Email: 624531 Autolearn: 0 AvgScore: 1.52 AvgScanTime: 2.07 sec Spam: 118840 Autolearn: 0 AvgScore: 11.77 AvgScanTime: 3.81 sec Ham: 505691 Autolearn: 0 AvgScore: -0.89 AvgScanTime: 1.66 sec Time Spent Running SA: 359.09 hours Time Spent Processing Spam: 125.81 hours Time Spent Processing Ham: 233.28 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 111688 89.87 93.98 88.90 2 DKIM_SIGNED 99716 76.69 83.91 74.99 3 XM_DK_Pass 96987 75.36 81.61 73.89 4 DCC_CHECK 94092 46.54 79.18 38.86 5 RELAYCOUNTRY_US 91797 80.64 77.24 81.44 6 XM_B_Unicode 89498 70.81 75.31 69.75 7 XMListUnsubscribeExists 85384 54.61 71.85 50.56 8 DKIM_VALID 81664 69.27 68.72 69.40 9 DKIM_VALID_AU 61288 50.22 51.57 49.90 10 XM_DK_Undo_02 53949 14.57 45.40 7.32 11 BAYES_50 53580 53.52 45.09 55.51 12 XM_B_Unicode3 52795 39.71 44.43 38.60 13 LOC_TINY_FONT_1 42660 25.02 35.90 22.46 14 MIME_HTML_ONLY 38083 22.23 32.05 19.92 15 HTML_FONT_LOW_CONTRAST 37634 26.49 31.67 25.28 16 DKIM_VALID_EF 35705 26.86 30.04 26.11 17 FVGT_m_MULTI_ODD 33753 23.02 28.40 21.76 18 BAYES_99 33491 8.04 28.18 3.31 19 T_KAM_HTML_FONT_INVALID 30794 20.59 25.91 19.34 20 XMSubLong 29373 21.77 24.72 21.08 21 BOTNET 27606 6.70 23.23 2.82 22 TR_DCC_Bayes_99 26355 5.56 22.18 1.66 23 RELAYCOUNTRY_META 26124 8.93 21.98 5.87 24 BAYES_999 25664 6.19 21.60 2.57 25 T_TM2_M_HEADER_IN_MSG 25183 28.09 21.19 29.72 26 XM_Body_Dirty_Words 23295 12.47 19.60 10.79 27 DCC_CHECK_NEGATIVE 22685 51.30 19.09 58.87 28 XM_Multi_Part_URI 21068 12.33 17.73 11.06 29 XM_UncommonTLD01 18262 5.62 15.37 3.33 30 DKIM_INVALID 18052 7.42 15.19 5.59 31 BOTNET_IPINHOSTNAME 17681 6.43 14.88 4.44 32 LOTS_OF_MONEY 16780 8.73 14.12 7.46 33 UNTRUSTED_Relay 16312 3.92 13.73 1.62 34 FSL_BULK_SIG 15691 7.84 13.20 6.58 35 HTML_IMAGE_RATIO_02 14104 7.79 11.87 6.83 36 XM_B_Unsub 13890 10.59 11.69 10.33 37 NO_DNS_FOR_FROM 12892 4.51 10.85 3.02 38 XMSexyCombo_05 12640 4.24 10.64 2.74 39 XM_Evil_Numbers_Gen 12267 9.27 10.32 9.02 40 XM_B_Phish_Phrases 11853 8.08 9.97 7.64 41 LotsOfNums_01 11700 8.88 9.85 8.65 42 RCVD_IN_MSPIKE_H2 11336 12.83 9.54 13.60 43 XM_UB50 10454 2.43 8.80 0.94 44 TooManyTo_001 9563 8.91 8.05 9.11 45 BAYES_80 9026 3.99 7.60 3.15 46 XMSubMetaSx_00 8368 3.68 7.04 2.89 47 XM_H_Long_From01 8257 5.92 6.95 5.67 48 MPART_ALT_DIFF 7839 4.75 6.60 4.32 49 BAYES_60 7662 5.96 6.45 5.85 50 HTML_IMAGE_RATIO_04 7626 4.81 6.42 4.43 51 RCVD_IN_MSPIKE_BL 7345 2.67 6.18 1.85 52 MIME_QP_LONG_LINE 7136 6.24 6.00 6.30 53 RCVD_IN_MSPIKE_L3 7023 2.56 5.91 1.77 54 PDS_OTHER_BAD_TLD 6644 1.24 5.59 0.22 55 UNPARSEABLE_RELAY 6546 8.17 5.51 8.80 56 XM_CamelCaseFrm001 6396 2.55 5.38 1.89 57 XM_B_SpammyTLD 6309 2.56 5.31 1.92 58 XM_SPF_SoftFail 6258 2.42 5.27 1.75 59 RELAYCOUNTRY_CA 6160 2.42 5.18 1.77 60 RCVD_IN_BL_SPAMCOP_NET 5734 2.03 4.82 1.37 61 XM_SendGrid 5686 6.37 4.78 6.74 62 FROM_SUSPICIOUS_NTLD 5518 0.93 4.64 0.05 63 FROM_SUSPICIOUS_NTLD_FP 5472 0.91 4.60 0.05 64 MIME_HTML_MOSTLY 5166 2.82 4.35 2.46 65 SpammyFromTLD_02 4987 1.09 4.20 0.37 66 BAYES_95 4822 2.29 4.06 1.87 67 XMNumbers 4536 3.24 3.82 3.10 68 RELAYCOUNTRY_FR 4446 0.90 3.74 0.24 69 KHOP_HELO_FCRDNS 4375 2.30 3.68 1.97 70 TM2_M_URI_OPT_OUT 4349 2.73 3.66 2.51 71 XM_DIRTYINTL 4279 1.08 3.60 0.49 72 XMStrtUSub 4239 3.79 3.57 3.84 73 XM_URI_RBL 4196 0.83 3.53 0.19 74 RCVD_IN_MSPIKE_WL 4193 8.18 3.53 9.27 75 RCVD_IN_MSPIKE_H3 4193 8.18 3.53 9.27 76 T_XMDrugObfuBody_08 4093 1.95 3.44 1.60 77 XMBody_17 3966 1.16 3.34 0.64 78 T_REMOTE_IMAGE 3764 4.04 3.17 4.25 79 URIBL_SBL_A 3675 0.69 3.09 0.13 80 XM_OfRef6 3661 1.50 3.08 1.13 81 BAYES_40 3558 4.99 2.99 5.46 82 FROM_EXCESS_BASE64 3524 2.98 2.97 2.98 83 MIME_HTML_ONLY_MULTI 3518 2.71 2.96 2.66 84 LongTLD 3398 0.71 2.86 0.20 85 BOTNET_NORDNS 3344 0.55 2.81 0.02 86 T_TooManySym_01 3309 4.03 2.78 4.32 87 HTML_IMAGE_RATIO_06 3297 3.81 2.77 4.05 88 NORDNS_LOW_CONTRAST 3274 0.53 2.75 0.01 89 RELAYCOUNTRY_GB 3258 1.49 2.74 1.20 90 SpammyFromTLD_01 3240 1.23 2.73 0.88 91 XMNoVowels 3149 2.05 2.65 1.91 92 XMDiploma_00 3036 1.83 2.55 1.66 93 HTML_IMAGE_RATIO_08 3010 2.37 2.53 2.33 94 XM_B_Unsub2 3004 2.07 2.53 1.96 95 TR_XM_INV_DKIM 2969 0.54 2.50 0.08 96 TR_LOTS_OF_MONEY3 2934 0.83 2.47 0.45 97 TR_XM_MaxBayes 2873 0.47 2.42 0.01 98 BAYES_20 2828 3.90 2.38 4.26 99 HTML_MIME_NO_HTML_TAG 2801 2.59 2.36 2.64 100 RELAYCOUNTRY_DE 2780 0.88 2.34 0.54 101 RCVD_IN_RP_RNBL 2733 0.48 2.30 0.06 102 XMStockSpam_06 2589 1.14 2.18 0.89 103 XMSexyCombo_01 2555 0.72 2.15 0.39 104 URI_HEX 2487 1.65 2.09 1.54 105 RCVD_IN_IADB_LISTED 2431 4.93 2.05 5.60 106 TR_XM_DK_SendGrid 2375 3.09 2.00 3.34 107 BAYES_00 2347 14.77 1.97 17.77 108 RCVD_IN_IADB_SPF 2300 4.29 1.94 4.84 109 T_XMHurry_00 2292 0.91 1.93 0.68 110 TM2_M_VERY_LONG_WORD 2272 1.30 1.91 1.16 111 DATE_IN_PAST_03_06 2239 0.41 1.88 0.07 112 RCVD_IN_IADB_DK 2233 3.74 1.88 4.18 113 RCVD_IN_IADB_SENDERID 2232 3.76 1.88 4.20 114 TR_Symld_Words 2207 1.44 1.86 1.34 115 MAILING_LIST_MULTI 2194 2.65 1.85 2.84 116 TR_XM_PHPDW 2177 1.17 1.83 1.01 117 RCVD_IN_RP_SAFE 2172 6.55 1.83 7.66 118 TR_XM_PHPForged 2151 1.15 1.81 1.00 119 TR_XM_FormFill2 2138 1.15 1.80 1.00 120 XM_H_PHPOS 2132 1.14 1.79 0.99 121 T_XMDrugObfuBody_14 2130 1.88 1.79 1.90 122 ALL_TRUSTED 2102 12.27 1.77 14.74 123 REPLYTO_WITHOUT_TO_CC 2031 0.45 1.71 0.16 124 DATE_IN_PAST_06_12 2029 0.45 1.71 0.15 125 RDNS_DYNAMIC 2005 0.61 1.69 0.35 126 TR_XM_RelayPhish 1967 0.50 1.66 0.23 127 XMGenDplmaNmb 1948 1.14 1.64 1.03 128 DKIM_ADSP_CUSTOM_MED 1919 1.29 1.61 1.21 129 URI_TRY_3LD 1900 1.25 1.60 1.17 130 TR_XM_DK_Bayes 1897 10.26 1.60 12.30 131 XMSubMetaI_00 1865 1.09 1.57 0.98 132 XMHTML_After_End 1857 0.86 1.56 0.69 133 SUBJ_ALL_CAPS 1833 1.50 1.54 1.49 134 XM_H_TOP 1800 0.29 1.51 0.00 135 TR_MetaPhish_Combo_01 1773 1.29 1.49 1.24 136 XM_DK_Undo_01 1772 1.88 1.49 1.97 137 T_FILL_THIS_FORM_SHORT 1734 0.92 1.46 0.79 138 FORGED_GMAIL_RCVD 1731 0.71 1.46 0.53 139 TR_Mismatch_TLD_01 1716 0.46 1.44 0.22 140 T_XMDrugObfuBody_00 1673 0.78 1.41 0.63 141 REMOVE_BEFORE_LINK 1657 0.50 1.39 0.30 142 NML_ADSP_CUSTOM_MED 1652 0.97 1.39 0.88 143 XM_UB60 1644 0.33 1.38 0.08 144 RCVD_IN_RP_CERTIFIED 1636 5.90 1.38 6.97 145 TR_XM_MaxSPIKE 1628 0.31 1.37 0.06 146 MISSING_HEADERS 1577 0.87 1.33 0.76 147 TR_Mismatch_TLD_02 1572 0.33 1.32 0.10 148 XMPhish08 1567 0.74 1.32 0.60 149 BAYES_05 1526 2.53 1.28 2.83 150 FROM_MISSP_REPLYTO 1467 0.24 1.23 0.01 151 XM_ProductURIs 1426 0.76 1.20 0.66 152 XMBdyGiftCard01 1419 0.95 1.19 0.89 153 XM_H_Long_From02 1346 1.09 1.13 1.08 154 DIET_1 1328 0.61 1.12 0.49 155 XM_Nigeria_01 1304 0.25 1.10 0.05 156 MONEY_FRAUD_8 1300 0.21 1.09 0.00 157 XM_UB99 1297 0.21 1.09 0.00 158 XMPhish30 1296 0.50 1.09 0.36 159 TR_XM_DK_Bayes1 1284 9.50 1.08 11.47 160 RELAYCOUNTRY_AU 1284 0.61 1.08 0.49 161 RCVD_IN_PSBL 1282 0.25 1.08 0.06 162 HTTPS_HTTP_MISMATCH 1274 1.03 1.07 1.02 163 XM_H_PHPMailer 1248 0.57 1.05 0.46 164 XM_OfRef7 1207 0.34 1.02 0.18 165 XM_H_MailChimp 1189 0.36 1.00 0.21 166 TR_LOTS_OF_MONEY1 1189 0.23 1.00 0.05 167 TR_XM_DK_Bayes2 1179 8.32 0.99 10.04 168 HTML_TAG_BALANCE_CENTER 1155 0.36 0.97 0.22 169 XMMoneyMeta_00 1140 0.77 0.96 0.72 170 XM_PDF 1140 4.10 0.96 4.83 171 LONG_IMG_URI 1124 0.22 0.95 0.05 172 DATE_IN_PAST_24_48 1115 0.19 0.94 0.02 173 HEXHASH_WORD 1107 0.18 0.93 0.00 174 MPART_ALT_DIFF_COUNT 1103 0.56 0.93 0.48 175 FROM_MISSP_DYNIP 1102 0.18 0.93 0.00 176 BILLION_DOLLARS 1093 0.19 0.92 0.02 177 XMBrknScrpt_02 1049 0.91 0.88 0.92 178 XM_UB80 1039 0.18 0.87 0.02 179 AC_SPAMMY_URI_PATTERNS8 1035 0.17 0.87 0.00 180 TR_LOTS_OF_MONEY2 1025 0.36 0.86 0.24 181 T_MONEY_PERCENT 1025 0.36 0.86 0.24 182 T_TooManySym_02 1022 1.89 0.86 2.13 183 LOW_PRICE 986 0.44 0.83 0.35 184 LONG_HEX_URI 984 0.37 0.83 0.26 185 XM_H_PHPOS_M 969 0.28 0.82 0.16 186 PLING_QUERY 962 0.51 0.81 0.44 187 DATE_IN_PAST_12_24 957 0.19 0.81 0.04 188 XMSlimDrugH 946 0.40 0.80 0.31 189 HK_RANDOM_REPLYTO 940 0.34 0.79 0.23 190 XMSubMetaSxObfu_03 925 0.44 0.78 0.36 191 URIBL_BLACK 922 0.16 0.78 0.02 192 XMSexyCombo_04 904 0.22 0.76 0.09 193 HTML_TAG_BALANCE_BODY 893 0.47 0.75 0.40 194 XMBody_78 874 0.40 0.74 0.32 195 XM_H_Undi_Recip 862 0.37 0.73 0.28 196 XM_XX_Yahoo 861 0.18 0.72 0.05 197 TM2_M_A_HREF_HREF 844 0.42 0.71 0.35 198 HTML_SHORT_LINK_IMG_1 838 0.14 0.71 0.01 199 XM_HighProb1 834 0.14 0.70 0.00 200 XM_SPF_Unknown 830 0.67 0.70 0.67 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 449555 89.87 93.98 88.90 2 RELAYCOUNTRY_US 411839 80.64 77.24 81.44 3 DKIM_SIGNED 379215 76.69 83.91 74.99 4 XM_DK_Pass 373664 75.36 81.61 73.89 5 XM_B_Unicode 352714 70.81 75.31 69.75 6 DKIM_VALID 350938 69.27 68.72 69.40 7 DCC_CHECK_NEGATIVE 297693 51.30 19.09 58.87 8 BAYES_50 280688 53.52 45.09 55.51 9 XMListUnsubscribeExists 255656 54.61 71.85 50.56 10 DKIM_VALID_AU 252352 50.22 51.57 49.90 11 DCC_CHECK 196536 46.54 79.18 38.86 12 XM_B_Unicode3 195206 39.71 44.43 38.60 13 T_TM2_M_HEADER_IN_MSG 150273 28.09 21.19 29.72 14 DKIM_VALID_EF 132043 26.86 30.04 26.11 15 HTML_FONT_LOW_CONTRAST 127827 26.49 31.67 25.28 16 LOC_TINY_FONT_1 113594 25.02 35.90 22.46 17 FVGT_m_MULTI_ODD 110026 23.02 28.40 21.76 18 XMSubLong 106609 21.77 24.72 21.08 19 MIME_HTML_ONLY 100754 22.23 32.05 19.92 20 T_KAM_HTML_FONT_INVALID 97779 20.59 25.91 19.34 21 BAYES_00 89885 14.77 1.97 17.77 22 ALL_TRUSTED 74518 12.27 1.77 14.74 23 RCVD_IN_MSPIKE_H2 68782 12.83 9.54 13.60 24 TR_XM_DK_Bayes 62182 10.26 1.60 12.30 25 TR_XM_DK_Bayes1 58016 9.50 1.08 11.47 26 XM_Multi_Part_URI 55951 12.33 17.73 11.06 27 XM_Body_Dirty_Words 54569 12.47 19.60 10.79 28 XM_B_Unsub 52251 10.59 11.69 10.33 29 TR_XM_DK_Bayes2 50755 8.32 0.99 10.04 30 RCVD_IN_MSPIKE_H3 46902 8.18 3.53 9.27 31 RCVD_IN_MSPIKE_WL 46902 8.18 3.53 9.27 32 TooManyTo_001 46066 8.91 8.05 9.11 33 XM_Evil_Numbers_Gen 45615 9.27 10.32 9.02 34 UNPARSEABLE_RELAY 44490 8.17 5.51 8.80 35 LotsOfNums_01 43738 8.88 9.85 8.65 36 RCVD_IN_RP_SAFE 38712 6.55 1.83 7.66 37 XM_B_Phish_Phrases 38621 8.08 9.97 7.64 38 LOTS_OF_MONEY 37749 8.73 14.12 7.46 39 XM_DK_Undo_02 37018 14.57 45.40 7.32 40 RCVD_IN_RP_CERTIFIED 35235 5.90 1.38 6.97 41 HTML_IMAGE_RATIO_02 34546 7.79 11.87 6.83 42 XM_SendGrid 34083 6.37 4.78 6.74 43 FSL_BULK_SIG 33269 7.84 13.20 6.58 44 XM_DKIMWhitelistDomains 32311 5.18 0.04 6.39 45 MIME_QP_LONG_LINE 31849 6.24 6.00 6.30 46 RELAYCOUNTRY_META 29669 8.93 21.98 5.87 47 BAYES_60 29588 5.96 6.45 5.85 48 XM_H_Long_From01 28695 5.92 6.95 5.67 49 RCVD_IN_IADB_LISTED 28337 4.93 2.05 5.60 50 DKIM_INVALID 28277 7.42 15.19 5.59 51 BAYES_40 27588 4.99 2.99 5.46 52 RCVD_IN_IADB_SPF 24482 4.29 1.94 4.84 53 XM_PDF 24450 4.10 0.96 4.83 54 BOTNET_IPINHOSTNAME 22461 6.43 14.88 4.44 55 HTML_IMAGE_RATIO_04 22424 4.81 6.42 4.43 56 MPART_ALT_DIFF 21853 4.75 6.60 4.32 57 T_TooManySym_01 21848 4.03 2.78 4.32 58 BAYES_20 21525 3.90 2.38 4.26 59 T_REMOTE_IMAGE 21485 4.04 3.17 4.25 60 RCVD_IN_IADB_SENDERID 21229 3.76 1.88 4.20 61 RCVD_IN_IADB_DK 21144 3.74 1.88 4.18 62 HTML_IMAGE_RATIO_06 20502 3.81 2.77 4.05 63 XMStrtUSub 19429 3.79 3.57 3.84 64 RCVD_IN_IADB_VOUCHED 18506 3.08 0.63 3.66 65 IN_ZIMBRA_NJ_WHITELIST 17712 2.84 0.01 3.50 66 TR_XM_DK_SendGrid 16914 3.09 2.00 3.34 67 XM_UncommonTLD01 16821 5.62 15.37 3.33 68 BAYES_99 16732 8.04 28.18 3.31 69 BAYES_80 15916 3.99 7.60 3.15 70 XMNumbers 15678 3.24 3.82 3.10 71 NO_DNS_FOR_FROM 15297 4.51 10.85 3.02 72 FROM_EXCESS_BASE64 15078 2.98 2.97 2.98 73 XMSubMetaSx_00 14602 3.68 7.04 2.89 74 MAILING_LIST_MULTI 14338 2.65 1.85 2.84 75 BAYES_05 14300 2.53 1.28 2.83 76 BOTNET 14260 6.70 23.23 2.82 77 XMSexyCombo_05 13853 4.24 10.64 2.74 78 MIME_HTML_ONLY_MULTI 13428 2.71 2.96 2.66 79 HTML_MIME_NO_HTML_TAG 13373 2.59 2.36 2.64 80 TooManyTo_002 13299 2.26 0.70 2.63 81 XM_H_Trusted_IP 13054 2.09 0.00 2.58 82 BAYES_999 13011 6.19 21.60 2.57 83 TM2_M_URI_OPT_OUT 12709 2.73 3.66 2.51 84 MIME_HTML_MOSTLY 12447 2.82 4.35 2.46 85 ANY_BOUNCE_MESSAGE 12439 2.06 0.37 2.46 86 BOUNCE_MESSAGE 12411 2.06 0.36 2.45 87 HTML_IMAGE_RATIO_08 11779 2.37 2.53 2.33 88 RCVD_IN_IADB_OPTIN 11404 1.92 0.48 2.26 89 T_TooManySym_02 10774 1.89 0.86 2.13 90 KHOP_HELO_FCRDNS 9970 2.30 3.68 1.97 91 TVD_RCVD_IP 9963 1.68 0.44 1.97 92 XM_DK_Undo_01 9944 1.88 1.49 1.97 93 XM_B_Unsub2 9901 2.07 2.53 1.96 94 XM_B_SpammyTLD 9689 2.56 5.31 1.92 95 XMNoVowels 9664 2.05 2.65 1.91 96 T_XMDrugObfuBody_14 9604 1.88 1.79 1.90 97 XM_CamelCaseFrm001 9538 2.55 5.38 1.89 98 TooManyTo_003 9509 1.63 0.58 1.88 99 BAYES_95 9463 2.29 4.06 1.87 100 RCVD_IN_MSPIKE_BL 9339 2.67 6.18 1.85 101 RCVD_IN_MSPIKE_L3 8946 2.56 5.91 1.77 102 RELAYCOUNTRY_CA 8937 2.42 5.18 1.77 103 XM_SPF_SoftFail 8833 2.42 5.27 1.75 104 HELO_NODOT 8707 1.52 0.64 1.72 105 HELO_NO_DOMAIN 8704 1.52 0.64 1.72 106 TR_DCC_Bayes_99 8397 5.56 22.18 1.66 107 XMDiploma_00 8370 1.83 2.55 1.66 108 UNTRUSTED_Relay 8168 3.92 13.73 1.62 109 T_XMDrugObfuBody_08 8102 1.95 3.44 1.60 110 IN_HORDE_ADDRESS_BOOK 8039 1.29 0.04 1.59 111 URI_HEX 7795 1.65 2.09 1.54 112 INVALID_MSGID 7732 1.28 0.21 1.53 113 USER_IN_DEF_DKIM_WL 7675 1.23 0.00 1.52 114 SUBJ_ALL_CAPS 7543 1.50 1.54 1.49 115 CK_HELO_DYNAMIC_SPLIT_IP 7542 1.24 0.15 1.49 116 HELO_DYNAMIC_IPADDR2 7534 1.22 0.05 1.49 117 TooManyTo_004 7491 1.29 0.49 1.48 118 TO_MALFORMED 7172 1.23 0.42 1.42 119 XM_GoogleGroups 7167 1.24 0.50 1.42 120 XMCapTrack 7070 1.23 0.53 1.40 121 RCVD_IN_BL_SPAMCOP_NET 6929 2.03 4.82 1.37 122 TR_Symld_Words 6784 1.44 1.86 1.34 123 TR_MetaPhish_Combo_01 6255 1.29 1.49 1.24 124 TooManyTo_005 6254 1.07 0.37 1.24 125 DKIM_ADSP_CUSTOM_MED 6108 1.29 1.61 1.21 126 RELAYCOUNTRY_GB 6050 1.49 2.74 1.20 127 URI_TRY_3LD 5898 1.25 1.60 1.17 128 TM2_M_VERY_LONG_WORD 5850 1.30 1.91 1.16 129 XM_OfRef6 5692 1.50 3.08 1.13 130 XM_H_Long_From02 5457 1.09 1.13 1.08 131 XMSubNoVowel 5442 0.99 0.62 1.08 132 XMGappySubj_01 5257 0.89 0.24 1.04 133 XMGenDplmaNmb 5190 1.14 1.64 1.03 134 HTTPS_HTTP_MISMATCH 5133 1.03 1.07 1.02 135 TR_XM_PHPDW 5124 1.17 1.83 1.01 136 TR_XM_FormFill2 5037 1.15 1.80 1.00 137 TR_XM_PHPForged 5036 1.15 1.81 1.00 138 XM_H_PHPOS 5014 1.14 1.79 0.99 139 XMSubMetaI_00 4940 1.09 1.57 0.98 140 HTML_FONT_FACE_BAD 4831 0.89 0.62 0.96 141 XM_UB50 4729 2.43 8.80 0.94 142 XMBrknScrpt_02 4647 0.91 0.88 0.92 143 XMBdyGiftCard01 4514 0.95 1.19 0.89 144 XMStockSpam_06 4503 1.14 2.18 0.89 145 NML_ADSP_CUSTOM_MED 4429 0.97 1.39 0.88 146 SpammyFromTLD_01 4429 1.23 2.73 0.88 147 T_FILL_THIS_FORM_SHORT 3985 0.92 1.46 0.79 148 MISSING_HEADERS 3833 0.87 1.33 0.76 149 TO_NO_BRKTS_HTML_ONLY 3704 0.63 0.18 0.73 150 TR_MSPIKEBAYES00 3670 0.59 0.00 0.73 151 XMMoneyMeta_00 3658 0.77 0.96 0.72 152 XMHTML_After_End 3498 0.86 1.56 0.69 153 T_XMHurry_00 3422 0.91 1.93 0.68 154 XM_SPF_Unknown 3368 0.67 0.70 0.67 155 XM_ProductURIs 3332 0.76 1.20 0.66 156 T_TooManySym_03 3260 0.58 0.31 0.64 157 XMBody_17 3258 1.16 3.34 0.64 158 FROM_GOV_DKIM_AU 3247 0.57 0.25 0.64 159 T_XMDrugObfuBody_00 3205 0.78 1.41 0.63 160 XM_B_REG_HTML 3133 0.57 0.34 0.62 161 THIS_AD 3063 0.59 0.52 0.61 162 XM_ShortIntro_01 3061 0.57 0.45 0.61 163 XMPhish08 3043 0.74 1.32 0.60 164 RCVD_IN_SORBS_DUL 2914 0.49 0.11 0.58 165 RELAYCOUNTRY_DE 2737 0.88 2.34 0.54 166 FORGED_GMAIL_RCVD 2691 0.71 1.46 0.53 167 T_OBFU_PDF_ATTACH 2682 0.47 0.20 0.53 168 T_Symld_Words_02 2621 0.54 0.63 0.52 169 TM2_M_BODY_EMPTY 2516 0.46 0.30 0.50 170 RELAYCOUNTRY_AU 2496 0.61 1.08 0.49 171 XMHTMLBadTable_001 2475 0.51 0.59 0.49 172 XM_DIRTYINTL 2465 1.08 3.60 0.49 173 DIET_1 2453 0.61 1.12 0.49 174 MPART_ALT_DIFF_COUNT 2404 0.56 0.93 0.48 175 XM_H_PHPMailer 2341 0.57 1.05 0.46 176 TR_LOTS_OF_MONEY3 2272 0.83 2.47 0.45 177 FROM_GOV_SPOOF 2260 0.40 0.18 0.45 178 HTML_IMAGE_ONLY_20 2254 0.45 0.45 0.45 179 HTML_IMAGE_ONLY_32 2248 0.46 0.53 0.44 180 HTML_IMAGE_ONLY_28 2237 0.49 0.67 0.44 181 PLING_QUERY 2200 0.51 0.81 0.44 182 SHORT_HELO_AND_INLINE_IMAGE 2142 0.35 0.04 0.42 183 XM_USANA_RCVD 2123 0.34 0.00 0.42 184 AC_DIV_BONANZA 2109 0.36 0.09 0.42 185 USER_IN_WHITELIST 2054 0.33 0.00 0.41 186 HTML_TAG_BALANCE_BODY 2014 0.47 0.75 0.40 187 URI_NOVOWEL 1979 0.42 0.53 0.39 188 XMSexyCombo_01 1970 0.72 2.15 0.39 189 XMLngstWrd_00 1908 0.38 0.37 0.38 190 SpammyFromTLD_02 1847 1.09 4.20 0.37 191 XMPhish30 1842 0.50 1.09 0.36 192 MSGID_FROM_MTA_HEADER 1827 0.37 0.43 0.36 193 XMSubMetaSxObfu_03 1811 0.44 0.78 0.36 194 XMLKML 1803 0.29 0.00 0.36 195 RDNS_DYNAMIC 1792 0.61 1.69 0.35 196 XMDateMe_00 1775 0.36 0.41 0.35 197 XMPhish14 1769 0.41 0.65 0.35 198 LOW_PRICE 1762 0.44 0.83 0.35 199 TM2_M_A_HREF_HREF 1758 0.42 0.71 0.35 200 XM_Body_Obfu01 1738 0.36 0.42 0.34 ----------------------------------------------------------------------