36 105 NO_DNS_FOR_FROM 3486 1.64 2.43 1.32 106 XMDiploma_00 3457 1.72 2.74 1.31 107 SUBJ_ALL_CAPS 3454 1.59 2.29 1.31 108 RCVD_IN_IADB_OPTIN 3445 1.08 0.52 1.31 109 TR_Symld_Words 3426 1.25 1.12 1.30 110 TooManyTo_002 3396 1.08 0.56 1.29 111 XM_OfRef6 3249 1.89 3.53 1.23 112 XM_GoogleGroups 3076 0.95 0.41 1.17 113 T_XMDrugObfuBody_08 2740 1.43 2.40 1.04 114 TM2_M_BODY_EMPTY 2703 0.78 0.18 1.03 115 XM_RXBody 2630 1.20 1.71 1.00 116 TooManyTo_003 2588 0.83 0.45 0.98 117 XMPhish30 2487 1.01 1.17 0.94 118 XMEmptyBody_01 2353 0.67 0.12 0.89 119 XMSubMetaSxObfu_02 2312 0.70 0.26 0.88 120 DKIM_ADSP_CUSTOM_MED 2242 1.00 1.38 0.85 121 XMPhish11 2188 0.84 0.85 0.83 122 XM_H_Long_From02 2184 1.17 2.01 0.83 123 XMSubMetaI_00 2164 1.32 2.57 0.82 124 XM_UB50 2155 2.95 8.25 0.82 125 XMGenDplmaNmb 2123 1.03 1.57 0.81 126 XMSexyCombo_01 2089 1.12 1.92 0.79 127 USER_IN_WHITELIST 2087 0.56 0.00 0.79 128 PLING_QUERY 2075 0.80 0.82 0.79 129 XMBody_17 2051 1.15 2.09 0.78 130 XM_ProductURIs 2018 0.98 1.52 0.77 131 XM_URI_RBL 2015 1.71 4.06 0.76 132 TooManyTo_004 2012 0.65 0.36 0.76 133 T_Symld_Words_02 1953 1.19 2.29 0.74 134 DKIM_ADSP_NXDOMAIN 1940 2.95 8.46 0.74 135 HTML_TAG_BALANCE_BODY 1845 1.07 1.98 0.70 136 T_XMHurry_00 1829 0.80 1.07 0.69 137 XMBrknScrpt_02 1801 0.80 1.08 0.68 138 TR_XM_RelayPhish 1784 1.06 2.02 0.68 139 TooManyTo_005 1772 0.57 0.30 0.67 140 XMAntiAgingB 1726 0.65 0.64 0.66 141 T_TooManySym_03 1664 0.48 0.11 0.63 142 T_XMDrugObfuBody_00 1632 0.63 0.64 0.62 143 TR_XM_PHPDW 1625 1.24 2.78 0.62 144 TR_XM_PHPForged 1604 1.22 2.74 0.61 145 FILL_THIS_FORM 1579 0.88 1.59 0.60 146 TR_XM_FormFill2 1578 1.21 2.72 0.60 147 XM_H_PHPOS 1568 1.20 2.70 0.60 148 NML_ADSP_CUSTOM_MED 1545 0.80 1.33 0.59 149 T_FILL_THIS_FORM_SHORT 1509 0.76 1.23 0.57 150 XMHTMLBadTable_001 1508 0.77 1.27 0.57 151 HELO_NODOT 1502 0.51 0.35 0.57 152 HTML_FONT_FACE_BAD 1477 0.57 0.60 0.56 153 XM_B_COPY_HTML 1475 0.59 0.66 0.56 154 XMLngstWrd_00 1470 0.50 0.36 0.56 155 HELO_NO_DOMAIN 1407 0.48 0.35 0.53 156 TM2_M_A_HREF_HREF 1403 0.59 0.73 0.53 157 XM_H_PHPMailer 1398 0.82 1.54 0.53 158 XM_B_REG_HTML 1372 0.81 1.52 0.52 159 FILL_THIS_FORM_LONG 1366 0.73 1.27 0.52 160 XMLngstWrd_01 1364 0.46 0.32 0.52 161 XM_shorewaves_Whitelist 1357 0.37 0.00 0.52 162 FILL_THIS_FORM_LOAN 1356 0.76 1.38 0.51 163 XM_Walgreens_Forge 1346 0.41 0.17 0.51 164 DIET_1 1308 0.67 1.11 0.50 165 XMSubMetaSxObfu_03 1300 0.63 0.98 0.49 166 XMBody_78 1279 0.62 0.95 0.49 167 RELAYCOUNTRY_GB 1223 1.31 3.40 0.46 168 SUBJ_DOLLARS 1172 0.66 1.19 0.44 169 NUMERIC_HTTP_ADDR 1145 0.88 2.00 0.43 170 RDNS_DYNAMIC 1139 0.57 0.90 0.43 171 XMRcvdHeader_15 1122 0.30 0.00 0.43 172 FORGED_GMAIL_RCVD 1115 0.66 1.24 0.42 173 MISSING_HEADERS 1070 0.38 0.33 0.41 174 ADMITS_SPAM 1064 0.35 0.22 0.40 175 XMBSHREFv2 1041 0.39 0.38 0.40 176 XMCapTrack 995 0.31 0.14 0.38 177 RCVD_IN_BL_SPAMCOP_NET 986 0.84 2.01 0.37 178 SpammyFromTLD_01 969 0.74 1.68 0.37 179 XMSlimDrugH 965 0.50 0.84 0.37 180 THIS_AD 959 0.44 0.62 0.36 181 XMMoneyMeta_00 933 1.92 5.80 0.35 182 XMLngstWrd_02 916 0.33 0.27 0.35 183 T_MONEY_PERCENT 914 0.52 0.96 0.35 184 TR_LOTS_OF_MONEY2 914 0.52 0.96 0.35 185 T_TooManySym_04 913 0.25 0.01 0.35 186 XMDateMe_00 890 0.29 0.16 0.34 187 XMNoVowels 871 0.27 0.13 0.33 188 XM_Akamai 868 0.24 0.01 0.33 189 XMUrgent 847 0.34 0.40 0.32 190 RELAYCOUNTRY_FR 822 2.27 7.13 0.31 191 XMGappySubj_01 817 0.37 0.51 0.31 192 XMSubMetaSSx_00 802 0.51 1.03 0.30 193 XM_B_TRADE_HTML 785 0.31 0.36 0.30 194 HTTPS_HTTP_MISMATCH 784 0.26 0.18 0.30 195 XMSubject_48 784 0.26 0.17 0.30 196 TR_MetaPhish_Combo_01b 782 0.23 0.07 0.30 197 XMLngstWrd_03 761 0.28 0.24 0.29 198 XMPhish14 752 0.35 0.53 0.29 199 XM_ShortIntro_01 743 0.31 0.38 0.28 200 XMSUPPORT 739 0.20 0.00 0.28 ----------------------------------------------------------------------