Email: 563233 Autolearn: 0 AvgScore: 3.28 AvgScanTime: 2.42 sec Spam: 161111 Autolearn: 0 AvgScore: 12.61 AvgScanTime: 2.89 sec Ham: 402122 Autolearn: 0 AvgScore: -0.46 AvgScanTime: 2.24 sec Time Spent Running SA: 379.30 hours Time Spent Processing Spam: 129.33 hours Time Spent Processing Ham: 249.97 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 152832 83.11 94.86 78.41 2 DKIM_SIGNED 139560 71.46 86.62 65.39 3 XM_DK_Pass 135419 69.77 84.05 64.04 4 DKIM_VALID 133869 68.30 83.09 62.37 5 DCC_CHECK 129056 46.91 80.10 33.61 6 XMListUnsubscribeExists 122144 52.64 75.81 43.36 7 DKIM_VALID_AU 105050 50.05 65.20 43.98 8 XM_H_QuotedFrom 89937 39.84 55.82 33.44 9 XM_DK_Undo_02 83890 24.59 52.07 13.58 10 BAYES_99 76519 22.73 47.49 12.81 11 BAYES_999 65909 19.83 40.91 11.38 12 HTML_FONT_LOW_CONTRAST 61814 27.49 38.37 23.14 13 TR_DCC_Bayes_99 61271 15.36 38.03 6.28 14 LOC_TINY_FONT_1 57946 23.17 35.97 18.04 15 BAYES_50 47880 51.01 29.72 59.55 16 MIME_HTML_ONLY 45760 20.44 28.40 17.25 17 FVGT_m_MULTI_ODD 42617 20.34 26.45 17.88 18 XMSubLong 42142 21.32 26.16 19.39 19 XM_Body_Dirty_Words 33658 13.85 20.89 11.03 20 T_TM2_M_HEADER_IN_MSG 31195 25.44 19.36 27.88 21 DKIM_VALID_EF 30660 20.17 19.03 20.62 22 HTML_IMAGE_RATIO_02 28891 9.91 17.93 6.70 23 DCC_CHECK_NEGATIVE 28688 50.84 17.81 64.08 24 RELAYCOUNTRY_META 28286 8.60 17.56 5.00 25 XM_Multi_Part_URI 27591 12.60 17.13 10.79 26 MultiRelay 26929 16.98 16.71 17.08 27 T_KAM_HTML_FONT_INVALID 23851 11.43 14.80 10.08 28 XM_Evil_Numbers_Gen 23607 9.48 14.65 7.40 29 BOTNET_IPINHOSTNAME 23348 7.09 14.49 4.13 30 BOTNET 21933 4.64 13.61 1.04 31 UNTRUSTED_Relay 17783 4.00 11.04 1.18 32 T_XMDrugObfuBody_14 17485 9.17 10.85 8.50 33 XMSexyCombo_05 16718 5.32 10.38 3.30 34 LOTS_OF_MONEY 15935 6.65 9.89 5.35 35 HTML_IMAGE_RATIO_04 15321 6.47 9.51 5.25 36 LotsOfNums_01 14767 8.32 9.17 7.97 37 TR_XM_DocInvoice 14328 5.14 8.89 3.63 38 XM_B_Phish_Phrases 14147 5.93 8.78 4.78 39 FSL_BULK_SIG 13123 6.04 8.15 5.20 40 XM_H_Long_From01 13002 6.19 8.07 5.43 41 XM_UncommonTLD01 12967 4.81 8.05 3.51 42 BAYES_80 12579 5.41 7.81 4.45 43 TooManyTo_001 11914 7.72 7.39 7.85 44 RCVD_IN_RP_SAFE 11612 8.79 7.21 9.43 45 XMSubMetaSx_00 10862 4.51 6.74 3.61 46 RCVD_IN_MSPIKE_H2 10348 7.56 6.42 8.02 47 MPART_ALT_DIFF 10051 3.64 6.24 2.59 48 FROM_EXCESS_BASE64 9487 4.39 5.89 3.80 49 BAYES_60 9060 6.45 5.62 6.78 50 RCVD_IN_RP_CERTIFIED 8897 7.28 5.52 7.99 51 HTML_IMAGE_RATIO_06 7463 3.57 4.63 3.15 52 XM_SPF_SoftFail 7353 2.48 4.56 1.64 53 MIME_HTML_MOSTLY 7094 2.87 4.40 2.26 54 XM_UB50 7069 1.79 4.39 0.76 55 XM_SendGrid 7003 4.50 4.35 4.56 56 BAYES_95 6989 3.31 4.34 2.90 57 XMNumbers 6949 4.05 4.31 3.94 58 MIME_QP_LONG_LINE 6907 4.71 4.29 4.89 59 TM2_M_URI_OPT_OUT 6813 2.58 4.23 1.92 60 T_TooManySym_01 6634 4.26 4.12 4.31 61 XM_DIRTYINTL 6354 2.24 3.94 1.56 62 XMStrtUSub 6145 4.43 3.81 4.67 63 DKIM_INVALID 5691 3.17 3.53 3.02 64 RCVD_IN_BL_SPAMCOP_NET 5673 1.46 3.52 0.63 65 MultiRelay_Combo 5604 1.17 3.48 0.24 66 MultiRelay_CC 5604 1.17 3.48 0.24 67 XM_CamelCaseFrm001 5514 2.16 3.42 1.66 68 URI_HEX 5260 1.57 3.26 0.89 69 HTML_IMAGE_RATIO_08 5194 2.24 3.22 1.85 70 T_XMDrugObfuBody_08 4886 1.81 3.03 1.32 71 RELAYCOUNTRY_CA 4832 1.72 3.00 1.21 72 SUBJ_ALL_CAPS 4822 1.88 2.99 1.44 73 RELAYCOUNTRY_CN 4779 0.89 2.97 0.06 74 MIME_HTML_ONLY_MULTI 4554 1.69 2.83 1.24 75 T_REMOTE_IMAGE 4534 3.15 2.81 3.28 76 XM_OfRef6 3985 1.37 2.47 0.93 77 XMBdyGiftCard01 3980 1.59 2.47 1.23 78 XM_URI_RBL 3812 0.76 2.37 0.12 79 HTML_MIME_NO_HTML_TAG 3681 2.00 2.28 1.89 80 XMDiploma_00 3636 1.46 2.26 1.14 81 SpammyFromTLD_02 3609 0.96 2.24 0.45 82 SpammyFromTLD_01 3512 1.32 2.18 0.97 83 XMSubMetaI_00 3486 1.14 2.16 0.73 84 T_MIXED_ES 3363 1.34 2.09 1.04 85 RDNS_DYNAMIC 3342 0.87 2.07 0.39 86 BOTNET_NORDNS 3244 0.59 2.01 0.02 87 TM2_M_VERY_LONG_WORD 3160 1.07 1.96 0.71 88 XM_UB99 3105 0.56 1.93 0.01 89 XM_H_Long_From02 3066 1.15 1.90 0.85 90 RCVD_IN_IADB_LISTED 3048 3.78 1.89 4.53 91 SUBJ_DOLLARS 2989 0.71 1.86 0.25 92 T_XMDrugObfuBody_00 2883 1.06 1.79 0.76 93 XM_UB80 2858 0.52 1.77 0.02 94 XMSexyCombo_01 2844 1.45 1.77 1.32 95 RELAYCOUNTRY_FR 2839 0.66 1.76 0.21 96 FILL_THIS_FORM 2763 0.61 1.71 0.17 97 RCVD_IN_IADB_SPF 2674 3.28 1.66 3.92 98 XM_ProductURIs 2652 1.05 1.65 0.81 99 FILL_THIS_FORM_LONG 2641 0.51 1.64 0.06 100 T_XMHurry_00 2634 0.90 1.63 0.60 101 XM_B_REG_HTML 2596 0.93 1.61 0.66 102 BAYES_40 2581 2.77 1.60 3.23 103 RCVD_IN_IADB_SENDERID 2544 2.93 1.58 3.48 104 TR_XM_RelayPhish 2536 0.78 1.57 0.46 105 RCVD_IN_IADB_DK 2517 2.85 1.56 3.36 106 RELAYCOUNTRY_GB 2513 1.30 1.56 1.20 107 RCVD_IN_RP_RNBL 2502 0.45 1.55 0.01 108 XMBody_17 2484 0.76 1.54 0.45 109 XM_DK_Undo_01 2483 1.61 1.54 1.64 110 BAYES_00 2475 5.11 1.54 6.54 111 XM_UB999 2352 0.43 1.46 0.01 112 XM_H_PHPOS 2315 1.29 1.44 1.23 113 MAILING_LIST_MULTI 2310 2.26 1.43 2.59 114 XMPhish30 2288 0.74 1.42 0.47 115 BODY_ENHANCEMENT 2256 0.44 1.40 0.06 116 XM_S_JOY_D 2253 0.78 1.40 0.54 117 XMStockSpam_06 2166 1.21 1.34 1.15 118 URIBL_BLACK 2164 0.42 1.34 0.05 119 XM_BadFromFormat 2048 0.53 1.27 0.23 120 XM_UB60 2019 0.40 1.25 0.06 121 FROM_ADDR_WS 2005 0.36 1.24 0.01 122 UNPARSEABLE_RELAY 1985 2.62 1.23 3.17 123 BAYES_20 1975 2.04 1.23 2.36 124 RELAYCOUNTRY_NO 1964 0.36 1.22 0.01 125 XMGenDplmaNmb 1963 0.89 1.22 0.76 126 XMBody_78 1940 0.77 1.20 0.60 127 RCVD_IN_IADB_VOUCHED 1919 3.20 1.19 4.01 128 TR_XM_DK_Bayes 1911 3.49 1.19 4.42 129 XM_XX_Yahoo 1897 0.40 1.18 0.08 130 URIBL_DBL_SPAM 1895 0.34 1.18 0.01 131 TR_XM_DK_Bayes1 1890 3.34 1.17 4.21 132 PLING_QUERY 1851 0.47 1.15 0.20 133 TooManyTo_002 1823 2.12 1.13 2.51 134 RELAYCOUNTRY_AT 1816 0.42 1.13 0.14 135 XM_HighProb1 1802 0.33 1.12 0.01 136 TR_XM_DK_Bayes2 1802 2.78 1.12 3.45 137 XM_B_COPY_HTML 1771 0.77 1.10 0.63 138 HTML_SHORT_LINK_IMG_1 1771 0.34 1.10 0.03 139 ALL_TRUSTED 1689 18.18 1.05 25.05 140 TR_Caps_n_Bayes_80 1681 0.33 1.04 0.04 141 RELAYCOUNTRY_IN 1666 0.36 1.03 0.09 142 XMHTMLBadTable_001 1649 0.60 1.02 0.43 143 TR_Symld_Words 1648 2.53 1.02 3.13 144 FSL_THIS_IS_ADV 1646 0.34 1.02 0.07 145 T_MONEY_PERCENT 1645 0.46 1.02 0.24 146 TR_LOTS_OF_MONEY2 1645 0.46 1.02 0.24 147 RELAYCOUNTRY_DE 1597 0.65 0.99 0.51 148 TooManyTo_003 1577 1.48 0.98 1.68 149 HTML_FONT_SIZE_HUGE 1559 0.38 0.97 0.14 150 MONEY_FORM 1557 0.28 0.97 0.01 151 LONG_JUNK_URI 1552 0.42 0.96 0.21 152 MONEY_FRAUD_8 1536 0.27 0.95 0.00 153 T_DEAR_BENEFICIARY 1533 0.27 0.95 0.00 154 MONEY_BARRISTER 1530 0.27 0.95 0.00 155 BODY_URI_ONLY 1516 0.30 0.94 0.05 156 MONEY_ATM_CARD 1496 0.27 0.93 0.00 157 FROM_WSP_TRAIL 1467 0.26 0.91 0.00 158 URI_TRY_3LD 1462 0.81 0.91 0.77 159 XMHTML_After_End 1450 0.47 0.90 0.30 160 MPART_ALT_DIFF_COUNT 1433 0.42 0.89 0.23 161 HTML_FONT_FACE_BAD 1414 0.47 0.88 0.31 162 XMPhish14 1404 0.51 0.87 0.36 163 TR_LOTS_OF_MONEY3 1402 0.41 0.87 0.23 164 SUBJ_BUY 1375 0.28 0.85 0.04 165 TooManyTo_004 1363 1.09 0.85 1.19 166 XMSubMetaSSx_00 1361 0.34 0.84 0.13 167 HTML_IMAGE_ONLY_08 1343 0.33 0.83 0.13 168 T_Symld_Words_02 1333 0.59 0.83 0.50 169 XMPhish11 1329 0.91 0.82 0.95 170 DIET_1 1327 0.60 0.82 0.50 171 ANY_BOUNCE_MESSAGE 1268 7.84 0.79 10.67 172 BOUNCE_MESSAGE 1268 7.84 0.79 10.67 173 XMBrknScrpt_02 1252 0.67 0.78 0.63 174 XMClaimOffer 1252 0.27 0.78 0.07 175 LONG_JUNK_URI3 1250 0.31 0.78 0.12 176 LOW_PRICE 1247 0.32 0.77 0.14 177 RCVD_IN_MSPIKE_H3 1214 1.16 0.75 1.33 178 RCVD_IN_MSPIKE_WL 1214 1.17 0.75 1.33 179 LongTLD 1207 0.30 0.75 0.12 180 T_TooManySym_02 1206 1.50 0.75 1.80 181 REMOVE_BEFORE_LINK 1191 0.39 0.74 0.25 182 RELAYCOUNTRY_AU 1167 0.60 0.72 0.55 183 XMMoneyMeta_00 1137 0.51 0.71 0.43 184 FILL_THIS_FORM_LOAN 1126 0.23 0.70 0.04 185 XM_PDF 1123 3.33 0.70 4.38 186 T_FILL_THIS_FORM_SHORT 1122 0.57 0.70 0.52 187 HTML_IMAGE_ONLY_28 1118 0.46 0.69 0.37 188 DATE_IN_PAST_03_06 1117 0.24 0.69 0.06 189 DATE_IN_PAST_06_12 1097 0.22 0.68 0.03 190 XM_Lotto 1068 0.22 0.66 0.04 191 BAYES_05 1053 1.17 0.65 1.37 192 XM_H_PHPMailer 1050 0.65 0.65 0.64 193 TR_Caps_n_Bayes_99 1026 0.21 0.64 0.03 194 XM_H_Long_From03 1023 0.20 0.63 0.03 195 XMLongAddy 1014 0.20 0.63 0.02 196 DKIM_ADSP_CUSTOM_MED 1013 0.91 0.63 1.02 197 TR_Mismatch_TLD_02 1009 0.21 0.63 0.04 198 XMSexyCombo_04 1008 0.20 0.63 0.04 199 FROM_OFFERS 1003 0.21 0.62 0.04 200 RCVD_IN_PSBL 990 0.21 0.61 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 315285 83.11 94.86 78.41 2 DKIM_SIGNED 262949 71.46 86.62 65.39 3 DCC_CHECK_NEGATIVE 257667 50.84 17.81 64.08 4 XM_DK_Pass 257532 69.77 84.05 64.04 5 DKIM_VALID 250791 68.30 83.09 62.37 6 BAYES_50 239453 51.01 29.72 59.55 7 DKIM_VALID_AU 176869 50.05 65.20 43.98 8 XMListUnsubscribeExists 174370 52.64 75.81 43.36 9 DCC_CHECK 135163 46.91 80.10 33.61 10 XM_H_QuotedFrom 134457 39.84 55.82 33.44 11 T_TM2_M_HEADER_IN_MSG 112119 25.44 19.36 27.88 12 ALL_TRUSTED 100724 18.18 1.05 25.05 13 HTML_FONT_LOW_CONTRAST 93034 27.49 38.37 23.14 14 DKIM_VALID_EF 82927 20.17 19.03 20.62 15 XMSubLong 77965 21.32 26.16 19.39 16 LOC_TINY_FONT_1 72552 23.17 35.97 18.04 17 FVGT_m_MULTI_ODD 71919 20.34 26.45 17.88 18 MIME_HTML_ONLY 69350 20.44 28.40 17.25 19 MultiRelay 68686 16.98 16.71 17.08 20 XM_DK_Undo_02 54626 24.59 52.07 13.58 21 BAYES_99 51513 22.73 47.49 12.81 22 BAYES_999 45773 19.83 40.91 11.38 23 XM_Body_Dirty_Words 44355 13.85 20.89 11.03 24 XM_Multi_Part_URI 43404 12.60 17.13 10.79 25 ANY_BOUNCE_MESSAGE 42905 7.84 0.79 10.67 26 BOUNCE_MESSAGE 42896 7.84 0.79 10.67 27 T_KAM_HTML_FONT_INVALID 40517 11.43 14.80 10.08 28 XM_DKIMWhitelistDomains 39974 7.10 0.02 9.94 29 RCVD_IN_RP_SAFE 37904 8.79 7.21 9.43 30 T_XMDrugObfuBody_14 34183 9.17 10.85 8.50 31 RCVD_IN_MSPIKE_H2 32250 7.56 6.42 8.02 32 RCVD_IN_RP_CERTIFIED 32112 7.28 5.52 7.99 33 LotsOfNums_01 32067 8.32 9.17 7.97 34 TooManyTo_001 31585 7.72 7.39 7.85 35 XM_Evil_Numbers_Gen 29765 9.48 14.65 7.40 36 BAYES_60 27256 6.45 5.62 6.78 37 HTML_IMAGE_RATIO_02 26945 9.91 17.93 6.70 38 BAYES_00 26280 5.11 1.54 6.54 39 TR_DCC_Bayes_99 25259 15.36 38.03 6.28 40 IN_ZIMBRA_NJ_WHITELIST 22921 4.08 0.03 5.70 41 XM_H_Long_From01 21855 6.19 8.07 5.43 42 LOTS_OF_MONEY 21525 6.65 9.89 5.35 43 HTML_IMAGE_RATIO_04 21122 6.47 9.51 5.25 44 FSL_BULK_SIG 20918 6.04 8.15 5.20 45 RELAYCOUNTRY_META 20126 8.60 17.56 5.00 46 MIME_QP_LONG_LINE 19647 4.71 4.29 4.89 47 XM_B_Phish_Phrases 19229 5.93 8.78 4.78 48 XMStrtUSub 18784 4.43 3.81 4.67 49 XM_SendGrid 18355 4.50 4.35 4.56 50 RCVD_IN_IADB_LISTED 18217 3.78 1.89 4.53 51 BAYES_80 17913 5.41 7.81 4.45 52 TR_XM_DK_Bayes 17762 3.49 1.19 4.42 53 XM_PDF 17615 3.33 0.70 4.38 54 T_TooManySym_01 17347 4.26 4.12 4.31 55 TR_XM_DK_Bayes1 16945 3.34 1.17 4.21 56 BOTNET_IPINHOSTNAME 16602 7.09 14.49 4.13 57 RCVD_IN_IADB_VOUCHED 16120 3.20 1.19 4.01 58 XMNumbers 15860 4.05 4.31 3.94 59 RCVD_IN_IADB_SPF 15782 3.28 1.66 3.92 60 FROM_EXCESS_BASE64 15266 4.39 5.89 3.80 61 TR_XM_DocInvoice 14603 5.14 8.89 3.63 62 XMSubMetaSx_00 14532 4.51 6.74 3.61 63 XM_UncommonTLD01 14132 4.81 8.05 3.51 64 RCVD_IN_IADB_SENDERID 13986 2.93 1.58 3.48 65 TR_XM_DK_Bayes2 13880 2.78 1.12 3.45 66 RCVD_IN_IADB_DK 13527 2.85 1.56 3.36 67 XMSexyCombo_05 13258 5.32 10.38 3.30 68 T_REMOTE_IMAGE 13191 3.15 2.81 3.28 69 BAYES_40 13001 2.77 1.60 3.23 70 UNPARSEABLE_RELAY 12750 2.62 1.23 3.17 71 HTML_IMAGE_RATIO_06 12656 3.57 4.63 3.15 72 TR_Symld_Words 12606 2.53 1.02 3.13 73 DKIM_INVALID 12158 3.17 3.53 3.02 74 BAYES_95 11672 3.31 4.34 2.90 75 MAILING_LIST_MULTI 10431 2.26 1.43 2.59 76 MPART_ALT_DIFF 10423 3.64 6.24 2.59 77 TooManyTo_002 10092 2.12 1.13 2.51 78 BAYES_20 9507 2.04 1.23 2.36 79 MIME_HTML_MOSTLY 9084 2.87 4.40 2.26 80 IN_HORDE_ADDRESS_BOOK 9024 1.62 0.07 2.24 81 TM2_M_URI_OPT_OUT 7738 2.58 4.23 1.92 82 TVD_RCVD_IP 7718 1.48 0.39 1.92 83 HTML_MIME_NO_HTML_TAG 7600 2.00 2.28 1.89 84 HTML_IMAGE_RATIO_08 7443 2.24 3.22 1.85 85 T_TooManySym_02 7239 1.50 0.75 1.80 86 HELO_NODOT 7084 1.32 0.20 1.76 87 INVALID_MSGID 6787 1.26 0.21 1.69 88 TooManyTo_003 6747 1.48 0.98 1.68 89 XM_CamelCaseFrm001 6662 2.16 3.42 1.66 90 XM_SPF_SoftFail 6602 2.48 4.56 1.64 91 XM_DK_Undo_01 6575 1.61 1.54 1.64 92 TO_MALFORMED 6481 1.15 0.01 1.61 93 XM_DIRTYINTL 6277 2.24 3.94 1.56 94 RCVD_IN_IADB_OPTIN 5796 1.17 0.48 1.44 95 SUBJ_ALL_CAPS 5776 1.88 2.99 1.44 96 BAYES_05 5526 1.17 0.65 1.37 97 RCVD_IN_MSPIKE_WL 5352 1.17 0.75 1.33 98 RCVD_IN_MSPIKE_H3 5347 1.16 0.75 1.33 99 T_XMDrugObfuBody_08 5317 1.81 3.03 1.32 100 XMSexyCombo_01 5307 1.45 1.77 1.32 101 MIME_HTML_ONLY_MULTI 4984 1.69 2.83 1.24 102 XMBdyGiftCard01 4950 1.59 2.47 1.23 103 XM_H_PHPOS 4948 1.29 1.44 1.23 104 RELAYCOUNTRY_CA 4863 1.72 3.00 1.21 105 XM_GoogleGroups 4853 1.01 0.53 1.21 106 RELAYCOUNTRY_GB 4812 1.30 1.56 1.20 107 TooManyTo_004 4767 1.09 0.85 1.19 108 UNTRUSTED_Relay 4738 4.00 11.04 1.18 109 XMStockSpam_06 4632 1.21 1.34 1.15 110 USER_IN_DEF_DKIM_WL 4623 0.83 0.05 1.15 111 XMDiploma_00 4595 1.46 2.26 1.14 112 XMGappySubj_01 4476 0.94 0.51 1.11 113 BOTNET 4199 4.64 13.61 1.04 114 T_MIXED_ES 4165 1.34 2.09 1.04 115 DKIM_ADSP_CUSTOM_MED 4103 0.91 0.63 1.02 116 XMCapTrack 4060 0.87 0.53 1.01 117 SpammyFromTLD_01 3916 1.32 2.18 0.97 118 XMSolicitRefs_0 3877 0.86 0.61 0.96 119 XMPhish11 3810 0.91 0.82 0.95 120 XM_OfRef6 3751 1.37 2.47 0.93 121 TooManyTo_005 3663 0.78 0.46 0.91 122 URI_HEX 3587 1.57 3.26 0.89 123 XM_H_Long_From02 3409 1.15 1.90 0.85 124 XM_ProductURIs 3271 1.05 1.65 0.81 125 URI_TRY_3LD 3081 0.81 0.91 0.77 126 T_XMDrugObfuBody_00 3063 1.06 1.79 0.76 127 NML_ADSP_CUSTOM_MED 3055 0.66 0.41 0.76 128 XMGenDplmaNmb 3046 0.89 1.22 0.76 129 XM_UB50 3038 1.79 4.39 0.76 130 T_TooManySym_03 2995 0.57 0.14 0.74 131 USER_IN_WHITELIST 2960 0.53 0.00 0.74 132 XMSubMetaI_00 2948 1.14 2.16 0.73 133 XMBody_95 2889 0.56 0.18 0.72 134 TM2_M_VERY_LONG_WORD 2846 1.07 1.96 0.71 135 XM_B_REG_HTML 2665 0.93 1.61 0.66 136 XM_H_PHPMailer 2584 0.65 0.65 0.64 137 RCVD_IN_BL_SPAMCOP_NET 2551 1.46 3.52 0.63 138 XM_B_COPY_HTML 2550 0.77 1.10 0.63 139 XM_ShortIntro_01 2539 0.55 0.35 0.63 140 XMGappySubj_02 2536 0.54 0.32 0.63 141 XMBrknScrpt_02 2525 0.67 0.78 0.63 142 TR_MetaPhish_Combo_01 2460 0.58 0.49 0.61 143 XMUrgent 2429 0.49 0.19 0.60 144 T_XMHurry_00 2418 0.90 1.63 0.60 145 XMBody_78 2411 0.77 1.20 0.60 146 FORGED_OUTLOOK_TAGS 2303 0.41 0.02 0.57 147 XM_RXBody 2293 0.53 0.42 0.57 148 XMNoVowels 2292 0.49 0.30 0.57 149 RCVD_IN_IADB_DOPTIN 2270 0.42 0.06 0.56 150 RELAYCOUNTRY_AU 2206 0.60 0.72 0.55 151 XM_USANA_RCVD 2167 0.38 0.00 0.54 152 XM_S_JOY_D 2152 0.78 1.40 0.54 153 T_FILL_THIS_FORM_SHORT 2097 0.57 0.70 0.52 154 RELAYCOUNTRY_DE 2043 0.65 0.99 0.51 155 DIET_1 2029 0.60 0.82 0.50 156 MISSING_HEADERS 2020 0.53 0.59 0.50 157 T_Symld_Words_02 2005 0.59 0.83 0.50 158 TM2_M_BODY_EMPTY 1991 0.49 0.48 0.50 159 SHORT_HELO_AND_INLINE_IMAGE 1949 0.36 0.04 0.48 160 XMSubMetaSxObfu_02 1933 0.44 0.35 0.48 161 HTML_IMAGE_ONLY_24 1900 0.50 0.56 0.47 162 XMPhish30 1898 0.74 1.42 0.47 163 TM2_M_A_HREF_HREF 1870 0.46 0.44 0.47 164 T_OBFU_PDF_ATTACH 1846 0.36 0.12 0.46 165 TR_XM_RelayPhish 1831 0.78 1.57 0.46 166 SpammyFromTLD_02 1814 0.96 2.24 0.45 167 HTML_IMAGE_ONLY_32 1800 0.47 0.52 0.45 168 XMBody_17 1798 0.76 1.54 0.45 169 RCVD_IN_SORBS_DUL 1782 0.38 0.23 0.44 170 XMHTMLBadTable_001 1740 0.60 1.02 0.43 171 XMMoneyMeta_00 1720 0.51 0.71 0.43 172 XM_B_TRADE_HTML 1660 0.45 0.55 0.41 173 BAD_ENC_HEADER 1594 0.30 0.06 0.40 174 XMSubNoVowel 1586 0.44 0.55 0.39 175 T_TooManySym_04 1575 0.29 0.03 0.39 176 RDNS_DYNAMIC 1573 0.87 2.07 0.39 177 XM_H_PHPOS_M 1526 0.42 0.51 0.38 178 HTML_IMAGE_ONLY_28 1500 0.46 0.69 0.37 179 HTML_TAG_BALANCE_BODY 1496 0.40 0.48 0.37 180 XMPhish14 1454 0.51 0.87 0.36 181 XM_D_tchamptons_WL 1433 0.25 0.00 0.36 182 HTTPS_HTTP_MISMATCH 1402 0.41 0.55 0.35 183 FORGED_GMAIL_RCVD 1400 0.39 0.49 0.35 184 XMRcvdHeader_15 1397 0.25 0.00 0.35 185 GMD_PDF_HORIZ 1347 0.26 0.07 0.33 186 XMDateMe_00 1328 0.31 0.25 0.33 187 XMSubEmpty 1326 0.30 0.24 0.33 188 TVD_SPACE_RATIO 1297 0.32 0.30 0.32 189 URI_NOVOWEL 1271 0.37 0.50 0.32 190 HTML_FONT_FACE_BAD 1260 0.47 0.88 0.31 191 XMSlimDrugH 1250 0.33 0.39 0.31 192 XMLngstWrd_00 1247 0.37 0.53 0.31 193 XMHTML_After_End 1201 0.47 0.90 0.30 194 MSGID_FROM_MTA_HEADER 1191 0.27 0.19 0.30 195 XMLngstWrd_01 1092 0.34 0.50 0.27 196 DKIM_ADSP_NXDOMAIN 1074 0.32 0.46 0.27 197 T_HTML_ATTACH 1064 0.20 0.04 0.26 198 UPPERCASE_50_75 1055 0.24 0.17 0.26 199 XMSUPPORT 1035 0.18 0.00 0.26 200 SUBJ_DOLLARS 1022 0.71 1.86 0.25 ----------------------------------------------------------------------