Email: 636308 Autolearn: 0 AvgScore: 1.86 AvgScanTime: 4.52 sec Spam: 145665 Autolearn: 0 AvgScore: 12.18 AvgScanTime: 5.60 sec Ham: 490643 Autolearn: 0 AvgScore: -1.20 AvgScanTime: 4.20 sec Time Spent Running SA: 799.66 hours Time Spent Processing Spam: 226.60 hours Time Spent Processing Ham: 573.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 123947 85.50 85.09 85.63 2 DCC_CHECK 100804 45.52 69.20 38.49 3 DKIM_SIGNED 99322 70.31 68.19 70.95 4 XM_DK_Pass 95878 68.80 65.82 69.69 5 DKIM_VALID 88066 63.22 60.46 64.04 6 XMListUnsubscribeExists 87336 49.55 59.96 46.47 7 BAYES_50 79980 56.42 54.91 56.87 8 DKIM_VALID_AU 71448 46.50 49.05 45.74 9 XM_H_QuotedFrom 66295 40.41 45.51 38.89 10 MIME_HTML_ONLY 48894 21.78 33.57 18.28 11 HTML_FONT_LOW_CONTRAST 48060 26.63 32.99 24.75 12 DCC_CHECK_NEGATIVE 43214 52.73 29.67 59.58 13 LOC_TINY_FONT_1 43169 22.85 29.64 20.84 14 XM_DK_Undo_02 39306 10.96 26.98 6.20 15 XM_Evil_Numbers_Gen 37018 13.02 25.41 9.34 16 BOTNET 35265 7.09 24.21 2.01 17 LOTS_OF_MONEY 34714 11.31 23.83 7.59 18 XMSubLong 33753 20.79 23.17 20.08 19 FVGT_m_MULTI_ODD 31536 20.30 21.65 19.90 20 BAYES_99 30736 8.33 21.10 4.54 21 RELAYCOUNTRY_META 29644 8.70 20.35 5.24 22 XM_Multi_Part_URI 27782 12.92 19.07 11.09 23 STYLE_GIBBERISH 26755 17.17 18.37 16.81 24 DKIM_VALID_EF 25861 23.35 17.75 25.01 25 XM_Body_Dirty_Words 25503 13.24 17.51 11.97 26 BAYES_999 25431 6.97 17.46 3.86 27 TR_DCC_Bayes_99 24740 5.85 16.98 2.55 28 RCVD_IN_RP_RNBL 23567 3.77 16.18 0.08 29 UNTRUSTED_Relay 23187 4.64 15.92 1.29 30 T_KAM_HTML_FONT_INVALID 22126 15.58 15.19 15.69 31 T_TM2_M_HEADER_IN_MSG 21647 27.82 14.86 31.66 32 HTML_IMAGE_RATIO_02 20382 9.23 13.99 7.82 33 MultiRelay 19772 17.63 13.57 18.84 34 TR_LOTS_OF_MONEY3 19761 3.33 13.57 0.29 35 BOTNET_IPINHOSTNAME 18973 7.08 13.03 5.31 36 FSL_BULK_SIG 17999 8.28 12.36 7.07 37 BOUNCE_MESSAGE 17582 5.05 12.07 2.96 38 ANY_BOUNCE_MESSAGE 17582 5.05 12.07 2.96 39 FROM_EXCESS_BASE64 16600 5.02 11.40 3.13 40 XM_UncommonTLD01 15686 4.96 10.77 3.24 41 XMSexyCombo_05 14283 4.68 9.81 3.15 42 SpammyFromTLD_02 11619 2.01 7.98 0.24 43 T_XMDrugObfuBody_14 11598 7.94 7.96 7.94 44 T_REMOTE_IMAGE 11545 5.10 7.93 4.26 45 DKIM_INVALID 11256 7.09 7.73 6.91 46 XM_UB50 11119 2.28 7.63 0.69 47 TooManyTo_001 11009 8.97 7.56 9.39 48 BAYES_80 10729 3.61 7.37 2.49 49 MPART_ALT_DIFF 10693 4.00 7.34 3.00 50 HTML_IMAGE_RATIO_04 10572 5.52 7.26 5.01 51 HTML_MIME_NO_HTML_TAG 10523 3.32 7.22 2.16 52 XM_B_Phish_Phrases 10128 5.95 6.95 5.65 53 XM_H_Long_From01 9939 5.99 6.82 5.74 54 XMSubMetaSx_00 9770 4.55 6.71 3.91 55 BAYES_60 9618 5.07 6.60 4.62 56 MISSING_HEADERS 9223 1.92 6.33 0.61 57 T_XMDrugObfuBody_01 8698 1.39 5.97 0.03 58 BODY_URI_ONLY 7985 1.36 5.48 0.13 59 XMNumbers 7936 3.85 5.45 3.37 60 HTML_SHORT_LINK_IMG_1 7810 1.25 5.36 0.03 61 LotsOfNums_01 7761 7.08 5.33 7.59 62 SHORTENER_SHORT_IMG 7661 1.21 5.26 0.00 63 URI_BUFFLY 7650 1.20 5.25 0.00 64 URI_HEX 6781 2.20 4.66 1.47 65 RELAYCOUNTRY_KR 6399 1.02 4.39 0.02 66 MIME_HEADER_CTYPE_ONLY 6316 1.10 4.34 0.14 67 XM_DIRTYINTL 6145 2.39 4.22 1.85 68 HTML_IMAGE_ONLY_04 6040 0.98 4.15 0.05 69 MIME_HTML_ONLY_MULTI 6024 2.08 4.14 1.47 70 HTML_IMAGE_RATIO_06 5853 3.41 4.02 3.23 71 TM2_M_URI_OPT_OUT 5517 2.32 3.79 1.88 72 RELAYCOUNTRY_CA 5329 2.03 3.66 1.55 73 BAYES_95 5099 1.85 3.50 1.36 74 HTML_IMAGE_RATIO_08 4867 2.28 3.34 1.97 75 HELO_NODOT 4832 2.35 3.32 2.06 76 XM_SPF_SoftFail 4702 2.60 3.23 2.42 77 XMStrtUSub 4602 5.55 3.16 6.26 78 HTML_SHORT_CENTER 4419 0.70 3.03 0.00 79 MIME_HTML_MOSTLY 4308 2.59 2.96 2.48 80 XM_UB60 4307 0.73 2.96 0.07 81 SUBJ_ALL_CAPS 4231 1.89 2.90 1.59 82 XM_SendGrid 4102 5.10 2.82 5.78 83 MultiRelay_CC 3978 0.75 2.73 0.16 84 MultiRelay_Combo 3978 0.75 2.73 0.16 85 XM_CamelCaseFrm001 3728 1.93 2.56 1.75 86 RCVD_IN_MSPIKE_H2 3656 3.99 2.51 4.43 87 MIME_QP_LONG_LINE 3630 4.82 2.49 5.52 88 T_TooManySym_01 3621 4.65 2.49 5.29 89 XMDiploma_00 3568 1.87 2.45 1.70 90 XM_URI_RBL 3537 0.83 2.43 0.35 91 XM_UB80 3485 0.57 2.39 0.03 92 RCVD_IN_RP_SAFE 3480 6.66 2.39 7.93 93 T_XMDrugObfuBody_08 3436 1.53 2.36 1.28 94 BAYES_40 3197 4.40 2.19 5.05 95 UNPARSEABLE_RELAY 3191 2.77 2.19 2.95 96 XM_S_JOY_D 3076 0.77 2.11 0.38 97 XM_OfRef6 3055 1.83 2.10 1.75 98 RELAYCOUNTRY_IN 2999 0.56 2.06 0.12 99 MAILING_LIST_MULTI 2966 2.20 2.04 2.25 100 XMBdyGiftCard01 2887 1.04 1.98 0.76 101 BOTNET_NORDNS 2877 0.47 1.98 0.02 102 REPLYTO_WITHOUT_TO_CC 2718 0.47 1.87 0.06 103 BAYES_20 2684 3.52 1.84 4.01 104 DIET_1 2644 0.77 1.82 0.46 105 TR_LOTS_OF_MONEY1 2637 0.43 1.81 0.02 106 RELAYCOUNTRY_CN 2602 0.45 1.79 0.05 107 SpammyFromTLD_01 2597 0.96 1.78 0.71 108 RCVD_IN_RP_CERTIFIED 2529 5.66 1.74 6.82 109 RELAYCOUNTRY_NG_I 2518 0.41 1.73 0.02 110 XMGenDplmaNmb 2446 1.27 1.68 1.15 111 XMStockSpam_06 2393 1.34 1.64 1.25 112 XMSexyCombo_01 2345 1.01 1.61 0.83 113 XMDateMe_00 2331 0.74 1.60 0.48 114 BAYES_00 2215 14.52 1.52 18.39 115 XMPhish11 2207 1.18 1.52 1.08 116 TM2_M_VERY_LONG_WORD 2198 1.11 1.51 0.99 117 XMSubMetaI_00 2156 0.83 1.48 0.63 118 RCVD_IN_BL_SPAMCOP_NET 2155 0.67 1.48 0.43 119 ADVANCE_FEE_3_NEW_MONEY 2133 0.34 1.46 0.00 120 MONEY_FRAUD_5 2121 0.34 1.46 0.00 121 XMBody_17 2117 0.77 1.45 0.57 122 TR_Symld_Words 2074 1.51 1.42 1.53 123 T_XMDrugObfuBody_00 2063 0.76 1.42 0.57 124 XM_ProductURIs 2059 1.18 1.41 1.11 125 XMPhish30 2041 0.59 1.40 0.35 126 TR_XM_RelayPhish 1958 0.81 1.34 0.65 127 HTML_IMAGE_ONLY_08 1953 0.41 1.34 0.13 128 FSL_HELO_NON_FQDN_1 1932 0.34 1.33 0.05 129 URIBL_DBL_SPAM 1891 0.33 1.30 0.04 130 ALL_TRUSTED 1870 15.61 1.28 19.87 131 URIBL_BLACK 1861 0.36 1.28 0.08 132 XMHTML_After_End 1845 0.62 1.27 0.42 133 XMSubject_63 1834 0.29 1.26 0.00 134 HELO_DYNAMIC_IPADDR 1808 0.29 1.24 0.01 135 RELAYCOUNTRY_FR 1783 0.47 1.22 0.25 136 PLING_QUERY 1779 0.58 1.22 0.39 137 SUBJ_DOLLARS 1772 0.55 1.22 0.35 138 TooManyTo_002 1667 2.09 1.14 2.37 139 RCVD_IN_IADB_LISTED 1648 3.89 1.13 4.71 140 FROM_SUSPICIOUS_NTLD 1625 0.31 1.12 0.07 141 RELAYCOUNTRY_GB 1589 1.12 1.09 1.13 142 TR_XM_DK_Bayes 1528 10.89 1.05 13.82 143 XMPhish14 1506 0.65 1.03 0.54 144 XMMoneyMeta_00 1495 0.65 1.03 0.54 145 DATE_IN_PAST_06_12 1452 0.26 1.00 0.04 146 TooManyTo_003 1452 1.50 1.00 1.64 147 XM_DK_Undo_01 1432 1.55 0.98 1.72 148 BAYES_05 1407 2.28 0.97 2.67 149 HTML_FONT_FACE_BAD 1386 0.55 0.95 0.43 150 RELAYCOUNTRY_AT 1382 0.43 0.95 0.28 151 XMSubMetaSxObfu_03 1382 1.04 0.95 1.07 152 XM_UB99 1365 0.22 0.94 0.01 153 XM_UB95 1363 0.22 0.94 0.01 154 HTTPS_HTTP_MISMATCH 1360 0.66 0.93 0.57 155 RCVD_IN_IADB_SPF 1355 3.39 0.93 4.12 156 HTML_FONT_SIZE_LARGE 1353 0.43 0.93 0.28 157 T_HTML_TAG_BALANCE_CENTER 1351 0.29 0.93 0.10 158 XM_H_Long_From02 1349 0.92 0.93 0.91 159 XM_H_PHPOS 1347 1.02 0.92 1.05 160 XMHTMLBadTable_001 1331 0.54 0.91 0.43 161 RCVD_IN_IADB_SENDERID 1284 3.00 0.88 3.63 162 XM_B_REG_HTML 1282 0.53 0.88 0.43 163 RCVD_IN_IADB_DK 1271 2.94 0.87 3.56 164 T_FILL_THIS_FORM_SHORT 1251 1.03 0.86 1.08 165 TR_XM_DK_Bayes1 1246 9.94 0.86 12.63 166 TooManyTo_004 1245 1.15 0.85 1.24 167 DKIM_ADSP_CUSTOM_MED 1209 0.95 0.83 0.99 168 RDNS_DYNAMIC 1203 0.45 0.83 0.34 169 DATE_IN_PAST_03_06 1199 0.25 0.82 0.08 170 XM_RXBody 1193 0.38 0.82 0.25 171 URI_TRY_3LD 1180 1.58 0.81 1.80 172 TR_Mismatch_TLD_02 1172 0.25 0.80 0.08 173 LongTLD 1171 0.33 0.80 0.19 174 XM_BadFromFormat 1166 0.27 0.80 0.11 175 TR_LOTS_OF_MONEY2 1164 0.35 0.80 0.22 176 T_MONEY_PERCENT 1164 0.35 0.80 0.22 177 T_XMHurry_00 1159 0.67 0.80 0.63 178 LONG_JUNK_URI3 1157 0.21 0.79 0.03 179 XMBody_78 1150 0.48 0.79 0.38 180 T_TooManySym_02 1149 1.52 0.79 1.73 181 XM_Combo_Sbj 1139 0.31 0.78 0.17 182 XMGppyBdWords 1119 0.29 0.77 0.15 183 XMSlimDrugH 1104 0.38 0.76 0.27 184 HTML_FONT_SIZE_HUGE 1100 0.25 0.76 0.10 185 DKIM_ADSP_NXDOMAIN 1099 0.82 0.75 0.84 186 XMSubMetaSSx_00 1099 0.38 0.75 0.26 187 XM_PDF 1098 4.14 0.75 5.15 188 MPART_ALT_DIFF_COUNT 1098 0.31 0.75 0.18 189 XM_B_COPY_HTML 1095 0.45 0.75 0.37 190 TooManyTo_005 1094 0.98 0.75 1.05 191 FORGED_GMAIL_RCVD 1089 0.61 0.75 0.57 192 XMLongAddy 1087 0.22 0.75 0.06 193 T_Symld_Words_02 1085 0.50 0.74 0.43 194 HTML_IMAGE_ONLY_28 1083 0.53 0.74 0.46 195 NML_ADSP_CUSTOM_MED 1051 0.68 0.72 0.67 196 TR_XM_DK_Bayes2 1049 8.13 0.72 10.33 197 RCVD_IN_IADB_VOUCHED 1036 2.58 0.71 3.13 198 HTML_TAG_BALANCE_BODY 1012 0.46 0.69 0.39 199 RELAYCOUNTRY_DE 992 0.43 0.68 0.35 200 XM_H_PHPMailer 972 0.71 0.67 0.72 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 420126 85.50 85.09 85.63 2 DKIM_SIGNED 348090 70.31 68.19 70.95 3 XM_DK_Pass 341909 68.80 65.82 69.69 4 DKIM_VALID 314208 63.22 60.46 64.04 5 DCC_CHECK_NEGATIVE 292336 52.73 29.67 59.58 6 BAYES_50 279021 56.42 54.91 56.87 7 XMListUnsubscribeExists 227982 49.55 59.96 46.47 8 DKIM_VALID_AU 224443 46.50 49.05 45.74 9 XM_H_QuotedFrom 190817 40.41 45.51 38.89 10 DCC_CHECK 188860 45.52 69.20 38.49 11 T_TM2_M_HEADER_IN_MSG 155347 27.82 14.86 31.66 12 DKIM_VALID_EF 122717 23.35 17.75 25.01 13 HTML_FONT_LOW_CONTRAST 121416 26.63 32.99 24.75 14 LOC_TINY_FONT_1 102249 22.85 29.64 20.84 15 XMSubLong 98511 20.79 23.17 20.08 16 FVGT_m_MULTI_ODD 97626 20.30 21.65 19.90 17 ALL_TRUSTED 97470 15.61 1.28 19.87 18 MultiRelay 92435 17.63 13.57 18.84 19 BAYES_00 90205 14.52 1.52 18.39 20 MIME_HTML_ONLY 89697 21.78 33.57 18.28 21 STYLE_GIBBERISH 82479 17.17 18.37 16.81 22 T_KAM_HTML_FONT_INVALID 76990 15.58 15.19 15.69 23 TR_XM_DK_Bayes 67793 10.89 1.05 13.82 24 TR_XM_DK_Bayes1 61972 9.94 0.86 12.63 25 XM_DKIMWhitelistDomains 58834 9.26 0.06 11.99 26 XM_Body_Dirty_Words 58727 13.24 17.51 11.97 27 XM_Multi_Part_URI 54403 12.92 19.07 11.09 28 TR_XM_DK_Bayes2 50698 8.13 0.72 10.33 29 TooManyTo_001 46081 8.97 7.56 9.39 30 XM_Evil_Numbers_Gen 45837 13.02 25.41 9.34 31 T_XMDrugObfuBody_14 38945 7.94 7.96 7.94 32 RCVD_IN_RP_SAFE 38887 6.66 2.39 7.93 33 HTML_IMAGE_RATIO_02 38373 9.23 13.99 7.82 34 LotsOfNums_01 37263 7.08 5.33 7.59 35 LOTS_OF_MONEY 37221 11.31 23.83 7.59 36 FSL_BULK_SIG 34711 8.28 12.36 7.07 37 DKIM_INVALID 33882 7.09 7.73 6.91 38 RCVD_IN_RP_CERTIFIED 33468 5.66 1.74 6.82 39 XMStrtUSub 30695 5.55 3.16 6.26 40 XM_DK_Undo_02 30437 10.96 26.98 6.20 41 XM_SendGrid 28360 5.10 2.82 5.78 42 XM_H_Long_From01 28154 5.99 6.82 5.74 43 XM_B_Phish_Phrases 27745 5.95 6.95 5.65 44 MIME_QP_LONG_LINE 27071 4.82 2.49 5.52 45 BOTNET_IPINHOSTNAME 26076 7.08 13.03 5.31 46 T_TooManySym_01 25939 4.65 2.49 5.29 47 RELAYCOUNTRY_META 25699 8.70 20.35 5.24 48 XM_PDF 25253 4.14 0.75 5.15 49 BAYES_40 24781 4.40 2.19 5.05 50 HTML_IMAGE_RATIO_04 24564 5.52 7.26 5.01 51 RCVD_IN_IADB_LISTED 23116 3.89 1.13 4.71 52 BAYES_60 22673 5.07 6.60 4.62 53 BAYES_99 22256 8.33 21.10 4.54 54 RCVD_IN_MSPIKE_H2 21728 3.99 2.51 4.43 55 T_REMOTE_IMAGE 20925 5.10 7.93 4.26 56 RCVD_IN_IADB_SPF 20233 3.39 0.93 4.12 57 BAYES_20 19687 3.52 1.84 4.01 58 XMSubMetaSx_00 19167 4.55 6.71 3.91 59 BAYES_999 18932 6.97 17.46 3.86 60 RCVD_IN_IADB_SENDERID 17830 3.00 0.88 3.63 61 RCVD_IN_IADB_DK 17466 2.94 0.87 3.56 62 IN_ZIMBRA_NJ_WHITELIST 16924 2.66 0.01 3.45 63 XMNumbers 16533 3.85 5.45 3.37 64 XM_UncommonTLD01 15890 4.96 10.77 3.24 65 HTML_IMAGE_RATIO_06 15866 3.41 4.02 3.23 66 XMSexyCombo_05 15466 4.68 9.81 3.15 67 FROM_EXCESS_BASE64 15369 5.02 11.40 3.13 68 RCVD_IN_IADB_VOUCHED 15355 2.58 0.71 3.13 69 MPART_ALT_DIFF 14731 4.00 7.34 3.00 70 TVD_RCVD_IP 14625 2.37 0.33 2.98 71 ANY_BOUNCE_MESSAGE 14542 5.05 12.07 2.96 72 BOUNCE_MESSAGE 14532 5.05 12.07 2.96 73 UNPARSEABLE_RELAY 14452 2.77 2.19 2.95 74 TO_MALFORMED 13886 2.20 0.06 2.83 75 BAYES_05 13121 2.28 0.97 2.67 76 TR_DCC_Bayes_99 12505 5.85 16.98 2.55 77 BAYES_80 12223 3.61 7.37 2.49 78 MIME_HTML_MOSTLY 12145 2.59 2.96 2.48 79 XM_SPF_SoftFail 11866 2.60 3.23 2.42 80 TooManyTo_002 11620 2.09 1.14 2.37 81 MAILING_LIST_MULTI 11060 2.20 2.04 2.25 82 HTML_MIME_NO_HTML_TAG 10618 3.32 7.22 2.16 83 HELO_NODOT 10104 2.35 3.32 2.06 84 BOTNET 9844 7.09 24.21 2.01 85 HTML_IMAGE_RATIO_08 9643 2.28 3.34 1.97 86 RCVD_IN_IADB_OPTIN 9632 1.64 0.54 1.96 87 TM2_M_URI_OPT_OUT 9220 2.32 3.79 1.88 88 XM_DIRTYINTL 9075 2.39 4.22 1.85 89 URI_TRY_3LD 8854 1.58 0.81 1.80 90 RCVD_IN_MSPIKE_WL 8663 1.42 0.27 1.77 91 RCVD_IN_MSPIKE_H3 8652 1.42 0.27 1.76 92 XM_OfRef6 8602 1.83 2.10 1.75 93 XM_CamelCaseFrm001 8580 1.93 2.56 1.75 94 T_TooManySym_02 8505 1.52 0.79 1.73 95 XM_DK_Undo_01 8453 1.55 0.98 1.72 96 XMDiploma_00 8330 1.87 2.45 1.70 97 TooManyTo_003 8070 1.50 1.00 1.64 98 SUBJ_ALL_CAPS 7778 1.89 2.90 1.59 99 RELAYCOUNTRY_CA 7602 2.03 3.66 1.55 100 TR_Symld_Words 7512 1.51 1.42 1.53 101 XMCapTrack 7492 1.24 0.28 1.53 102 IN_HORDE_ADDRESS_BOOK 7416 1.17 0.03 1.51 103 MIME_HTML_ONLY_MULTI 7231 2.08 4.14 1.47 104 URI_HEX 7219 2.20 4.66 1.47 105 INVALID_MSGID 7126 1.15 0.11 1.45 106 TR_MetaPhish_Combo_01 6706 1.19 0.59 1.37 107 BAYES_95 6675 1.85 3.50 1.36 108 UNTRUSTED_Relay 6312 4.64 15.92 1.29 109 T_XMDrugObfuBody_08 6272 1.53 2.36 1.28 110 XMStockSpam_06 6147 1.34 1.64 1.25 111 TooManyTo_004 6083 1.15 0.85 1.24 112 USER_IN_DEF_DKIM_WL 5637 0.91 0.09 1.15 113 XMGenDplmaNmb 5628 1.27 1.68 1.15 114 XM_GoogleGroups 5597 0.97 0.41 1.14 115 RELAYCOUNTRY_GB 5542 1.12 1.09 1.13 116 XM_ProductURIs 5461 1.18 1.41 1.11 117 T_FILL_THIS_FORM_SHORT 5320 1.03 0.86 1.08 118 XMPhish11 5277 1.18 1.52 1.08 119 XMSubMetaSxObfu_03 5227 1.04 0.95 1.07 120 TooManyTo_005 5163 0.98 0.75 1.05 121 XM_H_PHPOS 5134 1.02 0.92 1.05 122 TM2_M_VERY_LONG_WORD 4851 1.11 1.51 0.99 123 DKIM_ADSP_CUSTOM_MED 4847 0.95 0.83 0.99 124 T_OBFU_PDF_ATTACH 4830 0.81 0.23 0.98 125 XM_H_Long_From02 4487 0.92 0.93 0.91 126 DKIM_ADSP_NXDOMAIN 4140 0.82 0.75 0.84 127 XMSexyCombo_01 4063 1.01 1.61 0.83 128 XMBdyGiftCard01 3726 1.04 1.98 0.76 129 XM_H_PHPMailer 3525 0.71 0.67 0.72 130 SpammyFromTLD_01 3497 0.96 1.78 0.71 131 XM_UB50 3387 2.28 7.63 0.69 132 NML_ADSP_CUSTOM_MED 3306 0.68 0.72 0.67 133 TR_XM_RelayPhish 3211 0.81 1.34 0.65 134 XMLngstWrd_00 3151 0.62 0.53 0.64 135 XMSubMetaI_00 3111 0.83 1.48 0.63 136 T_XMHurry_00 3090 0.67 0.80 0.63 137 MISSING_HEADERS 3015 1.92 6.33 0.61 138 FILL_THIS_FORM 2985 0.52 0.22 0.61 139 XMLngstWrd_01 2961 0.56 0.41 0.60 140 XMBrknScrpt_02 2819 0.57 0.55 0.57 141 HTTPS_HTTP_MISMATCH 2808 0.66 0.93 0.57 142 FORGED_GMAIL_RCVD 2802 0.61 0.75 0.57 143 T_XMDrugObfuBody_00 2796 0.76 1.42 0.57 144 XMBody_17 2778 0.77 1.45 0.57 145 USER_IN_WHITELIST 2765 0.43 0.00 0.56 146 XMNoVowels 2700 0.52 0.44 0.55 147 XMMoneyMeta_00 2671 0.65 1.03 0.54 148 XMPhish14 2640 0.65 1.03 0.54 149 URI_NOVOWEL 2623 0.53 0.50 0.53 150 T_TooManySym_03 2596 0.44 0.12 0.53 151 XMBody_95 2595 0.43 0.09 0.53 152 AC_DIV_BONANZA 2591 0.44 0.14 0.53 153 T_FILL_THIS_FORM_LONG 2546 0.43 0.14 0.52 154 HTML_IMAGE_ONLY_32 2459 0.47 0.36 0.50 155 SHORT_HELO_AND_INLINE_IMAGE 2458 0.40 0.06 0.50 156 HTML_IMAGE_ONLY_16 2433 0.44 0.26 0.50 157 LOW_PRICE 2376 0.52 0.65 0.48 158 FROM_GOV_SPOOF 2360 0.42 0.23 0.48 159 XMDateMe_00 2357 0.74 1.60 0.48 160 XMSolicitRefs_0 2355 0.52 0.64 0.48 161 XM_ShortIntro_01 2310 0.44 0.32 0.47 162 XMSexyCombo_04 2273 0.51 0.67 0.46 163 HTML_IMAGE_ONLY_28 2262 0.53 0.74 0.46 164 DIET_1 2259 0.77 1.82 0.46 165 TM2_M_A_HREF_HREF 2199 0.46 0.52 0.45 166 RCVD_IN_SORBS_DUL 2193 0.43 0.37 0.45 167 XMHTMLBadTable_001 2117 0.54 0.91 0.43 168 HTML_FONT_FACE_BAD 2112 0.55 0.95 0.43 169 XM_B_REG_HTML 2105 0.53 0.88 0.43 170 RCVD_IN_BL_SPAMCOP_NET 2102 0.67 1.48 0.43 171 T_Symld_Words_02 2092 0.50 0.74 0.43 172 XMHTML_After_End 2079 0.62 1.27 0.42 173 XMSubMetaSxObfu_02 2047 0.41 0.38 0.42 174 RELAYCOUNTRY_AU 2043 0.45 0.57 0.42 175 XMSubMetaSx_01 2037 0.41 0.38 0.42 176 TM2_M_BODY_EMPTY 1997 0.34 0.13 0.41 177 HTML_IMAGE_ONLY_24 1975 0.40 0.38 0.40 178 HTML_TAG_BALANCE_BODY 1925 0.46 0.69 0.39 179 PLING_QUERY 1894 0.58 1.22 0.39 180 XMBody_78 1878 0.48 0.79 0.38 181 XMSexyCombo_02 1859 0.32 0.14 0.38 182 XM_S_JOY_D 1846 0.77 2.11 0.38 183 T_MANY_PILL_PRICE 1820 0.30 0.05 0.37 184 XM_B_COPY_HTML 1799 0.45 0.75 0.37 185 NO_DNS_FOR_FROM 1766 0.42 0.62 0.36 186 XMLngstWrd_02 1746 0.35 0.32 0.36 187 XMPhish30 1739 0.59 1.40 0.35 188 XMGappySubj_01 1734 0.37 0.44 0.35 189 XM_URI_RBL 1716 0.83 2.43 0.35 190 RELAYCOUNTRY_DE 1713 0.43 0.68 0.35 191 XMSubNoVowel 1711 0.39 0.51 0.35 192 SUBJ_DOLLARS 1705 0.55 1.22 0.35 193 XM_H_PHPOS_M 1682 0.36 0.41 0.34 194 RDNS_DYNAMIC 1669 0.45 0.83 0.34 195 TVD_SPACE_RATIO 1632 0.31 0.23 0.33 196 UPPERCASE_50_75 1631 0.28 0.08 0.33 197 T_FROM_GOV_DKIM_AU 1625 0.29 0.13 0.33 198 XM_Body_Obfu01 1597 0.35 0.45 0.33 199 FILL_THIS_FORM_LOAN 1551 0.26 0.07 0.32 200 XM_H_Undi_Recip 1510 0.29 0.24 0.31 ----------------------------------------------------------------------