Email: 622834 Autolearn: 0 AvgScore: 2.47 AvgScanTime: 2.07 sec Spam: 154534 Autolearn: 0 AvgScore: 12.22 AvgScanTime: 2.41 sec Ham: 468300 Autolearn: 0 AvgScore: -0.74 AvgScanTime: 1.96 sec Time Spent Running SA: 358.85 hours Time Spent Processing Spam: 103.25 hours Time Spent Processing Ham: 255.61 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 146754 89.61 94.97 87.85 2 DKIM_SIGNED 122292 75.68 79.14 74.54 3 DCC_CHECK 120268 48.14 77.83 38.35 4 XM_DK_Pass 119195 74.08 77.13 73.07 5 XMListUnsubscribeExists 116255 56.49 75.23 50.31 6 DKIM_VALID 113240 70.39 73.28 69.44 7 DKIM_VALID_AU 90923 52.28 58.84 50.11 8 XM_H_QuotedFrom 76536 38.87 49.53 35.36 9 XM_DK_Undo_02 70762 21.95 45.79 14.09 10 BAYES_99 62611 19.39 40.52 12.42 11 HTML_FONT_LOW_CONTRAST 56045 29.28 36.27 26.98 12 LOC_TINY_FONT_1 52895 24.30 34.23 21.02 13 BAYES_50 52814 47.74 34.18 52.21 14 BAYES_999 52631 16.70 34.06 10.97 15 MIME_HTML_ONLY 50302 23.54 32.55 20.56 16 TR_DCC_Bayes_99 49797 12.38 32.22 5.83 17 FVGT_m_MULTI_ODD 41289 22.10 26.72 20.58 18 XMSubLong 35223 22.33 22.79 22.18 19 DKIM_VALID_EF 34718 26.08 22.47 27.27 20 XM_Body_Dirty_Words 33018 14.97 21.37 12.85 21 DCC_CHECK_NEGATIVE 31750 49.78 20.55 59.42 22 T_KAM_HTML_FONT_INVALID 31498 17.58 20.38 16.65 23 T_TM2_M_HEADER_IN_MSG 28853 28.09 18.67 31.20 24 BOTNET_IPINHOSTNAME 28593 8.62 18.50 5.36 25 RELAYCOUNTRY_META 28576 8.67 18.49 5.43 26 BOTNET 24738 5.35 16.01 1.84 27 XM_Multi_Part_URI 24336 12.74 15.75 11.75 28 MultiRelay 23997 18.44 15.53 19.39 29 HTML_IMAGE_RATIO_02 21358 9.16 13.82 7.62 30 XM_Evil_Numbers_Gen 21269 9.80 13.76 8.49 31 LOTS_OF_MONEY 20175 9.69 13.06 8.57 32 FSL_BULK_SIG 18101 7.49 11.71 6.09 33 UNTRUSTED_Relay 17278 4.01 11.18 1.65 34 XMSexyCombo_05 14931 5.31 9.66 3.87 35 T_XMDrugObfuBody_14 13480 7.99 8.72 7.75 36 XM_UncommonTLD01 13380 4.73 8.66 3.43 37 XM_H_Long_From01 13111 6.81 8.48 6.25 38 XMSubMetaSx_00 12318 4.75 7.97 3.69 39 XM_B_Phish_Phrases 12104 6.23 7.83 5.70 40 LotsOfNums_01 11560 8.53 7.48 8.87 41 BAYES_80 11396 4.70 7.37 3.81 42 HTML_IMAGE_RATIO_04 10857 5.50 7.03 5.00 43 TooManyTo_001 10815 8.36 7.00 8.81 44 MPART_ALT_DIFF 10315 4.18 6.67 3.35 45 BAYES_60 9969 6.08 6.45 5.96 46 DKIM_INVALID 9052 5.29 5.86 5.10 47 XM_DIRTYINTL 8450 3.41 5.47 2.73 48 T_REMOTE_IMAGE 7798 4.32 5.05 4.08 49 XM_UB50 7541 1.77 4.88 0.75 50 BAYES_95 7426 3.07 4.81 2.49 51 XMStrtUSub 7376 4.77 4.77 4.76 52 HTML_IMAGE_RATIO_06 7367 3.63 4.77 3.26 53 RELAYCOUNTRY_FR 7198 1.33 4.66 0.24 54 HTML_MIME_NO_HTML_TAG 6885 3.31 4.46 2.93 55 FROM_EXCESS_BASE64 6820 4.57 4.41 4.62 56 MIME_HTML_MOSTLY 6313 2.81 4.09 2.39 57 XM_SPF_SoftFail 6249 2.59 4.04 2.10 58 RELAYCOUNTRY_CA 6050 2.03 3.91 1.41 59 XM_SendGrid 5918 5.54 3.83 6.11 60 XM_CamelCaseFrm001 5905 2.38 3.82 1.90 61 TM2_M_URI_OPT_OUT 5855 2.46 3.79 2.02 62 HTML_IMAGE_RATIO_08 5696 2.53 3.69 2.14 63 MIME_QP_LONG_LINE 5643 5.81 3.65 6.52 64 DKIM_ADSP_NXDOMAIN 5625 1.26 3.64 0.47 65 RCVD_IN_RP_SAFE 5603 8.44 3.63 10.04 66 XMNumbers 5531 3.10 3.58 2.94 67 NUMERIC_HTTP_ADDR 5525 1.17 3.58 0.38 68 XM_URI_RBL 5431 1.21 3.51 0.45 69 XMMoneyMeta_00 5273 1.38 3.41 0.70 70 NORMAL_HTTP_TO_IP 5183 0.88 3.35 0.06 71 FROM_SUSPICIOUS_NTLD 5106 0.87 3.30 0.06 72 URI_HEX 5099 2.04 3.30 1.63 73 MIME_HTML_ONLY_MULTI 4851 2.07 3.14 1.72 74 T_TooManySym_01 4809 4.87 3.11 5.45 75 T_XMDrugObfuBody_08 4780 1.98 3.09 1.61 76 BODY_URI_ONLY 4761 0.84 3.08 0.10 77 XM_OfRef6 4760 1.68 3.08 1.22 78 SpammyFromTLD_02 4751 1.02 3.07 0.34 79 RCVD_IN_RP_CERTIFIED 4594 7.55 2.97 9.06 80 XMDiploma_00 4460 2.02 2.89 1.73 81 HTML_IMAGE_ONLY_12 4344 0.87 2.81 0.24 82 HTML_SHORT_LINK_IMG_1 4242 0.70 2.75 0.03 83 TR_XM_PHPDW 4196 1.71 2.72 1.38 84 TR_XM_PHPForged 4151 1.70 2.69 1.37 85 TR_XM_FormFill2 4128 1.69 2.67 1.37 86 XM_H_PHPOS 4080 1.67 2.64 1.35 87 TVD_IP_SING_HEX 3975 0.64 2.57 0.00 88 URI_HEX_IP 3975 0.64 2.57 0.00 89 BAYES_40 3894 3.85 2.52 4.28 90 RCVD_IN_MSPIKE_H2 3730 4.15 2.41 4.72 91 XMBody_78 3691 0.87 2.39 0.38 92 XMBdyGiftCard01 3682 1.16 2.38 0.76 93 PDS_TO_EQ_FROM_NAME 3634 0.60 2.35 0.03 94 XMSexyCombo_01 3613 0.95 2.34 0.49 95 RCVD_IN_BL_SPAMCOP_NET 3546 1.10 2.29 0.70 96 URIBL_DBL_ABUSE_REDIR 3533 0.58 2.29 0.02 97 ALL_TRUSTED 3488 12.47 2.26 15.83 98 RCVD_IN_RP_RNBL 3390 0.57 2.19 0.04 99 XMGenDplmaNmb 3229 1.39 2.09 1.16 100 SpammyFromTLD_01 3229 1.15 2.09 0.84 101 MultiRelay_Combo 2980 0.60 1.93 0.16 102 MultiRelay_CC 2980 0.60 1.93 0.16 103 TR_XM_RelayPhish 2971 1.16 1.92 0.91 104 BAYES_20 2899 2.87 1.88 3.20 105 TR_XM_DK_SendGrid 2849 2.92 1.84 3.27 106 XMStockSpam_06 2843 1.12 1.84 0.88 107 T_MONEY_PERCENT 2703 0.64 1.75 0.28 108 TR_LOTS_OF_MONEY2 2703 0.64 1.75 0.28 109 MAILING_LIST_MULTI 2687 2.28 1.74 2.46 110 UNPARSEABLE_RELAY 2681 2.67 1.73 2.98 111 NO_DNS_FOR_FROM 2604 1.20 1.69 1.03 112 XM_H_Long_From02 2599 1.18 1.68 1.01 113 RCVD_IN_IADB_LISTED 2596 4.83 1.68 5.88 114 SUBJ_ALL_CAPS 2513 1.77 1.63 1.82 115 XM_UB99 2508 0.43 1.62 0.04 116 RCVD_IN_PSBL 2497 0.40 1.62 0.00 117 SUBJ_DOLLARS 2410 0.60 1.56 0.29 118 HTML_FONT_SIZE_LARGE 2405 0.51 1.56 0.17 119 XMPhish11 2326 1.30 1.51 1.23 120 TM2_M_VERY_LONG_WORD 2310 1.26 1.49 1.19 121 XMBody_17 2232 0.79 1.44 0.57 122 BOTNET_NORDNS 2214 0.37 1.43 0.02 123 XMPhish30 2201 0.67 1.42 0.43 124 RCVD_IN_IADB_SPF 2198 4.26 1.42 5.20 125 XM_UB60 2190 0.40 1.42 0.07 126 XM_ProductURIs 2135 0.90 1.38 0.74 127 TR_LOTS_OF_MONEY3 2117 0.70 1.37 0.48 128 RCVD_IN_IADB_SENDERID 2025 3.76 1.31 4.57 129 RELAYCOUNTRY_GB 2024 1.16 1.31 1.12 130 RCVD_IN_IADB_DK 2008 3.74 1.30 4.55 131 XM_HighProb1 1974 0.32 1.28 0.01 132 T_FILL_THIS_FORM_SHORT 1964 1.19 1.27 1.16 133 URIBL_BLACK 1958 0.36 1.27 0.06 134 RELAYCOUNTRY_DE 1920 0.57 1.24 0.35 135 XMSubMetaSxObfu_03 1912 0.65 1.24 0.46 136 XMHTML_After_End 1897 0.62 1.23 0.42 137 DIET_1 1894 0.54 1.23 0.32 138 XMSubMetaI_00 1890 0.77 1.22 0.62 139 XM_B_REG_HTML 1865 0.57 1.21 0.35 140 XM_UB999 1837 0.32 1.19 0.04 141 T_XMDrugObfuBody_00 1803 0.80 1.17 0.68 142 XM_H_PHPMailer 1784 0.68 1.15 0.52 143 T_XMHurry_00 1775 0.73 1.15 0.59 144 TR_Symld_Words 1769 1.49 1.14 1.61 145 HTML_IMAGE_ONLY_32 1724 0.62 1.12 0.46 146 XM_Dr_From 1639 0.36 1.06 0.13 147 BAYES_00 1613 10.13 1.04 13.12 148 XMHTMLBadTable_001 1602 0.64 1.04 0.50 149 XMSexyCombo_04 1587 0.31 1.03 0.07 150 BAYES_05 1584 1.86 1.03 2.13 151 XM_DK_Undo_01 1565 1.60 1.01 1.80 152 T_HTML_TAG_BALANCE_CENTER 1547 0.32 1.00 0.09 153 XM_UB80 1544 0.27 1.00 0.03 154 RDNS_DYNAMIC 1530 0.57 0.99 0.43 155 RELAYCOUNTRY_AU 1523 0.64 0.99 0.53 156 T_TooManySym_02 1511 1.52 0.98 1.69 157 DKIM_ADSP_CUSTOM_MED 1478 1.04 0.96 1.07 158 XM_H_PHPOS_M 1476 0.37 0.96 0.18 159 XMBrknScrpt_02 1473 0.69 0.95 0.60 160 BODY_ENHANCEMENT 1473 0.26 0.95 0.03 161 RCVD_IN_IADB_VOUCHED 1449 2.92 0.94 3.58 162 NORDNS_LOW_CONTRAST 1425 0.24 0.92 0.01 163 NML_ADSP_CUSTOM_MED 1404 0.79 0.91 0.75 164 HTML_TAG_BALANCE_BODY 1332 0.63 0.86 0.55 165 URIBL_DBL_SPAM 1324 0.22 0.86 0.01 166 TR_Mismatch_TLD_02 1316 0.27 0.85 0.07 167 URI_TRY_3LD 1313 1.18 0.85 1.29 168 XMPhish14 1303 0.47 0.84 0.35 169 DATE_IN_PAST_03_06 1283 0.31 0.83 0.13 170 LongTLD 1281 0.33 0.83 0.16 171 FORGED_GMAIL_RCVD 1274 0.61 0.82 0.54 172 FILL_THIS_FORM 1262 0.51 0.82 0.41 173 XMSlimDrugH 1259 0.44 0.81 0.31 174 XM_B_COPY_HTML 1238 0.62 0.80 0.55 175 TR_Mismatch_TLD_01 1223 0.30 0.79 0.14 176 ANY_BOUNCE_MESSAGE 1210 1.75 0.78 2.07 177 BOUNCE_MESSAGE 1210 1.75 0.78 2.07 178 HK_RANDOM_REPLYTO 1190 0.34 0.77 0.20 179 LOADSA_MONEY_COMBO 1187 0.21 0.77 0.03 180 LONG_JUNK_URI 1183 0.23 0.77 0.06 181 FILL_THIS_FORM_LONG 1173 0.43 0.76 0.32 182 RELAYCOUNTRY_IN 1166 0.29 0.75 0.13 183 HTML_IMAGE_ONLY_28 1165 0.48 0.75 0.39 184 HTTPS_HTTP_MISMATCH 1152 0.63 0.75 0.59 185 DATE_IN_PAST_06_12 1138 0.22 0.74 0.04 186 T_Symld_Words_02 1112 0.65 0.72 0.63 187 HK_SCAM 1110 0.75 0.72 0.76 188 RELAYCOUNTRY_JP 1098 0.29 0.71 0.15 189 XM_OfRef7 1092 0.29 0.71 0.15 190 RELAYCOUNTRY_AT 1072 0.30 0.69 0.16 191 TR_MetaPhish_Combo_01 1067 1.48 0.69 1.75 192 TR_XM_DK_Bayes 1065 7.64 0.69 9.94 193 URI_NOVOWEL 1035 0.47 0.67 0.40 194 LONG_HEX_URI 1023 0.27 0.66 0.14 195 HTML_IMAGE_ONLY_16 1021 0.38 0.66 0.29 196 XMSubMetaSSx_00 982 0.30 0.64 0.20 197 XM_PDF 980 4.08 0.63 5.22 198 HTML_FONT_FACE_BAD 976 0.64 0.63 0.65 199 PLING_QUERY 975 0.53 0.63 0.50 200 FROM_DOMAIN_NOVOWEL 973 0.17 0.63 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 411383 89.61 94.97 87.85 2 DKIM_SIGNED 349054 75.68 79.14 74.54 3 XM_DK_Pass 342209 74.08 77.13 73.07 4 DKIM_VALID 325176 70.39 73.28 69.44 5 DCC_CHECK_NEGATIVE 278273 49.78 20.55 59.42 6 BAYES_50 244522 47.74 34.18 52.21 7 XMListUnsubscribeExists 235599 56.49 75.23 50.31 8 DKIM_VALID_AU 234664 52.28 58.84 50.11 9 DCC_CHECK 179590 48.14 77.83 38.35 10 XM_H_QuotedFrom 165588 38.87 49.53 35.36 11 T_TM2_M_HEADER_IN_MSG 146121 28.09 18.67 31.20 12 DKIM_VALID_EF 127709 26.08 22.47 27.27 13 HTML_FONT_LOW_CONTRAST 126339 29.28 36.27 26.98 14 XMSubLong 103881 22.33 22.79 22.18 15 LOC_TINY_FONT_1 98423 24.30 34.23 21.02 16 FVGT_m_MULTI_ODD 96366 22.10 26.72 20.58 17 MIME_HTML_ONLY 96298 23.54 32.55 20.56 18 MultiRelay 90824 18.44 15.53 19.39 19 T_KAM_HTML_FONT_INVALID 77979 17.58 20.38 16.65 20 ALL_TRUSTED 74152 12.47 2.26 15.83 21 XM_DK_Undo_02 65966 21.95 45.79 14.09 22 BAYES_00 61453 10.13 1.04 13.12 23 XM_Body_Dirty_Words 60199 14.97 21.37 12.85 24 BAYES_99 58184 19.39 40.52 12.42 25 XM_DKIMWhitelistDomains 56815 9.13 0.02 12.13 26 XM_Multi_Part_URI 55013 12.74 15.75 11.75 27 BAYES_999 51373 16.70 34.06 10.97 28 RCVD_IN_RP_SAFE 46994 8.44 3.63 10.04 29 TR_XM_DK_Bayes 46526 7.64 0.69 9.94 30 TR_XM_DK_Bayes1 44298 7.26 0.61 9.46 31 RCVD_IN_RP_CERTIFIED 42416 7.55 2.97 9.06 32 LotsOfNums_01 41541 8.53 7.48 8.87 33 TooManyTo_001 41250 8.36 7.00 8.81 34 LOTS_OF_MONEY 40151 9.69 13.06 8.57 35 XM_Evil_Numbers_Gen 39777 9.80 13.76 8.49 36 TR_XM_DK_Bayes2 38355 6.29 0.52 8.19 37 T_XMDrugObfuBody_14 36283 7.99 8.72 7.75 38 HTML_IMAGE_RATIO_02 35697 9.16 13.82 7.62 39 MIME_QP_LONG_LINE 30534 5.81 3.65 6.52 40 XM_H_Long_From01 29279 6.81 8.48 6.25 41 XM_SendGrid 28597 5.54 3.83 6.11 42 FSL_BULK_SIG 28540 7.49 11.71 6.09 43 BAYES_60 27915 6.08 6.45 5.96 44 RCVD_IN_IADB_LISTED 27518 4.83 1.68 5.88 45 TR_DCC_Bayes_99 27313 12.38 32.22 5.83 46 XM_B_Phish_Phrases 26687 6.23 7.83 5.70 47 T_TooManySym_01 25507 4.87 3.11 5.45 48 RELAYCOUNTRY_META 25447 8.67 18.49 5.43 49 BOTNET_IPINHOSTNAME 25106 8.62 18.50 5.36 50 XM_PDF 24440 4.08 0.63 5.22 51 RCVD_IN_IADB_SPF 24340 4.26 1.42 5.20 52 DKIM_INVALID 23878 5.29 5.86 5.10 53 HTML_IMAGE_RATIO_04 23415 5.50 7.03 5.00 54 XMStrtUSub 22303 4.77 4.77 4.76 55 RCVD_IN_MSPIKE_H2 22124 4.15 2.41 4.72 56 FROM_EXCESS_BASE64 21615 4.57 4.41 4.62 57 RCVD_IN_IADB_SENDERID 21419 3.76 1.31 4.57 58 RCVD_IN_IADB_DK 21316 3.74 1.30 4.55 59 BAYES_40 20064 3.85 2.52 4.28 60 T_REMOTE_IMAGE 19111 4.32 5.05 4.08 61 IN_ZIMBRA_NJ_WHITELIST 18957 3.05 0.02 4.05 62 TO_MALFORMED 18154 2.93 0.06 3.88 63 XMSexyCombo_05 18142 5.31 9.66 3.87 64 BAYES_80 17850 4.70 7.37 3.81 65 XMSubMetaSx_00 17285 4.75 7.97 3.69 66 RCVD_IN_IADB_VOUCHED 16743 2.92 0.94 3.58 67 XM_UncommonTLD01 16061 4.73 8.66 3.43 68 MPART_ALT_DIFF 15699 4.18 6.67 3.35 69 TR_XM_DK_SendGrid 15322 2.92 1.84 3.27 70 HTML_IMAGE_RATIO_06 15252 3.63 4.77 3.26 71 BAYES_20 14966 2.87 1.88 3.20 72 UNPARSEABLE_RELAY 13970 2.67 1.73 2.98 73 XMNumbers 13754 3.10 3.58 2.94 74 HTML_MIME_NO_HTML_TAG 13726 3.31 4.46 2.93 75 TVD_RCVD_IP 12884 2.19 0.51 2.75 76 XM_DIRTYINTL 12784 3.41 5.47 2.73 77 BAYES_95 11673 3.07 4.81 2.49 78 MAILING_LIST_MULTI 11517 2.28 1.74 2.46 79 MIME_HTML_MOSTLY 11198 2.81 4.09 2.39 80 TooManyTo_002 11170 1.94 0.60 2.39 81 RCVD_IN_IADB_OPTIN 10666 1.87 0.63 2.28 82 HELO_NODOT 10336 1.79 0.53 2.21 83 HELO_NO_DOMAIN 10333 1.79 0.53 2.21 84 RCVD_IN_MSPIKE_WL 10293 1.78 0.52 2.20 85 RCVD_IN_MSPIKE_H3 10293 1.78 0.52 2.20 86 HTML_IMAGE_RATIO_08 10031 2.53 3.69 2.14 87 BAYES_05 9985 1.86 1.03 2.13 88 XM_SPF_SoftFail 9853 2.59 4.04 2.10 89 ANY_BOUNCE_MESSAGE 9677 1.75 0.78 2.07 90 BOUNCE_MESSAGE 9672 1.75 0.78 2.07 91 TM2_M_URI_OPT_OUT 9473 2.46 3.79 2.02 92 XM_CamelCaseFrm001 8901 2.38 3.82 1.90 93 BOTNET 8614 5.35 16.01 1.84 94 SUBJ_ALL_CAPS 8534 1.77 1.63 1.82 95 XM_DK_Undo_01 8430 1.60 1.01 1.80 96 TR_MetaPhish_Combo_01 8177 1.48 0.69 1.75 97 XMDiploma_00 8118 2.02 2.89 1.73 98 MIME_HTML_ONLY_MULTI 8052 2.07 3.14 1.72 99 IN_HORDE_ADDRESS_BOOK 8002 1.30 0.05 1.71 100 T_TooManySym_02 7927 1.52 0.98 1.69 101 UNTRUSTED_Relay 7704 4.01 11.18 1.65 102 URI_HEX 7635 2.04 3.30 1.63 103 T_XMDrugObfuBody_08 7545 1.98 3.09 1.61 104 TR_Symld_Words 7537 1.49 1.14 1.61 105 TooManyTo_003 7527 1.32 0.44 1.61 106 INVALID_MSGID 7439 1.24 0.19 1.59 107 XMCapTrack 7096 1.21 0.27 1.52 108 RELAYCOUNTRY_CA 6604 2.03 3.91 1.41 109 TR_XM_PHPDW 6459 1.71 2.72 1.38 110 TR_XM_PHPForged 6428 1.70 2.69 1.37 111 TR_XM_FormFill2 6394 1.69 2.67 1.37 112 XM_H_PHPOS 6330 1.67 2.64 1.35 113 XM_GoogleGroups 6047 1.08 0.42 1.29 114 URI_TRY_3LD 6025 1.18 0.85 1.29 115 XMPhish11 5778 1.30 1.51 1.23 116 XM_OfRef6 5703 1.68 3.08 1.22 117 TM2_M_VERY_LONG_WORD 5562 1.26 1.49 1.19 118 TooManyTo_004 5484 0.97 0.34 1.17 119 XMGenDplmaNmb 5424 1.39 2.09 1.16 120 T_FILL_THIS_FORM_SHORT 5418 1.19 1.27 1.16 121 RELAYCOUNTRY_GB 5227 1.16 1.31 1.12 122 USER_IN_DEF_DKIM_WL 5024 0.81 0.01 1.07 123 DKIM_ADSP_CUSTOM_MED 5009 1.04 0.96 1.07 124 NO_DNS_FOR_FROM 4844 1.20 1.69 1.03 125 XM_H_Long_From02 4737 1.18 1.68 1.01 126 TooManyTo_005 4471 0.79 0.29 0.95 127 TR_XM_RelayPhish 4250 1.16 1.92 0.91 128 XMStockSpam_06 4114 1.12 1.84 0.88 129 MISSING_HEADERS 4007 0.74 0.37 0.86 130 SpammyFromTLD_01 3940 1.15 2.09 0.84 131 HK_SCAM 3569 0.75 0.72 0.76 132 TO_NO_BRKTS_HTML_ONLY 3557 0.66 0.37 0.76 133 XMBdyGiftCard01 3544 1.16 2.38 0.76 134 XM_UB50 3510 1.77 4.88 0.75 135 NML_ADSP_CUSTOM_MED 3500 0.79 0.91 0.75 136 XM_ProductURIs 3477 0.90 1.38 0.74 137 XMMoneyMeta_00 3300 1.38 3.41 0.70 138 RCVD_IN_BL_SPAMCOP_NET 3287 1.10 2.29 0.70 139 T_XMDrugObfuBody_00 3184 0.80 1.17 0.68 140 XMSubNoVowel 3138 0.63 0.50 0.67 141 HTML_FONT_FACE_BAD 3032 0.64 0.63 0.65 142 T_Symld_Words_02 2932 0.65 0.72 0.63 143 XMSubMetaI_00 2913 0.77 1.22 0.62 144 XM_ShortIntro_01 2893 0.55 0.34 0.62 145 XMLngstWrd_00 2823 0.58 0.51 0.60 146 XMBrknScrpt_02 2803 0.69 0.95 0.60 147 HTTPS_HTTP_MISMATCH 2780 0.63 0.75 0.59 148 T_XMHurry_00 2768 0.73 1.15 0.59 149 XMBody_95 2717 0.46 0.10 0.58 150 XMNoVowels 2693 0.56 0.50 0.58 151 XMBody_17 2674 0.79 1.44 0.57 152 T_OBFU_PDF_ATTACH 2651 0.47 0.18 0.57 153 XMLngstWrd_01 2629 0.53 0.45 0.56 154 SHORT_HELO_AND_INLINE_IMAGE 2606 0.43 0.04 0.56 155 XM_B_COPY_HTML 2598 0.62 0.80 0.55 156 HTML_TAG_BALANCE_BODY 2582 0.63 0.86 0.55 157 USER_IN_WHITELIST 2576 0.41 0.00 0.55 158 T_TooManySym_03 2526 0.54 0.54 0.54 159 FORGED_GMAIL_RCVD 2525 0.61 0.82 0.54 160 FROM_GOV_SPOOF 2510 0.45 0.21 0.54 161 RELAYCOUNTRY_AU 2485 0.64 0.99 0.53 162 XM_H_PHPMailer 2450 0.68 1.15 0.52 163 XMHTMLBadTable_001 2358 0.64 1.04 0.50 164 PLING_QUERY 2354 0.53 0.63 0.50 165 XMGappySubj_01 2297 0.46 0.38 0.49 166 XMSexyCombo_01 2277 0.95 2.34 0.49 167 TM2_M_BODY_EMPTY 2264 0.43 0.25 0.48 168 TR_LOTS_OF_MONEY3 2256 0.70 1.37 0.48 169 DKIM_ADSP_NXDOMAIN 2216 1.26 3.64 0.47 170 TM2_M_A_HREF_HREF 2208 0.46 0.44 0.47 171 XMDateMe_00 2178 0.44 0.35 0.47 172 XMSubMetaSxObfu_03 2143 0.65 1.24 0.46 173 HTML_IMAGE_ONLY_32 2136 0.62 1.12 0.46 174 XM_URI_RBL 2118 1.21 3.51 0.45 175 RCVD_IN_SORBS_DUL 2038 0.40 0.30 0.44 176 RDNS_DYNAMIC 2015 0.57 0.99 0.43 177 XM_USANA_RCVD 2001 0.32 0.00 0.43 178 XMPhish30 2000 0.67 1.42 0.43 179 AC_DIV_BONANZA 1973 0.34 0.08 0.42 180 XMHTML_After_End 1959 0.62 1.23 0.42 181 REPLYTO_WITHOUT_TO_CC 1928 0.44 0.53 0.41 182 FILL_THIS_FORM 1910 0.51 0.82 0.41 183 XMSolicitRefs_0 1865 0.41 0.45 0.40 184 URI_NOVOWEL 1862 0.47 0.67 0.40 185 HTML_IMAGE_ONLY_28 1846 0.48 0.75 0.39 186 XMSubMetaSxObfu_02 1789 0.38 0.37 0.38 187 NUMERIC_HTTP_ADDR 1761 1.17 3.58 0.38 188 XMBody_78 1758 0.87 2.39 0.38 189 FROM_GOV_DKIM_AU 1674 0.29 0.07 0.36 190 XM_B_REG_HTML 1656 0.57 1.21 0.35 191 XMPhish14 1637 0.47 0.84 0.35 192 RELAYCOUNTRY_DE 1621 0.57 1.24 0.35 193 HTML_IMAGE_ONLY_24 1617 0.38 0.47 0.35 194 XMRcvdHeader_15 1605 0.26 0.00 0.34 195 SpammyFromTLD_02 1596 1.02 3.07 0.34 196 XM_Body_Obfu01 1565 0.36 0.44 0.33 197 TVD_SPACE_RATIO 1547 0.30 0.19 0.33 198 XM_H_Undi_Recip 1526 0.34 0.37 0.33 199 FSL_THIS_IS_ADV 1513 0.35 0.45 0.32 200 DIET_1 1482 0.54 1.23 0.32 ----------------------------------------------------------------------