Email: 644809 Autolearn: 0 AvgScore: 1.93 AvgScanTime: 3.68 sec Spam: 135284 Autolearn: 0 AvgScore: 12.17 AvgScanTime: 4.13 sec Ham: 509525 Autolearn: 0 AvgScore: -0.79 AvgScanTime: 3.56 sec Time Spent Running SA: 659.53 hours Time Spent Processing Spam: 155.25 hours Time Spent Processing Ham: 504.28 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 126884 89.21 93.79 88.00 2 DCC_CHECK 107863 47.04 79.73 38.36 3 DKIM_SIGNED 105225 73.05 77.78 71.79 4 XM_DK_Pass 100245 71.07 74.10 70.26 5 DKIM_VALID 93546 66.62 69.15 65.94 6 XMListUnsubscribeExists 93223 53.26 68.91 49.11 7 DKIM_VALID_AU 73021 48.87 53.98 47.52 8 XM_H_QuotedFrom 69175 43.18 51.13 41.07 9 BAYES_50 61095 55.44 45.16 58.17 10 HTML_FONT_LOW_CONTRAST 49702 28.15 36.74 25.87 11 XM_DK_Undo_02 49039 13.30 36.25 7.21 12 MIME_HTML_ONLY 46971 22.60 34.72 19.38 13 LOC_TINY_FONT_1 41171 22.83 30.43 20.81 14 BAYES_99 37932 10.17 28.04 5.43 15 XMSubLong 35751 22.70 26.43 21.71 16 FVGT_m_MULTI_ODD 35545 22.10 26.27 20.99 17 RELAYCOUNTRY_META 32811 9.36 24.25 5.40 18 TR_DCC_Bayes_99 31604 7.23 23.36 2.95 19 BAYES_999 31130 8.45 23.01 4.58 20 T_TM2_M_HEADER_IN_MSG 26625 28.13 19.68 30.38 21 BOTNET_IPINHOSTNAME 26213 7.81 19.38 4.73 22 DKIM_VALID_EF 25950 24.09 19.18 25.40 23 DCC_CHECK_NEGATIVE 25253 50.91 18.67 59.47 24 XM_Body_Dirty_Words 25251 13.21 18.67 11.76 25 T_KAM_HTML_FONT_INVALID 23103 16.30 17.08 16.09 26 UNTRUSTED_Relay 22524 4.71 16.65 1.54 27 MultiRelay 21148 17.15 15.63 17.56 28 BOTNET 20793 4.74 15.37 1.92 29 FSL_BULK_SIG 19881 7.90 14.70 6.09 30 LOTS_OF_MONEY 19054 10.05 14.08 8.97 31 XM_Multi_Part_URI 18911 12.02 13.98 11.50 32 XM_Evil_Numbers_Gen 18743 9.54 13.85 8.40 33 XM_UncommonTLD01 17743 5.30 13.12 3.23 34 HTML_IMAGE_RATIO_02 14846 8.52 10.97 7.86 35 XMSexyCombo_05 13960 5.08 10.32 3.69 36 FROM_EXCESS_BASE64 12868 5.04 9.51 3.85 37 XM_H_Long_From01 12025 6.42 8.89 5.76 38 HTML_IMAGE_RATIO_04 11970 6.08 8.85 5.35 39 T_XMDrugObfuBody_14 11859 7.49 8.77 7.15 40 DKIM_INVALID 11679 6.43 8.63 5.84 41 TooManyTo_001 11572 8.15 8.55 8.04 42 XMSubMetaSx_00 11316 4.83 8.36 3.89 43 BAYES_80 10946 3.88 8.09 2.76 44 XM_UB50 10808 2.37 7.99 0.87 45 BAYES_60 10793 5.62 7.98 5.00 46 T_REMOTE_IMAGE 9635 4.87 7.12 4.27 47 MPART_ALT_DIFF 9321 3.80 6.89 2.97 48 XMNumbers 9187 4.10 6.79 3.38 49 XM_B_Phish_Phrases 8855 6.04 6.55 5.91 50 RCVD_IN_RP_RNBL 8102 1.30 5.99 0.05 51 LotsOfNums_01 7357 7.87 5.44 8.52 52 HTML_MIME_NO_HTML_TAG 7041 3.35 5.20 2.86 53 SpammyFromTLD_02 6824 1.32 5.04 0.33 54 XM_SPF_SoftFail 6718 2.59 4.97 1.96 55 XM_DIRTYINTL 6453 2.48 4.77 1.87 56 HTML_IMAGE_RATIO_08 6391 2.98 4.72 2.51 57 RELAYCOUNTRY_FR 6212 1.24 4.59 0.35 58 BODY_URI_ONLY 5902 1.11 4.36 0.24 59 HTML_IMAGE_RATIO_06 5844 3.44 4.32 3.21 60 RCVD_IN_BL_SPAMCOP_NET 5611 1.09 4.15 0.27 61 MIME_HTML_ONLY_MULTI 5440 1.85 4.02 1.28 62 RELAYCOUNTRY_CA 5371 2.13 3.97 1.64 63 XM_UB60 5100 0.85 3.77 0.07 64 BAYES_95 5029 2.16 3.72 1.75 65 XM_salutation2 5024 1.49 3.71 0.90 66 HTML_SHORT_LINK_IMG_1 4979 0.81 3.68 0.05 67 TM2_M_URI_OPT_OUT 4929 2.38 3.64 2.05 68 MultiRelay_CC 4874 0.91 3.60 0.19 69 MultiRelay_Combo 4874 0.91 3.60 0.19 70 XM_CamelCaseFrm001 4873 2.22 3.60 1.85 71 MISSING_HEADERS 4768 1.19 3.52 0.58 72 MIME_HTML_MOSTLY 4689 2.94 3.47 2.80 73 XM_URI_RBL 4613 1.05 3.41 0.42 74 URI_HEX 4588 2.24 3.39 1.94 75 MIME_HEADER_CTYPE_ONLY 4474 0.91 3.31 0.27 76 RELAYCOUNTRY_CN 3963 0.66 2.93 0.06 77 XMStrtUSub 3827 4.90 2.83 5.45 78 RCVD_IN_MSPIKE_H2 3817 3.79 2.82 4.04 79 XM_H_Long_From02 3686 1.49 2.72 1.16 80 MIME_QP_LONG_LINE 3659 5.11 2.70 5.75 81 XM_OfRef6 3513 1.77 2.60 1.55 82 BOTNET_NORDNS 3483 0.57 2.57 0.04 83 XM_SendGrid 3427 4.76 2.53 5.35 84 T_TooManySym_01 3412 4.20 2.52 4.64 85 BAYES_40 3404 4.07 2.52 4.49 86 T_XMDrugObfuBody_00 3279 1.09 2.42 0.73 87 T_XMDrugObfuBody_08 3254 1.72 2.41 1.54 88 HTML_IMAGE_ONLY_04 3223 0.55 2.38 0.06 89 SpammyFromTLD_01 3128 1.10 2.31 0.78 90 RELAYCOUNTRY_IN 3119 0.57 2.31 0.10 91 XMSubMetaI_00 3027 1.08 2.24 0.78 92 HTML_SHORT_CENTER 2913 0.47 2.15 0.02 93 UNPARSEABLE_RELAY 2886 2.41 2.13 2.48 94 FROM_SUSPICIOUS_NTLD 2872 0.52 2.12 0.10 95 URIBL_DBL_SPAM 2854 0.49 2.11 0.06 96 MAILING_LIST_MULTI 2793 2.35 2.06 2.42 97 BAYES_20 2771 3.08 2.05 3.36 98 DIET_1 2572 0.66 1.90 0.34 99 XMSexyCombo_01 2549 0.92 1.88 0.66 100 SUBJ_ALL_CAPS 2548 1.80 1.88 1.78 101 XMDiploma_00 2540 1.95 1.88 1.97 102 RCVD_IN_RP_SAFE 2506 6.86 1.85 8.19 103 ALL_TRUSTED 2480 15.91 1.83 19.64 104 NORMAL_HTTP_TO_IP 2479 0.54 1.83 0.20 105 RELAYCOUNTRY_GB 2457 1.24 1.82 1.09 106 XM_UB80 2392 0.39 1.77 0.02 107 XMBody_17 2351 0.91 1.74 0.69 108 T_HTML_TAG_BALANCE_CENTER 2337 0.56 1.73 0.25 109 XMStockSpam_06 2266 1.29 1.67 1.19 110 XM_BadFromFormat 2187 0.49 1.62 0.18 111 T_Symld_Words_02 2149 0.82 1.59 0.62 112 DKIM_ADSP_NXDOMAIN 2126 0.84 1.57 0.65 113 XM_H_PHPOS 2082 1.24 1.54 1.16 114 TM2_M_VERY_LONG_WORD 2067 1.11 1.53 0.99 115 XMBdyGiftCard01 2039 0.70 1.51 0.49 116 XM_ProductURIs 1991 0.90 1.47 0.75 117 FSL_THIS_IS_ADV 1950 0.41 1.44 0.13 118 T_XMHurry_00 1935 0.77 1.43 0.59 119 DATE_IN_PAST_03_06 1908 0.39 1.41 0.11 120 RELAYCOUNTRY_NL 1874 0.43 1.39 0.18 121 XMGenDplmaNmb 1846 1.37 1.36 1.37 122 RCVD_IN_IADB_LISTED 1845 4.47 1.36 5.30 123 HTML_FONT_SIZE_LARGE 1833 0.43 1.35 0.19 124 URIBL_BLACK 1826 0.33 1.35 0.05 125 XM_DK_Undo_01 1826 1.69 1.35 1.78 126 XMBody_78 1825 0.62 1.35 0.42 127 TVD_SPACE_RATIO_MINFP 1810 0.29 1.34 0.01 128 XMPhish30 1780 0.67 1.32 0.49 129 XMHTML_After_End 1780 0.70 1.32 0.54 130 RCVD_IN_RP_CERTIFIED 1757 5.85 1.30 7.06 131 XMSubNoVowel 1741 0.53 1.29 0.32 132 BAYES_00 1704 13.58 1.26 16.85 133 XMPhish11 1699 1.14 1.26 1.11 134 RDNS_DYNAMIC 1698 0.57 1.26 0.38 135 HTML_IMAGE_ONLY_12 1690 0.46 1.25 0.26 136 TR_Symld_Words 1688 1.40 1.25 1.45 137 XMLongAddy 1677 0.31 1.24 0.06 138 TR_XM_RelayPhish 1675 0.75 1.24 0.62 139 MSGID_FROM_MTA_HEADER 1650 0.49 1.22 0.29 140 LONG_JUNK_URI 1622 0.33 1.20 0.10 141 XM_UB99 1613 0.26 1.19 0.02 142 XMSlimDrugH 1606 0.64 1.19 0.49 143 XMPhish14 1605 0.54 1.19 0.37 144 XM_XX_Yahoo 1582 0.30 1.17 0.07 145 BAYES_05 1555 1.97 1.15 2.19 146 MPART_ALT_DIFF_COUNT 1548 0.41 1.14 0.21 147 TR_LOTS_OF_MONEY2 1533 0.50 1.13 0.33 148 T_MONEY_PERCENT 1533 0.50 1.13 0.33 149 RCVD_IN_IADB_SPF 1529 3.92 1.13 4.66 150 RELAYCOUNTRY_AT 1526 0.47 1.13 0.30 151 URI_TRY_3LD 1524 1.26 1.13 1.29 152 RCVD_IN_IADB_SENDERID 1480 3.43 1.09 4.06 153 XM_HighProb1 1464 0.25 1.08 0.03 154 RCVD_IN_IADB_DK 1458 3.45 1.08 4.08 155 NO_DNS_FOR_FROM 1440 0.40 1.06 0.23 156 XMGppyBdWords 1404 0.41 1.04 0.24 157 TR_Mismatch_TLD_02 1366 0.27 1.01 0.07 158 HTML_FONT_FACE_BAD 1342 0.66 0.99 0.57 159 TooManyTo_002 1334 1.91 0.99 2.16 160 XM_H_PHPMailer 1319 0.74 0.97 0.68 161 FVGT_m_MULTI_ODD_EMAIL 1304 0.23 0.96 0.03 162 NORDNS_LOW_CONTRAST 1291 0.22 0.95 0.03 163 T_TooManySym_02 1288 1.42 0.95 1.54 164 XMBrknScrpt_02 1276 0.63 0.94 0.55 165 XMMoneyMeta_00 1264 0.78 0.93 0.74 166 HTML_IMAGE_ONLY_28 1237 0.47 0.91 0.36 167 SUBJ_DOLLARS 1216 0.57 0.90 0.48 168 MIME_CHARSET_FARAWAY 1202 0.25 0.89 0.09 169 CHARSET_FARAWAY_HEADER 1201 0.22 0.89 0.04 170 XM_UB999 1191 0.19 0.88 0.01 171 LONG_HEX_URI 1190 0.29 0.88 0.14 172 LOW_PRICE 1187 0.65 0.88 0.59 173 XMSubMetaSxObfu_03 1148 0.45 0.85 0.35 174 RELAYCOUNTRY_AU 1147 0.56 0.85 0.49 175 TooManyTo_003 1139 1.31 0.84 1.43 176 URIBL_DBL_ABUSE_REDIR 1105 0.22 0.82 0.07 177 XM_PDF 1101 3.80 0.81 4.59 178 RELAYCOUNTRY_DE 1086 0.55 0.80 0.48 179 XM_B_REG_HTML 1086 0.67 0.80 0.63 180 TR_XM_DK_Bayes 1082 10.62 0.80 13.23 181 T_FILL_THIS_FORM_SHORT 1065 0.88 0.79 0.90 182 DKIM_ADSP_CUSTOM_MED 1063 0.94 0.79 0.98 183 DATE_IN_PAST_06_12 1062 0.20 0.79 0.05 184 XM_RXBody 1060 0.36 0.78 0.25 185 RCVD_IN_IADB_VOUCHED 1057 2.80 0.78 3.34 186 HK_RANDOM_FROM 1034 0.33 0.76 0.22 187 LongTLD 1030 0.29 0.76 0.17 188 HTML_IMAGE_ONLY_16 1029 0.50 0.76 0.43 189 MIXED_ES 1024 0.17 0.76 0.01 190 LONG_JUNK_URI3 1024 0.17 0.76 0.02 191 URIBL_ABUSE_SURBL 1024 0.20 0.76 0.05 192 ANY_BOUNCE_MESSAGE 1012 2.27 0.75 2.67 193 BOUNCE_MESSAGE 1012 2.26 0.75 2.67 194 FILL_THIS_FORM 1012 0.47 0.75 0.40 195 TooManyTo_004 1001 0.94 0.74 0.99 196 NML_ADSP_CUSTOM_MED 989 0.65 0.73 0.63 197 XMHTMLBadTable_001 987 0.50 0.73 0.44 198 RELAYCOUNTRY_PL 954 0.16 0.71 0.02 199 HTML_TAG_BALANCE_BODY 946 0.65 0.70 0.64 200 FILL_THIS_FORM_LONG 938 0.40 0.69 0.33 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 448363 89.21 93.79 88.00 2 DKIM_SIGNED 365776 73.05 77.78 71.79 3 XM_DK_Pass 357995 71.07 74.10 70.26 4 DKIM_VALID 336001 66.62 69.15 65.94 5 DCC_CHECK_NEGATIVE 303018 50.91 18.67 59.47 6 BAYES_50 296415 55.44 45.16 58.17 7 XMListUnsubscribeExists 250208 53.26 68.91 49.11 8 DKIM_VALID_AU 242101 48.87 53.98 47.52 9 XM_H_QuotedFrom 209247 43.18 51.13 41.07 10 DCC_CHECK 195466 47.04 79.73 38.36 11 T_TM2_M_HEADER_IN_MSG 154791 28.13 19.68 30.38 12 HTML_FONT_LOW_CONTRAST 131796 28.15 36.74 25.87 13 DKIM_VALID_EF 129399 24.09 19.18 25.40 14 XMSubLong 110596 22.70 26.43 21.71 15 FVGT_m_MULTI_ODD 106970 22.10 26.27 20.99 16 LOC_TINY_FONT_1 106044 22.83 30.43 20.81 17 ALL_TRUSTED 100082 15.91 1.83 19.64 18 MIME_HTML_ONLY 98758 22.60 34.72 19.38 19 MultiRelay 89455 17.15 15.63 17.56 20 BAYES_00 85848 13.58 1.26 16.85 21 T_KAM_HTML_FONT_INVALID 81975 16.30 17.08 16.09 22 TR_XM_DK_Bayes 67393 10.62 0.80 13.23 23 TR_XM_DK_Bayes1 62976 9.90 0.64 12.36 24 XM_Body_Dirty_Words 59924 13.21 18.67 11.76 25 XM_Multi_Part_URI 58594 12.02 13.98 11.50 26 XM_DKIMWhitelistDomains 56565 8.85 0.38 11.10 27 TR_XM_DK_Bayes2 52651 8.27 0.51 10.33 28 LOTS_OF_MONEY 45720 10.05 14.08 8.97 29 LotsOfNums_01 43391 7.87 5.44 8.52 30 XM_Evil_Numbers_Gen 42777 9.54 13.85 8.40 31 RCVD_IN_RP_SAFE 41712 6.86 1.85 8.19 32 TooManyTo_001 40962 8.15 8.55 8.04 33 HTML_IMAGE_RATIO_02 40068 8.52 10.97 7.86 34 XM_DK_Undo_02 36749 13.30 36.25 7.21 35 T_XMDrugObfuBody_14 36446 7.49 8.77 7.15 36 RCVD_IN_RP_CERTIFIED 35961 5.85 1.30 7.06 37 FSL_BULK_SIG 31030 7.90 14.70 6.09 38 XM_B_Phish_Phrases 30110 6.04 6.55 5.91 39 DKIM_INVALID 29775 6.43 8.63 5.84 40 XM_H_Long_From01 29357 6.42 8.89 5.76 41 MIME_QP_LONG_LINE 29303 5.11 2.70 5.75 42 XMStrtUSub 27745 4.90 2.83 5.45 43 BAYES_99 27647 10.17 28.04 5.43 44 RELAYCOUNTRY_META 27533 9.36 24.25 5.40 45 XM_SendGrid 27284 4.76 2.53 5.35 46 HTML_IMAGE_RATIO_04 27265 6.08 8.85 5.35 47 RCVD_IN_IADB_LISTED 27001 4.47 1.36 5.30 48 BAYES_60 25468 5.62 7.98 5.00 49 BOTNET_IPINHOSTNAME 24126 7.81 19.38 4.73 50 RCVD_IN_IADB_SPF 23752 3.92 1.13 4.66 51 T_TooManySym_01 23640 4.20 2.52 4.64 52 XM_PDF 23381 3.80 0.81 4.59 53 BAYES_999 23331 8.45 23.01 4.58 54 BAYES_40 22863 4.07 2.52 4.49 55 T_REMOTE_IMAGE 21747 4.87 7.12 4.27 56 RCVD_IN_IADB_DK 20775 3.45 1.08 4.08 57 RCVD_IN_IADB_SENDERID 20669 3.43 1.09 4.06 58 RCVD_IN_MSPIKE_H2 20590 3.79 2.82 4.04 59 XMSubMetaSx_00 19840 4.83 8.36 3.89 60 FROM_EXCESS_BASE64 19633 5.04 9.51 3.85 61 XMSexyCombo_05 18823 5.08 10.32 3.69 62 IN_ZIMBRA_NJ_WHITELIST 18616 2.89 0.02 3.65 63 XMNumbers 17247 4.10 6.79 3.38 64 BAYES_20 17113 3.08 2.05 3.36 65 RCVD_IN_IADB_VOUCHED 17009 2.80 0.78 3.34 66 XM_UncommonTLD01 16463 5.30 13.12 3.23 67 HTML_IMAGE_RATIO_06 16336 3.44 4.32 3.21 68 MPART_ALT_DIFF 15152 3.80 6.89 2.97 69 TR_DCC_Bayes_99 15044 7.23 23.36 2.95 70 HTML_MIME_NO_HTML_TAG 14552 3.35 5.20 2.86 71 MIME_HTML_MOSTLY 14268 2.94 3.47 2.80 72 BAYES_80 14068 3.88 8.09 2.76 73 ANY_BOUNCE_MESSAGE 13593 2.27 0.75 2.67 74 BOUNCE_MESSAGE 13590 2.26 0.75 2.67 75 HTML_IMAGE_RATIO_08 12793 2.98 4.72 2.51 76 UNPARSEABLE_RELAY 12643 2.41 2.13 2.48 77 MAILING_LIST_MULTI 12345 2.35 2.06 2.42 78 TO_MALFORMED 11273 1.76 0.04 2.21 79 BAYES_05 11152 1.97 1.15 2.19 80 TooManyTo_002 11013 1.91 0.99 2.16 81 RCVD_IN_IADB_OPTIN 10477 1.74 0.54 2.06 82 TM2_M_URI_OPT_OUT 10434 2.38 3.64 2.05 83 TVD_RCVD_IP 10161 1.65 0.35 1.99 84 XMDiploma_00 10041 1.95 1.88 1.97 85 XM_SPF_SoftFail 10009 2.59 4.97 1.96 86 URI_HEX 9872 2.24 3.39 1.94 87 HELO_NODOT 9816 1.63 0.50 1.93 88 BOTNET 9800 4.74 15.37 1.92 89 XM_DIRTYINTL 9527 2.48 4.77 1.87 90 RCVD_IN_MSPIKE_WL 9465 1.56 0.44 1.86 91 RCVD_IN_MSPIKE_H3 9456 1.56 0.44 1.86 92 XM_CamelCaseFrm001 9430 2.22 3.60 1.85 93 SUBJ_ALL_CAPS 9057 1.80 1.88 1.78 94 XM_DK_Undo_01 9053 1.69 1.35 1.78 95 BAYES_95 8927 2.16 3.72 1.75 96 RELAYCOUNTRY_CA 8341 2.13 3.97 1.64 97 IN_HORDE_ADDRESS_BOOK 8082 1.26 0.04 1.59 98 XM_OfRef6 7886 1.77 2.60 1.55 99 T_XMDrugObfuBody_08 7852 1.72 2.41 1.54 100 T_TooManySym_02 7850 1.42 0.95 1.54 101 UNTRUSTED_Relay 7840 4.71 16.65 1.54 102 TR_Symld_Words 7363 1.40 1.25 1.45 103 TooManyTo_003 7291 1.31 0.84 1.43 104 INVALID_MSGID 7145 1.13 0.10 1.40 105 XMCapTrack 7024 1.15 0.28 1.38 106 XMGenDplmaNmb 6966 1.37 1.36 1.37 107 TR_MetaPhish_Combo_01 6863 1.18 0.53 1.35 108 URI_TRY_3LD 6590 1.26 1.13 1.29 109 MIME_HTML_ONLY_MULTI 6521 1.85 4.02 1.28 110 XM_GoogleGroups 6352 1.07 0.42 1.25 111 XMStockSpam_06 6075 1.29 1.67 1.19 112 XM_H_Long_From02 5927 1.49 2.72 1.16 113 XM_H_PHPOS 5895 1.24 1.54 1.16 114 XMPhish11 5651 1.14 1.26 1.11 115 RELAYCOUNTRY_GB 5566 1.24 1.82 1.09 116 USER_IN_DEF_DKIM_WL 5077 0.79 0.02 1.00 117 TM2_M_VERY_LONG_WORD 5059 1.11 1.53 0.99 118 TooManyTo_004 5052 0.94 0.74 0.99 119 DKIM_ADSP_CUSTOM_MED 4994 0.94 0.79 0.98 120 T_FILL_THIS_FORM_SHORT 4606 0.88 0.79 0.90 121 XM_salutation2 4594 1.49 3.71 0.90 122 XM_UB50 4458 2.37 7.99 0.87 123 TooManyTo_005 4297 0.80 0.66 0.84 124 SpammyFromTLD_01 3997 1.10 2.31 0.78 125 XMSubMetaI_00 3959 1.08 2.24 0.78 126 XM_ProductURIs 3814 0.90 1.47 0.75 127 XMMoneyMeta_00 3768 0.78 0.93 0.74 128 T_XMDrugObfuBody_00 3734 1.09 2.42 0.73 129 XMBody_17 3535 0.91 1.74 0.69 130 T_OBFU_PDF_ATTACH 3530 0.60 0.24 0.69 131 XM_H_PHPMailer 3475 0.74 0.97 0.68 132 XMSexyCombo_01 3375 0.92 1.88 0.66 133 DKIM_ADSP_NXDOMAIN 3304 0.84 1.57 0.65 134 HTML_TAG_BALANCE_BODY 3254 0.65 0.70 0.64 135 XM_B_REG_HTML 3230 0.67 0.80 0.63 136 NML_ADSP_CUSTOM_MED 3192 0.65 0.73 0.63 137 TR_XM_RelayPhish 3172 0.75 1.24 0.62 138 FROM_GOV_SPOOF 3153 0.52 0.15 0.62 139 T_Symld_Words_02 3149 0.82 1.59 0.62 140 PLING_QUERY 3099 0.60 0.55 0.61 141 XMBody_95 3084 0.50 0.12 0.61 142 T_XMHurry_00 3029 0.77 1.43 0.59 143 LOW_PRICE 3024 0.65 0.88 0.59 144 HTTPS_HTTP_MISMATCH 3013 0.57 0.50 0.59 145 MISSING_HEADERS 2930 1.19 3.52 0.58 146 HTML_FONT_FACE_BAD 2888 0.66 0.99 0.57 147 FORGED_GMAIL_RCVD 2840 0.58 0.66 0.56 148 TM2_M_A_HREF_HREF 2807 0.55 0.52 0.55 149 XMBrknScrpt_02 2786 0.63 0.94 0.55 150 XMHTML_After_End 2762 0.70 1.32 0.54 151 URI_NOVOWEL 2761 0.55 0.58 0.54 152 XMNoVowels 2711 0.52 0.48 0.53 153 USER_IN_WHITELIST 2705 0.42 0.00 0.53 154 FROM_GOV_DKIM_AU 2525 0.43 0.16 0.50 155 XMLngstWrd_00 2513 0.46 0.32 0.49 156 XMPhish30 2508 0.67 1.32 0.49 157 XMSlimDrugH 2500 0.64 1.19 0.49 158 RELAYCOUNTRY_AU 2496 0.56 0.85 0.49 159 XM_B_COPY_HTML 2483 0.51 0.60 0.49 160 XMBdyGiftCard01 2478 0.70 1.51 0.49 161 SUBJ_DOLLARS 2462 0.57 0.90 0.48 162 RELAYCOUNTRY_DE 2451 0.55 0.80 0.48 163 SHORT_HELO_AND_INLINE_IMAGE 2404 0.38 0.03 0.47 164 XM_ShortIntro_01 2365 0.46 0.46 0.46 165 T_TooManySym_03 2353 0.41 0.22 0.46 166 TR_LOTS_OF_MONEY3 2342 0.49 0.61 0.46 167 XMLngstWrd_01 2323 0.42 0.28 0.46 168 XMHTMLBadTable_001 2231 0.50 0.73 0.44 169 HTML_IMAGE_ONLY_16 2185 0.50 0.76 0.43 170 XMBody_78 2143 0.62 1.35 0.42 171 XM_URI_RBL 2141 1.05 3.41 0.42 172 XMSubMetaSxObfu_02 2118 0.40 0.32 0.42 173 REMOVE_BEFORE_LINK 2102 0.41 0.41 0.41 174 XMGappySubj_01 2053 0.37 0.23 0.40 175 HTML_IMAGE_ONLY_32 2031 0.38 0.30 0.40 176 FILL_THIS_FORM 2027 0.47 0.75 0.40 177 XMDateMe_00 2014 0.38 0.32 0.40 178 RDNS_DYNAMIC 1946 0.57 1.26 0.38 179 XM_USANA_RCVD 1905 0.30 0.00 0.37 180 XMPhish14 1904 0.54 1.19 0.37 181 RCVD_IN_SORBS_DUL 1888 0.39 0.44 0.37 182 TM2_M_BODY_EMPTY 1829 0.33 0.21 0.36 183 XM_H_PHPOS_M 1826 0.37 0.41 0.36 184 HTML_IMAGE_ONLY_28 1825 0.47 0.91 0.36 185 RELAYCOUNTRY_FR 1765 1.24 4.59 0.35 186 XMSubMetaSxObfu_03 1758 0.45 0.85 0.35 187 DIET_1 1711 0.66 1.90 0.34 188 AC_DIV_BONANZA 1698 0.28 0.06 0.33 189 TR_LOTS_OF_MONEY2 1679 0.50 1.13 0.33 190 T_MONEY_PERCENT 1679 0.50 1.13 0.33 191 SpammyFromTLD_02 1668 1.32 5.04 0.33 192 FILL_THIS_FORM_LONG 1663 0.40 0.69 0.33 193 TVD_SPACE_RATIO 1651 0.31 0.26 0.32 194 XMSubNoVowel 1651 0.53 1.29 0.32 195 HTML_IMAGE_ONLY_24 1607 0.36 0.54 0.32 196 TO_NO_BRKTS_HTML_ONLY 1588 0.29 0.22 0.31 197 FILL_THIS_FORM_LOAN 1572 0.35 0.51 0.31 198 XM_Body_Obfu01 1538 0.29 0.27 0.30 199 XMSolicitRefs_0 1526 0.32 0.41 0.30 200 RELAYCOUNTRY_AT 1524 0.47 1.13 0.30 ----------------------------------------------------------------------