Email: 298139 Autolearn: 0 AvgScore: 3.05 AvgScanTime: 1.80 sec Spam: 92819 Autolearn: 0 AvgScore: 12.54 AvgScanTime: 2.17 sec Ham: 205320 Autolearn: 0 AvgScore: -1.24 AvgScanTime: 1.63 sec Time Spent Running SA: 149.04 hours Time Spent Processing Spam: 55.82 hours Time Spent Processing Ham: 93.22 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 89425 77.57 96.34 69.08 2 DKIM_SIGNED 80245 72.06 86.45 65.55 3 XM_DK_Pass 78015 70.87 84.05 64.91 4 DKIM_VALID 77312 69.89 83.29 63.82 5 DCC_CHECK 76711 53.47 82.65 40.28 6 XMListUnsubscribeExists 74762 56.37 80.55 45.43 7 DKIM_VALID_AU 65467 57.72 70.53 51.93 8 XM_DK_Undo_02 49100 29.95 52.90 19.57 9 XM_H_QuotedFrom 48793 37.75 52.57 31.06 10 BAYES_99 44926 28.17 48.40 19.02 11 BAYES_999 39649 25.20 42.72 17.28 12 LOC_TINY_FONT_1 37472 28.62 40.37 23.31 13 HTML_FONT_LOW_CONTRAST 36366 30.45 39.18 26.50 14 TR_DCC_Bayes_99 36268 19.31 39.07 10.37 15 BAYES_50 27547 50.29 29.68 59.61 16 MIME_HTML_ONLY 26340 21.19 28.38 17.94 17 FVGT_m_MULTI_ODD 24616 20.58 26.52 17.89 18 XMSubLong 22670 20.58 24.42 18.84 19 HTML_IMAGE_RATIO_02 22350 13.23 24.08 8.33 20 XM_Body_Dirty_Words 20711 14.28 22.31 10.66 21 BOTNET_IPINHOSTNAME 15974 9.76 17.21 6.39 22 T_TM2_M_HEADER_IN_MSG 15057 19.19 16.22 20.53 23 DKIM_VALID_EF 14699 21.20 15.84 23.62 24 DCC_CHECK_NEGATIVE 14676 45.22 15.81 58.52 25 BOTNET 14487 5.60 15.61 1.07 26 XM_Multi_Part_URI 13898 12.85 14.97 11.90 27 T_KAM_HTML_FONT_INVALID 13675 10.68 14.73 8.85 28 XM_Evil_Numbers_Gen 13336 9.60 14.37 7.45 29 RELAYCOUNTRY_META 13312 7.24 14.34 4.02 30 MultiRelay 12174 12.33 13.12 11.97 31 XMSexyCombo_05 10504 6.53 11.32 4.36 32 HTML_IMAGE_RATIO_04 10407 7.36 11.21 5.62 33 XM_UncommonTLD01 9506 6.28 10.24 4.48 34 RCVD_IN_RP_SAFE 9350 12.83 10.07 14.08 35 XM_B_Phish_Phrases 8769 6.69 9.45 5.44 36 LotsOfNums_01 8753 7.64 9.43 6.83 37 UNTRUSTED_Relay 8057 3.57 8.68 1.27 38 T_XMDrugObfuBody_14 7937 6.97 8.55 6.26 39 FROM_EXCESS_BASE64 7918 5.26 8.53 3.78 40 LOTS_OF_MONEY 7868 5.85 8.48 4.66 41 XMSubMetaSx_00 7393 4.78 7.96 3.35 42 RCVD_IN_RP_CERTIFIED 6897 10.65 7.43 12.11 43 XM_H_Long_From01 6879 5.68 7.41 4.89 44 MPART_ALT_DIFF 6864 4.24 7.40 2.81 45 BAYES_80 6579 4.79 7.09 3.75 46 TR_XM_DocInvoice 6468 4.86 6.97 3.91 47 TooManyTo_001 6364 5.48 6.86 4.85 48 RCVD_IN_RP_RNBL 5985 2.05 6.45 0.06 49 FSL_BULK_SIG 5795 6.21 6.24 6.19 50 RCVD_IN_BL_SPAMCOP_NET 5686 2.14 6.13 0.33 51 RCVD_IN_MSPIKE_H2 5387 6.04 5.80 6.15 52 BAYES_60 5116 5.91 5.51 6.08 53 MIME_HTML_MOSTLY 4621 3.76 4.98 3.20 54 XM_SendGrid 4022 4.39 4.33 4.41 55 BAYES_95 3868 3.03 4.17 2.52 56 XMStrtUSub 3753 4.12 4.04 4.16 57 HTML_IMAGE_RATIO_06 3565 3.04 3.84 2.67 58 T_TooManySym_01 3480 4.49 3.75 4.83 59 MIME_QP_LONG_LINE 3473 3.41 3.74 3.26 60 TM2_M_URI_OPT_OUT 3326 2.23 3.58 1.62 61 XM_DIRTYINTL 3269 1.94 3.52 1.22 62 XM_CamelCaseFrm001 3180 2.09 3.43 1.49 63 XMBdyGiftCard01 3145 2.28 3.39 1.78 64 MIME_HTML_ONLY_MULTI 3109 1.72 3.35 0.99 65 XMNumbers 2990 4.28 3.22 4.76 66 XM_UB50 2956 1.48 3.18 0.71 67 RELAYCOUNTRY_CA 2939 1.83 3.17 1.23 68 DKIM_INVALID 2933 2.17 3.16 1.73 69 XM_XX_Yahoo 2883 1.07 3.11 0.14 70 URI_HEX 2738 1.65 2.95 1.07 71 HTML_IMAGE_RATIO_08 2556 2.30 2.75 2.10 72 XM_SPF_SoftFail 2465 1.42 2.66 0.86 73 BODY_ENHANCEMENT 2446 0.85 2.64 0.04 74 XM_OfRef6 2295 1.39 2.47 0.89 75 XM_H_Long_From02 2287 1.38 2.46 0.88 76 XMSubMetaI_00 2244 1.29 2.42 0.78 77 T_MIXED_ES 2240 1.66 2.41 1.32 78 XMSexyCombo_01 2094 0.88 2.26 0.26 79 T_REMOTE_IMAGE 2080 2.17 2.24 2.14 80 XM_URI_RBL 2051 0.76 2.21 0.11 81 XMPhish30 1999 0.98 2.15 0.45 82 MultiRelay_Combo 1931 0.76 2.08 0.17 83 MultiRelay_CC 1931 0.76 2.08 0.17 84 T_XMHurry_00 1926 1.01 2.08 0.53 85 SpammyFromTLD_01 1910 0.90 2.06 0.38 86 URIBL_BLACK 1853 0.64 2.00 0.03 87 XM_S_JOY_D 1782 0.93 1.92 0.49 88 RELAYCOUNTRY_FR 1763 0.83 1.90 0.35 89 XMSubMetaSSx_00 1759 0.81 1.90 0.31 90 XM_UB99 1729 0.59 1.86 0.01 91 BAYES_00 1716 3.65 1.85 4.46 92 TM2_M_VERY_LONG_WORD 1675 1.13 1.80 0.83 93 BOTNET_NORDNS 1673 0.57 1.80 0.01 94 XMBody_17 1660 0.85 1.79 0.42 95 XM_ProductURIs 1653 1.29 1.78 1.06 96 T_XMDrugObfuBody_08 1609 1.16 1.73 0.90 97 SUBJ_ALL_CAPS 1590 1.13 1.71 0.87 98 URIBL_DBL_SPAM 1577 0.54 1.70 0.02 99 PLING_QUERY 1523 0.83 1.64 0.47 100 XMBody_78 1462 0.88 1.58 0.57 101 TR_XM_DK_Bayes 1461 3.01 1.57 3.66 102 TR_XM_DK_Bayes1 1458 2.95 1.57 3.57 103 HTML_MIME_NO_HTML_TAG 1447 1.34 1.56 1.25 104 XM_UB999 1406 0.48 1.51 0.01 105 DIET_1 1406 0.65 1.51 0.26 106 SUBJ_DOLLARS 1395 0.64 1.50 0.25 107 XM_DK_Undo_01 1389 1.60 1.50 1.64 108 TR_XM_RelayPhish 1379 0.77 1.49 0.45 109 XMDiploma_00 1376 1.31 1.48 1.23 110 XM_B_REG_HTML 1373 1.37 1.48 1.32 111 RCVD_IN_IADB_LISTED 1364 2.19 1.47 2.51 112 XM_B_COPY_HTML 1276 0.92 1.37 0.72 113 TR_XM_DK_Bayes2 1257 2.71 1.35 3.33 114 RDNS_DYNAMIC 1229 0.73 1.32 0.46 115 XMStockSpam_06 1212 1.46 1.31 1.53 116 RCVD_IN_IADB_SPF 1206 1.96 1.30 2.25 117 UNPARSEABLE_RELAY 1200 4.28 1.29 5.64 118 T_XMDrugObfuBody_00 1197 0.77 1.29 0.54 119 BAYES_40 1194 1.81 1.29 2.04 120 BAYES_20 1192 1.45 1.28 1.53 121 XM_HighProb1 1190 0.41 1.28 0.02 122 RELAYCOUNTRY_AT 1163 0.45 1.25 0.09 123 SpammyFromTLD_02 1157 0.50 1.25 0.16 124 XM_H_PHPOS 1143 1.03 1.23 0.94 125 RCVD_IN_IADB_SENDERID 1129 1.80 1.22 2.06 126 T_Symld_Words_02 1109 0.57 1.19 0.29 127 RCVD_IN_IADB_DK 1092 1.76 1.18 2.02 128 ALL_TRUSTED 1083 20.89 1.17 29.81 129 MPART_ALT_DIFF_COUNT 1050 0.55 1.13 0.29 130 RELAYCOUNTRY_CN 1047 0.39 1.13 0.06 131 MAILING_LIST_MULTI 1046 1.50 1.13 1.67 132 HTML_FONT_SIZE_HUGE 1030 0.49 1.11 0.22 133 XMHTMLBadTable_001 975 0.71 1.05 0.56 134 FSL_THIS_IS_ADV 960 0.44 1.03 0.17 135 XM_RXBody 921 0.44 0.99 0.19 136 T_TooManySym_02 916 1.75 0.99 2.09 137 LONG_JUNK_URI 909 0.36 0.98 0.07 138 XM_BadFromFormat 900 0.51 0.97 0.30 139 LONG_JUNK_URI3 892 0.42 0.96 0.18 140 URIBL_RHS_DOB 886 0.51 0.95 0.31 141 XMPhish11 872 0.84 0.94 0.79 142 RCVD_IN_IADB_VOUCHED 854 1.66 0.92 1.99 143 FILL_THIS_FORM 853 0.42 0.92 0.20 144 RELAYCOUNTRY_GB 847 0.67 0.91 0.56 145 XM_UB60 836 0.33 0.90 0.07 146 XM_H_PHPMailer 822 0.77 0.89 0.71 147 XMBrknScrpt_02 799 0.83 0.86 0.82 148 XMPhish14 796 0.37 0.86 0.15 149 XMSubMetaSxObfu_02 753 1.03 0.81 1.13 150 XM_UB80 742 0.26 0.80 0.02 151 LOW_PRICE 741 0.39 0.80 0.21 152 LongTLD 735 0.33 0.79 0.12 153 T_MONEY_PERCENT 724 0.34 0.78 0.14 154 TR_LOTS_OF_MONEY2 724 0.34 0.78 0.14 155 RELAYCOUNTRY_DE 717 0.57 0.77 0.48 156 TRACKER_ID 717 0.32 0.77 0.12 157 HTML_FONT_FACE_BAD 714 0.61 0.77 0.54 158 RCVD_IN_PSBL 709 0.32 0.76 0.11 159 BAYES_05 681 0.90 0.73 0.98 160 T_HTML_TAG_BALANCE_CENTER 676 0.35 0.73 0.18 161 MONEY_BACK 673 0.26 0.73 0.04 162 XMGenDplmaNmb 672 0.60 0.72 0.54 163 DKIM_ADSP_NXDOMAIN 659 0.52 0.71 0.44 164 TR_Mismatch_TLD_02 651 0.26 0.70 0.06 165 XM_H_PHPOS_M 648 0.54 0.70 0.47 166 TR_Symld_Words 647 2.95 0.70 3.97 167 XMMoneyMeta_00 643 0.28 0.69 0.10 168 XMSubMetaSxObfu_03 637 0.37 0.69 0.22 169 HTML_IMAGE_ONLY_32 628 0.41 0.68 0.29 170 DKIM_ADSP_CUSTOM_MED 607 0.77 0.65 0.82 171 XM_Body_Obfu01 601 0.39 0.65 0.27 172 XMSexyCombo_04 595 0.26 0.64 0.09 173 XMBSHREFv2 584 0.27 0.63 0.10 174 XM_OfRef7 580 0.30 0.62 0.15 175 XMHTML_After_End 573 0.36 0.62 0.24 176 XM_B_TRADE_HTML 560 0.39 0.60 0.30 177 BASE64_LENGTH_79_INF 552 0.32 0.59 0.19 178 HTML_IMAGE_ONLY_28 551 0.36 0.59 0.26 179 FILL_THIS_FORM_LONG 551 0.28 0.59 0.14 180 RELAYCOUNTRY_RU 543 0.19 0.59 0.01 181 DATE_IN_PAST_03_06 538 0.23 0.58 0.08 182 HTML_IMAGE_ONLY_24 529 0.33 0.57 0.22 183 NML_ADSP_CUSTOM_MED 528 0.60 0.57 0.61 184 TooManyTo_002 513 1.05 0.55 1.27 185 T_XMDrugObfuBody_12 510 0.23 0.55 0.09 186 XMGppyBdWords 508 0.22 0.55 0.08 187 XM_GoogleGroups 501 1.00 0.54 1.21 188 RELAYCOUNTRY_BR 496 0.18 0.53 0.03 189 URI_TRY_3LD 494 0.51 0.53 0.50 190 REMOVE_BEFORE_LINK 481 0.31 0.52 0.22 191 SUBJ_ILLEGAL_CHARS 473 0.18 0.51 0.02 192 URI_NOVOWEL 468 0.35 0.50 0.29 193 XMSubMetaSx_01 463 0.23 0.50 0.11 194 T_FILL_THIS_FORM_SHORT 460 0.49 0.50 0.49 195 RELAYCOUNTRY_NL 457 0.32 0.49 0.25 196 FORGED_GMAIL_RCVD 456 0.38 0.49 0.33 197 RELAYCOUNTRY_PL 454 0.17 0.49 0.03 198 TR_MetaPhish_Combo_01 453 0.57 0.49 0.61 199 TooManyTo_003 445 0.74 0.48 0.86 200 XMClaimOffer 437 0.19 0.47 0.07 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 141841 77.57 96.34 69.08 2 DKIM_SIGNED 134589 72.06 86.45 65.55 3 XM_DK_Pass 133275 70.87 84.05 64.91 4 DKIM_VALID 131045 69.89 83.29 63.82 5 BAYES_50 122384 50.29 29.68 59.61 6 DCC_CHECK_NEGATIVE 120143 45.22 15.81 58.52 7 DKIM_VALID_AU 106616 57.72 70.53 51.93 8 XMListUnsubscribeExists 93286 56.37 80.55 45.43 9 DCC_CHECK 82694 53.47 82.65 40.28 10 XM_H_QuotedFrom 63763 37.75 52.57 31.06 11 ALL_TRUSTED 61196 20.89 1.17 29.81 12 HTML_FONT_LOW_CONTRAST 54418 30.45 39.18 26.50 13 DKIM_VALID_EF 48496 21.20 15.84 23.62 14 LOC_TINY_FONT_1 47860 28.62 40.37 23.31 15 T_TM2_M_HEADER_IN_MSG 42147 19.19 16.22 20.53 16 XM_DK_Undo_02 40190 29.95 52.90 19.57 17 BAYES_99 39061 28.17 48.40 19.02 18 XMSubLong 38675 20.58 24.42 18.84 19 MIME_HTML_ONLY 36830 21.19 28.38 17.94 20 FVGT_m_MULTI_ODD 36741 20.58 26.52 17.89 21 BOUNCE_MESSAGE 36363 12.29 0.31 17.71 22 ANY_BOUNCE_MESSAGE 36363 12.29 0.31 17.71 23 BAYES_999 35487 25.20 42.72 17.28 24 XM_DKIMWhitelistDomains 32942 11.06 0.03 16.04 25 RCVD_IN_RP_SAFE 28905 12.83 10.07 14.08 26 RCVD_IN_RP_CERTIFIED 24854 10.65 7.43 12.11 27 MultiRelay 24576 12.33 13.12 11.97 28 XM_Multi_Part_URI 24424 12.85 14.97 11.90 29 XM_Body_Dirty_Words 21877 14.28 22.31 10.66 30 TR_DCC_Bayes_99 21288 19.31 39.07 10.37 31 T_KAM_HTML_FONT_INVALID 18181 10.68 14.73 8.85 32 HTML_IMAGE_RATIO_02 17099 13.23 24.08 8.33 33 XM_Evil_Numbers_Gen 15291 9.60 14.37 7.45 34 LotsOfNums_01 14020 7.64 9.43 6.83 35 BOTNET_IPINHOSTNAME 13123 9.76 17.21 6.39 36 T_XMDrugObfuBody_14 12850 6.97 8.55 6.26 37 FSL_BULK_SIG 12710 6.21 6.24 6.19 38 RCVD_IN_MSPIKE_H2 12630 6.04 5.80 6.15 39 BAYES_60 12490 5.91 5.51 6.08 40 UNPARSEABLE_RELAY 11573 4.28 1.29 5.64 41 HTML_IMAGE_RATIO_04 11536 7.36 11.21 5.62 42 XM_B_Phish_Phrases 11176 6.69 9.45 5.44 43 XM_H_Long_From01 10042 5.68 7.41 4.89 44 TooManyTo_001 9960 5.48 6.86 4.85 45 T_TooManySym_01 9915 4.49 3.75 4.83 46 XMNumbers 9766 4.28 3.22 4.76 47 LOTS_OF_MONEY 9571 5.85 8.48 4.66 48 XM_UncommonTLD01 9203 6.28 10.24 4.48 49 BAYES_00 9161 3.65 1.85 4.46 50 IN_ZIMBRA_NJ_WHITELIST 9116 3.06 0.02 4.44 51 XM_SendGrid 9063 4.39 4.33 4.41 52 XMSexyCombo_05 8955 6.53 11.32 4.36 53 XMStrtUSub 8544 4.12 4.04 4.16 54 RELAYCOUNTRY_META 8262 7.24 14.34 4.02 55 TR_Symld_Words 8157 2.95 0.70 3.97 56 TR_XM_DocInvoice 8020 4.86 6.97 3.91 57 FROM_EXCESS_BASE64 7766 5.26 8.53 3.78 58 BAYES_80 7708 4.79 7.09 3.75 59 TR_XM_DK_Bayes 7517 3.01 1.57 3.66 60 TVD_RCVD_IP 7360 2.55 0.28 3.58 61 TR_XM_DK_Bayes1 7335 2.95 1.57 3.57 62 XMSubMetaSx_00 6869 4.78 7.96 3.35 63 TR_XM_DK_Bayes2 6836 2.71 1.35 3.33 64 MIME_QP_LONG_LINE 6699 3.41 3.74 3.26 65 TO_MALFORMED 6661 2.24 0.01 3.24 66 MIME_HTML_MOSTLY 6576 3.76 4.98 3.20 67 INVALID_MSGID 6569 2.28 0.24 3.20 68 MPART_ALT_DIFF 5772 4.24 7.40 2.81 69 HTML_IMAGE_RATIO_06 5486 3.04 3.84 2.67 70 BAYES_95 5169 3.03 4.17 2.52 71 RCVD_IN_IADB_LISTED 5151 2.19 1.47 2.51 72 IN_HORDE_ADDRESS_BOOK 5042 1.72 0.08 2.46 73 RCVD_IN_IADB_SPF 4627 1.96 1.30 2.25 74 T_REMOTE_IMAGE 4404 2.17 2.24 2.14 75 HTML_IMAGE_RATIO_08 4316 2.30 2.75 2.10 76 T_TooManySym_02 4298 1.75 0.99 2.09 77 RCVD_IN_IADB_SENDERID 4230 1.80 1.22 2.06 78 BAYES_40 4188 1.81 1.29 2.04 79 RCVD_IN_IADB_DK 4149 1.76 1.18 2.02 80 RCVD_IN_IADB_VOUCHED 4081 1.66 0.92 1.99 81 USER_IN_DEF_DKIM_WL 3758 1.27 0.02 1.83 82 XMBdyGiftCard01 3653 2.28 3.39 1.78 83 DKIM_INVALID 3544 2.17 3.16 1.73 84 MAILING_LIST_MULTI 3438 1.50 1.13 1.67 85 XM_DK_Undo_01 3376 1.60 1.50 1.64 86 RCVD_IN_MSPIKE_H3 3360 1.22 0.31 1.64 87 RCVD_IN_MSPIKE_WL 3360 1.22 0.31 1.64 88 TM2_M_URI_OPT_OUT 3331 2.23 3.58 1.62 89 BAYES_20 3145 1.45 1.28 1.53 90 XMStockSpam_06 3137 1.46 1.31 1.53 91 XM_CamelCaseFrm001 3058 2.09 3.43 1.49 92 T_MIXED_ES 2709 1.66 2.41 1.32 93 XM_B_REG_HTML 2709 1.37 1.48 1.32 94 TooManyTo_002 2610 1.05 0.55 1.27 95 UNTRUSTED_Relay 2600 3.57 8.68 1.27 96 HTML_MIME_NO_HTML_TAG 2557 1.34 1.56 1.25 97 XMDiploma_00 2533 1.31 1.48 1.23 98 USER_IN_WHITELIST 2532 0.85 0.00 1.23 99 RELAYCOUNTRY_CA 2519 1.83 3.17 1.23 100 XM_DIRTYINTL 2502 1.94 3.52 1.22 101 XM_GoogleGroups 2489 1.00 0.54 1.21 102 XM_PDF 2465 0.93 0.33 1.20 103 XMSubMetaSxObfu_02 2319 1.03 0.81 1.13 104 BOTNET 2195 5.60 15.61 1.07 105 URI_HEX 2190 1.65 2.95 1.07 106 XM_ProductURIs 2185 1.29 1.78 1.06 107 T_TooManySym_03 2121 0.76 0.16 1.03 108 MIME_HTML_ONLY_MULTI 2029 1.72 3.35 0.99 109 BAYES_05 2014 0.90 0.73 0.98 110 XM_H_PHPOS 1936 1.03 1.23 0.94 111 T_XMDrugObfuBody_08 1856 1.16 1.73 0.90 112 XM_OfRef6 1836 1.39 2.47 0.89 113 XM_H_Long_From02 1813 1.38 2.46 0.88 114 SUBJ_ALL_CAPS 1790 1.13 1.71 0.87 115 XM_SPF_SoftFail 1768 1.42 2.66 0.86 116 TooManyTo_003 1761 0.74 0.48 0.86 117 TM2_M_VERY_LONG_WORD 1697 1.13 1.80 0.83 118 XMBrknScrpt_02 1689 0.83 0.86 0.82 119 DKIM_ADSP_CUSTOM_MED 1683 0.77 0.65 0.82 120 XMPhish11 1620 0.84 0.94 0.79 121 XMSubMetaI_00 1598 1.29 2.42 0.78 122 XMBody_95 1529 0.60 0.27 0.74 123 XM_B_COPY_HTML 1477 0.92 1.37 0.72 124 XM_H_PHPMailer 1467 0.77 0.89 0.71 125 RCVD_IN_IADB_OPTIN 1463 0.62 0.41 0.71 126 XM_UB50 1455 1.48 3.18 0.71 127 TooManyTo_004 1358 0.58 0.40 0.66 128 NML_ADSP_CUSTOM_MED 1256 0.60 0.57 0.61 129 T_TooManySym_04 1251 0.42 0.02 0.61 130 TR_MetaPhish_Combo_01 1248 0.57 0.49 0.61 131 TooManyTo_005 1198 0.49 0.30 0.58 132 XMBody_78 1174 0.88 1.58 0.57 133 XMHTMLBadTable_001 1155 0.71 1.05 0.56 134 RELAYCOUNTRY_GB 1147 0.67 0.91 0.56 135 XMGenDplmaNmb 1108 0.60 0.72 0.54 136 T_XMDrugObfuBody_00 1105 0.77 1.29 0.54 137 HTML_FONT_FACE_BAD 1104 0.61 0.77 0.54 138 T_XMHurry_00 1083 1.01 2.08 0.53 139 XMSlimDrugH 1038 0.49 0.44 0.51 140 URI_TRY_3LD 1025 0.51 0.53 0.50 141 XM_S_JOY_D 1005 0.93 1.92 0.49 142 T_FILL_THIS_FORM_SHORT 1003 0.49 0.50 0.49 143 RELAYCOUNTRY_DE 989 0.57 0.77 0.48 144 PLING_QUERY 963 0.83 1.64 0.47 145 XM_H_PHPOS_M 958 0.54 0.70 0.47 146 RDNS_DYNAMIC 951 0.73 1.32 0.46 147 TR_XM_RelayPhish 923 0.77 1.49 0.45 148 XMPhish30 916 0.98 2.15 0.45 149 TM2_M_A_HREF_HREF 915 0.43 0.39 0.45 150 DKIM_ADSP_NXDOMAIN 898 0.52 0.71 0.44 151 XMBody_17 862 0.85 1.79 0.42 152 NO_DNS_FOR_FROM 858 0.41 0.38 0.42 153 XM_Walgreens_Forge 832 0.38 0.32 0.41 154 SpammyFromTLD_01 782 0.90 2.06 0.38 155 XMRcvdHeader_S01 746 0.25 0.01 0.36 156 HELO_NODOT 744 0.28 0.11 0.36 157 ZMIfish_ForgedBill 728 0.24 0.00 0.35 158 HTML_TAG_BALANCE_BODY 727 0.39 0.47 0.35 159 XM_D_TLN_Whitelist 717 0.24 0.00 0.35 160 XM_Attn_01 716 0.27 0.09 0.35 161 RELAYCOUNTRY_FR 709 0.83 1.90 0.35 162 XM_ShortIntro_01 700 0.38 0.47 0.34 163 TR_MetaPhish_Combo_01b 697 0.27 0.11 0.34 164 RCVD_IN_BL_SPAMCOP_NET 685 2.14 6.13 0.33 165 FORGED_GMAIL_RCVD 679 0.38 0.49 0.33 166 XMNoVowels 674 0.26 0.12 0.33 167 XMBody_29 657 0.30 0.27 0.32 168 XMSubMetaSSx_00 642 0.81 1.90 0.31 169 URIBL_RHS_DOB 638 0.51 0.95 0.31 170 RELAYCOUNTRY_AU 637 0.35 0.44 0.31 171 XM_BadFromFormat 621 0.51 0.97 0.30 172 XMRcvdHeader_15 621 0.21 0.00 0.30 173 TR_LOTS_OF_MONEY3 617 0.32 0.37 0.30 174 T_TooManySym_05 616 0.21 0.01 0.30 175 XM_B_TRADE_HTML 608 0.39 0.60 0.30 176 T_Symld_Words_02 605 0.57 1.19 0.29 177 HTML_IMAGE_ONLY_32 602 0.41 0.68 0.29 178 MPART_ALT_DIFF_COUNT 597 0.55 1.13 0.29 179 URI_NOVOWEL 589 0.35 0.50 0.29 180 XMCapTrack 579 0.27 0.25 0.28 181 XM_H_SpoofStaff4 574 0.21 0.06 0.28 182 MISSING_HEADERS 550 0.25 0.20 0.27 183 XM_Body_Obfu01 549 0.39 0.65 0.27 184 XMLngstWrd_00 546 0.26 0.24 0.27 185 XMSubNoVowel 546 0.28 0.32 0.27 186 DIET_1 544 0.65 1.51 0.26 187 XMSexyCombo_01 543 0.88 2.26 0.26 188 HTML_IMAGE_ONLY_28 530 0.36 0.59 0.26 189 XMSUPPORT 521 0.17 0.00 0.25 190 RELAYCOUNTRY_NL 510 0.32 0.49 0.25 191 XMGappySubj_01 507 0.29 0.40 0.25 192 SUBJ_DOLLARS 505 0.64 1.50 0.25 193 RCVD_IN_IADB_DOPTIN 502 0.19 0.08 0.24 194 XMHTML_After_End 500 0.36 0.62 0.24 195 AD_PREFS 491 0.18 0.03 0.24 196 XMDateMe_00 489 0.22 0.17 0.24 197 XMLngstWrd_01 487 0.23 0.23 0.24 198 FROM_EGROUPS 485 0.17 0.01 0.24 199 TVD_SPACE_RATIO 481 0.22 0.18 0.23 200 XMSubMetaSxObfu_03 458 0.37 0.69 0.22 ----------------------------------------------------------------------