Email: 635798 Autolearn: 0 AvgScore: 1.88 AvgScanTime: 2.06 sec Spam: 131161 Autolearn: 0 AvgScore: 13.21 AvgScanTime: 2.45 sec Ham: 504637 Autolearn: 0 AvgScore: -1.06 AvgScanTime: 1.96 sec Time Spent Running SA: 363.68 hours Time Spent Processing Spam: 89.09 hours Time Spent Processing Ham: 274.60 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 123112 90.41 93.86 89.51 2 DCC_CHECK 97978 48.40 74.70 41.56 3 DKIM_SIGNED 90952 73.62 69.34 74.73 4 XM_DK_Pass 87264 72.00 66.53 73.43 5 DKIM_VALID 82615 68.61 62.99 70.07 6 XMListUnsubscribeExists 81612 53.64 62.22 51.41 7 DKIM_VALID_AU 67578 51.27 51.52 51.20 8 XM_H_QuotedFrom 62698 41.10 47.80 39.36 9 BAYES_50 56445 54.65 43.03 57.67 10 MIME_HTML_ONLY 53476 24.24 40.77 19.94 11 HTML_FONT_LOW_CONTRAST 45715 28.93 34.85 27.39 12 BAYES_99 42888 10.64 32.70 4.90 13 XM_DK_Undo_02 42567 12.45 32.45 7.25 14 RELAYCOUNTRY_META 39343 10.86 30.00 5.89 15 LOC_TINY_FONT_1 36957 23.93 28.18 22.83 16 BAYES_999 36123 8.87 27.54 4.02 17 XMSubLong 35702 22.62 27.22 21.43 18 FVGT_m_MULTI_ODD 31190 21.67 23.78 21.12 19 DCC_CHECK_NEGATIVE 30857 49.66 23.53 56.45 20 TR_DCC_Bayes_99 28604 6.57 21.81 2.61 21 UNTRUSTED_Relay 28539 6.06 21.76 1.98 22 DKIM_VALID_EF 25678 25.41 19.58 26.92 23 T_TM2_M_HEADER_IN_MSG 24644 28.43 18.79 30.94 24 XM_Body_Dirty_Words 24021 13.85 18.31 12.69 25 MultiRelay 22305 17.79 17.01 18.00 26 BOTNET 22077 5.22 16.83 2.20 27 FROM_EXCESS_BASE64 21842 6.85 16.65 4.30 28 BOTNET_IPINHOSTNAME 20923 7.07 15.95 4.77 29 T_KAM_HTML_FONT_INVALID 20616 16.40 15.72 16.57 30 FSL_BULK_SIG 20418 8.48 15.57 6.64 31 XM_Multi_Part_URI 19010 12.66 14.49 12.18 32 T_REMOTE_IMAGE 18623 6.23 14.20 4.16 33 HTML_MIME_NO_HTML_TAG 18270 4.76 13.93 2.38 34 XM_Evil_Numbers_Gen 16052 9.61 12.24 8.93 35 LOTS_OF_MONEY 15897 9.66 12.12 9.02 36 MISSING_HEADERS 15043 2.70 11.47 0.42 37 BODY_URI_ONLY 14849 2.40 11.32 0.08 38 HTML_IMAGE_RATIO_02 14832 9.16 11.31 8.60 39 HTML_SHORT_LINK_IMG_1 14723 2.34 11.23 0.03 40 MIME_HEADER_CTYPE_ONLY 14572 2.38 11.11 0.11 41 XMSexyCombo_05 14497 5.52 11.05 4.08 42 RELAYCOUNTRY_FR 14245 2.42 10.86 0.22 43 HTML_IMAGE_ONLY_04 13558 2.17 10.34 0.05 44 HTML_SHORT_CENTER 13509 2.13 10.30 0.00 45 XM_UncommonTLD01 12608 4.59 9.61 3.28 46 XM_JunkDunk 11300 1.78 8.62 0.00 47 XM_H_Long_From01 11102 6.57 8.46 6.08 48 XMNumbers 10840 3.65 8.26 2.45 49 XMSubMetaSx_00 10812 5.15 8.24 4.34 50 T_XMDrugObfuBody_14 10707 8.32 8.16 8.36 51 XM_UB99 10696 1.69 8.15 0.02 52 MPART_ALT_DIFF 10438 4.34 7.96 3.40 53 HTML_IMAGE_RATIO_04 10112 6.87 7.71 6.65 54 XM_UB50 9460 2.54 7.21 1.33 55 TooManyTo_001 9248 8.32 7.05 8.65 56 XM_UB999 9071 1.43 6.92 0.00 57 DKIM_INVALID 8337 5.02 6.36 4.67 58 XM_B_Phish_Phrases 8171 6.08 6.23 6.05 59 BAYES_80 8002 3.59 6.10 2.94 60 BAYES_60 7824 5.12 5.97 4.90 61 XM_DIRTYINTL 7084 2.63 5.40 1.91 62 RCVD_IN_RP_RNBL 7053 1.14 5.38 0.04 63 XM_SPF_SoftFail 6945 2.76 5.30 2.10 64 XM_URI_RBL 6943 1.56 5.29 0.59 65 HTML_IMAGE_RATIO_06 6652 4.20 5.07 3.97 66 MultiRelay_CC 6441 1.15 4.91 0.17 67 MultiRelay_Combo 6441 1.15 4.91 0.17 68 LotsOfNums_01 6051 7.68 4.61 8.48 69 BAYES_95 5817 2.22 4.44 1.64 70 MIME_HTML_ONLY_MULTI 5724 2.13 4.36 1.55 71 HTML_IMAGE_RATIO_08 5610 2.43 4.28 1.96 72 TM2_M_URI_OPT_OUT 5048 2.36 3.85 1.97 73 SpammyFromTLD_02 5028 1.12 3.83 0.42 74 XMStrtUSub 4816 4.34 3.67 4.51 75 MIME_HTML_MOSTLY 4734 2.90 3.61 2.72 76 RELAYCOUNTRY_CA 4472 2.05 3.41 1.70 77 BOTNET_NORDNS 4271 0.71 3.26 0.04 78 T_TooManySym_01 4076 4.36 3.11 4.68 79 RELAYCOUNTRY_CN 4063 0.68 3.10 0.05 80 FROM_SUSPICIOUS_NTLD 4063 0.94 3.10 0.38 81 XM_CamelCaseFrm001 4021 2.19 3.07 1.97 82 RELAYCOUNTRY_GB 3949 1.46 3.01 1.06 83 URI_HEX 3918 2.11 2.99 1.88 84 DIET_1 3899 0.95 2.97 0.42 85 SUBJ_ALL_CAPS 3738 1.96 2.85 1.73 86 T_XMDrugObfuBody_08 3694 1.71 2.82 1.43 87 XM_ShortIntro_01 3478 0.96 2.65 0.52 88 BAYES_40 3406 4.21 2.60 4.63 89 RCVD_IN_MSPIKE_H2 3393 3.99 2.59 4.36 90 XM_OfRef6 3330 1.56 2.54 1.30 91 XM_SendGrid 3321 5.14 2.53 5.82 92 XM_H_Long_From02 3290 1.64 2.51 1.42 93 MIME_QP_LONG_LINE 3169 4.93 2.42 5.58 94 TR_Mismatch_TLD_02 3076 0.53 2.35 0.06 95 XMSexyCombo_01 3048 1.06 2.32 0.73 96 NO_DNS_FOR_FROM 3045 1.35 2.32 1.10 97 BAYES_20 2805 3.27 2.14 3.56 98 RCVD_IN_BL_SPAMCOP_NET 2776 0.93 2.12 0.62 99 SpammyFromTLD_01 2774 1.05 2.11 0.77 100 XMDiploma_00 2754 2.33 2.10 2.39 101 RCVD_IN_RP_SAFE 2735 8.71 2.09 10.44 102 XMSubMetaI_00 2677 1.10 2.04 0.86 103 XMBdyGiftCard01 2592 1.37 1.98 1.22 104 RCVD_IN_PSBL 2576 0.42 1.96 0.02 105 XM_UB60 2500 0.45 1.91 0.07 106 DKIM_ADSP_CUSTOM_MED 2492 1.14 1.90 0.94 107 XMMoneyMeta_00 2419 0.85 1.84 0.59 108 NML_ADSP_CUSTOM_MED 2393 0.88 1.82 0.63 109 XM_UB95 2370 0.38 1.81 0.01 110 NORDNS_LOW_CONTRAST 2366 0.48 1.80 0.13 111 XMBody_78 2327 0.78 1.77 0.52 112 XMPhish11 2317 1.19 1.77 1.04 113 XM_HighProb1 2295 0.39 1.75 0.04 114 FORGED_GMAIL_RCVD 2259 0.71 1.72 0.45 115 MAILING_LIST_MULTI 2196 2.08 1.67 2.18 116 XMSlimDrugH 2167 0.63 1.65 0.37 117 BODY_ENHANCEMENT 2133 0.36 1.63 0.03 118 T_XMDrugObfuBody_00 2120 0.97 1.62 0.80 119 TR_XM_RelayPhish 2108 0.80 1.61 0.59 120 T_XMHurry_00 2066 0.85 1.58 0.66 121 XMStockSpam_06 2053 1.53 1.57 1.52 122 TR_Caps_n_Bayes_99 2052 0.37 1.56 0.06 123 BAYES_00 2049 13.90 1.56 17.11 124 RCVD_IN_RP_CERTIFIED 2049 7.47 1.56 9.00 125 XMGenDplmaNmb 2019 1.82 1.54 1.89 126 TM2_M_VERY_LONG_WORD 1989 1.10 1.52 0.99 127 UNPARSEABLE_RELAY 1983 2.33 1.51 2.54 128 RELAYCOUNTRY_HK 1916 0.31 1.46 0.02 129 XM_salutation2 1897 0.88 1.45 0.73 130 URIBL_BLACK 1856 0.33 1.42 0.04 131 XMSexyCombo_04 1766 0.40 1.35 0.16 132 TR_Symld_Words 1728 1.63 1.32 1.71 133 TR_LOTS_OF_MONEY2 1716 0.52 1.31 0.32 134 T_MONEY_PERCENT 1716 0.52 1.31 0.32 135 XMHTML_After_End 1705 0.69 1.30 0.53 136 FSL_THIS_IS_ADV 1609 0.51 1.23 0.32 137 RCVD_IN_IADB_LISTED 1601 4.54 1.22 5.40 138 XMWghtMeta_00 1593 0.27 1.21 0.03 139 LONG_JUNK_URI 1590 0.31 1.21 0.08 140 XMPhish30 1545 0.63 1.18 0.48 141 XMBrknScrpt_02 1542 0.72 1.18 0.61 142 BAYES_05 1517 2.06 1.16 2.30 143 XM_ProductURIs 1505 0.91 1.15 0.84 144 RDNS_DYNAMIC 1501 0.59 1.14 0.45 145 XMSubNoVowel 1496 0.50 1.14 0.34 146 HK_RANDOM_FROM 1487 0.38 1.13 0.19 147 XMSubject_48 1458 0.30 1.11 0.08 148 HTML_FONT_SIZE_LARGE 1455 0.39 1.11 0.20 149 ALL_TRUSTED 1450 13.21 1.11 16.35 150 XM_UB80 1449 0.24 1.10 0.02 151 T_Symld_Words_02 1445 0.78 1.10 0.70 152 XMSubMetaSxObfu_03 1435 0.60 1.09 0.48 153 TR_XM_DK_Bayes 1433 11.27 1.09 13.92 154 TVD_SPACE_RATIO_MINFP 1393 0.23 1.06 0.01 155 XM_Body_Obfu01 1351 0.45 1.03 0.29 156 FILL_THIS_FORM 1344 0.51 1.02 0.37 157 XMBody_17 1333 0.78 1.02 0.71 158 XMSubGiftCard1 1333 0.40 1.02 0.23 159 RCVD_IN_IADB_SPF 1321 3.95 1.01 4.72 160 XM_H_PHPOS 1316 0.93 1.00 0.91 161 LongTLD 1315 0.32 1.00 0.15 162 RELAYCOUNTRY_AT 1296 0.43 0.99 0.28 163 TR_XM_DK_Bayes1 1286 10.77 0.98 13.32 164 HTML_FONT_FACE_BAD 1261 0.64 0.96 0.56 165 DATE_IN_PAST_03_06 1258 0.28 0.96 0.10 166 XMPhish14 1244 0.47 0.95 0.35 167 XM_XX_Yahoo 1234 0.24 0.94 0.06 168 SUBJ_DOLLARS 1212 0.54 0.92 0.44 169 RCVD_IN_IADB_SENDERID 1210 3.45 0.92 4.11 170 RCVD_IN_IADB_DK 1202 3.41 0.92 4.06 171 URI_TRY_3LD 1190 1.54 0.91 1.71 172 RELAYCOUNTRY_GR 1180 0.19 0.90 0.00 173 XM_DK_Undo_01 1175 1.57 0.90 1.75 174 HTTPS_HTTP_MISMATCH 1172 0.64 0.89 0.58 175 TR_XM_DK_Bayes2 1154 8.95 0.88 11.04 176 XM_PDF 1153 3.86 0.88 4.64 177 TooManyTo_002 1130 1.96 0.86 2.25 178 LONG_HEX_URI 1125 0.25 0.86 0.10 179 DKIM_ADSP_NXDOMAIN 1116 0.68 0.85 0.63 180 FILL_THIS_FORM_LONG 1077 0.40 0.82 0.30 181 HTML_IMAGE_ONLY_08 1055 0.26 0.80 0.12 182 HTML_TAG_BALANCE_BODY 1030 0.68 0.79 0.66 183 RCVD_IN_IADB_VOUCHED 1027 3.03 0.78 3.61 184 RELAYCOUNTRY_UA 997 0.16 0.76 0.00 185 XMGppyBdWords 968 0.40 0.74 0.31 186 MIME_CHARSET_FARAWAY 955 0.22 0.73 0.09 187 XMSubMetaSx_01 950 0.22 0.72 0.09 188 TooManyTo_003 936 1.37 0.71 1.54 189 HTML_OFF_PAGE 934 0.15 0.71 0.00 190 RELAYCOUNTRY_DE 933 0.45 0.71 0.38 191 SUBJ_YOUR_FAMILY 923 0.20 0.70 0.07 192 CHARSET_FARAWAY_HEADER 922 0.18 0.70 0.05 193 URIBL_DBL_SPAM 921 0.18 0.70 0.04 194 MPART_ALT_DIFF_COUNT 920 0.33 0.70 0.23 195 XMSubMetaSSx_00 920 0.34 0.70 0.24 196 XM_H_PHPMailer 908 0.64 0.69 0.63 197 RELAYCOUNTRY_AU 905 0.56 0.69 0.53 198 T_FILL_THIS_FORM_SHORT 885 0.83 0.67 0.87 199 HTML_COMMENT_SAVED_URL 876 0.17 0.67 0.04 200 XMSubGiftCard2 871 0.15 0.66 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 451713 90.41 93.86 89.51 2 DKIM_SIGNED 377140 73.62 69.34 74.73 3 XM_DK_Pass 370542 72.00 66.53 73.43 4 DKIM_VALID 353590 68.61 62.99 70.07 5 BAYES_50 291019 54.65 43.03 57.67 6 DCC_CHECK_NEGATIVE 284889 49.66 23.53 56.45 7 XMListUnsubscribeExists 259449 53.64 62.22 51.41 8 DKIM_VALID_AU 258365 51.27 51.52 51.20 9 DCC_CHECK 209739 48.40 74.70 41.56 10 XM_H_QuotedFrom 198624 41.10 47.80 39.36 11 T_TM2_M_HEADER_IN_MSG 156136 28.43 18.79 30.94 12 HTML_FONT_LOW_CONTRAST 138229 28.93 34.85 27.39 13 DKIM_VALID_EF 135867 25.41 19.58 26.92 14 LOC_TINY_FONT_1 115190 23.93 28.18 22.83 15 XMSubLong 108138 22.62 27.22 21.43 16 FVGT_m_MULTI_ODD 106558 21.67 23.78 21.12 17 MIME_HTML_ONLY 100645 24.24 40.77 19.94 18 MultiRelay 90825 17.79 17.01 18.00 19 BAYES_00 86333 13.90 1.56 17.11 20 T_KAM_HTML_FONT_INVALID 83624 16.40 15.72 16.57 21 ALL_TRUSTED 82522 13.21 1.11 16.35 22 TR_XM_DK_Bayes 70250 11.27 1.09 13.92 23 TR_XM_DK_Bayes1 67198 10.77 0.98 13.32 24 XM_Body_Dirty_Words 64040 13.85 18.31 12.69 25 XM_Multi_Part_URI 61489 12.66 14.49 12.18 26 XM_DKIMWhitelistDomains 60309 9.58 0.46 11.95 27 TR_XM_DK_Bayes2 55736 8.95 0.88 11.04 28 RCVD_IN_RP_SAFE 52660 8.71 2.09 10.44 29 LOTS_OF_MONEY 45507 9.66 12.12 9.02 30 RCVD_IN_RP_CERTIFIED 45429 7.47 1.56 9.00 31 XM_Evil_Numbers_Gen 45053 9.61 12.24 8.93 32 TooManyTo_001 43655 8.32 7.05 8.65 33 HTML_IMAGE_RATIO_02 43418 9.16 11.31 8.60 34 LotsOfNums_01 42795 7.68 4.61 8.48 35 T_XMDrugObfuBody_14 42168 8.32 8.16 8.36 36 XM_DK_Undo_02 36576 12.45 32.45 7.25 37 HTML_IMAGE_RATIO_04 33568 6.87 7.71 6.65 38 FSL_BULK_SIG 33515 8.48 15.57 6.64 39 XM_H_Long_From01 30691 6.57 8.46 6.08 40 XM_B_Phish_Phrases 30507 6.08 6.23 6.05 41 RELAYCOUNTRY_META 29705 10.86 30.00 5.89 42 XM_SendGrid 29357 5.14 2.53 5.82 43 MIME_QP_LONG_LINE 28151 4.93 2.42 5.58 44 RCVD_IN_IADB_LISTED 27243 4.54 1.22 5.40 45 BAYES_99 24743 10.64 32.70 4.90 46 BAYES_60 24742 5.12 5.97 4.90 47 BOTNET_IPINHOSTNAME 24052 7.07 15.95 4.77 48 RCVD_IN_IADB_SPF 23798 3.95 1.01 4.72 49 T_TooManySym_01 23623 4.36 3.11 4.68 50 DKIM_INVALID 23550 5.02 6.36 4.67 51 XM_PDF 23401 3.86 0.88 4.64 52 BAYES_40 23375 4.21 2.60 4.63 53 XMStrtUSub 22781 4.34 3.67 4.51 54 RCVD_IN_MSPIKE_H2 21989 3.99 2.59 4.36 55 XMSubMetaSx_00 21908 5.15 8.24 4.34 56 FROM_EXCESS_BASE64 21710 6.85 16.65 4.30 57 T_REMOTE_IMAGE 20995 6.23 14.20 4.16 58 RCVD_IN_IADB_SENDERID 20744 3.45 0.92 4.11 59 XMSexyCombo_05 20592 5.52 11.05 4.08 60 RCVD_IN_IADB_DK 20486 3.41 0.92 4.06 61 BAYES_999 20264 8.87 27.54 4.02 62 HTML_IMAGE_RATIO_06 20040 4.20 5.07 3.97 63 IN_ZIMBRA_NJ_WHITELIST 19074 3.00 0.02 3.78 64 RCVD_IN_IADB_VOUCHED 18239 3.03 0.78 3.61 65 BAYES_20 17957 3.27 2.14 3.56 66 MPART_ALT_DIFF 17172 4.34 7.96 3.40 67 XM_UncommonTLD01 16555 4.59 9.61 3.28 68 BAYES_80 14814 3.59 6.10 2.94 69 MIME_HTML_MOSTLY 13719 2.90 3.61 2.72 70 TR_DCC_Bayes_99 13191 6.57 21.81 2.61 71 UNPARSEABLE_RELAY 12808 2.33 1.51 2.54 72 XMNumbers 12357 3.65 8.26 2.45 73 XMDiploma_00 12065 2.33 2.10 2.39 74 HTML_MIME_NO_HTML_TAG 12012 4.76 13.93 2.38 75 TO_MALFORMED 11853 1.89 0.11 2.35 76 BAYES_05 11600 2.06 1.16 2.30 77 TooManyTo_002 11352 1.96 0.86 2.25 78 TVD_RCVD_IP 11281 1.84 0.33 2.24 79 RCVD_IN_IADB_OPTIN 11162 1.87 0.57 2.21 80 BOTNET 11109 5.22 16.83 2.20 81 MAILING_LIST_MULTI 11011 2.08 1.67 2.18 82 XM_SPF_SoftFail 10622 2.76 5.30 2.10 83 UNTRUSTED_Relay 9972 6.06 21.76 1.98 84 TM2_M_URI_OPT_OUT 9934 2.36 3.85 1.97 85 XM_CamelCaseFrm001 9929 2.19 3.07 1.97 86 HTML_IMAGE_RATIO_08 9868 2.43 4.28 1.96 87 XM_DIRTYINTL 9639 2.63 5.40 1.91 88 XMGenDplmaNmb 9537 1.82 1.54 1.89 89 URI_HEX 9470 2.11 2.99 1.88 90 ANY_BOUNCE_MESSAGE 9177 1.57 0.63 1.82 91 BOUNCE_MESSAGE 9173 1.57 0.62 1.82 92 RCVD_IN_MSPIKE_H3 9046 1.53 0.54 1.79 93 RCVD_IN_MSPIKE_WL 9046 1.53 0.54 1.79 94 XM_DK_Undo_01 8818 1.57 0.90 1.75 95 SUBJ_ALL_CAPS 8708 1.96 2.85 1.73 96 HELO_NODOT 8647 1.47 0.52 1.71 97 TR_Symld_Words 8621 1.63 1.32 1.71 98 URI_TRY_3LD 8605 1.54 0.91 1.71 99 RELAYCOUNTRY_CA 8559 2.05 3.41 1.70 100 BAYES_95 8288 2.22 4.44 1.64 101 IN_HORDE_ADDRESS_BOOK 8025 1.27 0.04 1.59 102 T_TooManySym_02 7873 1.37 0.62 1.56 103 MIME_HTML_ONLY_MULTI 7801 2.13 4.36 1.55 104 TooManyTo_003 7776 1.37 0.71 1.54 105 XMStockSpam_06 7690 1.53 1.57 1.52 106 INVALID_MSGID 7306 1.19 0.17 1.45 107 T_XMDrugObfuBody_08 7195 1.71 2.82 1.43 108 XM_H_Long_From02 7154 1.64 2.51 1.42 109 XMCapTrack 7057 1.18 0.36 1.40 110 TR_MetaPhish_Combo_01 6954 1.21 0.56 1.38 111 XM_UB50 6706 2.54 7.21 1.33 112 XM_OfRef6 6575 1.56 2.54 1.30 113 XMBdyGiftCard01 6141 1.37 1.98 1.22 114 USER_IN_DEF_DKIM_WL 5836 0.92 0.01 1.16 115 XM_GoogleGroups 5834 1.02 0.48 1.16 116 TooManyTo_004 5721 1.01 0.55 1.13 117 NO_DNS_FOR_FROM 5569 1.35 2.32 1.10 118 RELAYCOUNTRY_GB 5342 1.46 3.01 1.06 119 XMPhish11 5257 1.19 1.77 1.04 120 TM2_M_VERY_LONG_WORD 5002 1.10 1.52 0.99 121 DKIM_ADSP_CUSTOM_MED 4734 1.14 1.90 0.94 122 XM_H_PHPOS 4610 0.93 1.00 0.91 123 TooManyTo_005 4537 0.81 0.48 0.90 124 T_FILL_THIS_FORM_SHORT 4380 0.83 0.67 0.87 125 XMSubMetaI_00 4340 1.10 2.04 0.86 126 XM_ProductURIs 4251 0.91 1.15 0.84 127 PLING_QUERY 4047 0.76 0.60 0.80 128 T_XMDrugObfuBody_00 4028 0.97 1.62 0.80 129 SpammyFromTLD_01 3873 1.05 2.11 0.77 130 XMSexyCombo_01 3706 1.06 2.32 0.73 131 XM_salutation2 3672 0.88 1.45 0.73 132 XMBody_17 3598 0.78 1.02 0.71 133 T_Symld_Words_02 3511 0.78 1.10 0.70 134 SUBJ_BUY 3415 0.56 0.13 0.68 135 TM2_M_A_HREF_HREF 3387 0.66 0.60 0.67 136 T_XMHurry_00 3336 0.85 1.58 0.66 137 HTML_TAG_BALANCE_BODY 3314 0.68 0.79 0.66 138 T_OBFU_PDF_ATTACH 3276 0.56 0.22 0.65 139 XM_B_REG_HTML 3239 0.59 0.38 0.64 140 NML_ADSP_CUSTOM_MED 3190 0.88 1.82 0.63 141 DKIM_ADSP_NXDOMAIN 3180 0.68 0.85 0.63 142 XM_H_PHPMailer 3157 0.64 0.69 0.63 143 RCVD_IN_BL_SPAMCOP_NET 3120 0.93 2.12 0.62 144 XMGappySubj_01 3081 0.55 0.34 0.61 145 XMBrknScrpt_02 3058 0.72 1.18 0.61 146 URI_NOVOWEL 3008 0.60 0.63 0.60 147 TR_XM_RelayPhish 2987 0.80 1.61 0.59 148 XM_URI_RBL 2977 1.56 5.29 0.59 149 XMMoneyMeta_00 2973 0.85 1.84 0.59 150 HTTPS_HTTP_MISMATCH 2907 0.64 0.89 0.58 151 XMHTMLBadTable_001 2863 0.58 0.62 0.57 152 HTML_FONT_FACE_BAD 2828 0.64 0.96 0.56 153 FROM_GOV_DKIM_AU 2752 0.47 0.16 0.55 154 HTML_IMAGE_ONLY_24 2663 0.55 0.64 0.53 155 XMHTML_After_End 2661 0.69 1.30 0.53 156 RELAYCOUNTRY_AU 2653 0.56 0.69 0.53 157 RELAYCOUNTRY_PH 2637 0.42 0.02 0.52 158 XM_ShortIntro_01 2625 0.96 2.65 0.52 159 XMBody_78 2619 0.78 1.77 0.52 160 T_TooManySym_03 2556 0.44 0.19 0.51 161 USER_IN_WHITELIST 2544 0.40 0.00 0.50 162 FROM_GOV_SPOOF 2492 0.44 0.23 0.49 163 AC_DIV_BONANZA 2489 0.41 0.11 0.49 164 XMLngstWrd_00 2470 0.46 0.35 0.49 165 XMPhish30 2433 0.63 1.18 0.48 166 XMSubMetaSxObfu_03 2398 0.60 1.09 0.48 167 SHORT_HELO_AND_INLINE_IMAGE 2340 0.38 0.05 0.46 168 XMLngstWrd_01 2304 0.43 0.34 0.46 169 XM_D_tchamptons_WL 2288 0.36 0.00 0.45 170 FORGED_GMAIL_RCVD 2282 0.71 1.72 0.45 171 RDNS_DYNAMIC 2256 0.59 1.14 0.45 172 XMBody_95 2241 0.37 0.08 0.44 173 XMNoVowels 2224 0.46 0.52 0.44 174 SUBJ_DOLLARS 2218 0.54 0.92 0.44 175 XM_B_COPY_HTML 2207 0.46 0.56 0.44 176 DIET_1 2133 0.95 2.97 0.42 177 MISSING_HEADERS 2124 2.70 11.47 0.42 178 SpammyFromTLD_02 2109 1.12 3.83 0.42 179 REMOVE_BEFORE_LINK 2085 0.42 0.43 0.41 180 XMSubMetaSxObfu_02 2052 0.37 0.21 0.41 181 TR_LOTS_OF_MONEY3 2025 0.45 0.63 0.40 182 XMClaimOffer 2014 0.39 0.36 0.40 183 XMDateMe_00 1972 0.42 0.51 0.39 184 RCVD_IN_SORBS_DUL 1938 0.37 0.32 0.38 185 FROM_SUSPICIOUS_NTLD 1935 0.94 3.10 0.38 186 TM2_M_BODY_EMPTY 1906 0.33 0.14 0.38 187 RELAYCOUNTRY_DE 1899 0.45 0.71 0.38 188 FILL_THIS_FORM 1890 0.51 1.02 0.37 189 XMSlimDrugH 1852 0.63 1.65 0.37 190 HTML_IMAGE_ONLY_32 1823 0.40 0.53 0.36 191 XMPhish14 1761 0.47 0.95 0.35 192 XMSubNoVowel 1704 0.50 1.14 0.34 193 HTML_IMAGE_ONLY_28 1683 0.38 0.58 0.33 194 XM_USANA_RCVD 1666 0.26 0.00 0.33 195 BASE64_LENGTH_79_INF 1630 0.28 0.11 0.32 196 TVD_SPACE_RATIO 1626 0.33 0.34 0.32 197 FSL_THIS_IS_ADV 1622 0.51 1.23 0.32 198 XMSolicitRefs_0 1620 0.36 0.51 0.32 199 T_MONEY_PERCENT 1596 0.52 1.31 0.32 200 TR_LOTS_OF_MONEY2 1596 0.52 1.31 0.32 ----------------------------------------------------------------------