Email: 290501 Autolearn: 0 AvgScore: 3.30 AvgScanTime: 3.37 sec Spam: 95285 Autolearn: 0 AvgScore: 12.77 AvgScanTime: 4.18 sec Ham: 195216 Autolearn: 0 AvgScore: -1.32 AvgScanTime: 2.97 sec Time Spent Running SA: 271.85 hours Time Spent Processing Spam: 110.72 hours Time Spent Processing Ham: 161.13 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 88412 79.63 92.79 73.21 2 DKIM_SIGNED 80107 73.17 84.07 67.84 3 XM_DK_Pass 78421 71.99 82.30 66.95 4 DCC_CHECK 76234 50.68 80.01 36.36 5 DKIM_VALID 74137 68.09 77.81 63.35 6 XMListUnsubscribeExists 70064 53.53 73.53 43.77 7 DKIM_VALID_AU 60784 52.78 63.79 47.40 8 XM_H_QuotedFrom 53742 39.07 56.40 30.61 9 XM_DK_Undo_02 49204 27.96 51.64 16.41 10 BAYES_99 43807 25.76 45.97 15.90 11 BAYES_999 37987 22.58 39.87 14.14 12 LOC_TINY_FONT_1 37259 26.73 39.10 20.69 13 TR_DCC_Bayes_99 34420 16.87 36.12 7.47 14 HTML_FONT_LOW_CONTRAST 33974 29.39 35.66 26.34 15 MIME_HTML_ONLY 31749 23.65 33.32 18.93 16 BAYES_50 27700 46.89 29.07 55.59 17 FVGT_m_MULTI_ODD 24723 20.34 25.95 17.60 18 XMSubLong 22972 19.73 24.11 17.59 19 DKIM_VALID_EF 19534 24.74 20.50 26.81 20 HTML_IMAGE_RATIO_02 19297 12.11 20.25 8.14 21 T_KAM_HTML_FONT_INVALID 19282 15.32 20.24 12.91 22 RELAYCOUNTRY_META 17649 8.69 18.52 3.89 23 T_TM2_M_HEADER_IN_MSG 17615 27.13 18.49 31.35 24 XM_Body_Dirty_Words 17608 12.08 18.48 8.96 25 DCC_CHECK_NEGATIVE 17524 47.92 18.39 62.33 26 BOTNET 16688 6.79 17.51 1.56 27 XM_Multi_Part_URI 15044 12.83 15.79 11.38 28 MultiRelay 13418 15.30 14.08 15.90 29 FSL_BULK_SIG 12903 10.26 13.54 8.66 30 XM_Evil_Numbers_Gen 12785 8.99 13.42 6.83 31 UNTRUSTED_Relay 12385 4.97 13.00 1.05 32 BOTNET_IPINHOSTNAME 11941 7.88 12.53 5.61 33 XM_UncommonTLD01 10010 6.67 10.51 4.80 34 XMSexyCombo_05 9758 5.29 10.24 2.88 35 LOTS_OF_MONEY 9694 10.16 10.17 10.15 36 XM_B_Phish_Phrases 9012 6.16 9.46 4.55 37 HTML_IMAGE_RATIO_04 9008 5.54 9.45 3.63 38 T_XMDrugObfuBody_14 8995 7.12 9.44 5.99 39 XMSubMetaSx_00 7826 5.12 8.21 3.60 40 BAYES_80 7704 5.41 8.09 4.10 41 RCVD_IN_RP_SAFE 7594 9.75 7.97 10.62 42 BAYES_60 7392 6.73 7.76 6.23 43 FROM_EXCESS_BASE64 7262 5.23 7.62 4.06 44 LotsOfNums_01 6971 6.49 7.32 6.09 45 MPART_ALT_DIFF 6893 4.35 7.23 2.94 46 TooManyTo_001 6862 6.18 7.20 5.68 47 RCVD_IN_RP_CERTIFIED 6705 8.74 7.04 9.58 48 TR_XM_DocInvoice 6697 4.96 7.03 3.95 49 XM_H_Long_From01 6525 12.30 6.85 14.96 50 DKIM_INVALID 5970 5.08 6.27 4.49 51 NO_DNS_FOR_FROM 5008 3.89 5.26 3.22 52 XMNumbers 4808 3.97 5.05 3.45 53 XM_UB50 4711 2.08 4.94 0.68 54 T_REMOTE_IMAGE 4600 4.43 4.83 4.23 55 HTML_IMAGE_RATIO_06 4566 3.45 4.79 2.80 56 RCVD_IN_MSPIKE_H2 4505 5.36 4.73 5.67 57 XMStrtUSub 4374 4.43 4.59 4.34 58 TR_Mismatch_TLD_02 4340 1.56 4.55 0.10 59 RCVD_IN_BL_SPAMCOP_NET 4278 1.79 4.49 0.47 60 XM_SendGrid 4164 4.82 4.37 5.04 61 MIME_HTML_MOSTLY 4161 3.27 4.37 2.73 62 MIME_QP_LONG_LINE 4092 4.05 4.29 3.92 63 BAYES_95 4037 3.21 4.24 2.71 64 XM_CamelCaseFrm001 3784 2.39 3.97 1.63 65 RELAYCOUNTRY_DE 3590 1.53 3.77 0.44 66 RCVD_IN_PSBL 3330 1.33 3.49 0.27 67 MIME_HTML_ONLY_MULTI 3321 1.83 3.49 1.02 68 T_TooManySym_01 3251 4.26 3.41 4.68 69 XM_DIRTYINTL 3183 2.18 3.34 1.61 70 RCVD_IN_RP_RNBL 3081 1.08 3.23 0.03 71 RELAYCOUNTRY_CA 3014 1.93 3.16 1.32 72 TM2_M_URI_OPT_OUT 2904 1.85 3.05 1.26 73 XM_ProductURIs 2679 1.92 2.81 1.48 74 URI_HEX 2616 1.65 2.75 1.12 75 HTML_MIME_NO_HTML_TAG 2593 1.83 2.72 1.40 76 TM2_M_VERY_LONG_WORD 2523 1.44 2.65 0.85 77 XM_SPF_SoftFail 2486 1.74 2.61 1.32 78 XM_UB60 2480 0.89 2.60 0.05 79 UNPARSEABLE_RELAY 2309 3.80 2.42 4.47 80 XMBody_17 2289 1.09 2.40 0.46 81 HTML_IMAGE_RATIO_08 2278 1.88 2.39 1.63 82 XM_Combo_Sbj 2170 0.94 2.28 0.28 83 SUBJ_ALL_CAPS 2162 8.93 2.27 12.18 84 T_XMHurry_00 2148 1.01 2.25 0.40 85 XM_B_REG_HTML 2081 1.22 2.18 0.75 86 DATE_IN_PAST_06_12 2074 0.77 2.18 0.08 87 XMPhish30 2063 1.00 2.17 0.43 88 XMSubMetaI_00 2048 1.03 2.15 0.48 89 XM_RXBody 2039 0.86 2.14 0.23 90 SpammyFromTLD_01 2031 1.03 2.13 0.49 91 MultiRelay_CC 1986 0.78 2.08 0.14 92 MultiRelay_Combo 1986 0.78 2.08 0.14 93 T_XMDrugObfuBody_08 1956 1.50 2.05 1.22 94 RELAYCOUNTRY_CN 1891 0.68 1.98 0.04 95 BOTNET_NORDNS 1881 0.66 1.97 0.02 96 PHOTO_EDITING_DIRECT 1872 0.65 1.96 0.00 97 RELAYCOUNTRY_FR 1854 0.79 1.95 0.22 98 XMSexyCombo_01 1796 0.88 1.88 0.39 99 T_HTML_TAG_BALANCE_CENTER 1782 0.76 1.87 0.22 100 RCVD_IN_IADB_LISTED 1774 3.88 1.86 4.86 101 XMHTML_After_End 1765 0.76 1.85 0.23 102 SpammyFromTLD_02 1752 0.69 1.84 0.14 103 URIBL_BLACK 1723 0.62 1.81 0.04 104 XM_OfRef6 1717 1.48 1.80 1.32 105 XM_UB80 1710 0.61 1.79 0.03 106 DATE_IN_PAST_03_06 1702 0.65 1.79 0.09 107 MAILING_LIST_MULTI 1646 1.98 1.73 2.10 108 XM_URI_RBL 1638 0.63 1.72 0.10 109 XM_H_Long_From02 1636 1.12 1.72 0.83 110 XM_UB99 1615 0.56 1.69 0.01 111 XMLongAddy 1611 0.68 1.69 0.19 112 BAYES_00 1602 4.82 1.68 6.35 113 URIBL_DBL_SPAM 1570 0.57 1.65 0.04 114 TR_LOTS_OF_MONEY2 1517 0.72 1.59 0.30 115 T_MONEY_PERCENT 1517 0.72 1.59 0.30 116 XMStockSpam_06 1509 0.89 1.58 0.56 117 XMBody_78 1481 0.89 1.55 0.56 118 XMBdyGiftCard01 1476 1.21 1.55 1.04 119 RCVD_IN_IADB_SPF 1471 3.31 1.54 4.17 120 DIET_1 1457 0.91 1.53 0.60 121 XM_H_PHPOS 1430 1.38 1.50 1.32 122 RCVD_IN_IADB_SENDERID 1394 2.93 1.46 3.65 123 XMDiploma_00 1392 1.21 1.46 1.09 124 RCVD_IN_IADB_DK 1378 2.83 1.45 3.51 125 MPART_ALT_DIFF_COUNT 1285 0.68 1.35 0.36 126 XM_UB999 1263 0.44 1.33 0.01 127 RELAYCOUNTRY_GB 1229 0.83 1.29 0.60 128 TR_XM_DK_Bayes 1223 3.53 1.28 4.62 129 XM_BadFromFormat 1222 0.60 1.28 0.27 130 XMPhish14 1194 0.61 1.25 0.30 131 XMHTMLBadTable_001 1188 0.69 1.25 0.42 132 XMPhish11 1186 1.02 1.24 0.91 133 RELAYCOUNTRY_AT 1182 0.47 1.24 0.09 134 SUBJ_DOLLARS 1142 0.59 1.20 0.29 135 TR_XM_DK_Bayes1 1141 3.33 1.20 4.37 136 BAYES_40 1135 3.93 1.19 5.27 137 HTML_FONT_SIZE_HUGE 1132 0.48 1.19 0.13 138 XMBrknScrpt_02 1123 0.76 1.18 0.56 139 TR_XM_RelayPhish 1120 0.63 1.18 0.37 140 BAYES_20 1113 1.92 1.17 2.28 141 ALL_TRUSTED 1077 18.26 1.13 26.62 142 BASE64_LENGTH_79_INF 1062 0.50 1.11 0.20 143 LONG_JUNK_URI3 1061 0.44 1.11 0.11 144 XM_DK_Undo_01 1047 1.44 1.10 1.60 145 URI_NOVOWEL 1010 0.55 1.06 0.31 146 XM_H_Long_From03 1004 0.48 1.05 0.20 147 RDNS_DYNAMIC 979 0.74 1.03 0.60 148 URI_TRY_3LD 971 1.06 1.02 1.08 149 TR_XM_DK_Bayes2 964 2.75 1.01 3.60 150 XM_HighProb1 961 0.34 1.01 0.02 151 TR_Symld_Words 960 2.55 1.01 3.31 152 TooManyTo_002 947 1.38 0.99 1.57 153 BODY_URI_ONLY 924 0.36 0.97 0.06 154 XM_B_COPY_HTML 899 0.87 0.94 0.83 155 PLING_QUERY 879 0.46 0.92 0.23 156 T_TooManySym_02 874 1.56 0.92 1.88 157 T_FILL_THIS_FORM_SHORT 868 0.82 0.91 0.77 158 TR_MetaPhish_Combo_01 864 0.66 0.91 0.55 159 XMGappySubj_01 855 0.50 0.90 0.31 160 XMGenDplmaNmb 833 0.69 0.87 0.59 161 HTML_IMAGE_ONLY_08 832 0.38 0.87 0.13 162 HTML_FONT_FACE_BAD 820 0.64 0.86 0.53 163 TooManyTo_003 817 0.97 0.86 1.03 164 XM_Body_Obfu01 815 0.37 0.86 0.13 165 HTML_SHORT_LINK_IMG_1 808 0.29 0.85 0.02 166 T_XMDrugObfuBody_00 801 0.90 0.84 0.93 167 RCVD_IN_IADB_VOUCHED 777 2.52 0.82 3.36 168 BODY_ENHANCEMENT 762 0.28 0.80 0.02 169 TM2_M_A_HREF_HREF 749 0.84 0.79 0.86 170 HTML_IMAGE_ONLY_24 747 0.43 0.78 0.26 171 XM_Hitman 745 0.27 0.78 0.02 172 FVGT_m_MULTI_ODD_EMAIL 741 0.32 0.78 0.09 173 HTML_TAG_BALANCE_BODY 729 0.56 0.77 0.46 174 BAYES_05 716 1.19 0.75 1.40 175 HTML_FONT_SIZE_LARGE 715 0.39 0.75 0.21 176 XMSexyCombo_04 715 0.34 0.75 0.15 177 TRACKER_ID 693 0.35 0.73 0.16 178 HTML_IMAGE_ONLY_32 692 0.45 0.73 0.32 179 REMOVE_BEFORE_LINK 685 0.50 0.72 0.39 180 FSL_THIS_IS_ADV 677 0.31 0.71 0.11 181 XM_H_PHPMailer 673 0.72 0.71 0.73 182 RCVD_IN_MSPIKE_WL 666 1.44 0.70 1.81 183 XMSubMetaSSx_00 666 0.31 0.70 0.12 184 XMMoneyMeta_00 657 0.35 0.69 0.19 185 PP_MIME_FAKE_ASCII_TEXT 637 0.37 0.67 0.22 186 T_Symld_Words_02 629 0.53 0.66 0.46 187 XMBSHREFv2 624 0.30 0.65 0.12 188 LOW_PRICE 623 0.29 0.65 0.11 189 TR_Caps_n_Bayes_99 609 0.39 0.64 0.27 190 XMClaimOffer 606 0.42 0.64 0.31 191 RCVD_IN_MSPIKE_H3 601 1.41 0.63 1.79 192 TooManyTo_004 589 0.74 0.62 0.81 193 DKIM_ADSP_CUSTOM_MED 578 0.70 0.61 0.75 194 XM_S_JOY_D 560 0.33 0.59 0.20 195 URIBL_DBL_ABUSE_REDIR 555 0.24 0.58 0.08 196 RELAYCOUNTRY_NL 554 0.29 0.58 0.15 197 XM_OfRef7 537 0.32 0.56 0.20 198 RCVD_IN_SORBS_DUL 536 0.36 0.56 0.26 199 XM_PDF 534 2.03 0.56 2.75 200 TR_XM_FormFill 534 0.20 0.56 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 142924 79.63 92.79 73.21 2 DKIM_SIGNED 132442 73.17 84.07 67.84 3 XM_DK_Pass 130697 71.99 82.30 66.95 4 DKIM_VALID 123669 68.09 77.81 63.35 5 DCC_CHECK_NEGATIVE 121679 47.92 18.39 62.33 6 BAYES_50 108521 46.89 29.07 55.59 7 DKIM_VALID_AU 92534 52.78 63.79 47.40 8 XMListUnsubscribeExists 85438 53.53 73.53 43.77 9 DCC_CHECK 70988 50.68 80.01 36.36 10 T_TM2_M_HEADER_IN_MSG 61209 27.13 18.49 31.35 11 XM_H_QuotedFrom 59760 39.07 56.40 30.61 12 DKIM_VALID_EF 52333 24.74 20.50 26.81 13 ALL_TRUSTED 51963 18.26 1.13 26.62 14 HTML_FONT_LOW_CONTRAST 51418 29.39 35.66 26.34 15 LOC_TINY_FONT_1 40399 26.73 39.10 20.69 16 MIME_HTML_ONLY 36954 23.65 33.32 18.93 17 FVGT_m_MULTI_ODD 34362 20.34 25.95 17.60 18 XMSubLong 34344 19.73 24.11 17.59 19 XM_DK_Undo_02 32030 27.96 51.64 16.41 20 MultiRelay 31039 15.30 14.08 15.90 21 BAYES_99 31033 25.76 45.97 15.90 22 XM_H_Long_From01 29210 12.30 6.85 14.96 23 BAYES_999 27604 22.58 39.87 14.14 24 T_KAM_HTML_FONT_INVALID 25210 15.32 20.24 12.91 25 XM_DKIMWhitelistDomains 23811 8.25 0.16 12.20 26 SUBJ_ALL_CAPS 23783 8.93 2.27 12.18 27 XM_Multi_Part_URI 22219 12.83 15.79 11.38 28 RCVD_IN_RP_SAFE 20733 9.75 7.97 10.62 29 LOTS_OF_MONEY 19812 10.16 10.17 10.15 30 RCVD_IN_RP_CERTIFIED 18694 8.74 7.04 9.58 31 XM_Body_Dirty_Words 17484 12.08 18.48 8.96 32 FSL_BULK_SIG 16903 10.26 13.54 8.66 33 HTML_IMAGE_RATIO_02 15890 12.11 20.25 8.14 34 TR_DCC_Bayes_99 14584 16.87 36.12 7.47 35 XM_Evil_Numbers_Gen 13336 8.99 13.42 6.83 36 BAYES_00 12398 4.82 1.68 6.35 37 BAYES_60 12162 6.73 7.76 6.23 38 LotsOfNums_01 11884 6.49 7.32 6.09 39 T_XMDrugObfuBody_14 11690 7.12 9.44 5.99 40 TooManyTo_001 11089 6.18 7.20 5.68 41 RCVD_IN_MSPIKE_H2 11069 5.36 4.73 5.67 42 BOTNET_IPINHOSTNAME 10961 7.88 12.53 5.61 43 BAYES_40 10289 3.93 1.19 5.27 44 XM_SendGrid 9839 4.82 4.37 5.04 45 IN_ZIMBRA_NJ_WHITELIST 9743 3.36 0.03 4.99 46 RCVD_IN_IADB_LISTED 9495 3.88 1.86 4.86 47 XM_UncommonTLD01 9376 6.67 10.51 4.80 48 T_TooManySym_01 9131 4.26 3.41 4.68 49 TR_XM_DK_Bayes 9020 3.53 1.28 4.62 50 XM_B_Phish_Phrases 8883 6.16 9.46 4.55 51 DKIM_INVALID 8773 5.08 6.27 4.49 52 UNPARSEABLE_RELAY 8729 3.80 2.42 4.47 53 ANY_BOUNCE_MESSAGE 8727 3.14 0.40 4.47 54 BOUNCE_MESSAGE 8719 3.13 0.40 4.47 55 TR_XM_DK_Bayes1 8532 3.33 1.20 4.37 56 XMStrtUSub 8482 4.43 4.59 4.34 57 T_REMOTE_IMAGE 8257 4.43 4.83 4.23 58 RCVD_IN_IADB_SPF 8146 3.31 1.54 4.17 59 BAYES_80 8010 5.41 8.09 4.10 60 TVD_RCVD_IP 7965 2.84 0.31 4.08 61 FROM_EXCESS_BASE64 7934 5.23 7.62 4.06 62 TR_XM_DocInvoice 7720 4.96 7.03 3.95 63 MIME_QP_LONG_LINE 7660 4.05 4.29 3.92 64 RELAYCOUNTRY_META 7587 8.69 18.52 3.89 65 RCVD_IN_IADB_SENDERID 7132 2.93 1.46 3.65 66 HTML_IMAGE_RATIO_04 7078 5.54 9.45 3.63 67 XMSubMetaSx_00 7037 5.12 8.21 3.60 68 TR_XM_DK_Bayes2 7021 2.75 1.01 3.60 69 RCVD_IN_IADB_DK 6849 2.83 1.45 3.51 70 INVALID_MSGID 6785 2.42 0.27 3.48 71 XMNumbers 6727 3.97 5.05 3.45 72 RCVD_IN_IADB_VOUCHED 6556 2.52 0.82 3.36 73 TR_Symld_Words 6453 2.55 1.01 3.31 74 TO_MALFORMED 6452 2.23 0.01 3.31 75 NO_DNS_FOR_FROM 6294 3.89 5.26 3.22 76 MPART_ALT_DIFF 5746 4.35 7.23 2.94 77 XMSexyCombo_05 5613 5.29 10.24 2.88 78 HTML_IMAGE_RATIO_06 5457 3.45 4.79 2.80 79 XM_PDF 5373 2.03 0.56 2.75 80 MIME_HTML_MOSTLY 5334 3.27 4.37 2.73 81 BAYES_95 5297 3.21 4.24 2.71 82 IN_HORDE_ADDRESS_BOOK 5151 1.81 0.10 2.64 83 BAYES_20 4458 1.92 1.17 2.28 84 MAILING_LIST_MULTI 4109 1.98 1.73 2.10 85 T_TooManySym_02 3672 1.56 0.92 1.88 86 RCVD_IN_MSPIKE_WL 3531 1.44 0.70 1.81 87 RCVD_IN_MSPIKE_H3 3485 1.41 0.63 1.79 88 USER_IN_DEF_DKIM_WL 3307 1.15 0.05 1.69 89 RCVD_IN_IADB_OPTIN 3226 1.25 0.44 1.65 90 HTML_IMAGE_RATIO_08 3175 1.88 2.39 1.63 91 XM_CamelCaseFrm001 3173 2.39 3.97 1.63 92 XM_DIRTYINTL 3148 2.18 3.34 1.61 93 XM_DK_Undo_01 3125 1.44 1.10 1.60 94 TooManyTo_002 3058 1.38 0.99 1.57 95 BOTNET 3051 6.79 17.51 1.56 96 XM_ProductURIs 2888 1.92 2.81 1.48 97 HTML_MIME_NO_HTML_TAG 2736 1.83 2.72 1.40 98 BAYES_05 2727 1.19 0.75 1.40 99 RELAYCOUNTRY_CA 2586 1.93 3.16 1.32 100 XM_SPF_SoftFail 2580 1.74 2.61 1.32 101 XM_OfRef6 2578 1.48 1.80 1.32 102 XM_H_PHPOS 2577 1.38 1.50 1.32 103 USER_IN_WHITELIST 2499 0.86 0.00 1.28 104 TM2_M_URI_OPT_OUT 2460 1.85 3.05 1.26 105 T_XMDrugObfuBody_08 2389 1.50 2.05 1.22 106 XM_GoogleGroups 2350 0.98 0.52 1.20 107 URI_HEX 2182 1.65 2.75 1.12 108 XMDiploma_00 2127 1.21 1.46 1.09 109 URI_TRY_3LD 2106 1.06 1.02 1.08 110 UNTRUSTED_Relay 2044 4.97 13.00 1.05 111 T_TooManySym_03 2041 0.77 0.21 1.05 112 XMBdyGiftCard01 2030 1.21 1.55 1.04 113 TooManyTo_003 2013 0.97 0.86 1.03 114 MIME_HTML_ONLY_MULTI 2000 1.83 3.49 1.02 115 T_OBFU_PDF_ATTACH 1913 0.75 0.28 0.98 116 HELO_NODOT 1848 0.74 0.30 0.95 117 T_XMDrugObfuBody_00 1821 0.90 0.84 0.93 118 XMPhish11 1779 1.02 1.24 0.91 119 XMBody_95 1772 0.65 0.11 0.91 120 TM2_M_A_HREF_HREF 1680 0.84 0.79 0.86 121 TM2_M_VERY_LONG_WORD 1666 1.44 2.65 0.85 122 XM_H_Long_From02 1621 1.12 1.72 0.83 123 XM_B_COPY_HTML 1614 0.87 0.94 0.83 124 XM_D_tchamptons_WL 1593 0.55 0.00 0.82 125 TooManyTo_004 1574 0.74 0.62 0.81 126 T_FILL_THIS_FORM_SHORT 1509 0.82 0.91 0.77 127 XM_B_REG_HTML 1460 1.22 2.18 0.75 128 DKIM_ADSP_CUSTOM_MED 1460 0.70 0.61 0.75 129 XM_H_PHPMailer 1431 0.72 0.71 0.73 130 XMSubMetaSxObfu_02 1404 0.63 0.45 0.72 131 XM_UB50 1331 2.08 4.94 0.68 132 RCVD_IN_IADB_DOPTIN 1319 0.48 0.07 0.68 133 TooManyTo_005 1299 0.61 0.50 0.67 134 FILL_THIS_FORM 1297 0.54 0.29 0.66 135 UPPERCASE_75_100 1251 0.44 0.03 0.64 136 DIET_1 1181 0.91 1.53 0.60 137 RELAYCOUNTRY_GB 1175 0.83 1.29 0.60 138 RDNS_DYNAMIC 1165 0.74 1.03 0.60 139 XMGenDplmaNmb 1161 0.69 0.87 0.59 140 T_FILL_THIS_FORM_LOAN 1113 0.45 0.19 0.57 141 XMBody_78 1100 0.89 1.55 0.56 142 XMBrknScrpt_02 1090 0.76 1.18 0.56 143 XMStockSpam_06 1089 0.89 1.58 0.56 144 TR_MetaPhish_Combo_01 1067 0.66 0.91 0.55 145 NML_ADSP_CUSTOM_MED 1062 0.53 0.50 0.54 146 HTML_FONT_FACE_BAD 1034 0.64 0.86 0.53 147 UPPERCASE_50_75 1011 0.39 0.14 0.52 148 XMCapTrack 1008 0.47 0.38 0.52 149 T_TooManySym_04 1004 0.35 0.01 0.51 150 XM_ShortIntro_01 971 0.42 0.27 0.50 151 SpammyFromTLD_01 957 1.03 2.13 0.49 152 XM_H_PHPOS_M 952 0.49 0.48 0.49 153 XMSubMetaI_00 939 1.03 2.15 0.48 154 T_FILL_THIS_FORM_LONG 937 0.37 0.13 0.48 155 XMNoVowels 925 0.42 0.31 0.47 156 RCVD_IN_BL_SPAMCOP_NET 924 1.79 4.49 0.47 157 T_Symld_Words_02 905 0.53 0.66 0.46 158 HTML_TAG_BALANCE_BODY 895 0.56 0.77 0.46 159 XMBody_17 890 1.09 2.40 0.46 160 RELAYCOUNTRY_DE 860 1.53 3.77 0.44 161 XMRcvdHeader_15 851 0.29 0.00 0.44 162 DKIM_ADSP_NXDOMAIN 848 0.39 0.31 0.43 163 XMPhish30 840 1.00 2.17 0.43 164 XMHTMLBadTable_001 812 0.69 1.25 0.42 165 T_XMHurry_00 778 1.01 2.25 0.40 166 XMSexyCombo_01 762 0.88 1.88 0.39 167 REMOVE_BEFORE_LINK 758 0.50 0.72 0.39 168 XM_H_SpoofStaff4 756 0.27 0.04 0.39 169 HTTPS_HTTP_MISMATCH 729 0.37 0.38 0.37 170 TR_XM_RelayPhish 724 0.63 1.18 0.37 171 TR_MetaPhish_Combo_01b 717 0.28 0.09 0.37 172 MPART_ALT_DIFF_COUNT 703 0.68 1.35 0.36 173 XMSUPPORT 694 0.24 0.00 0.36 174 MISSING_HEADERS 694 0.35 0.35 0.36 175 XMLngstWrd_00 672 0.34 0.34 0.34 176 FORGED_GMAIL_RCVD 665 0.39 0.49 0.34 177 XMDateMe_00 649 0.32 0.30 0.33 178 XM_B_Illumintati 647 0.24 0.05 0.33 179 FROM_EGROUPS 633 0.22 0.01 0.32 180 HTML_IMAGE_ONLY_28 631 0.34 0.37 0.32 181 HTML_IMAGE_ONLY_32 619 0.45 0.73 0.32 182 XMLngstWrd_01 618 0.32 0.32 0.32 183 XMClaimOffer 609 0.42 0.64 0.31 184 XMGappySubj_01 607 0.50 0.90 0.31 185 URI_NOVOWEL 598 0.55 1.06 0.31 186 XMBody_29 595 0.26 0.16 0.30 187 TR_LOTS_OF_MONEY2 588 0.72 1.59 0.30 188 T_MONEY_PERCENT 588 0.72 1.59 0.30 189 XMPhish14 583 0.61 1.25 0.30 190 XM_B_TRADE_HTML 576 0.34 0.42 0.30 191 TVD_SPACE_RATIO 569 0.29 0.29 0.29 192 SUBJ_DOLLARS 568 0.59 1.20 0.29 193 RELAYCOUNTRY_AU 561 0.33 0.42 0.29 194 XM_Combo_Sbj 547 0.94 2.28 0.28 195 MY_SERVERS_FOUND 544 0.29 0.32 0.28 196 TR_Caps_n_Bayes_99 534 0.39 0.64 0.27 197 XM_BadFromFormat 530 0.60 1.28 0.27 198 RCVD_IN_PSBL 521 1.33 3.49 0.27 199 MSGID_FROM_MTA_HEADER 517 0.24 0.17 0.26 200 XMSubMetaSxObfu_03 516 0.36 0.55 0.26 ----------------------------------------------------------------------