Email: 360840 Autolearn: 0 AvgScore: 1.30 AvgScanTime: 2.24 sec Spam: 72176 Autolearn: 0 AvgScore: 11.98 AvgScanTime: 3.87 sec Ham: 288664 Autolearn: 0 AvgScore: -1.37 AvgScanTime: 1.83 sec Time Spent Running SA: 224.21 hours Time Spent Processing Spam: 77.54 hours Time Spent Processing Ham: 146.66 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 68132 88.52 94.40 87.06 2 DKIM_SIGNED 58731 80.30 81.37 80.03 3 DCC_CHECK 58203 54.69 80.64 48.21 4 XM_DK_Pass 57357 78.97 79.47 78.84 5 RELAYCOUNTRY_US 56668 81.59 78.51 82.36 6 XM_B_Unicode 53481 72.57 74.10 72.18 7 XMListUnsubscribeExists 51098 60.00 70.80 57.29 8 DKIM_VALID 48783 73.36 67.59 74.81 9 DKIM_VALID_AU 38241 58.00 52.98 59.26 10 XM_DK_Undo_02 31739 14.81 43.97 7.52 11 BAYES_50 30999 51.35 42.95 53.45 12 XM_B_Unicode3 29507 41.50 40.88 41.65 13 MIME_HTML_ONLY 27265 25.01 37.78 21.82 14 LOC_TINY_FONT_1 24966 30.24 34.59 29.15 15 HTML_FONT_LOW_CONTRAST 22314 30.98 30.92 30.99 16 DKIM_VALID_EF 21361 28.31 29.60 27.99 17 BAYES_99 20783 8.67 28.79 3.63 18 T_KAM_HTML_FONT_INVALID 19282 20.00 26.72 18.32 19 FVGT_m_MULTI_ODD 18118 23.13 25.10 22.64 20 XMSubLong 16559 21.42 22.94 21.04 21 BAYES_999 16498 6.78 22.86 2.76 22 TR_DCC_Bayes_99 16228 6.03 22.48 1.91 23 RELAYCOUNTRY_META 15989 8.89 22.15 5.57 24 BOTNET 14426 6.41 19.99 3.02 25 XM_Multi_Part_URI 13985 14.58 19.38 13.38 26 DCC_CHECK_NEGATIVE 12814 43.89 17.75 50.43 27 XM_UncommonTLD01 12505 6.65 17.33 3.98 28 T_TM2_M_HEADER_IN_MSG 12187 21.94 16.89 23.20 29 XM_Body_Dirty_Words 11911 13.42 16.50 12.65 30 FSL_BULK_SIG 10972 9.37 15.20 7.91 31 HTML_IMAGE_RATIO_02 10343 10.43 14.33 9.45 32 LOTS_OF_MONEY 10193 9.85 14.12 8.78 33 UNTRUSTED_Relay 10125 4.10 14.03 1.62 34 DKIM_INVALID 9948 6.93 13.78 5.22 35 BOTNET_IPINHOSTNAME 9821 7.82 13.61 6.38 36 XM_B_Unsub 8040 10.53 11.14 10.38 37 NO_DNS_FOR_FROM 7497 4.29 10.39 2.76 38 XM_Evil_Numbers_Gen 7256 9.60 10.05 9.48 39 XMSexyCombo_05 7044 5.04 9.76 3.86 40 RCVD_IN_MSPIKE_H2 6745 13.07 9.35 14.00 41 XM_UB50 6367 2.51 8.82 0.93 42 XM_B_Phish_Phrases 5923 7.80 8.21 7.70 43 MPART_ALT_DIFF 5857 5.75 8.11 5.16 44 TooManyTo_001 5562 8.00 7.71 8.08 45 XM_H_Long_From01 5482 6.05 7.60 5.66 46 BAYES_80 5452 4.10 7.55 3.23 47 BAYES_60 5320 5.95 7.37 5.60 48 XMSubMetaSx_00 5280 4.28 7.32 3.52 49 KHOP_HELO_FCRDNS 5268 2.50 7.30 1.30 50 RCVD_IN_MSPIKE_BL 5193 3.02 7.19 1.97 51 LotsOfNums_01 5060 8.50 7.01 8.87 52 RCVD_IN_MSPIKE_L3 4978 2.94 6.90 1.95 53 XMHTML_After_End 4559 1.69 6.32 0.53 54 XM_CamelCaseFrm001 4497 2.90 6.23 2.06 55 XM_SPF_SoftFail 4434 2.17 6.14 1.17 56 UNPARSEABLE_RELAY 4414 10.04 6.12 11.02 57 RELAYCOUNTRY_CA 4385 3.13 6.08 2.39 58 PDS_OTHER_BAD_TLD 4345 1.35 6.02 0.18 59 HTML_IMAGE_RATIO_04 4198 5.72 5.82 5.70 60 FROM_SUSPICIOUS_NTLD 4143 1.20 5.74 0.07 61 FROM_SUSPICIOUS_NTLD_FP 4121 1.19 5.71 0.06 62 RDNS_DYNAMIC 3999 1.44 5.54 0.41 63 BODY_URI_ONLY 3777 1.08 5.23 0.04 64 XMBody_17 3703 1.64 5.13 0.77 65 DKIM_ADSP_NXDOMAIN 3572 1.25 4.95 0.32 66 XM_SendGrid 3534 6.80 4.90 7.28 67 XMStrtUSub 3510 4.02 4.86 3.81 68 MIME_HTML_MOSTLY 3508 3.06 4.86 2.61 69 URIBL_SBL_A 3269 1.03 4.53 0.15 70 LongTLD 2957 1.02 4.10 0.25 71 XM_B_SpammyTLD 2914 2.15 4.04 1.68 72 RELAYCOUNTRY_FR 2738 1.01 3.79 0.31 73 DATE_IN_PAST_03_06 2724 0.81 3.77 0.06 74 MIME_QP_LONG_LINE 2687 4.73 3.72 4.98 75 SpammyFromTLD_02 2667 0.87 3.70 0.16 76 MIME_HTML_ONLY_MULTI 2659 2.99 3.68 2.82 77 SpammyFromTLD_01 2602 1.21 3.61 0.61 78 BAYES_95 2550 2.29 3.53 1.99 79 RCVD_IN_BL_SPAMCOP_NET 2482 1.57 3.44 1.10 80 TR_XM_MaxBayes 2465 0.69 3.42 0.01 81 T_TooManySym_01 2458 5.24 3.41 5.70 82 T_XMHurry_00 2456 1.34 3.40 0.82 83 XMNumbers 2439 3.29 3.38 3.27 84 HTML_IMAGE_RATIO_08 2436 2.62 3.38 2.43 85 HTML_IMAGE_RATIO_06 2365 3.64 3.28 3.73 86 TR_LOTS_OF_MONEY3 2340 1.40 3.24 0.94 87 XM_OfRef6 2335 1.64 3.24 1.24 88 T_XMDrugObfuBody_08 2328 1.74 3.23 1.37 89 BAYES_40 2293 4.95 3.18 5.39 90 TM2_M_URI_OPT_OUT 2259 3.05 3.13 3.03 91 RCVD_IN_RP_RNBL 2152 0.65 2.98 0.07 92 DATE_IN_PAST_06_12 2143 0.79 2.97 0.25 93 URI_TRY_3LD 2100 2.24 2.91 2.07 94 XM_DIRTYINTL 2061 0.98 2.86 0.51 95 XMNoVowels 2049 1.75 2.84 1.48 96 BILLION_DOLLARS 2030 0.59 2.81 0.03 97 SUBJ_ALL_CAPS 2027 1.94 2.81 1.72 98 FROM_EXCESS_BASE64 1969 3.88 2.73 4.17 99 TR_XM_PHPDW 1952 0.89 2.70 0.43 100 BAYES_00 1922 16.29 2.66 19.70 101 TR_XM_PHPForged 1904 0.86 2.64 0.41 102 TR_XM_FormFill2 1891 0.85 2.62 0.41 103 XM_H_PHPOS 1886 0.85 2.61 0.40 104 RCVD_IN_MSPIKE_H3 1841 8.17 2.55 9.58 105 RCVD_IN_MSPIKE_WL 1841 8.17 2.55 9.58 106 T_REMOTE_IMAGE 1827 3.66 2.53 3.95 107 XM_URI_RBL 1814 0.67 2.51 0.21 108 XM_B_Unsub2 1797 2.11 2.49 2.01 109 BAYES_20 1758 3.89 2.44 4.25 110 URI_HEX 1670 1.64 2.31 1.47 111 RCVD_IN_RP_SAFE 1593 9.68 2.21 11.55 112 TR_XM_INV_DKIM 1574 0.50 2.18 0.09 113 TR_XM_DK_Bayes 1554 12.78 2.15 15.44 114 TR_Mismatch_TLD_02 1551 0.49 2.15 0.08 115 RELAYCOUNTRY_DE 1397 0.68 1.94 0.37 116 ALL_TRUSTED 1394 11.14 1.93 13.45 117 TR_XM_DK_SendGrid 1344 3.26 1.86 3.61 118 XMSexyCombo_01 1343 0.81 1.86 0.54 119 TR_Mismatch_TLD_01 1293 0.55 1.79 0.24 120 TM2_M_VERY_LONG_WORD 1226 1.52 1.70 1.47 121 DATE_IN_PAST_12_24 1218 0.39 1.69 0.06 122 HTML_MIME_NO_HTML_TAG 1188 1.48 1.65 1.43 123 XMSubMetaI_00 1149 0.72 1.59 0.50 124 TR_XM_MaxSPIKE 1149 0.39 1.59 0.09 125 RELAYCOUNTRY_IN 1147 0.37 1.59 0.06 126 XMDiploma_00 1121 1.31 1.55 1.25 127 TR_XM_DK_Bayes1 1100 11.90 1.52 14.49 128 BAYES_05 1091 2.50 1.51 2.75 129 NORDNS_LOW_CONTRAST 1086 0.31 1.50 0.01 130 DIET_1 1083 0.79 1.50 0.61 131 RCVD_IN_IADB_LISTED 1048 3.45 1.45 3.94 132 TooManyTo_002 1042 1.89 1.44 2.00 133 RCVD_IN_RP_CERTIFIED 1041 8.69 1.44 10.50 134 BOTNET_NORDNS 1037 0.29 1.44 0.01 135 T_XMDrugObfuBody_00 1025 0.96 1.42 0.84 136 XM_H_PHPMailer 1021 0.71 1.41 0.54 137 XMStockSpam_06 987 0.94 1.37 0.83 138 XM_UB60 983 0.33 1.36 0.07 139 XM_ProductURIs 968 1.14 1.34 1.09 140 TR_Symld_Words 967 1.19 1.34 1.15 141 MPART_ALT_DIFF_COUNT 920 0.73 1.27 0.60 142 TooManyTo_003 916 1.50 1.27 1.55 143 NO_FM_NAME_IP_HOSTN 916 0.25 1.27 0.00 144 RCVD_IN_IADB_SPF 888 2.99 1.23 3.43 145 RCVD_IN_PSBL 878 0.32 1.22 0.10 146 T_XMDrugObfuBody_14 876 1.37 1.21 1.41 147 RCVD_IN_IADB_SENDERID 872 2.67 1.21 3.04 148 URIBL_BLACK 868 0.25 1.20 0.01 149 RCVD_IN_IADB_DK 865 2.61 1.20 2.97 150 T_FILL_THIS_FORM_SHORT 859 0.85 1.19 0.76 151 MAILING_LIST_MULTI 857 2.19 1.19 2.44 152 XM_DK_Undo_01 830 1.50 1.15 1.59 153 HTML_FONT_SIZE_HUGE 817 0.33 1.13 0.14 154 DKIM_ADSP_CUSTOM_MED 816 1.22 1.13 1.24 155 TR_XM_RelayPhish 801 0.41 1.11 0.24 156 TooManyTo_004 790 1.27 1.09 1.31 157 LOW_PRICE 790 0.66 1.09 0.56 158 XM_H_PHPOS_M 787 0.39 1.09 0.22 159 RELAYCOUNTRY_GB 776 0.92 1.08 0.88 160 HTML_TAG_BALANCE_CENTER 768 0.30 1.06 0.12 161 XMPhish30 745 0.51 1.03 0.38 162 XM_H_TOP 737 0.21 1.02 0.01 163 XMReplyNow 737 0.30 1.02 0.12 164 XMGenDplmaNmb 733 0.85 1.02 0.81 165 XM_OfRef7 723 0.30 1.00 0.13 166 XMSubNoVowel 710 0.82 0.98 0.77 167 NML_ADSP_CUSTOM_MED 701 0.89 0.97 0.87 168 XMSubMetaSxObfu_04 699 0.40 0.97 0.26 169 FORGED_GMAIL_RCVD 699 0.65 0.97 0.57 170 XMSubMetaSSx_00 697 0.37 0.97 0.22 171 XM_UB99 683 0.19 0.95 0.00 172 DATE_IN_PAST_24_48 682 0.22 0.94 0.03 173 RELAYCOUNTRY_NL 675 0.34 0.94 0.20 174 XMMoneyMeta_00 673 0.43 0.93 0.30 175 SUBJECT_NEEDS_ENCODING 651 0.18 0.90 0.00 176 SUBJ_ILLEGAL_CHARS 649 0.18 0.90 0.00 177 XMBrknScrpt_02 646 0.69 0.90 0.64 178 XMBdyGiftCard01 632 1.28 0.88 1.38 179 URIBL_DBL_SPAM 628 0.20 0.87 0.03 180 ADMITS_SPAM 626 0.25 0.87 0.09 181 XMSubEmpty 625 0.37 0.87 0.24 182 REMOVE_BEFORE_LINK 620 0.32 0.86 0.19 183 XMPhish08 615 0.62 0.85 0.56 184 SHORT_SHORTNER 612 0.20 0.85 0.04 185 XM_BadFromFormat 612 0.32 0.85 0.18 186 DEAR_FRIEND 611 0.29 0.85 0.15 187 HTML_FONT_FACE_BAD 611 0.95 0.85 0.97 188 TooManyTo_005 609 1.10 0.84 1.16 189 XM_CreditScore_03 594 0.20 0.82 0.04 190 HTML_COMMENT_SAVED_URL 589 0.24 0.82 0.10 191 XM_B_COPY_HTML 584 0.43 0.81 0.33 192 TR_XM_DK_Bayes2 564 10.98 0.78 13.53 193 XM_UB80 556 0.17 0.77 0.02 194 T_TooManySym_02 556 2.34 0.77 2.74 195 RELAYCOUNTRY_AT 554 0.35 0.77 0.24 196 TR_LOTS_OF_MONEY2 551 0.54 0.76 0.49 197 T_MONEY_PERCENT 551 0.54 0.76 0.49 198 RELAYCOUNTRY_VN 550 0.16 0.76 0.01 199 URI_WP_HACKED_2 549 0.22 0.76 0.09 200 XM_H_Long_From02 543 1.08 0.75 1.16 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 251299 88.52 94.40 87.06 2 RELAYCOUNTRY_US 237740 81.59 78.51 82.36 3 DKIM_SIGNED 231017 80.30 81.37 80.03 4 XM_DK_Pass 227585 78.97 79.47 78.84 5 DKIM_VALID 215946 73.36 67.59 74.81 6 XM_B_Unicode 208366 72.57 74.10 72.18 7 DKIM_VALID_AU 171059 58.00 52.98 59.26 8 XMListUnsubscribeExists 165388 60.00 70.80 57.29 9 BAYES_50 154301 51.35 42.95 53.45 10 DCC_CHECK_NEGATIVE 145569 43.89 17.75 50.43 11 DCC_CHECK 139155 54.69 80.64 48.21 12 XM_B_Unicode3 120242 41.50 40.88 41.65 13 HTML_FONT_LOW_CONTRAST 89465 30.98 30.92 30.99 14 LOC_TINY_FONT_1 84153 30.24 34.59 29.15 15 DKIM_VALID_EF 80796 28.31 29.60 27.99 16 T_TM2_M_HEADER_IN_MSG 66975 21.94 16.89 23.20 17 FVGT_m_MULTI_ODD 65362 23.13 25.10 22.64 18 MIME_HTML_ONLY 62984 25.01 37.78 21.82 19 XMSubLong 60743 21.42 22.94 21.04 20 BAYES_00 56856 16.29 2.66 19.70 21 T_KAM_HTML_FONT_INVALID 52875 20.00 26.72 18.32 22 TR_XM_DK_Bayes 44559 12.78 2.15 15.44 23 TR_XM_DK_Bayes1 41827 11.90 1.52 14.49 24 RCVD_IN_MSPIKE_H2 40421 13.07 9.35 14.00 25 TR_XM_DK_Bayes2 39049 10.98 0.78 13.53 26 ALL_TRUSTED 38812 11.14 1.93 13.45 27 XM_Multi_Part_URI 38613 14.58 19.38 13.38 28 XM_Body_Dirty_Words 36526 13.42 16.50 12.65 29 RCVD_IN_RP_SAFE 33347 9.68 2.21 11.55 30 UNPARSEABLE_RELAY 31818 10.04 6.12 11.02 31 RCVD_IN_RP_CERTIFIED 30314 8.69 1.44 10.50 32 XM_B_Unsub 29972 10.53 11.14 10.38 33 XM_DKIMWhitelistDomains 28448 7.89 0.05 9.86 34 RCVD_IN_MSPIKE_H3 27644 8.17 2.55 9.58 35 RCVD_IN_MSPIKE_WL 27644 8.17 2.55 9.58 36 XM_Evil_Numbers_Gen 27375 9.60 10.05 9.48 37 HTML_IMAGE_RATIO_02 27283 10.43 14.33 9.45 38 LotsOfNums_01 25594 8.50 7.01 8.87 39 LOTS_OF_MONEY 25356 9.85 14.12 8.78 40 TooManyTo_001 23312 8.00 7.71 8.08 41 FSL_BULK_SIG 22842 9.37 15.20 7.91 42 XM_B_Phish_Phrases 22221 7.80 8.21 7.70 43 XM_DK_Undo_02 21696 14.81 43.97 7.52 44 XM_SendGrid 21019 6.80 4.90 7.28 45 BOTNET_IPINHOSTNAME 18406 7.82 13.61 6.38 46 T_TooManySym_01 16447 5.24 3.41 5.70 47 HTML_IMAGE_RATIO_04 16440 5.72 5.82 5.70 48 XM_H_Long_From01 16346 6.05 7.60 5.66 49 BAYES_60 16162 5.95 7.37 5.60 50 RELAYCOUNTRY_META 16077 8.89 22.15 5.57 51 BAYES_40 15558 4.95 3.18 5.39 52 DKIM_INVALID 15071 6.93 13.78 5.22 53 MPART_ALT_DIFF 14888 5.75 8.11 5.16 54 MIME_QP_LONG_LINE 14371 4.73 3.72 4.98 55 BAYES_20 12268 3.89 2.44 4.25 56 FROM_EXCESS_BASE64 12037 3.88 2.73 4.17 57 XM_UncommonTLD01 11488 6.65 17.33 3.98 58 T_REMOTE_IMAGE 11391 3.66 2.53 3.95 59 RCVD_IN_IADB_LISTED 11387 3.45 1.45 3.94 60 XMSexyCombo_05 11134 5.04 9.76 3.86 61 XMStrtUSub 10986 4.02 4.86 3.81 62 HTML_IMAGE_RATIO_06 10776 3.64 3.28 3.73 63 BAYES_99 10489 8.67 28.79 3.63 64 TR_XM_DK_SendGrid 10408 3.26 1.86 3.61 65 XMSubMetaSx_00 10167 4.28 7.32 3.52 66 RCVD_IN_IADB_SPF 9904 2.99 1.23 3.43 67 XMNumbers 9427 3.29 3.38 3.27 68 BAYES_80 9332 4.10 7.55 3.23 69 IN_ZIMBRA_NJ_WHITELIST 9279 2.57 0.01 3.21 70 TVD_RCVD_IP 8905 2.56 0.47 3.08 71 RCVD_IN_IADB_SENDERID 8767 2.67 1.21 3.04 72 TM2_M_URI_OPT_OUT 8748 3.05 3.13 3.03 73 BOTNET 8714 6.41 19.99 3.02 74 RCVD_IN_IADB_DK 8563 2.61 1.20 2.97 75 INVALID_MSGID 8479 2.41 0.29 2.94 76 MIME_HTML_ONLY_MULTI 8129 2.99 3.68 2.82 77 BAYES_999 7967 6.78 22.86 2.76 78 NO_DNS_FOR_FROM 7966 4.29 10.39 2.76 79 BAYES_05 7948 2.50 1.51 2.75 80 T_TooManySym_02 7903 2.34 0.77 2.74 81 CK_HELO_DYNAMIC_SPLIT_IP 7738 2.22 0.36 2.68 82 HELO_DYNAMIC_IPADDR2 7735 2.16 0.06 2.68 83 MIME_HTML_MOSTLY 7548 3.06 4.86 2.61 84 ANY_BOUNCE_MESSAGE 7384 2.10 0.25 2.56 85 BOUNCE_MESSAGE 7381 2.10 0.25 2.56 86 MAILING_LIST_MULTI 7040 2.19 1.19 2.44 87 RCVD_IN_IADB_VOUCHED 7027 2.05 0.52 2.43 88 HTML_IMAGE_RATIO_08 7023 2.62 3.38 2.43 89 RELAYCOUNTRY_CA 6894 3.13 6.08 2.39 90 TO_MALFORMED 6875 1.91 0.02 2.38 91 XM_PDF 6573 1.93 0.54 2.28 92 URI_TRY_3LD 5965 2.24 2.91 2.07 93 XM_CamelCaseFrm001 5959 2.90 6.23 2.06 94 XM_B_Unsub2 5815 2.11 2.49 2.01 95 TooManyTo_002 5778 1.89 1.44 2.00 96 BAYES_95 5731 2.29 3.53 1.99 97 RCVD_IN_MSPIKE_BL 5687 3.02 7.19 1.97 98 RCVD_IN_MSPIKE_L3 5641 2.94 6.90 1.95 99 IN_HORDE_ADDRESS_BOOK 5595 1.55 0.02 1.94 100 TR_DCC_Bayes_99 5527 6.03 22.48 1.91 101 XM_H_Trusted_IP 5265 1.46 0.00 1.82 102 SUBJ_ALL_CAPS 4971 1.94 2.81 1.72 103 XM_B_SpammyTLD 4851 2.15 4.04 1.68 104 UNTRUSTED_Relay 4684 4.10 14.03 1.62 105 XM_GoogleGroups 4643 1.38 0.47 1.61 106 XM_DK_Undo_01 4586 1.50 1.15 1.59 107 TooManyTo_003 4488 1.50 1.27 1.55 108 RCVD_IN_IADB_OPTIN 4434 1.30 0.37 1.54 109 USER_IN_DEF_DKIM_WL 4416 1.23 0.01 1.53 110 XMNoVowels 4282 1.75 2.84 1.48 111 TM2_M_VERY_LONG_WORD 4245 1.52 1.70 1.47 112 URI_HEX 4231 1.64 2.31 1.47 113 HTML_MIME_NO_HTML_TAG 4140 1.48 1.65 1.43 114 T_XMDrugObfuBody_14 4056 1.37 1.21 1.41 115 XMBdyGiftCard01 3991 1.28 0.88 1.38 116 T_XMDrugObfuBody_08 3949 1.74 3.23 1.37 117 TooManyTo_004 3784 1.27 1.09 1.31 118 KHOP_HELO_FCRDNS 3764 2.50 7.30 1.30 119 XMDiploma_00 3607 1.31 1.55 1.25 120 XM_OfRef6 3588 1.64 3.24 1.24 121 DKIM_ADSP_CUSTOM_MED 3576 1.22 1.13 1.24 122 XM_SPF_SoftFail 3390 2.17 6.14 1.17 123 XM_H_Long_From02 3362 1.08 0.75 1.16 124 TooManyTo_005 3354 1.10 0.84 1.16 125 XMGappySubj_01 3329 0.94 0.08 1.15 126 TR_Symld_Words 3317 1.19 1.34 1.15 127 RCVD_IN_BL_SPAMCOP_NET 3177 1.57 3.44 1.10 128 XM_ProductURIs 3134 1.14 1.34 1.09 129 TR_MetaPhish_Combo_01 3022 0.95 0.57 1.05 130 HTML_FONT_FACE_BAD 2809 0.95 0.85 0.97 131 TR_LOTS_OF_MONEY3 2715 1.40 3.24 0.94 132 XM_UB50 2683 2.51 8.82 0.93 133 TR_MSPIKEBAYES00 2575 0.71 0.00 0.89 134 RELAYCOUNTRY_GB 2547 0.92 1.08 0.88 135 NML_ADSP_CUSTOM_MED 2519 0.89 0.97 0.87 136 T_TooManySym_03 2462 0.78 0.47 0.85 137 T_XMDrugObfuBody_00 2424 0.96 1.42 0.84 138 XMStockSpam_06 2405 0.94 1.37 0.83 139 T_XMHurry_00 2376 1.34 3.40 0.82 140 HTML_TAG_BALANCE_BODY 2375 0.78 0.60 0.82 141 HELO_NODOT 2354 0.75 0.51 0.82 142 HELO_NO_DOMAIN 2353 0.75 0.51 0.82 143 XMGenDplmaNmb 2329 0.85 1.02 0.81 144 XMSubNoVowel 2232 0.82 0.98 0.77 145 XMBody_17 2219 1.64 5.13 0.77 146 T_FILL_THIS_FORM_SHORT 2200 0.85 1.19 0.76 147 HTTPS_HTTP_MISMATCH 2173 0.75 0.75 0.75 148 XMBrknScrpt_02 1857 0.69 0.90 0.64 149 USER_IN_WHITELIST 1851 0.51 0.00 0.64 150 DIET_1 1764 0.79 1.50 0.61 151 SpammyFromTLD_01 1762 1.21 3.61 0.61 152 XMLngstWrd_00 1757 0.55 0.30 0.61 153 XM_B_REG_HTML 1753 0.61 0.61 0.61 154 MPART_ALT_DIFF_COUNT 1730 0.73 1.27 0.60 155 T_Symld_Words_02 1726 0.62 0.71 0.60 156 XMCapTrack 1696 0.57 0.50 0.59 157 FORGED_GMAIL_RCVD 1643 0.65 0.97 0.57 158 SUBJ_DOLLARS 1613 0.57 0.60 0.56 159 LOW_PRICE 1608 0.66 1.09 0.56 160 XMPhish08 1606 0.62 0.85 0.56 161 XMSexyCombo_01 1569 0.81 1.86 0.54 162 XMHTMLBadTable_001 1569 0.57 0.67 0.54 163 XM_H_PHPMailer 1547 0.71 1.41 0.54 164 XMHTML_After_End 1536 1.69 6.32 0.53 165 XMLngstWrd_01 1510 0.47 0.25 0.52 166 XMSubMetaSxObfu_02 1500 0.50 0.42 0.52 167 XM_DIRTYINTL 1467 0.98 2.86 0.51 168 XMSolicitRefs_0 1463 0.47 0.30 0.51 169 XMSubMetaI_00 1445 0.72 1.59 0.50 170 HTML_IMAGE_ONLY_20 1414 0.47 0.37 0.49 171 T_MONEY_PERCENT 1412 0.54 0.76 0.49 172 TR_LOTS_OF_MONEY2 1412 0.54 0.76 0.49 173 PLING_QUERY 1392 0.52 0.68 0.48 174 HTML_OBFUSCATE_05_10 1355 0.43 0.25 0.47 175 XMPhish14 1271 0.47 0.59 0.44 176 URI_NOVOWEL 1267 0.48 0.65 0.44 177 TR_XM_PHPDW 1255 0.89 2.70 0.43 178 XMBody_95 1211 0.35 0.06 0.42 179 TR_XM_PHPForged 1194 0.86 2.64 0.41 180 MISSING_HEADERS 1192 0.48 0.73 0.41 181 RDNS_DYNAMIC 1191 1.44 5.54 0.41 182 XMLngstWrd_02 1190 0.37 0.21 0.41 183 TR_XM_FormFill2 1183 0.85 2.62 0.41 184 XM_H_PHPOS 1167 0.85 2.61 0.40 185 XMBody_78 1140 0.47 0.75 0.39 186 XMSubGiftCard1 1137 0.33 0.06 0.39 187 BASE64_LENGTH_79_INF 1133 0.43 0.57 0.39 188 TVD_SPACE_RATIO 1117 0.35 0.22 0.39 189 T_TooManySym_04 1112 0.35 0.23 0.39 190 XMPhish30 1102 0.51 1.03 0.38 191 XM_ShortIntro_01 1070 0.38 0.43 0.37 192 RELAYCOUNTRY_DE 1055 0.68 1.94 0.37 193 BODY_ENHANCEMENT 1052 0.30 0.05 0.36 194 XMRcvdHeader_15 1046 0.29 0.00 0.36 195 XM_Walgreens_Forge 1011 0.28 0.01 0.35 196 RELAYCOUNTRY_AU 998 0.36 0.42 0.35 197 XMSubMetaSxObfu_03 978 0.42 0.75 0.34 198 XM_B_COPY_HTML 963 0.43 0.81 0.33 199 XMBSHREFv2 955 0.41 0.70 0.33 200 XM_H_Undi_Recip 952 0.35 0.44 0.33 ----------------------------------------------------------------------