Email: 497557 Autolearn: 0 AvgScore: 2.77 AvgScanTime: 2.27 sec Spam: 141925 Autolearn: 0 AvgScore: 12.16 AvgScanTime: 2.75 sec Ham: 355632 Autolearn: 0 AvgScore: -0.98 AvgScanTime: 2.07 sec Time Spent Running SA: 313.40 hours Time Spent Processing Spam: 108.49 hours Time Spent Processing Ham: 204.90 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 136428 81.78 96.13 76.06 2 DKIM_SIGNED 127051 69.51 89.52 61.52 3 XM_DK_Pass 124028 68.16 87.39 60.49 4 DKIM_VALID 122301 66.63 86.17 58.83 5 DCC_CHECK 114504 45.87 80.68 31.97 6 XMListUnsubscribeExists 111170 50.98 78.33 40.06 7 DKIM_VALID_AU 95010 50.14 66.94 43.43 8 XM_H_QuotedFrom 76321 38.58 53.78 32.52 9 XM_DK_Undo_02 75421 24.97 53.14 13.73 10 BAYES_99 67081 22.89 47.27 13.16 11 BAYES_999 58411 20.13 41.16 11.74 12 HTML_FONT_LOW_CONTRAST 54952 27.05 38.72 22.40 13 TR_DCC_Bayes_99 52928 14.98 37.29 6.07 14 LOC_TINY_FONT_1 50276 23.12 35.42 18.20 15 BAYES_50 45127 52.59 31.80 60.88 16 FVGT_m_MULTI_ODD 41658 21.58 29.35 18.48 17 MIME_HTML_ONLY 39163 20.22 27.59 17.28 18 XMSubLong 34207 19.77 24.10 18.04 19 XM_Body_Dirty_Words 30531 12.91 21.51 9.48 20 T_TM2_M_HEADER_IN_MSG 29188 25.49 20.57 27.46 21 DKIM_VALID_EF 28701 20.48 20.22 20.58 22 XM_Multi_Part_URI 24995 12.33 17.61 10.22 23 DCC_CHECK_NEGATIVE 24653 52.27 17.37 66.20 24 HTML_IMAGE_RATIO_02 24432 9.39 17.21 6.26 25 T_KAM_HTML_FONT_INVALID 23286 11.45 16.41 9.48 26 XM_Evil_Numbers_Gen 22822 9.72 16.08 7.19 27 MultiRelay 20539 15.07 14.47 15.31 28 BOTNET_IPINHOSTNAME 20528 7.10 14.46 4.16 29 RELAYCOUNTRY_META 20366 7.22 14.35 4.37 30 BOTNET 18068 4.34 12.73 0.99 31 HTML_IMAGE_RATIO_04 15889 6.33 11.20 4.39 32 T_XMDrugObfuBody_14 15304 8.40 10.78 7.45 33 LotsOfNums_01 14685 7.82 10.35 6.81 34 URIBL_RHS_DOB 14316 4.74 10.09 2.61 35 XMSexyCombo_05 14271 4.86 10.06 2.78 36 LOTS_OF_MONEY 13477 6.62 9.50 5.47 37 XM_B_Phish_Phrases 12938 5.69 9.12 4.32 38 UNTRUSTED_Relay 11723 3.37 8.26 1.42 39 MPART_ALT_DIFF 11592 4.48 8.17 3.01 40 XM_H_Long_From01 10890 5.77 7.67 5.01 41 TR_XM_DocInvoice 10545 4.87 7.43 3.85 42 TooManyTo_001 9928 7.47 7.00 7.66 43 XM_UncommonTLD01 9821 4.50 6.92 3.54 44 BAYES_80 9660 4.77 6.81 3.96 45 RCVD_IN_RP_SAFE 9605 8.96 6.77 9.84 46 XMSubMetaSx_00 9494 4.77 6.69 4.01 47 FSL_BULK_SIG 9443 5.90 6.65 5.60 48 FROM_EXCESS_BASE64 9186 3.94 6.47 2.93 49 MIME_HTML_MOSTLY 8136 3.10 5.73 2.06 50 RCVD_IN_RP_CERTIFIED 8111 7.82 5.71 8.66 51 RCVD_IN_MSPIKE_H2 8076 4.96 5.69 4.67 52 BAYES_60 7470 5.83 5.26 6.05 53 MIME_QP_LONG_LINE 6765 4.46 4.77 4.33 54 HTML_IMAGE_RATIO_06 6579 2.97 4.64 2.30 55 XMStrtUSub 6359 4.63 4.48 4.69 56 TM2_M_URI_OPT_OUT 6263 2.39 4.41 1.58 57 BAYES_95 6057 2.91 4.27 2.36 58 XM_DIRTYINTL 5993 2.24 4.22 1.44 59 XM_SendGrid 5913 4.13 4.17 4.11 60 XMNumbers 5878 4.21 4.14 4.24 61 HTML_IMAGE_RATIO_08 5680 2.74 4.00 2.23 62 XM_UB50 5374 1.66 3.79 0.82 63 RELAYCOUNTRY_CA 5053 1.86 3.56 1.18 64 MIME_HTML_ONLY_MULTI 4846 1.90 3.41 1.29 65 DKIM_INVALID 4750 2.88 3.35 2.69 66 XM_CamelCaseFrm001 4693 2.17 3.31 1.72 67 T_XMDrugObfuBody_00 4668 1.78 3.29 1.17 68 XM_SPF_SoftFail 4365 2.08 3.08 1.69 69 XMDiploma_00 4234 1.67 2.98 1.14 70 XM_OfRef6 4198 1.92 2.96 1.50 71 T_TooManySym_01 4162 3.83 2.93 4.19 72 URI_HEX 3941 1.51 2.78 1.00 73 RCVD_IN_BL_SPAMCOP_NET 3774 1.19 2.66 0.60 74 RCVD_IN_RP_RNBL 3691 0.81 2.60 0.09 75 XM_URI_RBL 3343 0.77 2.36 0.14 76 XMSubMetaI_00 3318 1.28 2.34 0.86 77 T_XMHurry_00 3247 1.14 2.29 0.68 78 XM_H_Long_From02 3189 1.43 2.25 1.11 79 T_XMDrugObfuBody_08 2889 1.38 2.04 1.12 80 XMGenDplmaNmb 2859 1.08 2.01 0.71 81 XMBody_17 2774 0.75 1.95 0.28 82 T_REMOTE_IMAGE 2744 2.88 1.93 3.26 83 MultiRelay_Combo 2717 0.68 1.91 0.19 84 MultiRelay_CC 2717 0.68 1.91 0.19 85 RCVD_IN_IADB_LISTED 2711 3.21 1.91 3.72 86 XM_ProductURIs 2677 1.37 1.89 1.16 87 HTML_MIME_NO_HTML_TAG 2638 1.84 1.86 1.84 88 XMStockSpam_06 2538 1.39 1.79 1.23 89 T_MIXED_ES 2523 1.23 1.78 1.01 90 TR_LOTS_OF_MONEY3 2455 0.88 1.73 0.54 91 RCVD_IN_IADB_SPF 2449 2.84 1.73 3.28 92 SpammyFromTLD_01 2368 0.97 1.67 0.68 93 TM2_M_VERY_LONG_WORD 2329 0.98 1.64 0.72 94 RCVD_IN_IADB_SENDERID 2324 2.59 1.64 2.97 95 XM_DK_Undo_01 2312 1.51 1.63 1.46 96 URIBL_BLACK 2305 0.49 1.62 0.04 97 XMPhish30 2299 0.80 1.62 0.47 98 RCVD_IN_IADB_DK 2297 2.53 1.62 2.89 99 DIET_1 2208 0.69 1.56 0.35 100 TR_XM_RelayPhish 2114 0.81 1.49 0.54 101 XM_UB99 2112 0.43 1.49 0.01 102 XMBdyGiftCard01 2085 0.95 1.47 0.74 103 BAYES_40 2062 2.74 1.45 3.25 104 RELAYCOUNTRY_FR 2060 0.70 1.45 0.40 105 BAYES_00 2018 5.19 1.42 6.70 106 FSL_THIS_IS_ADV 1970 0.44 1.39 0.06 107 SUBJ_ALL_CAPS 1899 1.41 1.34 1.44 108 XM_B_COPY_HTML 1820 0.74 1.28 0.52 109 ALL_TRUSTED 1816 21.25 1.28 29.22 110 LongTLD 1794 0.43 1.26 0.10 111 TR_XM_DK_Bayes 1790 3.55 1.26 4.46 112 XM_XX_Yahoo 1786 0.42 1.26 0.08 113 TR_XM_DK_Bayes1 1780 3.42 1.25 4.28 114 XM_HighProb1 1758 0.38 1.24 0.03 115 URI_TRY_3LD 1724 0.81 1.21 0.64 116 XMBrknScrpt_02 1707 0.80 1.20 0.63 117 SpammyFromTLD_02 1705 0.55 1.20 0.28 118 XMSexyCombo_01 1696 1.35 1.19 1.41 119 XMSubMetaSxObfu_03 1685 0.99 1.19 0.92 120 XM_B_REG_HTML 1635 0.78 1.15 0.62 121 XM_UB999 1625 0.33 1.14 0.01 122 UNPARSEABLE_RELAY 1619 2.84 1.14 3.51 123 RELAYCOUNTRY_AT 1610 0.48 1.13 0.22 124 HTML_FONT_FACE_BAD 1608 0.61 1.13 0.40 125 MAILING_LIST_MULTI 1606 1.43 1.13 1.54 126 BAYES_20 1595 1.92 1.12 2.24 127 TR_XM_DK_Bayes2 1579 2.93 1.11 3.65 128 MPART_ALT_DIFF_COUNT 1533 0.52 1.08 0.30 129 URIBL_DBL_SPAM 1514 0.31 1.07 0.01 130 LONG_JUNK_URI 1483 0.38 1.04 0.12 131 XMPhish14 1477 0.58 1.04 0.40 132 RCVD_IN_IADB_VOUCHED 1466 2.59 1.03 3.21 133 FILL_THIS_FORM 1464 0.56 1.03 0.37 134 XM_H_PHPOS 1430 1.24 1.01 1.33 135 RELAYCOUNTRY_GB 1423 0.90 1.00 0.86 136 PLING_QUERY 1420 0.48 1.00 0.28 137 BOTNET_NORDNS 1413 0.38 1.00 0.13 138 RDNS_DYNAMIC 1375 0.58 0.97 0.43 139 SUBJ_DOLLARS 1363 0.40 0.96 0.18 140 TR_LOTS_OF_MONEY2 1308 0.40 0.92 0.19 141 T_MONEY_PERCENT 1308 0.40 0.92 0.19 142 BODY_ENHANCEMENT 1306 0.27 0.92 0.02 143 XMBody_78 1282 0.58 0.90 0.44 144 DATE_IN_PAST_03_06 1279 0.31 0.90 0.07 145 XMHTML_After_End 1274 0.43 0.90 0.24 146 T_Symld_Words_02 1269 0.54 0.89 0.40 147 XM_Body_Obfu01 1264 0.46 0.89 0.28 148 FILL_THIS_FORM_LONG 1252 0.47 0.88 0.30 149 RELAYCOUNTRY_PL 1243 0.26 0.88 0.01 150 XM_RXBody 1233 0.74 0.87 0.68 151 XMPhish11 1227 1.09 0.86 1.18 152 XM_S_JOY_D 1222 0.49 0.86 0.34 153 TR_MetaPhish_Combo_01 1212 0.83 0.85 0.81 154 URI_NOVOWEL 1191 0.53 0.84 0.41 155 XM_UB60 1189 0.31 0.84 0.10 156 XM_PDF 1152 3.20 0.81 4.15 157 T_FILL_THIS_FORM_SHORT 1121 0.60 0.79 0.52 158 RELAYCOUNTRY_DE 1114 0.41 0.78 0.26 159 FILL_THIS_FORM_LOAN 1113 0.41 0.78 0.26 160 XM_H_PHPMailer 1099 0.72 0.77 0.69 161 REMOVE_BEFORE_LINK 1083 0.36 0.76 0.21 162 TooManyTo_002 1083 1.94 0.76 2.40 163 XMHTMLBadTable_001 1080 0.50 0.76 0.39 164 TR_Symld_Words 1075 2.47 0.76 3.15 165 XM_UB80 1065 0.25 0.75 0.05 166 RCVD_IN_MSPIKE_WL 1058 1.12 0.75 1.27 167 RCVD_IN_MSPIKE_H3 1058 1.12 0.75 1.27 168 HTML_TAG_BALANCE_BODY 1056 0.52 0.74 0.43 169 XMMoneyMeta_00 1055 0.50 0.74 0.40 170 DATE_IN_PAST_06_12 1038 0.23 0.73 0.03 171 XMBSHREFv2 1037 0.31 0.73 0.14 172 HTML_FONT_SIZE_HUGE 960 0.38 0.68 0.27 173 XM_BadFromFormat 960 0.47 0.68 0.38 174 TooManyTo_003 923 1.28 0.65 1.53 175 BOUNCE_MESSAGE 912 8.68 0.64 11.89 176 ANY_BOUNCE_MESSAGE 912 8.68 0.64 11.89 177 XMSubMetaD_03 911 0.22 0.64 0.05 178 XMSlimDrugH 900 0.33 0.63 0.21 179 T_TooManySym_02 884 1.28 0.62 1.54 180 XMClaimOffer 873 0.24 0.62 0.09 181 XMSubMetaI_01 865 0.20 0.61 0.04 182 DKIM_ADSP_CUSTOM_MED 856 0.90 0.60 1.02 183 BAYES_05 855 1.17 0.60 1.39 184 RELAYCOUNTRY_AU 824 0.43 0.58 0.36 185 XMSubMetaSSx_00 810 0.23 0.57 0.09 186 RELAYCOUNTRY_CN 806 0.25 0.57 0.13 187 XM_B_TRADE_HTML 766 0.50 0.54 0.49 188 TooManyTo_004 765 0.93 0.54 1.08 189 RCVD_IN_PSBL 759 0.26 0.53 0.15 190 TR_Caps_n_Bayes_99 743 0.23 0.52 0.12 191 INVALID_DATE 729 0.22 0.51 0.10 192 XM_GoogleGroups 722 0.78 0.51 0.89 193 NML_ADSP_CUSTOM_MED 714 0.72 0.50 0.80 194 XMSexyCombo_04 713 0.59 0.50 0.63 195 PP_MIME_FAKE_ASCII_TEXT 711 0.22 0.50 0.10 196 LOW_PRICE 687 0.27 0.48 0.19 197 TR_Mismatch_TLD_02 679 0.16 0.48 0.04 198 XMCapTrack 674 0.77 0.47 0.88 199 LONG_JUNK_URI2 674 0.17 0.47 0.05 200 NO_DNS_FOR_FROM 654 0.45 0.46 0.44 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 270491 81.78 96.13 76.06 2 DCC_CHECK_NEGATIVE 235418 52.27 17.37 66.20 3 DKIM_SIGNED 218790 69.51 89.52 61.52 4 BAYES_50 216522 52.59 31.80 60.88 5 XM_DK_Pass 215105 68.16 87.39 60.49 6 DKIM_VALID 209217 66.63 86.17 58.83 7 DKIM_VALID_AU 154445 50.14 66.94 43.43 8 XMListUnsubscribeExists 142478 50.98 78.33 40.06 9 XM_H_QuotedFrom 115634 38.58 53.78 32.52 10 DCC_CHECK 113706 45.87 80.68 31.97 11 ALL_TRUSTED 103907 21.25 1.28 29.22 12 T_TM2_M_HEADER_IN_MSG 97655 25.49 20.57 27.46 13 HTML_FONT_LOW_CONTRAST 79661 27.05 38.72 22.40 14 DKIM_VALID_EF 73185 20.48 20.22 20.58 15 FVGT_m_MULTI_ODD 65731 21.58 29.35 18.48 16 LOC_TINY_FONT_1 64738 23.12 35.42 18.20 17 XMSubLong 64164 19.77 24.10 18.04 18 MIME_HTML_ONLY 61466 20.22 27.59 17.28 19 MultiRelay 54438 15.07 14.47 15.31 20 XM_DK_Undo_02 48816 24.97 53.14 13.73 21 BAYES_99 46801 22.89 47.27 13.16 22 ANY_BOUNCE_MESSAGE 42289 8.68 0.64 11.89 23 BOUNCE_MESSAGE 42277 8.68 0.64 11.89 24 BAYES_999 41740 20.13 41.16 11.74 25 XM_DKIMWhitelistDomains 36834 7.42 0.07 10.36 26 XM_Multi_Part_URI 36363 12.33 17.61 10.22 27 RCVD_IN_RP_SAFE 34999 8.96 6.77 9.84 28 XM_Body_Dirty_Words 33717 12.91 21.51 9.48 29 T_KAM_HTML_FONT_INVALID 33705 11.45 16.41 9.48 30 RCVD_IN_RP_CERTIFIED 30782 7.82 5.71 8.66 31 TooManyTo_001 27242 7.47 7.00 7.66 32 T_XMDrugObfuBody_14 26504 8.40 10.78 7.45 33 XM_Evil_Numbers_Gen 25553 9.72 16.08 7.19 34 LotsOfNums_01 24207 7.82 10.35 6.81 35 BAYES_00 23817 5.19 1.42 6.70 36 HTML_IMAGE_RATIO_02 22277 9.39 17.21 6.26 37 TR_DCC_Bayes_99 21604 14.98 37.29 6.07 38 BAYES_60 21530 5.83 5.26 6.05 39 FSL_BULK_SIG 19919 5.90 6.65 5.60 40 LOTS_OF_MONEY 19456 6.62 9.50 5.47 41 IN_ZIMBRA_NJ_WHITELIST 18985 3.83 0.05 5.34 42 XM_H_Long_From01 17819 5.77 7.67 5.01 43 XMStrtUSub 16685 4.63 4.48 4.69 44 RCVD_IN_MSPIKE_H2 16600 4.96 5.69 4.67 45 TR_XM_DK_Bayes 15876 3.55 1.26 4.46 46 HTML_IMAGE_RATIO_04 15603 6.33 11.20 4.39 47 RELAYCOUNTRY_META 15533 7.22 14.35 4.37 48 MIME_QP_LONG_LINE 15414 4.46 4.77 4.33 49 XM_B_Phish_Phrases 15372 5.69 9.12 4.32 50 TR_XM_DK_Bayes1 15225 3.42 1.25 4.28 51 XMNumbers 15078 4.21 4.14 4.24 52 T_TooManySym_01 14887 3.83 2.93 4.19 53 BOTNET_IPINHOSTNAME 14808 7.10 14.46 4.16 54 XM_PDF 14773 3.20 0.81 4.15 55 XM_SendGrid 14615 4.13 4.17 4.11 56 XMSubMetaSx_00 14262 4.77 6.69 4.01 57 BAYES_80 14085 4.77 6.81 3.96 58 TR_XM_DocInvoice 13690 4.87 7.43 3.85 59 RCVD_IN_IADB_LISTED 13236 3.21 1.91 3.72 60 TR_XM_DK_Bayes2 12990 2.93 1.11 3.65 61 XM_UncommonTLD01 12585 4.50 6.92 3.54 62 UNPARSEABLE_RELAY 12493 2.84 1.14 3.51 63 RCVD_IN_IADB_SPF 11677 2.84 1.73 3.28 64 T_REMOTE_IMAGE 11576 2.88 1.93 3.26 65 BAYES_40 11549 2.74 1.45 3.25 66 RCVD_IN_IADB_VOUCHED 11426 2.59 1.03 3.21 67 TR_Symld_Words 11215 2.47 0.76 3.15 68 MPART_ALT_DIFF 10722 4.48 8.17 3.01 69 RCVD_IN_IADB_SENDERID 10546 2.59 1.64 2.97 70 FROM_EXCESS_BASE64 10422 3.94 6.47 2.93 71 RCVD_IN_IADB_DK 10276 2.53 1.62 2.89 72 XMSexyCombo_05 9894 4.86 10.06 2.78 73 DKIM_INVALID 9573 2.88 3.35 2.69 74 URIBL_RHS_DOB 9288 4.74 10.09 2.61 75 TooManyTo_002 8550 1.94 0.76 2.40 76 BAYES_95 8401 2.91 4.27 2.36 77 IN_HORDE_ADDRESS_BOOK 8236 1.68 0.09 2.32 78 HTML_IMAGE_RATIO_06 8187 2.97 4.64 2.30 79 BAYES_20 7966 1.92 1.12 2.24 80 HTML_IMAGE_RATIO_08 7936 2.74 4.00 2.23 81 TVD_RCVD_IP 7564 1.58 0.22 2.13 82 MIME_HTML_MOSTLY 7312 3.10 5.73 2.06 83 INVALID_MSGID 6582 1.38 0.21 1.85 84 HTML_MIME_NO_HTML_TAG 6541 1.84 1.86 1.84 85 HELO_NODOT 6286 1.33 0.23 1.77 86 TO_MALFORMED 6226 1.25 0.00 1.75 87 XM_CamelCaseFrm001 6110 2.17 3.31 1.72 88 XM_SPF_SoftFail 6007 2.08 3.08 1.69 89 TM2_M_URI_OPT_OUT 5628 2.39 4.41 1.58 90 MAILING_LIST_MULTI 5489 1.43 1.13 1.54 91 T_TooManySym_02 5464 1.28 0.62 1.54 92 TooManyTo_003 5430 1.28 0.65 1.53 93 XM_OfRef6 5340 1.92 2.96 1.50 94 XM_DK_Undo_01 5180 1.51 1.63 1.46 95 XM_DIRTYINTL 5134 2.24 4.22 1.44 96 USER_IN_DEF_DKIM_WL 5128 1.04 0.04 1.44 97 SUBJ_ALL_CAPS 5117 1.41 1.34 1.44 98 UNTRUSTED_Relay 5036 3.37 8.26 1.42 99 XMSexyCombo_01 5010 1.35 1.19 1.41 100 BAYES_05 4960 1.17 0.60 1.39 101 XM_H_PHPOS 4723 1.24 1.01 1.33 102 MIME_HTML_ONLY_MULTI 4584 1.90 3.41 1.29 103 RCVD_IN_MSPIKE_WL 4529 1.12 0.75 1.27 104 RCVD_IN_MSPIKE_H3 4529 1.12 0.75 1.27 105 XMStockSpam_06 4381 1.39 1.79 1.23 106 RELAYCOUNTRY_CA 4189 1.86 3.56 1.18 107 XMPhish11 4186 1.09 0.86 1.18 108 T_XMDrugObfuBody_00 4172 1.78 3.29 1.17 109 XM_ProductURIs 4127 1.37 1.89 1.16 110 XMDiploma_00 4061 1.67 2.98 1.14 111 RCVD_IN_IADB_OPTIN 4049 0.93 0.42 1.14 112 T_XMDrugObfuBody_08 3989 1.38 2.04 1.12 113 XM_H_Long_From02 3932 1.43 2.25 1.11 114 TooManyTo_004 3844 0.93 0.54 1.08 115 DKIM_ADSP_CUSTOM_MED 3612 0.90 0.60 1.02 116 T_MIXED_ES 3607 1.23 1.78 1.01 117 URI_HEX 3554 1.51 2.78 1.00 118 BOTNET 3503 4.34 12.73 0.99 119 XMGappySubj_01 3480 0.82 0.42 0.98 120 XMSubMetaSxObfu_03 3257 0.99 1.19 0.92 121 XM_GoogleGroups 3171 0.78 0.51 0.89 122 XMCapTrack 3139 0.77 0.47 0.88 123 XMSubMetaI_00 3070 1.28 2.34 0.86 124 RELAYCOUNTRY_GB 3053 0.90 1.00 0.86 125 XM_UB50 2908 1.66 3.79 0.82 126 TR_MetaPhish_Combo_01 2893 0.83 0.85 0.81 127 NML_ADSP_CUSTOM_MED 2845 0.72 0.50 0.80 128 USER_IN_WHITELIST 2772 0.56 0.00 0.78 129 XMSolicitRefs_0 2766 0.65 0.33 0.78 130 TooManyTo_005 2741 0.68 0.46 0.77 131 XM_ShortIntro_01 2664 0.62 0.30 0.75 132 XMBdyGiftCard01 2633 0.95 1.47 0.74 133 TM2_M_VERY_LONG_WORD 2564 0.98 1.64 0.72 134 XMGenDplmaNmb 2536 1.08 2.01 0.71 135 XM_H_PHPMailer 2467 0.72 0.77 0.69 136 SpammyFromTLD_01 2436 0.97 1.67 0.68 137 XM_RXBody 2426 0.74 0.87 0.68 138 T_XMHurry_00 2401 1.14 2.29 0.68 139 URI_TRY_3LD 2291 0.81 1.21 0.64 140 XMBrknScrpt_02 2253 0.80 1.20 0.63 141 T_TooManySym_03 2241 0.49 0.14 0.63 142 XMBody_95 2241 0.49 0.13 0.63 143 XMSexyCombo_04 2227 0.59 0.50 0.63 144 XM_B_REG_HTML 2222 0.78 1.15 0.62 145 XMGappySubj_02 2193 0.48 0.13 0.62 146 RCVD_IN_BL_SPAMCOP_NET 2143 1.19 2.66 0.60 147 TR_XM_RelayPhish 1921 0.81 1.49 0.54 148 TR_LOTS_OF_MONEY3 1915 0.88 1.73 0.54 149 XMRcvdHeader_15 1915 0.38 0.00 0.54 150 T_FILL_THIS_FORM_SHORT 1858 0.60 0.79 0.52 151 XM_B_COPY_HTML 1846 0.74 1.28 0.52 152 XM_B_TRADE_HTML 1731 0.50 0.54 0.49 153 XMSubMetaSxObfu_02 1730 0.43 0.28 0.49 154 SHORT_HELO_AND_INLINE_IMAGE 1701 0.36 0.05 0.48 155 XMPhish30 1671 0.80 1.62 0.47 156 DKIM_ADSP_NXDOMAIN 1634 0.45 0.42 0.46 157 TM2_M_BODY_EMPTY 1583 0.42 0.37 0.45 158 XMBody_78 1580 0.58 0.90 0.44 159 NO_DNS_FOR_FROM 1578 0.45 0.46 0.44 160 XM_H_PHPOS_M 1540 0.43 0.41 0.43 161 HTML_TAG_BALANCE_BODY 1527 0.52 0.74 0.43 162 XMNoVowels 1517 0.42 0.41 0.43 163 RDNS_DYNAMIC 1514 0.58 0.97 0.43 164 XMSUPPORT 1510 0.30 0.00 0.42 165 URI_NOVOWEL 1466 0.53 0.84 0.41 166 RCVD_IN_IADB_DOPTIN 1458 0.31 0.07 0.41 167 XM_H_SpoofStaff4 1456 0.31 0.06 0.41 168 T_OBFU_PDF_ATTACH 1453 0.34 0.18 0.41 169 HTML_FONT_FACE_BAD 1436 0.61 1.13 0.40 170 XMPhish14 1432 0.58 1.04 0.40 171 RCVD_IN_SORBS_DUL 1429 0.32 0.10 0.40 172 T_Symld_Words_02 1418 0.54 0.89 0.40 173 XMMoneyMeta_00 1417 0.50 0.74 0.40 174 RELAYCOUNTRY_FR 1416 0.70 1.45 0.40 175 XMHTMLBadTable_001 1396 0.50 0.76 0.39 176 XM_BadFromFormat 1363 0.47 0.68 0.38 177 MISSING_HEADERS 1352 0.35 0.28 0.38 178 FILL_THIS_FORM 1326 0.56 1.03 0.37 179 RELAYCOUNTRY_AU 1291 0.43 0.58 0.36 180 HTML_IMAGE_ONLY_32 1283 0.38 0.43 0.36 181 XMSubNoVowel 1277 0.38 0.44 0.36 182 FORGED_GMAIL_RCVD 1269 0.37 0.39 0.36 183 DIET_1 1249 0.69 1.56 0.35 184 HTML_IMAGE_ONLY_28 1227 0.37 0.44 0.35 185 XM_S_JOY_D 1218 0.49 0.86 0.34 186 HTML_IMAGE_ONLY_24 1159 0.33 0.33 0.33 187 T_TooManySym_04 1081 0.22 0.02 0.30 188 MPART_ALT_DIFF_COUNT 1077 0.52 1.08 0.30 189 XMSubEmpty 1076 0.26 0.15 0.30 190 FILL_THIS_FORM_LONG 1068 0.47 0.88 0.30 191 MSGID_FROM_MTA_HEADER 1067 0.28 0.21 0.30 192 HTML_IMAGE_ONLY_20 1050 0.33 0.42 0.30 193 XMDateMe_00 1030 0.26 0.20 0.29 194 T_HTML_TAG_BALANCE_CENTER 1018 0.32 0.42 0.29 195 SpammyFromTLD_02 1011 0.55 1.20 0.28 196 XM_Body_Obfu01 1009 0.46 0.89 0.28 197 PLING_QUERY 986 0.48 1.00 0.28 198 XMBody_17 980 0.75 1.95 0.28 199 TVD_SPACE_RATIO 972 0.23 0.12 0.27 200 HTML_FONT_SIZE_HUGE 946 0.38 0.68 0.27 ----------------------------------------------------------------------