Email: 542875 Autolearn: 0 AvgScore: 3.35 AvgScanTime: 4.41 sec Spam: 166866 Autolearn: 0 AvgScore: 12.28 AvgScanTime: 5.49 sec Ham: 376009 Autolearn: 0 AvgScore: -0.62 AvgScanTime: 3.93 sec Time Spent Running SA: 664.78 hours Time Spent Processing Spam: 254.44 hours Time Spent Processing Ham: 410.34 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 159000 86.77 95.29 83.00 2 DKIM_SIGNED 143295 71.33 85.87 64.88 3 XM_DK_Pass 139106 69.74 83.36 63.70 4 DCC_CHECK 133063 48.22 79.74 34.23 5 DKIM_VALID 129096 64.37 77.37 58.60 6 XMListUnsubscribeExists 123497 50.41 74.01 39.94 7 DKIM_VALID_AU 99418 45.49 59.58 39.24 8 XM_H_QuotedFrom 94082 42.02 56.38 35.64 9 XM_DK_Undo_02 84159 24.29 50.44 12.69 10 BAYES_99 76257 22.19 45.70 11.76 11 BAYES_999 65259 19.27 39.11 10.47 12 HTML_FONT_LOW_CONTRAST 63047 27.53 37.78 22.98 13 LOC_TINY_FONT_1 60514 22.83 36.27 16.87 14 TR_DCC_Bayes_99 60199 14.97 36.08 5.60 15 BAYES_50 51610 48.49 30.93 56.28 16 MIME_HTML_ONLY 48653 22.51 29.16 19.56 17 FVGT_m_MULTI_ODD 45273 21.23 27.13 18.61 18 XMSubLong 41155 20.83 24.66 19.13 19 DKIM_VALID_EF 37713 22.74 22.60 22.80 20 T_KAM_HTML_FONT_INVALID 36335 16.01 21.77 13.45 21 T_TM2_M_HEADER_IN_MSG 35298 30.19 21.15 34.21 22 XM_Body_Dirty_Words 33253 12.92 19.93 9.81 23 DCC_CHECK_NEGATIVE 30634 49.61 18.36 63.47 24 XM_Multi_Part_URI 26325 11.62 15.78 9.77 25 XM_Evil_Numbers_Gen 25574 9.70 15.33 7.21 26 HTML_IMAGE_RATIO_02 25181 8.89 15.09 6.13 27 MultiRelay 24583 17.63 14.73 18.92 28 RELAYCOUNTRY_META 23689 7.81 14.20 4.97 29 FSL_BULK_SIG 21338 10.95 12.79 10.14 30 BOTNET 19676 4.62 11.79 1.44 31 LOTS_OF_MONEY 19563 10.92 11.72 10.56 32 BOTNET_IPINHOSTNAME 19471 5.93 11.67 3.39 33 HTML_IMAGE_RATIO_04 17224 6.45 10.32 4.72 34 LotsOfNums_01 16746 7.73 10.04 6.71 35 T_XMDrugObfuBody_14 16366 8.19 9.81 7.48 36 XMSexyCombo_05 16324 5.13 9.78 3.06 37 XM_B_Phish_Phrases 14716 6.66 8.82 5.71 38 XM_H_Long_From01 14519 10.02 8.70 10.61 39 DKIM_INVALID 14199 6.97 8.51 6.28 40 UNTRUSTED_Relay 12953 3.32 7.76 1.35 41 TR_XM_DocInvoice 12623 5.35 7.56 4.37 42 BAYES_80 12376 4.73 7.42 3.53 43 XMSubMetaSx_00 11994 4.23 7.19 2.92 44 BAYES_60 11604 6.54 6.95 6.36 45 TooManyTo_001 10732 7.45 6.43 7.91 46 FROM_EXCESS_BASE64 10643 3.98 6.38 2.92 47 MPART_ALT_DIFF 10618 5.24 6.36 4.73 48 XM_UncommonTLD01 9365 4.05 5.61 3.36 49 ALL_TRUSTED 9313 17.73 5.58 23.12 50 HTML_IMAGE_RATIO_06 8252 3.60 4.95 3.00 51 BAYES_95 7837 3.06 4.70 2.34 52 XM_SendGrid 7499 4.61 4.49 4.67 53 RCVD_IN_RP_SAFE 7497 6.21 4.49 6.97 54 MIME_QP_LONG_LINE 7443 4.66 4.46 4.75 55 TM2_M_URI_OPT_OUT 7330 4.06 4.39 3.91 56 RCVD_IN_MSPIKE_H2 6951 3.98 4.17 3.90 57 XMSubNoVowel 6821 4.18 4.09 4.22 58 MIME_HTML_MOSTLY 6767 2.63 4.06 2.00 59 XMNumbers 6671 3.33 4.00 3.03 60 TR_Mismatch_TLD_01 5917 1.71 3.55 0.89 61 XMStrtUSub 5909 3.57 3.54 3.58 62 URI_HEX 5877 2.04 3.52 1.39 63 XM_DIRTYINTL 5868 2.39 3.52 1.88 64 RELAYCOUNTRY_CA 5807 1.97 3.48 1.31 65 XM_CamelCaseFrm001 5561 1.95 3.33 1.33 66 RCVD_IN_RP_CERTIFIED 5533 5.41 3.32 6.34 67 MIME_HTML_ONLY_MULTI 5507 3.40 3.30 3.44 68 XMSubEmpty 5388 3.07 3.23 3.01 69 XM_SPF_SoftFail 5376 2.26 3.22 1.83 70 NO_DNS_FOR_FROM 5276 2.39 3.16 2.05 71 XM_UB50 5228 1.61 3.13 0.94 72 T_REMOTE_IMAGE 5168 4.19 3.10 4.67 73 HTML_IMAGE_RATIO_08 5132 2.22 3.08 1.84 74 T_TooManySym_01 4926 3.45 2.95 3.68 75 XM_OfRef6 4438 1.78 2.66 1.38 76 RCVD_IN_BL_SPAMCOP_NET 4301 1.24 2.58 0.65 77 T_XMDrugObfuBody_08 4149 1.68 2.49 1.33 78 SUBJ_ALL_CAPS 3933 5.04 2.36 6.23 79 SpammyFromTLD_02 3924 0.99 2.35 0.39 80 SHORT_URI_2 3834 1.38 2.30 0.98 81 TM2_M_VERY_LONG_WORD 3802 1.24 2.28 0.78 82 RCVD_IN_IADB_LISTED 3762 4.71 2.25 5.80 83 XMSubMetaI_00 3534 0.96 2.12 0.45 84 RCVD_IN_IADB_SPF 3433 4.06 2.06 4.95 85 XMDiploma_00 3374 1.65 2.02 1.48 86 XM_URI_RBL 3320 0.68 1.99 0.10 87 RCVD_IN_IADB_SENDERID 3279 3.60 1.97 4.33 88 RCVD_IN_IADB_DK 3248 3.49 1.95 4.18 89 SpammyFromTLD_01 3150 1.07 1.89 0.70 90 XMBody_17 3117 0.80 1.87 0.33 91 HTML_MIME_NO_HTML_TAG 3095 2.13 1.85 2.25 92 XM_ProductURIs 3074 1.14 1.84 0.83 93 MultiRelay_Combo 3008 0.68 1.80 0.18 94 MultiRelay_CC 3008 0.68 1.80 0.18 95 XM_H_Long_From02 2977 1.08 1.78 0.77 96 XMBdyGiftCard01 2911 0.89 1.74 0.51 97 XMBrknScrpt_02 2859 0.79 1.71 0.38 98 XM_UB99 2843 0.54 1.70 0.02 99 T_XMHurry_00 2705 0.80 1.62 0.44 100 TR_XM_RelayPhish 2636 0.95 1.58 0.67 101 URIBL_BLACK 2623 0.51 1.57 0.03 102 XM_DK_Undo_01 2500 1.79 1.50 1.93 103 XMSexyCombo_01 2484 0.68 1.49 0.32 104 MAILING_LIST_MULTI 2478 2.10 1.49 2.37 105 DIET_1 2393 0.58 1.43 0.20 106 XMGenDplmaNmb 2389 1.03 1.43 0.86 107 FSL_THIS_IS_ADV 2334 0.52 1.40 0.13 108 XMPhish30 2276 0.69 1.36 0.39 109 XMStockSpam_06 2241 1.23 1.34 1.18 110 URIBL_DBL_SPAM 2240 0.44 1.34 0.04 111 XMPhish11 2235 1.17 1.34 1.09 112 RELAYCOUNTRY_FR 2234 0.63 1.34 0.32 113 XMHTML_After_End 2224 0.62 1.33 0.31 114 UNPARSEABLE_RELAY 2214 2.11 1.33 2.46 115 XM_UB999 2162 0.41 1.30 0.02 116 BAYES_00 2111 6.98 1.27 9.52 117 T_XMDrugObfuBody_00 2080 1.02 1.25 0.93 118 T_FILL_THIS_FORM_SHORT 1987 0.97 1.19 0.88 119 URI_TRY_3LD 1972 1.05 1.18 0.99 120 XM_B_REG_HTML 1960 0.63 1.17 0.39 121 XM_H_PHPOS 1954 1.13 1.17 1.11 122 XMEmptySub 1902 0.83 1.14 0.69 123 TR_Symld_Words 1901 1.97 1.14 2.34 124 RCVD_IN_RP_RNBL 1889 0.37 1.13 0.04 125 HTTPS_HTTP_MISMATCH 1870 0.69 1.12 0.50 126 XMSubMetaSSx_00 1864 0.40 1.12 0.09 127 DKIM_ADSP_CUSTOM_MED 1853 1.07 1.11 1.05 128 BAYES_40 1846 4.11 1.11 5.44 129 XM_BadFromFormat 1802 0.45 1.08 0.18 130 RELAYCOUNTRY_AT 1779 0.42 1.07 0.13 131 TR_Caps_n_Bayes_99 1760 0.38 1.05 0.08 132 TR_XM_DK_Bayes 1742 3.75 1.04 4.96 133 BAYES_20 1735 2.03 1.04 2.48 134 XMSubMetaSxObfu_03 1697 0.51 1.02 0.29 135 XM_UB60 1682 0.38 1.01 0.10 136 XM_HighProb1 1674 0.32 1.00 0.01 137 XMBody_78 1668 0.65 1.00 0.49 138 TVD_SPACE_RATIO 1662 0.80 1.00 0.72 139 BODY_ENHANCEMENT 1650 0.31 0.99 0.01 140 SHORT_URI 1639 0.59 0.98 0.41 141 XMHTMLBadTable_001 1615 0.56 0.97 0.37 142 ADMITS_SPAM 1598 0.32 0.96 0.04 143 RDNS_DYNAMIC 1594 0.57 0.96 0.40 144 XM_S_JOY_D 1560 0.43 0.93 0.20 145 TR_XM_DK_Bayes1 1558 3.30 0.93 4.36 146 NML_ADSP_CUSTOM_MED 1551 0.77 0.93 0.70 147 FORGED_GMAIL_RCVD 1536 0.62 0.92 0.49 148 T_Symld_Words_02 1535 0.56 0.92 0.41 149 RCVD_IN_IADB_VOUCHED 1523 3.14 0.91 4.13 150 TooManyTo_002 1519 1.96 0.91 2.42 151 PLING_QUERY 1504 0.43 0.90 0.22 152 HTML_FONT_FACE_BAD 1484 0.51 0.89 0.34 153 TR_LOTS_OF_MONEY2 1482 0.50 0.89 0.33 154 T_MONEY_PERCENT 1482 0.50 0.89 0.33 155 RELAYCOUNTRY_GB 1479 0.97 0.89 1.01 156 SUBJ_DOLLARS 1471 0.43 0.88 0.22 157 XM_PDF 1471 3.42 0.88 4.55 158 REMOVE_BEFORE_LINK 1463 0.46 0.88 0.27 159 XM_B_COPY_HTML 1446 0.66 0.87 0.57 160 RCVD_IN_MSPIKE_WL 1429 2.08 0.86 2.62 161 RCVD_IN_MSPIKE_H3 1429 2.08 0.86 2.62 162 MPART_ALT_DIFF_COUNT 1428 0.47 0.86 0.30 163 TR_LOTS_OF_MONEY3 1414 0.38 0.85 0.17 164 XMMoneyMeta_00 1380 0.59 0.83 0.49 165 BOTNET_NORDNS 1353 0.27 0.81 0.03 166 RELAYCOUNTRY_AU 1350 0.61 0.81 0.52 167 T_TooManySym_02 1345 1.28 0.81 1.49 168 TR_XM_DK_Bayes2 1317 2.40 0.79 3.11 169 TooManyTo_003 1306 1.30 0.78 1.53 170 TO_IN_SUBJ 1289 0.48 0.77 0.36 171 RCVD_IN_PSBL 1268 0.29 0.76 0.09 172 URI_NOVOWEL 1268 0.50 0.76 0.38 173 XMPhish14 1265 0.48 0.76 0.36 174 XM_UB80 1252 0.27 0.75 0.05 175 BODY_URI_ONLY 1244 0.28 0.75 0.07 176 FILL_THIS_FORM 1225 0.52 0.73 0.42 177 RELAYCOUNTRY_DE 1220 0.67 0.73 0.64 178 XMLngstWrd_00 1196 0.52 0.72 0.43 179 THIS_AD 1183 0.30 0.71 0.12 180 TM2_M_A_HREF_HREF 1183 0.86 0.71 0.92 181 XM_Body_Obfu01 1172 0.40 0.70 0.26 182 XM_H_PHPMailer 1172 0.66 0.70 0.64 183 XM_Lotto 1145 0.27 0.69 0.08 184 XMLngstWrd_01 1144 0.48 0.69 0.39 185 RELAYCOUNTRY_NL 1127 0.32 0.68 0.16 186 XMClaimOffer 1125 0.33 0.67 0.18 187 XM_XX_Yahoo 1120 0.32 0.67 0.16 188 HTML_TAG_BALANCE_BODY 1117 0.49 0.67 0.41 189 FILL_THIS_FORM_LONG 1102 0.42 0.66 0.31 190 PP_MIME_FAKE_ASCII_TEXT 1092 0.60 0.65 0.58 191 XMNoVowels 1079 0.83 0.65 0.92 192 XMSlimDrugH 1072 0.38 0.64 0.26 193 XMLngstWrd_02 1068 0.41 0.64 0.31 194 XMGppyBdWords 1064 0.34 0.64 0.21 195 XMGappySubj_01 1062 0.63 0.64 0.63 196 XMLongAddy 1059 0.24 0.63 0.07 197 HTML_FONT_SIZE_HUGE 1054 0.26 0.63 0.09 198 BAYES_05 1011 1.38 0.61 1.73 199 TooManyTo_004 1001 0.93 0.60 1.08 200 RCVD_IN_IADB_OPTIN 1000 2.02 0.60 2.64 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 312075 86.77 95.29 83.00 2 DKIM_SIGNED 243964 71.33 85.87 64.88 3 XM_DK_Pass 239504 69.74 83.36 63.70 4 DCC_CHECK_NEGATIVE 238663 49.61 18.36 63.47 5 DKIM_VALID 220347 64.37 77.37 58.60 6 BAYES_50 211632 48.49 30.93 56.28 7 XMListUnsubscribeExists 150162 50.41 74.01 39.94 8 DKIM_VALID_AU 147541 45.49 59.58 39.24 9 XM_H_QuotedFrom 134009 42.02 56.38 35.64 10 DCC_CHECK 128712 48.22 79.74 34.23 11 T_TM2_M_HEADER_IN_MSG 128618 30.19 21.15 34.21 12 ALL_TRUSTED 86915 17.73 5.58 23.12 13 HTML_FONT_LOW_CONTRAST 86393 27.53 37.78 22.98 14 DKIM_VALID_EF 85748 22.74 22.60 22.80 15 MIME_HTML_ONLY 73550 22.51 29.16 19.56 16 XMSubLong 71912 20.83 24.66 19.13 17 MultiRelay 71133 17.63 14.73 18.92 18 FVGT_m_MULTI_ODD 69961 21.23 27.13 18.61 19 LOC_TINY_FONT_1 63451 22.83 36.27 16.87 20 T_KAM_HTML_FONT_INVALID 50578 16.01 21.77 13.45 21 XM_DK_Undo_02 47727 24.29 50.44 12.69 22 BAYES_99 44208 22.19 45.70 11.76 23 XM_H_Long_From01 39888 10.02 8.70 10.61 24 LOTS_OF_MONEY 39722 10.92 11.72 10.56 25 BAYES_999 39368 19.27 39.11 10.47 26 FSL_BULK_SIG 38132 10.95 12.79 10.14 27 XM_Body_Dirty_Words 36885 12.92 19.93 9.81 28 XM_Multi_Part_URI 36754 11.62 15.78 9.77 29 BAYES_00 35794 6.98 1.27 9.52 30 XM_DKIMWhitelistDomains 33216 6.13 0.03 8.83 31 IN_ZIMBRA_NJ_WHITELIST 30508 5.63 0.04 8.11 32 TooManyTo_001 29727 7.45 6.43 7.91 33 T_XMDrugObfuBody_14 28118 8.19 9.81 7.48 34 XM_Evil_Numbers_Gen 27092 9.70 15.33 7.21 35 RCVD_IN_RP_SAFE 26213 6.21 4.49 6.97 36 LotsOfNums_01 25216 7.73 10.04 6.71 37 BAYES_60 23905 6.54 6.95 6.36 38 RCVD_IN_RP_CERTIFIED 23849 5.41 3.32 6.34 39 DKIM_INVALID 23617 6.97 8.51 6.28 40 SUBJ_ALL_CAPS 23417 5.04 2.36 6.23 41 HTML_IMAGE_RATIO_02 23057 8.89 15.09 6.13 42 RCVD_IN_IADB_LISTED 21801 4.71 2.25 5.80 43 XM_B_Phish_Phrases 21465 6.66 8.82 5.71 44 TR_DCC_Bayes_99 21061 14.97 36.08 5.60 45 BAYES_40 20453 4.11 1.11 5.44 46 RELAYCOUNTRY_META 18693 7.81 14.20 4.97 47 TR_XM_DK_Bayes 18635 3.75 1.04 4.96 48 RCVD_IN_IADB_SPF 18627 4.06 2.06 4.95 49 MIME_QP_LONG_LINE 17858 4.66 4.46 4.75 50 MPART_ALT_DIFF 17803 5.24 6.36 4.73 51 HTML_IMAGE_RATIO_04 17765 6.45 10.32 4.72 52 T_REMOTE_IMAGE 17562 4.19 3.10 4.67 53 XM_SendGrid 17547 4.61 4.49 4.67 54 XM_PDF 17104 3.42 0.88 4.55 55 TR_XM_DocInvoice 16417 5.35 7.56 4.37 56 TR_XM_DK_Bayes1 16380 3.30 0.93 4.36 57 RCVD_IN_IADB_SENDERID 16286 3.60 1.97 4.33 58 XMSubNoVowel 15861 4.18 4.09 4.22 59 RCVD_IN_IADB_DK 15701 3.49 1.95 4.18 60 RCVD_IN_IADB_VOUCHED 15527 3.14 0.91 4.13 61 TM2_M_URI_OPT_OUT 14717 4.06 4.39 3.91 62 RCVD_IN_MSPIKE_H2 14678 3.98 4.17 3.90 63 T_TooManySym_01 13824 3.45 2.95 3.68 64 XMStrtUSub 13448 3.57 3.54 3.58 65 BAYES_80 13290 4.73 7.42 3.53 66 MIME_HTML_ONLY_MULTI 12933 3.40 3.30 3.44 67 BOTNET_IPINHOSTNAME 12737 5.93 11.67 3.39 68 XM_UncommonTLD01 12622 4.05 5.61 3.36 69 TR_XM_DK_Bayes2 11701 2.40 0.79 3.11 70 XMSexyCombo_05 11521 5.13 9.78 3.06 71 XMNumbers 11403 3.33 4.00 3.03 72 XMSubEmpty 11300 3.07 3.23 3.01 73 HTML_IMAGE_RATIO_06 11282 3.60 4.95 3.00 74 FROM_EXCESS_BASE64 10989 3.98 6.38 2.92 75 XMSubMetaSx_00 10979 4.23 7.19 2.92 76 ANY_BOUNCE_MESSAGE 10160 2.04 0.55 2.70 77 BOUNCE_MESSAGE 10154 2.04 0.55 2.70 78 RCVD_IN_IADB_OPTIN 9944 2.02 0.60 2.64 79 RCVD_IN_MSPIKE_WL 9854 2.08 0.86 2.62 80 RCVD_IN_MSPIKE_H3 9854 2.08 0.86 2.62 81 BAYES_20 9311 2.03 1.04 2.48 82 UNPARSEABLE_RELAY 9265 2.11 1.33 2.46 83 TooManyTo_002 9115 1.96 0.91 2.42 84 MAILING_LIST_MULTI 8905 2.10 1.49 2.37 85 TR_Symld_Words 8796 1.97 1.14 2.34 86 BAYES_95 8791 3.06 4.70 2.34 87 HTML_MIME_NO_HTML_TAG 8450 2.13 1.85 2.25 88 IN_HORDE_ADDRESS_BOOK 8353 1.57 0.09 2.22 89 TVD_RCVD_IP 8272 1.63 0.35 2.20 90 HELO_NODOT 7731 1.53 0.35 2.06 91 NO_DNS_FOR_FROM 7721 2.39 3.16 2.05 92 MIME_HTML_MOSTLY 7509 2.63 4.06 2.00 93 XM_DK_Undo_01 7244 1.79 1.50 1.93 94 XM_DIRTYINTL 7083 2.39 3.52 1.88 95 HTML_IMAGE_RATIO_08 6919 2.22 3.08 1.84 96 XM_SPF_SoftFail 6892 2.26 3.22 1.83 97 INVALID_MSGID 6838 1.32 0.20 1.82 98 TO_MALFORMED 6746 1.27 0.07 1.79 99 MSGID_NOFQDN1 6551 1.21 0.01 1.74 100 BAYES_05 6496 1.38 0.61 1.73 101 TooManyTo_003 5760 1.30 0.78 1.53 102 T_TooManySym_02 5589 1.28 0.81 1.49 103 XMDiploma_00 5581 1.65 2.02 1.48 104 BOTNET 5409 4.62 11.79 1.44 105 XMCapTrack 5260 1.15 0.60 1.40 106 URI_HEX 5214 2.04 3.52 1.39 107 XM_OfRef6 5201 1.78 2.66 1.38 108 UNTRUSTED_Relay 5078 3.32 7.76 1.35 109 XM_CamelCaseFrm001 4998 1.95 3.33 1.33 110 T_XMDrugObfuBody_08 4991 1.68 2.49 1.33 111 RELAYCOUNTRY_CA 4911 1.97 3.48 1.31 112 XM_GoogleGroups 4593 1.01 0.52 1.22 113 USER_IN_DEF_DKIM_WL 4588 0.89 0.14 1.22 114 XMStockSpam_06 4440 1.23 1.34 1.18 115 XM_H_PHPOS 4192 1.13 1.17 1.11 116 XMPhish11 4111 1.17 1.34 1.09 117 TooManyTo_004 4067 0.93 0.60 1.08 118 DKIM_ADSP_CUSTOM_MED 3946 1.07 1.11 1.05 119 RELAYCOUNTRY_GB 3803 0.97 0.89 1.01 120 URI_TRY_3LD 3724 1.05 1.18 0.99 121 SHORT_URI_2 3677 1.38 2.30 0.98 122 XM_UB50 3536 1.61 3.13 0.94 123 T_XMDrugObfuBody_00 3483 1.02 1.25 0.93 124 TM2_M_A_HREF_HREF 3472 0.86 0.71 0.92 125 XMNoVowels 3454 0.83 0.65 0.92 126 TR_MetaPhish_Combo_01 3369 0.78 0.52 0.90 127 TR_Mismatch_TLD_01 3355 1.71 3.55 0.89 128 T_FILL_THIS_FORM_SHORT 3301 0.97 1.19 0.88 129 TooManyTo_005 3242 0.76 0.54 0.86 130 XMGenDplmaNmb 3217 1.03 1.43 0.86 131 XM_ProductURIs 3137 1.14 1.84 0.83 132 TM2_M_VERY_LONG_WORD 2920 1.24 2.28 0.78 133 XM_H_Long_From02 2911 1.08 1.78 0.77 134 T_OBFU_PDF_ATTACH 2716 0.57 0.23 0.72 135 TVD_SPACE_RATIO 2700 0.80 1.00 0.72 136 T_TooManySym_03 2652 0.52 0.12 0.71 137 NML_ADSP_CUSTOM_MED 2637 0.77 0.93 0.70 138 SpammyFromTLD_01 2633 1.07 1.89 0.70 139 USER_IN_WHITELIST 2628 0.48 0.00 0.70 140 XMEmptySub 2581 0.83 1.14 0.69 141 TR_XM_RelayPhish 2501 0.95 1.58 0.67 142 RCVD_IN_BL_SPAMCOP_NET 2453 1.24 2.58 0.65 143 XM_D_tchamptons_WL 2443 0.45 0.00 0.65 144 XM_H_PHPMailer 2409 0.66 0.70 0.64 145 RELAYCOUNTRY_DE 2402 0.67 0.73 0.64 146 XMGappySubj_01 2378 0.63 0.64 0.63 147 MISSING_HEADERS 2368 0.54 0.34 0.63 148 UPPERCASE_50_75 2237 0.46 0.15 0.59 149 PP_MIME_FAKE_ASCII_TEXT 2190 0.60 0.65 0.58 150 XM_B_COPY_HTML 2137 0.66 0.87 0.57 151 SHORT_HELO_AND_INLINE_IMAGE 2109 0.41 0.08 0.56 152 AC_DIV_BONANZA 1982 0.41 0.15 0.53 153 RELAYCOUNTRY_AU 1960 0.61 0.81 0.52 154 RCVD_IN_SORBS_DUL 1947 0.43 0.24 0.52 155 XMBdyGiftCard01 1934 0.89 1.74 0.51 156 HTTPS_HTTP_MISMATCH 1887 0.69 1.12 0.50 157 FORGED_GMAIL_RCVD 1854 0.62 0.92 0.49 158 XMBody_78 1838 0.65 1.00 0.49 159 XMMoneyMeta_00 1828 0.59 0.83 0.49 160 HTML_IMAGE_ONLY_32 1776 0.39 0.21 0.47 161 XMBody_95 1746 0.38 0.20 0.46 162 T_MANY_PILL_PRICE 1736 0.32 0.00 0.46 163 XM_ShortIntro_01 1728 0.40 0.28 0.46 164 XMSubMetaI_00 1690 0.96 2.12 0.45 165 T_XMHurry_00 1645 0.80 1.62 0.44 166 XMLngstWrd_00 1608 0.52 0.72 0.43 167 FILL_THIS_FORM 1577 0.52 0.73 0.42 168 HTML_TAG_BALANCE_BODY 1552 0.49 0.67 0.41 169 SHORT_URI 1540 0.59 0.98 0.41 170 XM_E_Blogspot 1538 0.30 0.06 0.41 171 HTML_IMAGE_ONLY_20 1528 0.36 0.26 0.41 172 T_Symld_Words_02 1523 0.56 0.92 0.41 173 HTML_IMAGE_ONLY_28 1517 0.44 0.53 0.40 174 RDNS_DYNAMIC 1498 0.57 0.96 0.40 175 XM_B_TRADE_HTML 1479 0.38 0.36 0.39 176 XM_B_REG_HTML 1476 0.63 1.17 0.39 177 SpammyFromTLD_02 1475 0.99 2.35 0.39 178 XMRcvdHeader_15 1471 0.27 0.00 0.39 179 XMPhish30 1464 0.69 1.36 0.39 180 XMLngstWrd_01 1452 0.48 0.69 0.39 181 XMSubMetaSxObfu_02 1439 0.33 0.21 0.38 182 URI_NOVOWEL 1420 0.50 0.76 0.38 183 XMBrknScrpt_02 1417 0.79 1.71 0.38 184 XMHTMLBadTable_001 1405 0.56 0.97 0.37 185 TM2_M_BODY_EMPTY 1396 0.32 0.20 0.37 186 XMDateMe_00 1377 0.34 0.28 0.37 187 XMPhish14 1365 0.48 0.76 0.36 188 TO_IN_SUBJ 1336 0.48 0.77 0.36 189 XM_H_Trusted_IP 1299 0.24 0.00 0.35 190 HTML_FONT_FACE_BAD 1276 0.51 0.89 0.34 191 TR_LOTS_OF_MONEY2 1249 0.50 0.89 0.33 192 T_MONEY_PERCENT 1249 0.50 0.89 0.33 193 XMBody_17 1242 0.80 1.87 0.33 194 HTML_IMAGE_ONLY_24 1222 0.30 0.23 0.32 195 XMSexyCombo_01 1195 0.68 1.49 0.32 196 RELAYCOUNTRY_FR 1193 0.63 1.34 0.32 197 FILL_THIS_FORM_LONG 1183 0.42 0.66 0.31 198 XMLngstWrd_02 1174 0.41 0.64 0.31 199 XMHTML_After_End 1157 0.62 1.33 0.31 200 T_TooManySym_04 1154 0.22 0.02 0.31 ----------------------------------------------------------------------