Email: 625865 Autolearn: 0 AvgScore: 0.91 AvgScanTime: 2.09 sec Spam: 95055 Autolearn: 0 AvgScore: 12.01 AvgScanTime: 2.93 sec Ham: 530810 Autolearn: 0 AvgScore: -1.08 AvgScanTime: 1.93 sec Time Spent Running SA: 362.53 hours Time Spent Processing Spam: 77.49 hours Time Spent Processing Ham: 285.04 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 89336 84.83 93.98 83.19 2 DCC_CHECK 76260 47.00 80.23 41.05 3 DKIM_SIGNED 72026 73.97 75.77 73.65 4 XM_DK_Pass 69105 72.63 72.70 72.62 5 XM_B_Unicode 67267 66.84 70.77 66.14 6 XMListUnsubscribeExists 65229 52.75 68.62 49.90 7 DKIM_VALID 64307 68.78 67.65 68.98 8 DKIM_VALID_AU 49396 51.34 51.97 51.23 9 BAYES_50 47361 50.52 49.82 50.64 10 XM_B_Unicode3 44835 39.42 47.17 38.03 11 MIME_HTML_ONLY 34349 22.05 36.14 19.52 12 HTML_FONT_LOW_CONTRAST 33397 28.68 35.13 27.52 13 LOC_TINY_FONT_1 32295 24.85 33.98 23.22 14 XM_DK_Undo_02 29163 8.64 30.68 4.69 15 XMSubLong 26901 22.35 28.30 21.28 16 RELAYCOUNTRY_META 25297 9.01 26.61 5.85 17 DKIM_VALID_EF 22539 25.95 23.71 26.35 18 FVGT_m_MULTI_ODD 22079 21.64 23.23 21.35 19 XM_Body_Dirty_Words 21191 14.22 22.29 12.77 20 BAYES_99 19600 5.08 20.62 2.30 21 BOTNET 18082 4.60 19.02 2.01 22 MultiRelay 17818 18.77 18.74 18.77 23 T_TM2_M_HEADER_IN_MSG 17573 27.63 18.49 29.27 24 BOTNET_IPINHOSTNAME 17398 6.71 18.30 4.64 25 T_KAM_HTML_FONT_INVALID 17285 17.20 18.18 17.02 26 DCC_CHECK_NEGATIVE 17174 51.14 18.07 57.06 27 XM_Multi_Part_URI 16123 12.12 16.96 11.25 28 XM_UncommonTLD01 15976 5.22 16.81 3.15 29 FSL_BULK_SIG 15604 8.03 16.42 6.53 30 TR_DCC_Bayes_99 15491 3.36 16.30 1.05 31 BAYES_999 15122 3.96 15.91 1.82 32 UNTRUSTED_Relay 15058 3.82 15.84 1.67 33 XM_Evil_Numbers_Gen 13533 10.21 14.24 9.49 34 HTML_IMAGE_RATIO_02 11819 8.75 12.43 8.09 35 SpammyFromTLD_02 10760 1.96 11.32 0.29 36 XMSexyCombo_05 10654 4.92 11.21 3.80 37 LOTS_OF_MONEY 10584 8.05 11.13 7.50 38 TooManyTo_001 9474 8.51 9.97 8.25 39 XMNumbers 8931 4.51 9.40 3.63 40 T_XMDrugObfuBody_14 8581 8.06 9.03 7.88 41 XM_UB50 8292 2.08 8.72 0.90 42 XMSubMetaSx_00 8016 4.47 8.43 3.76 43 MPART_ALT_DIFF 7981 4.15 8.40 3.39 44 DKIM_INVALID 7719 5.20 8.12 4.67 45 LotsOfNums_01 7552 7.68 7.94 7.63 46 XM_H_Long_From01 7487 6.40 7.88 6.14 47 T_REMOTE_IMAGE 7256 4.53 7.63 3.97 48 XM_B_Phish_Phrases 6860 6.17 7.22 5.99 49 KHOP_HELO_FCRDNS 6795 2.81 7.15 2.04 50 XM_DIRTYINTL 6778 3.33 7.13 2.65 51 XM_B_SpammyTLD 6630 3.90 6.97 3.35 52 HTML_IMAGE_RATIO_04 6434 5.67 6.77 5.47 53 HTML_MIME_NO_HTML_TAG 6099 2.89 6.42 2.26 54 RCVD_IN_MSPIKE_H2 5966 7.86 6.28 8.14 55 HTML_SHORT_LINK_IMG_1 5806 0.96 6.11 0.04 56 XM_SPF_SoftFail 5369 2.56 5.65 2.01 57 BAYES_80 5279 2.56 5.55 2.03 58 BAYES_40 5030 6.48 5.29 6.69 59 MIME_HTML_MOSTLY 4793 2.75 5.04 2.34 60 BAYES_20 4592 5.55 4.83 5.68 61 RELAYCOUNTRY_GB 4584 1.89 4.82 1.36 62 HDRS_LCASE_IMGONLY 4490 0.77 4.72 0.06 63 RELAYCOUNTRY_FR 4448 1.16 4.68 0.53 64 XMStrtUSub 4403 4.18 4.63 4.10 65 MIME_HTML_ONLY_MULTI 4402 2.22 4.63 1.78 66 HTML_IMAGE_RATIO_08 4263 2.37 4.48 1.99 67 FROM_SUSPICIOUS_NTLD 4226 0.72 4.45 0.05 68 RELAYCOUNTRY_CA 4136 2.02 4.35 1.60 69 MIME_QP_LONG_LINE 4124 5.11 4.34 5.25 70 FROM_SUSPICIOUS_NTLD_FP 4099 0.69 4.31 0.04 71 BAYES_00 4086 20.62 4.30 23.54 72 FROM_EXCESS_BASE64 3950 3.43 4.16 3.30 73 BAYES_60 3882 3.94 4.08 3.92 74 MultiRelay_Combo 3872 0.81 4.07 0.22 75 MultiRelay_CC 3872 0.81 4.07 0.22 76 XM_URI_RBL 3837 0.90 4.04 0.34 77 T_TooManySym_01 3781 5.46 3.98 5.73 78 TM2_M_URI_OPT_OUT 3618 6.31 3.81 6.76 79 XM_SendGrid 3610 6.13 3.80 6.55 80 REPLYTO_WITHOUT_TO_CC 3549 0.79 3.73 0.27 81 HTML_IMAGE_ONLY_12 3541 0.75 3.73 0.22 82 HTML_IMAGE_RATIO_06 3489 3.39 3.67 3.33 83 RCVD_IN_RP_RNBL 3472 0.59 3.65 0.05 84 SpammyFromTLD_01 3297 1.16 3.47 0.74 85 URI_HEX 3186 2.23 3.35 2.03 86 NO_DNS_FOR_FROM 3125 1.43 3.29 1.10 87 BODY_URI_ONLY 3087 0.58 3.25 0.11 88 RCVD_IN_BL_SPAMCOP_NET 3069 1.13 3.23 0.76 89 MIME_HEADER_CTYPE_ONLY 3019 0.57 3.18 0.11 90 XM_BadFromFormat 2925 0.57 3.08 0.12 91 TO_EQ_FM_DOM_HTML_IMG 2888 0.48 3.04 0.02 92 XMSexyCombo_01 2860 0.93 3.01 0.56 93 XM_CamelCaseFrm001 2856 2.10 3.00 1.93 94 XM_OfRef6 2792 1.68 2.94 1.45 95 DATE_IN_PAST_03_06 2791 0.52 2.94 0.09 96 XMDiploma_00 2769 1.76 2.91 1.56 97 HTML_IMAGE_ONLY_08 2708 0.53 2.85 0.11 98 TR_XM_PHPDW 2652 1.02 2.79 0.70 99 TR_XM_PHPForged 2635 1.00 2.77 0.69 100 XM_H_TOP 2634 0.43 2.77 0.01 101 TR_XM_FormFill2 2619 1.00 2.76 0.68 102 XM_H_PHPOS 2608 0.99 2.74 0.68 103 T_XMDrugObfuBody_08 2555 1.51 2.69 1.30 104 BAYES_05 2507 3.66 2.64 3.84 105 BAYES_95 2446 1.30 2.57 1.07 106 DATE_IN_PAST_12_24 2364 0.41 2.49 0.04 107 XMBdyGiftCard01 2353 1.37 2.48 1.17 108 DKIM_ADSP_NXDOMAIN 2326 0.73 2.45 0.42 109 SUBJ_ALL_CAPS 2304 1.67 2.42 1.54 110 RDNS_DYNAMIC 2245 0.66 2.36 0.35 111 XMSubMetaI_00 2201 1.14 2.32 0.92 112 XMPhish11 2181 1.30 2.29 1.13 113 TR_Mismatch_TLD_02 2151 0.42 2.26 0.08 114 ALL_TRUSTED 2115 15.86 2.23 18.31 115 FROM_MISSP_REPLYTO 2111 0.34 2.22 0.01 116 XMMoneyMeta_00 2110 0.77 2.22 0.51 117 RCVD_IN_PSBL 2058 0.34 2.17 0.01 118 URI_NO_WWW_INFO_CGI 2012 0.33 2.12 0.01 119 TM2_M_VERY_LONG_WORD 1960 1.51 2.06 1.41 120 XMGenDplmaNmb 1955 1.15 2.06 0.99 121 TR_XM_INV_DKIM 1883 0.38 1.98 0.09 122 XMBrknScrpt_02 1858 0.99 1.95 0.81 123 RCVD_IN_IADB_LISTED 1844 4.42 1.94 4.87 124 TR_XM_DK_SendGrid 1842 3.20 1.94 3.43 125 RCVD_IN_IADB_SPF 1800 3.84 1.89 4.19 126 TR_XM_RelayPhish 1789 1.13 1.88 0.99 127 T_HTML_TAG_BALANCE_CENTER 1786 0.46 1.88 0.20 128 TR_XM_DK_Bayes 1768 14.92 1.86 17.26 129 RCVD_IN_IADB_SENDERID 1758 3.37 1.85 3.65 130 RCVD_IN_IADB_DK 1752 3.34 1.84 3.61 131 BOTNET_NORDNS 1691 0.31 1.78 0.04 132 XM_H_PHPMailer 1677 0.78 1.76 0.61 133 DATE_IN_PAST_06_12 1652 0.31 1.74 0.06 134 LOW_PRICE 1631 0.45 1.72 0.22 135 T_XMDrugObfuBody_00 1617 0.89 1.70 0.75 136 TR_LOTS_OF_MONEY2 1598 0.57 1.68 0.38 137 T_MONEY_PERCENT 1598 0.57 1.68 0.38 138 XMBody_17 1582 1.00 1.66 0.88 139 TR_XM_DK_Bayes1 1552 14.19 1.63 16.44 140 TR_Symld_Words 1492 1.40 1.57 1.37 141 RELAYCOUNTRY_MD 1484 0.24 1.56 0.00 142 HTML_EXTRA_CLOSE 1472 0.25 1.55 0.01 143 XM_H_PHPOS_M 1465 0.46 1.54 0.27 144 RCVD_IN_RP_SAFE 1437 8.22 1.51 9.42 145 T_Symld_Words_02 1351 0.77 1.42 0.66 146 XM_H_Long_From02 1341 1.09 1.41 1.04 147 XMStockSpam_06 1331 0.90 1.40 0.81 148 MAILING_LIST_MULTI 1293 2.27 1.36 2.43 149 RCVD_IN_MSPIKE_WL 1278 4.48 1.34 5.04 150 TR_LOTS_OF_MONEY3 1267 0.55 1.33 0.41 151 DIET_1 1261 0.52 1.33 0.37 152 DKIM_ADSP_CUSTOM_MED 1257 1.13 1.32 1.10 153 RELAYCOUNTRY_AT 1238 0.42 1.30 0.26 154 FROM_MISSP_DYNIP 1222 0.20 1.29 0.00 155 XMPhish30 1210 0.60 1.27 0.48 156 XMSubMetaSxObfu_03 1191 0.68 1.25 0.58 157 URIBL_SBL_A 1162 0.55 1.22 0.43 158 TooManyTo_002 1159 2.10 1.22 2.25 159 XM_UB99 1149 0.19 1.21 0.01 160 XM_UB60 1139 0.23 1.20 0.06 161 NML_ADSP_CUSTOM_MED 1111 0.82 1.17 0.76 162 FILL_THIS_FORM_LONG 1110 0.59 1.17 0.49 163 HTML_IMAGE_ONLY_32 1097 0.57 1.15 0.46 164 T_XMHurry_00 1086 0.79 1.14 0.73 165 XM_DK_Undo_01 1084 1.53 1.14 1.60 166 FILL_THIS_FORM 1072 0.69 1.13 0.61 167 FORGED_GMAIL_RCVD 1071 0.68 1.13 0.60 168 THIS_AD 1066 0.59 1.12 0.50 169 RCVD_IN_MSPIKE_H3 1059 3.91 1.11 4.42 170 NORDNS_LOW_CONTRAST 1058 0.17 1.11 0.01 171 FSL_THIS_IS_ADV 1044 0.50 1.10 0.40 172 HELO_NODOT 999 1.62 1.05 1.72 173 HELO_NO_DOMAIN 989 1.62 1.04 1.72 174 TR_XM_DK_Bayes2 989 12.07 1.04 14.05 175 UNPARSEABLE_RELAY 988 2.05 1.04 2.23 176 XMBody_78 987 0.71 1.04 0.65 177 T_TooManySym_02 976 2.01 1.03 2.19 178 TooManyTo_003 972 1.47 1.02 1.55 179 RELAYCOUNTRY_VN 960 0.16 1.01 0.01 180 XMHTML_After_End 946 0.56 1.00 0.48 181 URI_TRY_3LD 940 1.14 0.99 1.17 182 URIBL_BLACK 927 0.17 0.98 0.03 183 XM_XX_Yahoo 924 0.29 0.97 0.17 184 XM_PDF 860 4.05 0.90 4.61 185 XMPhish14 855 0.59 0.90 0.54 186 XM_UB80 854 0.15 0.90 0.02 187 HK_RANDOM_REPLYTO 854 0.27 0.90 0.16 188 XM_UB999 835 0.14 0.88 0.00 189 XMSexyCombo_04 829 0.27 0.87 0.16 190 RCVD_IN_MSPIKE_BL 828 0.15 0.87 0.02 191 RELAYCOUNTRY_IN 824 0.23 0.87 0.12 192 XM_Body_Obfu01 823 0.57 0.87 0.51 193 RELAYCOUNTRY_DE 820 0.44 0.86 0.37 194 SHORT_URI 819 0.19 0.86 0.07 195 T_FILL_THIS_FORM_SHORT 816 0.76 0.86 0.74 196 PLING_QUERY 813 0.56 0.86 0.50 197 XMSolicitRefs_0 809 0.36 0.85 0.27 198 HDRS_MISSP 805 0.14 0.85 0.01 199 TooManyTo_004 799 1.14 0.84 1.19 200 HTML_FONT_FACE_BAD 793 0.61 0.83 0.56 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 441556 84.83 93.98 83.19 2 DKIM_SIGNED 390949 73.97 75.77 73.65 3 XM_DK_Pass 385454 72.63 72.70 72.62 4 DKIM_VALID 366144 68.78 67.65 68.98 5 XM_B_Unicode 351079 66.84 70.77 66.14 6 DCC_CHECK_NEGATIVE 302881 51.14 18.07 57.06 7 DKIM_VALID_AU 271936 51.34 51.97 51.23 8 BAYES_50 268802 50.52 49.82 50.64 9 XMListUnsubscribeExists 264888 52.75 68.62 49.90 10 DCC_CHECK 217908 47.00 80.23 41.05 11 XM_B_Unicode3 201867 39.42 47.17 38.03 12 T_TM2_M_HEADER_IN_MSG 155382 27.63 18.49 29.27 13 HTML_FONT_LOW_CONTRAST 146086 28.68 35.13 27.52 14 DKIM_VALID_EF 139843 25.95 23.71 26.35 15 BAYES_00 124937 20.62 4.30 23.54 16 LOC_TINY_FONT_1 123243 24.85 33.98 23.22 17 FVGT_m_MULTI_ODD 113353 21.64 23.23 21.35 18 XMSubLong 112970 22.35 28.30 21.28 19 MIME_HTML_ONLY 103634 22.05 36.14 19.52 20 MultiRelay 99645 18.77 18.74 18.77 21 ALL_TRUSTED 97173 15.86 2.23 18.31 22 TR_XM_DK_Bayes 91638 14.92 1.86 17.26 23 T_KAM_HTML_FONT_INVALID 90356 17.20 18.18 17.02 24 TR_XM_DK_Bayes1 87280 14.19 1.63 16.44 25 TR_XM_DK_Bayes2 74568 12.07 1.04 14.05 26 XM_Body_Dirty_Words 67809 14.22 22.29 12.77 27 XM_Multi_Part_URI 59722 12.12 16.96 11.25 28 XM_Evil_Numbers_Gen 50376 10.21 14.24 9.49 29 RCVD_IN_RP_SAFE 50021 8.22 1.51 9.42 30 TooManyTo_001 43816 8.51 9.97 8.25 31 RCVD_IN_MSPIKE_H2 43219 7.86 6.28 8.14 32 HTML_IMAGE_RATIO_02 42943 8.75 12.43 8.09 33 RCVD_IN_RP_CERTIFIED 42500 6.89 0.65 8.01 34 T_XMDrugObfuBody_14 41840 8.06 9.03 7.88 35 LotsOfNums_01 40496 7.68 7.94 7.63 36 LOTS_OF_MONEY 39791 8.05 11.13 7.50 37 XM_DKIMWhitelistDomains 36933 5.91 0.03 6.96 38 TM2_M_URI_OPT_OUT 35875 6.31 3.81 6.76 39 BAYES_40 35518 6.48 5.29 6.69 40 XM_SendGrid 34745 6.13 3.80 6.55 41 FSL_BULK_SIG 34678 8.03 16.42 6.53 42 BOUNCE_MESSAGE 34423 5.58 0.54 6.48 43 ANY_BOUNCE_MESSAGE 34423 5.58 0.54 6.48 44 XM_H_Long_From01 32586 6.40 7.88 6.14 45 XM_B_Phish_Phrases 31773 6.17 7.22 5.99 46 RELAYCOUNTRY_META 31073 9.01 26.61 5.85 47 T_TooManySym_01 30422 5.46 3.98 5.73 48 BAYES_20 30132 5.55 4.83 5.68 49 HTML_IMAGE_RATIO_04 29029 5.67 6.77 5.47 50 MIME_QP_LONG_LINE 27854 5.11 4.34 5.25 51 RCVD_IN_MSPIKE_WL 26735 4.48 1.34 5.04 52 RCVD_IN_IADB_LISTED 25828 4.42 1.94 4.87 53 XM_DK_Undo_02 24890 8.64 30.68 4.69 54 DKIM_INVALID 24805 5.20 8.12 4.67 55 BOTNET_IPINHOSTNAME 24621 6.71 18.30 4.64 56 XM_PDF 24462 4.05 0.90 4.61 57 RCVD_IN_MSPIKE_H3 23442 3.91 1.11 4.42 58 RCVD_IN_IADB_SPF 22258 3.84 1.89 4.19 59 XMStrtUSub 21770 4.18 4.63 4.10 60 T_REMOTE_IMAGE 21084 4.53 7.63 3.97 61 BAYES_60 20787 3.94 4.08 3.92 62 BAYES_05 20391 3.66 2.64 3.84 63 XMSexyCombo_05 20152 4.92 11.21 3.80 64 XMSubMetaSx_00 19961 4.47 8.43 3.76 65 RCVD_IN_IADB_SENDERID 19352 3.37 1.85 3.65 66 XMNumbers 19265 4.51 9.40 3.63 67 RCVD_IN_IADB_DK 19145 3.34 1.84 3.61 68 IN_ZIMBRA_NJ_WHITELIST 18303 2.93 0.03 3.45 69 TR_XM_DK_SendGrid 18183 3.20 1.94 3.43 70 MPART_ALT_DIFF 17986 4.15 8.40 3.39 71 XM_B_SpammyTLD 17758 3.90 6.97 3.35 72 HTML_IMAGE_RATIO_06 17699 3.39 3.67 3.33 73 FROM_EXCESS_BASE64 17508 3.43 4.16 3.30 74 RCVD_IN_IADB_VOUCHED 17197 2.86 0.71 3.24 75 XM_UncommonTLD01 16696 5.22 16.81 3.15 76 XM_DIRTYINTL 14080 3.33 7.13 2.65 77 TO_MALFORMED 13910 2.23 0.03 2.62 78 URI_OPTOUT_3LD 13063 2.11 0.12 2.46 79 MAILING_LIST_MULTI 12894 2.27 1.36 2.43 80 MIME_HTML_MOSTLY 12423 2.75 5.04 2.34 81 BAYES_99 12194 5.08 20.62 2.30 82 HTML_MIME_NO_HTML_TAG 12019 2.89 6.42 2.26 83 TooManyTo_002 11954 2.10 1.22 2.25 84 UNPARSEABLE_RELAY 11851 2.05 1.04 2.23 85 T_TooManySym_02 11622 2.01 1.03 2.19 86 KHOP_HELO_FCRDNS 10816 2.81 7.15 2.04 87 URI_HEX 10793 2.23 3.35 2.03 88 BAYES_80 10772 2.56 5.55 2.03 89 RCVD_IN_IADB_OPTIN 10726 1.81 0.65 2.02 90 BOTNET 10693 4.60 19.02 2.01 91 XM_SPF_SoftFail 10660 2.56 5.65 2.01 92 HTML_IMAGE_RATIO_08 10544 2.37 4.48 1.99 93 TVD_RCVD_IP 10496 1.78 0.65 1.98 94 XM_CamelCaseFrm001 10260 2.10 3.00 1.93 95 BAYES_999 9687 3.96 15.91 1.82 96 MIME_HTML_ONLY_MULTI 9465 2.22 4.63 1.78 97 HELO_NODOT 9125 1.62 1.05 1.72 98 HELO_NO_DOMAIN 9121 1.62 1.04 1.72 99 UNTRUSTED_Relay 8875 3.82 15.84 1.67 100 CK_HELO_DYNAMIC_SPLIT_IP 8526 1.45 0.55 1.61 101 XM_DK_Undo_01 8507 1.53 1.14 1.60 102 RELAYCOUNTRY_CA 8484 2.02 4.35 1.60 103 HELO_DYNAMIC_IPADDR2 8480 1.37 0.11 1.60 104 XMDiploma_00 8262 1.76 2.91 1.56 105 TooManyTo_003 8240 1.47 1.02 1.55 106 SUBJ_ALL_CAPS 8177 1.67 2.42 1.54 107 IN_HORDE_ADDRESS_BOOK 7923 1.27 0.06 1.49 108 TR_MetaPhish_Combo_01 7718 1.31 0.50 1.45 109 XM_OfRef6 7694 1.68 2.94 1.45 110 XMCapTrack 7677 1.28 0.36 1.45 111 INVALID_MSGID 7550 1.23 0.15 1.42 112 TM2_M_VERY_LONG_WORD 7499 1.51 2.06 1.41 113 TR_Symld_Words 7268 1.40 1.57 1.37 114 RELAYCOUNTRY_GB 7228 1.89 4.82 1.36 115 T_XMDrugObfuBody_08 6900 1.51 2.69 1.30 116 USER_IN_DEF_DKIM_WL 6355 1.02 0.03 1.20 117 TooManyTo_004 6340 1.14 0.84 1.19 118 XMBdyGiftCard01 6229 1.37 2.48 1.17 119 URI_TRY_3LD 6189 1.14 0.99 1.17 120 XMPhish11 5973 1.30 2.29 1.13 121 DKIM_ADSP_CUSTOM_MED 5839 1.13 1.32 1.10 122 NO_DNS_FOR_FROM 5831 1.43 3.29 1.10 123 BAYES_95 5670 1.30 2.57 1.07 124 XM_GoogleGroups 5569 0.97 0.55 1.05 125 TR_DCC_Bayes_99 5559 3.36 16.30 1.05 126 XM_H_Long_From02 5508 1.09 1.41 1.04 127 TooManyTo_005 5342 0.96 0.69 1.01 128 XMGenDplmaNmb 5272 1.15 2.06 0.99 129 TR_XM_RelayPhish 5252 1.13 1.88 0.99 130 XMGappySubj_01 5006 0.83 0.21 0.94 131 XMSubMetaI_00 4909 1.14 2.32 0.92 132 XM_ProductURIs 4845 0.88 0.71 0.91 133 XM_UB50 4752 2.08 8.72 0.90 134 XMBody_17 4696 1.00 1.66 0.88 135 XMBrknScrpt_02 4312 0.99 1.95 0.81 136 XMStockSpam_06 4308 0.90 1.40 0.81 137 NML_ADSP_CUSTOM_MED 4010 0.82 1.17 0.76 138 RCVD_IN_BL_SPAMCOP_NET 4008 1.13 3.23 0.76 139 T_XMDrugObfuBody_00 3978 0.89 1.70 0.75 140 T_FILL_THIS_FORM_SHORT 3952 0.76 0.86 0.74 141 SpammyFromTLD_01 3941 1.16 3.47 0.74 142 XMBody_95 3912 0.64 0.09 0.74 143 T_XMHurry_00 3882 0.79 1.14 0.73 144 MISSING_HEADERS 3736 0.70 0.69 0.70 145 TR_XM_PHPDW 3718 1.02 2.79 0.70 146 TR_XM_PHPForged 3643 1.00 2.77 0.69 147 TR_XM_FormFill2 3624 1.00 2.76 0.68 148 XM_H_PHPOS 3600 0.99 2.74 0.68 149 T_Symld_Words_02 3486 0.77 1.42 0.66 150 XMNoVowels 3448 0.61 0.40 0.65 151 XMBody_78 3427 0.71 1.04 0.65 152 T_OBFU_PDF_ATTACH 3404 0.58 0.21 0.64 153 FILL_THIS_FORM 3261 0.69 1.13 0.61 154 HTTPS_HTTP_MISMATCH 3255 0.62 0.65 0.61 155 XM_H_PHPMailer 3229 0.78 1.76 0.61 156 HTML_TAG_BALANCE_BODY 3200 0.62 0.70 0.60 157 FORGED_GMAIL_RCVD 3195 0.68 1.13 0.60 158 XM_ShortIntro_01 3100 0.57 0.47 0.58 159 XMSubMetaSxObfu_03 3056 0.68 1.25 0.58 160 XM_B_REG_HTML 2999 0.54 0.41 0.56 161 HTML_FONT_FACE_BAD 2994 0.61 0.83 0.56 162 XMSexyCombo_01 2980 0.93 3.01 0.56 163 TVD_SPACE_RATIO 2894 0.48 0.14 0.55 164 XMPhish14 2845 0.59 0.90 0.54 165 RELAYCOUNTRY_FR 2830 1.16 4.68 0.53 166 TM2_M_BODY_EMPTY 2779 0.46 0.11 0.52 167 URI_NOVOWEL 2746 0.51 0.49 0.52 168 XM_Body_Obfu01 2714 0.57 0.87 0.51 169 AC_DIV_BONANZA 2713 0.46 0.16 0.51 170 USER_IN_WHITELIST 2696 0.43 0.00 0.51 171 XMMoneyMeta_00 2687 0.77 2.22 0.51 172 PLING_QUERY 2675 0.56 0.86 0.50 173 T_TooManySym_03 2664 0.46 0.23 0.50 174 THIS_AD 2629 0.59 1.12 0.50 175 FILL_THIS_FORM_LONG 2606 0.59 1.17 0.49 176 XMPhish30 2563 0.60 1.27 0.48 177 XMHTML_After_End 2562 0.56 1.00 0.48 178 XMHTMLBadTable_001 2524 0.52 0.77 0.48 179 XMOemUri 2511 0.43 0.17 0.47 180 HTML_IMAGE_ONLY_32 2466 0.57 1.15 0.46 181 RELAYCOUNTRY_AU 2447 0.45 0.37 0.46 182 SHORT_HELO_AND_INLINE_IMAGE 2442 0.40 0.07 0.46 183 RCVD_IN_SORBS_DUL 2369 0.44 0.41 0.45 184 FILL_THIS_FORM_LOAN 2342 0.41 0.26 0.44 185 XMLngstWrd_00 2274 0.43 0.45 0.43 186 URIBL_SBL_A 2271 0.55 1.22 0.43 187 DKIM_ADSP_NXDOMAIN 2245 0.73 2.45 0.42 188 TR_LOTS_OF_MONEY3 2161 0.55 1.33 0.41 189 HTML_IMAGE_ONLY_24 2126 0.38 0.29 0.40 190 XMLngstWrd_01 2117 0.40 0.42 0.40 191 FSL_THIS_IS_ADV 2101 0.50 1.10 0.40 192 FROM_GOV_DKIM_AU 2083 0.35 0.13 0.39 193 HTML_IMAGE_ONLY_28 2077 0.42 0.57 0.39 194 XMDateMe_00 2019 0.37 0.34 0.38 195 TR_LOTS_OF_MONEY2 1991 0.57 1.68 0.38 196 T_MONEY_PERCENT 1991 0.57 1.68 0.38 197 DIET_1 1963 0.52 1.33 0.37 198 RELAYCOUNTRY_DE 1961 0.44 0.86 0.37 199 XMSubMetaSxObfu_02 1955 0.37 0.36 0.37 200 REMOVE_BEFORE_LINK 1953 0.38 0.47 0.37 ----------------------------------------------------------------------