Email: 636136 Autolearn: 0 AvgScore: 3.09 AvgScanTime: 3.91 sec Spam: 177879 Autolearn: 0 AvgScore: 12.35 AvgScanTime: 4.57 sec Ham: 458257 Autolearn: 0 AvgScore: -0.51 AvgScanTime: 3.66 sec Time Spent Running SA: 691.31 hours Time Spent Processing Spam: 225.84 hours Time Spent Processing Ham: 465.47 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 169722 89.48 95.41 87.17 2 DKIM_SIGNED 153824 77.02 86.48 73.35 3 XM_DK_Pass 148631 75.32 83.56 72.13 4 DCC_CHECK 146347 50.27 82.27 37.85 5 DKIM_VALID 140997 70.88 79.27 67.63 6 XMListUnsubscribeExists 132658 55.70 74.58 48.37 7 DKIM_VALID_AU 110789 51.65 62.28 47.52 8 XM_H_QuotedFrom 100941 41.51 56.75 35.60 9 XM_DK_Undo_02 76867 20.11 43.21 11.14 10 BAYES_99 69157 18.01 38.88 9.91 11 HTML_FONT_LOW_CONTRAST 68143 29.44 38.31 26.00 12 LOC_TINY_FONT_1 65592 25.14 36.87 20.58 13 BAYES_50 65104 52.09 36.60 58.10 14 BAYES_999 57371 15.07 32.25 8.41 15 TR_DCC_Bayes_99 56207 12.45 31.60 5.02 16 MIME_HTML_ONLY 54371 23.25 30.57 20.41 17 FVGT_m_MULTI_ODD 49586 23.00 27.88 21.10 18 XMSubLong 46874 23.11 26.35 21.85 19 DKIM_VALID_EF 46500 26.38 26.14 26.47 20 T_KAM_HTML_FONT_INVALID 39018 17.10 21.94 15.23 21 T_TM2_M_HEADER_IN_MSG 36305 28.11 20.41 31.10 22 XM_Body_Dirty_Words 33683 13.12 18.94 10.86 23 MultiRelay 31234 18.58 17.56 18.98 24 XM_Multi_Part_URI 29334 12.40 16.49 10.81 25 XM_Evil_Numbers_Gen 28691 10.73 16.13 8.63 26 DCC_CHECK_NEGATIVE 28430 47.62 15.98 59.90 27 HTML_IMAGE_RATIO_02 28153 9.80 15.83 7.46 28 RELAYCOUNTRY_META 27399 7.84 15.40 4.91 29 BOTNET_IPINHOSTNAME 25869 7.78 14.54 5.16 30 BOTNET 23344 4.79 13.12 1.55 31 LOTS_OF_MONEY 22959 10.03 12.91 8.91 32 FSL_BULK_SIG 21659 8.28 12.18 6.76 33 HTML_IMAGE_RATIO_04 18951 7.32 10.65 6.03 34 XMSexyCombo_05 17950 5.27 10.09 3.40 35 XM_H_Long_From01 16010 6.80 9.00 5.94 36 T_XMDrugObfuBody_14 15797 7.78 8.88 7.35 37 UNTRUSTED_Relay 15448 3.34 8.68 1.26 38 BAYES_80 14647 5.25 8.23 4.09 39 MPART_ALT_DIFF 13996 4.17 7.87 2.73 40 XMSubMetaSx_00 13529 4.68 7.61 3.55 41 XM_B_Phish_Phrases 13442 6.17 7.56 5.63 42 TR_XM_DocInvoice 13377 4.90 7.52 3.88 43 BAYES_60 12915 7.02 7.26 6.93 44 DKIM_INVALID 12827 6.13 7.21 5.72 45 TooManyTo_001 12654 8.45 7.11 8.97 46 LotsOfNums_01 12543 8.51 7.05 9.08 47 XM_UncommonTLD01 12229 4.31 6.87 3.32 48 FROM_EXCESS_BASE64 10106 4.54 5.68 4.10 49 BAYES_95 8897 3.44 5.00 2.84 50 TM2_M_URI_OPT_OUT 8581 2.93 4.82 2.20 51 XMNumbers 8517 3.85 4.79 3.49 52 XM_DIRTYINTL 8300 2.64 4.67 1.85 53 HTML_IMAGE_RATIO_06 7741 3.59 4.35 3.29 54 MIME_HTML_ONLY_MULTI 7567 2.12 4.25 1.30 55 XMStrtUSub 7456 4.55 4.19 4.69 56 XM_SendGrid 7279 5.08 4.09 5.46 57 XM_SPF_SoftFail 7110 2.43 4.00 1.82 58 MIME_HTML_MOSTLY 7074 2.73 3.98 2.25 59 XM_UB50 7010 1.61 3.94 0.71 60 RELAYCOUNTRY_CA 6204 1.99 3.49 1.41 61 XM_CamelCaseFrm001 6099 2.29 3.43 1.84 62 URI_HEX 6037 2.06 3.39 1.55 63 MIME_QP_LONG_LINE 5807 5.32 3.26 6.11 64 HTML_IMAGE_RATIO_08 5716 2.40 3.21 2.08 65 T_TooManySym_01 5541 5.31 3.12 6.16 66 MultiRelay_CC 5478 0.97 3.08 0.15 67 MultiRelay_Combo 5478 0.97 3.08 0.15 68 XM_OfRef6 5414 1.99 3.04 1.58 69 T_REMOTE_IMAGE 5367 4.05 3.02 4.45 70 RCVD_IN_MSPIKE_H2 5278 4.39 2.97 4.94 71 HTML_MIME_NO_HTML_TAG 5245 2.67 2.95 2.56 72 T_XMDrugObfuBody_08 5154 1.88 2.90 1.49 73 XMDiploma_00 5135 1.92 2.89 1.55 74 RCVD_IN_RP_SAFE 5080 7.43 2.86 9.20 75 SUBJ_ALL_CAPS 4649 1.91 2.61 1.64 76 XM_URI_RBL 4639 0.94 2.61 0.30 77 RCVD_IN_BL_SPAMCOP_NET 4606 1.04 2.59 0.43 78 RCVD_IN_RP_RNBL 4423 0.71 2.49 0.02 79 TR_Mismatch_TLD_02 3992 0.67 2.24 0.06 80 US_DOLLARS_3 3675 1.65 2.07 1.49 81 RCVD_IN_RP_CERTIFIED 3639 6.47 2.05 8.18 82 SpammyFromTLD_02 3596 0.80 2.02 0.32 83 UNPARSEABLE_RELAY 3572 2.91 2.01 3.26 84 XMSubMetaI_00 3399 0.95 1.91 0.58 85 XMGenDplmaNmb 3386 1.28 1.90 1.04 86 MAILING_LIST_MULTI 3328 2.38 1.87 2.57 87 XMSexyCombo_01 3117 0.85 1.75 0.50 88 T_Symld_Words_02 3098 0.90 1.74 0.57 89 TM2_M_VERY_LONG_WORD 2980 1.08 1.68 0.85 90 XM_H_Long_From02 2970 1.22 1.67 1.05 91 XMHTML_After_End 2964 0.74 1.67 0.38 92 TR_XM_RelayPhish 2893 0.85 1.63 0.54 93 SpammyFromTLD_01 2871 1.06 1.61 0.84 94 XMStockSpam_06 2818 1.43 1.58 1.38 95 XMPhish11 2785 1.26 1.57 1.15 96 TR_Symld_Words 2782 1.72 1.56 1.79 97 FROM_SUSPICIOUS_NTLD 2732 0.46 1.54 0.04 98 URI_TRY_3LD 2635 1.38 1.48 1.35 99 XMBody_17 2631 0.69 1.48 0.38 100 RELAYCOUNTRY_GB 2627 1.18 1.48 1.07 101 XMBdyGiftCard01 2610 0.81 1.47 0.56 102 TR_LOTS_OF_MONEY2 2603 0.57 1.46 0.23 103 T_MONEY_PERCENT 2603 0.57 1.46 0.23 104 XM_UB99 2595 0.43 1.46 0.04 105 RELAYCOUNTRY_FR 2591 0.56 1.46 0.21 106 XMMoneyMeta_00 2550 0.71 1.43 0.43 107 BOTNET_NORDNS 2520 0.43 1.42 0.05 108 RCVD_IN_IADB_LISTED 2507 4.70 1.41 5.98 109 RELAYCOUNTRY_IN 2416 0.49 1.36 0.15 110 BAYES_40 2369 2.98 1.33 3.63 111 XMPhish30 2366 0.65 1.33 0.38 112 XM_UB60 2359 0.44 1.33 0.09 113 ALL_TRUSTED 2347 12.51 1.32 16.86 114 TR_LOTS_OF_MONEY3 2318 0.52 1.30 0.22 115 T_XMHurry_00 2312 0.75 1.30 0.54 116 XM_DK_Undo_01 2283 1.70 1.28 1.86 117 T_XMDrugObfuBody_00 2256 0.82 1.27 0.65 118 PLING_QUERY 2228 0.54 1.25 0.26 119 RCVD_IN_IADB_SPF 2190 4.16 1.23 5.29 120 URIBL_BLACK 2139 0.38 1.20 0.06 121 BAYES_20 2080 2.43 1.17 2.92 122 DKIM_ADSP_NXDOMAIN 2077 0.64 1.17 0.44 123 XMSubMetaSxObfu_03 2071 0.66 1.16 0.46 124 RCVD_IN_IADB_SENDERID 2025 3.71 1.14 4.70 125 DKIM_ADSP_CUSTOM_MED 2024 1.03 1.14 0.99 126 RCVD_IN_IADB_DK 2017 3.67 1.13 4.66 127 RELAYCOUNTRY_CN 1989 0.35 1.12 0.05 128 NML_ADSP_CUSTOM_MED 1960 0.78 1.10 0.65 129 HTML_TAG_BALANCE_BODY 1954 0.57 1.10 0.37 130 XM_HighProb1 1938 0.31 1.09 0.01 131 HTTPS_HTTP_MISMATCH 1911 0.70 1.07 0.55 132 DIET_1 1911 0.54 1.07 0.33 133 XMSubMetaSSx_00 1906 0.51 1.07 0.29 134 XM_UB999 1905 0.30 1.07 0.01 135 XM_ProductURIs 1905 0.76 1.07 0.64 136 T_TooManySym_02 1855 1.91 1.04 2.25 137 XM_H_PHPOS 1845 1.04 1.04 1.05 138 XMBody_78 1815 0.57 1.02 0.40 139 RDNS_DYNAMIC 1782 0.58 1.00 0.42 140 TO_MALFORMED 1776 2.29 1.00 2.78 141 BAYES_00 1723 7.23 0.97 9.66 142 URIBL_DBL_SPAM 1700 0.30 0.96 0.05 143 XM_PDF 1666 4.00 0.94 5.19 144 RCVD_IN_IADB_VOUCHED 1641 2.93 0.92 3.71 145 ANY_BOUNCE_MESSAGE 1618 2.22 0.91 2.73 146 BOUNCE_MESSAGE 1617 2.22 0.91 2.73 147 T_FILL_THIS_FORM_SHORT 1577 0.87 0.89 0.87 148 FORGED_GMAIL_RCVD 1571 0.64 0.88 0.54 149 XMHTMLBadTable_001 1542 0.60 0.87 0.50 150 DATE_IN_PAST_03_06 1540 0.30 0.87 0.07 151 XM_RXBody 1533 0.78 0.86 0.74 152 RELAYCOUNTRY_DE 1523 0.59 0.86 0.49 153 HTML_FONT_FACE_BAD 1522 0.64 0.86 0.56 154 BODY_ENHANCEMENT 1509 0.25 0.85 0.02 155 SUBJ_DOLLARS 1508 0.44 0.85 0.28 156 XM_UB80 1507 0.26 0.85 0.03 157 RELAYCOUNTRY_AT 1503 0.42 0.84 0.26 158 XMPhish14 1501 0.63 0.84 0.55 159 LOADSA_MONEY_COMBO 1498 0.29 0.84 0.08 160 LongTLD 1442 0.34 0.81 0.15 161 REMOVE_BEFORE_LINK 1434 0.41 0.81 0.25 162 XM_OfRef7 1416 0.33 0.80 0.16 163 URI_NOVOWEL 1411 0.55 0.79 0.46 164 XM_H_PHPMailer 1397 0.75 0.79 0.74 165 XMClaimOffer 1346 0.31 0.76 0.13 166 RELAYCOUNTRY_AU 1329 0.50 0.75 0.40 167 XMBrknScrpt_02 1327 0.62 0.75 0.57 168 XMSexyCombo_04 1323 0.27 0.74 0.09 169 TM2_M_A_HREF_HREF 1317 0.58 0.74 0.51 170 XM_BadFromFormat 1291 0.33 0.73 0.18 171 MPART_ALT_DIFF_COUNT 1282 0.39 0.72 0.26 172 HTML_IMAGE_ONLY_24 1282 0.44 0.72 0.33 173 LONG_HEX_URI 1280 0.29 0.72 0.12 174 XM_B_COPY_HTML 1280 0.51 0.72 0.43 175 GAPPY_SUBJECT 1275 0.25 0.72 0.07 176 TR_Caps_n_Bayes_99 1261 0.23 0.71 0.05 177 XMSlimDrugH 1253 0.59 0.70 0.54 178 BODY_URI_ONLY 1245 0.26 0.70 0.09 179 XFER_LOTSA_MONEY 1211 0.24 0.68 0.07 180 TR_XM_DK_Bayes 1199 5.14 0.67 6.87 181 RCVD_IN_IADB_OPTIN 1170 1.82 0.66 2.28 182 XMCapTrack 1165 1.30 0.65 1.55 183 TooManyTo_002 1151 2.21 0.65 2.82 184 XM_B_REG_HTML 1150 0.58 0.65 0.56 185 XMSubNoVowel 1141 0.42 0.64 0.33 186 FROM_ADDR_WS 1107 0.18 0.62 0.00 187 T_HTML_TAG_BALANCE_CENTER 1102 0.25 0.62 0.11 188 LOW_PRICE 1065 0.42 0.60 0.35 189 TR_XM_DK_Bayes1 1061 4.73 0.60 6.34 190 HTML_IMAGE_ONLY_28 1049 0.42 0.59 0.35 191 XM_S_JOY_D 1041 0.38 0.59 0.30 192 TR_MetaPhish_Combo_01 1006 1.18 0.57 1.42 193 HTML_SHORT_LINK_IMG_1 1005 0.18 0.56 0.03 194 RELAYCOUNTRY_NL 1003 0.28 0.56 0.17 195 BAYES_05 987 1.54 0.55 1.93 196 XM_H_Undi_Recip 963 0.32 0.54 0.23 197 SUBJECT_NEEDS_ENCODING 961 0.16 0.54 0.01 198 XM_UB95 960 0.16 0.54 0.01 199 SUBJ_ILLEGAL_CHARS 960 0.16 0.54 0.01 200 XM_GoogleGroups 945 1.04 0.53 1.24 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 399462 89.48 95.41 87.17 2 DKIM_SIGNED 336114 77.02 86.48 73.35 3 XM_DK_Pass 330535 75.32 83.56 72.13 4 DKIM_VALID 309916 70.88 79.27 67.63 5 DCC_CHECK_NEGATIVE 274477 47.62 15.98 59.90 6 BAYES_50 266245 52.09 36.60 58.10 7 XMListUnsubscribeExists 221650 55.70 74.58 48.37 8 DKIM_VALID_AU 217759 51.65 62.28 47.52 9 DCC_CHECK 173451 50.27 82.27 37.85 10 XM_H_QuotedFrom 163146 41.51 56.75 35.60 11 T_TM2_M_HEADER_IN_MSG 142523 28.11 20.41 31.10 12 DKIM_VALID_EF 121293 26.38 26.14 26.47 13 HTML_FONT_LOW_CONTRAST 119154 29.44 38.31 26.00 14 XMSubLong 100127 23.11 26.35 21.85 15 FVGT_m_MULTI_ODD 96709 23.00 27.88 21.10 16 LOC_TINY_FONT_1 94316 25.14 36.87 20.58 17 MIME_HTML_ONLY 93522 23.25 30.57 20.41 18 MultiRelay 86958 18.58 17.56 18.98 19 ALL_TRUSTED 77264 12.51 1.32 16.86 20 T_KAM_HTML_FONT_INVALID 69784 17.10 21.94 15.23 21 XM_DKIMWhitelistDomains 63874 10.06 0.07 13.94 22 XM_DK_Undo_02 51049 20.11 43.21 11.14 23 XM_Body_Dirty_Words 49777 13.12 18.94 10.86 24 XM_Multi_Part_URI 49524 12.40 16.49 10.81 25 BAYES_99 45392 18.01 38.88 9.91 26 BAYES_00 44287 7.23 0.97 9.66 27 RCVD_IN_RP_SAFE 42181 7.43 2.86 9.20 28 LotsOfNums_01 41590 8.51 7.05 9.08 29 TooManyTo_001 41125 8.45 7.11 8.97 30 LOTS_OF_MONEY 40823 10.03 12.91 8.91 31 XM_Evil_Numbers_Gen 39547 10.73 16.13 8.63 32 BAYES_999 38521 15.07 32.25 8.41 33 RCVD_IN_RP_CERTIFIED 37495 6.47 2.05 8.18 34 HTML_IMAGE_RATIO_02 34184 9.80 15.83 7.46 35 T_XMDrugObfuBody_14 33680 7.78 8.88 7.35 36 BAYES_60 31758 7.02 7.26 6.93 37 TR_XM_DK_Bayes 31474 5.14 0.67 6.87 38 FSL_BULK_SIG 30982 8.28 12.18 6.76 39 TR_XM_DK_Bayes1 29045 4.73 0.60 6.34 40 T_TooManySym_01 28224 5.31 3.12 6.16 41 MIME_QP_LONG_LINE 28005 5.32 3.26 6.11 42 HTML_IMAGE_RATIO_04 27621 7.32 10.65 6.03 43 RCVD_IN_IADB_LISTED 27419 4.70 1.41 5.98 44 XM_H_Long_From01 27235 6.80 9.00 5.94 45 DKIM_INVALID 26198 6.13 7.21 5.72 46 XM_B_Phish_Phrases 25807 6.17 7.56 5.63 47 TR_XM_DK_Bayes2 25288 4.12 0.50 5.52 48 XM_SendGrid 25026 5.08 4.09 5.46 49 RCVD_IN_IADB_SPF 24245 4.16 1.23 5.29 50 XM_PDF 23795 4.00 0.94 5.19 51 BOTNET_IPINHOSTNAME 23632 7.78 14.54 5.16 52 TR_DCC_Bayes_99 23003 12.45 31.60 5.02 53 RCVD_IN_MSPIKE_H2 22646 4.39 2.97 4.94 54 RELAYCOUNTRY_META 22504 7.84 15.40 4.91 55 RCVD_IN_IADB_SENDERID 21547 3.71 1.14 4.70 56 XMStrtUSub 21495 4.55 4.19 4.69 57 RCVD_IN_IADB_DK 21353 3.67 1.13 4.66 58 T_REMOTE_IMAGE 20406 4.05 3.02 4.45 59 IN_ZIMBRA_NJ_WHITELIST 18959 2.99 0.03 4.14 60 FROM_EXCESS_BASE64 18792 4.54 5.68 4.10 61 BAYES_80 18724 5.25 8.23 4.09 62 TR_XM_DocInvoice 17802 4.90 7.52 3.88 63 RCVD_IN_IADB_VOUCHED 17024 2.93 0.92 3.71 64 BAYES_40 16612 2.98 1.33 3.63 65 XMSubMetaSx_00 16272 4.68 7.61 3.55 66 XMNumbers 16005 3.85 4.79 3.49 67 XMSexyCombo_05 15564 5.27 10.09 3.40 68 XM_UncommonTLD01 15214 4.31 6.87 3.32 69 HTML_IMAGE_RATIO_06 15094 3.59 4.35 3.29 70 UNPARSEABLE_RELAY 14926 2.91 2.01 3.26 71 BAYES_20 13381 2.43 1.17 2.92 72 TVD_RCVD_IP 13342 2.15 0.19 2.91 73 BAYES_95 13017 3.44 5.00 2.84 74 TooManyTo_002 12916 2.21 0.65 2.82 75 TO_MALFORMED 12761 2.29 1.00 2.78 76 MPART_ALT_DIFF 12521 4.17 7.87 2.73 77 ANY_BOUNCE_MESSAGE 12508 2.22 0.91 2.73 78 BOUNCE_MESSAGE 12505 2.22 0.91 2.73 79 MAILING_LIST_MULTI 11800 2.38 1.87 2.57 80 HTML_MIME_NO_HTML_TAG 11749 2.67 2.95 2.56 81 RCVD_IN_IADB_OPTIN 10436 1.82 0.66 2.28 82 T_TooManySym_02 10326 1.91 1.04 2.25 83 MIME_HTML_MOSTLY 10314 2.73 3.98 2.25 84 TM2_M_URI_OPT_OUT 10073 2.93 4.82 2.20 85 HTML_IMAGE_RATIO_08 9524 2.40 3.21 2.08 86 HELO_NODOT 8941 1.54 0.49 1.95 87 RCVD_IN_MSPIKE_WL 8940 1.55 0.53 1.95 88 RCVD_IN_MSPIKE_H3 8935 1.55 0.53 1.95 89 BAYES_05 8841 1.54 0.55 1.93 90 XM_DK_Undo_01 8520 1.70 1.28 1.86 91 XM_DIRTYINTL 8486 2.64 4.67 1.85 92 XM_CamelCaseFrm001 8437 2.29 3.43 1.84 93 XM_SPF_SoftFail 8332 2.43 4.00 1.82 94 TR_Symld_Words 8185 1.72 1.56 1.79 95 IN_HORDE_ADDRESS_BOOK 7859 1.25 0.06 1.71 96 SUBJ_ALL_CAPS 7493 1.91 2.61 1.64 97 XM_OfRef6 7229 1.99 3.04 1.58 98 XMDiploma_00 7105 1.92 2.89 1.55 99 BOTNET 7097 4.79 13.12 1.55 100 XMCapTrack 7096 1.30 0.65 1.55 101 URI_HEX 7085 2.06 3.39 1.55 102 INVALID_MSGID 7037 1.17 0.24 1.54 103 TooManyTo_003 6945 1.24 0.52 1.52 104 T_XMDrugObfuBody_08 6823 1.88 2.90 1.49 105 US_DOLLARS_3 6813 1.65 2.07 1.49 106 TR_MetaPhish_Combo_01 6502 1.18 0.57 1.42 107 RELAYCOUNTRY_CA 6460 1.99 3.49 1.41 108 XMStockSpam_06 6310 1.43 1.58 1.38 109 USER_IN_DEF_DKIM_WL 6233 1.01 0.09 1.36 110 URI_TRY_3LD 6172 1.38 1.48 1.35 111 MIME_HTML_ONLY_MULTI 5947 2.12 4.25 1.30 112 UNTRUSTED_Relay 5771 3.34 8.68 1.26 113 XM_GoogleGroups 5695 1.04 0.53 1.24 114 XMPhish11 5250 1.26 1.57 1.15 115 TooManyTo_004 5060 0.89 0.35 1.10 116 RELAYCOUNTRY_GB 4896 1.18 1.48 1.07 117 XM_H_Long_From02 4801 1.22 1.67 1.05 118 XM_H_PHPOS 4796 1.04 1.04 1.05 119 XMGenDplmaNmb 4761 1.28 1.90 1.04 120 DKIM_ADSP_CUSTOM_MED 4558 1.03 1.14 0.99 121 TooManyTo_005 4236 0.75 0.29 0.92 122 T_FILL_THIS_FORM_SHORT 3964 0.87 0.89 0.87 123 TM2_M_VERY_LONG_WORD 3907 1.08 1.68 0.85 124 SpammyFromTLD_01 3869 1.06 1.61 0.84 125 T_TooManySym_03 3632 0.62 0.17 0.79 126 XM_RXBody 3414 0.78 0.86 0.74 127 XM_H_PHPMailer 3400 0.75 0.79 0.74 128 T_OBFU_PDF_ATTACH 3330 0.57 0.17 0.73 129 XM_UB50 3255 1.61 3.94 0.71 130 USER_IN_WHITELIST 3092 0.49 0.00 0.67 131 NML_ADSP_CUSTOM_MED 2986 0.78 1.10 0.65 132 T_XMDrugObfuBody_00 2980 0.82 1.27 0.65 133 XM_ProductURIs 2950 0.76 1.07 0.64 134 FILL_THIS_FORM 2907 0.55 0.34 0.63 135 XMLngstWrd_00 2812 0.53 0.31 0.61 136 FROM_GOV_SPOOF 2802 0.52 0.29 0.61 137 XMBody_95 2767 0.47 0.12 0.60 138 XMSubMetaI_00 2671 0.95 1.91 0.58 139 XMNoVowels 2660 0.55 0.48 0.58 140 XMLngstWrd_01 2653 0.50 0.29 0.58 141 T_Symld_Words_02 2611 0.90 1.74 0.57 142 XMBrknScrpt_02 2590 0.62 0.75 0.57 143 HTML_FONT_FACE_BAD 2572 0.64 0.86 0.56 144 XM_B_REG_HTML 2563 0.58 0.65 0.56 145 XMBdyGiftCard01 2545 0.81 1.47 0.56 146 XMPhish14 2519 0.63 0.84 0.55 147 HTTPS_HTTP_MISMATCH 2513 0.70 1.07 0.55 148 XMSlimDrugH 2496 0.59 0.70 0.54 149 T_FILL_THIS_FORM_LONG 2495 0.47 0.28 0.54 150 TR_XM_RelayPhish 2485 0.85 1.63 0.54 151 T_XMHurry_00 2469 0.75 1.30 0.54 152 FORGED_GMAIL_RCVD 2469 0.64 0.88 0.54 153 MISSING_HEADERS 2440 0.49 0.38 0.53 154 T_FILL_THIS_FORM_LOAN 2377 0.40 0.09 0.52 155 AC_DIV_BONANZA 2363 0.41 0.14 0.52 156 TM2_M_A_HREF_HREF 2351 0.58 0.74 0.51 157 XMSexyCombo_01 2307 0.85 1.75 0.50 158 XMHTMLBadTable_001 2294 0.60 0.87 0.50 159 HTML_IMAGE_ONLY_32 2272 0.43 0.27 0.50 160 SHORT_HELO_AND_INLINE_IMAGE 2263 0.38 0.08 0.49 161 RELAYCOUNTRY_DE 2224 0.59 0.86 0.49 162 XMGappySubj_01 2174 0.45 0.39 0.47 163 XMSubMetaSxObfu_03 2102 0.66 1.16 0.46 164 URI_NOVOWEL 2087 0.55 0.79 0.46 165 XMSubMetaSxObfu_02 2085 0.42 0.33 0.45 166 RCVD_IN_SORBS_DUL 2040 0.39 0.26 0.45 167 XM_ShortIntro_01 2029 0.39 0.26 0.44 168 DKIM_ADSP_NXDOMAIN 2003 0.64 1.17 0.44 169 RCVD_IN_BL_SPAMCOP_NET 1992 1.04 2.59 0.43 170 XMMoneyMeta_00 1991 0.71 1.43 0.43 171 XM_B_COPY_HTML 1973 0.51 0.72 0.43 172 TM2_M_BODY_EMPTY 1943 0.33 0.10 0.42 173 XMDateMe_00 1933 0.40 0.34 0.42 174 RDNS_DYNAMIC 1931 0.58 1.00 0.42 175 RELAYCOUNTRY_AU 1842 0.50 0.75 0.40 176 XMBody_78 1825 0.57 1.02 0.40 177 XMHTML_After_End 1763 0.74 1.67 0.38 178 XMBody_17 1750 0.69 1.48 0.38 179 XMPhish30 1745 0.65 1.33 0.38 180 HTML_TAG_BALANCE_BODY 1681 0.57 1.10 0.37 181 XM_USANA_RCVD 1679 0.26 0.00 0.37 182 HTML_IMAGE_ONLY_28 1621 0.42 0.59 0.35 183 LOW_PRICE 1599 0.42 0.60 0.35 184 T_FROM_GOV_DKIM_AU 1594 0.37 0.42 0.35 185 DIET_1 1533 0.54 1.07 0.33 186 XMSubNoVowel 1531 0.42 0.64 0.33 187 HTML_IMAGE_ONLY_24 1518 0.44 0.72 0.33 188 XMSolicitRefs_0 1516 0.33 0.32 0.33 189 HTML_IMAGE_ONLY_16 1510 0.31 0.25 0.33 190 NO_DNS_FOR_FROM 1496 0.37 0.47 0.33 191 SpammyFromTLD_02 1485 0.80 2.02 0.32 192 XMLKML 1449 0.23 0.00 0.32 193 TVD_SPACE_RATIO 1381 0.29 0.28 0.30 194 XMSubEmpty 1371 0.33 0.39 0.30 195 XM_S_JOY_D 1365 0.38 0.59 0.30 196 XM_URI_RBL 1358 0.94 2.61 0.30 197 T_HTML_ATTACH 1324 0.23 0.08 0.29 198 XMSubMetaSSx_00 1312 0.51 1.07 0.29 199 XMSubGiftCard1 1310 0.23 0.09 0.29 200 T_TooManySym_04 1304 0.21 0.01 0.28 ----------------------------------------------------------------------