Email: 522716 Autolearn: 0 AvgScore: 3.05 AvgScanTime: 2.13 sec Spam: 156618 Autolearn: 0 AvgScore: 12.46 AvgScanTime: 2.52 sec Ham: 366098 Autolearn: 0 AvgScore: -0.98 AvgScanTime: 1.96 sec Time Spent Running SA: 309.26 hours Time Spent Processing Spam: 109.51 hours Time Spent Processing Ham: 199.76 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 150036 88.58 95.80 85.49 2 DKIM_SIGNED 131160 73.11 83.75 68.55 3 DCC_CHECK 127214 47.56 81.23 33.15 4 XM_DK_Pass 127098 71.44 81.15 67.28 5 DKIM_VALID 125198 69.58 79.94 65.15 6 XMListUnsubscribeExists 112344 51.00 71.73 42.13 7 DKIM_VALID_AU 95870 50.27 61.21 45.59 8 XM_H_QuotedFrom 87566 39.85 55.91 32.98 9 XM_DK_Undo_02 77934 24.05 49.76 13.06 10 BAYES_99 70903 22.05 45.27 12.11 11 BAYES_999 60551 19.11 38.66 10.75 12 TR_DCC_Bayes_99 57130 14.75 36.48 5.45 13 HTML_FONT_LOW_CONTRAST 56008 26.46 35.76 22.49 14 LOC_TINY_FONT_1 53515 23.19 34.17 18.49 15 BAYES_50 50166 49.90 32.03 57.55 16 MIME_HTML_ONLY 44746 21.43 28.57 18.38 17 FVGT_m_MULTI_ODD 43797 22.10 27.96 19.59 18 XMSubLong 38493 21.56 24.58 20.26 19 XM_Body_Dirty_Words 33396 13.43 21.32 10.06 20 T_TM2_M_HEADER_IN_MSG 32474 29.85 20.73 33.75 21 DKIM_VALID_EF 32336 22.47 20.65 23.25 22 T_KAM_HTML_FONT_INVALID 30469 15.44 19.45 13.72 23 XM_Multi_Part_URI 27277 12.85 17.42 10.90 24 DCC_CHECK_NEGATIVE 25965 50.09 16.58 64.43 25 HTML_IMAGE_RATIO_02 25809 9.12 16.48 5.97 26 MultiRelay 24610 18.90 15.71 20.26 27 RELAYCOUNTRY_META 23600 8.19 15.07 5.25 28 XM_Evil_Numbers_Gen 22278 9.22 14.22 7.08 29 BOTNET 19804 4.56 12.64 1.10 30 BOTNET_IPINHOSTNAME 19791 6.64 12.64 4.08 31 T_XMDrugObfuBody_14 18477 9.06 11.80 7.89 32 LOTS_OF_MONEY 17455 9.03 11.14 8.12 33 FSL_BULK_SIG 16746 8.36 10.69 7.37 34 XMSubMetaSx_00 15066 5.76 9.62 4.11 35 LotsOfNums_01 14926 8.23 9.53 7.67 36 XMSexyCombo_05 14913 4.79 9.52 2.77 37 UNTRUSTED_Relay 13985 3.65 8.93 1.39 38 MPART_ALT_DIFF 13491 5.28 8.61 3.86 39 XM_B_Phish_Phrases 13416 5.60 8.57 4.33 40 HTML_IMAGE_RATIO_04 12526 5.44 8.00 4.34 41 BAYES_80 12021 5.10 7.68 4.00 42 XM_H_Long_From01 11039 5.86 7.05 5.35 43 TooManyTo_001 10596 8.86 6.77 9.76 44 BAYES_60 10203 6.47 6.51 6.45 45 TR_XM_DocInvoice 9981 4.86 6.37 4.21 46 RCVD_IN_RP_SAFE 9491 7.93 6.06 8.73 47 FROM_EXCESS_BASE64 9408 3.77 6.01 2.82 48 XM_UncommonTLD01 8891 4.41 5.68 3.87 49 MIME_QP_LONG_LINE 8128 5.48 5.19 5.60 50 MIME_HTML_MOSTLY 7767 2.79 4.96 1.86 51 RCVD_IN_RP_CERTIFIED 7586 7.17 4.84 8.16 52 XMStrtUSub 7401 4.58 4.73 4.52 53 BAYES_95 7222 3.22 4.61 2.63 54 ALL_TRUSTED 7211 14.35 4.60 18.52 55 HTML_IMAGE_RATIO_06 7040 3.53 4.50 3.12 56 XMNumbers 6886 3.52 4.40 3.15 57 HTML_IMAGE_RATIO_08 6525 2.86 4.17 2.31 58 RCVD_IN_MSPIKE_H2 6400 4.17 4.09 4.21 59 XM_SendGrid 6353 5.00 4.06 5.41 60 TM2_M_URI_OPT_OUT 6298 2.32 4.02 1.60 61 XM_UB50 6052 1.83 3.86 0.95 62 DKIM_INVALID 5962 3.52 3.81 3.40 63 XM_DIRTYINTL 5882 2.37 3.76 1.77 64 XM_H_Long_From02 5758 1.75 3.68 0.93 65 RCVD_IN_BL_SPAMCOP_NET 5747 1.66 3.67 0.81 66 XM_SPF_SoftFail 5597 2.74 3.57 2.38 67 RELAYCOUNTRY_CA 5507 1.99 3.52 1.33 68 MIME_HTML_ONLY_MULTI 5353 2.78 3.42 2.51 69 XMHTML_After_End 5084 1.36 3.25 0.55 70 XMSexyCombo_01 4835 1.58 3.09 0.93 71 XM_CamelCaseFrm001 4709 2.20 3.01 1.86 72 URI_HEX 4644 1.66 2.97 1.11 73 T_REMOTE_IMAGE 4422 4.24 2.82 4.85 74 RCVD_IN_RP_RNBL 4237 0.84 2.71 0.04 75 XM_URI_RBL 4052 0.86 2.59 0.12 76 XMDiploma_00 4041 1.67 2.58 1.29 77 T_XMDrugObfuBody_08 3926 1.69 2.51 1.34 78 MultiRelay_CC 3919 0.90 2.50 0.21 79 MultiRelay_Combo 3919 0.90 2.50 0.21 80 T_TooManySym_01 3847 3.86 2.46 4.45 81 RCVD_IN_PSBL 3709 0.80 2.37 0.14 82 RCVD_IN_IADB_LISTED 3656 4.97 2.33 6.10 83 XM_OfRef6 3626 1.93 2.32 1.77 84 HTML_MIME_NO_HTML_TAG 3548 2.32 2.27 2.35 85 XM_DK_Undo_01 3503 2.20 2.24 2.18 86 TM2_M_VERY_LONG_WORD 3484 1.19 2.22 0.75 87 BOTNET_NORDNS 3284 0.66 2.10 0.04 88 RCVD_IN_IADB_SPF 3246 4.33 2.07 5.30 89 RCVD_IN_IADB_SENDERID 3068 3.88 1.96 4.70 90 SUBJ_ALL_CAPS 3049 1.87 1.95 1.84 91 XMSubMetaI_00 3019 1.23 1.93 0.93 92 RCVD_IN_IADB_DK 3011 3.77 1.92 4.55 93 DIET_1 2954 0.80 1.89 0.34 94 XM_iOS_Forged_Message 2941 0.58 1.88 0.02 95 SpammyFromTLD_01 2800 1.25 1.79 1.02 96 XM_UB99 2598 0.50 1.66 0.01 97 RELAYCOUNTRY_FR 2528 0.67 1.61 0.27 98 XMSubMetaSxObfu_03 2444 0.76 1.56 0.41 99 URIBL_BLACK 2427 0.49 1.55 0.03 100 TR_MetaPhish_Combo_01 2407 1.03 1.54 0.82 101 XM_ProductURIs 2391 1.21 1.53 1.08 102 DKIM_ADSP_CUSTOM_MED 2347 1.24 1.50 1.13 103 MAILING_LIST_MULTI 2324 2.33 1.48 2.69 104 SUBJ_DOLLARS 2247 0.59 1.43 0.23 105 TR_XM_RelayPhish 2233 0.77 1.43 0.50 106 T_XMHurry_00 2217 0.74 1.42 0.45 107 XMPhish11 2173 1.26 1.39 1.20 108 UNPARSEABLE_RELAY 2169 2.78 1.38 3.38 109 XMPhish30 2161 0.76 1.38 0.50 110 NML_ADSP_CUSTOM_MED 2122 0.99 1.35 0.84 111 FSL_THIS_IS_ADV 2111 0.43 1.35 0.04 112 T_FILL_THIS_FORM_SHORT 2101 1.06 1.34 0.94 113 XM_HighProb1 2061 0.41 1.32 0.02 114 BAYES_00 2058 6.14 1.31 8.20 115 URIBL_DBL_SPAM 2051 0.40 1.31 0.02 116 XM_UB999 2048 0.40 1.31 0.01 117 T_XMDrugObfuBody_00 2042 0.96 1.30 0.82 118 XM_ShortIntro_01 2024 1.31 1.29 1.31 119 XMBody_17 2021 0.66 1.29 0.39 120 XMGenDplmaNmb 2018 0.99 1.29 0.86 121 XMBody_78 2008 0.83 1.28 0.63 122 URI_TRY_3LD 2002 0.97 1.28 0.83 123 XM_B_REG_HTML 1959 0.73 1.25 0.51 124 XM_RXBody 1955 0.55 1.25 0.25 125 XMStockSpam_06 1902 1.14 1.21 1.11 126 PHOTO_EDITING_DIRECT 1893 0.36 1.21 0.00 127 BAYES_40 1843 3.30 1.18 4.20 128 SpammyFromTLD_02 1810 0.64 1.16 0.42 129 XMBrknScrpt_02 1795 0.75 1.15 0.58 130 TR_Symld_Words 1793 1.93 1.14 2.26 131 TooManyTo_002 1738 2.68 1.11 3.36 132 RELAYCOUNTRY_CN 1703 0.37 1.09 0.07 133 RELAYCOUNTRY_GB 1692 1.09 1.08 1.09 134 XM_UB60 1672 0.36 1.07 0.06 135 RELAYCOUNTRY_DE 1664 0.83 1.06 0.73 136 FORGED_GMAIL_RCVD 1661 0.61 1.06 0.41 137 XMHTMLBadTable_001 1648 0.58 1.05 0.38 138 XM_Body_Obfu01 1617 0.51 1.03 0.28 139 BODY_ENHANCEMENT 1598 0.32 1.02 0.01 140 TR_XM_DK_Bayes 1590 3.88 1.02 5.11 141 ANY_BOUNCE_MESSAGE 1576 2.28 1.01 2.83 142 BOUNCE_MESSAGE 1576 2.28 1.01 2.83 143 TR_XM_DK_Bayes1 1574 3.76 1.00 4.93 144 XMBdyGiftCard01 1572 0.78 1.00 0.68 145 T_MONEY_PERCENT 1564 0.44 1.00 0.21 146 TR_LOTS_OF_MONEY2 1564 0.44 1.00 0.21 147 T_Symld_Words_02 1564 0.68 1.00 0.55 148 RCVD_IN_IADB_VOUCHED 1517 3.14 0.97 4.07 149 MPART_ALT_DIFF_COUNT 1487 0.45 0.95 0.24 150 TooManyTo_003 1486 1.87 0.95 2.27 151 XMPhish14 1485 0.53 0.95 0.35 152 RELAYCOUNTRY_AT 1479 0.37 0.94 0.13 153 LONG_JUNK_URI 1475 0.35 0.94 0.10 154 REMOVE_BEFORE_LINK 1475 0.46 0.94 0.26 155 XMSexyCombo_04 1402 0.34 0.90 0.10 156 XMSubMetaSxObfu_02 1397 0.53 0.89 0.37 157 BAYES_20 1388 2.35 0.89 2.98 158 TR_XM_DK_Bayes2 1387 2.98 0.89 3.87 159 HTTPS_HTTP_MISMATCH 1366 0.56 0.87 0.43 160 T_HTML_TAG_BALANCE_CENTER 1340 0.36 0.86 0.15 161 XM_UB80 1331 0.27 0.85 0.02 162 HTML_IMAGE_ONLY_12 1331 0.41 0.85 0.22 163 HTML_IMAGE_ONLY_28 1259 0.56 0.80 0.46 164 HTML_FONT_SIZE_HUGE 1250 0.33 0.80 0.13 165 XM_H_PHPOS 1248 1.23 0.80 1.41 166 XM_BadFromFormat 1229 0.39 0.78 0.22 167 DATE_IN_PAST_24_48 1220 0.24 0.78 0.01 168 TRACKER_ID 1208 0.35 0.77 0.17 169 TooManyTo_004 1207 1.37 0.77 1.62 170 URI_NOVOWEL 1206 0.47 0.77 0.34 171 XMMoneyMeta_00 1201 0.68 0.77 0.64 172 RCVD_IN_MSPIKE_H3 1196 1.46 0.76 1.76 173 RCVD_IN_MSPIKE_WL 1196 1.46 0.76 1.76 174 XMClaimOffer 1192 0.30 0.76 0.11 175 RELAYCOUNTRY_AU 1184 0.55 0.76 0.46 176 LONG_JUNK_URI3 1167 0.28 0.75 0.08 177 XMSubMetaSSx_00 1157 0.31 0.74 0.13 178 XM_B_COPY_HTML 1141 0.55 0.73 0.48 179 XM_PDF 1134 3.80 0.72 5.11 180 MISSING_HEADERS 1091 0.62 0.70 0.58 181 HTML_FONT_FACE_BAD 1062 1.51 0.68 1.87 182 RDNS_DYNAMIC 1033 0.48 0.66 0.41 183 BASE64_LENGTH_79_INF 1033 0.28 0.66 0.11 184 XMSlimDrugH 1017 0.40 0.65 0.29 185 XMGappySubj_01 998 0.97 0.64 1.11 186 HTML_TAG_BALANCE_BODY 997 0.53 0.64 0.48 187 PLING_QUERY 988 0.42 0.63 0.33 188 XMLngstWrd_00 922 0.38 0.59 0.29 189 SERGIO_SUBJECT_PORN014 921 0.19 0.59 0.01 190 XMGppyBdWords 920 0.32 0.59 0.21 191 XM_H_Long_From03 913 0.28 0.58 0.15 192 XM_H_PHPMailer 908 0.70 0.58 0.75 193 TR_Mismatch_TLD_02 903 0.22 0.58 0.06 194 XMLongAddy 902 0.27 0.58 0.14 195 XM_OfRef7 902 0.32 0.58 0.21 196 TM2_M_A_HREF_HREF 898 0.57 0.57 0.56 197 HTML_IMAGE_ONLY_32 897 0.53 0.57 0.51 198 T_TooManySym_02 891 1.36 0.57 1.70 199 XM_UB95 884 0.18 0.56 0.01 200 XMLngstWrd_01 867 0.35 0.55 0.26 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 312992 88.58 95.80 85.49 2 DKIM_SIGNED 250977 73.11 83.75 68.55 3 XM_DK_Pass 246312 71.44 81.15 67.28 4 DKIM_VALID 238520 69.58 79.94 65.15 5 DCC_CHECK_NEGATIVE 235871 50.09 16.58 64.43 6 BAYES_50 210677 49.90 32.03 57.55 7 DKIM_VALID_AU 166892 50.27 61.21 45.59 8 XMListUnsubscribeExists 154239 51.00 71.73 42.13 9 T_TM2_M_HEADER_IN_MSG 123565 29.85 20.73 33.75 10 DCC_CHECK 121370 47.56 81.23 33.15 11 XM_H_QuotedFrom 120739 39.85 55.91 32.98 12 DKIM_VALID_EF 85115 22.47 20.65 23.25 13 HTML_FONT_LOW_CONTRAST 82328 26.46 35.76 22.49 14 XMSubLong 74187 21.56 24.58 20.26 15 MultiRelay 74169 18.90 15.71 20.26 16 FVGT_m_MULTI_ODD 71709 22.10 27.96 19.59 17 ALL_TRUSTED 67787 14.35 4.60 18.52 18 LOC_TINY_FONT_1 67693 23.19 34.17 18.49 19 MIME_HTML_ONLY 67290 21.43 28.57 18.38 20 T_KAM_HTML_FONT_INVALID 50218 15.44 19.45 13.72 21 XM_DK_Undo_02 47801 24.05 49.76 13.06 22 BAYES_99 44339 22.05 45.27 12.11 23 XM_Multi_Part_URI 39893 12.85 17.42 10.90 24 BAYES_999 39355 19.11 38.66 10.75 25 XM_Body_Dirty_Words 36823 13.43 21.32 10.06 26 TooManyTo_001 35732 8.86 6.77 9.76 27 XM_DKIMWhitelistDomains 33515 6.42 0.02 9.15 28 RCVD_IN_RP_SAFE 31977 7.93 6.06 8.73 29 BAYES_00 30024 6.14 1.31 8.20 30 RCVD_IN_RP_CERTIFIED 29867 7.17 4.84 8.16 31 LOTS_OF_MONEY 29729 9.03 11.14 8.12 32 T_XMDrugObfuBody_14 28867 9.06 11.80 7.89 33 LotsOfNums_01 28079 8.23 9.53 7.67 34 IN_ZIMBRA_NJ_WHITELIST 27114 5.20 0.04 7.41 35 FSL_BULK_SIG 26978 8.36 10.69 7.37 36 XM_Evil_Numbers_Gen 25908 9.22 14.22 7.08 37 BAYES_60 23615 6.47 6.51 6.45 38 RCVD_IN_IADB_LISTED 22347 4.97 2.33 6.10 39 HTML_IMAGE_RATIO_02 21860 9.12 16.48 5.97 40 MIME_QP_LONG_LINE 20505 5.48 5.19 5.60 41 TR_DCC_Bayes_99 19946 14.75 36.48 5.45 42 XM_SendGrid 19807 5.00 4.06 5.41 43 XM_H_Long_From01 19588 5.86 7.05 5.35 44 RCVD_IN_IADB_SPF 19399 4.33 2.07 5.30 45 RELAYCOUNTRY_META 19210 8.19 15.07 5.25 46 XM_PDF 18724 3.80 0.72 5.11 47 TR_XM_DK_Bayes 18702 3.88 1.02 5.11 48 TR_XM_DK_Bayes1 18064 3.76 1.00 4.93 49 T_REMOTE_IMAGE 17738 4.24 2.82 4.85 50 RCVD_IN_IADB_SENDERID 17200 3.88 1.96 4.70 51 RCVD_IN_IADB_DK 16675 3.77 1.92 4.55 52 XMStrtUSub 16546 4.58 4.73 4.52 53 T_TooManySym_01 16306 3.86 2.46 4.45 54 HTML_IMAGE_RATIO_04 15900 5.44 8.00 4.34 55 XM_B_Phish_Phrases 15856 5.60 8.57 4.33 56 TR_XM_DocInvoice 15424 4.86 6.37 4.21 57 RCVD_IN_MSPIKE_H2 15415 4.17 4.09 4.21 58 BAYES_40 15391 3.30 1.18 4.20 59 XMSubMetaSx_00 15029 5.76 9.62 4.11 60 BOTNET_IPINHOSTNAME 14940 6.64 12.64 4.08 61 RCVD_IN_IADB_VOUCHED 14883 3.14 0.97 4.07 62 BAYES_80 14658 5.10 7.68 4.00 63 TR_XM_DK_Bayes2 14181 2.98 0.89 3.87 64 XM_UncommonTLD01 14176 4.41 5.68 3.87 65 MPART_ALT_DIFF 14117 5.28 8.61 3.86 66 DKIM_INVALID 12457 3.52 3.81 3.40 67 UNPARSEABLE_RELAY 12378 2.78 1.38 3.38 68 TooManyTo_002 12283 2.68 1.11 3.36 69 XMNumbers 11538 3.52 4.40 3.15 70 HTML_IMAGE_RATIO_06 11438 3.53 4.50 3.12 71 BAYES_20 10913 2.35 0.89 2.98 72 TVD_RCVD_IP 10754 2.12 0.21 2.94 73 ANY_BOUNCE_MESSAGE 10357 2.28 1.01 2.83 74 BOUNCE_MESSAGE 10356 2.28 1.01 2.83 75 FROM_EXCESS_BASE64 10316 3.77 6.01 2.82 76 XMSexyCombo_05 10128 4.79 9.52 2.77 77 HELO_NODOT 10060 2.02 0.31 2.75 78 MAILING_LIST_MULTI 9835 2.33 1.48 2.69 79 BAYES_95 9619 3.22 4.61 2.63 80 MIME_HTML_ONLY_MULTI 9203 2.78 3.42 2.51 81 IN_HORDE_ADDRESS_BOOK 9017 1.74 0.06 2.46 82 XM_SPF_SoftFail 8711 2.74 3.57 2.38 83 HTML_MIME_NO_HTML_TAG 8605 2.32 2.27 2.35 84 HTML_IMAGE_RATIO_08 8447 2.86 4.17 2.31 85 TooManyTo_003 8304 1.87 0.95 2.27 86 TR_Symld_Words 8278 1.93 1.14 2.26 87 XM_DK_Undo_01 7998 2.20 2.24 2.18 88 TO_MALFORMED 7493 1.44 0.01 2.05 89 RCVD_IN_IADB_OPTIN 6996 1.50 0.54 1.91 90 INVALID_MSGID 6974 1.40 0.22 1.90 91 BAYES_05 6862 1.47 0.52 1.87 92 HTML_FONT_FACE_BAD 6849 1.51 0.68 1.87 93 MIME_HTML_MOSTLY 6802 2.79 4.96 1.86 94 XM_CamelCaseFrm001 6797 2.20 3.01 1.86 95 SUBJ_ALL_CAPS 6733 1.87 1.95 1.84 96 XM_DIRTYINTL 6482 2.37 3.76 1.77 97 XM_OfRef6 6464 1.93 2.32 1.77 98 RCVD_IN_MSPIKE_WL 6451 1.46 0.76 1.76 99 RCVD_IN_MSPIKE_H3 6449 1.46 0.76 1.76 100 T_TooManySym_02 6222 1.36 0.57 1.70 101 TooManyTo_004 5932 1.37 0.77 1.62 102 TM2_M_URI_OPT_OUT 5842 2.32 4.02 1.60 103 XMCapTrack 5500 1.21 0.52 1.50 104 XM_H_PHPOS 5164 1.23 0.80 1.41 105 XM_GoogleGroups 5105 1.14 0.55 1.39 106 UNTRUSTED_Relay 5096 3.65 8.93 1.39 107 T_XMDrugObfuBody_08 4894 1.69 2.51 1.34 108 RELAYCOUNTRY_CA 4880 1.99 3.52 1.33 109 XM_ShortIntro_01 4813 1.31 1.29 1.31 110 XMDiploma_00 4714 1.67 2.58 1.29 111 USER_IN_DEF_DKIM_WL 4542 0.88 0.04 1.24 112 XMPhish11 4402 1.26 1.39 1.20 113 TooManyTo_005 4392 0.99 0.49 1.20 114 DKIM_ADSP_CUSTOM_MED 4143 1.24 1.50 1.13 115 XMGappySubj_01 4073 0.97 0.64 1.11 116 URI_HEX 4051 1.66 2.97 1.11 117 XMStockSpam_06 4049 1.14 1.21 1.11 118 BOTNET 4026 4.56 12.64 1.10 119 RELAYCOUNTRY_GB 3990 1.09 1.08 1.09 120 XM_ProductURIs 3937 1.21 1.53 1.08 121 SpammyFromTLD_01 3718 1.25 1.79 1.02 122 XM_UB50 3493 1.83 3.86 0.95 123 T_FILL_THIS_FORM_SHORT 3457 1.06 1.34 0.94 124 XMSubMetaI_00 3408 1.23 1.93 0.93 125 XMSexyCombo_01 3404 1.58 3.09 0.93 126 XM_H_Long_From02 3395 1.75 3.68 0.93 127 USER_IN_WHITELIST 3238 0.62 0.00 0.88 128 XMGenDplmaNmb 3144 0.99 1.29 0.86 129 FILL_THIS_FORM 3131 0.74 0.48 0.86 130 NML_ADSP_CUSTOM_MED 3066 0.99 1.35 0.84 131 URI_TRY_3LD 3050 0.97 1.28 0.83 132 T_XMDrugObfuBody_00 2990 0.96 1.30 0.82 133 TR_MetaPhish_Combo_01 2988 1.03 1.54 0.82 134 RCVD_IN_BL_SPAMCOP_NET 2954 1.66 3.67 0.81 135 T_TooManySym_03 2811 0.59 0.17 0.77 136 XM_H_PHPMailer 2757 0.70 0.58 0.75 137 TM2_M_VERY_LONG_WORD 2738 1.19 2.22 0.75 138 RELAYCOUNTRY_DE 2672 0.83 1.06 0.73 139 T_FILL_THIS_FORM_LONG 2645 0.62 0.38 0.72 140 RCVD_IN_IADB_DOPTIN 2620 0.52 0.08 0.72 141 XMSubNoVowel 2607 0.57 0.24 0.71 142 XMNoVowels 2550 0.62 0.46 0.70 143 T_OBFU_PDF_ATTACH 2536 0.52 0.12 0.69 144 XMBdyGiftCard01 2492 0.78 1.00 0.68 145 SHORT_HELO_AND_INLINE_IMAGE 2365 0.48 0.09 0.65 146 XMMoneyMeta_00 2341 0.68 0.77 0.64 147 XMBody_78 2321 0.83 1.28 0.63 148 RCVD_IN_SORBS_DUL 2286 0.51 0.25 0.62 149 XMGappySubj_02 2266 0.54 0.36 0.62 150 T_FILL_THIS_FORM_LOAN 2203 0.46 0.13 0.60 151 XMDateMe_00 2157 0.53 0.38 0.59 152 MISSING_HEADERS 2131 0.62 0.70 0.58 153 XMBrknScrpt_02 2111 0.75 1.15 0.58 154 TM2_M_A_HREF_HREF 2058 0.57 0.57 0.56 155 XMHTML_After_End 2020 1.36 3.25 0.55 156 T_Symld_Words_02 2013 0.68 1.00 0.55 157 XM_B_TRADE_HTML 1953 0.50 0.41 0.53 158 HTML_IMAGE_ONLY_32 1876 0.53 0.57 0.51 159 XM_B_REG_HTML 1875 0.73 1.25 0.51 160 XMPhish30 1827 0.76 1.38 0.50 161 TR_XM_RelayPhish 1815 0.77 1.43 0.50 162 HTML_TAG_BALANCE_BODY 1760 0.53 0.64 0.48 163 XM_B_COPY_HTML 1748 0.55 0.73 0.48 164 XMBody_95 1744 0.37 0.11 0.48 165 RELAYCOUNTRY_AU 1694 0.55 0.76 0.46 166 HTML_IMAGE_ONLY_28 1680 0.56 0.80 0.46 167 TM2_M_BODY_EMPTY 1647 0.36 0.14 0.45 168 T_XMHurry_00 1644 0.74 1.42 0.45 169 HTTPS_HTTP_MISMATCH 1575 0.56 0.87 0.43 170 HTML_IMAGE_ONLY_24 1561 0.46 0.54 0.43 171 XM_H_PHPOS_M 1556 0.39 0.30 0.43 172 SpammyFromTLD_02 1539 0.64 1.16 0.42 173 XMSubMetaSxObfu_03 1514 0.76 1.56 0.41 174 FORGED_GMAIL_RCVD 1509 0.61 1.06 0.41 175 RDNS_DYNAMIC 1494 0.48 0.66 0.41 176 AC_DIV_BONANZA 1473 0.32 0.12 0.40 177 XMBody_17 1419 0.66 1.29 0.39 178 XMHTMLBadTable_001 1405 0.58 1.05 0.38 179 XMSubMetaSxObfu_02 1354 0.53 0.89 0.37 180 XMRcvdHeader_15 1306 0.25 0.00 0.36 181 TVD_SPACE_RATIO 1306 0.34 0.31 0.36 182 XMPhish14 1278 0.53 0.95 0.35 183 XM_H_Trusted_IP 1273 0.24 0.00 0.35 184 URI_NOVOWEL 1258 0.47 0.77 0.34 185 HTML_IMAGE_ONLY_20 1237 0.34 0.34 0.34 186 XMSolicitRefs_0 1237 0.35 0.38 0.34 187 DIET_1 1235 0.80 1.89 0.34 188 PLING_QUERY 1226 0.42 0.63 0.33 189 XMSubEmpty 1213 0.27 0.14 0.33 190 HTML_IMAGE_ONLY_16 1206 0.27 0.14 0.33 191 T_TooManySym_04 1202 0.24 0.03 0.33 192 MSGID_FROM_MTA_HEADER 1164 0.29 0.22 0.32 193 DOS_OUTLOOK_TO_MX 1150 0.25 0.11 0.31 194 DKIM_ADSP_NXDOMAIN 1148 0.30 0.28 0.31 195 NO_DNS_FOR_FROM 1137 0.28 0.19 0.31 196 XMLKML 1137 0.22 0.00 0.31 197 XMSlimDrugH 1077 0.40 0.65 0.29 198 UPPERCASE_50_75 1070 0.24 0.11 0.29 199 GMD_PDF_EMPTY_BODY 1065 0.22 0.07 0.29 200 XMLngstWrd_00 1056 0.38 0.59 0.29 ----------------------------------------------------------------------