Email: 552149 Autolearn: 10430 AvgScore: 3.05 AvgScanTime: 2.76 sec Spam: 167764 Autolearn: 725 AvgScore: 12.26 AvgScanTime: 3.00 sec Ham: 384385 Autolearn: 9705 AvgScore: -0.97 AvgScanTime: 2.66 sec Time Spent Running SA: 423.89 hours Time Spent Processing Spam: 139.70 hours Time Spent Processing Ham: 284.18 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 159596 89.39 95.13 86.88 2 DKIM_SIGNED 145878 77.17 86.95 72.89 3 XM_DK_Pass 141779 75.53 84.51 71.62 4 DKIM_VALID 139794 73.54 83.33 69.27 5 DCC_CHECK 134216 50.43 80.00 37.52 6 XMListUnsubscribeExists 127022 55.30 75.71 46.38 7 DKIM_VALID_AU 110881 54.63 66.09 49.63 8 XM_H_QuotedFrom 93537 43.08 55.76 37.55 9 XM_DK_Undo_02 84045 25.07 50.10 14.14 10 BAYES_99 77057 22.79 45.93 12.69 11 BAYES_999 67267 20.08 40.10 11.35 12 HTML_FONT_LOW_CONTRAST 64014 30.66 38.16 27.39 13 LOC_TINY_FONT_1 61968 25.63 36.94 20.70 14 TR_DCC_Bayes_99 60260 15.50 35.92 6.59 15 BAYES_50 50921 43.47 30.35 49.20 16 T_MIXED_ES 49893 26.10 29.74 24.51 17 MIME_HTML_ONLY 48550 22.44 28.94 19.61 18 FVGT_m_MULTI_ODD 46937 22.32 27.98 19.85 19 XMSubLong 46021 22.88 27.43 20.89 20 XM_Body_Dirty_Words 34725 13.95 20.70 11.01 21 T_KAM_HTML_FONT_INVALID 33183 15.83 19.78 14.10 22 HTML_IMAGE_RATIO_02 32577 11.28 19.42 7.73 23 DKIM_VALID_EF 32358 22.18 19.29 23.44 24 T_TM2_M_HEADER_IN_MSG 31125 26.99 18.55 30.67 25 DCC_CHECK_NEGATIVE 30394 47.35 18.12 60.11 26 XM_Multi_Part_URI 28800 13.38 17.17 11.72 27 RELAYCOUNTRY_META 27651 8.86 16.48 5.54 28 MultiRelay 27544 19.13 16.42 20.32 29 XM_Evil_Numbers_Gen 24616 10.06 14.67 8.05 30 BOTNET_IPINHOSTNAME 22608 7.33 13.48 4.65 31 LOTS_OF_MONEY 20655 10.25 12.31 9.36 32 BOTNET 19317 4.55 11.51 1.51 33 XMSexyCombo_05 18050 5.63 10.76 3.39 34 UNTRUSTED_Relay 16854 4.02 10.05 1.40 35 FSL_BULK_SIG 16812 7.70 10.02 6.68 36 T_XMDrugObfuBody_14 16795 8.41 10.01 7.72 37 XM_B_Phish_Phrases 15851 6.36 9.45 5.01 38 HTML_IMAGE_RATIO_04 15843 6.03 9.44 4.54 39 LotsOfNums_01 15468 8.67 9.22 8.44 40 TR_XM_DocInvoice 13801 5.44 8.23 4.23 41 MPART_ALT_DIFF 13631 4.37 8.13 2.72 42 XM_H_Long_From01 13545 7.25 8.07 6.89 43 TooManyTo_001 13086 8.55 7.80 8.87 44 RCVD_IN_MSPIKE_H2 11898 7.88 7.09 8.22 45 RCVD_IN_RP_SAFE 11735 10.01 6.99 11.33 46 FROM_EXCESS_BASE64 11492 5.01 6.85 4.21 47 XMSubMetaSx_00 11238 5.07 6.70 4.35 48 XM_UncommonTLD01 11139 4.59 6.64 3.70 49 BAYES_80 10921 5.04 6.51 4.39 50 MIME_HTML_MOSTLY 9068 3.25 5.41 2.31 51 BAYES_60 8860 5.62 5.28 5.77 52 RCVD_IN_RP_CERTIFIED 8741 8.36 5.21 9.74 53 XM_DIRTYINTL 8140 2.68 4.85 1.73 54 XMStrtUSub 7930 4.54 4.73 4.47 55 XM_SendGrid 7656 5.01 4.56 5.21 56 MIME_QP_LONG_LINE 7384 5.06 4.40 5.35 57 BAYES_00 7295 13.05 4.35 16.84 58 XM_UB50 6752 1.83 4.02 0.87 59 TM2_M_URI_OPT_OUT 6716 2.55 4.00 1.91 60 XMNumbers 6567 2.96 3.91 2.55 61 BAYES_95 6567 3.29 3.91 3.01 62 RCVD_IN_BL_SPAMCOP_NET 6433 1.66 3.83 0.71 63 HTML_IMAGE_RATIO_06 6379 3.38 3.80 3.20 64 XM_CamelCaseFrm001 6309 2.32 3.76 1.69 65 T_TooManySym_01 6196 4.22 3.69 4.46 66 DKIM_INVALID 6084 3.62 3.63 3.62 67 RELAYCOUNTRY_CA 5775 2.01 3.44 1.39 68 TR_XM_DK_Bayes 5765 9.88 3.44 12.69 69 MIME_HTML_ONLY_MULTI 5728 1.86 3.41 1.19 70 XM_SPF_SoftFail 5707 2.42 3.40 1.99 71 URI_HEX 5513 1.68 3.29 0.98 72 T_REMOTE_IMAGE 5379 4.45 3.21 4.99 73 TR_XM_DK_Bayes1 5110 9.16 3.05 11.82 74 HTML_IMAGE_RATIO_08 5030 2.43 3.00 2.18 75 XM_OfRef6 4879 1.72 2.91 1.20 76 MultiRelay_Combo 4544 1.01 2.71 0.27 77 MultiRelay_CC 4544 1.01 2.71 0.27 78 RELAYCOUNTRY_FR 4490 1.00 2.68 0.26 79 XMBdyGiftCard01 4463 1.60 2.66 1.13 80 TR_XM_DK_Bayes2 4356 7.08 2.60 9.04 81 XMSubMetaI_00 4312 1.32 2.57 0.77 82 XM_URI_RBL 4226 0.86 2.52 0.14 83 XMDiploma_00 4115 1.82 2.45 1.54 84 XM_UB99 3804 0.69 2.27 0.01 85 RCVD_IN_IADB_LISTED 3773 4.85 2.25 5.99 86 TR_XM_RelayPhish 3730 1.10 2.22 0.61 87 T_XMHurry_00 3686 1.32 2.20 0.93 88 T_XMDrugObfuBody_08 3675 1.88 2.19 1.75 89 RCVD_IN_RP_RNBL 3580 0.67 2.13 0.03 90 SUBJ_ALL_CAPS 3399 1.92 2.03 1.87 91 XMBody_17 3391 0.92 2.02 0.44 92 RCVD_IN_IADB_SPF 3320 4.22 1.98 5.20 93 MAILING_LIST_MULTI 3197 2.52 1.91 2.79 94 SpammyFromTLD_02 3186 0.88 1.90 0.43 95 ALL_TRUSTED 3177 11.34 1.89 15.47 96 RCVD_IN_DNSWL_NONE 3163 3.11 1.89 3.65 97 RCVD_IN_IADB_SENDERID 3142 3.78 1.87 4.62 98 RCVD_IN_DNSWL_BLOCKED 3118 2.38 1.86 2.61 99 XM_UB999 3085 0.56 1.84 0.01 100 HTML_MIME_NO_HTML_TAG 3079 2.15 1.84 2.29 101 RCVD_IN_IADB_DK 3076 3.67 1.83 4.46 102 XMSexyCombo_01 2933 1.54 1.75 1.45 103 XMPhish14 2892 0.87 1.72 0.50 104 XMPhish30 2845 0.84 1.70 0.47 105 T_XMDrugObfuBody_00 2828 1.28 1.69 1.11 106 RDNS_DYNAMIC 2784 0.78 1.66 0.40 107 TR_LOTS_OF_MONEY2 2776 0.97 1.65 0.68 108 T_MONEY_PERCENT 2776 0.97 1.65 0.68 109 TM2_M_VERY_LONG_WORD 2763 1.02 1.65 0.74 110 SpammyFromTLD_01 2670 1.25 1.59 1.10 111 URIBL_BLACK 2661 0.51 1.59 0.03 112 RCVD_IN_PSBL 2635 0.52 1.57 0.07 113 XM_DK_Undo_01 2578 1.75 1.54 1.85 114 XMStockSpam_06 2480 1.19 1.48 1.06 115 XMGenDplmaNmb 2477 1.08 1.48 0.91 116 XM_H_PHPOS 2474 1.28 1.47 1.20 117 TR_LOTS_OF_MONEY3 2426 0.84 1.45 0.58 118 XM_S_JOY_D 2378 0.88 1.42 0.64 119 XM_HighProb1 2349 0.44 1.40 0.02 120 BAYES_40 2349 3.07 1.40 3.79 121 HTML_FONT_FACE_BAD 2328 0.72 1.39 0.43 122 TM2_M_BODY_EMPTY 2270 0.71 1.35 0.43 123 FSL_THIS_IS_ADV 2244 0.48 1.34 0.11 124 BAYES_20 2239 2.25 1.33 2.65 125 BODY_ENHANCEMENT 2129 0.44 1.27 0.08 126 UNPARSEABLE_RELAY 2123 2.68 1.27 3.30 127 XMEmptyBody_01 2106 0.46 1.26 0.11 128 RELAYCOUNTRY_AT 2074 0.46 1.24 0.12 129 BOTNET_NORDNS 2044 0.39 1.22 0.03 130 XM_H_Long_From02 1999 0.95 1.19 0.85 131 DIET_1 1979 0.56 1.18 0.29 132 T_Symld_Words_02 1953 0.65 1.16 0.42 133 XM_B_COPY_HTML 1946 0.81 1.16 0.66 134 URIBL_DBL_SPAM 1916 0.35 1.14 0.01 135 XMHTML_After_End 1912 0.57 1.14 0.33 136 FILL_THIS_FORM 1898 0.62 1.13 0.40 137 XMPhish11 1897 1.17 1.13 1.18 138 XM_ProductURIs 1853 1.09 1.10 1.08 139 TR_Symld_Words 1798 1.75 1.07 2.04 140 XMBrknScrpt_02 1792 0.78 1.07 0.65 141 XM_B_REG_HTML 1789 0.81 1.07 0.70 142 LOW_PRICE 1774 0.43 1.06 0.16 143 RELAYCOUNTRY_GB 1774 1.06 1.06 1.06 144 URI_TRY_3LD 1772 1.11 1.06 1.13 145 LONG_JUNK_URI 1770 0.42 1.06 0.15 146 XMMoneyMeta_00 1752 0.62 1.04 0.43 147 XMHTMLBadTable_001 1745 0.63 1.04 0.46 148 RELAYCOUNTRY_DE 1734 0.78 1.03 0.67 149 FILL_THIS_FORM_LONG 1712 0.48 1.02 0.25 150 MPART_ALT_DIFF_COUNT 1706 0.47 1.02 0.23 151 T_TooManySym_02 1698 1.55 1.01 1.78 152 DKIM_ADSP_NXDOMAIN 1695 0.52 1.01 0.31 153 RCVD_IN_IADB_VOUCHED 1692 3.12 1.01 4.05 154 NO_DNS_FOR_FROM 1670 0.80 1.00 0.72 155 RCVD_IN_MSPIKE_WL 1670 2.10 1.00 2.58 156 RCVD_IN_MSPIKE_H3 1661 2.08 0.99 2.56 157 XMBody_78 1651 0.66 0.98 0.51 158 XM_UB60 1646 0.34 0.98 0.07 159 REMOVE_BEFORE_LINK 1636 0.49 0.98 0.27 160 FILL_THIS_FORM_LOAN 1630 0.45 0.97 0.23 161 BAYES_05 1549 1.43 0.92 1.65 162 T_FILL_THIS_FORM_SHORT 1534 0.96 0.91 0.99 163 T_HTML_TAG_BALANCE_CENTER 1518 0.41 0.90 0.19 164 XM_Body_Obfu01 1512 0.51 0.90 0.34 165 XM_BadFromFormat 1510 0.43 0.90 0.23 166 TR_MetaPhish_Combo_01b 1496 0.46 0.89 0.28 167 XM_UB80 1480 0.28 0.88 0.02 168 MIME_HEADER_CTYPE_ONLY 1470 0.38 0.88 0.17 169 HTML_FONT_SIZE_HUGE 1464 0.36 0.87 0.14 170 XM_XX_Yahoo 1447 0.31 0.86 0.07 171 HTML_TAG_BALANCE_BODY 1419 0.57 0.85 0.46 172 LongTLD 1384 0.35 0.82 0.14 173 HTTPS_HTTP_MISMATCH 1378 0.62 0.82 0.53 174 LONG_JUNK_URI3 1373 0.31 0.82 0.09 175 SUBJ_DOLLARS 1371 0.36 0.82 0.16 176 XMClaimOffer 1365 0.37 0.81 0.18 177 TR_MetaPhish_Combo_01 1359 0.79 0.81 0.79 178 XMGappySubj_01 1356 1.06 0.81 1.17 179 XM_PDF 1336 3.46 0.80 4.62 180 ANY_BOUNCE_MESSAGE 1313 1.77 0.78 2.20 181 BOUNCE_MESSAGE 1313 1.77 0.78 2.20 182 RELAYCOUNTRY_CN 1302 0.28 0.78 0.06 183 TooManyTo_002 1300 2.17 0.77 2.78 184 TR_Caps_n_Bayes_99 1299 0.31 0.77 0.11 185 RELAYCOUNTRY_IT 1293 0.26 0.77 0.04 186 DATE_IN_PAST_03_06 1285 0.30 0.77 0.09 187 PLING_QUERY 1244 0.41 0.74 0.26 188 TR_Mismatch_TLD_02 1229 0.27 0.73 0.06 189 LONG_HEX_URI 1215 0.33 0.72 0.16 190 RELAYCOUNTRY_AU 1191 0.55 0.71 0.49 191 XMSubMetaI_01 1123 0.22 0.67 0.03 192 DKIM_ADSP_CUSTOM_MED 1109 0.95 0.66 1.08 193 TooManyTo_003 1064 1.45 0.63 1.81 194 XMGppyBdWords 1061 0.35 0.63 0.23 195 XMSubMetaSSx_00 1057 0.32 0.63 0.19 196 URI_NOVOWEL 1055 0.40 0.63 0.31 197 XMNoVowels 1037 0.76 0.62 0.82 198 RCVD_IN_MSPIKE_BL 1000 0.41 0.60 0.32 199 XMSubMetaD_03 974 0.20 0.58 0.03 200 XMSexyCombo_04 973 0.53 0.58 0.51 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 333960 89.39 95.13 86.88 2 DKIM_SIGNED 280189 77.17 86.95 72.89 3 XM_DK_Pass 275285 75.53 84.51 71.62 4 DKIM_VALID 266278 73.54 83.33 69.27 5 DCC_CHECK_NEGATIVE 231039 47.35 18.12 60.11 6 DKIM_VALID_AU 190773 54.63 66.09 49.63 7 BAYES_50 189105 43.47 30.35 49.20 8 XMListUnsubscribeExists 178289 55.30 75.71 46.38 9 XM_H_QuotedFrom 144322 43.08 55.76 37.55 10 DCC_CHECK 144239 50.43 80.00 37.52 11 T_TM2_M_HEADER_IN_MSG 117880 26.99 18.55 30.67 12 HTML_FONT_LOW_CONTRAST 105290 30.66 38.16 27.39 13 T_MIXED_ES 94196 26.10 29.74 24.51 14 DKIM_VALID_EF 90102 22.18 19.29 23.44 15 XMSubLong 80288 22.88 27.43 20.89 16 LOC_TINY_FONT_1 79566 25.63 36.94 20.70 17 MultiRelay 78108 19.13 16.42 20.32 18 FVGT_m_MULTI_ODD 76289 22.32 27.98 19.85 19 MIME_HTML_ONLY 75363 22.44 28.94 19.61 20 BAYES_00 64743 13.05 4.35 16.84 21 ALL_TRUSTED 59450 11.34 1.89 15.47 22 XM_DK_Undo_02 54353 25.07 50.10 14.14 23 T_KAM_HTML_FONT_INVALID 54195 15.83 19.78 14.10 24 BAYES_99 48792 22.79 45.93 12.69 25 TR_XM_DK_Bayes 48788 9.88 3.44 12.69 26 TR_XM_DK_Bayes1 45440 9.16 3.05 11.82 27 XM_Multi_Part_URI 45067 13.38 17.17 11.72 28 BAYES_999 43613 20.08 40.10 11.35 29 RCVD_IN_RP_SAFE 43548 10.01 6.99 11.33 30 XM_DKIMWhitelistDomains 42855 7.78 0.06 11.15 31 XM_Body_Dirty_Words 42311 13.95 20.70 11.01 32 RCVD_IN_RP_CERTIFIED 37446 8.36 5.21 9.74 33 LOTS_OF_MONEY 35960 10.25 12.31 9.36 34 TR_XM_DK_Bayes2 34733 7.08 2.60 9.04 35 TooManyTo_001 34105 8.55 7.80 8.87 36 LotsOfNums_01 32430 8.67 9.22 8.44 37 RCVD_IN_MSPIKE_H2 31587 7.88 7.09 8.22 38 XM_Evil_Numbers_Gen 30954 10.06 14.67 8.05 39 HTML_IMAGE_RATIO_02 29731 11.28 19.42 7.73 40 T_XMDrugObfuBody_14 29661 8.41 10.01 7.72 41 XM_H_Long_From01 26490 7.25 8.07 6.89 42 FSL_BULK_SIG 25694 7.70 10.02 6.68 43 TR_DCC_Bayes_99 25324 15.50 35.92 6.59 44 RCVD_IN_IADB_LISTED 23008 4.85 2.25 5.99 45 BAYES_60 22169 5.62 5.28 5.77 46 IN_ZIMBRA_NJ_WHITELIST 21324 3.88 0.04 5.55 47 RELAYCOUNTRY_META 21293 8.86 16.48 5.54 48 MIME_QP_LONG_LINE 20566 5.06 4.40 5.35 49 XM_SendGrid 20034 5.01 4.56 5.21 50 RCVD_IN_IADB_SPF 20000 4.22 1.98 5.20 51 XM_B_Phish_Phrases 19251 6.36 9.45 5.01 52 T_REMOTE_IMAGE 19174 4.45 3.21 4.99 53 BOTNET_IPINHOSTNAME 17886 7.33 13.48 4.65 54 XM_PDF 17762 3.46 0.80 4.62 55 RCVD_IN_IADB_SENDERID 17740 3.78 1.87 4.62 56 HTML_IMAGE_RATIO_04 17452 6.03 9.44 4.54 57 XMStrtUSub 17164 4.54 4.73 4.47 58 RCVD_IN_IADB_DK 17161 3.67 1.83 4.46 59 T_TooManySym_01 17127 4.22 3.69 4.46 60 BAYES_80 16880 5.04 6.51 4.39 61 XMSubMetaSx_00 16733 5.07 6.70 4.35 62 TR_XM_DocInvoice 16258 5.44 8.23 4.23 63 FROM_EXCESS_BASE64 16166 5.01 6.85 4.21 64 RCVD_IN_IADB_VOUCHED 15558 3.12 1.01 4.05 65 BAYES_40 14577 3.07 1.40 3.79 66 XM_UncommonTLD01 14216 4.59 6.64 3.70 67 RCVD_IN_DNSWL_NONE 14025 3.11 1.89 3.65 68 DKIM_INVALID 13911 3.62 3.63 3.62 69 XMSexyCombo_05 13027 5.63 10.76 3.39 70 UNPARSEABLE_RELAY 12693 2.68 1.27 3.30 71 HTML_IMAGE_RATIO_06 12293 3.38 3.80 3.20 72 BAYES_95 11584 3.29 3.91 3.01 73 MAILING_LIST_MULTI 10737 2.52 1.91 2.79 74 TooManyTo_002 10683 2.17 0.77 2.78 75 TVD_RCVD_IP 10483 1.98 0.26 2.73 76 MPART_ALT_DIFF 10474 4.37 8.13 2.72 77 BAYES_20 10197 2.25 1.33 2.65 78 RCVD_IN_DNSWL_BLOCKED 10043 2.38 1.86 2.61 79 RCVD_IN_MSPIKE_WL 9906 2.10 1.00 2.58 80 RCVD_IN_MSPIKE_H3 9830 2.08 0.99 2.56 81 XMNumbers 9789 2.96 3.91 2.55 82 MIME_HTML_MOSTLY 8883 3.25 5.41 2.31 83 HTML_MIME_NO_HTML_TAG 8817 2.15 1.84 2.29 84 ANY_BOUNCE_MESSAGE 8461 1.77 0.78 2.20 85 BOUNCE_MESSAGE 8456 1.77 0.78 2.20 86 HTML_IMAGE_RATIO_08 8368 2.43 3.00 2.18 87 IN_HORDE_ADDRESS_BOOK 8090 1.48 0.06 2.10 88 HELO_NODOT 7951 1.53 0.28 2.07 89 TR_Symld_Words 7847 1.75 1.07 2.04 90 XM_SPF_SoftFail 7631 2.42 3.40 1.99 91 RCVD_IN_IADB_OPTIN 7466 1.53 0.58 1.94 92 TM2_M_URI_OPT_OUT 7337 2.55 4.00 1.91 93 INVALID_MSGID 7262 1.44 0.42 1.89 94 SUBJ_ALL_CAPS 7182 1.92 2.03 1.87 95 XM_DK_Undo_01 7093 1.75 1.54 1.85 96 TooManyTo_003 6967 1.45 0.63 1.81 97 T_TooManySym_02 6854 1.55 1.01 1.78 98 T_XMDrugObfuBody_08 6709 1.88 2.19 1.75 99 XM_DIRTYINTL 6635 2.68 4.85 1.73 100 XM_CamelCaseFrm001 6481 2.32 3.76 1.69 101 BAYES_05 6338 1.43 0.92 1.65 102 HTML_IMAGE_ONLY_12 6185 1.25 0.42 1.61 103 TO_MALFORMED 6010 1.18 0.31 1.56 104 XMDiploma_00 5925 1.82 2.45 1.54 105 USER_IN_DEF_DKIM_WL 5897 1.12 0.16 1.53 106 BOTNET 5807 4.55 11.51 1.51 107 XMSexyCombo_01 5565 1.54 1.75 1.45 108 UNTRUSTED_Relay 5367 4.02 10.05 1.40 109 RELAYCOUNTRY_CA 5326 2.01 3.44 1.39 110 XM_GoogleGroups 5115 1.10 0.58 1.33 111 TooManyTo_004 4963 1.06 0.52 1.29 112 XMCapTrack 4668 1.00 0.51 1.21 113 XM_OfRef6 4622 1.72 2.91 1.20 114 XM_H_PHPOS 4613 1.28 1.47 1.20 115 MIME_HTML_ONLY_MULTI 4566 1.86 3.41 1.19 116 XMPhish11 4538 1.17 1.13 1.18 117 XMGappySubj_01 4502 1.06 0.81 1.17 118 XMBdyGiftCard01 4344 1.60 2.66 1.13 119 URI_TRY_3LD 4332 1.11 1.06 1.13 120 T_XMDrugObfuBody_00 4259 1.28 1.69 1.11 121 SpammyFromTLD_01 4219 1.25 1.59 1.10 122 DKIM_ADSP_CUSTOM_MED 4162 0.95 0.66 1.08 123 XM_ProductURIs 4151 1.09 1.10 1.08 124 RELAYCOUNTRY_GB 4089 1.06 1.06 1.06 125 XMStockSpam_06 4067 1.19 1.48 1.06 126 T_FILL_THIS_FORM_SHORT 3794 0.96 0.91 0.99 127 TooManyTo_005 3782 0.82 0.45 0.98 128 URI_HEX 3776 1.68 3.29 0.98 129 T_XMHurry_00 3589 1.32 2.20 0.93 130 XMGenDplmaNmb 3496 1.08 1.48 0.91 131 XM_UB50 3352 1.83 4.02 0.87 132 USER_IN_WHITELIST 3325 0.60 0.00 0.87 133 NML_ADSP_CUSTOM_MED 3322 0.77 0.55 0.86 134 XMSolicitRefs_0 3318 0.76 0.52 0.86 135 XM_H_Long_From02 3262 0.95 1.19 0.85 136 XMNoVowels 3133 0.76 0.62 0.82 137 TR_MetaPhish_Combo_01 3026 0.79 0.81 0.79 138 XMSubMetaI_00 2978 1.32 2.57 0.77 139 RCVD_IN_IADB_DOPTIN 2880 0.54 0.07 0.75 140 TM2_M_VERY_LONG_WORD 2852 1.02 1.65 0.74 141 XMSubMetaSxObfu_03 2782 0.68 0.58 0.72 142 NO_DNS_FOR_FROM 2769 0.80 1.00 0.72 143 T_TooManySym_03 2745 0.57 0.23 0.71 144 RCVD_IN_BL_SPAMCOP_NET 2743 1.66 3.83 0.71 145 XM_B_REG_HTML 2689 0.81 1.07 0.70 146 XMBody_95 2632 0.53 0.17 0.68 147 T_OBFU_PDF_ATTACH 2618 0.53 0.20 0.68 148 TR_LOTS_OF_MONEY2 2607 0.97 1.65 0.68 149 T_MONEY_PERCENT 2607 0.97 1.65 0.68 150 RELAYCOUNTRY_DE 2581 0.78 1.03 0.67 151 XM_ShortIntro_01 2572 0.59 0.42 0.67 152 XM_B_COPY_HTML 2524 0.81 1.16 0.66 153 XMBrknScrpt_02 2497 0.78 1.07 0.65 154 XM_S_JOY_D 2469 0.88 1.42 0.64 155 TR_XM_RelayPhish 2341 1.10 2.22 0.61 156 XMGappySubj_02 2297 0.52 0.36 0.60 157 TR_LOTS_OF_MONEY3 2229 0.84 1.45 0.58 158 XM_RXBody 2158 0.56 0.55 0.56 159 XM_USANA_RCVD 2149 0.39 0.00 0.56 160 XM_H_PHPMailer 2115 0.53 0.47 0.55 161 XMSubMetaSxObfu_02 2090 0.54 0.54 0.54 162 HTTPS_HTTP_MISMATCH 2038 0.62 0.82 0.53 163 RCVD_IN_SORBS_DUL 2030 0.43 0.22 0.53 164 SHORT_HELO_AND_INLINE_IMAGE 2014 0.38 0.05 0.52 165 XMBody_78 1977 0.66 0.98 0.51 166 XMSexyCombo_04 1963 0.53 0.58 0.51 167 XMPhish14 1927 0.87 1.72 0.50 168 MISSING_HEADERS 1900 0.41 0.23 0.49 169 XM_B_TRADE_HTML 1880 0.48 0.45 0.49 170 RELAYCOUNTRY_AU 1868 0.55 0.71 0.49 171 XMPhish30 1788 0.84 1.70 0.47 172 XMHTMLBadTable_001 1755 0.63 1.04 0.46 173 HTML_TAG_BALANCE_BODY 1751 0.57 0.85 0.46 174 TM2_M_A_HREF_HREF 1745 0.48 0.54 0.45 175 AC_DIV_BONANZA 1743 0.35 0.12 0.45 176 RELAYCOUNTRY_NL 1742 0.48 0.53 0.45 177 XMBody_17 1707 0.92 2.02 0.44 178 XMhairloss01 1706 0.33 0.08 0.44 179 HTML_IMAGE_ONLY_32 1706 0.39 0.27 0.44 180 RCVD_IN_IADB_RDNS 1689 0.32 0.05 0.44 181 HTML_IMAGE_ONLY_28 1676 0.44 0.45 0.44 182 TM2_M_BODY_EMPTY 1667 0.71 1.35 0.43 183 XMMoneyMeta_00 1664 0.62 1.04 0.43 184 HTML_FONT_FACE_BAD 1658 0.72 1.39 0.43 185 SpammyFromTLD_02 1652 0.88 1.90 0.43 186 XMRcvdHeader_15 1619 0.29 0.00 0.42 187 T_Symld_Words_02 1615 0.65 1.16 0.42 188 RDNS_DYNAMIC 1538 0.78 1.66 0.40 189 FILL_THIS_FORM 1529 0.62 1.13 0.40 190 T_MANY_PILL_PRICE 1489 0.28 0.04 0.39 191 HTML_IMAGE_ONLY_24 1446 0.40 0.45 0.38 192 XMSubNoVowel 1444 0.40 0.46 0.38 193 T_TooManySym_04 1420 0.27 0.04 0.37 194 FORGED_GMAIL_RCVD 1415 0.40 0.46 0.37 195 HTML_IMAGE_ONLY_20 1394 0.33 0.27 0.36 196 RCVD_IN_DNSWL_MED 1367 0.26 0.04 0.36 197 XMLKML 1349 0.24 0.00 0.35 198 T_HTML_ATTACH 1343 0.25 0.03 0.35 199 XMDateMe_00 1341 0.33 0.28 0.35 200 XM_H_Trusted_IP 1329 0.24 0.00 0.35 ----------------------------------------------------------------------