Email: 489579 Autolearn: 0 AvgScore: 3.28 AvgScanTime: 3.92 sec Spam: 148469 Autolearn: 0 AvgScore: 12.39 AvgScanTime: 4.88 sec Ham: 341110 Autolearn: 0 AvgScore: -0.69 AvgScanTime: 3.50 sec Time Spent Running SA: 532.51 hours Time Spent Processing Spam: 201.33 hours Time Spent Processing Ham: 331.17 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 140881 85.56 94.89 81.50 2 DKIM_SIGNED 127902 73.79 86.15 68.42 3 XM_DK_Pass 124619 72.15 83.94 67.03 4 DKIM_VALID 118235 67.78 79.64 62.63 5 DCC_CHECK 117646 46.54 79.24 32.31 6 XMListUnsubscribeExists 109580 51.24 73.81 41.42 7 DKIM_VALID_AU 91211 48.70 61.43 43.16 8 XM_H_QuotedFrom 82448 38.74 55.53 31.44 9 XM_DK_Undo_02 73425 24.38 49.45 13.47 10 BAYES_99 66671 22.35 44.91 12.53 11 BAYES_999 57473 19.62 38.71 11.31 12 HTML_FONT_LOW_CONTRAST 55316 27.72 37.26 23.57 13 LOC_TINY_FONT_1 54611 23.75 36.78 18.07 14 TR_DCC_Bayes_99 51531 14.61 34.71 5.86 15 BAYES_50 46917 51.55 31.60 60.23 16 MIME_HTML_ONLY 44721 21.68 30.12 18.01 17 FVGT_m_MULTI_ODD 42315 21.83 28.50 18.93 18 XMSubLong 40351 22.67 27.18 20.71 19 DKIM_VALID_EF 36369 24.98 24.50 25.20 20 T_KAM_HTML_FONT_INVALID 32540 16.35 21.92 13.93 21 T_TM2_M_HEADER_IN_MSG 31400 30.58 21.15 34.68 22 XM_Body_Dirty_Words 29341 13.16 19.76 10.29 23 DCC_CHECK_NEGATIVE 27982 51.29 18.85 65.41 24 XM_Multi_Part_URI 25658 12.17 17.28 9.95 25 HTML_IMAGE_RATIO_02 25308 9.91 17.05 6.81 26 MultiRelay 24543 18.91 16.53 19.94 27 RELAYCOUNTRY_META 23754 8.57 16.00 5.34 28 XM_Evil_Numbers_Gen 23061 9.78 15.53 7.27 29 BOTNET 20201 5.03 13.61 1.30 30 BOTNET_IPINHOSTNAME 19314 6.66 13.01 3.89 31 LOTS_OF_MONEY 19238 11.06 12.96 10.23 32 FSL_BULK_SIG 18098 8.97 12.19 7.57 33 T_XMDrugObfuBody_14 15273 8.63 10.29 7.91 34 XMSexyCombo_05 14703 5.22 9.90 3.17 35 HTML_IMAGE_RATIO_04 14069 6.01 9.48 4.50 36 UNTRUSTED_Relay 13988 3.84 9.42 1.41 37 XM_B_Phish_Phrases 13936 5.66 9.39 4.03 38 LotsOfNums_01 12918 7.97 8.70 7.66 39 XMSubMetaSx_00 12749 4.98 8.59 3.41 40 TR_XM_DocInvoice 12177 5.52 8.20 4.35 41 XM_H_Long_From01 11325 7.90 7.63 8.02 42 BAYES_80 11281 4.79 7.60 3.57 43 TooManyTo_001 10796 8.48 7.27 9.01 44 MPART_ALT_DIFF 10727 3.97 7.23 2.56 45 XM_UncommonTLD01 10404 4.78 7.01 3.80 46 FROM_EXCESS_BASE64 9776 3.95 6.58 2.81 47 DKIM_INVALID 9667 6.01 6.51 5.79 48 BAYES_60 9599 6.43 6.47 6.42 49 HTML_IMAGE_RATIO_06 7462 3.95 5.03 3.49 50 XMStrtUSub 7366 4.14 4.96 3.79 51 XMNumbers 7335 3.77 4.94 3.27 52 TM2_M_URI_OPT_OUT 7323 2.59 4.93 1.57 53 RCVD_IN_MSPIKE_H2 7171 5.52 4.83 5.82 54 BAYES_95 7064 3.07 4.76 2.33 55 RCVD_IN_RP_SAFE 7005 7.08 4.72 8.10 56 XM_SendGrid 6889 4.93 4.64 5.05 57 MIME_QP_LONG_LINE 6813 4.73 4.59 4.79 58 MIME_HTML_MOSTLY 6477 3.03 4.36 2.45 59 URI_HEX 5883 2.12 3.96 1.32 60 RCVD_IN_RP_CERTIFIED 5867 6.41 3.95 7.49 61 XM_UB50 5763 1.88 3.88 1.01 62 XM_DIRTYINTL 5748 2.55 3.87 1.97 63 T_REMOTE_IMAGE 5626 4.50 3.79 4.81 64 RCVD_IN_BL_SPAMCOP_NET 5560 1.69 3.74 0.79 65 XM_SPF_SoftFail 5344 2.51 3.60 2.04 66 RELAYCOUNTRY_CA 5301 2.04 3.57 1.38 67 MIME_HTML_ONLY_MULTI 5210 1.91 3.51 1.21 68 XM_CamelCaseFrm001 5067 1.98 3.41 1.36 69 HTML_IMAGE_RATIO_08 4621 2.16 3.11 1.75 70 T_TooManySym_01 4348 4.46 2.93 5.13 71 HTML_MIME_NO_HTML_TAG 4123 2.53 2.78 2.42 72 XMSubMetaI_00 4054 1.12 2.73 0.41 73 NO_DNS_FOR_FROM 3976 1.99 2.68 1.69 74 XMBody_17 3953 1.10 2.66 0.42 75 SUBJ_ALL_CAPS 3895 4.90 2.62 5.89 76 SpammyFromTLD_01 3753 1.37 2.53 0.87 77 MultiRelay_Combo 3617 0.89 2.44 0.22 78 MultiRelay_CC 3617 0.89 2.44 0.22 79 T_XMDrugObfuBody_08 3587 1.64 2.42 1.31 80 XMDiploma_00 3421 1.75 2.30 1.51 81 TM2_M_VERY_LONG_WORD 3307 1.30 2.23 0.90 82 RCVD_IN_RP_RNBL 3294 0.69 2.22 0.02 83 RCVD_IN_IADB_LISTED 3271 4.61 2.20 5.66 84 SpammyFromTLD_02 3207 0.90 2.16 0.35 85 XMSubMetaSxObfu_03 3071 1.02 2.07 0.56 86 XM_URI_RBL 2866 0.70 1.93 0.17 87 XM_OfRef6 2864 1.78 1.93 1.72 88 RELAYCOUNTRY_FR 2851 0.76 1.92 0.25 89 RCVD_IN_IADB_SPF 2836 3.94 1.91 4.82 90 MAILING_LIST_MULTI 2806 2.24 1.89 2.40 91 RCVD_IN_IADB_SENDERID 2725 3.46 1.84 4.17 92 RCVD_IN_IADB_DK 2661 3.36 1.79 4.04 93 XM_UB99 2653 0.55 1.79 0.01 94 URI_TRY_3LD 2620 1.30 1.76 1.10 95 PHOTO_EDITING_DIRECT 2460 0.50 1.66 0.00 96 XMGenDplmaNmb 2392 1.19 1.61 1.01 97 XMHTML_After_End 2366 0.75 1.59 0.39 98 UNPARSEABLE_RELAY 2295 2.51 1.55 2.93 99 BAYES_00 2277 5.16 1.53 6.73 100 XMStockSpam_06 2247 1.39 1.51 1.34 101 XMSexyCombo_01 2162 0.85 1.46 0.59 102 DIET_1 2161 0.67 1.46 0.33 103 XMHTMLBadTable_001 2160 0.76 1.45 0.45 104 XM_H_Long_From02 2150 0.97 1.45 0.77 105 BOTNET_NORDNS 2123 0.45 1.43 0.03 106 XM_DK_Undo_01 2123 1.76 1.43 1.90 107 XMPhish30 2106 0.74 1.42 0.44 108 XMBody_78 2085 0.74 1.40 0.45 109 XM_UB999 2032 0.42 1.37 0.01 110 T_XMHurry_00 2007 0.67 1.35 0.37 111 XMBdyGiftCard01 1993 0.90 1.34 0.70 112 URIBL_BLACK 1981 0.43 1.33 0.03 113 FSL_THIS_IS_ADV 1967 0.58 1.32 0.26 114 TooManyTo_002 1951 2.33 1.31 2.77 115 XM_ProductURIs 1939 0.92 1.31 0.75 116 BAYES_40 1935 2.96 1.30 3.68 117 URIBL_DBL_SPAM 1899 0.41 1.28 0.03 118 TR_LOTS_OF_MONEY2 1894 0.82 1.28 0.62 119 T_MONEY_PERCENT 1894 0.82 1.28 0.62 120 TR_XM_DK_Bayes 1875 3.31 1.26 4.20 121 RCVD_IN_PSBL 1875 0.50 1.26 0.16 122 MPART_ALT_DIFF_COUNT 1850 0.64 1.25 0.38 123 XM_B_COPY_HTML 1822 0.84 1.23 0.67 124 XM_UB60 1804 0.43 1.22 0.09 125 REMOVE_BEFORE_LINK 1761 0.51 1.19 0.22 126 TooManyTo_003 1736 1.56 1.17 1.73 127 TR_XM_RelayPhish 1734 0.64 1.17 0.41 128 TR_XM_DK_Bayes1 1723 3.08 1.16 3.91 129 T_XMDrugObfuBody_00 1702 0.97 1.15 0.89 130 ALL_TRUSTED 1687 14.51 1.14 20.33 131 T_Symld_Words_02 1654 0.61 1.11 0.38 132 T_FILL_THIS_FORM_SHORT 1652 0.92 1.11 0.84 133 BAYES_20 1640 2.09 1.10 2.52 134 TR_XM_DK_Bayes2 1591 2.50 1.07 3.13 135 XMPhish11 1579 1.12 1.06 1.15 136 TR_Symld_Words 1576 2.85 1.06 3.63 137 XM_B_REG_HTML 1575 0.72 1.06 0.57 138 HTML_SHORT_LINK_IMG_1 1564 0.34 1.05 0.03 139 DATE_IN_PAST_12_24 1548 0.34 1.04 0.03 140 XMLongAddy 1540 0.37 1.04 0.07 141 RELAYCOUNTRY_GB 1528 1.08 1.03 1.10 142 RELAYCOUNTRY_AT 1523 0.38 1.03 0.10 143 BODY_URI_ONLY 1523 0.74 1.03 0.62 144 RELAYCOUNTRY_CN 1515 0.34 1.02 0.05 145 XM_BadFromFormat 1514 0.45 1.02 0.20 146 BOUNCE_MESSAGE 1492 2.56 1.00 3.23 147 ANY_BOUNCE_MESSAGE 1492 2.56 1.00 3.23 148 RELAYCOUNTRY_DE 1476 0.72 0.99 0.60 149 XM_H_PHPOS 1463 1.28 0.99 1.41 150 XM_UB80 1461 0.32 0.98 0.02 151 RCVD_IN_IADB_VOUCHED 1456 3.11 0.98 4.04 152 MISSING_HEADERS 1436 0.69 0.97 0.56 153 HTML_FONT_FACE_BAD 1430 0.58 0.96 0.41 154 T_HTML_TAG_BALANCE_CENTER 1423 0.40 0.96 0.16 155 TooManyTo_004 1420 1.15 0.96 1.24 156 XM_HighProb1 1397 0.30 0.94 0.01 157 XM_Combo_Sbj 1394 0.43 0.94 0.21 158 HTML_IMAGE_ONLY_08 1338 0.36 0.90 0.13 159 XM_PDF 1311 4.66 0.88 6.30 160 SUBJ_DOLLARS 1305 0.41 0.88 0.21 161 XMPhish14 1250 0.46 0.84 0.30 162 HTML_TAG_BALANCE_BODY 1246 0.60 0.84 0.49 163 XMMoneyMeta_00 1245 0.56 0.84 0.44 164 DATE_IN_PAST_03_06 1238 0.31 0.83 0.08 165 PLING_QUERY 1237 0.48 0.83 0.33 166 TR_MetaPhish_Combo_01 1236 1.06 0.83 1.16 167 HTML_FONT_SIZE_HUGE 1185 0.31 0.80 0.10 168 HTTPS_HTTP_MISMATCH 1166 0.75 0.79 0.74 169 XMSlimDrugH 1161 0.42 0.78 0.27 170 XMBrknScrpt_02 1158 0.49 0.78 0.37 171 TM2_M_A_HREF_HREF 1129 0.72 0.76 0.71 172 RELAYCOUNTRY_AU 1119 0.54 0.75 0.45 173 HTML_FONT_SIZE_LARGE 1118 0.37 0.75 0.20 174 XMGppyBdWords 1116 0.30 0.75 0.10 175 DEAR_SOMETHING 1104 0.35 0.74 0.18 176 XMClaimOffer 1099 0.32 0.74 0.14 177 ADMITS_SPAM 1089 0.35 0.73 0.19 178 TooManyTo_005 1023 0.89 0.69 0.97 179 URI_NOVOWEL 1012 0.39 0.68 0.26 180 XMBounce_01 1012 0.34 0.68 0.19 181 XMSubMetaSSx_00 1007 0.31 0.68 0.15 182 DKIM_ADSP_CUSTOM_MED 1007 0.97 0.68 1.10 183 XMSubMetaD_03 1002 0.22 0.67 0.02 184 RDNS_DYNAMIC 996 0.51 0.67 0.43 185 XMSubMetaI_01 991 0.22 0.67 0.03 186 TR_Sbj_FN_Bdy 989 0.36 0.67 0.22 187 T_TooManySym_02 989 1.74 0.67 2.21 188 XM_H_PHPMailer 983 0.89 0.66 0.99 189 XM_RXBody 980 0.30 0.66 0.15 190 XMSolicitRefs_0 962 0.47 0.65 0.40 191 RCVD_IN_MSPIKE_WL 958 1.44 0.65 1.79 192 TR_Mismatch_TLD_02 940 0.25 0.63 0.09 193 XM_Body_Obfu01 930 0.37 0.63 0.26 194 XMGappySubj_01 921 0.66 0.62 0.67 195 RELAYCOUNTRY_IE 917 0.30 0.62 0.16 196 RELAYCOUNTRY_NL 908 0.34 0.61 0.23 197 HTML_IMAGE_ONLY_28 901 0.50 0.61 0.45 198 RELAYCOUNTRY_IN 896 0.27 0.60 0.13 199 PP_MIME_FAKE_ASCII_TEXT 896 0.34 0.60 0.23 200 BAYES_05 884 1.36 0.60 1.69 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 277998 85.56 94.89 81.50 2 DKIM_SIGNED 233372 73.79 86.15 68.42 3 XM_DK_Pass 228632 72.15 83.94 67.03 4 DCC_CHECK_NEGATIVE 223118 51.29 18.85 65.41 5 DKIM_VALID 213621 67.78 79.64 62.63 6 BAYES_50 205454 51.55 31.60 60.23 7 DKIM_VALID_AU 147208 48.70 61.43 43.16 8 XMListUnsubscribeExists 141291 51.24 73.81 41.42 9 T_TM2_M_HEADER_IN_MSG 118298 30.58 21.15 34.68 10 DCC_CHECK 110221 46.54 79.24 32.31 11 XM_H_QuotedFrom 107238 38.74 55.53 31.44 12 DKIM_VALID_EF 85943 24.98 24.50 25.20 13 HTML_FONT_LOW_CONTRAST 80383 27.72 37.26 23.57 14 XMSubLong 70653 22.67 27.18 20.71 15 ALL_TRUSTED 69357 14.51 1.14 20.33 16 MultiRelay 68027 18.91 16.53 19.94 17 FVGT_m_MULTI_ODD 64564 21.83 28.50 18.93 18 LOC_TINY_FONT_1 61650 23.75 36.78 18.07 19 MIME_HTML_ONLY 61437 21.68 30.12 18.01 20 T_KAM_HTML_FONT_INVALID 47521 16.35 21.92 13.93 21 XM_DK_Undo_02 45948 24.38 49.45 13.47 22 BAYES_99 42757 22.35 44.91 12.53 23 BAYES_999 38575 19.62 38.71 11.31 24 XM_Body_Dirty_Words 35094 13.16 19.76 10.29 25 LOTS_OF_MONEY 34893 11.06 12.96 10.23 26 XM_Multi_Part_URI 33936 12.17 17.28 9.95 27 XM_DKIMWhitelistDomains 32603 6.67 0.04 9.56 28 TooManyTo_001 30739 8.48 7.27 9.01 29 RCVD_IN_RP_SAFE 27636 7.08 4.72 8.10 30 XM_H_Long_From01 27364 7.90 7.63 8.02 31 T_XMDrugObfuBody_14 26977 8.63 10.29 7.91 32 LotsOfNums_01 26117 7.97 8.70 7.66 33 FSL_BULK_SIG 25822 8.97 12.19 7.57 34 RCVD_IN_RP_CERTIFIED 25535 6.41 3.95 7.49 35 XM_Evil_Numbers_Gen 24803 9.78 15.53 7.27 36 HTML_IMAGE_RATIO_02 23226 9.91 17.05 6.81 37 BAYES_00 22967 5.16 1.53 6.73 38 BAYES_60 21887 6.43 6.47 6.42 39 XM_PDF 21479 4.66 0.88 6.30 40 IN_ZIMBRA_NJ_WHITELIST 20534 4.20 0.04 6.02 41 SUBJ_ALL_CAPS 20086 4.90 2.62 5.89 42 TR_DCC_Bayes_99 20003 14.61 34.71 5.86 43 RCVD_IN_MSPIKE_H2 19858 5.52 4.83 5.82 44 DKIM_INVALID 19751 6.01 6.51 5.79 45 RCVD_IN_IADB_LISTED 19311 4.61 2.20 5.66 46 RELAYCOUNTRY_META 18226 8.57 16.00 5.34 47 T_TooManySym_01 17493 4.46 2.93 5.13 48 XM_SendGrid 17237 4.93 4.64 5.05 49 RCVD_IN_IADB_SPF 16432 3.94 1.91 4.82 50 T_REMOTE_IMAGE 16404 4.50 3.79 4.81 51 MIME_QP_LONG_LINE 16326 4.73 4.59 4.79 52 HTML_IMAGE_RATIO_04 15338 6.01 9.48 4.50 53 TR_XM_DocInvoice 14827 5.52 8.20 4.35 54 TR_XM_DK_Bayes 14343 3.31 1.26 4.20 55 RCVD_IN_IADB_SENDERID 14234 3.46 1.84 4.17 56 RCVD_IN_IADB_VOUCHED 13788 3.11 0.98 4.04 57 RCVD_IN_IADB_DK 13787 3.36 1.79 4.04 58 XM_B_Phish_Phrases 13760 5.66 9.39 4.03 59 TR_XM_DK_Bayes1 13349 3.08 1.16 3.91 60 BOTNET_IPINHOSTNAME 13274 6.66 13.01 3.89 61 XM_UncommonTLD01 12978 4.78 7.01 3.80 62 XMStrtUSub 12923 4.14 4.96 3.79 63 BAYES_40 12557 2.96 1.30 3.68 64 TR_Symld_Words 12373 2.85 1.06 3.63 65 BAYES_80 12180 4.79 7.60 3.57 66 HTML_IMAGE_RATIO_06 11897 3.95 5.03 3.49 67 XMSubMetaSx_00 11639 4.98 8.59 3.41 68 XMNumbers 11140 3.77 4.94 3.27 69 ANY_BOUNCE_MESSAGE 11027 2.56 1.00 3.23 70 BOUNCE_MESSAGE 11025 2.56 1.00 3.23 71 XMSexyCombo_05 10830 5.22 9.90 3.17 72 TR_XM_DK_Bayes2 10663 2.50 1.07 3.13 73 UNPARSEABLE_RELAY 9983 2.51 1.55 2.93 74 TVD_RCVD_IP 9731 2.06 0.24 2.85 75 FROM_EXCESS_BASE64 9575 3.95 6.58 2.81 76 TooManyTo_002 9462 2.33 1.31 2.77 77 MPART_ALT_DIFF 8720 3.97 7.23 2.56 78 BAYES_20 8596 2.09 1.10 2.52 79 HELO_NODOT 8458 1.88 0.49 2.48 80 MIME_HTML_MOSTLY 8364 3.03 4.36 2.45 81 HTML_MIME_NO_HTML_TAG 8264 2.53 2.78 2.42 82 MAILING_LIST_MULTI 8179 2.24 1.89 2.40 83 IN_HORDE_ADDRESS_BOOK 8143 1.69 0.08 2.39 84 BAYES_95 7958 3.07 4.76 2.33 85 T_TooManySym_02 7548 1.74 0.67 2.21 86 INVALID_MSGID 7324 1.57 0.23 2.15 87 T_OBFU_PDF_ATTACH 7056 1.50 0.21 2.07 88 XM_SPF_SoftFail 6962 2.51 3.60 2.04 89 XM_DIRTYINTL 6729 2.55 3.87 1.97 90 RCVD_IN_IADB_OPTIN 6701 1.53 0.52 1.96 91 TO_MALFORMED 6503 1.33 0.01 1.91 92 XM_DK_Undo_01 6478 1.76 1.43 1.90 93 RCVD_IN_MSPIKE_WL 6114 1.44 0.65 1.79 94 RCVD_IN_MSPIKE_H3 6066 1.42 0.59 1.78 95 HTML_IMAGE_RATIO_08 5968 2.16 3.11 1.75 96 TooManyTo_003 5904 1.56 1.17 1.73 97 XM_OfRef6 5873 1.78 1.93 1.72 98 BAYES_05 5777 1.36 0.60 1.69 99 NO_DNS_FOR_FROM 5775 1.99 2.68 1.69 100 XMCapTrack 5536 1.31 0.58 1.62 101 TM2_M_URI_OPT_OUT 5342 2.59 4.93 1.57 102 XMDiploma_00 5143 1.75 2.30 1.51 103 UPPERCASE_75_100 5116 1.10 0.17 1.50 104 XM_H_PHPOS 4823 1.28 0.99 1.41 105 UNTRUSTED_Relay 4807 3.84 9.42 1.41 106 RELAYCOUNTRY_CA 4696 2.04 3.57 1.38 107 T_TooManySym_03 4637 0.99 0.15 1.36 108 XM_CamelCaseFrm001 4628 1.98 3.41 1.36 109 XMStockSpam_06 4575 1.39 1.51 1.34 110 USER_IN_DEF_DKIM_WL 4530 0.97 0.14 1.33 111 URI_HEX 4496 2.12 3.96 1.32 112 T_XMDrugObfuBody_08 4455 1.64 2.42 1.31 113 BOTNET 4429 5.03 13.61 1.30 114 XM_GoogleGroups 4279 1.05 0.58 1.25 115 TooManyTo_004 4215 1.15 0.96 1.24 116 MIME_HTML_ONLY_MULTI 4134 1.91 3.51 1.21 117 TR_MetaPhish_Combo_01 3951 1.06 0.83 1.16 118 XMPhish11 3913 1.12 1.06 1.15 119 URI_TRY_3LD 3764 1.30 1.76 1.10 120 RELAYCOUNTRY_GB 3758 1.08 1.03 1.10 121 DKIM_ADSP_CUSTOM_MED 3740 0.97 0.68 1.10 122 XM_UB50 3454 1.88 3.88 1.01 123 XMGenDplmaNmb 3429 1.19 1.61 1.01 124 XM_H_PHPMailer 3373 0.89 0.66 0.99 125 TooManyTo_005 3317 0.89 0.69 0.97 126 TM2_M_VERY_LONG_WORD 3072 1.30 2.23 0.90 127 T_XMDrugObfuBody_00 3046 0.97 1.15 0.89 128 SpammyFromTLD_01 2975 1.37 2.53 0.87 129 FILL_THIS_FORM 2944 0.69 0.28 0.86 130 USER_IN_WHITELIST 2887 0.59 0.00 0.85 131 T_FILL_THIS_FORM_SHORT 2876 0.92 1.11 0.84 132 NML_ADSP_CUSTOM_MED 2836 0.75 0.55 0.83 133 T_HTML_ATTACH 2710 0.57 0.06 0.79 134 RCVD_IN_BL_SPAMCOP_NET 2700 1.69 3.74 0.79 135 XM_H_Long_From02 2614 0.97 1.45 0.77 136 RCVD_IN_IADB_DOPTIN 2599 0.55 0.06 0.76 137 XM_ProductURIs 2553 0.92 1.31 0.75 138 HTTPS_HTTP_MISMATCH 2517 0.75 0.79 0.74 139 T_FILL_THIS_FORM_LOAN 2466 0.56 0.19 0.72 140 TM2_M_A_HREF_HREF 2411 0.72 0.76 0.71 141 XMBdyGiftCard01 2390 0.90 1.34 0.70 142 XMGappySubj_01 2300 0.66 0.62 0.67 143 XM_B_COPY_HTML 2293 0.84 1.23 0.67 144 LOW_PRICE 2279 0.63 0.54 0.67 145 XMNoVowels 2229 0.63 0.59 0.65 146 T_FILL_THIS_FORM_LONG 2132 0.46 0.07 0.63 147 SHORT_HELO_AND_INLINE_IMAGE 2114 0.47 0.12 0.62 148 T_MONEY_PERCENT 2108 0.82 1.28 0.62 149 TR_LOTS_OF_MONEY2 2108 0.82 1.28 0.62 150 BODY_URI_ONLY 2099 0.74 1.03 0.62 151 RELAYCOUNTRY_DE 2042 0.72 0.99 0.60 152 XMSexyCombo_01 2001 0.85 1.46 0.59 153 T_MANY_PILL_PRICE 1992 0.41 0.00 0.58 154 XM_B_REG_HTML 1936 0.72 1.06 0.57 155 MISSING_HEADERS 1921 0.69 0.97 0.56 156 XMSubMetaSxObfu_03 1911 1.02 2.07 0.56 157 RCVD_IN_SORBS_DUL 1910 0.49 0.31 0.56 158 AC_DIV_BONANZA 1904 0.43 0.14 0.56 159 XMBody_95 1833 0.45 0.24 0.54 160 XM_ShortIntro_01 1724 0.44 0.29 0.51 161 XM_D_tchamptons_WL 1681 0.34 0.00 0.49 162 HTML_TAG_BALANCE_BODY 1669 0.60 0.84 0.49 163 FORGED_GMAIL_RCVD 1613 0.50 0.55 0.47 164 UPPERCASE_50_75 1610 0.41 0.26 0.47 165 XMDateMe_00 1593 0.45 0.40 0.47 166 HTML_IMAGE_ONLY_32 1564 0.45 0.44 0.46 167 XMHTMLBadTable_001 1542 0.76 1.45 0.45 168 HTML_IMAGE_ONLY_28 1541 0.50 0.61 0.45 169 RELAYCOUNTRY_AU 1539 0.54 0.75 0.45 170 XMBody_78 1524 0.74 1.40 0.45 171 XMPhish30 1512 0.74 1.42 0.44 172 XMMoneyMeta_00 1505 0.56 0.84 0.44 173 RDNS_DYNAMIC 1483 0.51 0.67 0.43 174 XMSubMetaSxObfu_02 1439 0.42 0.41 0.42 175 XMBody_17 1432 1.10 2.66 0.42 176 TM2_M_BODY_EMPTY 1416 0.36 0.22 0.42 177 XMSubMetaI_00 1411 1.12 2.73 0.41 178 HTML_FONT_FACE_BAD 1408 0.58 0.96 0.41 179 TR_XM_RelayPhish 1405 0.64 1.17 0.41 180 XMRcvdHeader_15 1384 0.28 0.00 0.41 181 XMSolicitRefs_0 1351 0.47 0.65 0.40 182 XMHTML_After_End 1330 0.75 1.59 0.39 183 XM_H_PHPOS_M 1311 0.40 0.44 0.38 184 T_Symld_Words_02 1311 0.61 1.11 0.38 185 MPART_ALT_DIFF_COUNT 1292 0.64 1.25 0.38 186 XM_B_TRADE_HTML 1278 0.40 0.44 0.37 187 T_XMHurry_00 1273 0.67 1.35 0.37 188 XMSubNoVowel 1269 0.36 0.32 0.37 189 HTML_IMAGE_ONLY_24 1267 0.37 0.36 0.37 190 XMBrknScrpt_02 1246 0.49 0.78 0.37 191 SpammyFromTLD_02 1183 0.90 2.16 0.35 192 URIBL_CSS 1178 0.35 0.37 0.35 193 URIBL_CSS_A 1178 0.35 0.37 0.35 194 TVD_SPACE_RATIO 1149 0.35 0.38 0.34 195 HTML_IMAGE_ONLY_20 1134 0.36 0.42 0.33 196 DIET_1 1123 0.67 1.46 0.33 197 PLING_QUERY 1117 0.48 0.83 0.33 198 XMSubEmpty 1097 0.32 0.31 0.32 199 T_TooManySym_04 1093 0.23 0.02 0.32 200 XM_S_JOY_D 1080 0.32 0.34 0.32 ----------------------------------------------------------------------