Email: 487963 Autolearn: 0 AvgScore: 6.52 AvgScanTime: 3.23 sec Spam: 201749 Autolearn: 0 AvgScore: 15.34 AvgScanTime: 3.62 sec Ham: 286214 Autolearn: 0 AvgScore: 0.30 AvgScanTime: 2.95 sec Time Spent Running SA: 437.41 hours Time Spent Processing Spam: 202.65 hours Time Spent Processing Ham: 234.76 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 195731 92.00 97.02 88.47 2 DCC_CHECK 125972 45.88 62.44 34.21 3 DKIM_SIGNED 115267 61.64 57.13 64.81 4 XM_DK_Pass 113646 60.71 56.33 63.80 5 MIME_HTML_ONLY 108801 33.42 53.93 18.96 6 DKIM_VALID 108361 58.05 53.71 61.11 7 XMListUnsubscribeExists 99830 46.99 49.48 45.24 8 DKIM_VALID_AU 86092 44.53 42.67 45.84 9 FROM_EXCESS_BASE64 77479 18.22 38.40 3.99 10 DCC_CHECK_NEGATIVE 73835 53.22 36.60 64.94 11 XM_H_QuotedFrom 72352 32.84 35.86 30.70 12 HTML_MIME_NO_HTML_TAG 72115 15.57 35.74 1.35 13 HTML_SHORT_LINK_IMG_1 70950 21.42 35.17 11.73 14 SHORTENER_SHORT_IMG 70167 21.24 34.78 11.70 15 URI_BUFFLY 70163 21.24 34.78 11.70 16 RCVD_IN_RP_RNBL 70023 14.39 34.71 0.07 17 BAYES_99 69666 23.13 34.53 15.10 18 MISSING_HEADERS 68831 14.25 34.12 0.24 19 MIME_HEADER_CTYPE_ONLY 68374 14.08 33.89 0.12 20 XM_DK_Undo_02 67716 23.12 33.56 15.76 21 BODY_URI_ONLY 67670 13.91 33.54 0.08 22 HTML_IMAGE_ONLY_08 54157 16.68 26.84 9.52 23 BAYES_999 52558 18.44 26.05 13.08 24 TR_DCC_Bayes_99 49466 14.41 24.52 7.29 25 BAYES_50 49328 45.49 24.45 60.31 26 LOC_TINY_FONT_1 48954 23.67 24.26 23.25 27 XM_UncommonTLD01 47257 11.81 23.42 3.63 28 XMSubLong 45297 19.20 22.45 16.91 29 HTML_FONT_LOW_CONTRAST 45101 25.74 22.36 28.12 30 T_REMOTE_IMAGE 44017 11.42 21.82 4.09 31 SpammyFromTLD_02 42118 8.69 20.88 0.11 32 SHORTENED_URL_SRC 40339 11.75 19.99 5.94 33 FVGT_m_MULTI_ODD 36787 19.30 18.23 20.05 34 FSL_BULK_SIG 33541 10.87 16.63 6.81 35 BAYES_80 31650 8.89 15.69 4.09 36 HTML_FONT_SIZE_HUGE 31380 9.92 15.55 5.94 37 XM_BadFromFormat 30913 6.44 15.32 0.18 38 T_TM2_M_HEADER_IN_MSG 29744 19.39 14.74 22.67 39 DKIM_VALID_EF 28977 21.35 14.36 26.28 40 HTML_IMAGE_RATIO_02 27578 10.54 13.67 8.34 41 T_KAM_HTML_FONT_INVALID 27362 12.75 13.56 12.17 42 XM_Body_Dirty_Words 26804 11.57 13.29 10.36 43 XM_Multi_Part_URI 25943 11.57 12.86 10.67 44 BAYES_60 23538 8.64 11.67 6.51 45 XMSexyCombo_05 22613 6.52 11.21 3.22 46 RELAYCOUNTRY_META 22176 8.15 10.99 6.15 47 BAYES_95 22127 6.32 10.97 3.04 48 XMNumbers 22127 6.43 10.97 3.24 49 BOTNET 21267 5.03 10.54 1.15 50 MultiRelay 20510 11.69 10.17 12.76 51 XM_Evil_Numbers_Gen 17988 7.63 8.92 6.73 52 XMSubMetaSx_00 17878 6.35 8.86 4.57 53 BOTNET_IPINHOSTNAME 17580 7.67 8.71 6.94 54 HTML_IMAGE_ONLY_04 17514 4.95 8.68 2.32 55 LOTS_OF_MONEY 15954 9.52 7.91 10.65 56 HTML_IMAGE_RATIO_04 14670 6.68 7.27 6.27 57 UNTRUSTED_Relay 13986 5.18 6.93 3.94 58 MPART_ALT_DIFF 13621 4.59 6.75 3.07 59 T_XMDrugObfuBody_14 12874 6.19 6.38 6.06 60 XM_B_Phish_Phrases 10848 5.10 5.38 4.90 61 XM_H_Long_From01 10581 4.87 5.24 4.61 62 TooManyTo_001 10049 7.13 4.98 8.65 63 TR_XM_DocInvoice 9990 3.58 4.95 2.61 64 RCVD_IN_RP_SAFE 9691 7.70 4.80 9.74 65 XM_JunkDunk 9250 1.90 4.58 0.00 66 LotsOfNums_01 8840 5.75 4.38 6.72 67 MIME_HTML_MOSTLY 8459 3.37 4.19 2.79 68 RCVD_IN_RP_CERTIFIED 7455 6.68 3.70 8.78 69 HTML_IMAGE_RATIO_06 6953 3.46 3.45 3.47 70 XM_DIRTYINTL 6938 2.35 3.44 1.59 71 DKIM_INVALID 6906 3.59 3.42 3.70 72 XMStrtUSub 6901 3.71 3.42 3.92 73 XMMoneyMeta_00 6873 1.58 3.41 0.29 74 XM_UB50 6784 3.54 3.36 3.66 75 DIET_1 6515 1.53 3.23 0.33 76 XM_SendGrid 6512 3.90 3.23 4.38 77 PLING_QUERY 6018 1.39 2.98 0.27 78 T_TooManySym_01 5558 3.45 2.75 3.93 79 NO_DNS_FOR_FROM 5521 1.88 2.74 1.27 80 XMDiploma_00 5443 1.85 2.70 1.25 81 XM_CamelCaseFrm001 5310 1.93 2.63 1.44 82 RELAYCOUNTRY_CA 5191 1.73 2.57 1.13 83 MIME_QP_LONG_LINE 5005 3.50 2.48 4.21 84 HTML_FONT_SIZE_LARGE 4975 1.60 2.47 0.98 85 RCVD_IN_MSPIKE_H2 4746 3.73 2.35 4.69 86 MIME_HTML_ONLY_MULTI 4388 1.65 2.17 1.27 87 XMMoneyMeta_01 4367 0.90 2.16 0.01 88 XMBdyGiftCard01 4238 1.51 2.10 1.09 89 HTML_IMAGE_RATIO_08 4113 1.73 2.04 1.51 90 XMSlimDrugH 3945 0.97 1.96 0.28 91 SpammyFromTLD_01 3731 0.96 1.85 0.34 92 SUBJ_DOLLARS 3702 0.90 1.83 0.24 93 XM_SPF_SoftFail 3612 1.36 1.79 1.06 94 TM2_M_URI_OPT_OUT 3580 2.01 1.77 2.18 95 URI_HEX 3470 1.87 1.72 1.98 96 ALL_TRUSTED 3440 17.10 1.71 27.96 97 T_XMDrugObfuBody_08 3422 1.33 1.70 1.06 98 T_Symld_Words_02 3240 0.87 1.61 0.35 99 MORE_SEX 3176 0.67 1.57 0.03 100 URI_TRY_3LD 3155 1.44 1.56 1.35 101 RCVD_IN_IADB_LISTED 3106 3.33 1.54 4.58 102 XMSubMetaI_00 3079 1.13 1.53 0.85 103 BOTNET_NORDNS 2948 0.61 1.46 0.01 104 SUBJ_ALL_CAPS 2907 1.73 1.44 1.93 105 XM_URI_RBL 2890 0.66 1.43 0.11 106 MultiRelay_Combo 2841 0.66 1.41 0.13 107 MultiRelay_CC 2841 0.66 1.41 0.13 108 HTML_SHORT_CENTER 2804 0.85 1.39 0.47 109 XM_OfRef6 2746 1.22 1.36 1.12 110 RCVD_IN_BL_SPAMCOP_NET 2723 0.70 1.35 0.25 111 RCVD_IN_IADB_SPF 2689 2.81 1.33 3.85 112 UNPARSEABLE_RELAY 2662 4.06 1.32 5.99 113 URIBL_BLACK 2644 0.56 1.31 0.04 114 FVGT_m_MULTI_ODD_EMAIL 2615 0.58 1.30 0.07 115 XM_RXBody 2582 0.72 1.28 0.32 116 RCVD_IN_IADB_SENDERID 2543 2.46 1.26 3.30 117 URIBL_DBL_SPAM 2524 0.55 1.25 0.06 118 XMGppyBdWords 2514 0.55 1.25 0.06 119 RCVD_IN_IADB_DK 2512 2.38 1.25 3.18 120 XMSexyCombo_01 2501 0.85 1.24 0.57 121 XM_UB60 2440 0.53 1.21 0.04 122 SUBJ_BUY 2437 0.58 1.21 0.14 123 XM_ProductURIs 2376 1.38 1.18 1.51 124 XMBody_17 2362 0.73 1.17 0.43 125 XMSubMetaSSx_00 2339 0.61 1.16 0.23 126 BOUNCE_MESSAGE 2275 10.74 1.13 17.51 127 ANY_BOUNCE_MESSAGE 2275 10.74 1.13 17.51 128 RELAYCOUNTRY_CN 2216 0.47 1.10 0.02 129 TR_LOTS_OF_MONEY1 2205 0.46 1.09 0.01 130 NORMAL_HTTP_TO_IP 2183 0.48 1.08 0.06 131 RELAYCOUNTRY_DE 2104 0.56 1.04 0.21 132 RELAYCOUNTRY_IN 2067 0.45 1.02 0.04 133 XMSubject_38 2058 0.42 1.02 0.00 134 XM_UB99 2054 0.43 1.02 0.02 135 HTML_IMAGE_ONLY_20 2050 0.54 1.02 0.21 136 TM2_M_VERY_LONG_WORD 2035 0.94 1.01 0.89 137 T_XMDrugObfuBody_00 2021 1.05 1.00 1.08 138 NO_MEDICAL 2020 0.41 1.00 0.00 139 T_XMHurry_00 2018 0.62 1.00 0.35 140 RCVD_IN_MSPIKE_WL 1957 1.89 0.97 2.53 141 RCVD_IN_MSPIKE_H3 1938 1.88 0.96 2.53 142 XMBody_78 1928 0.61 0.96 0.37 143 XM_H_Long_From02 1910 2.64 0.95 3.84 144 T_TooManySym_02 1875 1.34 0.93 1.63 145 XM_B_REG_HTML 1848 0.67 0.92 0.50 146 TR_XM_RelayPhish 1759 0.52 0.87 0.28 147 URI_DQ_UNSUB 1751 0.37 0.87 0.02 148 KHOP_DYNAMIC 1740 0.51 0.86 0.25 149 BAYES_40 1733 1.80 0.86 2.46 150 HTML_TAG_BALANCE_BODY 1705 0.63 0.85 0.47 151 XMHTMLBadTable_001 1705 0.62 0.85 0.46 152 XM_H_PHPOS 1690 0.94 0.84 1.02 153 TR_Mismatch_TLD_02 1680 0.37 0.83 0.04 154 MAILING_LIST_MULTI 1602 1.22 0.79 1.52 155 XM_HighProb1 1591 0.33 0.79 0.02 156 RELAYCOUNTRY_FR 1582 0.43 0.78 0.18 157 XMGenDplmaNmb 1577 0.71 0.78 0.67 158 XMPhish30 1562 0.56 0.77 0.42 159 XM_UB999 1561 0.33 0.77 0.02 160 XMSubMetaSx_01 1560 0.53 0.77 0.36 161 XM_DK_Undo_01 1543 1.11 0.76 1.35 162 BAYES_00 1542 3.54 0.76 5.50 163 XMStockSpam_06 1539 0.73 0.76 0.70 164 T_HTML_TAG_BALANCE_CENTER 1475 0.41 0.73 0.19 165 RELAYCOUNTRY_AT 1466 0.35 0.73 0.08 166 PP_MIME_FAKE_ASCII_TEXT 1445 0.40 0.72 0.17 167 MPART_ALT_DIFF_COUNT 1399 0.45 0.69 0.28 168 FROM_LOCAL_NOVOWEL 1390 0.34 0.69 0.09 169 TR_XM_DK_Bayes 1377 2.70 0.68 4.11 170 RCVD_IN_IADB_VOUCHED 1364 2.29 0.68 3.43 171 FROM_STARTS_WITH_NUMS 1363 0.31 0.68 0.05 172 TR_XM_DK_Bayes1 1342 2.56 0.67 3.90 173 TooManyTo_002 1299 1.52 0.64 2.14 174 XM_UB80 1279 0.28 0.63 0.03 175 LOW_PRICE 1273 0.39 0.63 0.21 176 XMHTML_After_End 1262 0.40 0.63 0.24 177 TR_Symld_Words 1243 1.24 0.62 1.68 178 XM_H_PHPMailer 1242 0.61 0.62 0.60 179 DATE_IN_PAST_06_12 1238 0.27 0.61 0.03 180 BAYES_20 1237 1.26 0.61 1.72 181 XM_B_COPY_HTML 1236 0.57 0.61 0.54 182 XMCapTrack 1207 0.47 0.60 0.37 183 TR_XM_DK_Bayes2 1190 2.18 0.59 3.31 184 XMPhish11 1189 0.89 0.59 1.10 185 TooManyTo_003 1187 1.29 0.59 1.79 186 XMLongAddy 1183 0.28 0.59 0.07 187 XMWghtMeta_00 1169 0.25 0.58 0.02 188 URI_NOVOWEL 1157 0.46 0.57 0.38 189 HTML_IMAGE_ONLY_12 1148 0.37 0.57 0.22 190 XMWarranty1 1130 0.23 0.56 0.00 191 TM2_M_A_HREF_HREF 1125 0.70 0.56 0.79 192 TVD_SPACE_RATIO_MINFP 1119 0.23 0.55 0.01 193 RDNS_DYNAMIC 1094 0.53 0.54 0.51 194 XMSexyCombo_04 1091 0.29 0.54 0.12 195 TR_Caps_n_Bayes_99 1076 0.34 0.53 0.21 196 XM_Body_Obfu01 1061 0.27 0.53 0.10 197 XMSubMetaSxObfu_03 1048 0.35 0.52 0.23 198 XMSlimDrugs 1041 0.23 0.52 0.03 199 T_TooManySym_03 1027 0.64 0.51 0.72 200 HTML_FONT_FACE_BAD 1023 0.44 0.51 0.39 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 253209 92.00 97.02 88.47 2 DCC_CHECK_NEGATIVE 185860 53.22 36.60 64.94 3 DKIM_SIGNED 185496 61.64 57.13 64.81 4 XM_DK_Pass 182598 60.71 56.33 63.80 5 DKIM_VALID 174900 58.05 53.71 61.11 6 BAYES_50 172625 45.49 24.45 60.31 7 DKIM_VALID_AU 131211 44.53 42.67 45.84 8 XMListUnsubscribeExists 129484 46.99 49.48 45.24 9 DCC_CHECK 97913 45.88 62.44 34.21 10 XM_H_QuotedFrom 87871 32.84 35.86 30.70 11 HTML_FONT_LOW_CONTRAST 80483 25.74 22.36 28.12 12 ALL_TRUSTED 80019 17.10 1.71 27.96 13 DKIM_VALID_EF 75207 21.35 14.36 26.28 14 LOC_TINY_FONT_1 66551 23.67 24.26 23.25 15 T_TM2_M_HEADER_IN_MSG 64890 19.39 14.74 22.67 16 FVGT_m_MULTI_ODD 57381 19.30 18.23 20.05 17 MIME_HTML_ONLY 54255 33.42 53.93 18.96 18 BOUNCE_MESSAGE 50124 10.74 1.13 17.51 19 ANY_BOUNCE_MESSAGE 50124 10.74 1.13 17.51 20 XMSubLong 48385 19.20 22.45 16.91 21 XM_DK_Undo_02 45098 23.12 33.56 15.76 22 BAYES_99 43211 23.13 34.53 15.10 23 XM_DKIMWhitelistDomains 38394 7.90 0.08 13.41 24 BAYES_999 37429 18.44 26.05 13.08 25 MultiRelay 36516 11.69 10.17 12.76 26 T_KAM_HTML_FONT_INVALID 34835 12.75 13.56 12.17 27 HTML_SHORT_LINK_IMG_1 33577 21.42 35.17 11.73 28 SHORTENER_SHORT_IMG 33491 21.24 34.78 11.70 29 URI_BUFFLY 33491 21.24 34.78 11.70 30 XM_Multi_Part_URI 30535 11.57 12.86 10.67 31 LOTS_OF_MONEY 30477 9.52 7.91 10.65 32 XM_Body_Dirty_Words 29665 11.57 13.29 10.36 33 RCVD_IN_RP_SAFE 27891 7.70 4.80 9.74 34 HTML_IMAGE_ONLY_08 27240 16.68 26.84 9.52 35 RCVD_IN_RP_CERTIFIED 25143 6.68 3.70 8.78 36 TooManyTo_001 24756 7.13 4.98 8.65 37 HTML_IMAGE_RATIO_02 23868 10.54 13.67 8.34 38 TR_DCC_Bayes_99 20853 14.41 24.52 7.29 39 BOTNET_IPINHOSTNAME 19858 7.67 8.71 6.94 40 FSL_BULK_SIG 19493 10.87 16.63 6.81 41 XM_Evil_Numbers_Gen 19263 7.63 8.92 6.73 42 LotsOfNums_01 19234 5.75 4.38 6.72 43 BAYES_60 18638 8.64 11.67 6.51 44 HTML_IMAGE_RATIO_04 17941 6.68 7.27 6.27 45 RELAYCOUNTRY_META 17616 8.15 10.99 6.15 46 T_XMDrugObfuBody_14 17333 6.19 6.38 6.06 47 UNPARSEABLE_RELAY 17135 4.06 1.32 5.99 48 HTML_FONT_SIZE_HUGE 17010 9.92 15.55 5.94 49 SHORTENED_URL_SRC 17006 11.75 19.99 5.94 50 TVD_RCVD_IP 16066 3.37 0.18 5.61 51 BAYES_00 15730 3.54 0.76 5.50 52 XM_B_Phish_Phrases 14030 5.10 5.38 4.90 53 RCVD_IN_MSPIKE_H2 13437 3.73 2.35 4.69 54 XM_H_Long_From01 13191 4.87 5.24 4.61 55 RCVD_IN_IADB_LISTED 13120 3.33 1.54 4.58 56 XMSubMetaSx_00 13092 6.35 8.86 4.57 57 XM_SendGrid 12536 3.90 3.23 4.38 58 MIME_QP_LONG_LINE 12059 3.50 2.48 4.21 59 TR_XM_DK_Bayes 11775 2.70 0.68 4.11 60 BAYES_80 11707 8.89 15.69 4.09 61 T_REMOTE_IMAGE 11706 11.42 21.82 4.09 62 FROM_EXCESS_BASE64 11431 18.22 38.40 3.99 63 UNTRUSTED_Relay 11282 5.18 6.93 3.94 64 T_TooManySym_01 11259 3.45 2.75 3.93 65 XMStrtUSub 11217 3.71 3.42 3.92 66 TR_XM_DK_Bayes1 11173 2.56 0.67 3.90 67 RCVD_IN_IADB_SPF 11022 2.81 1.33 3.85 68 XM_H_Long_From02 10984 2.64 0.95 3.84 69 DKIM_INVALID 10596 3.59 3.42 3.70 70 XM_UB50 10474 3.54 3.36 3.66 71 XM_UncommonTLD01 10378 11.81 23.42 3.63 72 HTML_IMAGE_RATIO_06 9938 3.46 3.45 3.47 73 IN_ZIMBRA_NJ_WHITELIST 9917 2.04 0.01 3.46 74 RCVD_IN_IADB_VOUCHED 9815 2.29 0.68 3.43 75 TR_XM_DK_Bayes2 9470 2.18 0.59 3.31 76 RCVD_IN_IADB_SENDERID 9446 2.46 1.26 3.30 77 XMNumbers 9263 6.43 10.97 3.24 78 XMSexyCombo_05 9222 6.52 11.21 3.22 79 RCVD_IN_IADB_DK 9114 2.38 1.25 3.18 80 RELAYCOUNTRY_PH 8962 1.84 0.00 3.13 81 MPART_ALT_DIFF 8792 4.59 6.75 3.07 82 BAYES_95 8690 6.32 10.97 3.04 83 MIME_HTML_MOSTLY 7977 3.37 4.19 2.79 84 TR_XM_DocInvoice 7458 3.58 4.95 2.61 85 RCVD_IN_MSPIKE_WL 7245 1.89 0.97 2.53 86 RCVD_IN_MSPIKE_H3 7241 1.88 0.96 2.53 87 BAYES_40 7032 1.80 0.86 2.46 88 INVALID_MSGID 6707 1.46 0.20 2.34 89 HTML_IMAGE_ONLY_04 6649 4.95 8.68 2.32 90 RCVD_IN_IADB_OPTIN 6479 1.50 0.43 2.26 91 TO_MALFORMED 6344 1.30 0.00 2.22 92 TM2_M_URI_OPT_OUT 6229 2.01 1.77 2.18 93 TooManyTo_002 6125 1.52 0.64 2.14 94 URI_HEX 5672 1.87 1.72 1.98 95 SUBJ_ALL_CAPS 5514 1.73 1.44 1.93 96 USER_IN_DEF_DKIM_WL 5433 1.14 0.07 1.90 97 TooManyTo_003 5121 1.29 0.59 1.79 98 XM_PDF 5099 1.12 0.17 1.78 99 BAYES_20 4918 1.26 0.61 1.72 100 TR_Symld_Words 4822 1.24 0.62 1.68 101 IN_HORDE_ADDRESS_BOOK 4724 0.98 0.03 1.65 102 T_TooManySym_02 4679 1.34 0.93 1.63 103 XM_DIRTYINTL 4544 2.35 3.44 1.59 104 MAILING_LIST_MULTI 4340 1.22 0.79 1.52 105 XM_ProductURIs 4336 1.38 1.18 1.51 106 HTML_IMAGE_RATIO_08 4310 1.73 2.04 1.51 107 XM_CamelCaseFrm001 4110 1.93 2.63 1.44 108 URI_TRY_3LD 3873 1.44 1.56 1.35 109 XM_DK_Undo_01 3870 1.11 0.76 1.35 110 HTML_MIME_NO_HTML_TAG 3870 15.57 35.74 1.35 111 MIME_HTML_ONLY_MULTI 3645 1.65 2.17 1.27 112 NO_DNS_FOR_FROM 3643 1.88 2.74 1.27 113 XMDiploma_00 3578 1.85 2.70 1.25 114 BAYES_05 3406 0.86 0.39 1.19 115 T_FILL_THIS_FORM_SHORT 3312 0.83 0.37 1.16 116 BOTNET 3287 5.03 10.54 1.15 117 RELAYCOUNTRY_CA 3246 1.73 2.57 1.13 118 XM_OfRef6 3210 1.22 1.36 1.12 119 XMPhish11 3154 0.89 0.59 1.10 120 XMBdyGiftCard01 3118 1.51 2.10 1.09 121 T_XMDrugObfuBody_00 3081 1.05 1.00 1.08 122 T_XMDrugObfuBody_08 3046 1.33 1.70 1.06 123 XM_SPF_SoftFail 3032 1.36 1.79 1.06 124 XM_D_tchamptons_WL 3009 0.62 0.00 1.05 125 XM_GoogleGroups 2970 0.73 0.29 1.04 126 XM_H_PHPOS 2908 0.94 0.84 1.02 127 USER_IN_WHITELIST 2891 0.59 0.00 1.01 128 XMSubMetaSxObfu_02 2849 0.68 0.23 1.00 129 HTML_FONT_SIZE_LARGE 2811 1.60 2.47 0.98 130 XMLngstWrd_00 2558 0.59 0.16 0.89 131 TM2_M_VERY_LONG_WORD 2543 0.94 1.01 0.89 132 XMSubMetaI_00 2423 1.13 1.53 0.85 133 TM2_M_A_HREF_HREF 2269 0.70 0.56 0.79 134 XMLngstWrd_01 2232 0.51 0.14 0.78 135 T_TooManySym_03 2073 0.64 0.51 0.72 136 XMStockSpam_06 2004 0.73 0.76 0.70 137 XMBody_95 1982 0.45 0.12 0.69 138 XMGenDplmaNmb 1907 0.71 0.78 0.67 139 TO_NO_BRKTS_HTML_ONLY 1889 0.42 0.09 0.66 140 DKIM_ADSP_NXDOMAIN 1784 0.49 0.29 0.62 141 DKIM_ADSP_CUSTOM_MED 1781 0.56 0.47 0.62 142 XM_H_PHPMailer 1714 0.61 0.62 0.60 143 TooManyTo_004 1678 0.51 0.41 0.59 144 TR_MetaPhish_Combo_01 1671 0.48 0.33 0.58 145 XMSexyCombo_01 1627 0.85 1.24 0.57 146 UPPERCASE_50_75 1598 0.35 0.06 0.56 147 HELO_NODOT 1584 0.35 0.05 0.55 148 XM_B_COPY_HTML 1552 0.57 0.61 0.54 149 RDNS_DYNAMIC 1471 0.53 0.54 0.51 150 TooManyTo_005 1447 0.44 0.35 0.51 151 XM_B_REG_HTML 1445 0.67 0.92 0.50 152 XMLngstWrd_02 1445 0.34 0.11 0.50 153 HTML_TAG_BALANCE_BODY 1354 0.63 0.85 0.47 154 HTML_SHORT_CENTER 1348 0.85 1.39 0.47 155 XMHTMLBadTable_001 1310 0.62 0.85 0.46 156 RELAYCOUNTRY_GB 1243 0.43 0.42 0.43 157 XMBrknScrpt_02 1231 0.42 0.40 0.43 158 XMBody_17 1224 0.73 1.17 0.43 159 NML_ADSP_CUSTOM_MED 1198 0.41 0.40 0.42 160 XMPhish30 1188 0.56 0.77 0.42 161 XM_H_PHPOS_M 1161 0.40 0.40 0.41 162 T_TooManySym_04 1142 0.42 0.45 0.40 163 HTML_FONT_FACE_BAD 1118 0.44 0.51 0.39 164 TR_XM_FormFill 1091 0.28 0.13 0.38 165 XMNoVowels 1081 0.33 0.26 0.38 166 FILL_THIS_FORM 1077 0.42 0.48 0.38 167 URI_NOVOWEL 1075 0.46 0.57 0.38 168 XMCapTrack 1065 0.47 0.60 0.37 169 XMBody_78 1052 0.61 0.96 0.37 170 XMLngstWrd_03 1051 0.25 0.08 0.37 171 XMSubMetaSx_01 1038 0.53 0.77 0.36 172 T_XMHurry_00 999 0.62 1.00 0.35 173 T_Symld_Words_02 999 0.87 1.61 0.35 174 REMOVE_BEFORE_LINK 978 0.33 0.30 0.34 175 SpammyFromTLD_01 959 0.96 1.85 0.34 176 DIET_1 933 1.53 3.23 0.33 177 FORGED_GMAIL_RCVD 921 0.35 0.39 0.32 178 XM_RXBody 912 0.72 1.28 0.32 179 T_MONEY_PERCENT 905 0.33 0.36 0.32 180 TR_LOTS_OF_MONEY2 905 0.33 0.36 0.32 181 XMClaimOffer 900 0.39 0.49 0.31 182 URIBL_RHS_DOB 886 0.21 0.06 0.31 183 HTML_IMAGE_ONLY_28 881 0.24 0.14 0.31 184 T_FILL_THIS_FORM_LONG 875 0.36 0.44 0.31 185 XMMoneyMeta_00 838 1.58 3.41 0.29 186 XMRcvdHeader_15 836 0.17 0.00 0.29 187 XM_ShortIntro_01 825 0.35 0.43 0.29 188 XMSlimDrugH 807 0.97 1.96 0.28 189 MPART_ALT_DIFF_COUNT 806 0.45 0.69 0.28 190 TR_XM_RelayPhish 798 0.52 0.87 0.28 191 FILL_THIS_FORM_LOAN 792 0.32 0.38 0.28 192 PLING_QUERY 765 1.39 2.98 0.27 193 XM_Doc_Oz_Body 761 0.20 0.11 0.27 194 XMPhish14 746 0.29 0.33 0.26 195 KHOP_DYNAMIC 726 0.51 0.86 0.25 196 XMSUPPORT 725 0.15 0.00 0.25 197 RCVD_IN_BL_SPAMCOP_NET 715 0.70 1.35 0.25 198 AC_DIV_BONANZA 712 0.18 0.09 0.25 199 MISSING_HEADERS 699 14.25 34.12 0.24 200 TM2_M_BODY_EMPTY 699 0.16 0.03 0.24 ----------------------------------------------------------------------