Email: 588139 Autolearn: 0 AvgScore: 5.54 AvgScanTime: 3.57 sec Spam: 191920 Autolearn: 0 AvgScore: 14.67 AvgScanTime: 4.69 sec Ham: 396219 Autolearn: 0 AvgScore: 1.11 AvgScanTime: 3.03 sec Time Spent Running SA: 583.65 hours Time Spent Processing Spam: 249.77 hours Time Spent Processing Ham: 333.89 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 173111 70.73 90.20 61.31 2 DKIM_SIGNED 120119 53.45 62.59 49.02 3 DCC_CHECK 118213 37.91 61.59 26.44 4 XM_DK_Pass 117149 52.55 61.04 48.44 5 DKIM_VALID 111653 50.12 58.18 46.22 6 XMListUnsubscribeExists 105245 40.96 54.84 34.24 7 DKIM_VALID_AU 90458 38.77 47.13 34.72 8 MIME_HTML_ONLY 81437 22.93 42.43 13.49 9 XM_H_QuotedFrom 76958 29.01 40.10 23.63 10 DCC_CHECK_NEGATIVE 72191 61.35 37.62 72.85 11 XM_DK_Undo_02 72023 20.16 37.53 11.74 12 BAYES_99 68710 19.79 35.80 12.04 13 BAYES_50 60849 52.39 31.71 62.41 14 BAYES_999 56738 16.58 29.56 10.29 15 LOC_TINY_FONT_1 53866 20.61 28.07 17.01 16 TR_DCC_Bayes_99 53521 12.72 27.89 5.37 17 BOTNET 48763 8.80 25.41 0.75 18 HTML_FONT_LOW_CONTRAST 47934 22.80 24.98 21.74 19 XMSubLong 45136 16.02 23.52 12.39 20 T_REMOTE_IMAGE 43550 9.56 22.69 3.20 21 HTML_MIME_NO_HTML_TAG 42513 7.99 22.15 1.12 22 SHORTENED_URL_SRC 41540 11.00 21.64 5.85 23 MISSING_HEADERS 41038 7.49 21.38 0.76 24 BODY_URI_ONLY 40484 6.90 21.09 0.03 25 HTML_SHORT_LINK_IMG_1 40362 10.36 21.03 5.20 26 SHORTENER_SHORT_IMG 39867 10.26 20.77 5.17 27 URI_BUFFLY 39838 10.26 20.76 5.17 28 MIME_HEADER_CTYPE_ONLY 39705 6.83 20.69 0.12 29 FVGT_m_MULTI_ODD 38090 16.79 19.85 15.30 30 BOTNET_NORDNS 32356 5.51 16.86 0.01 31 DKIM_VALID_EF 32053 18.39 16.70 19.21 32 T_TM2_M_HEADER_IN_MSG 29877 14.95 15.57 14.65 33 XM_Body_Dirty_Words 29263 13.05 15.25 11.99 34 T_KAM_HTML_FONT_INVALID 28755 11.15 14.98 9.30 35 HTML_IMAGE_RATIO_02 28733 8.71 14.97 5.68 36 RCVD_IN_RP_RNBL 28609 4.88 14.91 0.03 37 HTML_IMAGE_ONLY_08 25907 6.71 13.50 3.42 38 XM_UncommonTLD01 25251 5.95 13.16 2.46 39 XM_Multi_Part_URI 24063 10.15 12.54 8.99 40 RELAYCOUNTRY_META 23879 5.71 12.44 2.45 41 TooManyTo_001 23858 25.07 12.43 31.19 42 MultiRelay 22738 10.58 11.85 9.96 43 FSL_BULK_SIG 22178 7.56 11.56 5.63 44 BAYES_80 20841 6.34 10.86 4.15 45 SpammyFromTLD_02 20768 3.58 10.82 0.08 46 BAYES_60 20598 7.94 10.73 6.59 47 BOTNET_IPINHOSTNAME 20332 6.81 10.59 4.98 48 XM_Evil_Numbers_Gen 18028 6.28 9.39 4.77 49 UNTRUSTED_Relay 16460 3.23 8.58 0.64 50 MIME_QP_LONG_LINE 16119 22.17 8.40 28.84 51 ALL_TRUSTED 15922 34.61 8.30 47.35 52 XMSexyCombo_05 15806 4.17 8.24 2.21 53 HTML_IMAGE_ONLY_04 15210 3.84 7.93 1.87 54 BAYES_95 14703 4.46 7.66 2.91 55 TooManyTo_002 14615 21.76 7.62 28.61 56 TM2_M_URI_OPT_OUT 14539 20.68 7.58 27.02 57 LOTS_OF_MONEY 14530 7.18 7.57 6.99 58 TooManyTo_003 14463 21.53 7.54 28.31 59 HTML_IMAGE_RATIO_04 13806 5.30 7.19 4.38 60 T_XMDrugObfuBody_14 13063 5.41 6.81 4.74 61 XMSubMetaSx_00 12367 4.15 6.44 3.03 62 XM_H_Long_From01 12090 4.51 6.30 3.64 63 XM_B_Phish_Phrases 11646 4.42 6.07 3.62 64 SHORT_URI 11067 2.20 5.77 0.47 65 XM_salutation 11022 2.19 5.74 0.47 66 MPART_ALT_DIFF 10792 3.34 5.62 2.24 67 RCVD_IN_RP_SAFE 10742 6.54 5.60 7.00 68 LotsOfNums_01 10676 5.70 5.56 5.77 69 FROM_EXCESS_BASE64 10664 3.70 5.56 2.80 70 XMNumbers 10584 3.41 5.51 2.39 71 XMStrtUSub 10077 3.80 5.25 3.10 72 TR_XM_DocInvoice 9902 3.12 5.16 2.14 73 DKIM_INVALID 8466 3.33 4.41 2.80 74 RCVD_IN_RP_CERTIFIED 8030 5.44 4.18 6.05 75 XM_BadFromFormat 7934 1.50 4.13 0.22 76 HTML_IMAGE_RATIO_06 7698 3.12 4.01 2.69 77 XM_UB50 7182 1.49 3.74 0.39 78 HTML_FONT_SIZE_LARGE 6810 1.84 3.55 1.01 79 MIME_HTML_MOSTLY 6657 2.39 3.47 1.87 80 DIET_1 6407 1.47 3.34 0.57 81 T_TooManySym_01 6253 3.22 3.26 3.20 82 XM_SendGrid 5466 3.39 2.85 3.65 83 MIME_HTML_ONLY_MULTI 5379 1.61 2.80 1.04 84 XMSlimDrugH 5298 1.10 2.76 0.30 85 XM_CamelCaseFrm001 5223 1.57 2.72 1.01 86 XMSubMetaI_00 5161 1.19 2.69 0.46 87 MultiRelay_Combo 5006 0.93 2.61 0.12 88 MultiRelay_CC 5006 0.93 2.61 0.12 89 XM_DIRTYINTL 4974 1.67 2.59 1.22 90 RCVD_IN_MSPIKE_H2 4783 3.15 2.49 3.47 91 URI_HEX 4588 1.69 2.39 1.35 92 XM_SPF_SoftFail 4581 1.23 2.39 0.67 93 XMWghtMeta_00 4494 0.77 2.34 0.01 94 HTML_SHORT_CENTER 4474 1.16 2.33 0.60 95 RELAYCOUNTRY_CA 4398 1.35 2.29 0.89 96 NO_DNS_FOR_FROM 4098 1.27 2.14 0.86 97 XM_URI_RBL 3864 0.71 2.01 0.07 98 RCVD_IN_BL_SPAMCOP_NET 3657 0.72 1.91 0.15 99 XM_OfRef6 3551 1.20 1.85 0.89 100 HTML_IMAGE_RATIO_08 3396 1.37 1.77 1.18 101 URIBL_DBL_SPAM 3342 0.61 1.74 0.06 102 XM_JunkDunk 3338 0.57 1.74 0.00 103 XM_UB60 3007 0.54 1.57 0.04 104 URIBL_BLACK 2947 0.53 1.54 0.04 105 T_XMDrugObfuBody_08 2895 0.95 1.51 0.68 106 XMSubMetaI_01 2860 0.50 1.49 0.02 107 XMDiploma_00 2779 1.22 1.45 1.10 108 XMBdyGiftCard01 2745 0.99 1.43 0.78 109 T_XMHurry_00 2729 0.70 1.42 0.35 110 RCVD_IN_IADB_LISTED 2717 2.88 1.42 3.59 111 SUBJ_DOLLARS 2697 0.59 1.41 0.20 112 SUBJ_ALL_CAPS 2659 1.30 1.39 1.26 113 UNPARSEABLE_RELAY 2642 3.37 1.38 4.33 114 TR_Symld_Words 2580 1.41 1.34 1.45 115 RCVD_IN_IADB_SPF 2489 2.51 1.30 3.10 116 XMSexyCombo_01 2486 0.68 1.30 0.38 117 RELAYCOUNTRY_CN 2451 0.43 1.28 0.01 118 RELAYCOUNTRY_FR 2437 0.49 1.27 0.12 119 XMSubject_48 2377 0.41 1.24 0.01 120 RCVD_IN_IADB_SENDERID 2368 2.23 1.23 2.72 121 TR_LOTS_OF_MONEY3 2367 0.63 1.23 0.34 122 XMBody_17 2356 0.58 1.23 0.26 123 RCVD_IN_IADB_DK 2347 2.17 1.22 2.62 124 LOW_PRICE 2338 0.48 1.22 0.13 125 XMNoVowels 2312 1.10 1.20 1.05 126 SUBJECT_DIET 2140 0.37 1.12 0.00 127 XM_ProductURIs 2127 1.09 1.11 1.08 128 XM_UB99 2113 0.37 1.10 0.02 129 T_XMDrugObfuBody_00 2087 0.77 1.09 0.62 130 URI_TRY_3LD 2074 1.07 1.08 1.07 131 XM_ShortIntro_01 2018 2.63 1.05 3.39 132 TM2_M_VERY_LONG_WORD 1949 0.72 1.02 0.58 133 XMStockSpam_06 1944 0.66 1.01 0.48 134 XMPhish30 1938 0.51 1.01 0.27 135 BAYES_40 1918 2.60 1.00 3.38 136 XM_H_Long_From02 1881 0.72 0.98 0.60 137 MAILING_LIST_MULTI 1872 1.03 0.98 1.05 138 HTML_IMAGE_ONLY_24 1869 0.55 0.97 0.35 139 TR_MetaPhish_Combo_01 1838 0.72 0.96 0.60 140 XM_B_REG_HTML 1803 0.59 0.94 0.42 141 XM_UB80 1770 0.32 0.92 0.03 142 XMHTMLBadTable_001 1761 0.52 0.92 0.33 143 XMBody_78 1746 0.56 0.91 0.39 144 BAYES_00 1738 3.60 0.91 4.91 145 XM_HighProb1 1737 0.30 0.91 0.01 146 XMHTML_After_End 1723 0.42 0.90 0.19 147 TVD_SPACE_RATIO_MINFP 1719 0.30 0.90 0.01 148 RELAYCOUNTRY_AT 1717 0.35 0.89 0.09 149 HTML_FONT_FACE_BAD 1715 0.57 0.89 0.42 150 SpammyFromTLD_01 1690 0.45 0.88 0.24 151 TR_XM_RelayPhish 1684 0.42 0.88 0.19 152 XM_UB999 1629 0.29 0.85 0.02 153 BAYES_20 1545 1.79 0.81 2.26 154 BODY_ENHANCEMENT 1543 0.28 0.80 0.02 155 DKIM_ADSP_CUSTOM_MED 1535 0.58 0.80 0.47 156 XMGenDplmaNmb 1502 0.65 0.78 0.58 157 RELAYCOUNTRY_TH 1488 0.26 0.78 0.01 158 PLING_QUERY 1473 0.45 0.77 0.29 159 RELAYCOUNTRY_IN 1469 0.27 0.77 0.04 160 REPLYTO_WITHOUT_TO_CC 1462 0.67 0.76 0.63 161 HTML_TEXT_INVISIBLE_STYLE 1458 0.26 0.76 0.02 162 XM_B_COPY_HTML 1441 0.53 0.75 0.43 163 XMPhish11 1433 1.04 0.75 1.18 164 XM_H_PHPOS 1427 0.73 0.74 0.73 165 TR_XM_DK_Bayes 1422 2.43 0.74 3.24 166 XM_RXBody 1419 0.28 0.74 0.06 167 T_Symld_Words_02 1409 0.43 0.73 0.28 168 NML_ADSP_CUSTOM_MED 1397 0.47 0.73 0.34 169 RCVD_IN_MSPIKE_WL 1397 1.49 0.73 1.86 170 RCVD_IN_MSPIKE_H3 1390 1.49 0.72 1.86 171 RDNS_DYNAMIC 1385 0.54 0.72 0.45 172 FORGED_GMAIL_RCVD 1376 0.39 0.72 0.23 173 T_TooManySym_02 1365 1.17 0.71 1.39 174 T_MONEY_PERCENT 1364 0.39 0.71 0.24 175 TR_LOTS_OF_MONEY2 1364 0.39 0.71 0.24 176 T_FILL_THIS_FORM_SHORT 1360 0.50 0.71 0.41 177 TR_XM_DK_Bayes1 1346 2.28 0.70 3.04 178 TooManyTo_004 1332 0.55 0.69 0.48 179 XM_DK_Undo_01 1315 0.98 0.69 1.12 180 XMSubPhish11 1304 0.30 0.68 0.11 181 URI_NOVOWEL 1255 0.40 0.65 0.28 182 XMGppyBdWords 1242 0.25 0.65 0.06 183 TR_XM_DK_Bayes2 1221 1.87 0.64 2.47 184 DATE_IN_PAST_03_06 1216 0.42 0.63 0.32 185 MSM_PRIO_REPTO 1174 0.60 0.61 0.60 186 TooManyTo_005 1158 0.49 0.60 0.43 187 DKIM_ADSP_NXDOMAIN 1145 0.39 0.60 0.29 188 XMSubMetaSSx_00 1135 0.28 0.59 0.13 189 XMSexyCombo_04 1132 0.23 0.59 0.05 190 XM_H_PHPMailer 1131 0.50 0.59 0.45 191 XMSubPhish8 1116 0.22 0.58 0.05 192 XM_Body_Obfu01 1106 0.25 0.58 0.09 193 RELAYCOUNTRY_DE 1100 0.33 0.57 0.21 194 ANY_BOUNCE_MESSAGE 1096 8.22 0.57 11.92 195 BOUNCE_MESSAGE 1096 8.22 0.57 11.92 196 RCVD_IN_IADB_VOUCHED 1087 1.83 0.57 2.45 197 URIBL_DBL_ABUSE_REDIR 1086 0.36 0.57 0.26 198 TR_Mismatch_TLD_02 1063 0.21 0.55 0.05 199 XMSubNoVowel 1054 0.29 0.55 0.16 200 LONG_JUNK_URI3 1035 0.19 0.54 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 288631 61.35 37.62 72.85 2 BAYES_50 247286 52.39 31.71 62.41 3 HTML_MESSAGE 242909 70.73 90.20 61.31 4 DKIM_SIGNED 194220 53.45 62.59 49.02 5 XM_DK_Pass 191928 52.55 61.04 48.44 6 ALL_TRUSTED 187628 34.61 8.30 47.35 7 DKIM_VALID 183113 50.12 58.18 46.22 8 DKIM_VALID_AU 137552 38.77 47.13 34.72 9 XMListUnsubscribeExists 135678 40.96 54.84 34.24 10 TooManyTo_001 123595 25.07 12.43 31.19 11 MIME_QP_LONG_LINE 114284 22.17 8.40 28.84 12 TooManyTo_002 113348 21.76 7.62 28.61 13 TooManyTo_003 112186 21.53 7.54 28.31 14 TM2_M_URI_OPT_OUT 107070 20.68 7.58 27.02 15 DCC_CHECK 104767 37.91 61.59 26.44 16 XM_H_QuotedFrom 93639 29.01 40.10 23.63 17 HTML_FONT_LOW_CONTRAST 86137 22.80 24.98 21.74 18 DKIM_VALID_EF 76118 18.39 16.70 19.21 19 LOC_TINY_FONT_1 67378 20.61 28.07 17.01 20 FVGT_m_MULTI_ODD 60639 16.79 19.85 15.30 21 T_TM2_M_HEADER_IN_MSG 58058 14.95 15.57 14.65 22 MIME_HTML_ONLY 53438 22.93 42.43 13.49 23 XMSubLong 49090 16.02 23.52 12.39 24 BAYES_99 47698 19.79 35.80 12.04 25 XM_Body_Dirty_Words 47490 13.05 15.25 11.99 26 ANY_BOUNCE_MESSAGE 47233 8.22 0.57 11.92 27 BOUNCE_MESSAGE 47233 8.22 0.57 11.92 28 XM_DK_Undo_02 46525 20.16 37.53 11.74 29 BAYES_999 40775 16.58 29.56 10.29 30 MultiRelay 39478 10.58 11.85 9.96 31 XM_DKIMWhitelistDomains 36891 6.28 0.03 9.31 32 T_KAM_HTML_FONT_INVALID 36849 11.15 14.98 9.30 33 XM_Multi_Part_URI 35611 10.15 12.54 8.99 34 RCVD_IN_RP_SAFE 27721 6.54 5.60 7.00 35 LOTS_OF_MONEY 27687 7.18 7.57 6.99 36 BAYES_60 26101 7.94 10.73 6.59 37 RCVD_IN_RP_CERTIFIED 23984 5.44 4.18 6.05 38 SHORTENED_URL_SRC 23178 11.00 21.64 5.85 39 LotsOfNums_01 22876 5.70 5.56 5.77 40 HTML_IMAGE_RATIO_02 22505 8.71 14.97 5.68 41 FSL_BULK_SIG 22312 7.56 11.56 5.63 42 TR_DCC_Bayes_99 21290 12.72 27.89 5.37 43 HTML_SHORT_LINK_IMG_1 20596 10.36 21.03 5.20 44 SHORTENER_SHORT_IMG 20479 10.26 20.77 5.17 45 URI_BUFFLY 20479 10.26 20.76 5.17 46 BOTNET_IPINHOSTNAME 19719 6.81 10.59 4.98 47 BAYES_00 19445 3.60 0.91 4.91 48 XM_Evil_Numbers_Gen 18915 6.28 9.39 4.77 49 T_XMDrugObfuBody_14 18778 5.41 6.81 4.74 50 HTML_IMAGE_RATIO_04 17351 5.30 7.19 4.38 51 UNPARSEABLE_RELAY 17154 3.37 1.38 4.33 52 BAYES_80 16457 6.34 10.86 4.15 53 TVD_RCVD_IP 15717 2.79 0.36 3.97 54 XM_SendGrid 14459 3.39 2.85 3.65 55 XM_H_Long_From01 14411 4.51 6.30 3.64 56 XM_B_Phish_Phrases 14350 4.42 6.07 3.62 57 RCVD_IN_IADB_LISTED 14223 2.88 1.42 3.59 58 RCVD_IN_MSPIKE_H2 13738 3.15 2.49 3.47 59 HTML_IMAGE_ONLY_08 13538 6.71 13.50 3.42 60 XM_ShortIntro_01 13446 2.63 1.05 3.39 61 BAYES_40 13391 2.60 1.00 3.38 62 TR_XM_DK_Bayes 12857 2.43 0.74 3.24 63 T_TooManySym_01 12693 3.22 3.26 3.20 64 T_REMOTE_IMAGE 12665 9.56 22.69 3.20 65 RCVD_IN_IADB_SPF 12271 2.51 1.30 3.10 66 XMStrtUSub 12267 3.80 5.25 3.10 67 TR_XM_DK_Bayes1 12054 2.28 0.70 3.04 68 XMSubMetaSx_00 12021 4.15 6.44 3.03 69 BAYES_95 11542 4.46 7.66 2.91 70 DKIM_INVALID 11107 3.33 4.41 2.80 71 FROM_EXCESS_BASE64 11084 3.70 5.56 2.80 72 IN_ZIMBRA_NJ_WHITELIST 10805 1.84 0.02 2.73 73 RCVD_IN_IADB_SENDERID 10775 2.23 1.23 2.72 74 HTML_IMAGE_RATIO_06 10661 3.12 4.01 2.69 75 RCVD_IN_IADB_DK 10394 2.17 1.22 2.62 76 TR_XM_DK_Bayes2 9782 1.87 0.64 2.47 77 XM_UncommonTLD01 9729 5.95 13.16 2.46 78 RCVD_IN_IADB_VOUCHED 9696 1.83 0.57 2.45 79 RELAYCOUNTRY_META 9694 5.71 12.44 2.45 80 XMNumbers 9479 3.41 5.51 2.39 81 BAYES_20 8964 1.79 0.81 2.26 82 MPART_ALT_DIFF 8877 3.34 5.62 2.24 83 XMSexyCombo_05 8742 4.17 8.24 2.21 84 TR_XM_DocInvoice 8467 3.12 5.16 2.14 85 MIME_HTML_MOSTLY 7408 2.39 3.47 1.87 86 HTML_IMAGE_ONLY_04 7402 3.84 7.93 1.87 87 RCVD_IN_MSPIKE_WL 7375 1.49 0.73 1.86 88 RCVD_IN_MSPIKE_H3 7371 1.49 0.72 1.86 89 INVALID_MSGID 6919 1.25 0.22 1.75 90 TO_MALFORMED 6335 1.08 0.00 1.60 91 RCVD_IN_IADB_OPTIN 6319 1.21 0.41 1.59 92 TR_Symld_Words 5733 1.41 1.34 1.45 93 XM_PDF 5645 1.04 0.24 1.42 94 T_TooManySym_02 5493 1.17 0.71 1.39 95 URI_HEX 5346 1.69 2.39 1.35 96 URIBL_DBL_ABUSE_SPAM 5188 1.02 0.41 1.31 97 USER_IN_DEF_DKIM_WL 5033 0.87 0.06 1.27 98 SUBJ_ALL_CAPS 5011 1.30 1.39 1.26 99 IN_HORDE_ADDRESS_BOOK 5008 0.87 0.04 1.26 100 XM_DIRTYINTL 4823 1.67 2.59 1.22 101 BAYES_05 4808 0.96 0.44 1.21 102 XMPhish11 4693 1.04 0.75 1.18 103 HTML_IMAGE_RATIO_08 4669 1.37 1.77 1.18 104 HTML_MIME_NO_HTML_TAG 4450 7.99 22.15 1.12 105 XM_DK_Undo_01 4420 0.98 0.69 1.12 106 XMDiploma_00 4371 1.22 1.45 1.10 107 XMSubject_40 4352 0.75 0.05 1.10 108 XM_ProductURIs 4289 1.09 1.11 1.08 109 URI_TRY_3LD 4229 1.07 1.08 1.07 110 XMNoVowels 4180 1.10 1.20 1.05 111 MAILING_LIST_MULTI 4177 1.03 0.98 1.05 112 MIME_HTML_ONLY_MULTI 4117 1.61 2.80 1.04 113 XM_CamelCaseFrm001 3994 1.57 2.72 1.01 114 HTML_FONT_SIZE_LARGE 3992 1.84 3.55 1.01 115 RELAYCOUNTRY_CA 3520 1.35 2.29 0.89 116 XM_OfRef6 3508 1.20 1.85 0.89 117 MY_SERVERS_FOUND 3441 0.63 0.13 0.87 118 NO_DNS_FOR_FROM 3395 1.27 2.14 0.86 119 XMBdyGiftCard01 3103 0.99 1.43 0.78 120 XM_GoogleGroups 3056 0.61 0.28 0.77 121 MISSING_HEADERS 2994 7.49 21.38 0.76 122 BOTNET 2989 8.80 25.41 0.75 123 XMDateMe_00 2949 0.60 0.29 0.74 124 USER_IN_WHITELIST 2898 0.49 0.00 0.73 125 XM_H_PHPOS 2895 0.73 0.74 0.73 126 TM2_M_A_HREF_HREF 2880 0.63 0.44 0.73 127 XMLngstWrd_00 2842 0.55 0.22 0.72 128 T_XMDrugObfuBody_08 2679 0.95 1.51 0.68 129 XM_SPF_SoftFail 2653 1.23 2.39 0.67 130 URIBL_SBL_A 2571 0.59 0.46 0.65 131 UNTRUSTED_Relay 2536 3.23 8.58 0.64 132 REPLYTO_WITHOUT_TO_CC 2481 0.67 0.76 0.63 133 T_XMDrugObfuBody_00 2449 0.77 1.09 0.62 134 XMSubMetaSxObfu_02 2430 0.53 0.36 0.61 135 XMLngstWrd_01 2423 0.48 0.20 0.61 136 TR_MetaPhish_Combo_01 2371 0.72 0.96 0.60 137 HTML_SHORT_CENTER 2366 1.16 2.33 0.60 138 XM_H_Long_From02 2362 0.72 0.98 0.60 139 MSM_PRIO_REPTO 2360 0.60 0.61 0.60 140 XM_D_tchamptons_WL 2336 0.40 0.00 0.59 141 TM2_M_VERY_LONG_WORD 2315 0.72 1.02 0.58 142 XMGenDplmaNmb 2302 0.65 0.78 0.58 143 DIET_1 2258 1.47 3.34 0.57 144 XMBody_95 2148 0.39 0.09 0.54 145 T_TooManySym_03 2108 0.41 0.17 0.53 146 TooManyTo_004 1919 0.55 0.69 0.48 147 XMStockSpam_06 1917 0.66 1.01 0.48 148 SHORT_URI 1873 2.20 5.77 0.47 149 XM_salutation 1858 2.19 5.74 0.47 150 DKIM_ADSP_CUSTOM_MED 1853 0.58 0.80 0.47 151 XMSubMetaI_00 1837 1.19 2.69 0.46 152 XM_H_PHPMailer 1783 0.50 0.59 0.45 153 URIBL_CR_SURBL 1782 0.38 0.25 0.45 154 RDNS_DYNAMIC 1770 0.54 0.72 0.45 155 HELO_NODOT 1751 0.33 0.10 0.44 156 TooManyTo_005 1700 0.49 0.60 0.43 157 XM_B_COPY_HTML 1686 0.53 0.75 0.43 158 HTML_FONT_FACE_BAD 1664 0.57 0.89 0.42 159 XM_B_REG_HTML 1652 0.59 0.94 0.42 160 TR_Caps_n_Bayes_99 1628 0.42 0.43 0.41 161 T_FILL_THIS_FORM_SHORT 1608 0.50 0.71 0.41 162 XM_UB50 1564 1.49 3.74 0.39 163 XMLngstWrd_02 1535 0.31 0.14 0.39 164 XMBody_78 1528 0.56 0.91 0.39 165 MSGID_RANDY 1521 0.32 0.19 0.38 166 XMSexyCombo_01 1521 0.68 1.30 0.38 167 SHORT_URI_2 1466 0.26 0.03 0.37 168 SHORT_URI_3 1455 0.26 0.05 0.37 169 T_XMHurry_00 1400 0.70 1.42 0.35 170 HTML_IMAGE_ONLY_24 1392 0.55 0.97 0.35 171 RELAYCOUNTRY_GB 1391 0.38 0.43 0.35 172 XM_USANA_RCVD 1362 0.23 0.00 0.34 173 NML_ADSP_CUSTOM_MED 1356 0.47 0.73 0.34 174 TR_LOTS_OF_MONEY3 1340 0.63 1.23 0.34 175 XMHTMLBadTable_001 1321 0.52 0.92 0.33 176 FORGED_MUA_MOZILLA 1297 0.29 0.21 0.33 177 MPART_ALT_DIFF_COUNT 1285 0.39 0.51 0.32 178 DATE_IN_PAST_03_06 1282 0.42 0.63 0.32 179 XMCapTrack 1243 0.28 0.21 0.31 180 HTML_TAG_BALANCE_BODY 1227 0.35 0.43 0.31 181 XMSlimDrugH 1183 1.10 2.76 0.30 182 PLING_QUERY 1163 0.45 0.77 0.29 183 DKIM_ADSP_NXDOMAIN 1157 0.39 0.60 0.29 184 T_Symld_Words_02 1116 0.43 0.73 0.28 185 URI_NOVOWEL 1111 0.40 0.65 0.28 186 XM_H_PHPOS_M 1098 0.34 0.46 0.28 187 URIBL_CSS_A 1070 0.32 0.42 0.27 188 URIBL_CSS 1070 0.32 0.42 0.27 189 XMPhish30 1058 0.51 1.01 0.27 190 XMLngstWrd_03 1048 0.21 0.11 0.26 191 XMBody_17 1048 0.58 1.23 0.26 192 XMBrknScrpt_02 1038 0.30 0.39 0.26 193 T_TooManySym_04 1028 0.18 0.02 0.26 194 URIBL_DBL_ABUSE_REDIR 1020 0.36 0.57 0.26 195 REMOVE_BEFORE_LINK 1008 0.34 0.53 0.25 196 SpammyFromTLD_01 967 0.45 0.88 0.24 197 TR_LOTS_OF_MONEY2 953 0.39 0.71 0.24 198 T_MONEY_PERCENT 953 0.39 0.71 0.24 199 XM_Lotto 938 0.25 0.27 0.24 200 TRACKER_ID 936 0.26 0.31 0.24 ----------------------------------------------------------------------