Email: 583803 Autolearn: 0 AvgScore: 3.32 AvgScanTime: 4.38 sec Spam: 175678 Autolearn: 0 AvgScore: 12.38 AvgScanTime: 4.96 sec Ham: 408125 Autolearn: 0 AvgScore: -0.58 AvgScanTime: 4.13 sec Time Spent Running SA: 710.28 hours Time Spent Processing Spam: 242.27 hours Time Spent Processing Ham: 468.01 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 169028 87.41 96.21 83.62 2 DKIM_SIGNED 150589 74.84 85.72 70.16 3 XM_DK_Pass 146810 73.11 83.57 68.61 4 DKIM_VALID 144201 71.27 82.08 66.62 5 DCC_CHECK 139046 48.49 79.15 35.30 6 XMListUnsubscribeExists 129802 53.45 73.89 44.65 7 DKIM_VALID_AU 112279 52.38 63.91 47.41 8 XM_H_QuotedFrom 98235 40.39 55.92 33.70 9 XM_DK_Undo_02 83797 23.01 47.70 12.38 10 BAYES_99 74552 20.68 42.44 11.32 11 BAYES_999 63611 17.85 36.21 9.95 12 LOC_TINY_FONT_1 63480 24.16 36.13 19.00 13 HTML_FONT_LOW_CONTRAST 63227 27.80 35.99 24.27 14 BAYES_50 62506 52.02 35.58 59.09 15 TR_DCC_Bayes_99 58877 14.05 33.51 5.68 16 MIME_HTML_ONLY 51325 21.47 29.22 18.13 17 FVGT_m_MULTI_ODD 49267 22.25 28.04 19.75 18 XMSubLong 46495 22.12 26.47 20.25 19 DKIM_VALID_EF 34960 21.49 19.90 22.17 20 T_TM2_M_HEADER_IN_MSG 34372 28.79 19.57 32.76 21 XM_Body_Dirty_Words 33768 12.83 19.22 10.08 22 T_KAM_HTML_FONT_INVALID 33438 15.23 19.03 13.60 23 DCC_CHECK_NEGATIVE 32731 49.27 18.63 62.45 24 HTML_IMAGE_RATIO_02 31066 10.12 17.68 6.86 25 MultiRelay 29188 18.81 16.61 19.76 26 URIBL_RHS_DOB 28963 9.05 16.49 5.85 27 RELAYCOUNTRY_META 27995 8.79 15.94 5.71 28 XM_Multi_Part_URI 27276 12.57 15.53 11.30 29 XM_Evil_Numbers_Gen 24664 9.56 14.04 7.63 30 BOTNET_IPINHOSTNAME 23109 7.12 13.15 4.53 31 BOTNET 20855 4.58 11.87 1.45 32 FSL_BULK_SIG 19401 8.46 11.04 7.35 33 T_XMDrugObfuBody_14 18312 8.56 10.42 7.76 34 LOTS_OF_MONEY 17838 9.27 10.15 8.89 35 LotsOfNums_01 16562 8.30 9.43 7.81 36 HTML_IMAGE_RATIO_04 16544 6.03 9.42 4.57 37 TooManyTo_001 16320 8.74 9.29 8.50 38 XMSexyCombo_05 15723 4.93 8.95 3.19 39 XM_B_Phish_Phrases 15511 6.21 8.83 5.08 40 UNTRUSTED_Relay 15448 3.63 8.79 1.41 41 XM_H_Long_From01 15270 6.78 8.69 5.96 42 TR_XM_DocInvoice 15238 5.41 8.67 4.01 43 MPART_ALT_DIFF 12420 4.00 7.07 2.68 44 BAYES_80 11980 4.54 6.82 3.56 45 XM_UncommonTLD01 11701 4.44 6.66 3.49 46 FROM_EXCESS_BASE64 11139 4.27 6.34 3.38 47 RCVD_IN_RP_SAFE 11118 8.64 6.33 9.64 48 XMSubMetaSx_00 10297 4.00 5.86 3.20 49 MIME_HTML_MOSTLY 9535 3.19 5.43 2.23 50 BAYES_60 9299 5.55 5.29 5.67 51 HTML_IMAGE_RATIO_06 9220 4.01 5.25 3.48 52 MIME_QP_LONG_LINE 9119 5.25 5.19 5.28 53 RCVD_IN_RP_CERTIFIED 8305 7.17 4.73 8.22 54 TM2_M_URI_OPT_OUT 8227 2.69 4.68 1.83 55 T_REMOTE_IMAGE 7729 4.78 4.40 4.94 56 XM_UB50 7650 1.92 4.35 0.87 57 XMStrtUSub 7592 4.12 4.32 4.04 58 XM_DIRTYINTL 7453 2.49 4.24 1.74 59 XMNumbers 7405 3.52 4.22 3.22 60 BAYES_95 7372 2.91 4.20 2.35 61 RCVD_IN_BL_SPAMCOP_NET 7149 1.62 4.07 0.57 62 XM_SendGrid 7128 4.87 4.06 5.22 63 T_TooManySym_01 6939 4.19 3.95 4.30 64 DKIM_INVALID 6388 3.57 3.64 3.54 65 XM_OfRef6 6376 1.90 3.63 1.15 66 URI_HEX 6354 1.94 3.62 1.21 67 MIME_HTML_ONLY_MULTI 6336 2.01 3.61 1.33 68 XM_CamelCaseFrm001 6116 2.44 3.48 1.99 69 XM_SPF_SoftFail 5998 2.43 3.41 2.01 70 HTML_IMAGE_RATIO_08 5859 2.48 3.34 2.11 71 RELAYCOUNTRY_CA 5789 1.97 3.30 1.39 72 XM_URI_RBL 5708 1.08 3.25 0.15 73 MultiRelay_CC 5685 1.17 3.24 0.28 74 MultiRelay_Combo 5685 1.17 3.24 0.28 75 XMDiploma_00 5435 2.00 3.09 1.53 76 RCVD_IN_RP_RNBL 4797 0.84 2.73 0.03 77 TooManyTo_002 4164 2.47 2.37 2.51 78 XMGenDplmaNmb 4050 1.34 2.31 0.93 79 RCVD_IN_IADB_LISTED 3989 4.70 2.27 5.75 80 SUBJ_ALL_CAPS 3972 2.24 2.26 2.23 81 TooManyTo_003 3900 1.78 2.22 1.59 82 T_XMDrugObfuBody_08 3789 1.93 2.16 1.84 83 RCVD_IN_MSPIKE_H2 3747 3.97 2.13 4.76 84 XM_ProductURIs 3612 1.38 2.06 1.09 85 RELAYCOUNTRY_GB 3577 1.60 2.04 1.41 86 TM2_M_VERY_LONG_WORD 3571 1.19 2.03 0.83 87 TooManyTo_004 3499 1.43 1.99 1.19 88 RCVD_IN_IADB_SPF 3488 4.08 1.99 4.99 89 XMPhish11 3452 1.56 1.96 1.39 90 HTML_MIME_NO_HTML_TAG 3435 2.10 1.96 2.16 91 SpammyFromTLD_01 3316 1.19 1.89 0.89 92 RCVD_IN_IADB_SENDERID 3294 3.65 1.88 4.41 93 RCVD_IN_MSPIKE_WL 3286 3.55 1.87 4.28 94 RCVD_IN_IADB_DK 3267 3.55 1.86 4.27 95 RCVD_IN_MSPIKE_H3 3266 3.54 1.86 4.26 96 TooManyTo_005 3255 1.24 1.85 0.98 97 BAYES_00 3193 6.87 1.82 9.05 98 SpammyFromTLD_02 3151 0.77 1.79 0.32 99 XMPhish30 3084 0.83 1.76 0.43 100 T_XMDrugObfuBody_00 2948 1.03 1.68 0.75 101 URIBL_BLACK 2943 0.54 1.68 0.05 102 XM_H_Long_From02 2934 1.15 1.67 0.93 103 XMSubMetaI_00 2928 1.16 1.67 0.94 104 XM_UB99 2918 0.52 1.66 0.02 105 ALL_TRUSTED 2823 13.74 1.61 18.97 106 XMBdyGiftCard01 2822 0.80 1.61 0.46 107 BAYES_40 2795 3.56 1.59 4.41 108 MAILING_LIST_MULTI 2787 2.53 1.59 2.94 109 XM_DK_Undo_01 2760 1.83 1.57 1.95 110 TR_XM_DK_Bayes 2727 4.93 1.55 6.38 111 TR_XM_DK_Bayes1 2690 4.77 1.53 6.17 112 URI_TRY_3LD 2680 1.35 1.53 1.27 113 XMBody_78 2678 0.81 1.52 0.51 114 FILL_THIS_FORM 2660 0.68 1.51 0.32 115 RELAYCOUNTRY_FR 2612 0.61 1.49 0.23 116 BOTNET_NORDNS 2566 0.45 1.46 0.02 117 T_XMHurry_00 2562 0.86 1.46 0.60 118 XMHTML_After_End 2549 0.67 1.45 0.34 119 TR_XM_DK_Bayes2 2500 3.90 1.42 4.96 120 BAYES_20 2449 2.44 1.39 2.89 121 XM_BadFromFormat 2448 0.55 1.39 0.19 122 TR_XM_RelayPhish 2445 0.79 1.39 0.54 123 XM_HighProb1 2434 0.43 1.39 0.01 124 XMSexyCombo_01 2357 0.66 1.34 0.37 125 XM_H_PHPOS 2350 1.26 1.34 1.23 126 XMBody_17 2298 0.67 1.31 0.39 127 BODY_ENHANCEMENT 2294 0.42 1.31 0.03 128 BODY_URI_ONLY 2282 0.43 1.30 0.05 129 FILL_THIS_FORM_LOAN 2276 0.42 1.30 0.04 130 XMBrknScrpt_02 2238 0.77 1.27 0.55 131 XM_UB999 2223 0.39 1.27 0.01 132 FILL_THIS_FORM_LONG 2210 0.43 1.26 0.07 133 TR_Symld_Words 2207 2.11 1.26 2.48 134 XMSubNoVowel 2163 0.62 1.23 0.36 135 XM_RXBody 2109 0.50 1.20 0.20 136 T_FILL_THIS_FORM_SHORT 2093 0.99 1.19 0.91 137 XMStockSpam_06 2031 1.10 1.16 1.07 138 UNPARSEABLE_RELAY 2025 2.60 1.15 3.22 139 XM_B_REG_HTML 2012 0.87 1.15 0.75 140 XM_S_JOY_D 1935 0.66 1.10 0.47 141 SUBJ_DOLLARS 1932 0.53 1.10 0.28 142 RCVD_IN_MSPIKE_BL 1929 0.69 1.10 0.51 143 HTML_SHORT_LINK_IMG_1 1919 0.35 1.09 0.03 144 XM_B_COPY_HTML 1864 0.64 1.06 0.46 145 HTML_FONT_FACE_BAD 1848 0.71 1.05 0.56 146 XMSubEmpty 1831 0.52 1.04 0.30 147 DKIM_ADSP_CUSTOM_MED 1805 1.11 1.03 1.14 148 LOW_PRICE 1796 0.42 1.02 0.17 149 LONG_JUNK_URI 1755 0.38 1.00 0.12 150 DIET_1 1728 0.45 0.98 0.22 151 TR_Caps_n_Bayes_99 1719 0.34 0.98 0.07 152 RCVD_IN_IADB_VOUCHED 1710 3.07 0.97 3.97 153 RCVD_IN_PSBL 1702 0.34 0.97 0.07 154 T_TooManySym_02 1693 1.51 0.96 1.75 155 RELAYCOUNTRY_AT 1666 0.44 0.95 0.22 156 REMOVE_BEFORE_LINK 1639 0.68 0.93 0.58 157 XMPhish14 1616 0.47 0.92 0.27 158 RDNS_DYNAMIC 1596 0.55 0.91 0.40 159 NML_ADSP_CUSTOM_MED 1583 0.89 0.90 0.89 160 TR_LOTS_OF_MONEY2 1551 0.73 0.88 0.66 161 T_MONEY_PERCENT 1551 0.73 0.88 0.66 162 BAYES_05 1530 1.42 0.87 1.66 163 HTML_TAG_BALANCE_BODY 1469 0.50 0.84 0.36 164 URI_NOVOWEL 1461 0.50 0.83 0.35 165 XM_PDF 1443 3.59 0.82 4.79 166 XMMoneyMeta_00 1435 0.61 0.82 0.52 167 HTML_IMAGE_ONLY_28 1425 0.52 0.81 0.40 168 MPART_ALT_DIFF_COUNT 1412 0.43 0.80 0.27 169 RELAYCOUNTRY_DE 1399 0.64 0.80 0.57 170 RELAYCOUNTRY_CN 1393 0.29 0.79 0.07 171 XM_UB60 1387 0.29 0.79 0.07 172 RELAYCOUNTRY_AU 1385 0.60 0.79 0.52 173 URIBL_SBL_A 1382 0.27 0.79 0.05 174 URIBL_DBL_SPAM 1362 0.24 0.78 0.01 175 XMGppyBdWords 1353 0.37 0.77 0.20 176 BOUNCE_MESSAGE 1339 4.39 0.76 5.96 177 ANY_BOUNCE_MESSAGE 1339 4.39 0.76 5.96 178 HTTPS_HTTP_MISMATCH 1331 0.50 0.76 0.39 179 RCVD_IN_MSPIKE_L5 1317 0.25 0.75 0.03 180 HTML_FONT_SIZE_HUGE 1294 0.28 0.74 0.09 181 XMSlimDrugH 1276 0.43 0.73 0.31 182 PLING_QUERY 1275 0.43 0.73 0.30 183 RELAYCOUNTRY_JP 1274 0.24 0.73 0.03 184 HTML_IMAGE_ONLY_08 1272 0.32 0.72 0.15 185 T_Symld_Words_02 1251 0.57 0.71 0.51 186 XM_OfRef7 1238 0.32 0.70 0.15 187 T_HTML_TAG_BALANCE_CENTER 1233 0.31 0.70 0.14 188 XMHTMLBadTable_001 1231 0.55 0.70 0.49 189 XM_Body_Obfu01 1228 0.47 0.70 0.37 190 XMBSHREFv2 1226 0.30 0.70 0.12 191 TR_Mismatch_TLD_02 1223 0.25 0.70 0.05 192 TR_LOTS_OF_MONEY3 1204 0.39 0.69 0.27 193 XM_UB80 1155 0.21 0.66 0.02 194 LONG_JUNK_URI3 1137 0.23 0.65 0.05 195 SUBJ_ILLEGAL_CHARS 1095 0.20 0.62 0.02 196 SUBJECT_NEEDS_ENCODING 1095 0.20 0.62 0.02 197 XMNoVowels 1070 0.69 0.61 0.72 198 XM_GoogleGroups 1054 1.18 0.60 1.43 199 THIS_AD 1043 0.26 0.59 0.11 200 XMSexyCombo_04 1030 0.20 0.59 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 341258 87.41 96.21 83.62 2 DKIM_SIGNED 286337 74.84 85.72 70.16 3 XM_DK_Pass 279996 73.11 83.57 68.61 4 DKIM_VALID 271890 71.27 82.08 66.62 5 DCC_CHECK_NEGATIVE 254888 49.27 18.63 62.45 6 BAYES_50 241165 52.02 35.58 59.09 7 DKIM_VALID_AU 193492 52.38 63.91 47.41 8 XMListUnsubscribeExists 182218 53.45 73.89 44.65 9 DCC_CHECK 144051 48.49 79.15 35.30 10 XM_H_QuotedFrom 137554 40.39 55.92 33.70 11 T_TM2_M_HEADER_IN_MSG 133718 28.79 19.57 32.76 12 HTML_FONT_LOW_CONTRAST 99048 27.80 35.99 24.27 13 DKIM_VALID_EF 90473 21.49 19.90 22.17 14 XMSubLong 82652 22.12 26.47 20.25 15 MultiRelay 80635 18.81 16.61 19.76 16 FVGT_m_MULTI_ODD 80615 22.25 28.04 19.75 17 LOC_TINY_FONT_1 77550 24.16 36.13 19.00 18 ALL_TRUSTED 77401 13.74 1.61 18.97 19 MIME_HTML_ONLY 73995 21.47 29.22 18.13 20 T_KAM_HTML_FONT_INVALID 55500 15.23 19.03 13.60 21 XM_DK_Undo_02 50508 23.01 47.70 12.38 22 BAYES_99 46191 20.68 42.44 11.32 23 XM_Multi_Part_URI 46129 12.57 15.53 11.30 24 XM_DKIMWhitelistDomains 42685 7.32 0.04 10.46 25 XM_Body_Dirty_Words 41156 12.83 19.22 10.08 26 BAYES_999 40620 17.85 36.21 9.95 27 RCVD_IN_RP_SAFE 39331 8.64 6.33 9.64 28 BAYES_00 36925 6.87 1.82 9.05 29 LOTS_OF_MONEY 36274 9.27 10.15 8.89 30 TooManyTo_001 34703 8.74 9.29 8.50 31 RCVD_IN_RP_CERTIFIED 33555 7.17 4.73 8.22 32 LotsOfNums_01 31885 8.30 9.43 7.81 33 T_XMDrugObfuBody_14 31675 8.56 10.42 7.76 34 XM_Evil_Numbers_Gen 31136 9.56 14.04 7.63 35 FSL_BULK_SIG 30001 8.46 11.04 7.35 36 HTML_IMAGE_RATIO_02 28013 10.12 17.68 6.86 37 TR_XM_DK_Bayes 26044 4.93 1.55 6.38 38 TR_XM_DK_Bayes1 25173 4.77 1.53 6.17 39 XM_H_Long_From01 24320 6.78 8.69 5.96 40 ANY_BOUNCE_MESSAGE 24319 4.39 0.76 5.96 41 BOUNCE_MESSAGE 24317 4.39 0.76 5.96 42 IN_ZIMBRA_NJ_WHITELIST 24234 4.16 0.04 5.94 43 URIBL_RHS_DOB 23867 9.05 16.49 5.85 44 RCVD_IN_IADB_LISTED 23452 4.70 2.27 5.75 45 RELAYCOUNTRY_META 23301 8.79 15.94 5.71 46 TR_DCC_Bayes_99 23169 14.05 33.51 5.68 47 BAYES_60 23130 5.55 5.29 5.67 48 MIME_QP_LONG_LINE 21547 5.25 5.19 5.28 49 XM_SendGrid 21324 4.87 4.06 5.22 50 XM_B_Phish_Phrases 20746 6.21 8.83 5.08 51 RCVD_IN_IADB_SPF 20359 4.08 1.99 4.99 52 TR_XM_DK_Bayes2 20257 3.90 1.42 4.96 53 T_REMOTE_IMAGE 20177 4.78 4.40 4.94 54 XM_PDF 19540 3.59 0.82 4.79 55 RCVD_IN_MSPIKE_H2 19413 3.97 2.13 4.76 56 HTML_IMAGE_RATIO_04 18656 6.03 9.42 4.57 57 BOTNET_IPINHOSTNAME 18470 7.12 13.15 4.53 58 BAYES_40 17996 3.56 1.59 4.41 59 RCVD_IN_IADB_SENDERID 17995 3.65 1.88 4.41 60 T_TooManySym_01 17543 4.19 3.95 4.30 61 RCVD_IN_MSPIKE_WL 17453 3.55 1.87 4.28 62 RCVD_IN_IADB_DK 17446 3.55 1.86 4.27 63 RCVD_IN_MSPIKE_H3 17374 3.54 1.86 4.26 64 XMStrtUSub 16489 4.12 4.32 4.04 65 TR_XM_DocInvoice 16364 5.41 8.67 4.01 66 RCVD_IN_IADB_VOUCHED 16198 3.07 0.97 3.97 67 BAYES_80 14540 4.54 6.82 3.56 68 DKIM_INVALID 14447 3.57 3.64 3.54 69 XM_UncommonTLD01 14241 4.44 6.66 3.49 70 HTML_IMAGE_RATIO_06 14194 4.01 5.25 3.48 71 FROM_EXCESS_BASE64 13796 4.27 6.34 3.38 72 UNPARSEABLE_RELAY 13154 2.60 1.15 3.22 73 XMNumbers 13138 3.52 4.22 3.22 74 XMSubMetaSx_00 13040 4.00 5.86 3.20 75 XMSexyCombo_05 13037 4.93 8.95 3.19 76 MAILING_LIST_MULTI 11984 2.53 1.59 2.94 77 BAYES_20 11786 2.44 1.39 2.89 78 MPART_ALT_DIFF 10935 4.00 7.07 2.68 79 TVD_RCVD_IP 10612 1.90 0.26 2.60 80 TooManyTo_002 10255 2.47 2.37 2.51 81 TR_Symld_Words 10135 2.11 1.26 2.48 82 BAYES_95 9604 2.91 4.20 2.35 83 HELO_NODOT 9349 1.70 0.34 2.29 84 IN_HORDE_ADDRESS_BOOK 9161 1.59 0.05 2.24 85 SUBJ_ALL_CAPS 9096 2.24 2.26 2.23 86 MIME_HTML_MOSTLY 9084 3.19 5.43 2.23 87 HTML_MIME_NO_HTML_TAG 8824 2.10 1.96 2.16 88 HTML_IMAGE_RATIO_08 8592 2.48 3.34 2.11 89 XM_SPF_SoftFail 8205 2.43 3.41 2.01 90 XM_CamelCaseFrm001 8136 2.44 3.48 1.99 91 XM_DK_Undo_01 7951 1.83 1.57 1.95 92 INVALID_MSGID 7807 1.41 0.23 1.91 93 T_XMDrugObfuBody_08 7506 1.93 2.16 1.84 94 RCVD_IN_IADB_OPTIN 7479 1.45 0.55 1.83 95 TM2_M_URI_OPT_OUT 7452 2.69 4.68 1.83 96 T_TooManySym_02 7122 1.51 0.96 1.75 97 XM_DIRTYINTL 7090 2.49 4.24 1.74 98 BAYES_05 6788 1.42 0.87 1.66 99 TooManyTo_003 6492 1.78 2.22 1.59 100 USER_IN_DEF_DKIM_WL 6263 1.10 0.09 1.53 101 XMDiploma_00 6247 2.00 3.09 1.53 102 TO_MALFORMED 6155 1.06 0.01 1.51 103 BOTNET 5901 4.58 11.87 1.45 104 XM_GoogleGroups 5832 1.18 0.60 1.43 105 XMCapTrack 5747 1.12 0.44 1.41 106 RELAYCOUNTRY_GB 5744 1.60 2.04 1.41 107 UNTRUSTED_Relay 5741 3.63 8.79 1.41 108 RELAYCOUNTRY_CA 5690 1.97 3.30 1.39 109 XMPhish11 5672 1.56 1.96 1.39 110 MIME_HTML_ONLY_MULTI 5409 2.01 3.61 1.33 111 URI_TRY_3LD 5182 1.35 1.53 1.27 112 XM_H_PHPOS 5023 1.26 1.34 1.23 113 URI_HEX 4951 1.94 3.62 1.21 114 TooManyTo_004 4872 1.43 1.99 1.19 115 XM_OfRef6 4701 1.90 3.63 1.15 116 DKIM_ADSP_CUSTOM_MED 4664 1.11 1.03 1.14 117 XM_ProductURIs 4433 1.38 2.06 1.09 118 XMStockSpam_06 4380 1.10 1.16 1.07 119 TooManyTo_005 4005 1.24 1.85 0.98 120 XMSubMetaI_00 3854 1.16 1.67 0.94 121 XM_H_Long_From02 3794 1.15 1.67 0.93 122 XMGenDplmaNmb 3783 1.34 2.31 0.93 123 T_FILL_THIS_FORM_SHORT 3704 0.99 1.19 0.91 124 XMBody_95 3670 0.68 0.16 0.90 125 SpammyFromTLD_01 3648 1.19 1.89 0.89 126 NML_ADSP_CUSTOM_MED 3628 0.89 0.90 0.89 127 XM_UB50 3551 1.92 4.35 0.87 128 XM_H_PHPMailer 3382 0.73 0.50 0.83 129 TM2_M_VERY_LONG_WORD 3375 1.19 2.03 0.83 130 USER_IN_WHITELIST 3288 0.56 0.00 0.81 131 TR_MetaPhish_Combo_01 3096 0.70 0.56 0.76 132 XM_ShortIntro_01 3086 0.66 0.45 0.76 133 T_XMDrugObfuBody_00 3078 1.03 1.68 0.75 134 XM_B_REG_HTML 3074 0.87 1.15 0.75 135 T_TooManySym_03 3039 0.64 0.39 0.74 136 RCVD_IN_IADB_DOPTIN 2968 0.54 0.09 0.73 137 XMNoVowels 2936 0.69 0.61 0.72 138 TR_LOTS_OF_MONEY2 2682 0.73 0.88 0.66 139 T_MONEY_PERCENT 2682 0.73 0.88 0.66 140 T_OBFU_PDF_ATTACH 2589 0.51 0.21 0.63 141 SHORT_HELO_AND_INLINE_IMAGE 2440 0.44 0.08 0.60 142 T_XMHurry_00 2431 0.86 1.46 0.60 143 XMGappySubj_01 2417 0.57 0.52 0.59 144 RCVD_IN_SORBS_DUL 2362 0.46 0.17 0.58 145 REMOVE_BEFORE_LINK 2353 0.68 0.93 0.58 146 RCVD_IN_BL_SPAMCOP_NET 2336 1.62 4.07 0.57 147 RELAYCOUNTRY_DE 2329 0.64 0.80 0.57 148 HTML_FONT_FACE_BAD 2288 0.71 1.05 0.56 149 XMBrknScrpt_02 2243 0.77 1.27 0.55 150 TR_XM_RelayPhish 2187 0.79 1.39 0.54 151 XMMoneyMeta_00 2132 0.61 0.82 0.52 152 RELAYCOUNTRY_AU 2123 0.60 0.79 0.52 153 MISSING_HEADERS 2117 0.50 0.46 0.52 154 XM_B_TRADE_HTML 2099 0.50 0.48 0.51 155 T_Symld_Words_02 2092 0.57 0.71 0.51 156 RCVD_IN_MSPIKE_BL 2075 0.69 1.10 0.51 157 XMBody_78 2073 0.81 1.52 0.51 158 XMHTMLBadTable_001 1980 0.55 0.70 0.49 159 TM2_M_A_HREF_HREF 1940 0.48 0.48 0.48 160 RCVD_IN_MSPIKE_L3 1933 0.41 0.27 0.47 161 XM_S_JOY_D 1901 0.66 1.10 0.47 162 XMBdyGiftCard01 1873 0.80 1.61 0.46 163 XM_B_COPY_HTML 1861 0.64 1.06 0.46 164 AC_DIV_BONANZA 1779 0.36 0.18 0.44 165 XMPhish30 1775 0.83 1.76 0.43 166 TM2_M_BODY_EMPTY 1774 0.38 0.25 0.43 167 HTML_IMAGE_ONLY_24 1769 0.45 0.49 0.43 168 HTML_IMAGE_ONLY_32 1761 0.42 0.41 0.43 169 XMSubMetaSxObfu_02 1715 0.41 0.37 0.42 170 XMSubMetaSxObfu_03 1692 0.46 0.55 0.41 171 XM_H_PHPOS_M 1635 0.36 0.28 0.40 172 RDNS_DYNAMIC 1629 0.55 0.91 0.40 173 HTML_IMAGE_ONLY_28 1621 0.52 0.81 0.40 174 XMBody_17 1608 0.67 1.31 0.39 175 HTTPS_HTTP_MISMATCH 1594 0.50 0.76 0.39 176 FORGED_GMAIL_RCVD 1590 0.43 0.54 0.39 177 XMDateMe_00 1527 0.35 0.28 0.37 178 XMSexyCombo_01 1519 0.66 1.34 0.37 179 XMLKML 1507 0.26 0.00 0.37 180 XM_Body_Obfu01 1496 0.47 0.70 0.37 181 HTML_IMAGE_ONLY_20 1478 0.33 0.26 0.36 182 HTML_TAG_BALANCE_BODY 1464 0.50 0.84 0.36 183 XMSubNoVowel 1453 0.62 1.23 0.36 184 URI_NOVOWEL 1445 0.50 0.83 0.35 185 XMHTML_After_End 1387 0.67 1.45 0.34 186 UPPERCASE_50_75 1386 0.29 0.18 0.34 187 T_TooManySym_04 1360 0.27 0.12 0.33 188 DOS_OUTLOOK_TO_MX 1346 0.27 0.13 0.33 189 TVD_SPACE_RATIO 1334 0.34 0.38 0.33 190 SpammyFromTLD_02 1322 0.77 1.79 0.32 191 FILL_THIS_FORM 1296 0.68 1.51 0.32 192 MSGID_FROM_MTA_HEADER 1253 0.27 0.19 0.31 193 XMSlimDrugH 1249 0.43 0.73 0.31 194 XMRcvdHeader_15 1244 0.21 0.00 0.30 195 XMSubEmpty 1232 0.52 1.04 0.30 196 PLING_QUERY 1217 0.43 0.73 0.30 197 GMD_PDF_EMPTY_BODY 1185 0.22 0.07 0.29 198 DKIM_ADSP_NXDOMAIN 1172 0.33 0.43 0.29 199 MultiRelay_CC 1150 1.17 3.24 0.28 200 MultiRelay_Combo 1150 1.17 3.24 0.28 ----------------------------------------------------------------------