Email: 577677 Autolearn: 10519 AvgScore: 3.08 AvgScanTime: 3.06 sec Spam: 172494 Autolearn: 1136 AvgScore: 12.23 AvgScanTime: 3.56 sec Ham: 405183 Autolearn: 9383 AvgScore: -0.82 AvgScanTime: 2.85 sec Time Spent Running SA: 491.41 hours Time Spent Processing Spam: 170.47 hours Time Spent Processing Ham: 320.94 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 165734 86.99 96.08 83.12 2 DKIM_SIGNED 148177 73.46 85.90 68.17 3 XM_DK_Pass 144344 71.67 83.68 66.56 4 DKIM_VALID 141333 69.21 81.94 63.79 5 DCC_CHECK 139326 48.33 80.77 34.52 6 XMListUnsubscribeExists 129844 52.10 75.27 42.24 7 DKIM_VALID_AU 110732 51.54 64.19 46.15 8 XM_H_QuotedFrom 93731 40.19 54.34 34.17 9 XM_DK_Undo_02 84871 22.86 49.20 11.65 10 BAYES_99 75476 20.54 43.76 10.66 11 BAYES_999 65724 18.02 38.10 9.47 12 HTML_FONT_LOW_CONTRAST 61415 26.38 35.60 22.45 13 TR_DCC_Bayes_99 60968 14.26 35.34 5.28 14 LOC_TINY_FONT_1 58751 22.65 34.06 17.79 15 BAYES_50 53235 46.12 30.86 52.61 16 MIME_HTML_ONLY 50988 21.47 29.56 18.03 17 XMSubLong 47072 21.47 27.29 18.99 18 FVGT_m_MULTI_ODD 46719 21.67 27.08 19.37 19 T_TM2_M_HEADER_IN_MSG 33556 28.82 19.45 32.81 20 DKIM_VALID_EF 33400 21.67 19.36 22.66 21 HTML_IMAGE_RATIO_02 31856 10.18 18.47 6.65 22 XM_Body_Dirty_Words 31131 12.56 18.05 10.23 23 T_KAM_HTML_FONT_INVALID 30427 14.32 17.64 12.90 24 DCC_CHECK_NEGATIVE 29674 49.42 17.20 63.13 25 MultiRelay 29393 20.01 17.04 21.27 26 RELAYCOUNTRY_META 28865 8.82 16.73 5.45 27 XM_Multi_Part_URI 27544 12.14 15.97 10.51 28 BOTNET_IPINHOSTNAME 27231 7.62 15.79 4.14 29 XM_Evil_Numbers_Gen 22989 9.24 13.33 7.50 30 BOTNET 22065 4.77 12.79 1.36 31 LOTS_OF_MONEY 19372 8.70 11.23 7.63 32 FSL_BULK_SIG 18010 8.10 10.44 7.10 33 UNTRUSTED_Relay 16507 3.73 9.57 1.24 34 T_XMDrugObfuBody_14 16131 8.60 9.35 8.28 35 HTML_IMAGE_RATIO_04 15795 5.70 9.16 4.22 36 LotsOfNums_01 15783 8.25 9.15 7.87 37 XM_B_Phish_Phrases 15659 5.98 9.08 4.66 38 XMSexyCombo_05 14871 4.56 8.62 2.84 39 TR_XM_DocInvoice 14570 5.57 8.45 4.34 40 XM_UncommonTLD01 14162 4.82 8.21 3.37 41 TooManyTo_001 13943 9.09 8.08 9.52 42 XM_H_Long_From01 12505 6.02 7.25 5.50 43 RCVD_IN_MSPIKE_H2 11794 8.74 6.84 9.55 44 BAYES_80 11462 4.51 6.64 3.61 45 MPART_ALT_DIFF 11291 3.55 6.55 2.27 46 XMSubMetaSx_00 11290 4.41 6.55 3.50 47 RCVD_IN_RP_SAFE 10808 8.44 6.27 9.37 48 XMStrtUSub 10397 5.26 6.03 4.94 49 FROM_EXCESS_BASE64 10364 4.19 6.01 3.42 50 BAYES_60 9886 5.75 5.73 5.76 51 BAYES_00 9255 13.31 5.37 16.69 52 MIME_QP_LONG_LINE 8591 4.96 4.98 4.96 53 MIME_HTML_MOSTLY 8358 3.11 4.85 2.37 54 RCVD_IN_RP_CERTIFIED 7916 6.85 4.59 7.81 55 TR_XM_DK_Bayes 7459 9.97 4.32 12.37 56 XM_UB50 7188 1.75 4.17 0.72 57 TM2_M_URI_OPT_OUT 7171 2.45 4.16 1.72 58 HTML_IMAGE_RATIO_06 7035 3.24 4.08 2.89 59 XM_SendGrid 6953 4.98 4.03 5.38 60 DKIM_INVALID 6844 4.25 3.97 4.37 61 XM_DIRTYINTL 6812 2.40 3.95 1.73 62 BAYES_95 6744 2.75 3.91 2.25 63 T_REMOTE_IMAGE 6667 4.26 3.87 4.43 64 XMNumbers 6463 3.28 3.75 3.08 65 TR_XM_DK_Bayes1 6277 8.90 3.64 11.15 66 URI_HEX 5960 1.70 3.46 0.95 67 XM_CamelCaseFrm001 5757 2.13 3.34 1.61 68 RCVD_IN_BL_SPAMCOP_NET 5726 1.31 3.32 0.46 69 RELAYCOUNTRY_CA 5464 1.92 3.17 1.38 70 TR_XM_DK_Bayes2 5295 6.98 3.07 8.65 71 XM_SPF_SoftFail 5288 2.39 3.07 2.10 72 HTML_IMAGE_RATIO_08 5204 2.39 3.02 2.12 73 MultiRelay_Combo 5128 1.06 2.97 0.25 74 MultiRelay_CC 5128 1.06 2.97 0.25 75 T_TooManySym_01 4756 4.00 2.76 4.53 76 XMBdyGiftCard01 4681 1.42 2.71 0.87 77 MIME_HTML_ONLY_MULTI 4609 1.47 2.67 0.96 78 HTML_MIME_NO_HTML_TAG 4578 2.72 2.65 2.75 79 XMSubMetaI_00 4495 1.34 2.61 0.81 80 XM_URI_RBL 4473 0.87 2.59 0.14 81 XM_OfRef6 4364 1.60 2.53 1.20 82 SpammyFromTLD_02 4031 0.85 2.34 0.22 83 RCVD_IN_IADB_LISTED 4002 4.19 2.32 4.99 84 T_XMDrugObfuBody_08 3878 1.59 2.25 1.31 85 RCVD_IN_DNSWL_NONE 3848 3.26 2.23 3.70 86 XM_H_Long_From02 3706 1.34 2.15 0.99 87 T_MIXED_ES 3646 1.62 2.11 1.41 88 XMDiploma_00 3566 1.57 2.07 1.35 89 RCVD_IN_IADB_SPF 3552 3.72 2.06 4.42 90 TM2_M_VERY_LONG_WORD 3499 1.19 2.03 0.83 91 XMBody_17 3463 0.89 2.01 0.42 92 MAILING_LIST_MULTI 3451 2.67 2.00 2.96 93 XM_UB99 3429 0.60 1.99 0.00 94 RCVD_IN_IADB_SENDERID 3378 3.37 1.96 3.97 95 ALL_TRUSTED 3341 14.55 1.94 19.92 96 RCVD_IN_IADB_DK 3341 3.29 1.94 3.87 97 XM_XX_Yahoo 3242 0.65 1.88 0.12 98 URIBL_BLACK 3234 0.59 1.87 0.04 99 RCVD_IN_RP_RNBL 3200 0.59 1.86 0.05 100 XMSexyCombo_01 3052 1.17 1.77 0.92 101 T_XMHurry_00 2987 0.96 1.73 0.63 102 HTTPS_HTTP_MISMATCH 2940 1.12 1.70 0.87 103 RELAYCOUNTRY_FR 2933 0.67 1.70 0.23 104 RELAYCOUNTRY_IN 2891 0.61 1.68 0.15 105 SpammyFromTLD_01 2882 1.01 1.67 0.72 106 XM_UB999 2846 0.50 1.65 0.00 107 BAYES_40 2628 3.09 1.52 3.75 108 RELAYCOUNTRY_GB 2622 1.41 1.52 1.37 109 XMPhish14 2564 0.67 1.49 0.33 110 XMBody_78 2555 0.90 1.48 0.65 111 URIBL_DBL_SPAM 2547 0.45 1.48 0.01 112 XMPhish30 2538 0.66 1.47 0.32 113 SUBJ_ALL_CAPS 2535 1.44 1.47 1.43 114 TooManyTo_002 2476 2.64 1.44 3.15 115 TR_XM_RelayPhish 2463 0.79 1.43 0.52 116 XM_ProductURIs 2452 1.17 1.42 1.06 117 XM_DK_Undo_01 2398 1.76 1.39 1.92 118 XM_HighProb1 2394 0.42 1.39 0.01 119 BAYES_20 2393 2.45 1.39 2.90 120 SUBJ_DOLLARS 2356 0.55 1.37 0.21 121 XMHTML_After_End 2292 0.62 1.33 0.32 122 RELAYCOUNTRY_AT 2225 0.49 1.29 0.15 123 TooManyTo_003 2206 1.89 1.28 2.16 124 BOTNET_NORDNS 2204 0.40 1.28 0.03 125 RCVD_IN_PSBL 2136 0.45 1.24 0.12 126 XMStockSpam_06 2100 1.13 1.22 1.10 127 TR_Symld_Words 2047 2.54 1.19 3.12 128 NO_DNS_FOR_FROM 2005 1.00 1.16 0.93 129 FILL_THIS_FORM 1982 0.61 1.15 0.38 130 TooManyTo_004 1936 1.46 1.12 1.60 131 URIBL_SBL_A 1925 0.43 1.12 0.14 132 RDNS_DYNAMIC 1918 0.61 1.11 0.39 133 XM_B_COPY_HTML 1908 0.63 1.11 0.42 134 T_XMDrugObfuBody_00 1891 0.62 1.10 0.42 135 XM_B_REG_HTML 1818 0.79 1.05 0.68 136 UNPARSEABLE_RELAY 1806 2.50 1.05 3.12 137 RCVD_IN_MSPIKE_WL 1780 1.38 1.03 1.53 138 BODY_ENHANCEMENT 1773 0.34 1.03 0.05 139 RCVD_IN_MSPIKE_H3 1767 1.37 1.02 1.52 140 LONG_JUNK_URI 1749 0.41 1.01 0.15 141 DIET_1 1740 0.57 1.01 0.38 142 REMOVE_BEFORE_LINK 1696 0.61 0.98 0.45 143 T_Symld_Words_02 1689 0.59 0.98 0.42 144 T_MONEY_PERCENT 1658 0.75 0.96 0.67 145 TR_LOTS_OF_MONEY2 1658 0.75 0.96 0.67 146 TR_LOTS_OF_MONEY3 1640 0.58 0.95 0.42 147 RCVD_IN_IADB_VOUCHED 1638 2.50 0.95 3.16 148 XM_S_JOY_D 1623 0.67 0.94 0.56 149 XMPhish11 1606 1.09 0.93 1.16 150 XM_BadFromFormat 1593 0.44 0.92 0.23 151 XMUrgent 1587 0.38 0.92 0.15 152 ANY_BOUNCE_MESSAGE 1587 4.38 0.92 5.86 153 T_FILL_THIS_FORM_SHORT 1586 0.88 0.92 0.87 154 BOUNCE_MESSAGE 1586 4.38 0.92 5.86 155 XMGenDplmaNmb 1572 0.85 0.91 0.83 156 RCVD_IN_DNSWL_BLOCKED 1568 1.18 0.91 1.30 157 RELAYCOUNTRY_DE 1541 0.70 0.89 0.62 158 BODY_URI_ONLY 1520 0.31 0.88 0.07 159 DATE_IN_PAST_03_06 1501 0.33 0.87 0.09 160 XMMoneyMeta_00 1500 0.59 0.87 0.47 161 XM_H_PHPOS 1494 1.08 0.87 1.17 162 HTML_SHORT_LINK_IMG_1 1478 0.28 0.86 0.03 163 XM_PDF 1476 3.59 0.86 4.75 164 URI_TRY_3LD 1469 0.86 0.85 0.87 165 HTML_FONT_FACE_BAD 1463 0.60 0.85 0.49 166 RELAYCOUNTRY_CN 1453 0.30 0.84 0.07 167 FILL_THIS_FORM_LONG 1441 0.44 0.84 0.27 168 XM_UB60 1438 0.29 0.83 0.06 169 MPART_ALT_DIFF_COUNT 1433 0.47 0.83 0.32 170 XMGppyBdWords 1417 0.35 0.82 0.14 171 BAYES_05 1415 1.49 0.82 1.78 172 HTML_IMAGE_ONLY_28 1398 0.59 0.81 0.50 173 XM_UB80 1396 0.26 0.81 0.02 174 XMSubMetaSxObfu_02 1376 0.59 0.80 0.50 175 XMBrknScrpt_02 1371 0.65 0.79 0.59 176 RDNS_NONE 1338 0.25 0.78 0.03 177 FILL_THIS_FORM_LOAN 1329 0.38 0.77 0.21 178 HTML_IMAGE_ONLY_24 1303 0.62 0.76 0.56 179 LONG_JUNK_URI2 1295 0.23 0.75 0.01 180 HTML_TAG_BALANCE_BODY 1209 0.43 0.70 0.32 181 TR_Mismatch_TLD_02 1198 0.24 0.69 0.05 182 TRACKER_ID 1179 0.31 0.68 0.15 183 XMClaimOffer 1177 0.28 0.68 0.11 184 THIS_AD 1151 0.39 0.67 0.27 185 TO_NO_BRKTS_HTML_ONLY 1136 0.45 0.66 0.36 186 T_TooManySym_02 1116 1.58 0.65 1.98 187 XMGetyour 1111 0.39 0.64 0.28 188 XMSlimDrugH 1088 0.39 0.63 0.29 189 HTML_FONT_SIZE_HUGE 1073 0.27 0.62 0.12 190 XMHTMLBadTable_001 1071 0.42 0.62 0.34 191 FSL_THIS_IS_ADV 1058 0.31 0.61 0.18 192 XM_B_TRADE_HTML 1049 0.55 0.61 0.52 193 PLING_QUERY 1045 0.52 0.61 0.49 194 RELAYCOUNTRY_AU 1043 0.48 0.60 0.43 195 XM_Body_Obfu01 1042 0.38 0.60 0.28 196 XM_H_PHPMailer 1021 0.70 0.59 0.75 197 T_HTML_TAG_BALANCE_CENTER 1019 0.29 0.59 0.17 198 ACT_NOW_CAPS 1006 0.23 0.58 0.08 199 URI_NOVOWEL 1001 0.50 0.58 0.47 200 DKIM_ADSP_CUSTOM_MED 996 0.92 0.58 1.07 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 336784 86.99 96.08 83.12 2 DKIM_SIGNED 276207 73.46 85.90 68.17 3 XM_DK_Pass 269697 71.67 83.68 66.56 4 DKIM_VALID 258485 69.21 81.94 63.79 5 DCC_CHECK_NEGATIVE 255811 49.42 17.20 63.13 6 BAYES_50 213176 46.12 30.86 52.61 7 DKIM_VALID_AU 186990 51.54 64.19 46.15 8 XMListUnsubscribeExists 171147 52.10 75.27 42.24 9 DCC_CHECK 139863 48.33 80.77 34.52 10 XM_H_QuotedFrom 138463 40.19 54.34 34.17 11 T_TM2_M_HEADER_IN_MSG 132945 28.82 19.45 32.81 12 DKIM_VALID_EF 91807 21.67 19.36 22.66 13 HTML_FONT_LOW_CONTRAST 90977 26.38 35.60 22.45 14 MultiRelay 86185 20.01 17.04 21.27 15 ALL_TRUSTED 80720 14.55 1.94 19.92 16 FVGT_m_MULTI_ODD 78487 21.67 27.08 19.37 17 XMSubLong 76941 21.47 27.29 18.99 18 MIME_HTML_ONLY 73050 21.47 29.56 18.03 19 LOC_TINY_FONT_1 72081 22.65 34.06 17.79 20 BAYES_00 67633 13.31 5.37 16.69 21 T_KAM_HTML_FONT_INVALID 52283 14.32 17.64 12.90 22 TR_XM_DK_Bayes 50114 9.97 4.32 12.37 23 XM_DK_Undo_02 47184 22.86 49.20 11.65 24 TR_XM_DK_Bayes1 45165 8.90 3.64 11.15 25 BAYES_99 43173 20.54 43.76 10.66 26 XM_Multi_Part_URI 42588 12.14 15.97 10.51 27 XM_Body_Dirty_Words 41448 12.56 18.05 10.23 28 XM_DKIMWhitelistDomains 39731 6.88 0.02 9.81 29 RCVD_IN_MSPIKE_H2 38690 8.74 6.84 9.55 30 TooManyTo_001 38591 9.09 8.08 9.52 31 BAYES_999 38351 18.02 38.10 9.47 32 RCVD_IN_RP_SAFE 37966 8.44 6.27 9.37 33 TR_XM_DK_Bayes2 35044 6.98 3.07 8.65 34 T_XMDrugObfuBody_14 33532 8.60 9.35 8.28 35 LotsOfNums_01 31878 8.25 9.15 7.87 36 RCVD_IN_RP_CERTIFIED 31633 6.85 4.59 7.81 37 LOTS_OF_MONEY 30914 8.70 11.23 7.63 38 XM_Evil_Numbers_Gen 30385 9.24 13.33 7.50 39 FSL_BULK_SIG 28756 8.10 10.44 7.10 40 HTML_IMAGE_RATIO_02 26956 10.18 18.47 6.65 41 ANY_BOUNCE_MESSAGE 23733 4.38 0.92 5.86 42 BOUNCE_MESSAGE 23731 4.38 0.92 5.86 43 BAYES_60 23319 5.75 5.73 5.76 44 XM_H_Long_From01 22277 6.02 7.25 5.50 45 RELAYCOUNTRY_META 22069 8.82 16.73 5.45 46 IN_ZIMBRA_NJ_WHITELIST 21944 3.81 0.03 5.42 47 XM_SendGrid 21809 4.98 4.03 5.38 48 TR_DCC_Bayes_99 21409 14.26 35.34 5.28 49 RCVD_IN_IADB_LISTED 20223 4.19 2.32 4.99 50 MIME_QP_LONG_LINE 20077 4.96 4.98 4.96 51 XMStrtUSub 20008 5.26 6.03 4.94 52 XM_PDF 19263 3.59 0.86 4.75 53 XM_B_Phish_Phrases 18884 5.98 9.08 4.66 54 T_TooManySym_01 18349 4.00 2.76 4.53 55 T_REMOTE_IMAGE 17948 4.26 3.87 4.43 56 RCVD_IN_IADB_SPF 17911 3.72 2.06 4.42 57 DKIM_INVALID 17722 4.25 3.97 4.37 58 TR_XM_DocInvoice 17579 5.57 8.45 4.34 59 HTML_IMAGE_RATIO_04 17114 5.70 9.16 4.22 60 BOTNET_IPINHOSTNAME 16761 7.62 15.79 4.14 61 RCVD_IN_IADB_SENDERID 16069 3.37 1.96 3.97 62 RCVD_IN_IADB_DK 15671 3.29 1.94 3.87 63 BAYES_40 15205 3.09 1.52 3.75 64 RCVD_IN_DNSWL_NONE 15002 3.26 2.23 3.70 65 BAYES_80 14607 4.51 6.64 3.61 66 XMSubMetaSx_00 14201 4.41 6.55 3.50 67 FROM_EXCESS_BASE64 13838 4.19 6.01 3.42 68 XM_UncommonTLD01 13664 4.82 8.21 3.37 69 RCVD_IN_IADB_VOUCHED 12796 2.50 0.95 3.16 70 TooManyTo_002 12750 2.64 1.44 3.15 71 UNPARSEABLE_RELAY 12640 2.50 1.05 3.12 72 TR_Symld_Words 12624 2.54 1.19 3.12 73 XMNumbers 12463 3.28 3.75 3.08 74 MAILING_LIST_MULTI 12001 2.67 2.00 2.96 75 BAYES_20 11749 2.45 1.39 2.90 76 HTML_IMAGE_RATIO_06 11703 3.24 4.08 2.89 77 XMSexyCombo_05 11495 4.56 8.62 2.84 78 HTML_MIME_NO_HTML_TAG 11146 2.72 2.65 2.75 79 TVD_RCVD_IP 11057 2.03 0.39 2.73 80 MIME_HTML_MOSTLY 9606 3.11 4.85 2.37 81 HELO_NODOT 9373 1.71 0.29 2.31 82 MPART_ALT_DIFF 9205 3.55 6.55 2.27 83 BAYES_95 9120 2.75 3.91 2.25 84 TooManyTo_003 8740 1.89 1.28 2.16 85 HTML_IMAGE_RATIO_08 8576 2.39 3.02 2.12 86 XM_SPF_SoftFail 8519 2.39 3.07 2.10 87 IN_HORDE_ADDRESS_BOOK 8233 1.44 0.05 2.03 88 T_TooManySym_02 8032 1.58 0.65 1.98 89 XM_DK_Undo_01 7770 1.76 1.39 1.92 90 BAYES_05 7200 1.49 0.82 1.78 91 INVALID_MSGID 7100 1.33 0.34 1.75 92 XM_DIRTYINTL 7025 2.40 3.95 1.73 93 TM2_M_URI_OPT_OUT 6984 2.45 4.16 1.72 94 XM_CamelCaseFrm001 6522 2.13 3.34 1.61 95 TooManyTo_004 6493 1.46 1.12 1.60 96 RCVD_IN_MSPIKE_WL 6190 1.38 1.03 1.53 97 RCVD_IN_MSPIKE_H3 6152 1.37 1.02 1.52 98 USER_IN_DEF_DKIM_WL 6088 1.06 0.01 1.50 99 RCVD_IN_IADB_OPTIN 6075 1.22 0.55 1.50 100 TO_MALFORMED 6064 1.10 0.17 1.50 101 XMCapTrack 5902 1.18 0.52 1.46 102 XM_GoogleGroups 5845 1.17 0.52 1.44 103 SUBJ_ALL_CAPS 5806 1.44 1.47 1.43 104 T_MIXED_ES 5704 1.62 2.11 1.41 105 RELAYCOUNTRY_CA 5602 1.92 3.17 1.38 106 RELAYCOUNTRY_GB 5545 1.41 1.52 1.37 107 BOTNET 5500 4.77 12.79 1.36 108 XMDiploma_00 5479 1.57 2.07 1.35 109 T_XMDrugObfuBody_08 5315 1.59 2.25 1.31 110 RCVD_IN_DNSWL_BLOCKED 5258 1.18 0.91 1.30 111 UNTRUSTED_Relay 5042 3.73 9.57 1.24 112 XM_OfRef6 4879 1.60 2.53 1.20 113 TooManyTo_005 4860 1.01 0.55 1.20 114 XM_H_PHPOS 4724 1.08 0.87 1.17 115 XMPhish11 4694 1.09 0.93 1.16 116 XMStockSpam_06 4444 1.13 1.22 1.10 117 DKIM_ADSP_CUSTOM_MED 4333 0.92 0.58 1.07 118 XM_ProductURIs 4287 1.17 1.42 1.06 119 XM_H_Long_From02 4015 1.34 2.15 0.99 120 MIME_HTML_ONLY_MULTI 3886 1.47 2.67 0.96 121 URI_HEX 3841 1.70 3.46 0.95 122 T_TooManySym_03 3785 0.70 0.16 0.93 123 NO_DNS_FOR_FROM 3777 1.00 1.16 0.93 124 XMSexyCombo_01 3722 1.17 1.77 0.92 125 XMBdyGiftCard01 3538 1.42 2.71 0.87 126 HTTPS_HTTP_MISMATCH 3533 1.12 1.70 0.87 127 URI_TRY_3LD 3519 0.86 0.85 0.87 128 T_FILL_THIS_FORM_SHORT 3515 0.88 0.92 0.87 129 TM2_M_VERY_LONG_WORD 3383 1.19 2.03 0.83 130 XMGenDplmaNmb 3347 0.85 0.91 0.83 131 XMSubMetaI_00 3263 1.34 2.61 0.81 132 XM_ShortIntro_01 3212 0.66 0.35 0.79 133 NML_ADSP_CUSTOM_MED 3115 0.65 0.38 0.77 134 XM_H_PHPMailer 3032 0.70 0.59 0.75 135 USER_IN_WHITELIST 2988 0.52 0.00 0.74 136 SpammyFromTLD_01 2927 1.01 1.67 0.72 137 XM_UB50 2901 1.75 4.17 0.72 138 TR_MetaPhish_Combo_01 2806 0.64 0.53 0.69 139 XM_B_REG_HTML 2739 0.79 1.05 0.68 140 TR_LOTS_OF_MONEY2 2702 0.75 0.96 0.67 141 T_MONEY_PERCENT 2702 0.75 0.96 0.67 142 XMBody_78 2622 0.90 1.48 0.65 143 T_XMHurry_00 2542 0.96 1.73 0.63 144 RELAYCOUNTRY_DE 2501 0.70 0.89 0.62 145 RCVD_IN_SORBS_DUL 2495 0.47 0.13 0.62 146 XMSolicitRefs_0 2439 0.49 0.22 0.60 147 XMBrknScrpt_02 2392 0.65 0.79 0.59 148 XMBody_95 2365 0.47 0.21 0.58 149 MISSING_HEADERS 2335 0.52 0.39 0.58 150 SHORT_HELO_AND_INLINE_IMAGE 2334 0.42 0.06 0.58 151 XMGappySubj_01 2297 0.51 0.37 0.57 152 RCVD_IN_IADB_DOPTIN 2295 0.43 0.10 0.57 153 T_OBFU_PDF_ATTACH 2287 0.46 0.21 0.56 154 XM_S_JOY_D 2259 0.67 0.94 0.56 155 HTML_IMAGE_ONLY_24 2250 0.62 0.76 0.56 156 LOW_PRICE 2223 0.55 0.56 0.55 157 XMNoVowels 2177 0.54 0.54 0.54 158 XM_B_TRADE_HTML 2105 0.55 0.61 0.52 159 TR_XM_RelayPhish 2099 0.79 1.43 0.52 160 XMSubMetaSxObfu_02 2030 0.59 0.80 0.50 161 HTML_IMAGE_ONLY_28 2020 0.59 0.81 0.50 162 AC_DIV_BONANZA 1996 0.38 0.12 0.49 163 HTML_FONT_FACE_BAD 1977 0.60 0.85 0.49 164 PLING_QUERY 1970 0.52 0.61 0.49 165 XMMoneyMeta_00 1915 0.59 0.87 0.47 166 HTML_IMAGE_ONLY_32 1897 0.49 0.56 0.47 167 URI_NOVOWEL 1886 0.50 0.58 0.47 168 RCVD_IN_BL_SPAMCOP_NET 1856 1.31 3.32 0.46 169 REMOVE_BEFORE_LINK 1828 0.61 0.98 0.45 170 RCVD_IN_DNSWL_MED 1803 0.33 0.05 0.44 171 XMDateMe_00 1782 0.40 0.30 0.44 172 TM2_M_BODY_EMPTY 1740 0.36 0.21 0.43 173 RELAYCOUNTRY_AU 1726 0.48 0.60 0.43 174 XM_B_COPY_HTML 1711 0.63 1.11 0.42 175 T_Symld_Words_02 1707 0.59 0.98 0.42 176 XMBody_17 1694 0.89 2.01 0.42 177 T_XMDrugObfuBody_00 1693 0.62 1.10 0.42 178 TR_LOTS_OF_MONEY3 1693 0.58 0.95 0.42 179 FORGED_GMAIL_RCVD 1662 0.42 0.44 0.41 180 XMLngstWrd_00 1592 0.39 0.39 0.39 181 RDNS_DYNAMIC 1580 0.61 1.11 0.39 182 FILL_THIS_FORM 1551 0.61 1.15 0.38 183 TVD_SPACE_RATIO 1547 0.42 0.50 0.38 184 DIET_1 1529 0.57 1.01 0.38 185 T_TooManySym_04 1515 0.27 0.02 0.37 186 XM_H_PHPOS_M 1508 0.37 0.37 0.37 187 DOS_OUTLOOK_TO_MX 1472 0.29 0.11 0.36 188 TO_NO_BRKTS_HTML_ONLY 1458 0.45 0.66 0.36 189 MSGID_FROM_MTA_HEADER 1415 0.30 0.19 0.35 190 HTML_IMAGE_ONLY_20 1403 0.34 0.32 0.35 191 RCVD_IN_IADB_RDNS 1397 0.26 0.05 0.34 192 XMSubNoVowel 1397 0.41 0.57 0.34 193 XMLngstWrd_01 1396 0.35 0.36 0.34 194 XMHTMLBadTable_001 1358 0.42 0.62 0.34 195 XMPhish14 1322 0.67 1.49 0.33 196 DKIM_ADSP_NXDOMAIN 1306 0.37 0.49 0.32 197 HTML_TAG_BALANCE_BODY 1294 0.43 0.70 0.32 198 XMPhish30 1292 0.66 1.47 0.32 199 XMHTML_After_End 1283 0.62 1.33 0.32 200 MPART_ALT_DIFF_COUNT 1281 0.47 0.83 0.32 ----------------------------------------------------------------------