Email: 330450 Autolearn: 0 AvgScore: 2.77 AvgScanTime: 1.90 sec Spam: 96801 Autolearn: 0 AvgScore: 12.60 AvgScanTime: 2.34 sec Ham: 233649 Autolearn: 0 AvgScore: -1.30 AvgScanTime: 1.71 sec Time Spent Running SA: 174.20 hours Time Spent Processing Spam: 62.93 hours Time Spent Processing Ham: 111.27 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 92897 87.50 95.97 83.99 2 DKIM_SIGNED 83874 73.35 86.65 67.84 3 XM_DK_Pass 80730 71.81 83.40 67.00 4 DKIM_VALID 80174 70.76 82.82 65.76 5 DCC_CHECK 78100 51.77 80.68 39.80 6 XMListUnsubscribeExists 71832 54.17 74.21 45.87 7 DKIM_VALID_AU 65018 56.62 67.17 52.25 8 XM_H_QuotedFrom 51715 45.31 53.42 41.95 9 XM_DK_Undo_02 51281 29.08 52.98 19.17 10 BAYES_99 46445 27.52 47.98 19.05 11 BAYES_999 40410 24.26 41.75 17.01 12 TR_DCC_Bayes_99 36554 17.75 37.76 9.46 13 LOC_TINY_FONT_1 34777 27.41 35.93 23.88 14 HTML_FONT_LOW_CONTRAST 32553 28.19 33.63 25.93 15 BAYES_50 30774 44.31 31.79 49.50 16 MIME_HTML_ONLY 28003 24.22 28.93 22.27 17 FVGT_m_MULTI_ODD 26013 21.41 26.87 19.15 18 T_TM2_M_HEADER_IN_MSG 21722 24.88 22.44 25.89 19 XMSubLong 21605 19.54 22.32 18.39 20 HTML_IMAGE_RATIO_02 19839 11.46 20.49 7.72 21 XM_Body_Dirty_Words 19110 12.12 19.74 8.96 22 MultiRelay 18407 15.01 19.02 13.34 23 RELAYCOUNTRY_META 18106 8.57 18.70 4.37 24 DCC_CHECK_NEGATIVE 17046 46.74 17.61 58.81 25 XM_Multi_Part_URI 16262 12.44 16.80 10.64 26 DKIM_VALID_EF 16051 21.27 16.58 23.21 27 T_KAM_HTML_FONT_INVALID 15510 13.54 16.02 12.51 28 XM_Evil_Numbers_Gen 15379 11.08 15.89 9.09 29 BOTNET_IPINHOSTNAME 14485 9.27 14.96 6.92 30 BOTNET 13061 4.61 13.49 0.93 31 UNTRUSTED_Relay 12805 4.97 13.23 1.55 32 FSL_BULK_SIG 10727 10.51 11.08 10.27 33 XMSexyCombo_05 10330 5.42 10.67 3.25 34 HTML_IMAGE_RATIO_04 10300 5.57 10.64 3.47 35 LotsOfNums_01 9137 8.23 9.44 7.73 36 XM_B_Phish_Phrases 8789 7.11 9.08 6.29 37 XM_UncommonTLD01 8533 6.11 8.81 4.98 38 T_XMDrugObfuBody_14 8506 6.92 8.79 6.15 39 XM_H_Long_From01 8418 6.83 8.70 6.05 40 LOTS_OF_MONEY 7938 8.51 8.20 8.64 41 MPART_ALT_DIFF 7710 6.78 7.96 6.28 42 XM_UB50 7619 2.92 7.87 0.86 43 XMStrtUSub 7462 5.27 7.71 4.27 44 TooManyTo_001 7421 6.54 7.67 6.07 45 RCVD_IN_RP_SAFE 7411 12.23 7.66 14.13 46 XMSubMetaSx_00 7349 4.74 7.59 3.55 47 FROM_EXCESS_BASE64 6344 4.43 6.55 3.54 48 BAYES_80 6096 5.73 6.30 5.50 49 RCVD_IN_RP_CERTIFIED 5997 10.89 6.20 12.83 50 MultiRelay_CC 5826 1.90 6.02 0.20 51 MultiRelay_Combo 5826 1.90 6.02 0.20 52 HTML_IMAGE_RATIO_06 5680 4.29 5.87 3.63 53 TR_XM_DocInvoice 5677 5.67 5.86 5.59 54 RCVD_IN_MSPIKE_H2 5429 4.98 5.61 4.73 55 XM_SendGrid 5113 4.89 5.28 4.73 56 BAYES_60 5050 6.87 5.22 7.55 57 MIME_HTML_MOSTLY 4855 3.27 5.02 2.55 58 XMNumbers 4458 7.31 4.61 8.43 59 MIME_QP_LONG_LINE 4001 3.93 4.13 3.85 60 XM_DIRTYINTL 3895 1.95 4.02 1.09 61 HTML_IMAGE_RATIO_08 3880 2.41 4.01 1.74 62 TR_Mismatch_TLD_02 3840 1.20 3.97 0.05 63 MIME_HTML_ONLY_MULTI 3810 4.28 3.94 4.42 64 BAYES_95 3754 3.62 3.88 3.51 65 DKIM_INVALID 3700 2.59 3.82 2.08 66 URG_BIZ 3689 1.13 3.81 0.02 67 T_TooManySym_01 3681 4.03 3.80 4.12 68 RELAYCOUNTRY_TH 3658 1.11 3.78 0.01 69 RELAYCOUNTRY_CO 3617 1.10 3.74 0.00 70 TO_MALFORMED 3606 3.04 3.73 2.76 71 TM2_M_URI_OPT_OUT 3442 4.02 3.56 4.21 72 FROM_ADDR_WS 3360 1.02 3.47 0.01 73 URI_HEX 3252 2.51 3.36 2.15 74 T_REMOTE_IMAGE 3143 3.49 3.25 3.60 75 RCVD_IN_BL_SPAMCOP_NET 3062 1.30 3.16 0.53 76 XM_CamelCaseFrm001 2921 2.11 3.02 1.74 77 XM_SPF_SoftFail 2900 1.69 3.00 1.15 78 RELAYCOUNTRY_CA 2644 1.75 2.73 1.34 79 XM_H_Long_From02 2541 1.55 2.62 1.10 80 SUBJ_ALL_CAPS 2423 1.63 2.50 1.27 81 XMSubMetaI_00 2267 1.06 2.34 0.52 82 BOTNET_NORDNS 2258 0.69 2.33 0.01 83 XMPhish30 2223 0.95 2.30 0.39 84 XMBdyGiftCard01 2216 1.40 2.29 1.03 85 XM_URI_RBL 2091 0.72 2.16 0.12 86 XMSexyCombo_01 2039 0.82 2.11 0.29 87 XMSubMetaSxObfu_03 2023 0.95 2.09 0.48 88 DIET_1 1972 0.97 2.04 0.53 89 DKIM_ADSP_CUSTOM_MED 1948 1.45 2.01 1.22 90 TM2_M_VERY_LONG_WORD 1916 1.12 1.98 0.77 91 BAYES_00 1906 7.12 1.97 9.25 92 HTML_MIME_NO_HTML_TAG 1889 1.74 1.95 1.66 93 XM_DK_Undo_01 1867 1.74 1.93 1.66 94 XM_UB99 1778 0.56 1.84 0.03 95 XM_ProductURIs 1770 1.96 1.83 2.01 96 NML_ADSP_CUSTOM_MED 1688 1.18 1.74 0.94 97 TR_XM_DK_Bayes 1672 3.91 1.73 4.81 98 TR_XM_DK_Bayes1 1666 3.84 1.72 4.71 99 RCVD_IN_PSBL 1664 0.66 1.72 0.22 100 T_TooManySym_02 1622 1.80 1.68 1.85 101 XM_OfRef6 1597 1.46 1.65 1.38 102 RCVD_IN_IADB_LISTED 1583 3.34 1.64 4.05 103 FORGED_GMAIL_RCVD 1582 0.83 1.63 0.50 104 XMStockSpam_06 1579 1.05 1.63 0.80 105 T_XMDrugObfuBody_08 1564 1.11 1.62 0.90 106 RCVD_IN_RP_RNBL 1554 0.50 1.61 0.04 107 TR_XM_DK_Bayes2 1548 3.63 1.60 4.47 108 RCVD_IN_IADB_SPF 1524 3.01 1.57 3.61 109 RELAYCOUNTRY_FR 1522 0.79 1.57 0.47 110 MAILING_LIST_MULTI 1521 1.71 1.57 1.77 111 XMDiploma_00 1508 1.19 1.56 1.03 112 ALL_TRUSTED 1494 16.06 1.54 22.08 113 SpammyFromTLD_02 1470 0.68 1.52 0.33 114 RCVD_IN_IADB_SENDERID 1459 2.77 1.51 3.29 115 RELAYCOUNTRY_AT 1452 0.55 1.50 0.16 116 SpammyFromTLD_01 1441 0.81 1.49 0.53 117 UNPARSEABLE_RELAY 1437 4.76 1.48 6.12 118 RCVD_IN_IADB_DK 1437 2.70 1.48 3.20 119 XM_UB999 1401 0.44 1.45 0.02 120 SUBJ_DOLLARS 1387 0.54 1.43 0.17 121 XMBody_17 1384 0.76 1.43 0.49 122 BAYES_40 1379 2.27 1.42 2.61 123 URIBL_BLACK 1372 0.46 1.42 0.06 124 XM_B_COPY_HTML 1365 0.98 1.41 0.81 125 MPART_ALT_DIFF_COUNT 1204 0.73 1.24 0.51 126 XMGenDplmaNmb 1201 0.80 1.24 0.61 127 XM_B_REG_HTML 1173 1.03 1.21 0.96 128 XM_H_PHPOS 1168 1.94 1.21 2.25 129 TR_XM_RelayPhish 1166 0.54 1.20 0.27 130 XM_HighProb1 1130 0.35 1.17 0.02 131 HTML_IMAGE_ONLY_08 1127 0.46 1.16 0.17 132 XMPhish14 1124 0.52 1.16 0.26 133 XMSubMetaD_03 1114 0.42 1.15 0.11 134 XM_ShortIntro_01 1112 0.66 1.15 0.46 135 XM_BadFromFormat 1093 0.75 1.13 0.59 136 T_XMHurry_00 1073 0.57 1.11 0.35 137 XM_UB60 1065 0.37 1.10 0.07 138 XMPhish11 1051 0.87 1.09 0.78 139 URI_TRY_3LD 1051 0.75 1.09 0.61 140 LONG_JUNK_URI 1048 0.39 1.08 0.10 141 XMHTML_After_End 1037 0.47 1.07 0.22 142 XMHTMLBadTable_001 1017 0.85 1.05 0.76 143 XMBrknScrpt_02 1010 0.60 1.04 0.41 144 XMSexyCombo_04 998 0.35 1.03 0.07 145 RELAYCOUNTRY_CN 978 0.33 1.01 0.05 146 TR_Caps_n_Bayes_99 976 0.55 1.01 0.36 147 XMSubMetaI_01 973 0.34 1.01 0.07 148 ANY_BOUNCE_MESSAGE 952 3.56 0.98 4.63 149 BOUNCE_MESSAGE 951 3.56 0.98 4.63 150 XM_S_JOY_D 948 0.49 0.98 0.29 151 BAYES_20 948 1.51 0.98 1.74 152 URI_NOVOWEL 944 0.51 0.98 0.31 153 XMSlimDrugH 917 0.45 0.95 0.25 154 URIBL_DBL_SPAM 913 0.28 0.94 0.01 155 XM_RXBody 908 0.43 0.94 0.21 156 TR_LOTS_OF_MONEY2 892 0.51 0.92 0.33 157 T_MONEY_PERCENT 892 0.51 0.92 0.33 158 RDNS_DYNAMIC 891 0.58 0.92 0.44 159 PLING_QUERY 887 0.38 0.92 0.15 160 HTML_TAG_BALANCE_BODY 880 0.70 0.91 0.62 161 FSL_THIS_IS_ADV 866 0.30 0.89 0.05 162 NUMERIC_HTTP_ADDR 855 0.34 0.88 0.12 163 XM_H_PHPMailer 850 0.76 0.88 0.71 164 RELAYCOUNTRY_GB 830 0.68 0.86 0.61 165 HTML_FONT_SIZE_HUGE 804 0.53 0.83 0.40 166 XM_Body_Obfu01 785 0.39 0.81 0.21 167 XM_UB80 784 0.25 0.81 0.02 168 INVALID_DATE 766 0.31 0.79 0.12 169 XMClaimOffer 753 0.42 0.78 0.28 170 T_XMDrugObfuBody_00 740 0.46 0.76 0.34 171 RELAYCOUNTRY_DE 733 0.46 0.76 0.34 172 T_Symld_Words_02 723 0.34 0.75 0.18 173 XMBody_78 714 0.77 0.74 0.79 174 T_FILL_THIS_FORM_SHORT 694 0.64 0.72 0.60 175 BODY_ENHANCEMENT 678 0.27 0.70 0.09 176 TooManyTo_002 675 1.20 0.70 1.41 177 RCVD_IN_IADB_VOUCHED 668 2.17 0.69 2.78 178 HTML_IMAGE_ONLY_28 647 0.43 0.67 0.33 179 TM2_M_A_HREF_HREF 639 0.31 0.66 0.16 180 REMOVE_BEFORE_LINK 628 0.43 0.65 0.34 181 RELAYCOUNTRY_IT 625 0.21 0.65 0.03 182 TVD_PH_BODY_ACCOUNTS_PRE 622 0.30 0.64 0.16 183 HTML_FONT_FACE_BAD 602 0.42 0.62 0.34 184 HTML_IMAGE_ONLY_24 599 0.42 0.62 0.34 185 RELAYCOUNTRY_IE 596 0.28 0.62 0.14 186 TR_Symld_Words 589 1.06 0.61 1.24 187 XMGppyBdWords 586 0.22 0.61 0.06 188 BODY_URI_ONLY 582 0.22 0.60 0.07 189 TooManyTo_003 580 0.88 0.60 0.99 190 XMSubGiftCard1 564 0.23 0.58 0.08 191 RELAYCOUNTRY_NL 564 0.39 0.58 0.31 192 TR_MetaPhish_Combo_01 556 0.78 0.57 0.86 193 STYLE_GIBBERISH 552 0.21 0.57 0.05 194 XM_B_TRADE_HTML 550 0.51 0.57 0.49 195 XMBounce_01 545 0.22 0.56 0.07 196 XM_GoogleGroups 541 0.92 0.56 1.07 197 XMCapTrack2 540 0.18 0.56 0.02 198 DATE_IN_PAST_24_48 537 0.17 0.55 0.00 199 XM_H_PHPOS_M 532 0.52 0.55 0.51 200 RELAYCOUNTRY_AU 532 0.36 0.55 0.28 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 196249 87.50 95.97 83.99 2 DKIM_SIGNED 158508 73.35 86.65 67.84 3 XM_DK_Pass 156556 71.81 83.40 67.00 4 DKIM_VALID 153659 70.76 82.82 65.76 5 DCC_CHECK_NEGATIVE 137416 46.74 17.61 58.81 6 DKIM_VALID_AU 122080 56.62 67.17 52.25 7 BAYES_50 115664 44.31 31.79 49.50 8 XMListUnsubscribeExists 107171 54.17 74.21 45.87 9 XM_H_QuotedFrom 98018 45.31 53.42 41.95 10 DCC_CHECK 92985 51.77 80.68 39.80 11 HTML_FONT_LOW_CONTRAST 60585 28.19 33.63 25.93 12 T_TM2_M_HEADER_IN_MSG 60490 24.88 22.44 25.89 13 LOC_TINY_FONT_1 55791 27.41 35.93 23.88 14 DKIM_VALID_EF 54223 21.27 16.58 23.21 15 MIME_HTML_ONLY 52039 24.22 28.93 22.27 16 ALL_TRUSTED 51580 16.06 1.54 22.08 17 XM_DK_Undo_02 44802 29.08 52.98 19.17 18 FVGT_m_MULTI_ODD 44738 21.41 26.87 19.15 19 BAYES_99 44508 27.52 47.98 19.05 20 XMSubLong 42972 19.54 22.32 18.39 21 BAYES_999 39753 24.26 41.75 17.01 22 XM_DKIMWhitelistDomains 33380 10.11 0.04 14.29 23 RCVD_IN_RP_SAFE 33004 12.23 7.66 14.13 24 MultiRelay 31179 15.01 19.02 13.34 25 RCVD_IN_RP_CERTIFIED 29983 10.89 6.20 12.83 26 T_KAM_HTML_FONT_INVALID 29227 13.54 16.02 12.51 27 XM_Multi_Part_URI 24850 12.44 16.80 10.64 28 FSL_BULK_SIG 24000 10.51 11.08 10.27 29 TR_DCC_Bayes_99 22092 17.75 37.76 9.46 30 BAYES_00 21621 7.12 1.97 9.25 31 XM_Evil_Numbers_Gen 21248 11.08 15.89 9.09 32 XM_Body_Dirty_Words 20934 12.12 19.74 8.96 33 LOTS_OF_MONEY 20178 8.51 8.20 8.64 34 XMNumbers 19692 7.31 4.61 8.43 35 IN_ZIMBRA_NJ_WHITELIST 19405 5.88 0.04 8.31 36 LotsOfNums_01 18056 8.23 9.44 7.73 37 HTML_IMAGE_RATIO_02 18033 11.46 20.49 7.72 38 BAYES_60 17644 6.87 5.22 7.55 39 BOTNET_IPINHOSTNAME 16157 9.27 14.96 6.92 40 XM_B_Phish_Phrases 14700 7.11 9.08 6.29 41 MPART_ALT_DIFF 14678 6.78 7.96 6.28 42 T_XMDrugObfuBody_14 14368 6.92 8.79 6.15 43 UNPARSEABLE_RELAY 14308 4.76 1.48 6.12 44 TooManyTo_001 14192 6.54 7.67 6.07 45 XM_H_Long_From01 14137 6.83 8.70 6.05 46 TR_XM_DocInvoice 13059 5.67 5.86 5.59 47 BAYES_80 12849 5.73 6.30 5.50 48 XM_UncommonTLD01 11642 6.11 8.81 4.98 49 TVD_RCVD_IP 11618 3.60 0.27 4.97 50 TR_XM_DK_Bayes 11234 3.91 1.73 4.81 51 XM_SendGrid 11051 4.89 5.28 4.73 52 RCVD_IN_MSPIKE_H2 11041 4.98 5.61 4.73 53 TR_XM_DK_Bayes1 11016 3.84 1.72 4.71 54 ANY_BOUNCE_MESSAGE 10817 3.56 0.98 4.63 55 BOUNCE_MESSAGE 10816 3.56 0.98 4.63 56 TR_XM_DK_Bayes2 10451 3.63 1.60 4.47 57 MIME_HTML_ONLY_MULTI 10329 4.28 3.94 4.42 58 RELAYCOUNTRY_META 10203 8.57 18.70 4.37 59 XMStrtUSub 9969 5.27 7.71 4.27 60 TM2_M_URI_OPT_OUT 9835 4.02 3.56 4.21 61 T_TooManySym_01 9620 4.03 3.80 4.12 62 RCVD_IN_IADB_LISTED 9461 3.34 1.64 4.05 63 MIME_QP_LONG_LINE 8987 3.93 4.13 3.85 64 HTML_IMAGE_RATIO_06 8480 4.29 5.87 3.63 65 RCVD_IN_IADB_SPF 8432 3.01 1.57 3.61 66 T_REMOTE_IMAGE 8400 3.49 3.25 3.60 67 XMSubMetaSx_00 8306 4.74 7.59 3.55 68 FROM_EXCESS_BASE64 8279 4.43 6.55 3.54 69 BAYES_95 8201 3.62 3.88 3.51 70 HTML_IMAGE_RATIO_04 8102 5.57 10.64 3.47 71 RCVD_IN_IADB_SENDERID 7694 2.77 1.51 3.29 72 XMSexyCombo_05 7589 5.42 10.67 3.25 73 RCVD_IN_IADB_DK 7484 2.70 1.48 3.20 74 INVALID_MSGID 6872 2.20 0.40 2.94 75 RCVD_IN_IADB_VOUCHED 6491 2.17 0.69 2.78 76 TO_MALFORMED 6449 3.04 3.73 2.76 77 BAYES_40 6109 2.27 1.42 2.61 78 MIME_HTML_MOSTLY 5955 3.27 5.02 2.55 79 XM_PDF 5943 1.95 0.51 2.54 80 IN_HORDE_ADDRESS_BOOK 5775 1.78 0.10 2.47 81 XM_H_PHPOS 5250 1.94 1.21 2.25 82 URI_HEX 5026 2.51 3.36 2.15 83 DKIM_INVALID 4849 2.59 3.82 2.08 84 XM_ProductURIs 4699 1.96 1.83 2.01 85 USER_IN_DEF_DKIM_WL 4522 1.42 0.19 1.94 86 T_TooManySym_02 4322 1.80 1.68 1.85 87 MAILING_LIST_MULTI 4143 1.71 1.57 1.77 88 HTML_IMAGE_RATIO_08 4073 2.41 4.01 1.74 89 XM_CamelCaseFrm001 4058 2.11 3.02 1.74 90 BAYES_20 4056 1.51 0.98 1.74 91 XM_DK_Undo_01 3881 1.74 1.93 1.66 92 HTML_MIME_NO_HTML_TAG 3868 1.74 1.95 1.66 93 UNTRUSTED_Relay 3611 4.97 13.23 1.55 94 TooManyTo_002 3290 1.20 0.70 1.41 95 XM_OfRef6 3233 1.46 1.65 1.38 96 RCVD_IN_MSPIKE_WL 3210 1.02 0.17 1.37 97 RCVD_IN_MSPIKE_H3 3210 1.02 0.17 1.37 98 RELAYCOUNTRY_CA 3125 1.75 2.73 1.34 99 XMSubNoVowel 3079 1.06 0.43 1.32 100 BAYES_05 2997 1.04 0.46 1.28 101 RCVD_IN_IADB_OPTIN 2972 0.99 0.33 1.27 102 USER_IN_WHITELIST 2960 0.90 0.00 1.27 103 SUBJ_ALL_CAPS 2959 1.63 2.50 1.27 104 TR_Symld_Words 2900 1.06 0.61 1.24 105 DKIM_ADSP_CUSTOM_MED 2841 1.45 2.01 1.22 106 TO_NO_BRKTS_HTML_ONLY 2746 0.86 0.10 1.18 107 XM_SPF_SoftFail 2694 1.69 3.00 1.15 108 XM_H_Long_From02 2570 1.55 2.62 1.10 109 XM_DIRTYINTL 2553 1.95 4.02 1.09 110 XM_GoogleGroups 2496 0.92 0.56 1.07 111 XMDiploma_00 2410 1.19 1.56 1.03 112 XMBdyGiftCard01 2405 1.40 2.29 1.03 113 TooManyTo_003 2320 0.88 0.60 0.99 114 XM_B_REG_HTML 2241 1.03 1.21 0.96 115 NML_ADSP_CUSTOM_MED 2203 1.18 1.74 0.94 116 BOTNET 2177 4.61 13.49 0.93 117 T_XMDrugObfuBody_08 2096 1.11 1.62 0.90 118 XMSubMetaSxObfu_02 2050 0.72 0.35 0.88 119 XM_UB50 2014 2.92 7.87 0.86 120 TR_MetaPhish_Combo_01 2006 0.78 0.57 0.86 121 T_TooManySym_03 1948 0.62 0.11 0.83 122 XM_B_COPY_HTML 1883 0.98 1.41 0.81 123 XMStockSpam_06 1877 1.05 1.63 0.80 124 TooManyTo_004 1859 0.71 0.50 0.80 125 XMBody_78 1840 0.77 0.74 0.79 126 XMPhish11 1833 0.87 1.09 0.78 127 TM2_M_VERY_LONG_WORD 1788 1.12 1.98 0.77 128 XMHTMLBadTable_001 1777 0.85 1.05 0.76 129 FILL_THIS_FORM 1697 0.55 0.13 0.73 130 XM_H_PHPMailer 1650 0.76 0.88 0.71 131 XMBody_95 1599 0.52 0.14 0.68 132 T_FILL_THIS_FORM_LOAN 1550 0.48 0.03 0.66 133 T_FILL_THIS_FORM_LONG 1540 0.48 0.05 0.66 134 TooManyTo_005 1510 0.59 0.45 0.65 135 HTML_TAG_BALANCE_BODY 1443 0.70 0.91 0.62 136 URI_TRY_3LD 1436 0.75 1.09 0.61 137 XMGenDplmaNmb 1433 0.80 1.24 0.61 138 RELAYCOUNTRY_GB 1414 0.68 0.86 0.61 139 T_FILL_THIS_FORM_SHORT 1412 0.64 0.72 0.60 140 XM_BadFromFormat 1369 0.75 1.13 0.59 141 HELO_NODOT 1333 0.46 0.20 0.57 142 DIET_1 1248 0.97 2.04 0.53 143 RCVD_IN_BL_SPAMCOP_NET 1243 1.30 3.16 0.53 144 SpammyFromTLD_01 1228 0.81 1.49 0.53 145 XMSubMetaI_00 1222 1.06 2.34 0.52 146 MPART_ALT_DIFF_COUNT 1197 0.73 1.24 0.51 147 XM_H_PHPOS_M 1185 0.52 0.55 0.51 148 FORGED_GMAIL_RCVD 1158 0.83 1.63 0.50 149 XM_B_TRADE_HTML 1150 0.51 0.57 0.49 150 TR_MetaPhish_Combo_01b 1147 0.38 0.11 0.49 151 XMBody_17 1139 0.76 1.43 0.49 152 XMSubMetaSxObfu_03 1129 0.95 2.09 0.48 153 HTML_IMAGE_ONLY_32 1109 0.43 0.31 0.47 154 RELAYCOUNTRY_FR 1102 0.79 1.57 0.47 155 NO_DNS_FOR_FROM 1099 0.43 0.33 0.47 156 DKIM_ADSP_NXDOMAIN 1098 0.47 0.48 0.47 157 XM_ShortIntro_01 1076 0.66 1.15 0.46 158 XMGappySubj_01 1071 0.46 0.46 0.46 159 RDNS_DYNAMIC 1036 0.58 0.92 0.44 160 XM_E_Blogspot 1019 0.33 0.06 0.44 161 T_TooManySym_04 1013 0.31 0.02 0.43 162 T_HTML_TAG_BALANCE_CENTER 997 0.46 0.54 0.43 163 MY_SERVERS_FOUND 965 0.35 0.20 0.41 164 HTML_FONT_SIZE_LARGE 964 0.34 0.16 0.41 165 XMBrknScrpt_02 964 0.60 1.04 0.41 166 RCVD_IN_IADB_DOPTIN 961 0.31 0.08 0.41 167 HTML_FONT_SIZE_HUGE 931 0.53 0.83 0.40 168 HTML_IMAGE_ONLY_12 916 0.33 0.16 0.39 169 XMPhish30 903 0.95 2.30 0.39 170 XM_Combo_Sbj 902 0.34 0.22 0.39 171 BASE64_LENGTH_79_INF 873 0.38 0.40 0.37 172 XMCapTrack 869 0.36 0.34 0.37 173 TR_Sbj_FN_Bdy 867 0.32 0.19 0.37 174 TR_Caps_n_Bayes_99 835 0.55 1.01 0.36 175 T_OBFU_PDF_ATTACH 834 0.33 0.25 0.36 176 T_XMHurry_00 824 0.57 1.11 0.35 177 XMRcvdHeader_15 808 0.24 0.00 0.35 178 RELAYCOUNTRY_DE 798 0.46 0.76 0.34 179 HTML_IMAGE_ONLY_24 798 0.42 0.62 0.34 180 HTML_FONT_FACE_BAD 797 0.42 0.62 0.34 181 REMOVE_BEFORE_LINK 786 0.43 0.65 0.34 182 T_XMDrugObfuBody_00 783 0.46 0.76 0.34 183 T_MONEY_PERCENT 782 0.51 0.92 0.33 184 TR_LOTS_OF_MONEY2 782 0.51 0.92 0.33 185 HTML_IMAGE_ONLY_28 781 0.43 0.67 0.33 186 SpammyFromTLD_02 778 0.68 1.52 0.33 187 FUZZY_CREDIT 750 0.24 0.04 0.32 188 TRACKER_ID 732 0.30 0.26 0.31 189 URI_NOVOWEL 725 0.51 0.98 0.31 190 XMSubEmpty 724 0.26 0.14 0.31 191 PRESENTAMOS_ES 720 0.22 0.02 0.31 192 RELAYCOUNTRY_NL 719 0.39 0.58 0.31 193 XMNoVowels 712 0.31 0.33 0.30 194 XMDateMe_00 699 0.28 0.24 0.30 195 XMSexyCombo_01 686 0.82 2.11 0.29 196 TM2_M_BODY_EMPTY 683 0.29 0.27 0.29 197 MSGID_FROM_MTA_HEADER 676 0.27 0.21 0.29 198 AC_DIV_BONANZA 674 0.28 0.26 0.29 199 MIME_CHARSET_FARAWAY 668 0.24 0.12 0.29 200 XM_S_JOY_D 666 0.49 0.98 0.29 ----------------------------------------------------------------------