Email: 452647 Autolearn: 0 AvgScore: 2.82 AvgScanTime: 2.25 sec Spam: 127662 Autolearn: 0 AvgScore: 12.51 AvgScanTime: 2.71 sec Ham: 324985 Autolearn: 0 AvgScore: -0.99 AvgScanTime: 2.07 sec Time Spent Running SA: 282.84 hours Time Spent Processing Spam: 96.09 hours Time Spent Processing Ham: 186.75 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 121286 86.75 95.01 83.51 2 DKIM_SIGNED 111453 75.76 87.30 71.22 3 XM_DK_Pass 107627 73.90 84.31 69.82 4 DKIM_VALID 106094 71.95 83.11 67.57 5 DCC_CHECK 100909 46.93 79.04 34.32 6 XMListUnsubscribeExists 94267 50.98 73.84 42.01 7 DKIM_VALID_AU 82941 53.27 64.97 48.67 8 XM_H_QuotedFrom 70596 40.12 55.30 34.16 9 XM_DK_Undo_02 65496 24.38 51.30 13.81 10 BAYES_99 59577 22.77 46.67 13.39 11 BAYES_999 51465 19.91 40.31 11.90 12 HTML_FONT_LOW_CONTRAST 47831 27.74 37.47 23.92 13 TR_DCC_Bayes_99 46415 14.90 36.36 6.47 14 LOC_TINY_FONT_1 46291 24.02 36.26 19.22 15 BAYES_50 39966 50.16 31.31 57.56 16 MIME_HTML_ONLY 38353 22.57 30.04 19.64 17 FVGT_m_MULTI_ODD 36118 21.44 28.29 18.75 18 XMSubLong 35058 22.96 27.46 21.19 19 XM_Body_Dirty_Words 27983 14.27 21.92 11.26 20 T_TM2_M_HEADER_IN_MSG 27443 28.42 21.50 31.14 21 DKIM_VALID_EF 25350 22.76 19.86 23.91 22 T_KAM_HTML_FONT_INVALID 24983 14.37 19.57 12.33 23 DCC_CHECK_NEGATIVE 24038 50.67 18.83 63.18 24 XM_Multi_Part_URI 23847 13.22 18.68 11.08 25 HTML_IMAGE_RATIO_02 22739 9.91 17.81 6.80 26 RELAYCOUNTRY_META 22349 9.09 17.51 5.78 27 MultiRelay 21217 19.42 16.62 20.53 28 XM_Evil_Numbers_Gen 18703 9.97 14.65 8.13 29 BOTNET_IPINHOSTNAME 18008 7.28 14.11 4.61 30 BOTNET 16013 4.14 12.54 0.83 31 XMSexyCombo_05 15009 5.75 11.76 3.39 32 FSL_BULK_SIG 14860 9.17 11.64 8.20 33 LOTS_OF_MONEY 14482 9.47 11.34 8.74 34 T_XMDrugObfuBody_14 13968 9.12 10.94 8.40 35 LotsOfNums_01 13211 8.48 10.35 7.75 36 UNTRUSTED_Relay 12359 4.03 9.68 1.81 37 XM_B_Phish_Phrases 12040 6.57 9.43 5.45 38 HTML_IMAGE_RATIO_04 11950 5.34 9.36 3.75 39 XM_H_Long_From01 11729 6.83 9.19 5.90 40 XM_UncommonTLD01 10054 5.00 7.88 3.87 41 XMSubMetaSx_00 10049 4.81 7.87 3.61 42 BAYES_80 9526 4.91 7.46 3.90 43 TR_XM_DocInvoice 9524 5.28 7.46 4.42 44 MPART_ALT_DIFF 9464 4.56 7.41 3.44 45 TooManyTo_001 9339 8.95 7.32 9.60 46 RCVD_IN_RP_SAFE 9162 9.46 7.18 10.36 47 FROM_EXCESS_BASE64 7944 4.45 6.22 3.76 48 RCVD_IN_RP_CERTIFIED 7498 8.42 5.87 9.42 49 BAYES_60 7355 6.18 5.76 6.34 50 MIME_HTML_MOSTLY 7230 3.47 5.66 2.61 51 HTML_IMAGE_RATIO_06 7000 3.72 5.48 3.02 52 RCVD_IN_MSPIKE_H2 6573 5.01 5.15 4.95 53 MIME_QP_LONG_LINE 6324 4.86 4.95 4.82 54 XM_DIRTYINTL 6086 2.82 4.77 2.06 55 XMNumbers 5735 3.96 4.49 3.75 56 BAYES_95 5651 3.02 4.43 2.47 57 XM_SendGrid 5498 4.98 4.31 5.25 58 TM2_M_URI_OPT_OUT 5422 2.55 4.25 1.89 59 DKIM_INVALID 5359 3.80 4.20 3.64 60 XMStrtUSub 4937 4.44 3.87 4.67 61 XM_UB50 4877 1.91 3.82 1.16 62 XM_SPF_SoftFail 4729 2.49 3.70 2.01 63 RELAYCOUNTRY_CA 4689 2.00 3.67 1.34 64 T_REMOTE_IMAGE 4616 4.55 3.62 4.92 65 T_TooManySym_01 4516 4.34 3.54 4.66 66 MIME_HTML_ONLY_MULTI 4351 2.11 3.41 1.60 67 URI_HEX 4316 1.69 3.38 1.03 68 XM_CamelCaseFrm001 4098 2.16 3.21 1.75 69 XMDiploma_00 3655 1.89 2.86 1.51 70 RCVD_IN_BL_SPAMCOP_NET 3607 1.17 2.83 0.52 71 SpammyFromTLD_01 3570 1.36 2.80 0.79 72 RCVD_IN_RP_RNBL 3467 0.78 2.72 0.01 73 HTML_IMAGE_RATIO_08 3349 2.19 2.62 2.02 74 TR_Mismatch_TLD_02 3155 0.74 2.47 0.06 75 TM2_M_VERY_LONG_WORD 3148 1.32 2.47 0.88 76 RCVD_IN_IADB_LISTED 3046 4.36 2.39 5.14 77 XM_URI_RBL 3016 0.77 2.36 0.14 78 T_XMDrugObfuBody_08 3005 1.57 2.35 1.26 79 XM_OfRef6 3000 1.89 2.35 1.71 80 MultiRelay_CC 2804 0.81 2.20 0.26 81 MultiRelay_Combo 2804 0.81 2.20 0.26 82 SUBJ_ALL_CAPS 2743 2.04 2.15 1.99 83 RCVD_IN_IADB_SPF 2741 3.79 2.15 4.43 84 XM_ProductURIs 2694 1.36 2.11 1.06 85 RCVD_IN_IADB_SENDERID 2609 3.36 2.04 3.88 86 XMSubMetaI_00 2576 1.04 2.02 0.66 87 HTML_MIME_NO_HTML_TAG 2554 2.22 2.00 2.30 88 RCVD_IN_IADB_DK 2545 3.27 1.99 3.77 89 RELAYCOUNTRY_DE 2415 1.08 1.89 0.75 90 XM_DK_Undo_01 2388 2.06 1.87 2.14 91 TR_XM_RelayPhish 2360 0.98 1.85 0.64 92 XMSexyCombo_01 2355 1.00 1.84 0.66 93 XMBdyGiftCard01 2353 1.19 1.84 0.93 94 MAILING_LIST_MULTI 2335 2.35 1.83 2.55 95 DIET_1 2305 1.31 1.81 1.11 96 XMPhish30 2244 0.86 1.76 0.50 97 XMBrknScrpt_02 2229 1.12 1.75 0.88 98 XMBody_78 2219 0.84 1.74 0.49 99 T_FILL_THIS_FORM_SHORT 2176 1.14 1.70 0.92 100 XM_UB99 2132 0.49 1.67 0.02 101 BAYES_00 2121 6.23 1.66 8.03 102 XMBody_17 2079 0.71 1.63 0.35 103 XM_H_Long_From02 2049 1.23 1.61 1.08 104 RELAYCOUNTRY_GB 2037 1.37 1.60 1.28 105 T_MONEY_PERCENT 2004 0.72 1.57 0.38 106 TR_LOTS_OF_MONEY2 2004 0.72 1.57 0.38 107 URI_TRY_3LD 2001 1.13 1.57 0.96 108 T_XMDrugObfuBody_00 1991 1.02 1.56 0.81 109 XM_UB60 1980 0.52 1.55 0.12 110 RELAYCOUNTRY_FR 1966 0.74 1.54 0.43 111 URIBL_BLACK 1950 0.46 1.53 0.03 112 XMGenDplmaNmb 1909 1.06 1.50 0.89 113 RCVD_IN_PSBL 1875 0.54 1.47 0.17 114 DATE_IN_PAST_03_06 1839 0.51 1.44 0.14 115 XMPhish14 1791 0.62 1.40 0.31 116 TR_XM_DK_Bayes 1756 4.09 1.38 5.16 117 TR_XM_DK_Bayes1 1750 3.95 1.37 4.97 118 XMStockSpam_06 1735 1.32 1.36 1.31 119 SpammyFromTLD_02 1706 0.73 1.34 0.50 120 UNPARSEABLE_RELAY 1699 3.29 1.33 4.06 121 T_XMHurry_00 1696 0.68 1.33 0.43 122 XMPhish11 1694 1.32 1.33 1.31 123 LONG_JUNK_URI 1694 0.47 1.33 0.13 124 XM_UB999 1685 0.38 1.32 0.02 125 T_Symld_Words_02 1640 0.76 1.28 0.56 126 XMSubMetaSxObfu_03 1604 0.64 1.26 0.40 127 XM_B_REG_HTML 1595 0.81 1.25 0.63 128 BAYES_40 1589 3.01 1.24 3.71 129 PHOTO_EDITING_FREEM 1573 0.35 1.23 0.00 130 URIBL_DBL_SPAM 1571 0.36 1.23 0.02 131 XM_UB80 1568 0.39 1.23 0.06 132 XMHTMLBadTable_001 1566 0.70 1.23 0.50 133 FSL_THIS_IS_ADV 1565 0.39 1.23 0.06 134 PHOTO_EDITING_DIRECT 1555 0.34 1.22 0.00 135 SUBJ_DOLLARS 1539 0.62 1.21 0.39 136 XM_B_COPY_HTML 1538 0.75 1.20 0.57 137 TR_XM_DK_Bayes2 1534 3.21 1.20 4.00 138 BOTNET_NORDNS 1526 0.36 1.20 0.03 139 XM_RXBody 1516 0.45 1.19 0.16 140 XMMoneyMeta_00 1513 0.69 1.19 0.50 141 XM_HighProb1 1511 0.35 1.18 0.02 142 RDNS_DYNAMIC 1459 0.63 1.14 0.43 143 XM_H_PHPOS 1442 1.26 1.13 1.31 144 TR_Symld_Words 1378 1.87 1.08 2.18 145 HTML_FONT_FACE_BAD 1375 1.03 1.08 1.02 146 T_HTML_TAG_BALANCE_CENTER 1359 0.55 1.06 0.34 147 T_TooManySym_02 1342 1.65 1.05 1.88 148 RELAYCOUNTRY_AT 1319 0.47 1.03 0.25 149 ALL_TRUSTED 1316 12.68 1.03 17.26 150 HTML_TAG_BALANCE_BODY 1297 0.62 1.02 0.46 151 REMOVE_BEFORE_LINK 1277 0.51 1.00 0.32 152 PLING_QUERY 1268 0.59 0.99 0.43 153 BAYES_20 1203 2.26 0.94 2.78 154 XMSlimDrugH 1195 0.67 0.94 0.57 155 MPART_ALT_DIFF_COUNT 1189 0.55 0.93 0.41 156 URI_NOVOWEL 1171 0.52 0.92 0.37 157 XMHTML_After_End 1148 0.51 0.90 0.35 158 RCVD_IN_IADB_VOUCHED 1135 2.76 0.89 3.49 159 XM_Body_Obfu01 1115 0.37 0.87 0.17 160 TooManyTo_002 1100 2.48 0.86 3.12 161 HELO_MISC_IP 1056 0.27 0.83 0.05 162 RELAYCOUNTRY_CN 1039 0.27 0.81 0.06 163 CK_HELO_DYNAMIC_SPLIT_IP 1029 0.23 0.81 0.00 164 XM_PDF 1011 3.80 0.79 4.98 165 XM_Hitman 1006 0.25 0.79 0.04 166 RELAYCOUNTRY_AL 987 0.22 0.77 0.00 167 RELAYCOUNTRY_AU 978 0.56 0.77 0.48 168 DKIM_ADSP_CUSTOM_MED 961 1.14 0.75 1.30 169 LongTLD 958 0.42 0.75 0.29 170 XM_BadFromFormat 956 0.47 0.75 0.37 171 XMSubMetaSSx_00 943 0.32 0.74 0.15 172 XMBSHREFv2 942 0.28 0.74 0.10 173 NO_DNS_FOR_FROM 932 0.52 0.73 0.43 174 TooManyTo_003 913 1.68 0.72 2.06 175 LOW_PRICE 895 0.68 0.70 0.68 176 TM2_M_A_HREF_HREF 836 0.58 0.65 0.55 177 ANY_BOUNCE_MESSAGE 835 3.18 0.65 4.17 178 BOUNCE_MESSAGE 835 3.18 0.65 4.17 179 XMNoVowels 825 0.64 0.65 0.64 180 NML_ADSP_CUSTOM_MED 806 0.90 0.63 1.01 181 BODY_ENHANCEMENT 804 0.18 0.63 0.01 182 HTTPS_HTTP_MISMATCH 802 0.47 0.63 0.41 183 XMCapTrack 789 1.11 0.62 1.31 184 XMSexyCombo_04 776 0.26 0.61 0.12 185 XM_XX_Yahoo 773 0.28 0.61 0.15 186 TR_Caps_n_Bayes_99 772 0.21 0.60 0.06 187 RELAYCOUNTRY_JP 768 0.20 0.60 0.04 188 XM_H_PHPMailer 755 0.74 0.59 0.80 189 HTML_IMAGE_ONLY_28 745 0.51 0.58 0.48 190 XM_OfRef7 742 0.31 0.58 0.20 191 RELAYCOUNTRY_IE 740 0.30 0.58 0.18 192 HTML_FONT_SIZE_HUGE 723 0.36 0.57 0.27 193 LONG_HEX_URI 720 0.30 0.56 0.19 194 XM_B_TRADE_HTML 707 0.43 0.55 0.38 195 XMSubMetaD_03 706 0.33 0.55 0.24 196 XMSubMetaI_01 701 0.27 0.55 0.15 197 FORGED_GMAIL_RCVD 698 0.48 0.55 0.45 198 XM_GoogleGroups 698 1.12 0.55 1.34 199 HTML_IMAGE_ONLY_24 695 0.47 0.54 0.44 200 TR_MetaPhish_Combo_01 690 0.61 0.54 0.64 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 271398 86.75 95.01 83.51 2 DKIM_SIGNED 231452 75.76 87.30 71.22 3 XM_DK_Pass 226892 73.90 84.31 69.82 4 DKIM_VALID 219607 71.95 83.11 67.57 5 DCC_CHECK_NEGATIVE 205337 50.67 18.83 63.18 6 BAYES_50 187061 50.16 31.31 57.56 7 DKIM_VALID_AU 158167 53.27 64.97 48.67 8 XMListUnsubscribeExists 136513 50.98 73.84 42.01 9 DCC_CHECK 111535 46.93 79.04 34.32 10 XM_H_QuotedFrom 111023 40.12 55.30 34.16 11 T_TM2_M_HEADER_IN_MSG 101202 28.42 21.50 31.14 12 HTML_FONT_LOW_CONTRAST 77749 27.74 37.47 23.92 13 DKIM_VALID_EF 77693 22.76 19.86 23.91 14 XMSubLong 68862 22.96 27.46 21.19 15 MultiRelay 66709 19.42 16.62 20.53 16 MIME_HTML_ONLY 63815 22.57 30.04 19.64 17 LOC_TINY_FONT_1 62457 24.02 36.26 19.22 18 FVGT_m_MULTI_ODD 60934 21.44 28.29 18.75 19 ALL_TRUSTED 56079 12.68 1.03 17.26 20 XM_DK_Undo_02 44876 24.38 51.30 13.81 21 BAYES_99 43511 22.77 46.67 13.39 22 T_KAM_HTML_FONT_INVALID 40057 14.37 19.57 12.33 23 BAYES_999 38665 19.91 40.31 11.90 24 XM_Body_Dirty_Words 36595 14.27 21.92 11.26 25 XM_Multi_Part_URI 36014 13.22 18.68 11.08 26 XM_DKIMWhitelistDomains 34097 7.54 0.02 10.49 27 RCVD_IN_RP_SAFE 33673 9.46 7.18 10.36 28 TooManyTo_001 31188 8.95 7.32 9.60 29 RCVD_IN_RP_CERTIFIED 30606 8.42 5.87 9.42 30 LOTS_OF_MONEY 28396 9.47 11.34 8.74 31 T_XMDrugObfuBody_14 27310 9.12 10.94 8.40 32 FSL_BULK_SIG 26642 9.17 11.64 8.20 33 XM_Evil_Numbers_Gen 26419 9.97 14.65 8.13 34 BAYES_00 26094 6.23 1.66 8.03 35 LotsOfNums_01 25182 8.48 10.35 7.75 36 IN_ZIMBRA_NJ_WHITELIST 22423 4.97 0.05 6.90 37 HTML_IMAGE_RATIO_02 22114 9.91 17.81 6.80 38 TR_DCC_Bayes_99 21018 14.90 36.36 6.47 39 BAYES_60 20597 6.18 5.76 6.34 40 XM_H_Long_From01 19185 6.83 9.19 5.90 41 RELAYCOUNTRY_META 18798 9.09 17.51 5.78 42 XM_B_Phish_Phrases 17708 6.57 9.43 5.45 43 XM_SendGrid 17049 4.98 4.31 5.25 44 TR_XM_DK_Bayes 16777 4.09 1.38 5.16 45 RCVD_IN_IADB_LISTED 16689 4.36 2.39 5.14 46 XM_PDF 16174 3.80 0.79 4.98 47 TR_XM_DK_Bayes1 16145 3.95 1.37 4.97 48 RCVD_IN_MSPIKE_H2 16092 5.01 5.15 4.95 49 T_REMOTE_IMAGE 15995 4.55 3.62 4.92 50 MIME_QP_LONG_LINE 15664 4.86 4.95 4.82 51 XMStrtUSub 15179 4.44 3.87 4.67 52 T_TooManySym_01 15142 4.34 3.54 4.66 53 BOTNET_IPINHOSTNAME 14967 7.28 14.11 4.61 54 RCVD_IN_IADB_SPF 14403 3.79 2.15 4.43 55 TR_XM_DocInvoice 14367 5.28 7.46 4.42 56 ANY_BOUNCE_MESSAGE 13562 3.18 0.65 4.17 57 BOUNCE_MESSAGE 13560 3.18 0.65 4.17 58 UNPARSEABLE_RELAY 13205 3.29 1.33 4.06 59 TR_XM_DK_Bayes2 13012 3.21 1.20 4.00 60 BAYES_80 12689 4.91 7.46 3.90 61 RCVD_IN_IADB_SENDERID 12614 3.36 2.04 3.88 62 XM_UncommonTLD01 12561 5.00 7.88 3.87 63 RCVD_IN_IADB_DK 12254 3.27 1.99 3.77 64 FROM_EXCESS_BASE64 12218 4.45 6.22 3.76 65 HTML_IMAGE_RATIO_04 12203 5.34 9.36 3.75 66 XMNumbers 12184 3.96 4.49 3.75 67 BAYES_40 12052 3.01 1.24 3.71 68 DKIM_INVALID 11845 3.80 4.20 3.64 69 XMSubMetaSx_00 11727 4.81 7.87 3.61 70 RCVD_IN_IADB_VOUCHED 11343 2.76 0.89 3.49 71 MPART_ALT_DIFF 11186 4.56 7.41 3.44 72 TVD_RCVD_IP 11087 2.56 0.39 3.41 73 XMSexyCombo_05 11030 5.75 11.76 3.39 74 TooManyTo_002 10146 2.48 0.86 3.12 75 HTML_IMAGE_RATIO_06 9830 3.72 5.48 3.02 76 BAYES_20 9028 2.26 0.94 2.78 77 MIME_HTML_MOSTLY 8466 3.47 5.66 2.61 78 MAILING_LIST_MULTI 8280 2.35 1.83 2.55 79 BAYES_95 8029 3.02 4.43 2.47 80 IN_HORDE_ADDRESS_BOOK 7987 1.79 0.09 2.46 81 TO_MALFORMED 7491 1.66 0.01 2.31 82 HTML_MIME_NO_HTML_TAG 7480 2.22 2.00 2.30 83 TR_Symld_Words 7070 1.87 1.08 2.18 84 XM_DK_Undo_01 6945 2.06 1.87 2.14 85 INVALID_MSGID 6932 1.60 0.26 2.13 86 TooManyTo_003 6696 1.68 0.72 2.06 87 XM_DIRTYINTL 6687 2.82 4.77 2.06 88 HTML_IMAGE_RATIO_08 6560 2.19 2.62 2.02 89 XM_SPF_SoftFail 6545 2.49 3.70 2.01 90 SUBJ_ALL_CAPS 6475 2.04 2.15 1.99 91 TM2_M_URI_OPT_OUT 6133 2.55 4.25 1.89 92 T_TooManySym_02 6124 1.65 1.05 1.88 93 BAYES_05 5924 1.46 0.53 1.82 94 UNTRUSTED_Relay 5867 4.03 9.68 1.81 95 XM_CamelCaseFrm001 5698 2.16 3.21 1.75 96 XM_OfRef6 5548 1.89 2.35 1.71 97 RCVD_IN_IADB_OPTIN 5418 1.35 0.53 1.67 98 MIME_HTML_ONLY_MULTI 5201 2.11 3.41 1.60 99 HELO_NODOT 5017 1.19 0.30 1.54 100 XMDiploma_00 4902 1.89 2.86 1.51 101 TooManyTo_004 4898 1.21 0.45 1.51 102 USER_IN_DEF_DKIM_WL 4851 1.12 0.17 1.49 103 XM_GoogleGroups 4371 1.12 0.55 1.34 104 RELAYCOUNTRY_CA 4354 2.00 3.67 1.34 105 XMPhish11 4268 1.32 1.33 1.31 106 XM_H_PHPOS 4259 1.26 1.13 1.31 107 XMStockSpam_06 4247 1.32 1.36 1.31 108 XMCapTrack 4243 1.11 0.62 1.31 109 DKIM_ADSP_CUSTOM_MED 4214 1.14 0.75 1.30 110 RELAYCOUNTRY_GB 4152 1.37 1.60 1.28 111 T_XMDrugObfuBody_08 4090 1.57 2.35 1.26 112 XMGappySubj_01 3991 1.02 0.50 1.23 113 TooManyTo_005 3885 0.97 0.38 1.20 114 RCVD_IN_MSPIKE_H3 3773 0.92 0.31 1.16 115 RCVD_IN_MSPIKE_WL 3773 0.92 0.31 1.16 116 XM_UB50 3761 1.91 3.82 1.16 117 DIET_1 3621 1.31 1.81 1.11 118 XM_H_Long_From02 3497 1.23 1.61 1.08 119 XM_ProductURIs 3457 1.36 2.11 1.06 120 URI_HEX 3339 1.69 3.38 1.03 121 HTML_FONT_FACE_BAD 3306 1.03 1.08 1.02 122 NML_ADSP_CUSTOM_MED 3286 0.90 0.63 1.01 123 XMSolicitRefs_0 3148 0.84 0.52 0.97 124 URI_TRY_3LD 3104 1.13 1.57 0.96 125 XMBdyGiftCard01 3022 1.19 1.84 0.93 126 T_FILL_THIS_FORM_SHORT 2988 1.14 1.70 0.92 127 XMGenDplmaNmb 2896 1.06 1.50 0.89 128 XMBrknScrpt_02 2862 1.12 1.75 0.88 129 TM2_M_VERY_LONG_WORD 2845 1.32 2.47 0.88 130 USER_IN_WHITELIST 2836 0.63 0.00 0.87 131 BOTNET 2705 4.14 12.54 0.83 132 T_XMDrugObfuBody_00 2630 1.02 1.56 0.81 133 XM_H_PHPMailer 2595 0.74 0.59 0.80 134 SpammyFromTLD_01 2583 1.36 2.80 0.79 135 XM_ShortIntro_01 2489 0.65 0.37 0.77 136 RELAYCOUNTRY_DE 2453 1.08 1.89 0.75 137 T_TooManySym_03 2409 0.57 0.14 0.74 138 FILL_THIS_FORM 2394 0.57 0.16 0.74 139 T_OBFU_PDF_ATTACH 2264 0.55 0.19 0.70 140 LOW_PRICE 2201 0.68 0.70 0.68 141 XMSexyCombo_01 2154 1.00 1.84 0.66 142 XMSubMetaI_00 2137 1.04 2.02 0.66 143 RCVD_IN_IADB_DOPTIN 2135 0.49 0.07 0.66 144 XMGappySubj_02 2079 0.53 0.24 0.64 145 TR_XM_RelayPhish 2076 0.98 1.85 0.64 146 XMNoVowels 2071 0.64 0.65 0.64 147 TR_MetaPhish_Combo_01 2066 0.61 0.54 0.64 148 XM_B_REG_HTML 2056 0.81 1.25 0.63 149 T_FILL_THIS_FORM_LONG 1977 0.47 0.13 0.61 150 T_FILL_THIS_FORM_LOAN 1957 0.45 0.05 0.60 151 XMSlimDrugH 1851 0.67 0.94 0.57 152 XM_B_COPY_HTML 1844 0.75 1.20 0.57 153 MISSING_HEADERS 1844 0.50 0.33 0.57 154 XM_H_PHPOS_M 1836 0.51 0.38 0.56 155 T_Symld_Words_02 1804 0.76 1.28 0.56 156 HTML_IMAGE_ONLY_32 1789 0.49 0.32 0.55 157 TM2_M_A_HREF_HREF 1783 0.58 0.65 0.55 158 RCVD_IN_BL_SPAMCOP_NET 1692 1.17 2.83 0.52 159 XMSubNoVowel 1640 0.48 0.43 0.50 160 XMPhish30 1632 0.86 1.76 0.50 161 XMDateMe_00 1618 0.49 0.47 0.50 162 XMHTMLBadTable_001 1613 0.70 1.23 0.50 163 XMMoneyMeta_00 1610 0.69 1.19 0.50 164 SpammyFromTLD_02 1610 0.73 1.34 0.50 165 AC_DIV_BONANZA 1596 0.42 0.24 0.49 166 XMBody_95 1584 0.40 0.18 0.49 167 XMBody_78 1583 0.84 1.74 0.49 168 XMRcvdHeader_15 1568 0.35 0.00 0.48 169 XMSubMetaSxObfu_02 1566 0.42 0.28 0.48 170 HTML_IMAGE_ONLY_28 1562 0.51 0.58 0.48 171 RELAYCOUNTRY_AU 1546 0.56 0.77 0.48 172 HTML_TAG_BALANCE_BODY 1508 0.62 1.02 0.46 173 T_MANY_PILL_PRICE 1481 0.33 0.00 0.46 174 DKIM_ADSP_NXDOMAIN 1468 0.41 0.29 0.45 175 FORGED_GMAIL_RCVD 1465 0.48 0.55 0.45 176 HTML_IMAGE_ONLY_24 1438 0.47 0.54 0.44 177 TM2_M_BODY_EMPTY 1421 0.39 0.26 0.44 178 RDNS_DYNAMIC 1404 0.63 1.14 0.43 179 RELAYCOUNTRY_FR 1404 0.74 1.54 0.43 180 NO_DNS_FOR_FROM 1403 0.52 0.73 0.43 181 PLING_QUERY 1397 0.59 0.99 0.43 182 T_XMHurry_00 1394 0.68 1.33 0.43 183 TR_MetaPhish_Combo_01b 1389 0.38 0.26 0.43 184 XM_H_Trusted_IP 1358 0.30 0.00 0.42 185 HTTPS_HTTP_MISMATCH 1337 0.47 0.63 0.41 186 MPART_ALT_DIFF_COUNT 1321 0.55 0.93 0.41 187 XMSubMetaSxObfu_03 1313 0.64 1.26 0.40 188 XM_H_SpoofStaff4 1276 0.32 0.13 0.39 189 SUBJ_DOLLARS 1254 0.62 1.21 0.39 190 HTML_IMAGE_ONLY_20 1247 0.35 0.28 0.38 191 XM_B_TRADE_HTML 1244 0.43 0.55 0.38 192 TR_LOTS_OF_MONEY2 1243 0.72 1.57 0.38 193 T_MONEY_PERCENT 1243 0.72 1.57 0.38 194 RCVD_IN_SORBS_DUL 1238 0.31 0.12 0.38 195 URI_NOVOWEL 1205 0.52 0.92 0.37 196 XMLngstWrd_00 1204 0.42 0.54 0.37 197 XM_BadFromFormat 1194 0.47 0.75 0.37 198 MSGID_FROM_MTA_HEADER 1169 0.33 0.25 0.36 199 TVD_SPACE_RATIO 1157 0.35 0.32 0.36 200 XMSubEmpty 1151 0.30 0.15 0.35 ----------------------------------------------------------------------