Email: 533186 Autolearn: 0 AvgScore: 3.58 AvgScanTime: 3.35 sec Spam: 162340 Autolearn: 0 AvgScore: 12.70 AvgScanTime: 4.09 sec Ham: 370846 Autolearn: 0 AvgScore: -0.41 AvgScanTime: 3.03 sec Time Spent Running SA: 496.47 hours Time Spent Processing Spam: 184.30 hours Time Spent Processing Ham: 312.17 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 149758 83.79 92.25 80.09 2 DKIM_SIGNED 137974 70.91 84.99 64.75 3 XM_DK_Pass 133800 69.21 82.42 63.43 4 DKIM_VALID 126086 64.31 77.67 58.47 5 DCC_CHECK 125034 43.92 77.02 29.43 6 XMListUnsubscribeExists 111524 46.81 68.70 37.23 7 DKIM_VALID_AU 98828 47.06 60.88 41.02 8 XM_H_QuotedFrom 89624 38.02 55.21 30.49 9 XM_DK_Undo_02 77666 22.35 47.84 11.20 10 BAYES_99 71467 20.99 44.02 10.90 11 BAYES_999 60918 18.04 37.52 9.51 12 HTML_FONT_LOW_CONTRAST 56559 25.20 34.84 20.98 13 TR_DCC_Bayes_99 55986 14.08 34.49 5.15 14 BAYES_50 53267 50.36 32.81 58.04 15 LOC_TINY_FONT_1 52398 20.67 32.28 15.59 16 MIME_HTML_ONLY 47936 20.64 29.53 16.75 17 XMSubLong 42464 20.71 26.16 18.33 18 DKIM_VALID_EF 41896 25.05 25.81 24.72 19 FVGT_m_MULTI_ODD 40793 19.99 25.13 17.74 20 T_TM2_M_HEADER_IN_MSG 35386 33.23 21.80 38.23 21 DCC_CHECK_NEGATIVE 33353 53.65 20.55 68.13 22 RELAYCOUNTRY_META 32341 9.93 19.92 5.55 23 T_KAM_HTML_FONT_INVALID 31285 14.84 19.27 12.90 24 XM_Body_Dirty_Words 29173 12.38 17.97 9.93 25 MultiRelay 26516 19.10 16.33 20.31 26 XM_Multi_Part_URI 26164 11.20 16.12 9.05 27 FSL_BULK_SIG 23440 9.51 14.44 7.35 28 HTML_IMAGE_RATIO_02 23129 8.25 14.25 5.62 29 LOTS_OF_MONEY 22724 9.49 14.00 7.51 30 XM_Evil_Numbers_Gen 21974 9.26 13.54 7.39 31 BOTNET 21737 4.80 13.39 1.04 32 BOTNET_IPINHOSTNAME 20133 6.12 12.40 3.38 33 UNTRUSTED_Relay 18343 4.44 11.30 1.44 34 XM_H_Long_From01 16084 10.17 9.91 10.29 35 XMSexyCombo_05 15747 5.08 9.70 3.05 36 T_XMDrugObfuBody_14 15698 8.12 9.67 7.45 37 XM_B_Phish_Phrases 14981 5.66 9.23 4.10 38 TR_XM_DocInvoice 13915 5.07 8.57 3.53 39 XM_UncommonTLD01 13688 5.12 8.43 3.68 40 HTML_IMAGE_RATIO_04 13477 4.92 8.30 3.44 41 LotsOfNums_01 13462 7.31 8.29 6.88 42 BAYES_80 11990 4.65 7.39 3.45 43 TooManyTo_001 11904 8.81 7.33 9.46 44 DKIM_INVALID 11888 6.60 7.32 6.28 45 XMSubMetaSx_00 10355 4.54 6.38 3.74 46 BAYES_60 10322 6.21 6.36 6.14 47 MPART_ALT_DIFF 10068 3.53 6.20 2.35 48 FROM_EXCESS_BASE64 9260 3.85 5.70 3.03 49 HTML_IMAGE_RATIO_06 8893 3.31 5.48 2.36 50 XMNumbers 8804 4.06 5.42 3.46 51 XMStrtUSub 8244 4.25 5.08 3.89 52 XM_UB50 8224 2.20 5.07 0.95 53 BAYES_95 8046 3.18 4.96 2.40 54 RCVD_IN_RP_SAFE 7876 6.13 4.85 6.68 55 T_REMOTE_IMAGE 7811 4.40 4.81 4.22 56 XM_OfRef6 7421 2.51 4.57 1.61 57 XM_DIRTYINTL 7177 2.62 4.42 1.84 58 TM2_M_URI_OPT_OUT 6892 2.54 4.25 1.79 59 SpammyFromTLD_02 6846 1.42 4.22 0.20 60 XM_SendGrid 6749 4.64 4.16 4.85 61 RCVD_IN_RP_RNBL 6716 1.31 4.14 0.07 62 HTML_IMAGE_RATIO_08 6697 2.57 4.13 1.89 63 RELAYCOUNTRY_GB 6668 2.11 4.11 1.23 64 MIME_HTML_MOSTLY 6661 2.71 4.10 2.11 65 MIME_QP_LONG_LINE 6586 4.76 4.06 5.07 66 XM_SPF_SoftFail 6439 2.75 3.97 2.22 67 MISSING_HEADERS 6421 2.02 3.96 1.18 68 REPLYTO_WITHOUT_TO_CC 6217 1.46 3.83 0.42 69 RCVD_IN_MSPIKE_H2 6204 4.28 3.82 4.48 70 RCVD_IN_RP_CERTIFIED 6192 5.39 3.81 6.08 71 SUBJ_ALL_CAPS 5802 5.73 3.57 6.67 72 T_TooManySym_01 5529 3.98 3.41 4.23 73 URI_HEX 5499 1.77 3.39 1.07 74 XM_CamelCaseFrm001 5299 2.01 3.26 1.46 75 TR_LOTS_OF_MONEY1 5259 1.09 3.24 0.15 76 RELAYCOUNTRY_CA 5106 1.86 3.15 1.29 77 MIME_HTML_ONLY_MULTI 4888 1.60 3.01 0.98 78 MultiRelay_CC 4790 1.06 2.95 0.23 79 MultiRelay_Combo 4790 1.06 2.95 0.23 80 XMDiploma_00 4632 2.19 2.85 1.90 81 HTML_MIME_NO_HTML_TAG 4209 2.59 2.59 2.59 82 RCVD_IN_BL_SPAMCOP_NET 4157 1.01 2.56 0.33 83 TR_Mismatch_TLD_02 3936 0.78 2.42 0.06 84 XMNoVowels 3855 2.61 2.37 2.71 85 XMSubMetaI_00 3673 0.92 2.26 0.33 86 XM_H_Long_From02 3613 1.24 2.23 0.81 87 XM_URI_RBL 3530 0.74 2.17 0.11 88 T_XMDrugObfuBody_08 3517 1.57 2.17 1.31 89 BOTNET_NORDNS 3495 0.67 2.15 0.02 90 T_FILL_THIS_FORM_SHORT 3455 1.43 2.13 1.12 91 RELAYCOUNTRY_FR 3448 0.85 2.12 0.29 92 RCVD_IN_IADB_LISTED 3422 4.09 2.11 4.96 93 XMHTML_After_End 3304 0.88 2.04 0.38 94 MAILING_LIST_MULTI 3276 2.36 2.02 2.52 95 UNPARSEABLE_RELAY 3210 2.39 1.98 2.57 96 ANY_BOUNCE_MESSAGE 3208 2.96 1.98 3.39 97 BOUNCE_MESSAGE 3207 2.96 1.98 3.39 98 XM_UB99 3154 0.62 1.94 0.03 99 XMPhish11 3150 1.35 1.94 1.09 100 RCVD_IN_IADB_SPF 2967 3.59 1.83 4.36 101 URIBL_BLACK 2883 0.57 1.78 0.04 102 XMGenDplmaNmb 2847 1.29 1.75 1.09 103 XM_OfRef7 2840 0.70 1.75 0.24 104 ALL_TRUSTED 2830 17.24 1.74 24.03 105 RCVD_IN_IADB_SENDERID 2796 3.21 1.72 3.86 106 URIBL_DBL_SPAM 2757 0.54 1.70 0.03 107 RCVD_IN_IADB_DK 2755 3.16 1.70 3.79 108 XMBody_17 2731 0.78 1.68 0.38 109 TM2_M_VERY_LONG_WORD 2715 1.03 1.67 0.75 110 XMStockSpam_06 2667 1.34 1.64 1.21 111 SpammyFromTLD_01 2648 1.04 1.63 0.78 112 XMLongAddy 2637 0.60 1.62 0.15 113 XM_UB60 2635 0.57 1.62 0.10 114 BODY_URI_ONLY 2596 0.54 1.60 0.07 115 BAYES_40 2583 4.86 1.59 6.29 116 DIET_1 2572 0.69 1.58 0.30 117 XM_ProductURIs 2482 1.22 1.53 1.09 118 XM_BadFromFormat 2475 0.65 1.52 0.27 119 XMSexyCombo_01 2394 1.10 1.47 0.93 120 XM_DK_Undo_01 2381 1.97 1.47 2.19 121 HTML_IMAGE_ONLY_08 2355 0.54 1.45 0.14 122 TR_XM_RelayPhish 2349 0.78 1.45 0.49 123 NO_DNS_FOR_FROM 2330 1.16 1.44 1.03 124 XM_UB999 2277 0.44 1.40 0.02 125 RELAYCOUNTRY_CN 2260 0.47 1.39 0.06 126 T_XMDrugObfuBody_00 2219 1.17 1.37 1.09 127 HTML_SHORT_LINK_IMG_1 2215 0.44 1.36 0.03 128 XM_Dr_From 2189 0.47 1.35 0.08 129 DKIM_ADSP_CUSTOM_MED 2179 1.21 1.34 1.15 130 T_TooManySym_02 2178 1.69 1.34 1.84 131 XMPhish30 2169 0.59 1.34 0.26 132 XMSubPhish11 2156 0.49 1.33 0.12 133 FORGED_GMAIL_RCVD 1974 0.75 1.22 0.54 134 XMBdyGiftCard01 1971 0.84 1.21 0.68 135 HTML_TAG_BALANCE_BODY 1936 0.65 1.19 0.41 136 URI_TRY_3LD 1895 0.92 1.17 0.81 137 BAYES_20 1871 2.37 1.15 2.90 138 NML_ADSP_CUSTOM_MED 1844 0.91 1.14 0.81 139 RELAYCOUNTRY_IN 1843 0.42 1.14 0.11 140 XM_H_PHPOS 1840 1.50 1.13 1.66 141 HTML_IMAGE_ONLY_28 1805 0.66 1.11 0.46 142 TooManyTo_002 1791 2.55 1.10 3.18 143 HTML_FONT_SIZE_LARGE 1763 0.50 1.09 0.24 144 XM_UB80 1732 0.35 1.07 0.04 145 BAYES_00 1726 5.79 1.06 7.86 146 XM_HighProb1 1724 0.33 1.06 0.01 147 RELAYCOUNTRY_AT 1712 0.42 1.05 0.14 148 XMSlimDrugH 1710 0.57 1.05 0.36 149 MPART_ALT_DIFF_COUNT 1692 0.56 1.04 0.34 150 HTTPS_HTTP_MISMATCH 1676 0.66 1.03 0.49 151 RCVD_IN_IADB_VOUCHED 1670 2.57 1.03 3.25 152 TR_Symld_Words 1662 1.73 1.02 2.04 153 XM_B_REG_HTML 1657 0.71 1.02 0.58 154 T_Symld_Words_02 1645 0.76 1.01 0.64 155 XMHTMLBadTable_001 1610 0.50 0.99 0.28 156 TR_LOTS_OF_MONEY3 1607 0.44 0.99 0.20 157 XMPhish14 1579 0.52 0.97 0.32 158 TR_Caps_n_Bayes_99 1568 0.35 0.97 0.08 159 FILL_THIS_FORM 1556 0.68 0.96 0.56 160 XMBody_78 1551 0.51 0.96 0.31 161 BODY_ENHANCEMENT 1542 0.31 0.95 0.03 162 TooManyTo_003 1528 1.78 0.94 2.14 163 DEAR_FRIEND 1517 0.30 0.93 0.03 164 HTML_FONT_SIZE_HUGE 1499 0.40 0.92 0.17 165 XMPhish19 1491 0.30 0.92 0.03 166 XM_PDF 1481 4.39 0.91 5.91 167 T_XMHurry_00 1473 0.57 0.91 0.43 168 RELAYCOUNTRY_NL 1464 0.52 0.90 0.35 169 XMBrknScrpt_02 1448 0.57 0.89 0.43 170 RDNS_DYNAMIC 1440 0.51 0.89 0.35 171 HTML_FONT_FACE_BAD 1439 0.58 0.89 0.44 172 REMOVE_BEFORE_LINK 1418 0.41 0.87 0.21 173 T_MONEY_PERCENT 1412 0.41 0.87 0.21 174 TR_LOTS_OF_MONEY2 1412 0.41 0.87 0.21 175 XMSubNoVowel 1388 0.83 0.85 0.82 176 URI_NOVOWEL 1383 0.53 0.85 0.40 177 PLING_QUERY 1318 0.41 0.81 0.23 178 XM_H_PHPMailer 1305 0.78 0.80 0.77 179 T_HTML_TAG_BALANCE_CENTER 1299 0.38 0.80 0.19 180 XM_RXBody 1275 0.33 0.79 0.12 181 XMSubMetaSxObfu_03 1268 0.44 0.78 0.29 182 XM_B_COPY_HTML 1255 0.57 0.77 0.48 183 T_FILL_THIS_FORM_LOAN 1237 0.36 0.76 0.18 184 TM2_M_BODY_EMPTY 1224 0.63 0.75 0.57 185 RELAYCOUNTRY_DE 1215 0.77 0.75 0.78 186 TR_Mismatch_TLD_01 1205 0.40 0.74 0.25 187 TR_XM_DK_Bayes 1192 3.52 0.73 4.74 188 TooManyTo_004 1190 1.34 0.73 1.61 189 HTML_IMAGE_ONLY_24 1182 0.49 0.73 0.39 190 XM_H_Long_From03 1162 0.32 0.72 0.15 191 XMCapTrack 1152 1.54 0.71 1.90 192 URIBL_SBL_A 1152 0.30 0.71 0.13 193 RCVD_IN_MSPIKE_WL 1141 1.39 0.70 1.69 194 MONEY_FRAUD_5 1138 0.22 0.70 0.00 195 XMEmptyBody_01 1121 0.33 0.69 0.17 196 RCVD_IN_MSPIKE_H3 1120 1.39 0.69 1.69 197 REPTO_QUOTE_YAHOO 1118 0.27 0.69 0.09 198 FVGT_m_MULTI_ODD_EMAIL 1117 0.26 0.69 0.07 199 XMMoneyMeta_00 1113 0.57 0.69 0.52 200 TR_XM_DK_Bayes1 1106 3.09 0.68 4.15 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 297015 83.79 92.25 80.09 2 DCC_CHECK_NEGATIVE 252675 53.65 20.55 68.13 3 DKIM_SIGNED 240124 70.91 84.99 64.75 4 XM_DK_Pass 235217 69.21 82.42 63.43 5 DKIM_VALID 216828 64.31 77.67 58.47 6 BAYES_50 215257 50.36 32.81 58.04 7 DKIM_VALID_AU 152111 47.06 60.88 41.02 8 T_TM2_M_HEADER_IN_MSG 141769 33.23 21.80 38.23 9 XMListUnsubscribeExists 138067 46.81 68.70 37.23 10 XM_H_QuotedFrom 113068 38.02 55.21 30.49 11 DCC_CHECK 109128 43.92 77.02 29.43 12 DKIM_VALID_EF 91690 25.05 25.81 24.72 13 ALL_TRUSTED 89115 17.24 1.74 24.03 14 HTML_FONT_LOW_CONTRAST 77791 25.20 34.84 20.98 15 MultiRelay 75319 19.10 16.33 20.31 16 XMSubLong 67958 20.71 26.16 18.33 17 FVGT_m_MULTI_ODD 65798 19.99 25.13 17.74 18 MIME_HTML_ONLY 62104 20.64 29.53 16.75 19 LOC_TINY_FONT_1 57811 20.67 32.28 15.59 20 T_KAM_HTML_FONT_INVALID 47826 14.84 19.27 12.90 21 XM_DK_Undo_02 41518 22.35 47.84 11.20 22 BAYES_99 40439 20.99 44.02 10.90 23 XM_H_Long_From01 38156 10.17 9.91 10.29 24 XM_Body_Dirty_Words 36838 12.38 17.97 9.93 25 BAYES_999 35256 18.04 37.52 9.51 26 TooManyTo_001 35091 8.81 7.33 9.46 27 XM_Multi_Part_URI 33566 11.20 16.12 9.05 28 BAYES_00 29141 5.79 1.06 7.86 29 XM_DKIMWhitelistDomains 28281 5.31 0.03 7.63 30 LOTS_OF_MONEY 27866 9.49 14.00 7.51 31 T_XMDrugObfuBody_14 27614 8.12 9.67 7.45 32 XM_Evil_Numbers_Gen 27406 9.26 13.54 7.39 33 FSL_BULK_SIG 27257 9.51 14.44 7.35 34 LotsOfNums_01 25498 7.31 8.29 6.88 35 RCVD_IN_RP_SAFE 24784 6.13 4.85 6.68 36 SUBJ_ALL_CAPS 24726 5.73 3.57 6.67 37 BAYES_40 23333 4.86 1.59 6.29 38 DKIM_INVALID 23296 6.60 7.32 6.28 39 BAYES_60 22784 6.21 6.36 6.14 40 RCVD_IN_RP_CERTIFIED 22561 5.39 3.81 6.08 41 XM_PDF 21935 4.39 0.91 5.91 42 IN_ZIMBRA_NJ_WHITELIST 21520 4.05 0.05 5.80 43 HTML_IMAGE_RATIO_02 20852 8.25 14.25 5.62 44 RELAYCOUNTRY_META 20587 9.93 19.92 5.55 45 TR_DCC_Bayes_99 19088 14.08 34.49 5.15 46 MIME_QP_LONG_LINE 18792 4.76 4.06 5.07 47 RCVD_IN_IADB_LISTED 18404 4.09 2.11 4.96 48 XM_SendGrid 17972 4.64 4.16 4.85 49 TR_XM_DK_Bayes 17594 3.52 0.73 4.74 50 RCVD_IN_MSPIKE_H2 16600 4.28 3.82 4.48 51 RCVD_IN_IADB_SPF 16152 3.59 1.83 4.36 52 T_TooManySym_01 15690 3.98 3.41 4.23 53 T_REMOTE_IMAGE 15634 4.40 4.81 4.22 54 TR_XM_DK_Bayes1 15394 3.09 0.68 4.15 55 XM_B_Phish_Phrases 15216 5.66 9.23 4.10 56 XMStrtUSub 14439 4.25 5.08 3.89 57 RCVD_IN_IADB_SENDERID 14314 3.21 1.72 3.86 58 RCVD_IN_IADB_DK 14072 3.16 1.70 3.79 59 XMSubMetaSx_00 13874 4.54 6.38 3.74 60 XM_UncommonTLD01 13634 5.12 8.43 3.68 61 TR_XM_DocInvoice 13107 5.07 8.57 3.53 62 XMNumbers 12824 4.06 5.42 3.46 63 BAYES_80 12803 4.65 7.39 3.45 64 HTML_IMAGE_RATIO_04 12771 4.92 8.30 3.44 65 ANY_BOUNCE_MESSAGE 12582 2.96 1.98 3.39 66 BOUNCE_MESSAGE 12578 2.96 1.98 3.39 67 BOTNET_IPINHOSTNAME 12521 6.12 12.40 3.38 68 TR_XM_DK_Bayes2 12253 2.48 0.61 3.30 69 RCVD_IN_IADB_VOUCHED 12035 2.57 1.03 3.25 70 TooManyTo_002 11801 2.55 1.10 3.18 71 XMSexyCombo_05 11318 5.08 9.70 3.05 72 FROM_EXCESS_BASE64 11253 3.85 5.70 3.03 73 BAYES_20 10758 2.37 1.15 2.90 74 XMNoVowels 10066 2.61 2.37 2.71 75 HELO_NODOT 9996 1.99 0.39 2.70 76 HTML_MIME_NO_HTML_TAG 9607 2.59 2.59 2.59 77 UNPARSEABLE_RELAY 9513 2.39 1.98 2.57 78 MAILING_LIST_MULTI 9328 2.36 2.02 2.52 79 TVD_RCVD_IP 9004 1.83 0.46 2.43 80 BAYES_95 8915 3.18 4.96 2.40 81 HTML_IMAGE_RATIO_06 8763 3.31 5.48 2.36 82 MPART_ALT_DIFF 8732 3.53 6.20 2.35 83 IN_HORDE_ADDRESS_BOOK 8506 1.62 0.08 2.29 84 XM_SPF_SoftFail 8229 2.75 3.97 2.22 85 XM_DK_Undo_01 8110 1.97 1.47 2.19 86 TooManyTo_003 7952 1.78 0.94 2.14 87 MIME_HTML_MOSTLY 7812 2.71 4.10 2.11 88 TR_Symld_Words 7553 1.73 1.02 2.04 89 RCVD_IN_IADB_OPTIN 7430 1.58 0.60 2.00 90 XMDiploma_00 7043 2.19 2.85 1.90 91 XMCapTrack 7041 1.54 0.71 1.90 92 HTML_IMAGE_RATIO_08 6998 2.57 4.13 1.89 93 BAYES_05 6962 1.49 0.60 1.88 94 T_TooManySym_02 6821 1.69 1.34 1.84 95 XM_DIRTYINTL 6816 2.62 4.42 1.84 96 INVALID_MSGID 6815 1.34 0.21 1.84 97 TO_MALFORMED 6732 1.27 0.01 1.82 98 TM2_M_URI_OPT_OUT 6646 2.54 4.25 1.79 99 RCVD_IN_MSPIKE_WL 6271 1.39 0.70 1.69 100 RCVD_IN_MSPIKE_H3 6267 1.39 0.69 1.69 101 XM_H_PHPOS 6168 1.50 1.13 1.66 102 TooManyTo_004 5975 1.34 0.73 1.61 103 XM_OfRef6 5970 2.51 4.57 1.61 104 XM_CamelCaseFrm001 5428 2.01 3.26 1.46 105 UNTRUSTED_Relay 5325 4.44 11.30 1.44 106 XM_GoogleGroups 5255 1.16 0.59 1.42 107 USER_IN_DEF_DKIM_WL 5059 1.00 0.16 1.36 108 TooManyTo_005 4948 1.12 0.62 1.33 109 T_XMDrugObfuBody_08 4852 1.57 2.17 1.31 110 RELAYCOUNTRY_CA 4797 1.86 3.15 1.29 111 RELAYCOUNTRY_GB 4564 2.11 4.11 1.23 112 XMStockSpam_06 4482 1.34 1.64 1.21 113 MISSING_HEADERS 4373 2.02 3.96 1.18 114 DKIM_ADSP_CUSTOM_MED 4264 1.21 1.34 1.15 115 T_FILL_THIS_FORM_SHORT 4164 1.43 2.13 1.12 116 XMPhish11 4050 1.35 1.94 1.09 117 XMGenDplmaNmb 4049 1.29 1.75 1.09 118 XM_ProductURIs 4033 1.22 1.53 1.09 119 T_XMDrugObfuBody_00 4026 1.17 1.37 1.09 120 URI_HEX 3961 1.77 3.39 1.07 121 BOTNET 3845 4.80 13.39 1.04 122 NO_DNS_FOR_FROM 3832 1.16 1.44 1.03 123 MIME_HTML_ONLY_MULTI 3631 1.60 3.01 0.98 124 XM_UB50 3509 2.20 5.07 0.95 125 XMSexyCombo_01 3461 1.10 1.47 0.93 126 T_OBFU_PDF_ATTACH 3255 0.68 0.21 0.88 127 MSGID_NOFQDN1 3189 0.60 0.01 0.86 128 XMSubNoVowel 3049 0.83 0.85 0.82 129 NML_ADSP_CUSTOM_MED 3022 0.91 1.14 0.81 130 XM_H_Long_From02 3014 1.24 2.23 0.81 131 URI_TRY_3LD 2997 0.92 1.17 0.81 132 TR_MetaPhish_Combo_01 2940 0.75 0.66 0.79 133 SpammyFromTLD_01 2902 1.04 1.63 0.78 134 RELAYCOUNTRY_DE 2900 0.77 0.75 0.78 135 XM_H_PHPMailer 2844 0.78 0.80 0.77 136 T_TooManySym_03 2801 0.69 0.53 0.76 137 TM2_M_VERY_LONG_WORD 2798 1.03 1.67 0.75 138 USER_IN_WHITELIST 2769 0.52 0.00 0.75 139 SHORT_HELO_AND_INLINE_IMAGE 2601 0.52 0.11 0.70 140 XMSubEmpty 2583 0.66 0.56 0.70 141 XMLngstWrd_00 2551 0.62 0.46 0.69 142 XMBdyGiftCard01 2529 0.84 1.21 0.68 143 T_Symld_Words_02 2384 0.76 1.01 0.64 144 XMLngstWrd_01 2350 0.56 0.40 0.63 145 RCVD_IN_SORBS_DUL 2304 0.57 0.47 0.62 146 XM_ShortIntro_01 2268 0.52 0.30 0.61 147 XM_B_REG_HTML 2149 0.71 1.02 0.58 148 TM2_M_BODY_EMPTY 2121 0.63 0.75 0.57 149 AC_DIV_BONANZA 2080 0.47 0.25 0.56 150 FILL_THIS_FORM 2068 0.68 0.96 0.56 151 XMGappySubj_01 2058 0.47 0.27 0.55 152 HTML_IMAGE_ONLY_32 2049 0.57 0.61 0.55 153 FORGED_GMAIL_RCVD 2006 0.75 1.22 0.54 154 XMSexyCombo_04 1994 0.51 0.46 0.54 155 XMBody_95 1954 0.40 0.10 0.53 156 XMMoneyMeta_00 1925 0.57 0.69 0.52 157 XMDateMe_00 1894 0.45 0.32 0.51 158 HTTPS_HTTP_MISMATCH 1822 0.66 1.03 0.49 159 TR_XM_RelayPhish 1799 0.78 1.45 0.49 160 KHOP_DYNAMIC 1770 0.50 0.55 0.48 161 XM_B_COPY_HTML 1769 0.57 0.77 0.48 162 HTML_IMAGE_ONLY_28 1722 0.66 1.11 0.46 163 HTML_IMAGE_ONLY_20 1694 0.48 0.54 0.46 164 TVD_SPACE_RATIO 1666 0.41 0.32 0.45 165 HTML_FONT_FACE_BAD 1641 0.58 0.89 0.44 166 XMBrknScrpt_02 1612 0.57 0.89 0.43 167 XM_H_Trusted_IP 1604 0.30 0.00 0.43 168 T_XMHurry_00 1590 0.57 0.91 0.43 169 REPLYTO_WITHOUT_TO_CC 1558 1.46 3.83 0.42 170 HTML_TAG_BALANCE_BODY 1507 0.65 1.19 0.41 171 XMSubMetaSxObfu_02 1477 0.34 0.21 0.40 172 XM_H_PHPOS_M 1475 0.42 0.48 0.40 173 URI_NOVOWEL 1469 0.53 0.85 0.40 174 RELAYCOUNTRY_AU 1464 0.47 0.65 0.39 175 HTML_IMAGE_ONLY_24 1435 0.49 0.73 0.39 176 XMBody_17 1423 0.78 1.68 0.38 177 XMRcvdHeader_15 1420 0.27 0.00 0.38 178 XMHTML_After_End 1410 0.88 2.04 0.38 179 XMSlimDrugH 1334 0.57 1.05 0.36 180 DKIM_ADSP_NXDOMAIN 1328 0.36 0.37 0.36 181 T_TooManySym_04 1316 0.26 0.05 0.35 182 RELAYCOUNTRY_NL 1316 0.52 0.90 0.35 183 HTML_IMAGE_ONLY_16 1305 0.30 0.18 0.35 184 GMD_PDF_EMPTY_BODY 1305 0.28 0.11 0.35 185 TM2_M_A_HREF_HREF 1305 0.41 0.56 0.35 186 RDNS_DYNAMIC 1280 0.51 0.89 0.35 187 MPART_ALT_DIFF_COUNT 1278 0.56 1.04 0.34 188 XMSolicitRefs_0 1274 0.42 0.59 0.34 189 XM_B_TRADE_HTML 1240 0.36 0.43 0.33 190 XM_H_Undi_Recip 1239 0.29 0.19 0.33 191 RCVD_IN_BL_SPAMCOP_NET 1239 1.01 2.56 0.33 192 XMSubMetaI_00 1233 0.92 2.26 0.33 193 TO_NO_BRKTS_HTML_ONLY 1210 0.28 0.18 0.33 194 XMLKML 1192 0.22 0.00 0.32 195 XMPhish14 1185 0.52 0.97 0.32 196 XMBody_78 1149 0.51 0.96 0.31 197 DOS_OUTLOOK_TO_MX 1129 0.25 0.12 0.30 198 DIET_1 1117 0.69 1.58 0.30 199 T_HTML_ATTACH 1092 0.23 0.08 0.29 200 XMSubMetaSxObfu_03 1083 0.44 0.78 0.29 ----------------------------------------------------------------------