Email: 727653 Autolearn: 0 AvgScore: 5.17 AvgScanTime: 4.80 sec Spam: 272364 Autolearn: 0 AvgScore: 14.89 AvgScanTime: 5.44 sec Ham: 455289 Autolearn: 0 AvgScore: -0.65 AvgScanTime: 4.42 sec Time Spent Running SA: 970.21 hours Time Spent Processing Spam: 411.37 hours Time Spent Processing Ham: 558.84 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 259236 89.73 95.18 86.47 2 DKIM_SIGNED 165086 69.35 60.61 74.57 3 DCC_CHECK 163974 44.52 60.20 35.13 4 XM_DK_Pass 160953 67.92 59.09 73.19 5 DKIM_VALID 150903 63.61 55.40 68.52 6 XMListUnsubscribeExists 143566 50.65 52.71 49.42 7 BAYES_50 141781 56.41 52.06 59.02 8 DKIM_VALID_AU 121196 45.94 44.50 46.80 9 XM_H_QuotedFrom 110298 36.40 40.50 33.96 10 DCC_CHECK_NEGATIVE 105199 53.73 38.62 62.76 11 BOTNET 92419 13.56 33.93 1.38 12 XM_DK_Undo_02 89299 19.80 32.79 12.03 13 BAYES_99 77553 17.57 28.47 11.05 14 URI_HEX 72282 11.34 26.54 2.24 15 LOC_TINY_FONT_1 72105 22.79 26.47 20.58 16 MIME_HTML_ONLY 70809 21.65 26.00 19.04 17 HTML_FONT_LOW_CONTRAST 70632 27.00 25.93 27.63 18 XMCapTrack 66647 10.07 24.47 1.46 19 BOUNCE_MESSAGE 66616 11.80 24.46 4.23 20 ANY_BOUNCE_MESSAGE 66616 11.80 24.46 4.23 21 RCVD_IN_RP_RNBL 66406 9.15 24.38 0.04 22 NUMERIC_HTTP_ADDR 66316 9.18 24.35 0.11 23 BAYES_999 65320 14.80 23.98 9.30 24 TR_DCC_Bayes_99 62235 12.03 22.85 5.56 25 FVGT_m_MULTI_ODD 57577 21.18 21.14 21.20 26 XM_URI_RBL 54570 7.58 20.04 0.13 27 XMSubLong 54252 20.60 19.92 21.01 28 URIBL_BLACK 51773 7.14 19.01 0.04 29 DKIM_VALID_EF 44346 22.60 16.28 26.38 30 T_TM2_M_HEADER_IN_MSG 43637 25.78 16.02 31.62 31 T_KAM_HTML_FONT_INVALID 38934 15.84 14.29 16.76 32 XM_Body_Dirty_Words 38405 12.85 14.10 12.11 33 RELAYCOUNTRY_META 37915 8.40 13.92 5.09 34 XM_Multi_Part_URI 37870 12.30 13.90 11.34 35 HTML_IMAGE_RATIO_02 32307 9.54 11.86 8.14 36 FSL_BULK_SIG 32097 7.70 11.78 5.26 37 DATE_IN_PAST_24_48 30274 4.17 11.12 0.01 38 MultiRelay 29358 15.92 10.78 19.00 39 XM_Evil_Numbers_Gen 28792 8.77 10.57 7.69 40 BOTNET_IPINHOSTNAME 25847 6.38 9.49 4.52 41 LOTS_OF_MONEY 25570 9.50 9.39 9.57 42 UNTRUSTED_Relay 25152 4.20 9.23 1.18 43 XMSexyCombo_05 21530 5.30 7.90 3.74 44 FROM_EXCESS_BASE64 20640 4.94 7.58 3.36 45 HTML_IMAGE_RATIO_04 18992 5.79 6.97 5.08 46 T_XMDrugObfuBody_14 18924 7.41 6.95 7.69 47 TR_XM_DocInvoice 17053 4.54 6.26 3.51 48 BAYES_80 16711 4.82 6.14 4.04 49 XM_H_Long_From01 16693 5.82 6.13 5.63 50 XM_B_Phish_Phrases 16081 5.00 5.90 4.47 51 XM_UncommonTLD01 15760 3.50 5.79 2.13 52 BAYES_60 15675 6.35 5.76 6.71 53 TooManyTo_001 15511 7.04 5.69 7.84 54 XMSubMetaSx_00 15051 4.44 5.53 3.79 55 T_REMOTE_IMAGE 15046 5.14 5.52 4.91 56 MPART_ALT_DIFF 14920 3.86 5.48 2.90 57 DKIM_INVALID 14183 5.74 5.21 6.06 58 HTML_MIME_NO_HTML_TAG 13542 3.51 4.97 2.64 59 LotsOfNums_01 12147 7.23 4.46 8.89 60 RCVD_IN_RP_SAFE 10768 7.07 3.95 8.94 61 XMNumbers 10734 3.78 3.94 3.68 62 MISSING_HEADERS 10466 1.78 3.84 0.55 63 DATE_IN_PAST_12_24 10277 1.43 3.77 0.02 64 HTML_IMAGE_RATIO_06 10166 3.57 3.73 3.47 65 MIME_HTML_MOSTLY 10121 2.98 3.72 2.54 66 BODY_URI_ONLY 10114 1.56 3.71 0.28 67 XM_UB50 9695 1.80 3.56 0.74 68 BAYES_95 9658 3.07 3.55 2.78 69 HTML_SHORT_LINK_IMG_1 9121 1.27 3.35 0.03 70 SHORTENER_SHORT_IMG 9049 1.24 3.32 0.00 71 ALL_TRUSTED 8943 11.29 3.28 16.09 72 URI_BUFFLY 8933 1.23 3.28 0.00 73 RCVD_IN_RP_CERTIFIED 8627 6.54 3.17 8.55 74 TM2_M_URI_OPT_OUT 8434 2.36 3.10 1.92 75 XMStrtUSub 8247 3.73 3.03 4.15 76 XM_DIRTYINTL 8053 2.30 2.96 1.91 77 MIME_HEADER_CTYPE_ONLY 7825 1.16 2.87 0.14 78 RELAYCOUNTRY_UA 7670 1.06 2.82 0.00 79 HTML_IMAGE_ONLY_04 7345 1.05 2.70 0.06 80 MIME_HTML_ONLY_MULTI 7097 1.87 2.61 1.44 81 XM_SendGrid 7074 4.52 2.60 5.67 82 SHORTENED_URL_SRC 7000 0.96 2.57 0.00 83 XM_SPF_SoftFail 6684 2.08 2.45 1.86 84 XM_CamelCaseFrm001 6661 2.09 2.45 1.87 85 HTML_IMAGE_RATIO_08 6541 2.68 2.40 2.84 86 RELAYCOUNTRY_CA 6499 1.78 2.39 1.42 87 RCVD_IN_MSPIKE_H2 6426 4.13 2.36 5.18 88 MIME_QP_LONG_LINE 6275 4.76 2.30 6.23 89 T_TooManySym_01 6164 4.22 2.26 5.39 90 XM_OfRef6 6096 1.60 2.24 1.21 91 INVALID_MSGID 6011 1.20 2.21 0.60 92 T_XMDrugObfuBody_08 5765 1.73 2.12 1.49 93 XMDiploma_00 5433 1.76 1.99 1.62 94 HTML_SHORT_CENTER 5359 0.74 1.97 0.00 95 XM_UB60 5150 0.76 1.89 0.08 96 TO_MALFORMED 5042 1.77 1.85 1.73 97 XM_H_Long_From02 4952 1.36 1.82 1.08 98 BOTNET_NORDNS 4938 0.69 1.81 0.02 99 XMBdyGiftCard01 4887 1.14 1.79 0.74 100 XM_UB80 4403 0.64 1.62 0.06 101 MultiRelay_Combo 4391 0.70 1.61 0.16 102 MultiRelay_CC 4391 0.70 1.61 0.16 103 RCVD_IN_BL_SPAMCOP_NET 4182 0.84 1.54 0.43 104 BAYES_00 4115 5.79 1.51 8.35 105 DATE_IN_PAST_06_12 3976 0.57 1.46 0.04 106 XMSubMetaI_00 3965 0.88 1.46 0.54 107 SpammyFromTLD_02 3884 0.74 1.43 0.33 108 XMGenDplmaNmb 3878 1.16 1.42 1.00 109 XM_S_JOY_D 3754 0.81 1.38 0.47 110 T_XMHurry_00 3731 0.98 1.37 0.74 111 XMHTML_After_End 3568 0.74 1.31 0.39 112 NO_DNS_FOR_FROM 3488 1.25 1.28 1.22 113 SUBJ_ALL_CAPS 3422 1.57 1.26 1.76 114 TR_LOTS_OF_MONEY3 3405 0.74 1.25 0.44 115 TM2_M_VERY_LONG_WORD 3385 1.01 1.24 0.88 116 REPLYTO_WITHOUT_TO_CC 3373 0.50 1.24 0.06 117 UNPARSEABLE_RELAY 3346 2.61 1.23 3.44 118 XMSexyCombo_01 3314 0.72 1.22 0.43 119 DIET_1 3299 0.63 1.21 0.28 120 XM_ProductURIs 3262 1.11 1.20 1.05 121 TR_LOTS_OF_MONEY1 3253 0.47 1.19 0.03 122 T_XMDrugObfuBody_00 3045 1.05 1.12 1.02 123 SUBJ_DOLLARS 2998 0.60 1.10 0.30 124 URI_TRY_3LD 2992 1.21 1.10 1.27 125 TR_XM_RelayPhish 2965 0.76 1.09 0.57 126 TR_XM_DK_Bayes 2902 4.01 1.07 5.77 127 SpammyFromTLD_01 2853 0.83 1.05 0.70 128 BAYES_40 2851 2.62 1.05 3.57 129 XMBody_78 2834 0.76 1.04 0.59 130 RCVD_IN_IADB_LISTED 2769 4.85 1.02 7.14 131 XMPhish30 2729 0.55 1.00 0.29 132 MAILING_LIST_MULTI 2676 1.91 0.98 2.46 133 XMStockSpam_06 2624 1.15 0.96 1.26 134 HTML_TAG_BALANCE_BODY 2616 0.67 0.96 0.49 135 XM_UB99 2591 0.40 0.95 0.07 136 TR_XM_DK_Bayes1 2556 3.63 0.94 5.24 137 FILL_THIS_FORM 2535 0.64 0.93 0.46 138 RELAYCOUNTRY_FR 2493 0.48 0.92 0.22 139 TR_Symld_Words 2440 1.59 0.90 2.00 140 HTML_FONT_SIZE_LARGE 2416 0.46 0.89 0.20 141 XM_HighProb1 2406 0.34 0.88 0.01 142 RCVD_IN_IADB_SPF 2389 4.19 0.88 6.17 143 XM_DK_Undo_01 2351 1.59 0.86 2.02 144 BAYES_20 2343 1.96 0.86 2.61 145 XMBody_17 2309 0.60 0.85 0.45 146 T_FILL_THIS_FORM_LONG 2272 0.54 0.83 0.36 147 T_FILL_THIS_FORM_SHORT 2254 0.84 0.83 0.85 148 HTML_IMAGE_ONLY_08 2242 0.38 0.82 0.11 149 XMPhish11 2231 1.05 0.82 1.18 150 RCVD_IN_IADB_DK 2205 3.61 0.81 5.29 151 XMSlimDrugH 2186 0.51 0.80 0.33 152 RELAYCOUNTRY_GB 2181 0.96 0.80 1.06 153 RCVD_IN_IADB_SENDERID 2177 3.66 0.80 5.38 154 TR_XM_DK_Bayes2 2143 2.90 0.79 4.17 155 RELAYCOUNTRY_AT 2118 0.35 0.78 0.09 156 XM_PDF 2102 3.35 0.77 4.89 157 XMHTMLBadTable_001 2041 0.59 0.75 0.49 158 XM_OfRef7 2032 0.38 0.75 0.16 159 HTTPS_HTTP_MISMATCH 2022 0.64 0.74 0.58 160 T_TooManySym_02 2019 1.41 0.74 1.81 161 XM_H_PHPOS 2006 1.14 0.74 1.38 162 REMOVE_BEFORE_LINK 2000 0.44 0.73 0.26 163 XMLongAddy 1971 0.34 0.72 0.10 164 URIBL_DBL_SPAM 1962 0.30 0.72 0.05 165 TR_LOTS_OF_MONEY2 1926 0.41 0.71 0.24 166 T_MONEY_PERCENT 1926 0.41 0.71 0.24 167 XM_BadFromFormat 1925 0.39 0.71 0.19 168 XM_UB95 1898 0.28 0.70 0.03 169 URI_NOVOWEL 1798 0.51 0.66 0.42 170 RDNS_DYNAMIC 1786 0.50 0.66 0.41 171 XM_UB999 1713 0.27 0.63 0.05 172 RELAYCOUNTRY_IN 1688 0.29 0.62 0.10 173 RELAYCOUNTRY_CN 1684 0.25 0.62 0.03 174 HTML_IMAGE_ONLY_16 1680 0.43 0.62 0.31 175 TR_Mismatch_TLD_02 1673 0.28 0.61 0.07 176 T_Symld_Words_02 1657 0.60 0.61 0.59 177 XMPhish14 1650 0.50 0.61 0.44 178 TR_Mismatch_TLD_01 1648 0.33 0.61 0.17 179 XMClaimOffer 1635 0.30 0.60 0.12 180 TM2_M_A_HREF_HREF 1627 0.66 0.60 0.70 181 PLING_QUERY 1626 0.51 0.60 0.47 182 RCVD_IN_IADB_VOUCHED 1623 3.17 0.60 4.71 183 DKIM_ADSP_NXDOMAIN 1611 0.45 0.59 0.37 184 DKIM_ADSP_CUSTOM_MED 1563 0.91 0.57 1.11 185 XM_Attn_01 1547 0.26 0.57 0.07 186 T_HTML_TAG_BALANCE_CENTER 1514 0.30 0.56 0.14 187 XMBrknScrpt_02 1489 0.52 0.55 0.50 188 RELAYCOUNTRY_AU 1480 0.54 0.54 0.54 189 TR_Caps_n_Bayes_99 1473 0.25 0.54 0.08 190 RELAYCOUNTRY_DE 1470 0.52 0.54 0.51 191 XM_RXBody 1465 0.26 0.54 0.10 192 XMMoneyMeta_00 1453 0.57 0.53 0.59 193 NML_ADSP_CUSTOM_MED 1438 0.69 0.53 0.78 194 XM_ShortIntro_01 1432 0.50 0.53 0.48 195 XM_B_COPY_HTML 1421 0.66 0.52 0.75 196 MONEY_FRAUD_8 1416 0.20 0.52 0.00 197 BODY_ENHANCEMENT 1416 0.22 0.52 0.04 198 XMSubMetaSxObfu_03 1398 0.46 0.51 0.43 199 BAYES_05 1393 1.25 0.51 1.69 200 XM_Nigeria_01 1387 0.21 0.51 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 393707 89.73 95.18 86.47 2 DKIM_SIGNED 339511 69.35 60.61 74.57 3 XM_DK_Pass 333235 67.92 59.09 73.19 4 DKIM_VALID 311943 63.61 55.40 68.52 5 DCC_CHECK_NEGATIVE 285737 53.73 38.62 62.76 6 BAYES_50 268723 56.41 52.06 59.02 7 XMListUnsubscribeExists 224993 50.65 52.71 49.42 8 DKIM_VALID_AU 213092 45.94 44.50 46.80 9 DCC_CHECK 159942 44.52 60.20 35.13 10 XM_H_QuotedFrom 154604 36.40 40.50 33.96 11 T_TM2_M_HEADER_IN_MSG 143962 25.78 16.02 31.62 12 HTML_FONT_LOW_CONTRAST 125811 27.00 25.93 27.63 13 DKIM_VALID_EF 120103 22.60 16.28 26.38 14 FVGT_m_MULTI_ODD 96518 21.18 21.14 21.20 15 XMSubLong 95667 20.60 19.92 21.01 16 LOC_TINY_FONT_1 93704 22.79 26.47 20.58 17 MIME_HTML_ONLY 86708 21.65 26.00 19.04 18 MultiRelay 86511 15.92 10.78 19.00 19 T_KAM_HTML_FONT_INVALID 76312 15.84 14.29 16.76 20 ALL_TRUSTED 73235 11.29 3.28 16.09 21 XM_DKIMWhitelistDomains 66534 9.15 0.01 14.61 22 XM_Body_Dirty_Words 55130 12.85 14.10 12.11 23 XM_DK_Undo_02 54776 19.80 32.79 12.03 24 XM_Multi_Part_URI 51641 12.30 13.90 11.34 25 BAYES_99 50325 17.57 28.47 11.05 26 LOTS_OF_MONEY 43565 9.50 9.39 9.57 27 BAYES_999 42347 14.80 23.98 9.30 28 RCVD_IN_RP_SAFE 40706 7.07 3.95 8.94 29 LotsOfNums_01 40473 7.23 4.46 8.89 30 RCVD_IN_RP_CERTIFIED 38941 6.54 3.17 8.55 31 BAYES_00 38011 5.79 1.51 8.35 32 HTML_IMAGE_RATIO_02 37081 9.54 11.86 8.14 33 TooManyTo_001 35707 7.04 5.69 7.84 34 T_XMDrugObfuBody_14 35011 7.41 6.95 7.69 35 XM_Evil_Numbers_Gen 35003 8.77 10.57 7.69 36 RCVD_IN_IADB_LISTED 32490 4.85 1.02 7.14 37 BAYES_60 30534 6.35 5.76 6.71 38 MIME_QP_LONG_LINE 28359 4.76 2.30 6.23 39 RCVD_IN_IADB_SPF 28074 4.19 0.88 6.17 40 DKIM_INVALID 27568 5.74 5.21 6.06 41 TR_XM_DK_Bayes 26249 4.01 1.07 5.77 42 XM_SendGrid 25832 4.52 2.60 5.67 43 XM_H_Long_From01 25643 5.82 6.13 5.63 44 TR_DCC_Bayes_99 25317 12.03 22.85 5.56 45 T_TooManySym_01 24545 4.22 2.26 5.39 46 RCVD_IN_IADB_SENDERID 24489 3.66 0.80 5.38 47 RCVD_IN_IADB_DK 24093 3.61 0.81 5.29 48 FSL_BULK_SIG 23932 7.70 11.78 5.26 49 TR_XM_DK_Bayes1 23851 3.63 0.94 5.24 50 RCVD_IN_MSPIKE_H2 23599 4.13 2.36 5.18 51 RELAYCOUNTRY_META 23178 8.40 13.92 5.09 52 HTML_IMAGE_RATIO_04 23114 5.79 6.97 5.08 53 T_REMOTE_IMAGE 22336 5.14 5.52 4.91 54 XM_PDF 22269 3.35 0.77 4.89 55 RCVD_IN_IADB_VOUCHED 21447 3.17 0.60 4.71 56 BOTNET_IPINHOSTNAME 20560 6.38 9.49 4.52 57 XM_B_Phish_Phrases 20333 5.00 5.90 4.47 58 ANY_BOUNCE_MESSAGE 19276 11.80 24.46 4.23 59 BOUNCE_MESSAGE 19259 11.80 24.46 4.23 60 IN_ZIMBRA_NJ_WHITELIST 19021 2.62 0.02 4.18 61 TR_XM_DK_Bayes2 18973 2.90 0.79 4.17 62 XMStrtUSub 18884 3.73 3.03 4.15 63 BAYES_80 18372 4.82 6.14 4.04 64 XMSubMetaSx_00 17242 4.44 5.53 3.79 65 XMSexyCombo_05 17010 5.30 7.90 3.74 66 XMNumbers 16773 3.78 3.94 3.68 67 BAYES_40 16246 2.62 1.05 3.57 68 TR_XM_DocInvoice 15984 4.54 6.26 3.51 69 HTML_IMAGE_RATIO_06 15810 3.57 3.73 3.47 70 UNPARSEABLE_RELAY 15662 2.61 1.23 3.44 71 FROM_EXCESS_BASE64 15284 4.94 7.58 3.36 72 TVD_RCVD_IP 13952 1.98 0.18 3.06 73 RCVD_IN_IADB_OPTIN 13389 1.99 0.40 2.94 74 MPART_ALT_DIFF 13202 3.86 5.48 2.90 75 HTML_IMAGE_RATIO_08 12944 2.68 2.40 2.84 76 BAYES_95 12667 3.07 3.55 2.78 77 HTML_MIME_NO_HTML_TAG 12019 3.51 4.97 2.64 78 BAYES_20 11903 1.96 0.86 2.61 79 MIME_HTML_MOSTLY 11559 2.98 3.72 2.54 80 MAILING_LIST_MULTI 11186 1.91 0.98 2.46 81 RCVD_IN_MSPIKE_WL 10324 1.58 0.44 2.27 82 RCVD_IN_MSPIKE_H3 10317 1.58 0.44 2.27 83 URI_HEX 10217 11.34 26.54 2.24 84 TooManyTo_002 10039 1.55 0.46 2.20 85 XM_UncommonTLD01 9679 3.50 5.79 2.13 86 XM_DK_Undo_01 9219 1.59 0.86 2.02 87 TR_Symld_Words 9123 1.59 0.90 2.00 88 TM2_M_URI_OPT_OUT 8719 2.36 3.10 1.92 89 XM_DIRTYINTL 8692 2.30 2.96 1.91 90 XM_CamelCaseFrm001 8536 2.09 2.45 1.87 91 HELO_NODOT 8482 1.24 0.20 1.86 92 IN_HORDE_ADDRESS_BOOK 8472 1.18 0.04 1.86 93 XM_SPF_SoftFail 8470 2.08 2.45 1.86 94 T_TooManySym_02 8221 1.41 0.74 1.81 95 SUBJ_ALL_CAPS 7995 1.57 1.26 1.76 96 TO_MALFORMED 7868 1.77 1.85 1.73 97 BAYES_05 7717 1.25 0.51 1.69 98 XMDiploma_00 7372 1.76 1.99 1.62 99 TooManyTo_003 6841 1.07 0.36 1.50 100 T_XMDrugObfuBody_08 6804 1.73 2.12 1.49 101 TR_MetaPhish_Combo_01 6659 1.09 0.47 1.46 102 XMCapTrack 6647 10.07 24.47 1.46 103 MIME_HTML_ONLY_MULTI 6543 1.87 2.61 1.44 104 RELAYCOUNTRY_CA 6471 1.78 2.39 1.42 105 BOTNET 6281 13.56 33.93 1.38 106 XM_H_PHPOS 6262 1.14 0.74 1.38 107 USER_IN_DEF_DKIM_WL 6123 0.85 0.03 1.34 108 XM_GoogleGroups 5867 0.94 0.36 1.29 109 URI_TRY_3LD 5798 1.21 1.10 1.27 110 XMStockSpam_06 5756 1.15 0.96 1.26 111 NO_DNS_FOR_FROM 5572 1.25 1.28 1.22 112 XM_OfRef6 5529 1.60 2.24 1.21 113 UNTRUSTED_Relay 5393 4.20 9.23 1.18 114 XMPhish11 5378 1.05 0.82 1.18 115 TooManyTo_004 5127 0.82 0.30 1.13 116 DKIM_ADSP_CUSTOM_MED 5046 0.91 0.57 1.11 117 XM_H_Long_From02 4908 1.36 1.82 1.08 118 RELAYCOUNTRY_GB 4805 0.96 0.80 1.06 119 XM_ProductURIs 4801 1.11 1.20 1.05 120 T_XMDrugObfuBody_00 4627 1.05 1.12 1.02 121 XMGenDplmaNmb 4556 1.16 1.42 1.00 122 TooManyTo_005 4185 0.67 0.26 0.92 123 TM2_M_VERY_LONG_WORD 3997 1.01 1.24 0.88 124 XM_H_PHPMailer 3908 0.69 0.40 0.86 125 T_FILL_THIS_FORM_SHORT 3860 0.84 0.83 0.85 126 NML_ADSP_CUSTOM_MED 3568 0.69 0.53 0.78 127 XMGappySubj_01 3505 0.60 0.31 0.77 128 XM_B_COPY_HTML 3407 0.66 0.52 0.75 129 XM_UB50 3390 1.80 3.56 0.74 130 XMBdyGiftCard01 3381 1.14 1.79 0.74 131 T_OBFU_PDF_ATTACH 3380 0.55 0.22 0.74 132 T_XMHurry_00 3372 0.98 1.37 0.74 133 SpammyFromTLD_01 3186 0.83 1.05 0.70 134 TM2_M_A_HREF_HREF 3168 0.66 0.60 0.70 135 USER_IN_WHITELIST 3143 0.43 0.00 0.69 136 XMNoVowels 3048 0.60 0.49 0.67 137 XM_B_REG_HTML 2756 0.53 0.42 0.61 138 INVALID_MSGID 2749 1.20 2.21 0.60 139 T_TooManySym_03 2705 0.41 0.09 0.59 140 T_Symld_Words_02 2677 0.60 0.61 0.59 141 XMBody_95 2672 0.41 0.12 0.59 142 XMMoneyMeta_00 2666 0.57 0.53 0.59 143 XMBody_78 2666 0.76 1.04 0.59 144 HTTPS_HTTP_MISMATCH 2659 0.64 0.74 0.58 145 XMLngstWrd_00 2650 0.45 0.23 0.58 146 TR_XM_RelayPhish 2598 0.76 1.09 0.57 147 MISSING_HEADERS 2496 1.78 3.84 0.55 148 RELAYCOUNTRY_AU 2461 0.54 0.54 0.54 149 FORGED_GMAIL_RCVD 2452 0.51 0.45 0.54 150 XMSubMetaI_00 2446 0.88 1.46 0.54 151 XMLngstWrd_01 2442 0.42 0.21 0.54 152 XM_B_TRADE_HTML 2441 0.42 0.23 0.54 153 RELAYCOUNTRY_DE 2303 0.52 0.54 0.51 154 XMBrknScrpt_02 2290 0.52 0.55 0.50 155 SHORT_HELO_AND_INLINE_IMAGE 2268 0.33 0.06 0.50 156 HTML_TAG_BALANCE_BODY 2250 0.67 0.96 0.49 157 XMHTMLBadTable_001 2237 0.59 0.75 0.49 158 KHOP_DYNAMIC 2212 0.45 0.38 0.49 159 HTML_FONT_FACE_BAD 2201 0.49 0.50 0.48 160 XM_ShortIntro_01 2194 0.50 0.53 0.48 161 XMSubMetaSxObfu_02 2176 0.42 0.33 0.48 162 HTML_IMAGE_ONLY_32 2158 0.40 0.27 0.47 163 XM_S_JOY_D 2139 0.81 1.38 0.47 164 PLING_QUERY 2119 0.51 0.60 0.47 165 XMDateMe_00 2095 0.38 0.25 0.46 166 FILL_THIS_FORM 2088 0.64 0.93 0.46 167 XMBody_17 2048 0.60 0.85 0.45 168 RCVD_IN_SORBS_DUL 2015 0.32 0.11 0.44 169 XMPhish14 2006 0.50 0.61 0.44 170 TR_LOTS_OF_MONEY3 1991 0.74 1.25 0.44 171 XM_H_PHPOS_M 1976 0.34 0.19 0.43 172 XMSubMetaSxObfu_03 1962 0.46 0.51 0.43 173 HTML_IMAGE_ONLY_28 1961 0.42 0.41 0.43 174 RCVD_IN_BL_SPAMCOP_NET 1956 0.84 1.54 0.43 175 TM2_M_BODY_EMPTY 1944 0.31 0.11 0.43 176 XMSexyCombo_01 1936 0.72 1.22 0.43 177 AC_DIV_BONANZA 1904 0.29 0.07 0.42 178 URI_NOVOWEL 1901 0.51 0.66 0.42 179 RDNS_DYNAMIC 1864 0.50 0.66 0.41 180 XM_D_tchamptons_WL 1836 0.25 0.00 0.40 181 XMHTML_After_End 1782 0.74 1.31 0.39 182 XMRcvdHeader_15 1696 0.23 0.00 0.37 183 DKIM_ADSP_NXDOMAIN 1692 0.45 0.59 0.37 184 XMGappySubj_02 1653 0.25 0.06 0.36 185 T_FILL_THIS_FORM_LONG 1651 0.54 0.83 0.36 186 XMSubNoVowel 1585 0.30 0.21 0.35 187 HTML_IMAGE_ONLY_24 1533 0.29 0.20 0.34 188 SpammyFromTLD_02 1525 0.74 1.43 0.33 189 XMSlimDrugH 1518 0.51 0.80 0.33 190 FILL_THIS_FORM_LOAN 1470 0.39 0.51 0.32 191 MPART_ALT_DIFF_COUNT 1430 0.34 0.40 0.31 192 HTML_IMAGE_ONLY_16 1414 0.43 0.62 0.31 193 TVD_SPACE_RATIO 1402 0.27 0.21 0.31 194 HTML_IMAGE_ONLY_20 1390 0.32 0.34 0.31 195 SUBJ_DOLLARS 1351 0.60 1.10 0.30 196 XMSolicitRefs_0 1319 0.30 0.33 0.29 197 XMPhish30 1309 0.55 1.00 0.29 198 BODY_URI_ONLY 1269 1.56 3.71 0.28 199 XMLngstWrd_02 1265 0.24 0.18 0.28 200 TO_NO_BRKTS_HTML_ONLY 1262 0.23 0.16 0.28 ----------------------------------------------------------------------