Email: 622608 Autolearn: 0 AvgScore: 2.41 AvgScanTime: 3.72 sec Spam: 153656 Autolearn: 0 AvgScore: 12.66 AvgScanTime: 4.26 sec Ham: 468952 Autolearn: 0 AvgScore: -0.95 AvgScanTime: 3.54 sec Time Spent Running SA: 642.83 hours Time Spent Processing Spam: 181.85 hours Time Spent Processing Ham: 460.98 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 141660 88.65 92.19 87.49 2 DKIM_SIGNED 119546 74.74 77.80 73.73 3 DCC_CHECK 118362 49.88 77.03 40.99 4 XM_DK_Pass 115223 73.04 74.99 72.40 5 DKIM_VALID 107968 68.78 70.27 68.29 6 XMListUnsubscribeExists 102070 54.12 66.43 50.08 7 DKIM_VALID_AU 86131 49.82 56.05 47.78 8 XM_H_QuotedFrom 75646 41.82 49.23 39.39 9 BAYES_50 71660 54.35 46.64 56.88 10 HTML_FONT_LOW_CONTRAST 57167 30.25 37.20 27.98 11 LOC_TINY_FONT_1 54548 24.42 35.50 20.79 12 MIME_HTML_ONLY 53292 23.92 34.68 20.39 13 STYLE_GIBBERISH 52800 29.43 34.36 27.81 14 XM_DK_Undo_02 52481 14.19 34.15 7.64 15 FVGT_m_MULTI_ODD 42930 22.60 27.94 20.85 16 BAYES_99 42251 11.35 27.50 6.06 17 XMSubLong 40233 22.59 26.18 21.42 18 TR_DCC_Bayes_99 34330 8.13 22.34 3.47 19 BAYES_999 33689 9.30 21.92 5.16 20 DCC_CHECK_NEGATIVE 32687 48.18 21.27 57.00 21 RELAYCOUNTRY_META 32354 8.86 21.06 4.86 22 DKIM_VALID_EF 30113 24.66 19.60 26.32 23 T_KAM_HTML_FONT_INVALID 29393 17.56 19.13 17.04 24 T_TM2_M_HEADER_IN_MSG 28930 26.87 18.83 29.51 25 XM_Body_Dirty_Words 28713 14.29 18.69 12.85 26 BOTNET 28343 6.00 18.45 1.92 27 XM_Multi_Part_URI 28145 13.95 18.32 12.52 28 LOTS_OF_MONEY 26363 12.20 17.16 10.57 29 XM_Evil_Numbers_Gen 25449 10.35 16.56 8.32 30 HTML_IMAGE_RATIO_02 25415 10.75 16.54 8.86 31 MultiRelay 25153 17.26 16.37 17.55 32 BOTNET_IPINHOSTNAME 24056 7.49 15.66 4.81 33 UNTRUSTED_Relay 24018 4.76 15.63 1.20 34 FSL_BULK_SIG 21192 8.39 13.79 6.61 35 XM_UncommonTLD01 17890 5.14 11.64 3.01 36 XMSexyCombo_05 15990 5.39 10.41 3.75 37 FROM_EXCESS_BASE64 15883 5.36 10.34 3.73 38 T_XMDrugObfuBody_14 14561 8.27 9.48 7.87 39 XMSubMetaSx_00 13389 5.14 8.71 3.97 40 HTML_IMAGE_RATIO_04 13317 5.54 8.67 4.51 41 XM_B_Phish_Phrases 11731 5.99 7.63 5.45 42 DKIM_INVALID 11578 5.96 7.54 5.44 43 HTML_MIME_NO_HTML_TAG 11421 3.62 7.43 2.37 44 TooManyTo_001 11405 7.55 7.42 7.59 45 XM_UB50 11401 2.35 7.42 0.69 46 MPART_ALT_DIFF 11392 4.16 7.41 3.09 47 XM_H_Long_From01 10822 6.26 7.04 6.01 48 BAYES_60 10617 5.51 6.91 5.05 49 BAYES_80 10141 3.84 6.60 2.93 50 SpammyFromTLD_02 9874 1.86 6.43 0.37 51 LotsOfNums_01 9055 8.02 5.89 8.71 52 XMNumbers 8734 4.24 5.68 3.77 53 BODY_URI_ONLY 8112 1.39 5.28 0.11 54 RCVD_IN_RP_RNBL 7944 1.40 5.17 0.16 55 MISSING_HEADERS 7475 1.55 4.86 0.46 56 HTML_SHORT_LINK_IMG_1 6978 1.15 4.54 0.04 57 TM2_M_URI_OPT_OUT 6726 2.59 4.38 2.01 58 MIME_HEADER_CTYPE_ONLY 6597 1.13 4.29 0.09 59 MultiRelay_Combo 6480 1.16 4.22 0.16 60 MultiRelay_CC 6480 1.16 4.22 0.16 61 T_REMOTE_IMAGE 6437 4.32 4.19 4.36 62 XM_DIRTYINTL 6408 2.39 4.17 1.80 63 URI_HEX 6341 2.19 4.13 1.55 64 HTML_IMAGE_RATIO_06 6340 3.97 4.13 3.91 65 XMStrtUSub 6088 4.61 3.96 4.82 66 XM_SendGrid 6055 5.21 3.94 5.63 67 T_XMDrugObfuBody_08 6033 1.94 3.93 1.29 68 MIME_HTML_ONLY_MULTI 5928 2.02 3.86 1.42 69 MIME_HTML_MOSTLY 5882 2.88 3.83 2.57 70 XM_SPF_SoftFail 5823 2.25 3.79 1.74 71 ANY_BOUNCE_MESSAGE 5722 3.35 3.72 3.23 72 BOUNCE_MESSAGE 5722 3.35 3.72 3.23 73 TR_LOTS_OF_MONEY3 5703 1.22 3.71 0.40 74 BAYES_95 5592 2.24 3.64 1.78 75 XM_BadFromFormat 5460 0.98 3.55 0.14 76 XM_CamelCaseFrm001 5367 2.09 3.49 1.63 77 RELAYCOUNTRY_DE 5237 1.07 3.41 0.30 78 RCVD_IN_RP_SAFE 4761 7.26 3.10 8.62 79 SHORTENER_SHORT_IMG 4610 0.74 3.00 0.00 80 BOTNET_NORDNS 4555 0.74 2.96 0.01 81 HTML_FONT_SIZE_HUGE 4530 0.81 2.95 0.11 82 RELAYCOUNTRY_CA 4482 1.78 2.92 1.41 83 HTML_IMAGE_ONLY_08 4433 0.80 2.89 0.11 84 BAYES_40 4348 4.27 2.83 4.74 85 HTML_IMAGE_RATIO_08 4295 2.49 2.80 2.39 86 URI_BUFFLY 4291 0.69 2.79 0.00 87 RCVD_IN_MSPIKE_H2 4190 3.96 2.73 4.37 88 MIME_QP_LONG_LINE 4153 4.97 2.70 5.71 89 SUBJ_ALL_CAPS 4095 2.24 2.67 2.10 90 XM_UB60 4072 0.71 2.65 0.07 91 BAYES_20 3907 3.08 2.54 3.25 92 XM_OfRef6 3743 1.77 2.44 1.55 93 T_TooManySym_01 3681 4.53 2.40 5.23 94 UNPARSEABLE_RELAY 3606 2.56 2.35 2.63 95 XMSexyCombo_01 3586 1.08 2.33 0.67 96 RCVD_IN_BL_SPAMCOP_NET 3566 0.84 2.32 0.36 97 DKIM_ADSP_NXDOMAIN 3556 0.96 2.31 0.51 98 RCVD_IN_RP_CERTIFIED 3406 6.17 2.22 7.46 99 XMDiploma_00 3404 1.78 2.22 1.64 100 RELAYCOUNTRY_CN 3277 0.57 2.13 0.06 101 XM_URI_RBL 3189 0.77 2.08 0.34 102 XMPhish11 3174 1.37 2.07 1.14 103 XM_UB99 2983 0.48 1.94 0.01 104 RELAYCOUNTRY_IN 2940 0.57 1.91 0.13 105 XMBdyGiftCard01 2933 1.21 1.91 0.98 106 RELAYCOUNTRY_FR 2898 0.64 1.89 0.23 107 TM2_M_VERY_LONG_WORD 2852 1.12 1.86 0.88 108 T_XMHurry_00 2845 0.98 1.85 0.69 109 T_MONEY_PERCENT 2807 0.68 1.83 0.30 110 TR_LOTS_OF_MONEY2 2807 0.68 1.83 0.30 111 FROM_SUSPICIOUS_NTLD 2794 0.50 1.82 0.07 112 BAYES_00 2744 13.32 1.79 17.10 113 XMGenDplmaNmb 2640 1.28 1.72 1.14 114 T_XMDrugObfuBody_00 2578 1.00 1.68 0.78 115 URIBL_DBL_SPAM 2518 0.48 1.64 0.10 116 XMStockSpam_06 2509 1.41 1.63 1.33 117 BAYES_05 2396 2.04 1.56 2.19 118 TR_MetaPhish_Combo_01 2390 1.39 1.56 1.33 119 HTML_IMAGE_ONLY_04 2377 0.43 1.55 0.07 120 XM_UB80 2373 0.41 1.54 0.04 121 XM_H_Long_From02 2356 1.16 1.53 1.04 122 SpammyFromTLD_01 2345 0.90 1.53 0.69 123 TVD_SPACE_RATIO_MINFP 2332 0.38 1.52 0.00 124 XM_ProductURIs 2319 0.95 1.51 0.77 125 XMSubMetaI_00 2310 0.77 1.50 0.53 126 XM_XX_Yahoo 2275 0.41 1.48 0.07 127 LOW_PRICE 2245 0.50 1.46 0.18 128 HTML_SHORT_CENTER 2187 0.35 1.42 0.00 129 URIBL_BLACK 2147 0.38 1.40 0.05 130 RCVD_IN_IADB_LISTED 2142 4.89 1.39 6.04 131 LONG_HEX_URI 2081 0.46 1.35 0.17 132 MAILING_LIST_MULTI 2076 2.10 1.35 2.34 133 HTML_FONT_FACE_BAD 2029 0.68 1.32 0.46 134 XMPhish30 1979 0.59 1.29 0.36 135 DIET_1 1967 0.51 1.28 0.25 136 TR_XM_DK_Bayes 1955 10.48 1.27 13.50 137 ALL_TRUSTED 1943 14.16 1.26 18.38 138 RELAYCOUNTRY_AT 1917 0.52 1.25 0.28 139 T_XMDrugObfuBody_01 1868 0.33 1.22 0.04 140 TR_XM_RelayPhish 1856 0.71 1.21 0.55 141 XM_H_PHPOS 1850 1.10 1.20 1.07 142 DKIM_ADSP_CUSTOM_MED 1809 1.05 1.18 1.01 143 FSL_THIS_IS_ADV 1809 0.46 1.18 0.23 144 RELAYCOUNTRY_GB 1801 0.99 1.17 0.93 145 MPART_ALT_DIFF_COUNT 1780 0.44 1.16 0.20 146 TR_Mismatch_TLD_02 1779 0.33 1.16 0.05 147 XMSubMetaSSx_00 1769 0.44 1.15 0.21 148 NML_ADSP_CUSTOM_MED 1766 0.83 1.15 0.72 149 T_FILL_THIS_FORM_SHORT 1739 0.90 1.13 0.82 150 XMSlimDrugH 1731 0.55 1.13 0.37 151 XMBody_78 1706 0.62 1.11 0.45 152 TR_XM_DK_Bayes1 1681 9.84 1.09 12.70 153 RELAYCOUNTRY_NL 1666 0.44 1.08 0.23 154 TooManyTo_002 1660 1.78 1.08 2.01 155 XMSubMetaSxObfu_03 1653 0.77 1.08 0.68 156 TR_Symld_Words 1650 1.74 1.07 1.95 157 RDNS_DYNAMIC 1642 0.57 1.07 0.41 158 RCVD_IN_IADB_SPF 1627 4.23 1.06 5.27 159 XM_UB999 1617 0.26 1.05 0.00 160 MONEY_FRAUD_5 1611 0.26 1.05 0.00 161 SUBJ_DOLLARS 1577 0.47 1.03 0.29 162 DATE_IN_PAST_06_12 1575 0.29 1.03 0.05 163 FORGED_GMAIL_RCVD 1566 0.65 1.02 0.53 164 XM_B_COPY_HTML 1553 0.67 1.01 0.56 165 HTML_IMAGE_ONLY_12 1534 0.41 1.00 0.22 166 XMSubNoVowel 1530 0.49 1.00 0.33 167 XMMoneyMeta_00 1525 0.61 0.99 0.48 168 RCVD_IN_IADB_VOUCHED 1511 3.19 0.98 3.92 169 TR_XM_DK_Bayes2 1502 7.70 0.98 9.90 170 RCVD_IN_IADB_SENDERID 1499 3.74 0.98 4.64 171 XM_B_REG_HTML 1496 0.57 0.97 0.43 172 TooManyTo_003 1492 1.25 0.97 1.34 173 RCVD_IN_IADB_DK 1471 3.65 0.96 4.54 174 XM_DK_Undo_01 1468 1.61 0.96 1.83 175 PLING_QUERY 1423 0.70 0.93 0.62 176 BODY_ENHANCEMENT 1411 0.25 0.92 0.03 177 XMBody_17 1388 0.58 0.90 0.48 178 URI_TRY_3LD 1380 1.24 0.90 1.35 179 LONG_JUNK_URI 1372 0.26 0.89 0.05 180 TooManyTo_004 1356 0.94 0.88 0.96 181 XM_Hitman 1350 0.24 0.88 0.03 182 XMHTMLBadTable_001 1318 0.67 0.86 0.60 183 NO_DNS_FOR_FROM 1312 0.41 0.85 0.27 184 XMHTML_After_End 1293 0.55 0.84 0.45 185 TooManyTo_005 1282 0.81 0.83 0.80 186 URI_NOVOWEL 1280 0.76 0.83 0.73 187 INVALID_DATE 1279 0.25 0.83 0.06 188 T_HTML_TAG_BALANCE_CENTER 1279 0.29 0.83 0.11 189 XMClaimOffer 1279 0.28 0.83 0.10 190 HTML_TAG_BALANCE_BODY 1248 0.56 0.81 0.48 191 FILL_THIS_FORM 1235 0.61 0.80 0.55 192 XM_UB95 1234 0.21 0.80 0.01 193 HTML_FONT_SIZE_LARGE 1233 0.31 0.80 0.15 194 FILL_THIS_FORM_LONG 1229 0.39 0.80 0.26 195 RELAYCOUNTRY_ID 1201 0.20 0.78 0.01 196 XM_H_PHPMailer 1197 0.73 0.78 0.72 197 XM_S_JOY_D 1188 0.48 0.77 0.39 198 TM2_M_A_HREF_HREF 1165 0.75 0.76 0.75 199 XM_TLDProd2 1155 0.25 0.75 0.09 200 ADVANCE_FEE_4_NEW_MONEY 1153 0.19 0.75 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 410281 88.65 92.19 87.49 2 DKIM_SIGNED 345765 74.74 77.80 73.73 3 XM_DK_Pass 339539 73.04 74.99 72.40 4 DKIM_VALID 320236 68.78 70.27 68.29 5 DCC_CHECK_NEGATIVE 267283 48.18 21.27 57.00 6 BAYES_50 266736 54.35 46.64 56.88 7 XMListUnsubscribeExists 234874 54.12 66.43 50.08 8 DKIM_VALID_AU 224076 49.82 56.05 47.78 9 DCC_CHECK 192204 49.88 77.03 40.99 10 XM_H_QuotedFrom 184727 41.82 49.23 39.39 11 T_TM2_M_HEADER_IN_MSG 138386 26.87 18.83 29.51 12 HTML_FONT_LOW_CONTRAST 131191 30.25 37.20 27.98 13 STYLE_GIBBERISH 130412 29.43 34.36 27.81 14 DKIM_VALID_EF 123447 24.66 19.60 26.32 15 XMSubLong 100436 22.59 26.18 21.42 16 FVGT_m_MULTI_ODD 97778 22.60 27.94 20.85 17 LOC_TINY_FONT_1 97497 24.42 35.50 20.79 18 MIME_HTML_ONLY 95631 23.92 34.68 20.39 19 ALL_TRUSTED 86199 14.16 1.26 18.38 20 MultiRelay 82299 17.26 16.37 17.55 21 BAYES_00 80187 13.32 1.79 17.10 22 T_KAM_HTML_FONT_INVALID 79912 17.56 19.13 17.04 23 TR_XM_DK_Bayes 63291 10.48 1.27 13.50 24 XM_DKIMWhitelistDomains 60321 9.70 0.04 12.86 25 XM_Body_Dirty_Words 60251 14.29 18.69 12.85 26 TR_XM_DK_Bayes1 59564 9.84 1.09 12.70 27 XM_Multi_Part_URI 58736 13.95 18.32 12.52 28 LOTS_OF_MONEY 49565 12.20 17.16 10.57 29 TR_XM_DK_Bayes2 46432 7.70 0.98 9.90 30 HTML_IMAGE_RATIO_02 41535 10.75 16.54 8.86 31 LotsOfNums_01 40865 8.02 5.89 8.71 32 RCVD_IN_RP_SAFE 40426 7.26 3.10 8.62 33 XM_Evil_Numbers_Gen 39017 10.35 16.56 8.32 34 T_XMDrugObfuBody_14 36917 8.27 9.48 7.87 35 XM_DK_Undo_02 35846 14.19 34.15 7.64 36 TooManyTo_001 35582 7.55 7.42 7.59 37 RCVD_IN_RP_CERTIFIED 34987 6.17 2.22 7.46 38 FSL_BULK_SIG 31018 8.39 13.79 6.61 39 BAYES_99 28433 11.35 27.50 6.06 40 RCVD_IN_IADB_LISTED 28307 4.89 1.39 6.04 41 XM_H_Long_From01 28174 6.26 7.04 6.01 42 MIME_QP_LONG_LINE 26799 4.97 2.70 5.71 43 XM_SendGrid 26403 5.21 3.94 5.63 44 XM_B_Phish_Phrases 25542 5.99 7.63 5.45 45 DKIM_INVALID 25529 5.96 7.54 5.44 46 RCVD_IN_IADB_SPF 24691 4.23 1.06 5.27 47 T_TooManySym_01 24545 4.53 2.40 5.23 48 BAYES_999 24193 9.30 21.92 5.16 49 BAYES_60 23700 5.51 6.91 5.05 50 RELAYCOUNTRY_META 22796 8.86 21.06 4.86 51 XMStrtUSub 22592 4.61 3.96 4.82 52 BOTNET_IPINHOSTNAME 22568 7.49 15.66 4.81 53 BAYES_40 22247 4.27 2.83 4.74 54 RCVD_IN_IADB_SENDERID 21757 3.74 0.98 4.64 55 XM_PDF 21432 3.59 0.60 4.57 56 RCVD_IN_IADB_DK 21280 3.65 0.96 4.54 57 HTML_IMAGE_RATIO_04 21145 5.54 8.67 4.51 58 RCVD_IN_MSPIKE_H2 20488 3.96 2.73 4.37 59 T_REMOTE_IMAGE 20454 4.32 4.19 4.36 60 XMSubMetaSx_00 18635 5.14 8.71 3.97 61 RCVD_IN_IADB_VOUCHED 18370 3.19 0.98 3.92 62 HTML_IMAGE_RATIO_06 18352 3.97 4.13 3.91 63 IN_ZIMBRA_NJ_WHITELIST 17666 2.84 0.02 3.77 64 XMNumbers 17659 4.24 5.68 3.77 65 XMSexyCombo_05 17589 5.39 10.41 3.75 66 FROM_EXCESS_BASE64 17493 5.36 10.34 3.73 67 TR_DCC_Bayes_99 16277 8.13 22.34 3.47 68 BAYES_20 15240 3.08 2.54 3.25 69 ANY_BOUNCE_MESSAGE 15139 3.35 3.72 3.23 70 BOUNCE_MESSAGE 15138 3.35 3.72 3.23 71 MPART_ALT_DIFF 14485 4.16 7.41 3.09 72 XM_UncommonTLD01 14102 5.14 11.64 3.01 73 BAYES_80 13760 3.84 6.60 2.93 74 TO_MALFORMED 12473 2.05 0.21 2.66 75 UNPARSEABLE_RELAY 12348 2.56 2.35 2.63 76 MIME_HTML_MOSTLY 12053 2.88 3.83 2.57 77 RCVD_IN_IADB_OPTIN 11759 2.04 0.61 2.51 78 HTML_IMAGE_RATIO_08 11186 2.49 2.80 2.39 79 HTML_MIME_NO_HTML_TAG 11137 3.62 7.43 2.37 80 MAILING_LIST_MULTI 10981 2.10 1.35 2.34 81 TVD_RCVD_IP 10495 1.81 0.49 2.24 82 BAYES_05 10284 2.04 1.56 2.19 83 SUBJ_ALL_CAPS 9825 2.24 2.67 2.10 84 RCVD_IN_MSPIKE_WL 9686 1.65 0.38 2.07 85 RCVD_IN_MSPIKE_H3 9679 1.65 0.37 2.06 86 TM2_M_URI_OPT_OUT 9419 2.59 4.38 2.01 87 TooManyTo_002 9414 1.78 1.08 2.01 88 TR_Symld_Words 9164 1.74 1.07 1.95 89 BOTNET 9027 6.00 18.45 1.92 90 XM_DK_Undo_01 8582 1.61 0.96 1.83 91 XM_DIRTYINTL 8453 2.39 4.17 1.80 92 BAYES_95 8365 2.24 3.64 1.78 93 XM_SPF_SoftFail 8157 2.25 3.79 1.74 94 T_TooManySym_02 8021 1.42 0.53 1.71 95 XMDiploma_00 7680 1.78 2.22 1.64 96 IN_HORDE_ADDRESS_BOOK 7659 1.24 0.04 1.63 97 XM_CamelCaseFrm001 7646 2.09 3.49 1.63 98 URI_HEX 7274 2.19 4.13 1.55 99 XM_OfRef6 7261 1.77 2.44 1.55 100 HELO_NODOT 7244 1.31 0.60 1.54 101 INVALID_MSGID 6813 1.13 0.13 1.45 102 MIME_HTML_ONLY_MULTI 6663 2.02 3.86 1.42 103 RELAYCOUNTRY_CA 6616 1.78 2.92 1.41 104 URI_TRY_3LD 6349 1.24 0.90 1.35 105 TooManyTo_003 6287 1.25 0.97 1.34 106 TR_MetaPhish_Combo_01 6260 1.39 1.56 1.33 107 XMStockSpam_06 6244 1.41 1.63 1.33 108 T_XMDrugObfuBody_08 6053 1.94 3.93 1.29 109 USER_IN_DEF_DKIM_WL 5894 0.98 0.13 1.26 110 XMCapTrack 5654 0.97 0.25 1.21 111 UNTRUSTED_Relay 5637 4.76 15.63 1.20 112 XM_GoogleGroups 5529 0.99 0.43 1.18 113 XMGenDplmaNmb 5346 1.28 1.72 1.14 114 XMPhish11 5343 1.37 2.07 1.14 115 XM_H_PHPOS 4997 1.10 1.20 1.07 116 XM_H_Long_From02 4895 1.16 1.53 1.04 117 DKIM_ADSP_CUSTOM_MED 4745 1.05 1.18 1.01 118 XMBdyGiftCard01 4598 1.21 1.91 0.98 119 TooManyTo_004 4513 0.94 0.88 0.96 120 RELAYCOUNTRY_GB 4345 0.99 1.17 0.93 121 TM2_M_VERY_LONG_WORD 4115 1.12 1.86 0.88 122 T_FILL_THIS_FORM_SHORT 3845 0.90 1.13 0.82 123 TooManyTo_005 3734 0.81 0.83 0.80 124 T_XMDrugObfuBody_00 3679 1.00 1.68 0.78 125 XM_ProductURIs 3599 0.95 1.51 0.77 126 TM2_M_A_HREF_HREF 3514 0.75 0.76 0.75 127 URI_NOVOWEL 3432 0.76 0.83 0.73 128 NML_ADSP_CUSTOM_MED 3394 0.83 1.15 0.72 129 XM_H_PHPMailer 3376 0.73 0.78 0.72 130 T_Symld_Words_02 3332 0.70 0.69 0.71 131 T_XMHurry_00 3249 0.98 1.85 0.69 132 SpammyFromTLD_01 3235 0.90 1.53 0.69 133 XM_UB50 3223 2.35 7.42 0.69 134 XMSubMetaSxObfu_03 3167 0.77 1.08 0.68 135 XMSexyCombo_01 3124 1.08 2.33 0.67 136 XMNoVowels 3121 0.63 0.53 0.67 137 FROM_GOV_SPOOF 2985 0.54 0.24 0.64 138 PLING_QUERY 2930 0.70 0.93 0.62 139 XMBrknScrpt_02 2881 0.62 0.63 0.61 140 T_OBFU_PDF_ATTACH 2841 0.49 0.14 0.61 141 XMHTMLBadTable_001 2832 0.67 0.86 0.60 142 USER_IN_WHITELIST 2751 0.44 0.00 0.59 143 XMBody_95 2708 0.47 0.15 0.58 144 XM_B_COPY_HTML 2636 0.67 1.01 0.56 145 XMGappySubj_01 2609 0.60 0.75 0.56 146 TR_XM_RelayPhish 2591 0.71 1.21 0.55 147 FILL_THIS_FORM 2577 0.61 0.80 0.55 148 T_TooManySym_03 2553 0.44 0.13 0.54 149 XMSubMetaI_00 2494 0.77 1.50 0.53 150 FORGED_GMAIL_RCVD 2487 0.65 1.02 0.53 151 DKIM_ADSP_NXDOMAIN 2408 0.96 2.31 0.51 152 XMLngstWrd_00 2401 0.45 0.24 0.51 153 AC_DIV_BONANZA 2367 0.41 0.14 0.50 154 XM_D_tchamptons_WL 2268 0.36 0.00 0.48 155 HTML_TAG_BALANCE_BODY 2261 0.56 0.81 0.48 156 XMBody_17 2251 0.58 0.90 0.48 157 XMMoneyMeta_00 2242 0.61 0.99 0.48 158 XMLngstWrd_01 2203 0.41 0.23 0.47 159 HTML_IMAGE_ONLY_32 2201 0.42 0.26 0.47 160 T_MANY_PILL_PRICE 2191 0.35 0.00 0.47 161 HTML_FONT_FACE_BAD 2179 0.68 1.32 0.46 162 RELAYCOUNTRY_AU 2159 0.49 0.56 0.46 163 MISSING_HEADERS 2152 1.55 4.86 0.46 164 XMBody_78 2126 0.62 1.11 0.45 165 XMHTML_After_End 2110 0.55 0.84 0.45 166 XM_B_REG_HTML 2025 0.57 0.97 0.43 167 HTTPS_HTTP_MISMATCH 2013 0.48 0.62 0.43 168 XMPhish14 1984 0.50 0.74 0.42 169 RDNS_DYNAMIC 1909 0.57 1.07 0.41 170 TR_LOTS_OF_MONEY3 1878 1.22 3.71 0.40 171 REMOVE_BEFORE_LINK 1840 0.45 0.64 0.39 172 RCVD_IN_SORBS_DUL 1828 0.34 0.19 0.39 173 XM_ShortIntro_01 1822 0.37 0.33 0.39 174 XMSubMetaSxObfu_02 1819 0.39 0.39 0.39 175 XM_S_JOY_D 1810 0.48 0.77 0.39 176 XM_H_PHPOS_M 1795 0.38 0.37 0.38 177 XMDateMe_00 1786 0.37 0.35 0.38 178 XMRcvdHeader_15 1784 0.29 0.00 0.38 179 SpammyFromTLD_02 1731 1.86 6.43 0.37 180 XMSlimDrugH 1722 0.55 1.13 0.37 181 XMPhish30 1691 0.59 1.29 0.36 182 SHORT_HELO_AND_INLINE_IMAGE 1672 0.28 0.06 0.36 183 RCVD_IN_BL_SPAMCOP_NET 1668 0.84 2.32 0.36 184 HTML_IMAGE_ONLY_28 1641 0.37 0.44 0.35 185 TM2_M_BODY_EMPTY 1634 0.29 0.09 0.35 186 XM_URI_RBL 1595 0.77 2.08 0.34 187 XMSubNoVowel 1551 0.49 1.00 0.33 188 UPPERCASE_50_75 1439 0.26 0.12 0.31 189 RELAYCOUNTRY_DE 1428 1.07 3.41 0.30 190 TR_LOTS_OF_MONEY2 1427 0.68 1.83 0.30 191 T_MONEY_PERCENT 1427 0.68 1.83 0.30 192 XM_Body_Obfu01 1421 0.38 0.61 0.30 193 XMLKML 1391 0.22 0.00 0.30 194 XMSUPPORT 1378 0.22 0.00 0.29 195 SUBJ_DOLLARS 1373 0.47 1.03 0.29 196 HTML_IMAGE_ONLY_24 1341 0.35 0.56 0.29 197 TVD_SPACE_RATIO 1330 0.31 0.41 0.28 198 RELAYCOUNTRY_AT 1326 0.52 1.25 0.28 199 XM_H_SpoofStaff4 1287 0.22 0.05 0.27 200 XMSolicitRefs_0 1277 0.25 0.18 0.27 ----------------------------------------------------------------------