Email: 266313 Autolearn: 0 AvgScore: 2.75 AvgScanTime: 1.81 sec Spam: 83148 Autolearn: 0 AvgScore: 12.75 AvgScanTime: 2.13 sec Ham: 183165 Autolearn: 0 AvgScore: -1.79 AvgScanTime: 1.66 sec Time Spent Running SA: 133.74 hours Time Spent Processing Spam: 49.27 hours Time Spent Processing Ham: 84.47 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 76920 84.57 92.51 80.97 2 DKIM_SIGNED 71124 78.46 85.54 75.24 3 XM_DK_Pass 68980 77.04 82.96 74.35 4 DKIM_VALID 68171 75.88 81.99 73.10 5 DCC_CHECK 67199 53.19 80.82 40.65 6 XMListUnsubscribeExists 61122 56.30 73.51 48.49 7 DKIM_VALID_AU 55848 60.41 67.17 57.34 8 XM_H_QuotedFrom 47801 42.51 57.49 35.71 9 XM_DK_Undo_02 41810 29.13 50.28 19.53 10 BAYES_99 38309 27.60 46.07 19.21 11 BAYES_999 33215 24.35 39.95 17.26 12 LOC_TINY_FONT_1 31622 28.31 38.03 23.89 13 TR_DCC_Bayes_99 29975 17.72 36.05 9.40 14 HTML_FONT_LOW_CONTRAST 29232 30.60 35.16 28.53 15 MIME_HTML_ONLY 25756 23.00 30.98 19.39 16 BAYES_50 25696 45.98 30.90 52.82 17 FVGT_m_MULTI_ODD 21607 21.34 25.99 19.23 18 XMSubLong 19699 21.94 23.69 21.15 19 XM_Body_Dirty_Words 18193 13.99 21.88 10.41 20 HTML_IMAGE_RATIO_02 16179 11.46 19.46 7.82 21 DKIM_VALID_EF 15217 24.40 18.30 27.16 22 XM_Multi_Part_URI 15202 14.70 18.28 13.08 23 RELAYCOUNTRY_META 14804 8.91 17.80 4.87 24 DCC_CHECK_NEGATIVE 14560 45.33 17.51 57.96 25 T_TM2_M_HEADER_IN_MSG 14280 23.29 17.17 26.07 26 T_KAM_HTML_FONT_INVALID 14111 14.01 16.97 12.66 27 MultiRelay 13187 16.09 15.86 16.20 28 BOTNET 11868 5.10 14.27 0.93 29 BOTNET_IPINHOSTNAME 11852 9.40 14.25 7.20 30 XM_Evil_Numbers_Gen 11701 9.48 14.07 7.39 31 FSL_BULK_SIG 10943 10.76 13.16 9.67 32 XMSexyCombo_05 9360 6.00 11.26 3.61 33 UNTRUSTED_Relay 9186 4.61 11.05 1.69 34 T_XMDrugObfuBody_14 8719 7.71 10.49 6.45 35 LOTS_OF_MONEY 8272 9.42 9.95 9.18 36 HTML_IMAGE_RATIO_04 8004 5.46 9.63 3.56 37 XM_B_Phish_Phrases 7974 6.32 9.59 4.83 38 RCVD_IN_RP_SAFE 7615 12.71 9.16 14.33 39 XM_UncommonTLD01 7571 6.47 9.11 5.28 40 XM_H_Long_From01 7441 7.60 8.95 6.99 41 LotsOfNums_01 6621 7.90 7.96 7.87 42 RCVD_IN_RP_CERTIFIED 6503 11.34 7.82 12.94 43 TooManyTo_001 6290 7.11 7.56 6.90 44 FROM_EXCESS_BASE64 6246 4.89 7.51 3.69 45 BAYES_80 6243 5.26 7.51 4.23 46 XMSubMetaSx_00 5757 5.14 6.92 4.33 47 TR_XM_DocInvoice 5602 5.40 6.74 4.80 48 MPART_ALT_DIFF 5372 4.10 6.46 3.03 49 BAYES_60 5335 6.71 6.42 6.84 50 RCVD_IN_MSPIKE_H2 4639 5.19 5.58 5.01 51 HTML_IMAGE_RATIO_06 4345 3.89 5.23 3.28 52 T_REMOTE_IMAGE 4328 4.88 5.21 4.74 53 XMStrtUSub 4245 5.36 5.11 5.47 54 XM_DIRTYINTL 4182 2.75 5.03 1.72 55 MIME_HTML_MOSTLY 4091 3.73 4.92 3.20 56 XM_UB50 3969 2.41 4.77 1.34 57 BAYES_95 3770 3.41 4.53 2.91 58 XMNumbers 3683 4.39 4.43 4.37 59 XM_SendGrid 3412 4.80 4.10 5.12 60 XM_CamelCaseFrm001 3315 2.42 3.99 1.71 61 MIME_QP_LONG_LINE 3291 4.29 3.96 4.43 62 RELAYCOUNTRY_CA 3210 2.22 3.86 1.48 63 XM_SPF_SoftFail 3182 2.34 3.83 1.67 64 DKIM_INVALID 2953 2.58 3.55 2.14 65 T_TooManySym_01 2906 4.93 3.49 5.58 66 RCVD_IN_PSBL 2764 1.24 3.32 0.30 67 TM2_M_URI_OPT_OUT 2563 1.91 3.08 1.38 68 URI_HEX 2562 1.89 3.08 1.35 69 XMSubMetaI_00 2439 1.20 2.93 0.41 70 MIME_HTML_ONLY_MULTI 2437 1.66 2.93 1.08 71 SpammyFromTLD_01 2304 1.27 2.77 0.58 72 XMBody_17 2173 1.11 2.61 0.43 73 DIET_1 2148 1.29 2.58 0.70 74 RCVD_IN_RP_RNBL 2136 0.82 2.57 0.03 75 XM_URI_RBL 2072 0.89 2.49 0.16 76 TM2_M_VERY_LONG_WORD 2053 1.46 2.47 1.00 77 SUBJ_ALL_CAPS 2052 2.01 2.47 1.80 78 RCVD_IN_BL_SPAMCOP_NET 1982 0.96 2.38 0.32 79 TR_Mismatch_TLD_02 1929 0.76 2.32 0.05 80 PHOTO_EDITING_DIRECT 1928 0.73 2.32 0.00 81 HTML_IMAGE_RATIO_08 1863 1.80 2.24 1.60 82 XMDiploma_00 1839 1.49 2.21 1.16 83 XMPhish30 1812 0.99 2.18 0.45 84 XMSexyCombo_01 1784 0.96 2.15 0.43 85 MultiRelay_Combo 1772 0.76 2.13 0.14 86 MultiRelay_CC 1772 0.76 2.13 0.14 87 XM_UB99 1757 0.67 2.11 0.01 88 BOTNET_NORDNS 1753 0.69 2.11 0.04 89 RELAYCOUNTRY_DE 1750 1.26 2.10 0.88 90 XM_OfRef6 1728 1.72 2.08 1.56 91 RCVD_IN_IADB_LISTED 1668 4.15 2.01 5.13 92 MAILING_LIST_MULTI 1664 2.18 2.00 2.26 93 URIBL_BLACK 1622 0.65 1.95 0.05 94 XM_B_REG_HTML 1551 1.38 1.87 1.16 95 XM_ProductURIs 1496 1.96 1.80 2.04 96 HTML_MIME_NO_HTML_TAG 1490 1.69 1.79 1.64 97 XM_DK_Undo_01 1455 1.80 1.75 1.82 98 XMBdyGiftCard01 1439 1.46 1.73 1.34 99 XM_UB60 1434 0.59 1.72 0.08 100 XM_UB999 1417 0.54 1.70 0.01 101 BAYES_00 1406 5.35 1.69 7.02 102 RCVD_IN_IADB_SPF 1391 3.56 1.67 4.41 103 URI_TRY_3LD 1380 1.30 1.66 1.13 104 T_XMDrugObfuBody_08 1378 1.23 1.66 1.04 105 SpammyFromTLD_02 1371 0.64 1.65 0.18 106 XM_H_Long_From02 1326 1.11 1.59 0.89 107 TR_XM_RelayPhish 1317 0.77 1.58 0.40 108 RCVD_IN_IADB_SENDERID 1296 3.16 1.56 3.88 109 RCVD_IN_IADB_DK 1271 3.07 1.53 3.77 110 T_XMHurry_00 1260 0.90 1.52 0.62 111 TR_Symld_Words 1260 1.84 1.52 1.98 112 TR_XM_DK_Bayes 1243 4.05 1.49 5.21 113 TR_XM_DK_Bayes1 1235 4.00 1.49 5.14 114 XM_HighProb1 1224 0.48 1.47 0.03 115 URIBL_DBL_SPAM 1215 0.47 1.46 0.01 116 XM_H_PHPOS 1211 1.54 1.46 1.58 117 XM_PDF 1201 2.15 1.44 2.47 118 RELAYCOUNTRY_FR 1190 0.60 1.43 0.22 119 RELAYCOUNTRY_AT 1179 0.52 1.42 0.11 120 XMHTML_After_End 1174 0.63 1.41 0.27 121 BAYES_40 1154 2.53 1.39 3.05 122 XMClaimOffer 1138 0.52 1.37 0.13 123 TR_XM_DK_Bayes2 1125 3.40 1.35 4.33 124 UNPARSEABLE_RELAY 1123 4.89 1.35 6.50 125 SUBJ_DOLLARS 1096 0.53 1.32 0.18 126 RDNS_DYNAMIC 1096 0.83 1.32 0.60 127 XMStockSpam_06 1040 0.83 1.25 0.63 128 XM_B_COPY_HTML 1040 1.03 1.25 0.93 129 TR_Caps_n_Bayes_99 1023 0.44 1.23 0.08 130 XMSubMetaSSx_00 1014 0.53 1.22 0.22 131 XMBrknScrpt_02 1001 0.73 1.20 0.51 132 ALL_TRUSTED 999 12.64 1.20 17.83 133 XMPhish14 989 0.60 1.19 0.33 134 T_TooManySym_02 984 2.06 1.18 2.46 135 XM_RXBody 964 0.49 1.16 0.19 136 XMBody_78 962 0.99 1.16 0.92 137 FSL_THIS_IS_ADV 952 0.61 1.14 0.37 138 RELAYCOUNTRY_CN 944 0.37 1.14 0.02 139 XMGenDplmaNmb 918 0.77 1.10 0.62 140 LONG_JUNK_URI 903 0.39 1.09 0.08 141 XMSlimDrugH 897 0.58 1.08 0.35 142 XM_UB80 884 0.36 1.06 0.03 143 T_FILL_THIS_FORM_SHORT 879 0.76 1.06 0.63 144 XMPhish11 879 1.10 1.06 1.11 145 CK_HELO_DYNAMIC_SPLIT_IP 847 0.32 1.02 0.00 146 ANY_BOUNCE_MESSAGE 835 2.76 1.00 3.56 147 BOUNCE_MESSAGE 835 2.76 1.00 3.56 148 BODY_URI_ONLY 812 0.34 0.98 0.06 149 BAYES_20 810 1.88 0.97 2.29 150 XMMoneyMeta_00 809 0.45 0.97 0.22 151 HELO_MISC_IP 797 0.33 0.96 0.05 152 TR_LOTS_OF_MONEY2 787 0.57 0.95 0.40 153 T_MONEY_PERCENT 787 0.57 0.95 0.40 154 T_XMDrugObfuBody_00 783 0.79 0.94 0.73 155 XMHTMLBadTable_001 775 0.63 0.93 0.49 156 DATE_IN_FUTURE_06_12 771 0.29 0.93 0.00 157 DKIM_ADSP_CUSTOM_MED 770 0.95 0.93 0.97 158 RCVD_IN_IADB_VOUCHED 761 2.65 0.92 3.43 159 RELAYCOUNTRY_GB 758 0.72 0.91 0.63 160 NO_DNS_FOR_FROM 757 0.71 0.91 0.61 161 XM_BadFromFormat 757 0.41 0.91 0.18 162 RELAYCOUNTRY_AL 745 0.28 0.90 0.00 163 MISSING_HEADERS 742 0.52 0.89 0.36 164 GAPPY_SUBJECT 740 0.33 0.89 0.08 165 BODY_SINGLE_WORD 733 0.29 0.88 0.02 166 XMSolicitRefs_0 715 0.43 0.86 0.23 167 XM_Body_Obfu01 705 0.34 0.85 0.11 168 REMOVE_BEFORE_LINK 693 0.56 0.83 0.43 169 XM_H_PHPMailer 689 1.00 0.83 1.08 170 XMSubMetaSxObfu_03 681 0.52 0.82 0.38 171 HTML_FONT_FACE_BAD 678 0.52 0.82 0.38 172 T_Symld_Words_02 662 0.58 0.80 0.48 173 HTML_IMAGE_ONLY_08 654 0.35 0.79 0.15 174 HTML_SHORT_LINK_IMG_1 633 0.27 0.76 0.04 175 HTML_IMAGE_ONLY_24 632 0.45 0.76 0.31 176 RELAYCOUNTRY_IT 631 0.27 0.76 0.04 177 BODY_ENHANCEMENT 628 0.31 0.76 0.10 178 XMSexyCombo_04 622 0.32 0.75 0.13 179 MONEY_BACK 621 0.31 0.75 0.11 180 HTML_TAG_BALANCE_BODY 619 0.52 0.74 0.42 181 XMBSHREFv2 615 0.29 0.74 0.09 182 REPLYTO_WITHOUT_TO_CC 595 0.25 0.72 0.03 183 NML_ADSP_CUSTOM_MED 583 0.70 0.70 0.70 184 FORGED_GMAIL_RCVD 580 0.49 0.70 0.39 185 TM2_M_A_HREF_HREF 569 0.53 0.68 0.47 186 TR_MetaPhish_Combo_01 566 0.73 0.68 0.76 187 XM_H_Long_From03 561 0.25 0.67 0.06 188 RCVD_IN_MSPIKE_WL 558 1.29 0.67 1.57 189 RCVD_IN_MSPIKE_H3 558 1.29 0.67 1.57 190 URI_NOVOWEL 553 0.49 0.67 0.41 191 LongTLD 551 0.43 0.66 0.32 192 XMLongAddy 548 0.23 0.66 0.04 193 XMBounce_01 544 0.60 0.65 0.57 194 DATE_IN_PAST_03_06 541 0.27 0.65 0.10 195 T_HTML_TAG_BALANCE_CENTER 531 0.29 0.64 0.13 196 TooManyTo_002 525 1.46 0.63 1.84 197 LONG_JUNK_URI2 514 0.20 0.62 0.02 198 LOW_PRICE 507 0.29 0.61 0.14 199 XM_GoogleGroups 504 1.29 0.61 1.60 200 TR_LOTS_OF_MONEY3 501 0.37 0.60 0.27 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 148310 84.57 92.51 80.97 2 DKIM_SIGNED 137813 78.46 85.54 75.24 3 XM_DK_Pass 136176 77.04 82.96 74.35 4 DKIM_VALID 133899 75.88 81.99 73.10 5 DCC_CHECK_NEGATIVE 106165 45.33 17.51 57.96 6 DKIM_VALID_AU 105025 60.41 67.17 57.34 7 BAYES_50 96754 45.98 30.90 52.82 8 XMListUnsubscribeExists 88819 56.30 73.51 48.49 9 DCC_CHECK 74449 53.19 80.82 40.65 10 XM_H_QuotedFrom 65411 42.51 57.49 35.71 11 HTML_FONT_LOW_CONTRAST 52266 30.60 35.16 28.53 12 DKIM_VALID_EF 49753 24.40 18.30 27.16 13 T_TM2_M_HEADER_IN_MSG 47751 23.29 17.17 26.07 14 LOC_TINY_FONT_1 43760 28.31 38.03 23.89 15 XMSubLong 38742 21.94 23.69 21.15 16 XM_DK_Undo_02 35774 29.13 50.28 19.53 17 MIME_HTML_ONLY 35508 23.00 30.98 19.39 18 FVGT_m_MULTI_ODD 35221 21.34 25.99 19.23 19 BAYES_99 35184 27.60 46.07 19.21 20 ALL_TRUSTED 32663 12.64 1.20 17.83 21 BAYES_999 31623 24.35 39.95 17.26 22 MultiRelay 29666 16.09 15.86 16.20 23 XM_DKIMWhitelistDomains 27141 10.26 0.21 14.82 24 RCVD_IN_RP_SAFE 26244 12.71 9.16 14.33 25 XM_Multi_Part_URI 23953 14.70 18.28 13.08 26 RCVD_IN_RP_CERTIFIED 23703 11.34 7.82 12.94 27 T_KAM_HTML_FONT_INVALID 23194 14.01 16.97 12.66 28 XM_Body_Dirty_Words 19062 13.99 21.88 10.41 29 FSL_BULK_SIG 17720 10.76 13.16 9.67 30 TR_DCC_Bayes_99 17215 17.72 36.05 9.40 31 LOTS_OF_MONEY 16814 9.42 9.95 9.18 32 LotsOfNums_01 14416 7.90 7.96 7.87 33 HTML_IMAGE_RATIO_02 14331 11.46 19.46 7.82 34 XM_Evil_Numbers_Gen 13534 9.48 14.07 7.39 35 BOTNET_IPINHOSTNAME 13181 9.40 14.25 7.20 36 BAYES_00 12851 5.35 1.69 7.02 37 XM_H_Long_From01 12797 7.60 8.95 6.99 38 TooManyTo_001 12633 7.11 7.56 6.90 39 BAYES_60 12529 6.71 6.42 6.84 40 UNPARSEABLE_RELAY 11901 4.89 1.35 6.50 41 T_XMDrugObfuBody_14 11823 7.71 10.49 6.45 42 T_TooManySym_01 10228 4.93 3.49 5.58 43 IN_ZIMBRA_NJ_WHITELIST 10132 3.81 0.03 5.53 44 TVD_RCVD_IP 10129 3.95 0.46 5.53 45 XMStrtUSub 10026 5.36 5.11 5.47 46 XM_UncommonTLD01 9668 6.47 9.11 5.28 47 TR_XM_DK_Bayes 9546 4.05 1.49 5.21 48 TR_XM_DK_Bayes1 9409 4.00 1.49 5.14 49 RCVD_IN_IADB_LISTED 9390 4.15 2.01 5.13 50 XM_SendGrid 9379 4.80 4.10 5.12 51 RCVD_IN_MSPIKE_H2 9180 5.19 5.58 5.01 52 RELAYCOUNTRY_META 8914 8.91 17.80 4.87 53 XM_B_Phish_Phrases 8846 6.32 9.59 4.83 54 TR_XM_DocInvoice 8783 5.40 6.74 4.80 55 T_REMOTE_IMAGE 8674 4.88 5.21 4.74 56 TO_MALFORMED 8438 3.17 0.01 4.61 57 MIME_QP_LONG_LINE 8122 4.29 3.96 4.43 58 RCVD_IN_IADB_SPF 8082 3.56 1.67 4.41 59 XMNumbers 8006 4.39 4.43 4.37 60 TR_XM_DK_Bayes2 7939 3.40 1.35 4.33 61 XMSubMetaSx_00 7933 5.14 6.92 4.33 62 BAYES_80 7755 5.26 7.51 4.23 63 RCVD_IN_IADB_SENDERID 7115 3.16 1.56 3.88 64 RCVD_IN_IADB_DK 6904 3.07 1.53 3.77 65 INVALID_MSGID 6904 2.70 0.36 3.77 66 FROM_EXCESS_BASE64 6766 4.89 7.51 3.69 67 XMSexyCombo_05 6606 6.00 11.26 3.61 68 ANY_BOUNCE_MESSAGE 6528 2.76 1.00 3.56 69 BOUNCE_MESSAGE 6526 2.76 1.00 3.56 70 HTML_IMAGE_RATIO_04 6524 5.46 9.63 3.56 71 RCVD_IN_IADB_VOUCHED 6286 2.65 0.92 3.43 72 HTML_IMAGE_RATIO_06 6012 3.89 5.23 3.28 73 MIME_HTML_MOSTLY 5853 3.73 4.92 3.20 74 BAYES_40 5586 2.53 1.39 3.05 75 MPART_ALT_DIFF 5557 4.10 6.46 3.03 76 BAYES_95 5321 3.41 4.53 2.91 77 IN_HORDE_ADDRESS_BOOK 5274 2.01 0.09 2.88 78 XM_PDF 4531 2.15 1.44 2.47 79 T_TooManySym_02 4502 2.06 1.18 2.46 80 BAYES_20 4192 1.88 0.97 2.29 81 MAILING_LIST_MULTI 4138 2.18 2.00 2.26 82 DKIM_INVALID 3914 2.58 3.55 2.14 83 USER_IN_DEF_DKIM_WL 3890 1.54 0.25 2.12 84 XM_ProductURIs 3735 1.96 1.80 2.04 85 TR_Symld_Words 3631 1.84 1.52 1.98 86 TooManyTo_002 3365 1.46 0.63 1.84 87 XM_DK_Undo_01 3342 1.80 1.75 1.82 88 SUBJ_ALL_CAPS 3302 2.01 2.47 1.80 89 XM_DIRTYINTL 3149 2.75 5.03 1.72 90 XM_CamelCaseFrm001 3129 2.42 3.99 1.71 91 UNTRUSTED_Relay 3097 4.61 11.05 1.69 92 RCVD_IN_IADB_OPTIN 3091 1.33 0.55 1.69 93 XM_SPF_SoftFail 3060 2.34 3.83 1.67 94 HTML_MIME_NO_HTML_TAG 3006 1.69 1.79 1.64 95 BAYES_05 2993 1.28 0.51 1.63 96 XM_GoogleGroups 2939 1.29 0.61 1.60 97 HTML_IMAGE_RATIO_08 2937 1.80 2.24 1.60 98 XM_H_PHPOS 2898 1.54 1.46 1.58 99 RCVD_IN_MSPIKE_WL 2871 1.29 0.67 1.57 100 RCVD_IN_MSPIKE_H3 2871 1.29 0.67 1.57 101 XM_OfRef6 2860 1.72 2.08 1.56 102 RELAYCOUNTRY_CA 2702 2.22 3.86 1.48 103 USER_IN_WHITELIST 2590 0.97 0.00 1.41 104 TM2_M_URI_OPT_OUT 2531 1.91 3.08 1.38 105 URI_HEX 2470 1.89 3.08 1.35 106 XMBdyGiftCard01 2449 1.46 1.73 1.34 107 XM_UB50 2446 2.41 4.77 1.34 108 HELO_NODOT 2341 0.95 0.22 1.28 109 TooManyTo_003 2308 1.03 0.52 1.26 110 XMDiploma_00 2128 1.49 2.21 1.16 111 XM_B_REG_HTML 2124 1.38 1.87 1.16 112 URI_TRY_3LD 2069 1.30 1.66 1.13 113 T_TooManySym_03 2057 0.89 0.38 1.12 114 XMPhish11 2042 1.10 1.06 1.11 115 XM_H_PHPMailer 1987 1.00 0.83 1.08 116 MIME_HTML_ONLY_MULTI 1971 1.66 2.93 1.08 117 T_XMDrugObfuBody_08 1908 1.23 1.66 1.04 118 TooManyTo_004 1847 0.83 0.44 1.01 119 TM2_M_VERY_LONG_WORD 1834 1.46 2.47 1.00 120 XMBody_95 1800 0.70 0.09 0.98 121 DKIM_ADSP_CUSTOM_MED 1771 0.95 0.93 0.97 122 BOTNET 1707 5.10 14.27 0.93 123 XM_B_COPY_HTML 1705 1.03 1.25 0.93 124 XMBody_78 1681 0.99 1.16 0.92 125 XM_H_Long_From02 1624 1.11 1.59 0.89 126 RELAYCOUNTRY_DE 1605 1.26 2.10 0.88 127 TooManyTo_005 1601 0.72 0.37 0.87 128 PLING_QUERY 1580 0.78 0.60 0.86 129 FILL_THIS_FORM 1570 0.65 0.19 0.86 130 XM_H_PHPOS_M 1432 0.71 0.55 0.78 131 T_FILL_THIS_FORM_LOAN 1403 0.55 0.08 0.77 132 TR_MetaPhish_Combo_01 1388 0.73 0.68 0.76 133 XM_D_tchamptons_WL 1367 0.51 0.00 0.75 134 T_XMDrugObfuBody_00 1333 0.79 0.94 0.73 135 XMSubMetaSxObfu_02 1327 0.57 0.22 0.72 136 T_FILL_THIS_FORM_LONG 1326 0.53 0.10 0.72 137 DIET_1 1287 1.29 2.58 0.70 138 NML_ADSP_CUSTOM_MED 1275 0.70 0.70 0.70 139 RCVD_IN_IADB_DOPTIN 1217 0.48 0.08 0.66 140 RELAYCOUNTRY_GB 1160 0.72 0.91 0.63 141 XM_H_Trusted_IP 1159 0.44 0.00 0.63 142 XMStockSpam_06 1158 0.83 1.25 0.63 143 T_FILL_THIS_FORM_SHORT 1156 0.76 1.06 0.63 144 DKIM_ADSP_NXDOMAIN 1155 0.60 0.53 0.63 145 XMGenDplmaNmb 1140 0.77 1.10 0.62 146 T_XMHurry_00 1139 0.90 1.52 0.62 147 XM_D_omniadmin_Whitelist 1128 0.42 0.00 0.62 148 NO_DNS_FOR_FROM 1123 0.71 0.91 0.61 149 RDNS_DYNAMIC 1105 0.83 1.32 0.60 150 SpammyFromTLD_01 1065 1.27 2.77 0.58 151 T_TooManySym_04 1064 0.41 0.03 0.58 152 XMBounce_01 1045 0.60 0.65 0.57 153 TR_MetaPhish_Combo_01b 1010 0.41 0.10 0.55 154 XM_ShortIntro_01 1008 0.53 0.49 0.55 155 XMBrknScrpt_02 939 0.73 1.20 0.51 156 XMCapTrack 938 0.46 0.34 0.51 157 XMHTMLBadTable_001 899 0.63 0.93 0.49 158 T_Symld_Words_02 877 0.58 0.80 0.48 159 XMRcvdHeader_15 876 0.33 0.00 0.48 160 XMNoVowels 866 0.43 0.32 0.47 161 TM2_M_A_HREF_HREF 853 0.53 0.68 0.47 162 XMPhish30 829 0.99 2.18 0.45 163 XMDateMe_00 824 0.38 0.21 0.45 164 RCVD_IN_SORBS_DUL 810 0.37 0.20 0.44 165 XMBody_17 796 1.11 2.61 0.43 166 REMOVE_BEFORE_LINK 788 0.56 0.83 0.43 167 XMSexyCombo_01 781 0.96 2.15 0.43 168 HTML_TAG_BALANCE_BODY 770 0.52 0.74 0.42 169 FROM_EGROUPS 769 0.29 0.01 0.42 170 XMSUPPORT 752 0.28 0.00 0.41 171 URI_NOVOWEL 750 0.49 0.67 0.41 172 XMSubMetaI_00 749 1.20 2.93 0.41 173 T_OBFU_PDF_ATTACH 736 0.29 0.04 0.40 174 T_MONEY_PERCENT 733 0.57 0.95 0.40 175 TR_LOTS_OF_MONEY2 733 0.57 0.95 0.40 176 TR_XM_RelayPhish 727 0.77 1.58 0.40 177 FORGED_GMAIL_RCVD 718 0.49 0.70 0.39 178 XM_H_SpoofStaff4 708 0.28 0.05 0.39 179 HTML_FONT_FACE_BAD 703 0.52 0.82 0.38 180 XMSubMetaSxObfu_03 700 0.52 0.82 0.38 181 XM_B_TRADE_HTML 689 0.41 0.48 0.38 182 FSL_THIS_IS_ADV 677 0.61 1.14 0.37 183 HTML_IMAGE_ONLY_28 675 0.42 0.53 0.37 184 MISSING_HEADERS 655 0.52 0.89 0.36 185 XMSlimDrugH 645 0.58 1.08 0.35 186 XMBody_29 640 0.31 0.22 0.35 187 TVD_SPACE_RATIO 616 0.33 0.32 0.34 188 RELAYCOUNTRY_NL 612 0.39 0.51 0.33 189 HTML_IMAGE_ONLY_32 608 0.31 0.27 0.33 190 XMPhish14 602 0.60 1.19 0.33 191 XMGappySubj_01 600 0.41 0.58 0.33 192 LongTLD 581 0.43 0.66 0.32 193 RCVD_IN_BL_SPAMCOP_NET 578 0.96 2.38 0.32 194 RELAYCOUNTRY_AU 572 0.39 0.57 0.31 195 HTTPS_HTTP_MISMATCH 571 0.38 0.54 0.31 196 HTML_IMAGE_ONLY_24 564 0.45 0.76 0.31 197 MSGID_FROM_MTA_HEADER 561 0.27 0.20 0.31 198 RCVD_IN_PSBL 545 1.24 3.32 0.30 199 AC_DIV_BONANZA 519 0.25 0.17 0.28 200 XM_RedBox 503 0.19 0.00 0.27 ----------------------------------------------------------------------