Email: 489243 Autolearn: 0 AvgScore: 1.38 AvgScanTime: 1.85 sec Spam: 108000 Autolearn: 0 AvgScore: 12.93 AvgScanTime: 2.19 sec Ham: 381243 Autolearn: 0 AvgScore: -1.89 AvgScanTime: 1.76 sec Time Spent Running SA: 251.51 hours Time Spent Processing Spam: 65.59 hours Time Spent Processing Ham: 185.92 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 103649 89.00 95.97 87.03 2 DCC_CHECK 74106 49.39 68.62 43.95 3 DKIM_SIGNED 72055 73.99 66.72 76.05 4 XM_DK_Pass 69954 72.56 64.77 74.76 5 XMListUnsubscribeExists 67450 55.76 62.45 53.87 6 DKIM_VALID 66006 69.03 61.12 71.27 7 DKIM_VALID_AU 54746 53.20 50.69 53.92 8 MIME_HTML_ONLY 46417 26.34 42.98 21.62 9 XM_H_QuotedFrom 45904 40.31 42.50 39.69 10 BAYES_50 43875 52.86 40.62 56.33 11 BAYES_99 36489 12.42 33.79 6.36 12 HTML_FONT_LOW_CONTRAST 35294 30.52 32.68 29.91 13 RELAYCOUNTRY_META 34287 11.01 31.75 5.13 14 XM_DK_Undo_02 33642 13.32 31.15 8.26 15 LOC_TINY_FONT_1 32922 26.48 30.48 25.35 16 DCC_CHECK_NEGATIVE 32631 49.06 30.21 54.40 17 BAYES_999 30485 10.38 28.23 5.33 18 XMSubLong 27033 21.74 25.03 20.80 19 UNTRUSTED_Relay 25252 6.24 23.38 1.38 20 FVGT_m_MULTI_ODD 23671 21.09 21.92 20.86 21 T_REMOTE_IMAGE 23243 8.01 21.52 4.19 22 FROM_EXCESS_BASE64 22368 8.57 20.71 5.13 23 HTML_MIME_NO_HTML_TAG 21515 5.87 19.92 1.88 24 TR_DCC_Bayes_99 21470 7.19 19.88 3.59 25 HTML_SHORT_LINK_IMG_1 19457 4.00 18.02 0.03 26 MIME_HEADER_CTYPE_ONLY 19140 4.01 17.72 0.13 27 BODY_URI_ONLY 18870 3.96 17.47 0.14 28 XM_Body_Dirty_Words 18742 14.52 17.35 13.71 29 T_KAM_HTML_FONT_INVALID 18516 16.79 17.14 16.68 30 DKIM_VALID_EF 18254 24.97 16.90 27.25 31 HTML_IMAGE_ONLY_04 17787 3.70 16.47 0.08 32 BOTNET_IPINHOSTNAME 17670 7.83 16.36 5.42 33 T_TM2_M_HEADER_IN_MSG 17360 24.34 16.07 26.68 34 BOTNET 17103 5.17 15.84 2.15 35 HTML_SHORT_CENTER 17097 3.58 15.83 0.11 36 MISSING_HEADERS 16909 3.72 15.66 0.33 37 RELAYCOUNTRY_FR 14552 3.16 13.47 0.24 38 XM_UncommonTLD01 14160 5.72 13.11 3.63 39 MultiRelay 13915 15.30 12.88 15.98 40 XM_Multi_Part_URI 13870 13.93 12.84 14.24 41 HTML_IMAGE_RATIO_02 12973 10.22 12.01 9.71 42 XM_Evil_Numbers_Gen 12361 9.63 11.45 9.11 43 XM_JunkDunk 11545 2.36 10.69 0.00 44 FSL_BULK_SIG 11389 7.57 10.55 6.72 45 XMSexyCombo_05 11274 6.29 10.44 5.12 46 XMNumbers 11032 4.57 10.21 2.96 47 XM_UB99 10992 2.26 10.18 0.01 48 LOTS_OF_MONEY 10769 9.77 9.97 9.71 49 XM_UB999 9362 1.92 8.67 0.01 50 XMSubMetaSx_00 9348 5.54 8.66 4.65 51 TooManyTo_001 9087 7.35 8.41 7.04 52 T_XMDrugObfuBody_14 8311 7.31 7.70 7.20 53 HTML_IMAGE_RATIO_04 8133 6.47 7.53 6.16 54 BAYES_80 7898 3.95 7.31 2.99 55 XM_H_Long_From01 7597 6.24 7.03 6.01 56 BAYES_60 7344 5.42 6.80 5.03 57 SpammyFromTLD_02 6888 1.70 6.38 0.37 58 MPART_ALT_DIFF 6828 3.84 6.32 3.14 59 XM_UB50 6501 1.94 6.02 0.79 60 XM_B_Phish_Phrases 6460 6.19 5.98 6.25 61 DIET_1 6176 1.57 5.72 0.40 62 DKIM_INVALID 6049 4.96 5.60 4.78 63 RCVD_IN_RP_RNBL 5850 1.30 5.42 0.14 64 BAYES_95 5550 2.67 5.14 1.97 65 XMStrtUSub 5318 5.62 4.92 5.81 66 MIME_HTML_MOSTLY 5231 3.62 4.84 3.27 67 LotsOfNums_01 5111 7.78 4.73 8.65 68 XM_DIRTYINTL 4850 2.41 4.49 1.82 69 XM_URI_RBL 4378 1.31 4.05 0.53 70 HTML_IMAGE_RATIO_06 4346 3.84 4.02 3.79 71 TM2_M_URI_OPT_OUT 3841 3.12 3.56 3.00 72 MIME_HTML_ONLY_MULTI 3818 1.88 3.54 1.41 73 XM_SPF_SoftFail 3777 2.31 3.50 1.98 74 RCVD_IN_RP_SAFE 3776 10.22 3.50 12.13 75 RELAYCOUNTRY_GB 3764 1.50 3.49 0.93 76 FROM_SUSPICIOUS_NTLD 3612 0.91 3.34 0.22 77 URI_HEX 3550 2.14 3.29 1.82 78 RELAYCOUNTRY_CA 3426 2.03 3.17 1.71 79 RCVD_IN_RP_CERTIFIED 3195 8.58 2.96 10.18 80 XMSexyCombo_01 3183 1.09 2.95 0.56 81 XMSubMetaI_00 2997 1.58 2.77 1.24 82 XM_CamelCaseFrm001 2934 2.12 2.72 1.95 83 SHORTENER_SHORT_IMG 2911 0.60 2.70 0.00 84 MultiRelay_CC 2903 0.72 2.69 0.17 85 MultiRelay_Combo 2903 0.72 2.69 0.17 86 T_XMHurry_00 2882 1.17 2.67 0.75 87 RCVD_IN_MSPIKE_H2 2838 3.90 2.63 4.26 88 XMSlimDrugH 2809 0.97 2.60 0.51 89 XM_SendGrid 2780 5.24 2.57 5.99 90 T_TooManySym_01 2682 4.63 2.48 5.24 91 RCVD_IN_BL_SPAMCOP_NET 2418 0.72 2.24 0.30 92 XMWghtMeta_00 2405 0.51 2.23 0.03 93 NO_DNS_FOR_FROM 2382 1.47 2.21 1.26 94 XM_UB95 2380 0.50 2.20 0.02 95 HTML_IMAGE_RATIO_08 2320 2.30 2.15 2.35 96 SUBJ_ALL_CAPS 2307 2.00 2.14 1.96 97 BOTNET_NORDNS 2296 0.49 2.13 0.02 98 MIME_QP_LONG_LINE 2216 4.39 2.05 5.06 99 BAYES_40 2175 3.82 2.01 4.33 100 XMSexyCombo_04 2143 0.56 1.98 0.16 101 XMBody_17 2127 0.99 1.97 0.71 102 LongTLD 2124 0.56 1.97 0.16 103 T_XMDrugObfuBody_08 2102 1.46 1.95 1.32 104 BODY_ENHANCEMENT 2097 0.46 1.94 0.03 105 XM_UB60 2076 0.47 1.92 0.06 106 XMDiploma_00 2073 1.52 1.92 1.40 107 XM_OfRef6 2064 1.45 1.91 1.32 108 UNPARSEABLE_RELAY 2053 3.03 1.90 3.35 109 HK_RANDOM_FROM 1966 0.54 1.82 0.17 110 XMPhish11 1895 1.19 1.75 1.03 111 XMBody_78 1888 0.80 1.75 0.53 112 XMBdyGiftCard01 1824 1.35 1.69 1.26 113 RELAYCOUNTRY_CN 1824 0.41 1.69 0.05 114 BAYES_00 1785 13.57 1.65 16.94 115 T_MONEY_PERCENT 1767 0.58 1.64 0.29 116 TR_LOTS_OF_MONEY2 1767 0.58 1.64 0.29 117 T_Symld_Words_02 1749 0.70 1.62 0.44 118 XM_ProductURIs 1736 1.09 1.61 0.95 119 BAYES_20 1700 3.22 1.57 3.69 120 DATE_IN_PAST_06_12 1673 0.37 1.55 0.03 121 XM_UB80 1651 0.37 1.53 0.04 122 XMGenDplmaNmb 1636 1.15 1.51 1.05 123 URIBL_BLACK 1591 0.37 1.47 0.06 124 XMPhish30 1573 0.71 1.46 0.50 125 RELAYCOUNTRY_AT 1556 0.52 1.44 0.25 126 HTML_IMAGE_ONLY_08 1521 0.41 1.41 0.12 127 XMSubject_48 1449 0.40 1.34 0.13 128 XM_H_Long_From02 1446 1.11 1.34 1.04 129 XM_H_TOP 1436 0.30 1.33 0.00 130 RCVD_IN_IADB_LISTED 1417 4.48 1.31 5.38 131 LONG_JUNK_URI 1393 0.35 1.29 0.09 132 HDRS_LCASE_IMGONLY 1389 0.31 1.29 0.04 133 XM_salutation2 1382 0.80 1.28 0.66 134 TVD_SPACE_RATIO_MINFP 1358 0.28 1.26 0.01 135 TR_XM_DK_Bayes 1339 11.42 1.24 14.30 136 XMSubMetaSxObfu_03 1333 0.69 1.23 0.53 137 SpammyFromTLD_01 1320 0.74 1.22 0.61 138 TM2_M_VERY_LONG_WORD 1319 0.98 1.22 0.91 139 DATE_IN_PAST_03_06 1306 0.35 1.21 0.10 140 MAILING_LIST_MULTI 1302 1.81 1.21 1.98 141 TR_Symld_Words 1290 1.65 1.19 1.78 142 XMStockSpam_06 1281 1.36 1.19 1.41 143 XM_Hitman 1276 0.30 1.18 0.05 144 FSL_THIS_IS_ADV 1273 0.49 1.18 0.29 145 RCVD_IN_IADB_SPF 1261 3.92 1.17 4.70 146 URI_TRY_3LD 1238 1.43 1.15 1.51 147 ALL_TRUSTED 1229 13.55 1.14 17.06 148 RCVD_IN_IADB_SENDERID 1211 3.49 1.12 4.16 149 TR_XM_DK_Bayes1 1207 10.89 1.12 13.66 150 RCVD_IN_IADB_DK 1199 3.44 1.11 4.10 151 HTML_FONT_SIZE_LARGE 1187 0.41 1.10 0.22 152 XM_RXBody 1177 0.86 1.09 0.80 153 RELAYCOUNTRY_CZ 1133 0.24 1.05 0.01 154 T_XMDrugObfuBody_00 1108 0.81 1.03 0.75 155 XMSubMetaSSx_00 1105 0.49 1.02 0.34 156 TR_XM_DK_Bayes2 1075 9.03 1.00 11.31 157 TR_XM_RelayPhish 1071 0.65 0.99 0.55 158 XMPhish14 1048 0.68 0.97 0.59 159 XMSlimDrugs 1047 0.23 0.97 0.02 160 BAYES_05 1039 1.89 0.96 2.15 161 TR_Mismatch_TLD_02 1011 0.26 0.94 0.07 162 FVGT_m_MULTI_ODD_EMAIL 1001 0.24 0.93 0.04 163 XM_H_PHPOS 972 0.89 0.90 0.89 164 DKIM_ADSP_CUSTOM_MED 969 1.06 0.90 1.11 165 SUBJECT_DIET 967 0.20 0.90 0.00 166 HTML_FONT_FACE_BAD 954 0.61 0.88 0.53 167 XMHTMLBadTable_001 912 0.79 0.84 0.78 168 RELAYCOUNTRY_DE 903 0.44 0.84 0.33 169 FILL_THIS_FORM 894 0.48 0.83 0.39 170 URIBL_DBL_SPAM 890 0.21 0.82 0.04 171 RCVD_IN_IADB_VOUCHED 886 2.81 0.82 3.37 172 SUBJ_DOLLARS 885 0.55 0.82 0.47 173 NML_ADSP_CUSTOM_MED 857 0.79 0.79 0.79 174 DKIM_ADSP_NXDOMAIN 855 0.55 0.79 0.48 175 XM_HighProb1 851 0.18 0.79 0.01 176 FILL_THIS_FORM_LONG 829 0.40 0.77 0.30 177 XMGppyBdWords 816 0.37 0.76 0.25 178 MPART_ALT_DIFF_COUNT 815 0.32 0.75 0.20 179 XM_XX_Yahoo 814 0.26 0.75 0.13 180 XM_DK_Undo_01 807 1.51 0.75 1.72 181 FORGED_GMAIL_RCVD 802 0.55 0.74 0.50 182 RCVD_IN_IADB_OPTIN 798 1.80 0.74 2.10 183 XMSubGiftCard1 766 0.22 0.71 0.09 184 XM_PDF 763 2.80 0.71 3.39 185 T_FILL_THIS_FORM_SHORT 753 0.71 0.70 0.71 186 LOW_PRICE 749 0.39 0.69 0.30 187 XM_H_PHPMailer 745 0.65 0.69 0.64 188 TooManyTo_002 727 1.41 0.67 1.62 189 THIS_AD 724 0.60 0.67 0.58 190 PLING_QUERY 720 0.57 0.67 0.54 191 XM_NotFromAmazon 714 0.15 0.66 0.00 192 XMSubGiftCard2 712 0.19 0.66 0.05 193 XMPhish19 701 0.16 0.65 0.02 194 HTML_IMAGE_ONLY_24 685 0.40 0.63 0.33 195 BOUNCE_MESSAGE 663 2.54 0.61 3.08 196 ANY_BOUNCE_MESSAGE 663 2.54 0.61 3.08 197 TR_MetaPhish_Combo_01 658 1.34 0.61 1.55 198 URI_NOVOWEL 644 0.51 0.60 0.48 199 T_TooManySym_02 640 1.50 0.59 1.76 200 SHORT_IMG_SUSP_NTLD 625 0.13 0.58 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 331798 89.00 95.97 87.03 2 DKIM_SIGNED 289920 73.99 66.72 76.05 3 XM_DK_Pass 285027 72.56 64.77 74.76 4 DKIM_VALID 271714 69.03 61.12 71.27 5 BAYES_50 214753 52.86 40.62 56.33 6 DCC_CHECK_NEGATIVE 207403 49.06 30.21 54.40 7 DKIM_VALID_AU 205551 53.20 50.69 53.92 8 XMListUnsubscribeExists 205370 55.76 62.45 53.87 9 DCC_CHECK 167546 49.39 68.62 43.95 10 XM_H_QuotedFrom 151306 40.31 42.50 39.69 11 HTML_FONT_LOW_CONTRAST 114024 30.52 32.68 29.91 12 DKIM_VALID_EF 103905 24.97 16.90 27.25 13 T_TM2_M_HEADER_IN_MSG 101715 24.34 16.07 26.68 14 LOC_TINY_FONT_1 96648 26.48 30.48 25.35 15 MIME_HTML_ONLY 82439 26.34 42.98 21.62 16 FVGT_m_MULTI_ODD 79517 21.09 21.92 20.86 17 XMSubLong 79311 21.74 25.03 20.80 18 ALL_TRUSTED 65056 13.55 1.14 17.06 19 BAYES_00 64600 13.57 1.65 16.94 20 T_KAM_HTML_FONT_INVALID 63605 16.79 17.14 16.68 21 MultiRelay 60925 15.30 12.88 15.98 22 TR_XM_DK_Bayes 54513 11.42 1.24 14.30 23 XM_Multi_Part_URI 54300 13.93 12.84 14.24 24 XM_DKIMWhitelistDomains 52610 10.76 0.02 13.80 25 XM_Body_Dirty_Words 52278 14.52 17.35 13.71 26 TR_XM_DK_Bayes1 52084 10.89 1.12 13.66 27 RCVD_IN_RP_SAFE 46245 10.22 3.50 12.13 28 TR_XM_DK_Bayes2 43120 9.03 1.00 11.31 29 RCVD_IN_RP_CERTIFIED 38794 8.58 2.96 10.18 30 HTML_IMAGE_RATIO_02 37036 10.22 12.01 9.71 31 LOTS_OF_MONEY 37012 9.77 9.97 9.71 32 XM_Evil_Numbers_Gen 34733 9.63 11.45 9.11 33 LotsOfNums_01 32968 7.78 4.73 8.65 34 XM_DK_Undo_02 31502 13.32 31.15 8.26 35 T_XMDrugObfuBody_14 27465 7.31 7.70 7.20 36 TooManyTo_001 26849 7.35 8.41 7.04 37 FSL_BULK_SIG 25628 7.57 10.55 6.72 38 BAYES_99 24266 12.42 33.79 6.36 39 XM_B_Phish_Phrases 23812 6.19 5.98 6.25 40 HTML_IMAGE_RATIO_04 23499 6.47 7.53 6.16 41 XM_H_Long_From01 22919 6.24 7.03 6.01 42 XM_SendGrid 22845 5.24 2.57 5.99 43 XMStrtUSub 22168 5.62 4.92 5.81 44 BOTNET_IPINHOSTNAME 20654 7.83 16.36 5.42 45 RCVD_IN_IADB_LISTED 20508 4.48 1.31 5.38 46 BAYES_999 20316 10.38 28.23 5.33 47 T_TooManySym_01 19977 4.63 2.48 5.24 48 FROM_EXCESS_BASE64 19559 8.57 20.71 5.13 49 RELAYCOUNTRY_META 19555 11.01 31.75 5.13 50 XMSexyCombo_05 19517 6.29 10.44 5.12 51 MIME_QP_LONG_LINE 19285 4.39 2.05 5.06 52 BAYES_60 19170 5.42 6.80 5.03 53 DKIM_INVALID 18206 4.96 5.60 4.78 54 RCVD_IN_IADB_SPF 17918 3.92 1.17 4.70 55 XMSubMetaSx_00 17733 5.54 8.66 4.65 56 BAYES_40 16506 3.82 2.01 4.33 57 RCVD_IN_MSPIKE_H2 16239 3.90 2.63 4.26 58 T_REMOTE_IMAGE 15956 8.01 21.52 4.19 59 RCVD_IN_IADB_SENDERID 15862 3.49 1.12 4.16 60 RCVD_IN_IADB_DK 15641 3.44 1.11 4.10 61 HTML_IMAGE_RATIO_06 14436 3.84 4.02 3.79 62 BAYES_20 14050 3.22 1.57 3.69 63 XM_UncommonTLD01 13833 5.72 13.11 3.63 64 TR_DCC_Bayes_99 13705 7.19 19.88 3.59 65 IN_ZIMBRA_NJ_WHITELIST 13573 2.78 0.02 3.56 66 XM_PDF 12928 2.80 0.71 3.39 67 RCVD_IN_IADB_VOUCHED 12840 2.81 0.82 3.37 68 UNPARSEABLE_RELAY 12780 3.03 1.90 3.35 69 MIME_HTML_MOSTLY 12464 3.62 4.84 3.27 70 MPART_ALT_DIFF 11965 3.84 6.32 3.14 71 TO_MALFORMED 11775 2.42 0.06 3.09 72 ANY_BOUNCE_MESSAGE 11755 2.54 0.61 3.08 73 BOUNCE_MESSAGE 11748 2.54 0.61 3.08 74 TM2_M_URI_OPT_OUT 11440 3.12 3.56 3.00 75 BAYES_80 11404 3.95 7.31 2.99 76 XMNumbers 11302 4.57 10.21 2.96 77 TVD_RCVD_IP 11228 2.34 0.19 2.95 78 HTML_IMAGE_RATIO_08 8945 2.30 2.15 2.35 79 BOTNET 8200 5.17 15.84 2.15 80 BAYES_05 8189 1.89 0.96 2.15 81 RCVD_IN_IADB_OPTIN 8022 1.80 0.74 2.10 82 RCVD_IN_MSPIKE_WL 7756 1.65 0.30 2.03 83 RCVD_IN_MSPIKE_H3 7737 1.65 0.30 2.03 84 MAILING_LIST_MULTI 7557 1.81 1.21 1.98 85 XM_SPF_SoftFail 7539 2.31 3.50 1.98 86 BAYES_95 7505 2.67 5.14 1.97 87 SUBJ_ALL_CAPS 7484 2.00 2.14 1.96 88 XM_CamelCaseFrm001 7431 2.12 2.72 1.95 89 HTML_MIME_NO_HTML_TAG 7186 5.87 19.92 1.88 90 XM_DIRTYINTL 6932 2.41 4.49 1.82 91 URI_HEX 6922 2.14 3.29 1.82 92 INVALID_MSGID 6863 1.43 0.13 1.80 93 TR_Symld_Words 6773 1.65 1.19 1.78 94 T_TooManySym_02 6697 1.50 0.59 1.76 95 XM_DK_Undo_01 6563 1.51 0.75 1.72 96 RELAYCOUNTRY_CA 6516 2.03 3.17 1.71 97 IN_HORDE_ADDRESS_BOOK 6340 1.30 0.03 1.66 98 TooManyTo_002 6165 1.41 0.67 1.62 99 TR_MetaPhish_Combo_01 5908 1.34 0.61 1.55 100 URI_TRY_3LD 5761 1.43 1.15 1.51 101 MIME_HTML_ONLY_MULTI 5375 1.88 3.54 1.41 102 XMStockSpam_06 5370 1.36 1.19 1.41 103 XMDiploma_00 5348 1.52 1.92 1.40 104 UNTRUSTED_Relay 5275 6.24 23.38 1.38 105 XM_OfRef6 5045 1.45 1.91 1.32 106 T_XMDrugObfuBody_08 5043 1.46 1.95 1.32 107 USER_IN_DEF_DKIM_WL 4881 1.00 0.00 1.28 108 NO_DNS_FOR_FROM 4821 1.47 2.21 1.26 109 XMBdyGiftCard01 4786 1.35 1.69 1.26 110 XMSubMetaI_00 4718 1.58 2.77 1.24 111 DKIM_ADSP_CUSTOM_MED 4230 1.06 0.90 1.11 112 XM_GoogleGroups 4225 0.95 0.40 1.11 113 HELO_NODOT 4195 0.94 0.37 1.10 114 TooManyTo_003 4183 0.98 0.55 1.10 115 XMGenDplmaNmb 3990 1.15 1.51 1.05 116 XM_H_Long_From02 3963 1.11 1.34 1.04 117 XMPhish11 3929 1.19 1.75 1.03 118 TM2_M_A_HREF_HREF 3633 0.81 0.32 0.95 119 XM_ProductURIs 3611 1.09 1.61 0.95 120 RELAYCOUNTRY_GB 3554 1.50 3.49 0.93 121 XMSolicitRefs_0 3478 0.77 0.27 0.91 122 TM2_M_VERY_LONG_WORD 3453 0.98 1.22 0.91 123 XM_H_PHPOS 3375 0.89 0.90 0.89 124 XMCapTrack 3194 0.72 0.32 0.84 125 XMBody_95 3183 0.67 0.07 0.83 126 TooManyTo_004 3138 0.74 0.45 0.82 127 XM_RXBody 3041 0.86 1.09 0.80 128 NML_ADSP_CUSTOM_MED 2997 0.79 0.79 0.79 129 XM_UB50 2996 1.94 6.02 0.79 130 XMHTMLBadTable_001 2976 0.79 0.84 0.78 131 T_XMDrugObfuBody_00 2869 0.81 1.03 0.75 132 T_XMHurry_00 2854 1.17 2.67 0.75 133 USER_IN_WHITELIST 2791 0.57 0.00 0.73 134 XMBody_17 2711 0.99 1.97 0.71 135 T_FILL_THIS_FORM_SHORT 2711 0.71 0.70 0.71 136 XM_B_REG_HTML 2704 0.68 0.57 0.71 137 TooManyTo_005 2662 0.63 0.39 0.70 138 XM_USANA_RCVD 2544 0.52 0.00 0.67 139 XM_salutation2 2523 0.80 1.28 0.66 140 XM_H_PHPMailer 2426 0.65 0.69 0.64 141 XMGappySubj_01 2312 0.54 0.32 0.61 142 SpammyFromTLD_01 2308 0.74 1.22 0.61 143 XMPhish14 2266 0.68 0.97 0.59 144 XM_B_COPY_HTML 2260 0.58 0.52 0.59 145 XMhairloss01 2230 0.46 0.02 0.58 146 T_OBFU_PDF_ATTACH 2217 0.49 0.18 0.58 147 THIS_AD 2201 0.60 0.67 0.58 148 T_MANY_PILL_PRICE 2188 0.45 0.00 0.57 149 REMOVE_BEFORE_LINK 2187 0.53 0.39 0.57 150 XMSexyCombo_01 2150 1.09 2.95 0.56 151 XMBrknScrpt_02 2117 0.55 0.52 0.56 152 TR_XM_RelayPhish 2089 0.65 0.99 0.55 153 PLING_QUERY 2060 0.57 0.67 0.54 154 HTML_FONT_FACE_BAD 2035 0.61 0.88 0.53 155 XMSubMetaSxObfu_03 2028 0.69 1.23 0.53 156 XM_URI_RBL 2014 1.31 4.05 0.53 157 XMBody_78 2012 0.80 1.75 0.53 158 XM_D_tchamptons_WL 2004 0.41 0.00 0.53 159 T_TooManySym_03 1992 0.46 0.23 0.52 160 XMSubMetaSxObfu_02 1970 0.47 0.29 0.52 161 XMSlimDrugH 1957 0.97 2.60 0.51 162 XMPhish30 1924 0.71 1.46 0.50 163 XMLngstWrd_00 1906 0.44 0.22 0.50 164 FORGED_GMAIL_RCVD 1904 0.55 0.74 0.50 165 HTML_TAG_BALANCE_BODY 1875 0.49 0.47 0.49 166 URI_NOVOWEL 1828 0.51 0.60 0.48 167 DKIM_ADSP_NXDOMAIN 1813 0.55 0.79 0.48 168 SUBJ_DOLLARS 1797 0.55 0.82 0.47 169 XMNoVowels 1796 0.46 0.43 0.47 170 XM_ShortIntro_01 1769 0.46 0.44 0.46 171 XMLngstWrd_01 1762 0.41 0.21 0.46 172 T_Symld_Words_02 1692 0.70 1.62 0.44 173 XMMoneyMeta_00 1664 0.47 0.57 0.44 174 RDNS_DYNAMIC 1658 0.45 0.48 0.43 175 XMHTML_After_End 1612 0.43 0.45 0.42 176 HTTPS_HTTP_MISMATCH 1573 0.43 0.50 0.41 177 XMRcvdHeader_15 1550 0.32 0.00 0.41 178 DIET_1 1510 1.57 5.72 0.40 179 XMGappySubj_02 1489 0.32 0.09 0.39 180 BASE64_LENGTH_79_INF 1485 0.34 0.19 0.39 181 FILL_THIS_FORM 1469 0.48 0.83 0.39 182 XM_shorewaves_Whitelist 1432 0.29 0.00 0.38 183 SpammyFromTLD_02 1427 1.70 6.38 0.37 184 FROM_GOV_SPOOF 1364 0.32 0.19 0.36 185 RELAYCOUNTRY_AU 1345 0.39 0.53 0.35 186 TM2_M_BODY_EMPTY 1321 0.31 0.18 0.35 187 XMSubMetaSSx_00 1290 0.49 1.02 0.34 188 XMSUPPORT 1273 0.26 0.00 0.33 189 MISSING_HEADERS 1273 3.72 15.66 0.33 190 RELAYCOUNTRY_DE 1266 0.44 0.84 0.33 191 HTML_IMAGE_ONLY_24 1261 0.40 0.63 0.33 192 XM_Body_Obfu01 1232 0.34 0.40 0.32 193 GAPPY_SUBJECT 1196 0.32 0.34 0.31 194 FROM_GOV_DKIM_AU 1183 0.29 0.23 0.31 195 XM_H_PHPOS_M 1182 0.33 0.41 0.31 196 TVD_SPACE_RATIO 1176 0.28 0.19 0.31 197 FILL_THIS_FORM_LONG 1150 0.40 0.77 0.30 198 LOW_PRICE 1148 0.39 0.69 0.30 199 RCVD_IN_BL_SPAMCOP_NET 1127 0.72 2.24 0.30 200 XMSubNoVowel 1115 0.31 0.37 0.29 ----------------------------------------------------------------------