Email: 303061 Autolearn: 6512 AvgScore: 3.16 AvgScanTime: 2.72 sec Spam: 108629 Autolearn: 710 AvgScore: 12.43 AvgScanTime: 2.88 sec Ham: 194432 Autolearn: 5802 AvgScore: -2.02 AvgScanTime: 2.63 sec Time Spent Running SA: 229.27 hours Time Spent Processing Spam: 86.97 hours Time Spent Processing Ham: 142.30 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 102823 88.27 94.66 84.70 2 DKIM_SIGNED 96276 83.17 88.63 80.12 3 XM_DK_Pass 93922 81.84 86.46 79.26 4 DKIM_VALID 91806 79.33 84.51 76.44 5 DCC_CHECK 90115 60.69 82.96 48.25 6 XMListUnsubscribeExists 84843 62.37 78.10 53.58 7 DKIM_VALID_AU 75745 64.21 69.73 61.13 8 XM_H_QuotedFrom 60381 44.40 55.58 38.14 9 XM_DK_Undo_02 57869 32.66 53.27 21.14 10 BAYES_99 49116 29.10 45.21 20.10 11 LOC_TINY_FONT_1 44571 32.93 41.03 28.40 12 BAYES_999 43538 26.14 40.08 18.35 13 HTML_FONT_LOW_CONTRAST 41751 34.36 38.43 32.08 14 TR_DCC_Bayes_99 39868 20.52 36.70 11.47 15 BAYES_50 32451 39.93 29.87 45.55 16 MIME_HTML_ONLY 29733 24.29 27.37 22.57 17 FVGT_m_MULTI_ODD 29399 23.29 27.06 21.19 18 XMSubLong 29392 23.99 27.06 22.27 19 HTML_IMAGE_RATIO_02 25183 15.06 23.18 10.52 20 XM_Body_Dirty_Words 24648 16.23 22.69 12.61 21 T_KAM_HTML_FONT_INVALID 18684 14.58 17.20 13.12 22 T_TM2_M_HEADER_IN_MSG 18346 21.09 16.89 23.43 23 DKIM_VALID_EF 18041 23.47 16.61 27.31 24 RELAYCOUNTRY_META 17696 8.82 16.29 4.65 25 XM_Multi_Part_URI 17339 15.14 15.96 14.69 26 BOTNET_IPINHOSTNAME 17304 10.61 15.93 7.64 27 XM_Evil_Numbers_Gen 17009 11.54 15.66 9.23 28 DCC_CHECK_NEGATIVE 16645 37.69 15.32 50.19 29 MultiRelay 15333 15.16 14.12 15.75 30 BOTNET 14453 6.06 13.30 2.02 31 LotsOfNums_01 11905 9.66 10.96 8.93 32 HTML_IMAGE_RATIO_04 11729 8.13 10.80 6.64 33 FSL_BULK_SIG 11680 9.45 10.75 8.72 34 XMSexyCombo_05 11354 6.71 10.45 4.62 35 UNTRUSTED_Relay 11219 4.62 10.33 1.44 36 LOTS_OF_MONEY 10900 9.31 10.03 8.90 37 XM_B_Phish_Phrases 10845 7.66 9.98 6.36 38 XM_UncommonTLD01 9931 6.38 9.14 4.83 39 RCVD_IN_RP_SAFE 9751 14.29 8.98 17.26 40 T_XMDrugObfuBody_14 9684 7.60 8.91 6.87 41 TR_XM_DocInvoice 8834 5.88 8.13 4.63 42 XM_H_Long_From01 8465 6.77 7.79 6.20 43 TooManyTo_001 8098 7.07 7.45 6.85 44 FROM_EXCESS_BASE64 7996 6.08 7.36 5.36 45 XMSubMetaSx_00 7872 5.18 7.25 4.03 46 RCVD_IN_MSPIKE_H2 7843 8.80 7.22 9.69 47 MPART_ALT_DIFF 7678 4.57 7.07 3.17 48 RCVD_IN_RP_CERTIFIED 7320 11.89 6.74 14.76 49 BAYES_80 6578 4.75 6.06 4.02 50 BAYES_00 6347 11.96 5.84 15.38 51 MIME_HTML_MOSTLY 5960 4.09 5.49 3.32 52 RCVD_IN_BL_SPAMCOP_NET 5892 2.17 5.42 0.35 53 BAYES_60 5885 6.10 5.42 6.49 54 XMStrtUSub 5466 5.58 5.03 5.89 55 TR_XM_DK_Bayes 5174 10.25 4.76 13.31 56 XM_UB50 5009 2.17 4.61 0.80 57 URI_HEX 4560 2.27 4.20 1.19 58 XM_DIRTYINTL 4514 2.50 4.16 1.58 59 DKIM_INVALID 4470 3.84 4.11 3.69 60 MIME_QP_LONG_LINE 4276 4.06 3.94 4.13 61 XMNumbers 4163 3.30 3.83 3.00 62 T_REMOTE_IMAGE 4119 3.87 3.79 3.91 63 T_TooManySym_01 4080 4.83 3.76 5.42 64 BAYES_95 4023 3.01 3.70 2.63 65 TR_XM_DK_Bayes1 3983 8.82 3.67 11.70 66 XM_SendGrid 3954 5.07 3.64 5.86 67 TM2_M_URI_OPT_OUT 3940 2.39 3.63 1.70 68 XM_CamelCaseFrm001 3928 2.44 3.62 1.79 69 HTML_IMAGE_RATIO_06 3839 2.95 3.53 2.62 70 XM_OfRef6 3798 2.74 3.50 2.32 71 HTML_IMAGE_RATIO_08 3631 2.47 3.34 1.98 72 TR_XM_DK_Bayes2 3537 7.50 3.26 9.88 73 XMSubMetaI_00 3531 1.87 3.25 1.09 74 RELAYCOUNTRY_FR 3338 1.28 3.07 0.28 75 RELAYCOUNTRY_CA 3026 1.85 2.79 1.32 76 XMDiploma_00 2924 1.96 2.69 1.56 77 MIME_HTML_ONLY_MULTI 2865 1.70 2.64 1.17 78 XM_XX_Yahoo 2818 1.01 2.59 0.12 79 NO_DNS_FOR_FROM 2809 2.45 2.59 2.37 80 XM_SPF_SoftFail 2742 2.06 2.52 1.81 81 FILL_THIS_FORM 2715 1.52 2.50 0.98 82 XMBdyGiftCard01 2651 2.48 2.44 2.50 83 RCVD_IN_RP_RNBL 2624 0.93 2.42 0.09 84 TM2_M_VERY_LONG_WORD 2572 1.48 2.37 0.98 85 T_MIXED_ES 2445 2.35 2.25 2.40 86 XM_H_Long_From02 2350 1.42 2.16 1.00 87 SUBJ_ALL_CAPS 2337 2.12 2.15 2.10 88 XM_URI_RBL 2288 0.83 2.11 0.12 89 MultiRelay_CC 2282 0.87 2.10 0.19 90 MultiRelay_Combo 2282 0.87 2.10 0.19 91 BOTNET_NORDNS 2244 0.76 2.07 0.03 92 BODY_ENHANCEMENT 2235 0.83 2.06 0.15 93 URIBL_BLACK 2163 0.73 1.99 0.03 94 XMPhish30 2118 0.93 1.95 0.36 95 XM_UB99 2102 0.70 1.94 0.01 96 RCVD_IN_IADB_LISTED 2100 3.21 1.93 3.92 97 XMBody_17 2086 1.09 1.92 0.62 98 RCVD_IN_DNSWL_NONE 2033 3.21 1.87 3.95 99 SpammyFromTLD_02 1951 0.80 1.80 0.25 100 XM_BadFromFormat 1944 0.88 1.79 0.37 101 RCVD_IN_PSBL 1912 0.72 1.76 0.15 102 XMPhish14 1888 0.84 1.74 0.34 103 SUBJ_DOLLARS 1878 0.76 1.73 0.21 104 RCVD_IN_IADB_SPF 1856 2.86 1.71 3.50 105 T_XMHurry_00 1843 0.98 1.70 0.58 106 T_XMDrugObfuBody_08 1841 1.28 1.69 1.05 107 RCVD_IN_IADB_SENDERID 1758 2.63 1.62 3.20 108 RCVD_IN_IADB_DK 1726 2.57 1.59 3.12 109 SpammyFromTLD_01 1697 0.78 1.56 0.34 110 XM_UB999 1682 0.56 1.55 0.01 111 URIBL_DBL_SPAM 1676 0.56 1.54 0.02 112 BAYES_40 1676 2.31 1.54 2.73 113 XM_ProductURIs 1624 1.73 1.49 1.86 114 RELAYCOUNTRY_AT 1617 0.64 1.49 0.17 115 XMGenDplmaNmb 1580 1.12 1.45 0.93 116 BAYES_20 1576 1.72 1.45 1.87 117 HTML_MIME_NO_HTML_TAG 1567 1.50 1.44 1.53 118 FILL_THIS_FORM_LONG 1558 1.06 1.43 0.85 119 XMSexyCombo_01 1542 0.84 1.42 0.52 120 T_XMDrugObfuBody_00 1535 0.88 1.41 0.58 121 UNPARSEABLE_RELAY 1518 4.26 1.40 5.86 122 XMMoneyMeta_00 1507 0.65 1.39 0.24 123 TR_XM_RelayPhish 1505 0.80 1.39 0.47 124 BODY_URI_ONLY 1478 0.52 1.36 0.05 125 XM_B_REG_HTML 1464 1.41 1.35 1.45 126 MAILING_LIST_MULTI 1457 1.78 1.34 2.02 127 XM_DK_Undo_01 1441 1.58 1.33 1.73 128 XM_HighProb1 1440 0.49 1.33 0.02 129 DIET_1 1425 0.76 1.31 0.45 130 FILL_THIS_FORM_LOAN 1400 0.73 1.29 0.42 131 HTML_SHORT_LINK_IMG_1 1361 0.47 1.25 0.03 132 XMStockSpam_06 1324 1.51 1.22 1.67 133 RCVD_IN_DNSWL_BLOCKED 1278 1.61 1.18 1.85 134 XMBody_78 1274 1.10 1.17 1.05 135 XM_B_COPY_HTML 1234 0.90 1.14 0.77 136 XMGppyBdWords 1230 0.49 1.13 0.13 137 HTML_FONT_FACE_BAD 1219 0.66 1.12 0.40 138 LONG_JUNK_URI 1213 0.46 1.12 0.09 139 LOW_PRICE 1212 0.55 1.12 0.23 140 T_MONEY_PERCENT 1209 0.79 1.11 0.61 141 TR_LOTS_OF_MONEY2 1209 0.79 1.11 0.61 142 XM_UB60 1171 0.43 1.08 0.07 143 HTML_IMAGE_ONLY_08 1167 0.46 1.07 0.12 144 XMSubject_09 1147 0.48 1.06 0.16 145 XM_S_JOY_D 1143 1.40 1.05 1.59 146 TR_Caps_n_Bayes_99 1128 0.40 1.04 0.04 147 HTML_FONT_SIZE_HUGE 1124 0.49 1.03 0.18 148 FSL_THIS_IS_ADV 1106 0.44 1.02 0.11 149 T_HTML_TAG_BALANCE_CENTER 1104 0.50 1.02 0.22 150 XMPhish11 1099 1.02 1.01 1.03 151 TR_Mismatch_TLD_02 1077 0.40 0.99 0.07 152 XM_Body_Obfu01 1072 0.48 0.99 0.20 153 XMHTMLBadTable_001 1067 0.78 0.98 0.66 154 HDRS_LCASE_IMGONLY 1064 0.37 0.98 0.03 155 MPART_ALT_DIFF_COUNT 1058 0.56 0.97 0.33 156 XMSubMetaSSx_00 1050 0.46 0.97 0.17 157 RELAYCOUNTRY_DE 1044 0.70 0.96 0.55 158 RDNS_DYNAMIC 1036 0.70 0.95 0.56 159 RDNS_NONE 1010 0.36 0.93 0.05 160 T_Symld_Words_02 1010 0.61 0.93 0.43 161 XMBrknScrpt_02 995 0.93 0.92 0.94 162 XM_H_PHPOS 989 1.14 0.91 1.26 163 DATE_IN_PAST_03_06 985 0.41 0.91 0.13 164 BAYES_05 977 1.12 0.90 1.24 165 ALL_TRUSTED 967 8.81 0.89 13.23 166 XMClaimOffer 963 0.41 0.89 0.14 167 DKIM_ADSP_NXDOMAIN 944 0.63 0.87 0.49 168 LONG_JUNK_URI3 933 0.39 0.86 0.13 169 T_FILL_THIS_FORM_SHORT 932 1.04 0.86 1.15 170 RELAYCOUNTRY_CN 911 0.35 0.84 0.07 171 PLING_QUERY 907 0.79 0.83 0.76 172 XMSubMetaSx_01 877 0.40 0.81 0.18 173 RCVD_IN_MSPIKE_H3 866 1.28 0.80 1.55 174 RCVD_IN_MSPIKE_WL 866 1.28 0.80 1.55 175 RCVD_IN_IADB_VOUCHED 861 1.78 0.79 2.34 176 LongTLD 857 0.39 0.79 0.17 177 URI_TRY_3LD 835 0.88 0.77 0.94 178 HTML_TAG_BALANCE_BODY 823 0.56 0.76 0.44 179 XMSubMetaSxObfu_02 811 0.90 0.75 0.99 180 XM_RXBody 808 0.43 0.74 0.25 181 RELAYCOUNTRY_NL 803 0.45 0.74 0.29 182 TR_MetaPhish_Combo_01 794 0.60 0.73 0.53 183 XMSolicitRefs_4 780 0.34 0.72 0.13 184 BASE64_LENGTH_79_INF 770 0.36 0.71 0.17 185 XMSexyCombo_04 766 0.31 0.71 0.09 186 RELAYCOUNTRY_GB 765 0.67 0.70 0.65 187 RELAYCOUNTRY_KR 762 0.27 0.70 0.03 188 XM_UB80 758 0.26 0.70 0.02 189 TR_Symld_Words 755 1.86 0.70 2.51 190 LONG_JUNK_URI2 750 0.26 0.69 0.01 191 XMSolicitRefs_5 749 0.33 0.69 0.13 192 XMHTML_After_End 749 0.44 0.69 0.30 193 DKIM_ADSP_CUSTOM_MED 708 0.92 0.65 1.07 194 XM_B_TRADE_HTML 687 0.46 0.63 0.36 195 HTML_TITLE_SUBJ_DIFF 685 0.26 0.63 0.06 196 RCVD_IN_MSPIKE_BL 674 0.27 0.62 0.07 197 XMSubMetaD_03 662 0.25 0.61 0.05 198 XM_OfRef7 657 1.00 0.60 1.22 199 XMGetyour 636 0.28 0.59 0.11 200 RCVD_IN_MSPIKE_L5 626 0.22 0.58 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 164685 88.27 94.66 84.70 2 DKIM_SIGNED 155785 83.17 88.63 80.12 3 XM_DK_Pass 154104 81.84 86.46 79.26 4 DKIM_VALID 148619 79.33 84.51 76.44 5 DKIM_VALID_AU 118859 64.21 69.73 61.13 6 XMListUnsubscribeExists 104186 62.37 78.10 53.58 7 DCC_CHECK_NEGATIVE 97577 37.69 15.32 50.19 8 DCC_CHECK 93807 60.69 82.96 48.25 9 BAYES_50 88563 39.93 29.87 45.55 10 XM_H_QuotedFrom 74164 44.40 55.58 38.14 11 HTML_FONT_LOW_CONTRAST 62378 34.36 38.43 32.08 12 LOC_TINY_FONT_1 55224 32.93 41.03 28.40 13 DKIM_VALID_EF 53095 23.47 16.61 27.31 14 T_TM2_M_HEADER_IN_MSG 45560 21.09 16.89 23.43 15 MIME_HTML_ONLY 43893 24.29 27.37 22.57 16 XMSubLong 43307 23.99 27.06 22.27 17 FVGT_m_MULTI_ODD 41192 23.29 27.06 21.19 18 XM_DK_Undo_02 41101 32.66 53.27 21.14 19 BAYES_99 39082 29.10 45.21 20.10 20 XM_DKIMWhitelistDomains 36042 11.90 0.03 18.54 21 BAYES_999 35680 26.14 40.08 18.35 22 RCVD_IN_RP_SAFE 33562 14.29 8.98 17.26 23 MultiRelay 30615 15.16 14.12 15.75 24 BAYES_00 29899 11.96 5.84 15.38 25 RCVD_IN_RP_CERTIFIED 28707 11.89 6.74 14.76 26 XM_Multi_Part_URI 28556 15.14 15.96 14.69 27 TR_XM_DK_Bayes 25884 10.25 4.76 13.31 28 ALL_TRUSTED 25727 8.81 0.89 13.23 29 T_KAM_HTML_FONT_INVALID 25500 14.58 17.20 13.12 30 XM_Body_Dirty_Words 24527 16.23 22.69 12.61 31 TR_XM_DK_Bayes1 22748 8.82 3.67 11.70 32 TR_DCC_Bayes_99 22305 20.52 36.70 11.47 33 HTML_IMAGE_RATIO_02 20455 15.06 23.18 10.52 34 TR_XM_DK_Bayes2 19205 7.50 3.26 9.88 35 RCVD_IN_MSPIKE_H2 18837 8.80 7.22 9.69 36 XM_Evil_Numbers_Gen 17954 11.54 15.66 9.23 37 LotsOfNums_01 17366 9.66 10.96 8.93 38 LOTS_OF_MONEY 17313 9.31 10.03 8.90 39 FSL_BULK_SIG 16961 9.45 10.75 8.72 40 BOTNET_IPINHOSTNAME 14852 10.61 15.93 7.64 41 T_XMDrugObfuBody_14 13354 7.60 8.91 6.87 42 TooManyTo_001 13319 7.07 7.45 6.85 43 HTML_IMAGE_RATIO_04 12902 8.13 10.80 6.64 44 BAYES_60 12610 6.10 5.42 6.49 45 XM_B_Phish_Phrases 12374 7.66 9.98 6.36 46 XM_H_Long_From01 12052 6.77 7.79 6.20 47 XMStrtUSub 11453 5.58 5.03 5.89 48 XM_SendGrid 11401 5.07 3.64 5.86 49 UNPARSEABLE_RELAY 11395 4.26 1.40 5.86 50 T_TooManySym_01 10544 4.83 3.76 5.42 51 FROM_EXCESS_BASE64 10418 6.08 7.36 5.36 52 TVD_RCVD_IP 10390 3.50 0.20 5.34 53 IN_ZIMBRA_NJ_WHITELIST 9950 3.29 0.02 5.12 54 XM_UncommonTLD01 9397 6.38 9.14 4.83 55 RELAYCOUNTRY_META 9046 8.82 16.29 4.65 56 TR_XM_DocInvoice 9001 5.88 8.13 4.63 57 XMSexyCombo_05 8980 6.71 10.45 4.62 58 MIME_QP_LONG_LINE 8028 4.06 3.94 4.13 59 XMSubMetaSx_00 7828 5.18 7.25 4.03 60 BAYES_80 7817 4.75 6.06 4.02 61 RCVD_IN_DNSWL_NONE 7685 3.21 1.87 3.95 62 RCVD_IN_IADB_LISTED 7614 3.21 1.93 3.92 63 T_REMOTE_IMAGE 7595 3.87 3.79 3.91 64 DKIM_INVALID 7166 3.84 4.11 3.69 65 RCVD_IN_IADB_SPF 6812 2.86 1.71 3.50 66 INVALID_MSGID 6608 2.36 0.49 3.40 67 MIME_HTML_MOSTLY 6448 4.09 5.49 3.32 68 RCVD_IN_IADB_SENDERID 6220 2.63 1.62 3.20 69 MPART_ALT_DIFF 6165 4.57 7.07 3.17 70 RCVD_IN_IADB_DK 6064 2.57 1.59 3.12 71 USER_IN_DEF_DKIM_WL 6024 2.00 0.02 3.10 72 TO_MALFORMED 5965 2.07 0.28 3.07 73 XMNumbers 5836 3.30 3.83 3.00 74 BAYES_40 5313 2.31 1.54 2.73 75 BAYES_95 5106 3.01 3.70 2.63 76 HTML_IMAGE_RATIO_06 5103 2.95 3.53 2.62 77 IN_HORDE_ADDRESS_BOOK 4929 1.65 0.07 2.54 78 TR_Symld_Words 4886 1.86 0.70 2.51 79 XMBdyGiftCard01 4857 2.48 2.44 2.50 80 T_MIXED_ES 4668 2.35 2.25 2.40 81 NO_DNS_FOR_FROM 4610 2.45 2.59 2.37 82 T_TooManySym_02 4545 1.68 0.51 2.34 83 RCVD_IN_IADB_VOUCHED 4544 1.78 0.79 2.34 84 XM_OfRef6 4507 2.74 3.50 2.32 85 SUBJ_ALL_CAPS 4089 2.12 2.15 2.10 86 MAILING_LIST_MULTI 3932 1.78 1.34 2.02 87 BOTNET 3920 6.06 13.30 2.02 88 HTML_IMAGE_RATIO_08 3844 2.47 3.34 1.98 89 ANY_BOUNCE_MESSAGE 3731 1.34 0.29 1.92 90 BOUNCE_MESSAGE 3731 1.33 0.29 1.92 91 BAYES_20 3637 1.72 1.45 1.87 92 XM_ProductURIs 3613 1.73 1.49 1.86 93 RCVD_IN_DNSWL_BLOCKED 3597 1.61 1.18 1.85 94 XM_PDF 3532 1.30 0.36 1.82 95 XM_SPF_SoftFail 3511 2.06 2.52 1.81 96 XM_CamelCaseFrm001 3471 2.44 3.62 1.79 97 XM_DK_Undo_01 3360 1.58 1.33 1.73 98 TM2_M_URI_OPT_OUT 3301 2.39 3.63 1.70 99 XMStockSpam_06 3252 1.51 1.22 1.67 100 TooManyTo_002 3196 1.25 0.54 1.64 101 XM_S_JOY_D 3087 1.40 1.05 1.59 102 XM_DIRTYINTL 3064 2.50 4.16 1.58 103 XMDiploma_00 3029 1.96 2.69 1.56 104 RCVD_IN_MSPIKE_WL 3022 1.28 0.80 1.55 105 RCVD_IN_MSPIKE_H3 3004 1.28 0.80 1.55 106 HTML_MIME_NO_HTML_TAG 2977 1.50 1.44 1.53 107 XM_B_REG_HTML 2824 1.41 1.35 1.45 108 UNTRUSTED_Relay 2796 4.62 10.33 1.44 109 XM_GoogleGroups 2679 1.07 0.52 1.38 110 RELAYCOUNTRY_CA 2576 1.85 2.79 1.32 111 USER_IN_WHITELIST 2549 0.84 0.00 1.31 112 T_TooManySym_03 2534 0.88 0.13 1.30 113 XM_H_PHPOS 2455 1.14 0.91 1.26 114 BAYES_05 2403 1.12 0.90 1.24 115 XM_OfRef7 2373 1.00 0.60 1.22 116 URI_HEX 2310 2.27 4.20 1.19 117 MIME_HTML_ONLY_MULTI 2280 1.70 2.64 1.17 118 T_FILL_THIS_FORM_SHORT 2229 1.04 0.86 1.15 119 TooManyTo_003 2199 0.89 0.46 1.13 120 XMSubMetaI_00 2122 1.87 3.25 1.09 121 DKIM_ADSP_CUSTOM_MED 2078 0.92 0.65 1.07 122 XMBody_78 2050 1.10 1.17 1.05 123 T_XMDrugObfuBody_08 2036 1.28 1.69 1.05 124 RCVD_IN_IADB_OPTIN 2013 0.82 0.44 1.04 125 XMPhish11 1993 1.02 1.01 1.03 126 XM_H_Long_From02 1946 1.42 2.16 1.00 127 XMSubMetaSxObfu_02 1916 0.90 0.75 0.99 128 TM2_M_VERY_LONG_WORD 1907 1.48 2.37 0.98 129 FILL_THIS_FORM 1900 1.52 2.50 0.98 130 XMBody_95 1845 0.65 0.11 0.95 131 XMBrknScrpt_02 1834 0.93 0.92 0.94 132 URI_TRY_3LD 1818 0.88 0.77 0.94 133 XMGenDplmaNmb 1814 1.12 1.45 0.93 134 TooManyTo_004 1713 0.69 0.35 0.88 135 FILL_THIS_FORM_LONG 1646 1.06 1.43 0.85 136 XM_UB50 1559 2.17 4.61 0.80 137 XM_B_COPY_HTML 1493 0.90 1.14 0.77 138 PLING_QUERY 1478 0.79 0.83 0.76 139 NML_ADSP_CUSTOM_MED 1458 0.66 0.50 0.75 140 TooManyTo_005 1454 0.58 0.29 0.75 141 XM_H_PHPMailer 1445 0.68 0.57 0.74 142 HELO_NODOT 1366 0.50 0.15 0.70 143 T_TooManySym_04 1304 0.44 0.03 0.67 144 XMHTMLBadTable_001 1291 0.78 0.98 0.66 145 RELAYCOUNTRY_GB 1257 0.67 0.70 0.65 146 XMBody_17 1205 1.09 1.92 0.62 147 T_MONEY_PERCENT 1194 0.79 1.11 0.61 148 TR_LOTS_OF_MONEY2 1194 0.79 1.11 0.61 149 T_XMHurry_00 1134 0.98 1.70 0.58 150 XM_H_PHPOS_M 1133 0.53 0.44 0.58 151 T_XMDrugObfuBody_00 1120 0.88 1.41 0.58 152 RDNS_DYNAMIC 1093 0.70 0.95 0.56 153 RELAYCOUNTRY_DE 1069 0.70 0.96 0.55 154 TR_MetaPhish_Combo_01 1026 0.60 0.73 0.53 155 XMSexyCombo_01 1017 0.84 1.42 0.52 156 XM_ShortIntro_01 1014 0.44 0.29 0.52 157 REMOVE_BEFORE_LINK 968 0.50 0.51 0.50 158 DKIM_ADSP_NXDOMAIN 962 0.63 0.87 0.49 159 XM_shorewaves_Whitelist 957 0.32 0.00 0.49 160 TR_XM_RelayPhish 910 0.80 1.39 0.47 161 XMNoVowels 894 0.45 0.42 0.46 162 DIET_1 872 0.76 1.31 0.45 163 HTML_TAG_BALANCE_BODY 865 0.56 0.76 0.44 164 T_Symld_Words_02 842 0.61 0.93 0.43 165 FILL_THIS_FORM_LOAN 824 0.73 1.29 0.42 166 XM_Walgreens_Forge 823 0.38 0.31 0.42 167 XMCapTrack 791 0.36 0.27 0.41 168 RCVD_IN_IADB_DOPTIN 791 0.30 0.10 0.41 169 TR_LOTS_OF_MONEY3 776 0.39 0.37 0.40 170 HTML_FONT_FACE_BAD 770 0.66 1.12 0.40 171 XM_Combo_Sbj 760 0.38 0.37 0.39 172 TR_Caps_n_Bayes_80 759 0.30 0.13 0.39 173 RCVD_IN_DNSWL_MED 757 0.26 0.04 0.39 174 FORGED_GMAIL_RCVD 735 0.41 0.48 0.38 175 XM_BadFromFormat 728 0.88 1.79 0.37 176 TM2_M_A_HREF_HREF 709 0.38 0.41 0.36 177 XMPhish30 709 0.93 1.95 0.36 178 XMGappySubj_01 708 0.37 0.39 0.36 179 XMRcvdHeader_15 707 0.23 0.00 0.36 180 HTML_FONT_SIZE_LARGE 700 0.33 0.27 0.36 181 XMLngstWrd_00 698 0.34 0.30 0.36 182 XM_B_TRADE_HTML 694 0.46 0.63 0.36 183 MISSING_HEADERS 676 0.34 0.32 0.35 184 RCVD_IN_BL_SPAMCOP_NET 671 2.17 5.42 0.35 185 SpammyFromTLD_01 665 0.78 1.56 0.34 186 XMPhish14 654 0.84 1.74 0.34 187 TVD_SPACE_RATIO 654 0.28 0.17 0.34 188 RELAYCOUNTRY_AU 649 0.34 0.35 0.33 189 XMLngstWrd_01 644 0.31 0.27 0.33 190 MPART_ALT_DIFF_COUNT 641 0.56 0.97 0.33 191 HK_RANDOM_ENVFROM 634 0.25 0.12 0.33 192 XMSolicitRefs_0 631 0.38 0.47 0.32 193 HTML_IMAGE_ONLY_28 617 0.33 0.36 0.32 194 XM_H_SpoofStaff4 609 0.22 0.05 0.31 195 XMSUPPORT 604 0.20 0.00 0.31 196 HTML_IMAGE_ONLY_20 588 0.26 0.19 0.30 197 T_TooManySym_05 584 0.20 0.01 0.30 198 HTML_IMAGE_ONLY_24 582 0.28 0.24 0.30 199 XMHTML_After_End 581 0.44 0.69 0.30 200 RELAYCOUNTRY_NL 570 0.45 0.74 0.29 ----------------------------------------------------------------------