Email: 666011 Autolearn: 0 AvgScore: 1.50 AvgScanTime: 7.32 sec Spam: 108347 Autolearn: 0 AvgScore: 11.69 AvgScanTime: 10.42 sec Ham: 557664 Autolearn: 0 AvgScore: -0.48 AvgScanTime: 6.72 sec Time Spent Running SA: 1354.51 hours Time Spent Processing Spam: 313.51 hours Time Spent Processing Ham: 1041.00 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 101588 90.05 93.76 89.33 2 DKIM_SIGNED 91865 76.86 84.79 75.32 3 XM_DK_Pass 88934 75.36 82.08 74.06 4 DCC_CHECK 86809 47.73 80.12 41.43 5 RELAYCOUNTRY_US 86773 80.86 80.09 81.01 6 XM_B_Unicode 82346 72.32 76.00 71.61 7 XMListUnsubscribeExists 77077 54.40 71.14 51.15 8 DKIM_VALID 77017 70.72 71.08 70.66 9 DKIM_VALID_AU 56459 50.65 52.11 50.36 10 XM_B_Unicode3 48479 42.16 44.74 41.66 11 XM_DK_Undo_02 46620 12.22 43.03 6.23 12 LOC_TINY_FONT_1 42397 26.90 39.13 24.53 13 BAYES_50 35569 37.08 32.83 37.91 14 MIME_HTML_ONLY 34228 21.29 31.59 19.29 15 HTML_FONT_LOW_CONTRAST 34003 26.91 31.38 26.04 16 FVGT_m_MULTI_ODD 31242 22.79 28.84 21.61 17 DKIM_VALID_EF 30097 26.02 27.78 25.68 18 BOTNET 27205 5.96 25.11 2.24 19 T_KAM_HTML_FONT_INVALID 26680 20.04 24.62 19.15 20 XMSubLong 26514 20.66 24.47 19.92 21 BAYES_99 23870 5.96 22.03 2.84 22 RELAYCOUNTRY_META 22419 8.47 20.69 6.09 23 BOTNET_IPINHOSTNAME 22294 6.64 20.58 3.94 24 T_TM2_M_HEADER_IN_MSG 21802 26.89 20.12 28.21 25 XM_Multi_Part_URI 21432 13.85 19.78 12.70 26 DCC_CHECK_NEGATIVE 19655 50.18 18.14 56.40 27 XM_Body_Dirty_Words 19649 12.42 18.14 11.31 28 TR_DCC_Bayes_99 19529 4.36 18.02 1.70 29 BAYES_999 18749 4.75 17.30 2.32 30 XM_UncommonTLD01 15384 5.32 14.20 3.59 31 XM_B_Phish_Phrases 14970 9.21 13.82 8.32 32 DKIM_INVALID 14848 6.13 13.70 4.66 33 UNTRUSTED_Relay 14035 3.80 12.95 2.03 34 FSL_BULK_SIG 13769 8.37 12.71 7.53 35 XM_Evil_Numbers_Gen 13443 9.56 12.41 9.01 36 LOTS_OF_MONEY 12934 8.59 11.94 7.95 37 HTML_IMAGE_RATIO_02 12759 7.65 11.78 6.85 38 XM_B_Unsub 12751 10.80 11.77 10.61 39 LotsOfNums_01 10750 9.54 9.92 9.46 40 XMSexyCombo_05 9781 4.27 9.03 3.34 41 NO_DNS_FOR_FROM 9565 3.16 8.83 2.06 42 TooManyTo_001 9465 8.69 8.74 8.69 43 RCVD_IN_MSPIKE_H2 9419 11.58 8.69 12.14 44 MPART_ALT_DIFF 8328 4.86 7.69 4.32 45 XM_H_Long_From01 8146 6.08 7.52 5.80 46 XMNumbers 7734 3.79 7.14 3.14 47 HTML_IMAGE_RATIO_04 6901 5.79 6.37 5.68 48 XMSubMetaSx_00 6625 4.25 6.11 3.89 49 XM_SPF_SoftFail 6564 2.39 6.06 1.68 50 BAYES_80 6060 2.46 5.59 1.85 51 MIME_HTML_MOSTLY 5944 2.81 5.49 2.29 52 UNPARSEABLE_RELAY 5797 7.66 5.35 8.10 53 PDS_OTHER_BAD_TLD 5733 0.98 5.29 0.14 54 RCVD_IN_MSPIKE_BL 5687 2.35 5.25 1.79 55 XM_SendGrid 5626 6.36 5.19 6.58 56 XM_UB50 5604 1.40 5.17 0.67 57 XM_B_SpammyTLD 5585 2.32 5.15 1.77 58 RELAYCOUNTRY_CA 5515 2.33 5.09 1.80 59 SpammyFromTLD_02 5453 1.21 5.03 0.47 60 MIME_QP_LONG_LINE 5421 5.95 5.00 6.13 61 RCVD_IN_MSPIKE_L3 5331 2.16 4.92 1.62 62 FROM_SUSPICIOUS_NTLD 5274 0.83 4.87 0.05 63 FROM_SUSPICIOUS_NTLD_FP 5208 0.81 4.81 0.04 64 XM_CamelCaseFrm001 5045 2.63 4.66 2.24 65 BAYES_60 4929 3.84 4.55 3.70 66 RCVD_IN_BL_SPAMCOP_NET 4760 1.78 4.39 1.27 67 TM2_M_URI_OPT_OUT 4651 3.16 4.29 2.94 68 T_XMDrugObfuBody_08 4346 1.93 4.01 1.53 69 HTML_IMAGE_RATIO_06 4256 3.31 3.93 3.19 70 XM_URI_RBL 4236 0.79 3.91 0.18 71 KHOP_HELO_FCRDNS 4124 2.11 3.81 1.78 72 XMStrtUSub 4087 5.58 3.77 5.93 73 RCVD_IN_MSPIKE_H3 3898 8.64 3.60 9.62 74 RCVD_IN_MSPIKE_WL 3898 8.64 3.60 9.62 75 MIME_HTML_ONLY_MULTI 3860 2.72 3.56 2.56 76 DATE_IN_PAST_06_12 3844 0.67 3.55 0.12 77 T_TooManySym_01 3553 4.16 3.28 4.34 78 SpammyFromTLD_01 3445 1.31 3.18 0.94 79 XM_OfRef6 3430 1.45 3.17 1.11 80 BAYES_95 3257 1.38 3.01 1.06 81 XM_DIRTYINTL 3153 0.93 2.91 0.54 82 XM_B_Unsub2 3140 2.11 2.90 1.96 83 HTML_IMAGE_RATIO_08 3068 2.09 2.83 1.95 84 HTML_MIME_NO_HTML_TAG 3031 2.44 2.80 2.37 85 RELAYCOUNTRY_FR 2994 0.73 2.76 0.33 86 FROM_EXCESS_BASE64 2885 3.02 2.66 3.09 87 URIBL_SBL_A 2872 0.63 2.65 0.24 88 XMNoVowels 2868 2.27 2.65 2.20 89 LongTLD 2863 0.56 2.64 0.16 90 XMBody_17 2830 0.94 2.61 0.62 91 T_REMOTE_IMAGE 2807 3.85 2.59 4.09 92 XM_SPF_Unknown 2773 0.95 2.56 0.63 93 XMPhish30 2763 0.94 2.55 0.62 94 BAYES_40 2761 3.44 2.55 3.61 95 XMDiploma_00 2607 1.65 2.41 1.50 96 URI_HEX 2559 1.45 2.36 1.27 97 SUBJ_ALL_CAPS 2420 1.78 2.23 1.69 98 TR_LOTS_OF_MONEY3 2408 0.72 2.22 0.42 99 RCVD_IN_RP_RNBL 2373 0.41 2.19 0.06 100 T_XMDrugObfuBody_14 2343 1.96 2.16 1.92 101 XM_H_TOP 2324 0.35 2.14 0.00 102 BAYES_20 2257 2.64 2.08 2.75 103 RCVD_IN_RP_SAFE 2214 6.86 2.04 7.79 104 TR_XM_INV_DKIM 2190 0.41 2.02 0.09 105 XM_H_Long_From02 2171 1.28 2.00 1.14 106 TR_XM_DK_SendGrid 2134 3.07 1.97 3.28 107 XMSexyCombo_01 2127 0.82 1.96 0.59 108 BOTNET_NORDNS 2117 0.33 1.95 0.01 109 TR_XM_MaxBayes 2112 0.33 1.95 0.01 110 TM2_M_VERY_LONG_WORD 2095 1.18 1.93 1.04 111 TR_XM_PHPDW 2091 0.65 1.93 0.40 112 TR_XM_PHPForged 2066 0.63 1.91 0.38 113 TR_XM_FormFill2 2043 0.62 1.89 0.38 114 XM_H_PHPOS 2038 0.62 1.88 0.37 115 DKIM_ADSP_CUSTOM_MED 2019 1.23 1.86 1.11 116 URI_TRY_3LD 1943 1.17 1.79 1.05 117 XMSubMetaI_00 1937 0.68 1.79 0.46 118 TR_XM_RelayPhish 1933 0.52 1.78 0.28 119 ALL_TRUSTED 1883 12.56 1.74 14.66 120 RCVD_IN_IADB_LISTED 1868 5.22 1.72 5.90 121 RELAYCOUNTRY_GB 1860 1.24 1.72 1.15 122 FORGED_GMAIL_RCVD 1841 0.71 1.70 0.52 123 XMBdyGiftCard01 1826 0.84 1.69 0.67 124 XMStockSpam_06 1813 1.13 1.67 1.03 125 XMGenDplmaNmb 1813 1.15 1.67 1.05 126 BAYES_00 1792 10.93 1.65 12.73 127 XMHTML_After_End 1768 0.77 1.63 0.60 128 RCVD_IN_IADB_SPF 1755 4.57 1.62 5.14 129 RCVD_IN_IADB_SENDERID 1725 4.04 1.59 4.51 130 RCVD_IN_IADB_DK 1721 3.99 1.59 4.45 131 NML_ADSP_CUSTOM_MED 1663 0.93 1.53 0.81 132 DATE_IN_PAST_03_06 1609 0.35 1.49 0.13 133 TR_Mismatch_TLD_02 1605 0.34 1.48 0.12 134 XMPhish08 1586 0.77 1.46 0.64 135 TR_Symld_Words 1560 1.20 1.44 1.15 136 T_XMHurry_00 1556 0.78 1.44 0.66 137 TR_MetaPhish_Combo_01 1550 1.16 1.43 1.11 138 RCVD_IN_RP_CERTIFIED 1548 6.13 1.43 7.04 139 RDNS_DYNAMIC 1486 0.48 1.37 0.31 140 RELAYCOUNTRY_DE 1485 0.71 1.37 0.58 141 BAYES_05 1448 1.77 1.34 1.86 142 MAILING_LIST_MULTI 1439 2.54 1.33 2.78 143 XM_ProductURIs 1417 0.84 1.31 0.75 144 RELAYCOUNTRY_AT 1416 0.33 1.31 0.14 145 ANY_BOUNCE_MESSAGE 1388 2.36 1.28 2.57 146 TR_XM_DK_Bayes 1387 7.42 1.28 8.61 147 BOUNCE_MESSAGE 1385 2.35 1.28 2.56 148 INVALID_MSGID 1383 1.60 1.28 1.66 149 T_XMDrugObfuBody_00 1354 0.88 1.25 0.81 150 XM_DK_Undo_01 1307 1.93 1.21 2.07 151 RELAYCOUNTRY_IT 1279 0.25 1.18 0.07 152 RCVD_IN_PSBL 1255 0.23 1.16 0.04 153 HTTPS_HTTP_MISMATCH 1245 0.85 1.15 0.79 154 XM_H_PHPMailer 1238 0.60 1.14 0.49 155 XM_UB60 1187 0.22 1.10 0.05 156 DIET_1 1162 0.73 1.07 0.66 157 FROM_LOCAL_HEX 1151 0.26 1.06 0.11 158 UNICODE_OBFU_ASC 1142 1.99 1.05 2.17 159 RELAYCOUNTRY_IN 1140 0.26 1.05 0.11 160 REMOVE_BEFORE_LINK 1122 0.47 1.04 0.36 161 TR_XM_MaxSPIKE 1122 0.20 1.04 0.04 162 MPART_ALT_DIFF_COUNT 1117 0.64 1.03 0.56 163 T_Symld_Words_02 1085 0.55 1.00 0.47 164 XM_PDF 1080 3.76 1.00 4.30 165 URIBL_BLACK 1080 0.18 1.00 0.02 166 DKIM_ADSP_NXDOMAIN 1079 0.34 1.00 0.21 167 FROM_LOCAL_DIGITS 1070 0.19 0.99 0.04 168 TR_Mismatch_TLD_01 1070 0.44 0.99 0.33 169 XM_H_PHPOS_M 1069 0.27 0.99 0.13 170 XMMoneyMeta_00 1067 0.67 0.98 0.61 171 XM_UB80 1051 0.17 0.97 0.01 172 XMLngstWrd_00 1033 0.46 0.95 0.37 173 RELAYCOUNTRY_JP 1029 0.18 0.95 0.03 174 TR_XM_DK_Bayes1 1029 6.97 0.95 8.14 175 XMSubMetaSxObfu_03 1014 1.09 0.94 1.12 176 XM_UB99 1012 0.15 0.93 0.00 177 XM_OfRef7 1002 0.28 0.92 0.16 178 XMLngstWrd_01 989 0.42 0.91 0.32 179 T_FILL_THIS_FORM_SHORT 951 0.78 0.88 0.76 180 URI_NOVOWEL 938 0.46 0.87 0.38 181 HELO_NODOT 902 1.72 0.83 1.89 182 HELO_NO_DOMAIN 901 1.72 0.83 1.89 183 TR_XM_DK_Bayes2 897 6.22 0.83 7.27 184 XMBrknScrpt_02 893 0.72 0.82 0.70 185 LONG_HEX_URI 890 0.32 0.82 0.22 186 DATE_IN_PAST_12_24 879 0.23 0.81 0.11 187 MISSING_HEADERS 875 0.82 0.81 0.82 188 XMBody_78 872 0.44 0.80 0.37 189 XM_H_MailChimp 851 0.29 0.79 0.19 190 URI_OPTOUT_3LD 848 0.19 0.78 0.07 191 T_TooManySym_02 837 1.80 0.77 2.00 192 TooManyTo_002 808 2.05 0.75 2.30 193 TM2_M_A_HREF_HREF 800 0.51 0.74 0.47 194 TR_LOTS_OF_MONEY2 786 0.39 0.73 0.32 195 T_MONEY_PERCENT 786 0.39 0.73 0.32 196 REPLYTO_WITHOUT_TO_CC 781 0.38 0.72 0.31 197 XM_Nigeria_01 777 0.15 0.72 0.04 198 XM_BadFromFormat 754 0.22 0.70 0.13 199 XMSlimDrugH 736 0.39 0.68 0.33 200 DEAR_FRIEND 717 0.18 0.66 0.08 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 498148 90.05 93.76 89.33 2 RELAYCOUNTRY_US 451773 80.86 80.09 81.01 3 DKIM_SIGNED 420008 76.86 84.79 75.32 4 XM_DK_Pass 412980 75.36 82.08 74.06 5 XM_B_Unicode 399328 72.32 76.00 71.61 6 DKIM_VALID 394018 70.72 71.08 70.66 7 DCC_CHECK_NEGATIVE 314528 50.18 18.14 56.40 8 XMListUnsubscribeExists 285223 54.40 71.14 51.15 9 DKIM_VALID_AU 280862 50.65 52.11 50.36 10 XM_B_Unicode3 232305 42.16 44.74 41.66 11 DCC_CHECK 231062 47.73 80.12 41.43 12 BAYES_50 211390 37.08 32.83 37.91 13 T_TM2_M_HEADER_IN_MSG 157291 26.89 20.12 28.21 14 HTML_FONT_LOW_CONTRAST 145225 26.91 31.38 26.04 15 DKIM_VALID_EF 143231 26.02 27.78 25.68 16 LOC_TINY_FONT_1 136788 26.90 39.13 24.53 17 FVGT_m_MULTI_ODD 120519 22.79 28.84 21.61 18 XMSubLong 111096 20.66 24.47 19.92 19 MIME_HTML_ONLY 107562 21.29 31.59 19.29 20 T_KAM_HTML_FONT_INVALID 106812 20.04 24.62 19.15 21 ALL_TRUSTED 81753 12.56 1.74 14.66 22 BAYES_00 70992 10.93 1.65 12.73 23 XM_Multi_Part_URI 70820 13.85 19.78 12.70 24 RCVD_IN_MSPIKE_H2 67722 11.58 8.69 12.14 25 XM_Body_Dirty_Words 63096 12.42 18.14 11.31 26 XM_B_Unsub 59172 10.80 11.77 10.61 27 RCVD_IN_MSPIKE_H3 53642 8.64 3.60 9.62 28 RCVD_IN_MSPIKE_WL 53642 8.64 3.60 9.62 29 LotsOfNums_01 52768 9.54 9.92 9.46 30 XM_Evil_Numbers_Gen 50220 9.56 12.41 9.01 31 TooManyTo_001 48442 8.69 8.74 8.69 32 TR_XM_DK_Bayes 48036 7.42 1.28 8.61 33 XM_B_Phish_Phrases 46387 9.21 13.82 8.32 34 TR_XM_DK_Bayes1 45369 6.97 0.95 8.14 35 UNPARSEABLE_RELAY 45198 7.66 5.35 8.10 36 LOTS_OF_MONEY 44309 8.59 11.94 7.95 37 RCVD_IN_RP_SAFE 43446 6.86 2.04 7.79 38 FSL_BULK_SIG 42008 8.37 12.71 7.53 39 TR_XM_DK_Bayes2 40557 6.22 0.83 7.27 40 RCVD_IN_RP_CERTIFIED 39266 6.13 1.43 7.04 41 HTML_IMAGE_RATIO_02 38207 7.65 11.78 6.85 42 XM_SendGrid 36722 6.36 5.19 6.58 43 XM_DK_Undo_02 34752 12.22 43.03 6.23 44 XM_DKIMWhitelistDomains 34466 5.18 0.03 6.18 45 MIME_QP_LONG_LINE 34176 5.95 5.00 6.13 46 RELAYCOUNTRY_META 33959 8.47 20.69 6.09 47 XMStrtUSub 33057 5.58 3.77 5.93 48 RCVD_IN_IADB_LISTED 32928 5.22 1.72 5.90 49 XM_H_Long_From01 32319 6.08 7.52 5.80 50 HTML_IMAGE_RATIO_04 31665 5.79 6.37 5.68 51 RCVD_IN_IADB_SPF 28667 4.57 1.62 5.14 52 DKIM_INVALID 25990 6.13 13.70 4.66 53 RCVD_IN_IADB_SENDERID 25161 4.04 1.59 4.51 54 RCVD_IN_IADB_DK 24843 3.99 1.59 4.45 55 T_TooManySym_01 24179 4.16 3.28 4.34 56 MPART_ALT_DIFF 24072 4.86 7.69 4.32 57 XM_PDF 23958 3.76 1.00 4.30 58 T_REMOTE_IMAGE 22822 3.85 2.59 4.09 59 BOTNET_IPINHOSTNAME 21951 6.64 20.58 3.94 60 XMSubMetaSx_00 21685 4.25 6.11 3.89 61 RCVD_IN_IADB_VOUCHED 21327 3.29 0.55 3.82 62 BAYES_60 20623 3.84 4.55 3.70 63 BAYES_40 20152 3.44 2.55 3.61 64 XM_UncommonTLD01 20027 5.32 14.20 3.59 65 IN_ZIMBRA_NJ_WHITELIST 18716 2.81 0.01 3.36 66 XMSexyCombo_05 18632 4.27 9.03 3.34 67 TR_XM_DK_SendGrid 18311 3.07 1.97 3.28 68 HTML_IMAGE_RATIO_06 17812 3.31 3.93 3.19 69 XMNumbers 17519 3.79 7.14 3.14 70 FROM_EXCESS_BASE64 17244 3.02 2.66 3.09 71 TM2_M_URI_OPT_OUT 16371 3.16 4.29 2.94 72 BAYES_99 15824 5.96 22.03 2.84 73 MAILING_LIST_MULTI 15503 2.54 1.33 2.78 74 BAYES_20 15315 2.64 2.08 2.75 75 ANY_BOUNCE_MESSAGE 14310 2.36 1.28 2.57 76 BOUNCE_MESSAGE 14283 2.35 1.28 2.56 77 MIME_HTML_ONLY_MULTI 14258 2.72 3.56 2.56 78 RCVD_IN_IADB_OPTIN 13344 2.07 0.42 2.39 79 HTML_MIME_NO_HTML_TAG 13234 2.44 2.80 2.37 80 BAYES_999 12910 4.75 17.30 2.32 81 TooManyTo_002 12847 2.05 0.75 2.30 82 MIME_HTML_MOSTLY 12778 2.81 5.49 2.29 83 XM_H_Trusted_IP 12508 1.88 0.00 2.24 84 BOTNET 12485 5.96 25.11 2.24 85 XM_CamelCaseFrm001 12476 2.63 4.66 2.24 86 XMNoVowels 12281 2.27 2.65 2.20 87 UPPERCASE_75_100 12099 1.84 0.16 2.17 88 UNICODE_OBFU_ASC 12084 1.99 1.05 2.17 89 XM_DK_Undo_01 11543 1.93 1.21 2.07 90 NO_DNS_FOR_FROM 11496 3.16 8.83 2.06 91 UNTRUSTED_Relay 11305 3.80 12.95 2.03 92 T_TooManySym_02 11179 1.80 0.77 2.00 93 XM_B_Unsub2 10939 2.11 2.90 1.96 94 HTML_IMAGE_RATIO_08 10862 2.09 2.83 1.95 95 T_XMDrugObfuBody_14 10716 1.96 2.16 1.92 96 HELO_NODOT 10563 1.72 0.83 1.89 97 HELO_NO_DOMAIN 10562 1.72 0.83 1.89 98 BAYES_05 10368 1.77 1.34 1.86 99 BAYES_80 10300 2.46 5.59 1.85 100 RELAYCOUNTRY_CA 10023 2.33 5.09 1.80 101 RCVD_IN_MSPIKE_BL 9968 2.35 5.25 1.79 102 KHOP_HELO_FCRDNS 9921 2.11 3.81 1.78 103 XM_B_SpammyTLD 9887 2.32 5.15 1.77 104 TR_DCC_Bayes_99 9492 4.36 18.02 1.70 105 SUBJ_ALL_CAPS 9447 1.78 2.23 1.69 106 XM_SPF_SoftFail 9345 2.39 6.06 1.68 107 INVALID_MSGID 9283 1.60 1.28 1.66 108 TooManyTo_003 9103 1.47 0.63 1.63 109 RCVD_IN_MSPIKE_L3 9024 2.16 4.92 1.62 110 TVD_RCVD_IP 8619 1.39 0.57 1.55 111 T_XMDrugObfuBody_08 8524 1.93 4.01 1.53 112 XMDiploma_00 8387 1.65 2.41 1.50 113 IN_HORDE_ADDRESS_BOOK 8282 1.25 0.02 1.49 114 TO_MALFORMED 8253 1.27 0.18 1.48 115 XM_GoogleGroups 8004 1.29 0.53 1.44 116 USER_IN_DEF_DKIM_WL 7883 1.18 0.00 1.41 117 XMCapTrack 7302 1.20 0.66 1.31 118 TooManyTo_004 7118 1.15 0.51 1.28 119 RCVD_IN_BL_SPAMCOP_NET 7097 1.78 4.39 1.27 120 URI_HEX 7085 1.45 2.36 1.27 121 CK_HELO_DYNAMIC_SPLIT_IP 6688 1.04 0.21 1.20 122 HELO_DYNAMIC_IPADDR2 6683 1.01 0.05 1.20 123 TR_Symld_Words 6418 1.20 1.44 1.15 124 RELAYCOUNTRY_GB 6395 1.24 1.72 1.15 125 XM_H_Long_From02 6382 1.28 2.00 1.14 126 XMSubMetaSxObfu_03 6244 1.09 0.94 1.12 127 XM_OfRef6 6212 1.45 3.17 1.11 128 TR_MetaPhish_Combo_01 6201 1.16 1.43 1.11 129 DKIM_ADSP_CUSTOM_MED 6193 1.23 1.86 1.11 130 TooManyTo_005 6088 0.99 0.44 1.09 131 BAYES_95 5903 1.38 3.01 1.06 132 XMGenDplmaNmb 5856 1.15 1.67 1.05 133 URI_TRY_3LD 5841 1.17 1.79 1.05 134 TM2_M_VERY_LONG_WORD 5792 1.18 1.93 1.04 135 XMStockSpam_06 5730 1.13 1.67 1.03 136 XMGappySubj_01 5508 0.87 0.26 0.99 137 HTML_FONT_FACE_BAD 5467 0.92 0.63 0.98 138 SpammyFromTLD_01 5252 1.31 3.18 0.94 139 XMSubNoVowel 4673 0.79 0.56 0.84 140 MISSING_HEADERS 4583 0.82 0.81 0.82 141 T_XMDrugObfuBody_00 4517 0.88 1.25 0.81 142 NML_ADSP_CUSTOM_MED 4503 0.93 1.53 0.81 143 HTTPS_HTTP_MISMATCH 4406 0.85 1.15 0.79 144 T_FILL_THIS_FORM_SHORT 4232 0.78 0.88 0.76 145 XM_ProductURIs 4165 0.84 1.31 0.75 146 XMBrknScrpt_02 3894 0.72 0.82 0.70 147 HTML_IMAGE_ONLY_20 3819 0.62 0.31 0.68 148 XMBdyGiftCard01 3758 0.84 1.69 0.67 149 XM_UB50 3753 1.40 5.17 0.67 150 T_OBFU_PDF_ATTACH 3679 0.58 0.14 0.66 151 DIET_1 3677 0.73 1.07 0.66 152 T_XMHurry_00 3671 0.78 1.44 0.66 153 XMPhish08 3572 0.77 1.46 0.64 154 T_TooManySym_03 3548 0.59 0.33 0.64 155 XM_SPF_Unknown 3525 0.95 2.56 0.63 156 XMPhish30 3470 0.94 2.55 0.62 157 XMBody_17 3430 0.94 2.61 0.62 158 XMMoneyMeta_00 3392 0.67 0.98 0.61 159 XMSolicitRefs_0 3377 0.59 0.51 0.61 160 XMHTML_After_End 3360 0.77 1.63 0.60 161 XMSexyCombo_01 3318 0.82 1.96 0.59 162 RELAYCOUNTRY_DE 3254 0.71 1.37 0.58 163 FROM_GOV_DKIM_AU 3199 0.56 0.51 0.57 164 MPART_ALT_DIFF_COUNT 3117 0.64 1.03 0.56 165 XM_DIRTYINTL 3032 0.93 2.91 0.54 166 TR_MSPIKEBAYES00 2977 0.45 0.00 0.53 167 FORGED_GMAIL_RCVD 2894 0.71 1.70 0.52 168 RELAYCOUNTRY_AU 2857 0.53 0.59 0.51 169 RCVD_IN_SORBS_DUL 2807 0.45 0.20 0.50 170 PLING_QUERY 2796 0.52 0.60 0.50 171 XM_ShortIntro_01 2795 0.50 0.50 0.50 172 FROM_GOV_SPOOF 2777 0.46 0.28 0.50 173 XM_H_PHPMailer 2742 0.60 1.14 0.49 174 XM_B_REG_HTML 2667 0.49 0.56 0.48 175 SpammyFromTLD_02 2633 1.21 5.03 0.47 176 TM2_M_A_HREF_HREF 2628 0.51 0.74 0.47 177 T_Symld_Words_02 2603 0.55 1.00 0.47 178 XMSubMetaI_00 2572 0.68 1.79 0.46 179 XMBody_95 2536 0.40 0.13 0.45 180 SHORT_HELO_AND_INLINE_IMAGE 2417 0.37 0.04 0.43 181 HTML_IMAGE_ONLY_28 2370 0.43 0.48 0.42 182 TR_LOTS_OF_MONEY3 2369 0.72 2.22 0.42 183 HTML_TAG_BALANCE_BODY 2367 0.44 0.52 0.42 184 XM_Body_Obfu01 2363 0.42 0.39 0.42 185 HTML_IMAGE_ONLY_32 2251 0.36 0.16 0.40 186 TM2_M_BODY_EMPTY 2244 0.35 0.09 0.40 187 USER_IN_WHITELIST 2235 0.34 0.00 0.40 188 TR_XM_PHPDW 2212 0.65 1.93 0.40 189 XMHTMLBadTable_001 2209 0.42 0.56 0.40 190 MSGID_FROM_MTA_HEADER 2171 0.40 0.46 0.39 191 URI_NOVOWEL 2124 0.46 0.87 0.38 192 TR_XM_PHPForged 2122 0.63 1.91 0.38 193 TR_XM_FormFill2 2115 0.62 1.89 0.38 194 XM_H_PHPOS 2077 0.62 1.88 0.37 195 XMLngstWrd_00 2054 0.46 0.95 0.37 196 XMBody_78 2043 0.44 0.80 0.37 197 REMOVE_BEFORE_LINK 1990 0.47 1.04 0.36 198 TVD_SPACE_RATIO 1988 0.33 0.21 0.36 199 XMSubMetaSxObfu_02 1924 0.35 0.39 0.35 200 XMLKML 1914 0.29 0.00 0.34 ----------------------------------------------------------------------