Email: 302536 Autolearn: 0 AvgScore: 4.13 AvgScanTime: 10.41 sec Spam: 118738 Autolearn: 0 AvgScore: 12.60 AvgScanTime: 11.36 sec Ham: 183798 Autolearn: 0 AvgScore: -1.34 AvgScanTime: 9.80 sec Time Spent Running SA: 875.13 hours Time Spent Processing Spam: 374.68 hours Time Spent Processing Ham: 500.45 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 112393 88.88 94.66 85.15 2 DKIM_SIGNED 105545 82.91 88.89 79.05 3 XM_DK_Pass 103545 81.61 87.20 78.00 4 DCC_CHECK 97651 61.02 82.24 47.31 5 XMListUnsubscribeExists 92032 61.49 77.51 51.15 6 DKIM_INVALID 69426 49.65 58.47 43.95 7 XM_H_QuotedFrom 64118 43.80 54.00 37.22 8 XM_DK_Undo_02 57850 29.88 48.72 17.71 9 BAYES_99 53470 28.08 45.03 17.13 10 LOC_TINY_FONT_1 50647 32.96 42.65 26.70 11 HTML_FONT_LOW_CONTRAST 47718 34.25 40.19 30.41 12 BAYES_999 47430 25.14 39.95 15.57 13 TR_DCC_Bayes_99 42044 19.79 35.41 9.70 14 BAYES_50 39313 45.76 33.11 53.93 15 DKIM_VALID 36119 33.26 30.42 35.09 16 MIME_HTML_ONLY 35301 24.70 29.73 21.45 17 FVGT_m_MULTI_ODD 31663 24.02 26.67 22.32 18 DKIM_VALID_AU 31350 27.37 26.40 27.99 19 XMSubLong 29761 24.58 25.06 24.27 20 HTML_IMAGE_RATIO_02 27349 14.97 23.03 9.76 21 XM_Body_Dirty_Words 27100 17.45 22.82 13.97 22 T_KAM_HTML_FONT_INVALID 20408 14.84 17.19 13.32 23 RELAYCOUNTRY_META 19933 9.63 16.79 5.00 24 DCC_CHECK_NEGATIVE 19356 37.47 16.30 51.15 25 XM_Evil_Numbers_Gen 19105 11.51 16.09 8.55 26 XM_Multi_Part_URI 18569 15.77 15.64 15.86 27 MultiRelay 17728 16.13 14.93 16.90 28 T_TM2_M_HEADER_IN_MSG 17518 20.41 14.75 24.07 29 BOTNET_IPINHOSTNAME 14706 9.02 12.39 6.85 30 HTML_IMAGE_RATIO_04 14045 9.87 11.83 8.61 31 LotsOfNums_01 13884 9.60 11.69 8.25 32 FSL_BULK_SIG 13062 10.55 11.00 10.26 33 XM_B_Phish_Phrases 12839 8.43 10.81 6.90 34 UNTRUSTED_Relay 12815 5.04 10.79 1.33 35 TooManyTo_001 12416 8.42 10.46 7.10 36 XMSexyCombo_05 12357 7.24 10.41 5.19 37 BOTNET 12219 4.77 10.29 1.20 38 T_XMDrugObfuBody_14 10748 7.70 9.05 6.82 39 FROM_EXCESS_BASE64 10608 6.04 8.93 4.17 40 XM_H_Long_From01 10076 7.14 8.49 6.27 41 TR_XM_DocInvoice 9704 6.33 8.17 5.13 42 LOTS_OF_MONEY 9221 8.87 7.77 9.58 43 XM_UncommonTLD01 8171 6.21 6.88 5.77 44 MPART_ALT_DIFF 7788 4.21 6.56 2.69 45 BAYES_80 7736 4.77 6.52 3.64 46 XMSubMetaSx_00 7603 5.58 6.40 5.04 47 T_MIXED_ES 7599 4.55 6.40 3.35 48 MIME_HTML_MOSTLY 7404 4.31 6.24 3.07 49 BAYES_60 7218 6.11 6.08 6.12 50 XMStrtUSub 7055 5.89 5.94 5.86 51 XM_UB50 5743 2.40 4.84 0.82 52 MIME_QP_LONG_LINE 5571 4.45 4.69 4.30 53 DKIM_VALID_EF 5294 7.17 4.46 8.92 54 MultiRelay_Combo 5256 1.88 4.43 0.24 55 MultiRelay_CC 5256 1.88 4.43 0.24 56 URI_HEX 5069 2.45 4.27 1.28 57 BAYES_95 4695 3.17 3.95 2.66 58 XMNumbers 4626 3.27 3.90 2.87 59 XM_DIRTYINTL 4623 2.55 3.89 1.68 60 XM_SendGrid 4463 5.36 3.76 6.40 61 T_REMOTE_IMAGE 4442 3.86 3.74 3.93 62 RCVD_IN_RP_SAFE 4400 5.88 3.71 7.28 63 HTML_IMAGE_RATIO_06 4337 3.24 3.65 2.98 64 T_TooManySym_01 4142 4.98 3.49 5.94 65 TM2_M_URI_OPT_OUT 4093 2.40 3.45 1.72 66 XMSubMetaI_00 4076 1.65 3.43 0.50 67 XM_CamelCaseFrm001 3921 2.30 3.30 1.65 68 XM_OfRef6 3844 2.43 3.24 1.91 69 RCVD_IN_RP_CERTIFIED 3428 4.97 2.89 6.31 70 HTML_IMAGE_RATIO_08 3305 2.20 2.78 1.83 71 MIME_HTML_ONLY_MULTI 3265 1.79 2.75 1.18 72 RELAYCOUNTRY_CA 3255 1.92 2.74 1.39 73 XMBdyGiftCard01 3236 1.81 2.73 1.22 74 XM_B_REG_HTML 2948 1.34 2.48 0.61 75 SUBJ_ALL_CAPS 2908 1.87 2.45 1.49 76 XM_SPF_SoftFail 2902 1.65 2.44 1.13 77 XM_UB99 2899 0.96 2.44 0.00 78 SpammyFromTLD_02 2820 1.11 2.37 0.29 79 XM_ProductURIs 2674 1.93 2.25 1.71 80 FILL_THIS_FORM 2631 0.96 2.22 0.15 81 BAYES_00 2616 5.91 2.20 8.31 82 FILL_THIS_FORM_LONG 2490 0.86 2.10 0.05 83 TooManyTo_002 2485 1.93 2.09 1.83 84 TR_XM_DK_Bayes 2382 5.10 2.01 7.09 85 BODY_ENHANCEMENT 2372 0.81 2.00 0.04 86 XM_UB999 2357 0.78 1.99 0.00 87 TooManyTo_003 2342 1.57 1.97 1.31 88 FILL_THIS_FORM_LOAN 2318 0.79 1.95 0.04 89 RELAYCOUNTRY_FR 2289 0.91 1.93 0.25 90 XMSubNoVowel 2280 0.96 1.92 0.34 91 URI_TRY_3LD 2256 1.31 1.90 0.93 92 XMPhish30 2176 1.00 1.83 0.46 93 DIET_1 2149 0.87 1.81 0.26 94 TM2_M_VERY_LONG_WORD 2126 1.37 1.79 1.11 95 RCVD_IN_RP_RNBL 2110 0.71 1.78 0.02 96 TR_XM_RelayPhish 2104 0.90 1.77 0.34 97 XMDiploma_00 2102 1.33 1.77 1.04 98 TooManyTo_004 2080 1.29 1.75 0.98 99 XMBody_17 2016 0.99 1.70 0.53 100 XMBody_78 2014 1.08 1.70 0.68 101 TR_Caps_n_Bayes_99 2010 0.93 1.69 0.43 102 XM_RXBody 1964 0.76 1.65 0.19 103 RCVD_IN_BL_SPAMCOP_NET 1927 0.70 1.62 0.11 104 TooManyTo_005 1924 1.16 1.62 0.87 105 RELAYCOUNTRY_JP 1921 0.65 1.62 0.03 106 SUBJ_DOLLARS 1916 0.70 1.61 0.12 107 RELAYCOUNTRY_DE 1868 0.80 1.57 0.31 108 XMSubEmpty 1861 0.80 1.57 0.30 109 XM_H_Long_From02 1816 1.08 1.53 0.79 110 XMSexyCombo_01 1815 1.45 1.53 1.40 111 XMBrknScrpt_02 1751 1.10 1.47 0.86 112 T_XMDrugObfuBody_08 1732 1.90 1.46 2.18 113 UNPARSEABLE_RELAY 1724 4.40 1.45 6.30 114 SpammyFromTLD_01 1689 0.81 1.42 0.41 115 BAYES_40 1685 2.76 1.42 3.63 116 XM_B_COPY_HTML 1655 0.83 1.39 0.47 117 HTML_MIME_NO_HTML_TAG 1593 1.54 1.34 1.66 118 XM_DK_Undo_01 1496 1.58 1.26 1.78 119 BOTNET_NORDNS 1486 0.50 1.25 0.01 120 XMStockSpam_06 1444 2.21 1.22 2.85 121 XMPhish14 1425 0.64 1.20 0.28 122 MAILING_LIST_MULTI 1384 2.25 1.17 2.95 123 XM_UB60 1384 0.50 1.17 0.07 124 RELAYCOUNTRY_AT 1381 0.54 1.16 0.14 125 XM_BadFromFormat 1359 0.60 1.14 0.25 126 ANY_BOUNCE_MESSAGE 1322 2.21 1.11 2.92 127 BOUNCE_MESSAGE 1322 2.21 1.11 2.91 128 RELAYCOUNTRY_CN 1302 0.48 1.10 0.08 129 BAYES_20 1283 2.23 1.08 2.98 130 T_XMHurry_00 1261 0.74 1.06 0.54 131 RELAYCOUNTRY_GB 1257 1.11 1.06 1.15 132 BODY_URI_ONLY 1244 0.54 1.05 0.21 133 XM_S_JOY_D 1240 0.76 1.04 0.58 134 REMOVE_BEFORE_LINK 1215 0.60 1.02 0.33 135 DATE_IN_PAST_03_06 1182 0.48 1.00 0.14 136 LONG_JUNK_URI2 1161 0.39 0.98 0.01 137 LONG_JUNK_URI 1149 0.46 0.97 0.14 138 T_XMDrugObfuBody_00 1140 0.66 0.96 0.46 139 XMGenDplmaNmb 1129 0.70 0.95 0.54 140 XMHTMLBadTable_001 1121 0.80 0.94 0.71 141 XM_URI_RBL 1119 0.43 0.94 0.09 142 SINGLETS_LOW_CONTRAST 1116 0.55 0.94 0.29 143 HTML_SHORT_LINK_IMG_1 1116 0.38 0.94 0.03 144 XMPhish11 1111 0.94 0.94 0.94 145 HTML_FONT_FACE_BAD 1098 0.66 0.92 0.49 146 LOW_PRICE 1093 0.51 0.92 0.24 147 RDNS_DYNAMIC 1090 0.72 0.92 0.59 148 URI_OPTOUT_3LD 1051 0.40 0.89 0.09 149 URI_WP_HACKED 1049 0.38 0.88 0.06 150 INVALID_MSGID 1049 2.55 0.88 3.62 151 T_HTML_TAG_BALANCE_CENTER 1034 0.44 0.87 0.16 152 XMSubMetaSxObfu_03 1027 1.30 0.86 1.58 153 T_FILL_THIS_FORM_SHORT 998 0.70 0.84 0.61 154 RELAYCOUNTRY_BR 960 0.34 0.81 0.04 155 RCVD_IN_PSBL 953 0.35 0.80 0.06 156 XM_UB80 949 0.32 0.80 0.02 157 XMBounce_01 938 0.33 0.79 0.03 158 XMGppyBdWords 906 0.38 0.76 0.13 159 XMEqualsVooDoo_00 875 0.30 0.74 0.02 160 TR_LOTS_OF_MONEY2 874 0.39 0.74 0.17 161 T_MONEY_PERCENT 874 0.39 0.74 0.17 162 THIS_AD 867 0.33 0.73 0.08 163 HTML_TAG_BALANCE_BODY 865 0.57 0.73 0.47 164 XMSexyCombo_04 841 0.97 0.71 1.14 165 PLING_QUERY 835 0.47 0.70 0.32 166 T_TooManySym_02 835 1.88 0.70 2.63 167 XMGappySubj_01 831 0.61 0.70 0.56 168 XM_Body_Obfu01 806 0.41 0.68 0.24 169 HTML_SHORT_CENTER 804 0.27 0.68 0.01 170 XMSubject_48 802 0.46 0.68 0.31 171 HTML_IMAGE_ONLY_04 801 0.30 0.67 0.05 172 FSL_THIS_IS_ADV 796 0.33 0.67 0.11 173 TR_XM_DK_Bayes1 794 2.08 0.67 2.99 174 ALL_TRUSTED 782 8.40 0.66 13.40 175 TR_Mismatch_TLD_02 780 0.31 0.66 0.08 176 FORGED_RELAY_MUA_TO_MX 774 0.26 0.65 0.00 177 XMHTML_After_End 769 0.48 0.65 0.37 178 URIBL_BLACK 767 0.26 0.65 0.01 179 TR_MetaPhish_Combo_01 766 0.56 0.65 0.51 180 XMMoneyMeta_00 755 0.41 0.64 0.26 181 XMClaimOffer 747 0.33 0.63 0.14 182 XMSubMetaSSx_00 742 0.34 0.62 0.15 183 RELAYCOUNTRY_VN 740 0.25 0.62 0.01 184 RCVD_IN_MSPIKE_WL 737 1.29 0.62 1.73 185 RCVD_IN_MSPIKE_H3 736 1.29 0.62 1.72 186 HEXHASH_WORD 736 0.24 0.62 0.00 187 XM_HighProb1 735 0.25 0.62 0.01 188 TR_XM_DK_Bayes2 730 1.80 0.61 2.57 189 RCVD_IN_MSPIKE_H2 730 1.45 0.61 1.99 190 BAYES_05 722 1.21 0.61 1.60 191 LONG_JUNK_URI3 722 0.29 0.61 0.08 192 MPART_ALT_DIFF_COUNT 716 0.37 0.60 0.22 193 T_Symld_Words_02 702 0.66 0.59 0.70 194 DKIM_ADSP_CUSTOM_MED 698 0.73 0.59 0.81 195 TVD_SPACE_RATIO 686 0.52 0.58 0.48 196 MONEY_BACK 660 0.29 0.56 0.11 197 LongTLD 655 0.30 0.55 0.13 198 XM_OfRef7 641 0.29 0.54 0.13 199 RELAYCOUNTRY_NL 640 0.35 0.54 0.22 200 TR_Symld_Words 635 1.26 0.53 1.73 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 156499 88.88 94.66 85.15 2 DKIM_SIGNED 145284 82.91 88.89 79.05 3 XM_DK_Pass 143367 81.61 87.20 78.00 4 BAYES_50 99129 45.76 33.11 53.93 5 XMListUnsubscribeExists 94011 61.49 77.51 51.15 6 DCC_CHECK_NEGATIVE 94010 37.47 16.30 51.15 7 DCC_CHECK 86961 61.02 82.24 47.31 8 DKIM_INVALID 80781 49.65 58.47 43.95 9 XM_H_QuotedFrom 68404 43.80 54.00 37.22 10 DKIM_VALID 64503 33.26 30.42 35.09 11 HTML_FONT_LOW_CONTRAST 55900 34.25 40.19 30.41 12 DKIM_VALID_AU 51442 27.37 26.40 27.99 13 LOC_TINY_FONT_1 49082 32.96 42.65 26.70 14 XMSubLong 44600 24.58 25.06 24.27 15 T_TM2_M_HEADER_IN_MSG 44242 20.41 14.75 24.07 16 FVGT_m_MULTI_ODD 41019 24.02 26.67 22.32 17 MIME_HTML_ONLY 39432 24.70 29.73 21.45 18 XM_DKIMWhitelistDomains 37844 12.52 0.02 20.59 19 XM_DK_Undo_02 32555 29.88 48.72 17.71 20 BAYES_99 31486 28.08 45.03 17.13 21 MultiRelay 31071 16.13 14.93 16.90 22 XM_Multi_Part_URI 29143 15.77 15.64 15.86 23 BAYES_999 28625 25.14 39.95 15.57 24 XM_Body_Dirty_Words 25680 17.45 22.82 13.97 25 ALL_TRUSTED 24635 8.40 0.66 13.40 26 T_KAM_HTML_FONT_INVALID 24482 14.84 17.19 13.32 27 FSL_BULK_SIG 18858 10.55 11.00 10.26 28 HTML_IMAGE_RATIO_02 17939 14.97 23.03 9.76 29 TR_DCC_Bayes_99 17830 19.79 35.41 9.70 30 LOTS_OF_MONEY 17600 8.87 7.77 9.58 31 DKIM_VALID_EF 16388 7.17 4.46 8.92 32 HTML_IMAGE_RATIO_04 15827 9.87 11.83 8.61 33 XM_Evil_Numbers_Gen 15717 11.51 16.09 8.55 34 BAYES_00 15274 5.91 2.20 8.31 35 LotsOfNums_01 15171 9.60 11.69 8.25 36 RCVD_IN_RP_SAFE 13386 5.88 3.71 7.28 37 TooManyTo_001 13058 8.42 10.46 7.10 38 TR_XM_DK_Bayes 13036 5.10 2.01 7.09 39 XM_B_Phish_Phrases 12675 8.43 10.81 6.90 40 BOTNET_IPINHOSTNAME 12596 9.02 12.39 6.85 41 T_XMDrugObfuBody_14 12543 7.70 9.05 6.82 42 XM_SendGrid 11762 5.36 3.76 6.40 43 RCVD_IN_RP_CERTIFIED 11593 4.97 2.89 6.31 44 UNPARSEABLE_RELAY 11576 4.40 1.45 6.30 45 XM_H_Long_From01 11532 7.14 8.49 6.27 46 BAYES_60 11252 6.11 6.08 6.12 47 T_TooManySym_01 10919 4.98 3.49 5.94 48 XMStrtUSub 10774 5.89 5.94 5.86 49 IN_ZIMBRA_NJ_WHITELIST 10659 3.53 0.03 5.80 50 XM_UncommonTLD01 10606 6.21 6.88 5.77 51 TVD_RCVD_IP 9619 3.29 0.28 5.23 52 XMSexyCombo_05 9538 7.24 10.41 5.19 53 TR_XM_DocInvoice 9437 6.33 8.17 5.13 54 XMSubMetaSx_00 9265 5.58 6.40 5.04 55 RELAYCOUNTRY_META 9193 9.63 16.79 5.00 56 MIME_QP_LONG_LINE 7901 4.45 4.69 4.30 57 FROM_EXCESS_BASE64 7671 6.04 8.93 4.17 58 T_REMOTE_IMAGE 7231 3.86 3.74 3.93 59 BAYES_80 6684 4.77 6.52 3.64 60 BAYES_40 6679 2.76 1.42 3.63 61 INVALID_MSGID 6655 2.55 0.88 3.62 62 T_MIXED_ES 6162 4.55 6.40 3.35 63 TO_MALFORMED 6002 1.99 0.00 3.27 64 IN_HORDE_ADDRESS_BOOK 5953 2.02 0.13 3.24 65 MIME_HTML_MOSTLY 5646 4.31 6.24 3.07 66 TR_XM_DK_Bayes1 5504 2.08 0.67 2.99 67 HTML_IMAGE_RATIO_06 5475 3.24 3.65 2.98 68 BAYES_20 5473 2.23 1.08 2.98 69 MAILING_LIST_MULTI 5416 2.25 1.17 2.95 70 ANY_BOUNCE_MESSAGE 5358 2.21 1.11 2.92 71 BOUNCE_MESSAGE 5357 2.21 1.11 2.91 72 XMNumbers 5280 3.27 3.90 2.87 73 XMStockSpam_06 5236 2.21 1.22 2.85 74 MPART_ALT_DIFF 4937 4.21 6.56 2.69 75 BAYES_95 4884 3.17 3.95 2.66 76 T_TooManySym_02 4839 1.88 0.70 2.63 77 TR_XM_DK_Bayes2 4717 1.80 0.61 2.57 78 T_XMDrugObfuBody_08 4005 1.90 1.46 2.18 79 RCVD_IN_MSPIKE_H2 3664 1.45 0.61 1.99 80 XM_OfRef6 3519 2.43 3.24 1.91 81 TooManyTo_002 3366 1.93 2.09 1.83 82 HTML_IMAGE_RATIO_08 3358 2.20 2.78 1.83 83 RCVD_IN_IADB_LISTED 3282 1.29 0.53 1.79 84 XM_DK_Undo_01 3273 1.58 1.26 1.78 85 TR_Symld_Words 3180 1.26 0.53 1.73 86 RCVD_IN_MSPIKE_WL 3178 1.29 0.62 1.73 87 TM2_M_URI_OPT_OUT 3159 2.40 3.45 1.72 88 RCVD_IN_MSPIKE_H3 3158 1.29 0.62 1.72 89 XM_ProductURIs 3150 1.93 2.25 1.71 90 XM_PDF 3081 1.10 0.22 1.68 91 XM_DIRTYINTL 3081 2.55 3.89 1.68 92 HTML_MIME_NO_HTML_TAG 3059 1.54 1.34 1.66 93 XM_CamelCaseFrm001 3039 2.30 3.30 1.65 94 BAYES_05 2937 1.21 0.61 1.60 95 XMSubMetaSxObfu_03 2909 1.30 0.86 1.58 96 RCVD_IN_IADB_SPF 2849 1.14 0.50 1.55 97 USER_IN_DEF_DKIM_WL 2769 0.92 0.01 1.51 98 SUBJ_ALL_CAPS 2738 1.87 2.45 1.49 99 T_TooManySym_03 2728 1.05 0.39 1.48 100 XM_GoogleGroups 2725 1.07 0.42 1.48 101 USER_IN_WHITELIST 2666 0.88 0.00 1.45 102 XMSexyCombo_01 2565 1.45 1.53 1.40 103 RELAYCOUNTRY_CA 2557 1.92 2.74 1.39 104 RCVD_IN_IADB_SENDERID 2550 1.03 0.47 1.39 105 XMBody_95 2536 0.89 0.14 1.38 106 RCVD_IN_IADB_DK 2470 1.00 0.47 1.34 107 UNTRUSTED_Relay 2444 5.04 10.79 1.33 108 TooManyTo_003 2399 1.57 1.97 1.31 109 URI_HEX 2355 2.45 4.27 1.28 110 XM_H_PHPOS 2352 0.98 0.52 1.28 111 XMBdyGiftCard01 2239 1.81 2.73 1.22 112 BOTNET 2204 4.77 10.29 1.20 113 MIME_HTML_ONLY_MULTI 2162 1.79 2.75 1.18 114 RELAYCOUNTRY_GB 2115 1.11 1.06 1.15 115 XMSexyCombo_04 2090 0.97 0.71 1.14 116 XM_SPF_SoftFail 2079 1.65 2.44 1.13 117 RCVD_IN_IADB_VOUCHED 2056 0.77 0.23 1.12 118 TM2_M_VERY_LONG_WORD 2032 1.37 1.79 1.11 119 XMBody_29 1951 0.73 0.21 1.06 120 XMDiploma_00 1908 1.33 1.77 1.04 121 XMSubMetaSxObfu_02 1833 0.68 0.19 1.00 122 TooManyTo_004 1809 1.29 1.75 0.98 123 XMPhish11 1727 0.94 0.94 0.94 124 URI_TRY_3LD 1711 1.31 1.90 0.93 125 T_TooManySym_04 1643 0.56 0.03 0.89 126 XM_H_PHPMailer 1614 0.69 0.41 0.88 127 TooManyTo_005 1590 1.16 1.62 0.87 128 XMBrknScrpt_02 1575 1.10 1.47 0.86 129 XMMailDelErr 1556 0.53 0.03 0.85 130 XMNoVowels 1546 0.58 0.18 0.84 131 XM_UB50 1512 2.40 4.84 0.82 132 DKIM_ADSP_CUSTOM_MED 1497 0.73 0.59 0.81 133 XM_H_Long_From02 1461 1.08 1.53 0.79 134 PRICES_ARE_AFFORDABLE 1315 0.44 0.01 0.72 135 HELO_NODOT 1300 0.47 0.11 0.71 136 XMHTMLBadTable_001 1299 0.80 0.94 0.71 137 T_Symld_Words_02 1293 0.66 0.59 0.70 138 XMBody_78 1248 1.08 1.70 0.68 139 XM_Walgreens_Forge 1141 0.38 0.01 0.62 140 T_FILL_THIS_FORM_SHORT 1116 0.70 0.84 0.61 141 XM_B_REG_HTML 1112 1.34 2.48 0.61 142 RDNS_DYNAMIC 1092 0.72 0.92 0.59 143 XMCapTrack 1066 0.47 0.29 0.58 144 XM_S_JOY_D 1060 0.76 1.04 0.58 145 TM2_M_A_HREF_HREF 1048 0.48 0.34 0.57 146 XMGappySubj_01 1022 0.61 0.70 0.56 147 XM_ShortIntro_01 1018 0.48 0.38 0.55 148 T_XMHurry_00 991 0.74 1.06 0.54 149 XMGenDplmaNmb 984 0.70 0.95 0.54 150 XMBody_17 974 0.99 1.70 0.53 151 XM_H_PHPOS_M 948 0.42 0.27 0.52 152 RCVD_IN_IADB_OPTIN 938 0.36 0.14 0.51 153 TR_MetaPhish_Combo_01 935 0.56 0.65 0.51 154 NML_ADSP_CUSTOM_MED 930 0.51 0.51 0.51 155 XMSubMetaI_00 918 1.65 3.43 0.50 156 HTML_FONT_FACE_BAD 893 0.66 0.92 0.49 157 TVD_SPACE_RATIO 891 0.52 0.58 0.48 158 XM_B_COPY_HTML 868 0.83 1.39 0.47 159 HTML_TAG_BALANCE_BODY 865 0.57 0.73 0.47 160 MISSING_HEADERS 861 0.47 0.47 0.47 161 XMPhish30 850 1.00 1.83 0.46 162 T_XMDrugObfuBody_00 845 0.66 0.96 0.46 163 TR_Caps_n_Bayes_99 795 0.93 1.69 0.43 164 TM2_M_BODY_EMPTY 770 0.34 0.21 0.42 165 SpammyFromTLD_01 758 0.81 1.42 0.41 166 T_TooManySym_05 750 0.25 0.01 0.41 167 FROM_EGROUPS 736 0.25 0.01 0.40 168 XMRcvdHeader_15 729 0.24 0.00 0.40 169 URI_NOVOWEL 719 0.41 0.44 0.39 170 XMLKML 717 0.24 0.00 0.39 171 HTML_IMAGE_ONLY_24 710 0.42 0.48 0.39 172 FORGED_GMAIL_RCVD 706 0.42 0.48 0.38 173 XMHTML_After_End 680 0.48 0.65 0.37 174 XMSubGiftCard1 657 0.24 0.07 0.36 175 XMLngstWrd_00 654 0.34 0.32 0.36 176 GAPPY_SUBJECT 645 0.28 0.16 0.35 177 RELAYCOUNTRY_AU 635 0.41 0.50 0.35 178 XMBody_106 633 0.22 0.03 0.34 179 XMSubNoVowel 633 0.96 1.92 0.34 180 TR_XM_RelayPhish 629 0.90 1.77 0.34 181 HTTPS_HTTP_MISMATCH 628 0.34 0.33 0.34 182 XMSUPPORT 618 0.20 0.00 0.34 183 XM_H_SpoofStaff4 616 0.22 0.04 0.34 184 XM_B_TRADE_HTML 616 0.41 0.52 0.34 185 REMOVE_BEFORE_LINK 615 0.60 1.02 0.33 186 XMSubGiftCard2 601 0.22 0.04 0.33 187 PLING_QUERY 592 0.47 0.70 0.32 188 HTML_IMAGE_ONLY_28 581 0.33 0.35 0.32 189 XMLngstWrd_01 578 0.31 0.30 0.31 190 XMSubject_48 578 0.46 0.68 0.31 191 XMSolicitRefs_4 575 0.21 0.05 0.31 192 RELAYCOUNTRY_DE 564 0.80 1.57 0.31 193 XM_D_tchamptons_WL 558 0.19 0.01 0.30 194 HTML_IMAGE_ONLY_32 549 0.26 0.21 0.30 195 XMSubEmpty 547 0.80 1.57 0.30 196 XMDateMe_00 541 0.22 0.11 0.29 197 SpammyFromTLD_02 539 1.11 2.37 0.29 198 SINGLETS_LOW_CONTRAST 534 0.55 0.94 0.29 199 XMPhish14 520 0.64 1.20 0.28 200 XMGappySubj_02 517 0.21 0.10 0.28 ----------------------------------------------------------------------