Email: 673475 Autolearn: 0 AvgScore: 3.02 AvgScanTime: 3.88 sec Spam: 182061 Autolearn: 0 AvgScore: 12.25 AvgScanTime: 4.65 sec Ham: 491414 Autolearn: 0 AvgScore: -0.40 AvgScanTime: 3.60 sec Time Spent Running SA: 726.48 hours Time Spent Processing Spam: 235.33 hours Time Spent Processing Ham: 491.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 173810 86.16 95.47 82.72 2 DKIM_SIGNED 158813 75.47 87.23 71.11 3 XM_DK_Pass 154105 73.96 84.64 70.00 4 DCC_CHECK 150291 49.76 82.55 37.62 5 DKIM_VALID 145299 69.50 79.81 65.68 6 XMListUnsubscribeExists 138600 55.60 76.13 48.00 7 DKIM_VALID_AU 115916 50.17 63.67 45.17 8 XM_H_QuotedFrom 102941 39.67 56.54 33.42 9 XM_DK_Undo_02 74828 18.21 41.10 9.73 10 BAYES_50 73750 54.89 40.51 60.21 11 HTML_FONT_LOW_CONTRAST 72766 29.76 39.97 25.98 12 LOC_TINY_FONT_1 71115 24.99 39.06 19.78 13 BAYES_99 66388 15.91 36.46 8.30 14 MIME_HTML_ONLY 58819 22.31 32.31 18.61 15 BAYES_999 55048 13.30 30.24 7.03 16 TR_DCC_Bayes_99 54300 11.32 29.83 4.47 17 FVGT_m_MULTI_ODD 49973 22.52 27.45 20.69 18 XMSubLong 45786 22.38 25.15 21.36 19 DKIM_VALID_EF 44201 25.02 24.28 25.30 20 XM_Body_Dirty_Words 40634 13.95 22.32 10.85 21 T_KAM_HTML_FONT_INVALID 40338 17.96 22.16 16.41 22 T_TM2_M_HEADER_IN_MSG 37557 27.61 20.63 30.20 23 HTML_IMAGE_RATIO_02 33858 10.12 18.60 6.98 24 XM_Multi_Part_URI 30665 12.54 16.84 10.95 25 MultiRelay 30273 17.24 16.63 17.47 26 XM_Evil_Numbers_Gen 29707 10.06 16.32 7.74 27 DCC_CHECK_NEGATIVE 28880 48.27 15.86 60.27 28 RELAYCOUNTRY_META 28323 7.84 15.56 4.98 29 BOTNET_IPINHOSTNAME 24970 7.19 13.72 4.77 30 XMSexyCombo_05 22246 5.64 12.22 3.20 31 BOTNET 22151 4.48 12.17 1.63 32 LOTS_OF_MONEY 21589 9.14 11.86 8.13 33 FSL_BULK_SIG 20129 7.62 11.06 6.35 34 T_XMDrugObfuBody_14 17906 8.50 9.84 8.00 35 HTML_IMAGE_RATIO_04 17202 6.45 9.45 5.34 36 UNTRUSTED_Relay 16022 3.25 8.80 1.20 37 XMSubMetaSx_00 15913 5.04 8.74 3.66 38 MPART_ALT_DIFF 15851 4.27 8.71 2.63 39 FROM_EXCESS_BASE64 15458 4.73 8.49 3.34 40 TR_XM_DocInvoice 15350 5.27 8.43 4.10 41 XM_B_Phish_Phrases 15232 5.82 8.37 4.87 42 XM_H_Long_From01 15049 6.43 8.27 5.75 43 BAYES_80 13576 4.77 7.46 3.77 44 DKIM_INVALID 13514 5.97 7.42 5.43 45 TooManyTo_001 12804 7.71 7.03 7.96 46 BAYES_60 11877 6.36 6.52 6.30 47 LotsOfNums_01 11601 8.01 6.37 8.61 48 XM_UncommonTLD01 11490 3.92 6.31 3.03 49 HTML_IMAGE_RATIO_06 9792 3.82 5.38 3.24 50 XM_DIRTYINTL 8978 2.69 4.93 1.86 51 TM2_M_URI_OPT_OUT 8791 2.65 4.83 1.84 52 XM_UB50 8403 1.76 4.62 0.70 53 MIME_HTML_MOSTLY 8128 2.66 4.46 1.99 54 XMNumbers 8092 3.91 4.44 3.71 55 MIME_HTML_ONLY_MULTI 7846 2.25 4.31 1.48 56 BAYES_95 7841 2.87 4.31 2.34 57 XM_SendGrid 7294 4.90 4.01 5.23 58 SUBJ_ALL_CAPS 7190 2.34 3.95 1.74 59 XMStrtUSub 6845 3.74 3.76 3.74 60 HTML_IMAGE_RATIO_08 6703 2.72 3.68 2.37 61 XM_CamelCaseFrm001 6491 2.33 3.57 1.87 62 RELAYCOUNTRY_CA 6366 1.93 3.50 1.35 63 XM_SPF_SoftFail 6345 2.27 3.49 1.81 64 RCVD_IN_MSPIKE_H2 6006 4.34 3.30 4.73 65 MultiRelay_CC 5805 0.97 3.19 0.15 66 MultiRelay_Combo 5805 0.97 3.19 0.15 67 RCVD_IN_RP_SAFE 5569 7.12 3.06 8.62 68 URI_HEX 5536 1.85 3.04 1.40 69 MIME_QP_LONG_LINE 5282 5.50 2.90 6.47 70 T_REMOTE_IMAGE 5210 3.89 2.86 4.27 71 XMDiploma_00 4953 1.77 2.72 1.42 72 T_TooManySym_01 4726 4.53 2.60 5.25 73 SpammyFromTLD_02 4666 0.92 2.56 0.31 74 RCVD_IN_RP_CERTIFIED 4241 6.28 2.33 7.75 75 HTML_MIME_NO_HTML_TAG 4196 2.54 2.30 2.62 76 XM_OfRef6 3977 1.87 2.18 1.75 77 T_XMDrugObfuBody_08 3934 1.85 2.16 1.74 78 T_XMHurry_00 3870 0.98 2.13 0.56 79 XM_URI_RBL 3807 0.79 2.09 0.31 80 XMSubMetaI_00 3799 0.99 2.09 0.59 81 TM2_M_VERY_LONG_WORD 3796 1.28 2.09 0.98 82 XMSexyCombo_01 3546 0.81 1.95 0.38 83 RCVD_IN_BL_SPAMCOP_NET 3485 0.80 1.91 0.38 84 XMGenDplmaNmb 3471 1.16 1.91 0.88 85 UNPARSEABLE_RELAY 3431 2.67 1.88 2.96 86 XM_H_Long_From02 3424 1.29 1.88 1.07 87 RELAYCOUNTRY_GB 3314 1.19 1.82 0.96 88 US_DOLLARS_3 3159 1.40 1.74 1.28 89 TR_Mismatch_TLD_02 3130 0.51 1.72 0.07 90 XMSubMetaSxObfu_03 3099 0.87 1.70 0.56 91 RELAYCOUNTRY_FR 3099 0.63 1.70 0.23 92 T_XMDrugObfuBody_00 3076 0.94 1.69 0.66 93 RCVD_IN_RP_RNBL 3038 0.47 1.67 0.03 94 BAYES_40 2979 3.24 1.64 3.84 95 RCVD_IN_IADB_LISTED 2903 4.99 1.59 6.24 96 T_Symld_Words_02 2809 0.90 1.54 0.66 97 XMBdyGiftCard01 2782 1.04 1.53 0.86 98 URI_TRY_3LD 2781 1.27 1.53 1.17 99 TR_XM_RelayPhish 2762 0.76 1.52 0.49 100 BOTNET_NORDNS 2676 0.41 1.47 0.02 101 SUBJ_DOLLARS 2656 0.53 1.46 0.19 102 SpammyFromTLD_01 2615 0.92 1.44 0.72 103 XMSubMetaSSx_00 2580 0.54 1.42 0.22 104 XMPhish30 2540 0.63 1.40 0.35 105 XMPhish11 2533 1.29 1.39 1.26 106 ALL_TRUSTED 2517 15.24 1.38 20.38 107 XMHTML_After_End 2516 0.64 1.38 0.37 108 MAILING_LIST_MULTI 2512 2.16 1.38 2.45 109 XMStockSpam_06 2506 1.24 1.38 1.19 110 LOADSA_MONEY_COMBO 2403 0.41 1.32 0.07 111 RCVD_IN_IADB_SPF 2381 4.37 1.31 5.50 112 BAYES_20 2354 2.43 1.29 2.85 113 TR_Symld_Words 2346 1.86 1.29 2.08 114 URIBL_BLACK 2324 0.40 1.28 0.07 115 XM_ProductURIs 2285 0.94 1.26 0.83 116 HTML_FONT_FACE_BAD 2234 0.74 1.23 0.56 117 RCVD_IN_IADB_DK 2211 3.84 1.21 4.81 118 DKIM_ADSP_CUSTOM_MED 2210 1.10 1.21 1.06 119 RCVD_IN_IADB_SENDERID 2207 3.90 1.21 4.90 120 XMBody_17 2202 0.80 1.21 0.65 121 TR_Caps_n_Bayes_99 2199 0.42 1.21 0.13 122 RELAYCOUNTRY_CN 2196 0.37 1.21 0.06 123 XM_UB60 2189 0.37 1.20 0.06 124 XMMoneyMeta_00 2173 0.83 1.19 0.69 125 REMOVE_BEFORE_LINK 2171 0.54 1.19 0.30 126 XM_Body_Obfu01 2166 0.50 1.19 0.25 127 DIET_1 2120 0.48 1.16 0.23 128 XM_DK_Undo_01 2105 1.58 1.16 1.74 129 NML_ADSP_CUSTOM_MED 2097 0.86 1.15 0.75 130 TR_LOTS_OF_MONEY3 2080 0.73 1.14 0.58 131 XMBody_78 2022 0.56 1.11 0.35 132 BAYES_00 2017 8.09 1.11 10.68 133 XM_UB99 2016 0.32 1.11 0.02 134 XMPhish14 1954 0.75 1.07 0.63 135 XMBrknScrpt_02 1936 0.64 1.06 0.48 136 DATE_IN_PAST_03_06 1930 0.36 1.06 0.10 137 DEAR_SOMETHING 1926 0.35 1.06 0.09 138 RELAYCOUNTRY_IN 1907 0.37 1.05 0.11 139 RCVD_IN_IADB_VOUCHED 1840 3.15 1.01 3.94 140 XMSexyCombo_04 1823 0.34 1.00 0.09 141 T_MONEY_PERCENT 1812 0.61 1.00 0.47 142 TR_LOTS_OF_MONEY2 1812 0.61 1.00 0.47 143 XM_H_PHPOS 1787 1.08 0.98 1.12 144 T_FILL_THIS_FORM_SHORT 1780 0.83 0.98 0.78 145 XMSlimDrugH 1754 0.45 0.96 0.26 146 XM_PDF 1753 4.05 0.96 5.20 147 XM_BadFromFormat 1748 0.36 0.96 0.14 148 MPART_ALT_DIFF_COUNT 1747 0.40 0.96 0.19 149 MSGID_FROM_MTA_HEADER 1720 0.41 0.94 0.22 150 XFER_LOTSA_MONEY 1686 0.29 0.93 0.05 151 RCVD_IN_MSPIKE_WL 1682 1.57 0.92 1.81 152 RCVD_IN_MSPIKE_H3 1668 1.57 0.92 1.81 153 FROM_ADDR_WS 1664 0.25 0.91 0.00 154 HTTPS_HTTP_MISMATCH 1653 0.61 0.91 0.49 155 XMGppyBdWords 1644 0.33 0.90 0.12 156 FROM_SUSPICIOUS_NTLD 1638 0.27 0.90 0.04 157 URIBL_DBL_SPAM 1600 0.27 0.88 0.04 158 URI_NOVOWEL 1595 0.59 0.88 0.49 159 FORGED_GMAIL_RCVD 1570 0.66 0.86 0.58 160 RELAYCOUNTRY_AT 1570 0.37 0.86 0.18 161 RDNS_DYNAMIC 1568 0.55 0.86 0.44 162 XMHTMLBadTable_001 1528 0.58 0.84 0.49 163 MONEY_FRAUD_8 1527 0.23 0.84 0.00 164 RELAYCOUNTRY_NG 1509 0.22 0.83 0.00 165 TR_XM_DK_Bayes 1486 5.94 0.82 7.84 166 URG_BIZ 1475 0.25 0.81 0.04 167 BODY_ENHANCEMENT 1472 0.23 0.81 0.01 168 XM_B_REG_HTML 1449 0.78 0.80 0.77 169 XM_RXBody 1417 0.42 0.78 0.29 170 XM_UB999 1407 0.22 0.77 0.01 171 RELAYCOUNTRY_AU 1386 0.59 0.76 0.53 172 HTML_FONT_SIZE_LARGE 1363 0.33 0.75 0.17 173 XM_H_PHPMailer 1358 0.74 0.75 0.74 174 LongTLD 1351 0.31 0.74 0.14 175 XM_B_COPY_HTML 1351 0.68 0.74 0.66 176 FROM_WSP_LEAD 1345 0.20 0.74 0.00 177 LONG_HEX_URI 1328 0.33 0.73 0.18 178 TR_XM_DK_Bayes1 1324 5.45 0.73 7.20 179 TooManyTo_002 1316 1.94 0.72 2.40 180 XM_HighProb1 1314 0.20 0.72 0.01 181 XM_UB80 1313 0.21 0.72 0.02 182 T_TooManySym_02 1308 1.38 0.72 1.63 183 XMLngstWrd_00 1296 0.58 0.71 0.53 184 BAYES_05 1271 1.43 0.70 1.71 185 RELAYCOUNTRY_DE 1256 0.47 0.69 0.39 186 T_HTML_TAG_BALANCE_CENTER 1246 0.25 0.68 0.09 187 LOW_PRICE 1233 0.53 0.68 0.48 188 RCVD_IN_IADB_OPTIN 1231 2.00 0.68 2.49 189 XMLngstWrd_01 1228 0.54 0.67 0.49 190 TR_XM_DK_Bayes2 1226 4.74 0.67 6.25 191 PLING_QUERY 1183 0.44 0.65 0.36 192 HTML_TAG_BALANCE_BODY 1169 0.51 0.64 0.46 193 TR_MetaPhish_Combo_01 1148 1.36 0.63 1.64 194 XM_S_JOY_D 1137 0.59 0.62 0.58 195 RELAYCOUNTRY_NL 1136 0.44 0.62 0.38 196 XMLngstWrd_02 1125 0.35 0.62 0.25 197 HTML_IMAGE_ONLY_24 1120 0.39 0.62 0.30 198 TM2_M_A_HREF_HREF 1117 0.52 0.61 0.49 199 XM_XX_Yahoo 1113 0.23 0.61 0.08 200 HTML_COMMENT_SAVED_URL 1043 0.18 0.57 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 406482 86.16 95.47 82.72 2 DKIM_SIGNED 349464 75.47 87.23 71.11 3 XM_DK_Pass 343973 73.96 84.64 70.00 4 DKIM_VALID 322765 69.50 79.81 65.68 5 DCC_CHECK_NEGATIVE 296181 48.27 15.86 60.27 6 BAYES_50 295903 54.89 40.51 60.21 7 XMListUnsubscribeExists 235871 55.60 76.13 48.00 8 DKIM_VALID_AU 221985 50.17 63.67 45.17 9 DCC_CHECK 184858 49.76 82.55 37.62 10 XM_H_QuotedFrom 164242 39.67 56.54 33.42 11 T_TM2_M_HEADER_IN_MSG 148391 27.61 20.63 30.20 12 HTML_FONT_LOW_CONTRAST 127682 29.76 39.97 25.98 13 DKIM_VALID_EF 124313 25.02 24.28 25.30 14 XMSubLong 104950 22.38 25.15 21.36 15 FVGT_m_MULTI_ODD 101689 22.52 27.45 20.69 16 ALL_TRUSTED 100146 15.24 1.38 20.38 17 LOC_TINY_FONT_1 97204 24.99 39.06 19.78 18 MIME_HTML_ONLY 91440 22.31 32.31 18.61 19 MultiRelay 85833 17.24 16.63 17.47 20 T_KAM_HTML_FONT_INVALID 80636 17.96 22.16 16.41 21 XM_DKIMWhitelistDomains 65594 9.74 0.02 13.35 22 XM_Multi_Part_URI 53793 12.54 16.84 10.95 23 XM_Body_Dirty_Words 53294 13.95 22.32 10.85 24 BAYES_00 52466 8.09 1.11 10.68 25 XM_DK_Undo_02 47821 18.21 41.10 9.73 26 RCVD_IN_RP_SAFE 42355 7.12 3.06 8.62 27 LotsOfNums_01 42334 8.01 6.37 8.61 28 BAYES_99 40786 15.91 36.46 8.30 29 LOTS_OF_MONEY 39942 9.14 11.86 8.13 30 T_XMDrugObfuBody_14 39336 8.50 9.84 8.00 31 TooManyTo_001 39107 7.71 7.03 7.96 32 TR_XM_DK_Bayes 38526 5.94 0.82 7.84 33 RCVD_IN_RP_CERTIFIED 38084 6.28 2.33 7.75 34 XM_Evil_Numbers_Gen 38027 10.06 16.32 7.74 35 TR_XM_DK_Bayes1 35379 5.45 0.73 7.20 36 BAYES_999 34542 13.30 30.24 7.03 37 HTML_IMAGE_RATIO_02 34290 10.12 18.60 6.98 38 MIME_QP_LONG_LINE 31791 5.50 2.90 6.47 39 FSL_BULK_SIG 31189 7.62 11.06 6.35 40 BAYES_60 30982 6.36 6.52 6.30 41 TR_XM_DK_Bayes2 30720 4.74 0.67 6.25 42 RCVD_IN_IADB_LISTED 30680 4.99 1.59 6.24 43 ANY_BOUNCE_MESSAGE 29857 4.59 0.57 6.08 44 BOUNCE_MESSAGE 29856 4.59 0.57 6.08 45 XM_H_Long_From01 28247 6.43 8.27 5.75 46 RCVD_IN_IADB_SPF 27051 4.37 1.31 5.50 47 DKIM_INVALID 26699 5.97 7.42 5.43 48 HTML_IMAGE_RATIO_04 26252 6.45 9.45 5.34 49 T_TooManySym_01 25803 4.53 2.60 5.25 50 XM_SendGrid 25709 4.90 4.01 5.23 51 XM_PDF 25542 4.05 0.96 5.20 52 RELAYCOUNTRY_META 24476 7.84 15.56 4.98 53 RCVD_IN_IADB_SENDERID 24055 3.90 1.21 4.90 54 XM_B_Phish_Phrases 23949 5.82 8.37 4.87 55 RCVD_IN_IADB_DK 23620 3.84 1.21 4.81 56 BOTNET_IPINHOSTNAME 23459 7.19 13.72 4.77 57 RCVD_IN_MSPIKE_H2 23230 4.34 3.30 4.73 58 TR_DCC_Bayes_99 21955 11.32 29.83 4.47 59 T_REMOTE_IMAGE 20970 3.89 2.86 4.27 60 TR_XM_DocInvoice 20149 5.27 8.43 4.10 61 RCVD_IN_IADB_VOUCHED 19376 3.15 1.01 3.94 62 BAYES_40 18868 3.24 1.64 3.84 63 IN_ZIMBRA_NJ_WHITELIST 18694 2.78 0.03 3.80 64 BAYES_80 18525 4.77 7.46 3.77 65 XMStrtUSub 18358 3.74 3.76 3.74 66 XMNumbers 18238 3.91 4.44 3.71 67 XMSubMetaSx_00 18002 5.04 8.74 3.66 68 FROM_EXCESS_BASE64 16429 4.73 8.49 3.34 69 HTML_IMAGE_RATIO_06 15915 3.82 5.38 3.24 70 XMSexyCombo_05 15747 5.64 12.22 3.20 71 XM_UncommonTLD01 14877 3.92 6.31 3.03 72 UNPARSEABLE_RELAY 14531 2.67 1.88 2.96 73 BAYES_20 14001 2.43 1.29 2.85 74 TO_MALFORMED 13012 2.06 0.46 2.65 75 MPART_ALT_DIFF 12930 4.27 8.71 2.63 76 HTML_MIME_NO_HTML_TAG 12883 2.54 2.30 2.62 77 TVD_RCVD_IP 12823 1.95 0.16 2.61 78 RCVD_IN_IADB_OPTIN 12220 2.00 0.68 2.49 79 MAILING_LIST_MULTI 12050 2.16 1.38 2.45 80 TooManyTo_002 11777 1.94 0.72 2.40 81 HTML_IMAGE_RATIO_08 11628 2.72 3.68 2.37 82 BAYES_95 11489 2.87 4.31 2.34 83 TR_Symld_Words 10206 1.86 1.29 2.08 84 MIME_HTML_MOSTLY 9801 2.66 4.46 1.99 85 XM_CamelCaseFrm001 9203 2.33 3.57 1.87 86 HELO_NODOT 9184 1.50 0.49 1.87 87 XM_DIRTYINTL 9133 2.69 4.93 1.86 88 TM2_M_URI_OPT_OUT 9053 2.65 4.83 1.84 89 RCVD_IN_MSPIKE_WL 8914 1.57 0.92 1.81 90 XM_SPF_SoftFail 8910 2.27 3.49 1.81 91 RCVD_IN_MSPIKE_H3 8909 1.57 0.92 1.81 92 XM_OfRef6 8612 1.87 2.18 1.75 93 SUBJ_ALL_CAPS 8566 2.34 3.95 1.74 94 T_XMDrugObfuBody_08 8543 1.85 2.16 1.74 95 XM_DK_Undo_01 8534 1.58 1.16 1.74 96 BAYES_05 8393 1.43 0.70 1.71 97 IN_HORDE_ADDRESS_BOOK 8167 1.23 0.05 1.66 98 TR_MetaPhish_Combo_01 8040 1.36 0.63 1.64 99 BOTNET 8019 4.48 12.17 1.63 100 T_TooManySym_02 7987 1.38 0.72 1.63 101 USER_IN_DEF_DKIM_WL 7906 1.20 0.08 1.61 102 TooManyTo_003 7873 1.32 0.56 1.60 103 MIME_HTML_ONLY_MULTI 7293 2.25 4.31 1.48 104 INVALID_MSGID 7086 1.12 0.27 1.44 105 XMDiploma_00 6987 1.77 2.72 1.42 106 URI_HEX 6893 1.85 3.04 1.40 107 XMCapTrack 6802 1.09 0.29 1.38 108 RELAYCOUNTRY_CA 6625 1.93 3.50 1.35 109 US_DOLLARS_3 6270 1.40 1.74 1.28 110 XMPhish11 6177 1.29 1.39 1.26 111 UNTRUSTED_Relay 5896 3.25 8.80 1.20 112 TooManyTo_004 5874 0.98 0.39 1.20 113 XMStockSpam_06 5852 1.24 1.38 1.19 114 URI_TRY_3LD 5769 1.27 1.53 1.17 115 XM_GoogleGroups 5635 0.97 0.49 1.15 116 XM_H_PHPOS 5520 1.08 0.98 1.12 117 XMGappySubj_01 5364 0.93 0.48 1.09 118 XM_H_Long_From02 5281 1.29 1.88 1.07 119 DKIM_ADSP_CUSTOM_MED 5226 1.10 1.21 1.06 120 TM2_M_VERY_LONG_WORD 4809 1.28 2.09 0.98 121 RELAYCOUNTRY_GB 4722 1.19 1.82 0.96 122 TooManyTo_005 4689 0.78 0.33 0.95 123 XMGenDplmaNmb 4312 1.16 1.91 0.88 124 T_OBFU_PDF_ATTACH 4269 0.69 0.19 0.87 125 XMBdyGiftCard01 4204 1.04 1.53 0.86 126 XM_ProductURIs 4058 0.94 1.26 0.83 127 XMNoVowels 4046 0.73 0.47 0.82 128 T_FILL_THIS_FORM_SHORT 3841 0.83 0.98 0.78 129 XM_B_REG_HTML 3775 0.78 0.80 0.77 130 NML_ADSP_CUSTOM_MED 3683 0.86 1.15 0.75 131 XM_H_PHPMailer 3620 0.74 0.75 0.74 132 SpammyFromTLD_01 3557 0.92 1.44 0.72 133 XM_UB50 3452 1.76 4.62 0.70 134 XMMoneyMeta_00 3405 0.83 1.19 0.69 135 XMGappySubj_02 3269 0.51 0.10 0.67 136 XM_B_COPY_HTML 3246 0.68 0.74 0.66 137 T_XMDrugObfuBody_00 3233 0.94 1.69 0.66 138 T_Symld_Words_02 3229 0.90 1.54 0.66 139 FILL_THIS_FORM 3186 0.53 0.22 0.65 140 XMBody_17 3184 0.80 1.21 0.65 141 XMPhish14 3113 0.75 1.07 0.63 142 DKIM_ADSP_NXDOMAIN 3053 0.60 0.55 0.62 143 FROM_GOV_SPOOF 3022 0.50 0.19 0.61 144 XMSubMetaI_00 2884 0.99 2.09 0.59 145 XM_S_JOY_D 2864 0.59 0.62 0.58 146 TR_LOTS_OF_MONEY3 2851 0.73 1.14 0.58 147 FORGED_GMAIL_RCVD 2848 0.66 0.86 0.58 148 USER_IN_WHITELIST 2817 0.42 0.00 0.57 149 T_FILL_THIS_FORM_LONG 2788 0.45 0.13 0.57 150 XMSubMetaSxObfu_03 2753 0.87 1.70 0.56 151 T_XMHurry_00 2737 0.98 2.13 0.56 152 HTML_FONT_FACE_BAD 2728 0.74 1.23 0.56 153 T_TooManySym_03 2704 0.43 0.10 0.55 154 XMBody_95 2644 0.41 0.08 0.54 155 RELAYCOUNTRY_AU 2612 0.59 0.76 0.53 156 T_FILL_THIS_FORM_LOAN 2583 0.41 0.09 0.53 157 XMLngstWrd_00 2580 0.58 0.71 0.53 158 T_FROM_GOV_DKIM_AU 2463 0.41 0.15 0.50 159 HTTPS_HTTP_MISMATCH 2425 0.61 0.91 0.49 160 XMLngstWrd_01 2423 0.54 0.67 0.49 161 URI_NOVOWEL 2403 0.59 0.88 0.49 162 XMHTMLBadTable_001 2397 0.58 0.84 0.49 163 TM2_M_A_HREF_HREF 2391 0.52 0.61 0.49 164 TR_XM_RelayPhish 2384 0.76 1.52 0.49 165 MISSING_HEADERS 2350 0.45 0.38 0.48 166 LOW_PRICE 2349 0.53 0.68 0.48 167 XMBrknScrpt_02 2348 0.64 1.06 0.48 168 T_MONEY_PERCENT 2308 0.61 1.00 0.47 169 TR_LOTS_OF_MONEY2 2308 0.61 1.00 0.47 170 AC_DIV_BONANZA 2295 0.38 0.14 0.47 171 SHORT_HELO_AND_INLINE_IMAGE 2266 0.36 0.08 0.46 172 HTML_TAG_BALANCE_BODY 2260 0.51 0.64 0.46 173 RDNS_DYNAMIC 2151 0.55 0.86 0.44 174 XM_Combo_Sbj 2031 0.44 0.50 0.41 175 XMSubMetaSxObfu_02 2031 0.41 0.38 0.41 176 XM_H_PHPOS_M 1964 0.41 0.45 0.40 177 XM_ShortIntro_01 1964 0.38 0.31 0.40 178 HTML_IMAGE_ONLY_32 1955 0.37 0.29 0.40 179 TM2_M_BODY_EMPTY 1936 0.33 0.15 0.39 180 RELAYCOUNTRY_DE 1897 0.47 0.69 0.39 181 XMSexyCombo_01 1876 0.81 1.95 0.38 182 RCVD_IN_BL_SPAMCOP_NET 1874 0.80 1.91 0.38 183 RCVD_IN_SORBS_DUL 1858 0.33 0.21 0.38 184 RELAYCOUNTRY_NL 1847 0.44 0.62 0.38 185 XMDateMe_00 1818 0.38 0.39 0.37 186 XMHTML_After_End 1817 0.64 1.38 0.37 187 HTML_IMAGE_ONLY_28 1809 0.42 0.56 0.37 188 PLING_QUERY 1770 0.44 0.65 0.36 189 XMBody_78 1735 0.56 1.11 0.35 190 XMPhish30 1726 0.63 1.40 0.35 191 XM_B_TRADE_HTML 1694 0.38 0.48 0.34 192 XMLKML 1667 0.25 0.00 0.34 193 XMSubNoVowel 1556 0.34 0.40 0.32 194 TRACKER_ID 1545 0.32 0.33 0.31 195 XM_URI_RBL 1514 0.79 2.09 0.31 196 SpammyFromTLD_02 1499 0.92 2.56 0.31 197 HTML_IMAGE_ONLY_24 1498 0.39 0.62 0.30 198 HTML_IMAGE_ONLY_16 1495 0.37 0.54 0.30 199 NO_DNS_FOR_FROM 1483 0.33 0.40 0.30 200 REMOVE_BEFORE_LINK 1471 0.54 1.19 0.30 ----------------------------------------------------------------------