Email: 376979 Autolearn: 0 AvgScore: 1.25 AvgScanTime: 2.21 sec Spam: 70864 Autolearn: 0 AvgScore: 12.68 AvgScanTime: 2.99 sec Ham: 306115 Autolearn: 0 AvgScore: -1.39 AvgScanTime: 2.03 sec Time Spent Running SA: 231.56 hours Time Spent Processing Spam: 58.81 hours Time Spent Processing Ham: 172.74 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 65089 87.52 91.85 86.52 2 DCC_CHECK 57755 56.78 81.50 51.06 3 DKIM_SIGNED 51347 80.13 72.46 81.90 4 XM_B_Unicode 49159 71.72 69.37 72.26 5 XMListUnsubscribeExists 48024 60.84 67.77 59.23 6 XM_DK_Pass 47478 78.20 67.00 80.79 7 DKIM_VALID 44527 74.95 62.83 77.75 8 DKIM_VALID_AU 35036 58.64 49.44 60.77 9 BAYES_50 33955 53.05 47.92 54.24 10 XM_B_Unicode3 33685 46.70 47.53 46.50 11 HTML_FONT_LOW_CONTRAST 25438 34.71 35.90 34.43 12 XM_DK_Undo_02 24234 12.00 34.20 6.86 13 MIME_HTML_ONLY 22420 27.11 31.64 26.06 14 RELAYCOUNTRY_META 21895 9.51 30.90 4.56 15 LOC_TINY_FONT_1 21272 29.46 30.02 29.33 16 XMSubLong 18577 25.42 26.22 25.24 17 FVGT_m_MULTI_ODD 17944 22.85 25.32 22.28 18 BAYES_99 16604 7.56 23.43 3.89 19 BOTNET 16404 6.18 23.15 2.25 20 XM_Body_Dirty_Words 16284 17.60 22.98 16.35 21 BOTNET_IPINHOSTNAME 15665 8.96 22.11 5.92 22 XM_UncommonTLD01 14936 7.15 21.08 3.93 23 FSL_BULK_SIG 14557 10.59 20.54 8.29 24 TR_DCC_Bayes_99 13448 4.95 18.98 1.70 25 MultiRelay 13263 17.03 18.72 16.64 26 BAYES_999 12716 5.97 17.94 3.20 27 T_TM2_M_HEADER_IN_MSG 12713 23.18 17.94 24.39 28 DKIM_VALID_EF 12414 26.90 17.52 29.07 29 XM_Multi_Part_URI 12009 14.82 16.95 14.33 30 DCC_CHECK_NEGATIVE 11746 42.04 16.58 47.93 31 UNTRUSTED_Relay 10956 4.27 15.46 1.68 32 SpammyFromTLD_02 10172 2.93 14.35 0.29 33 XM_Evil_Numbers_Gen 10167 10.88 14.35 10.07 34 T_KAM_HTML_FONT_INVALID 9943 16.83 14.03 17.47 35 HTML_IMAGE_RATIO_02 9259 11.93 13.07 11.66 36 LOTS_OF_MONEY 9101 11.87 12.84 11.64 37 MPART_ALT_DIFF 7785 5.25 10.99 3.93 38 XMSexyCombo_05 7672 6.75 10.83 5.80 39 XM_H_Long_From01 6956 7.29 9.82 6.71 40 DKIM_INVALID 6820 5.18 9.62 4.15 41 HTML_IMAGE_RATIO_04 6804 7.48 9.60 6.99 42 KHOP_HELO_FCRDNS 6560 2.69 9.26 1.17 43 T_XMDrugObfuBody_14 6460 7.94 9.12 7.67 44 XM_DIRTYINTL 6432 4.17 9.08 3.04 45 XM_B_SpammyTLD 6303 5.37 8.89 4.55 46 XMSubMetaSx_00 6086 5.06 8.59 4.24 47 XM_UB50 5579 2.22 7.87 0.91 48 T_REMOTE_IMAGE 4952 4.19 6.99 3.55 49 TooManyTo_001 4950 5.82 6.99 5.55 50 MIME_HTML_MOSTLY 4771 3.53 6.73 2.79 51 LotsOfNums_01 4294 7.35 6.06 7.65 52 XM_B_Phish_Phrases 4253 7.08 6.00 7.33 53 DKIM_ADSP_NXDOMAIN 4237 1.67 5.98 0.67 54 BAYES_80 4023 3.12 5.68 2.53 55 RCVD_IN_MSPIKE_H2 4008 6.65 5.66 6.88 56 REPLYTO_WITHOUT_TO_CC 3994 1.09 5.64 0.03 57 MIME_HTML_ONLY_MULTI 3963 2.66 5.59 1.98 58 XM_CamelCaseFrm001 3895 2.56 5.50 1.87 59 RELAYCOUNTRY_GB 3778 1.37 5.33 0.45 60 NORDNS_LOW_CONTRAST 3687 0.98 5.20 0.01 61 XMNumbers 3575 4.31 5.04 4.14 62 XM_SPF_SoftFail 3556 2.03 5.02 1.34 63 URIBL_DBL_ABUSE_REDIR 3523 0.94 4.97 0.01 64 HTML_SHORT_LINK_IMG_1 3479 0.96 4.91 0.05 65 URI_HEX 3451 2.95 4.87 2.50 66 BAYES_60 3450 4.49 4.87 4.40 67 XMStrtUSub 3418 4.33 4.82 4.21 68 HTML_IMAGE_ONLY_12 3367 1.00 4.75 0.13 69 MIME_HEADER_CTYPE_ONLY 3317 0.95 4.68 0.09 70 HDRS_LCASE_IMGONLY 3275 0.88 4.62 0.02 71 UNPARSEABLE_RELAY 3242 3.67 4.57 3.46 72 TO_EQ_FM_DOM_HTML_IMG 3228 0.86 4.56 0.01 73 MPART_ALT_DIFF_COUNT 3215 1.07 4.54 0.27 74 HTML_IMAGE_RATIO_06 3157 3.84 4.46 3.70 75 HTML_FONT_SIZE_HUGE 3124 0.90 4.41 0.09 76 RELAYCOUNTRY_CA 3026 2.14 4.27 1.65 77 RCVD_IN_BL_SPAMCOP_NET 2975 1.58 4.20 0.97 78 BAYES_40 2909 5.17 4.11 5.42 79 BAYES_20 2885 4.11 4.07 4.12 80 BAYES_00 2850 17.88 4.02 21.09 81 XM_URI_RBL 2824 1.13 3.99 0.47 82 HTML_MIME_NO_HTML_TAG 2809 1.91 3.96 1.44 83 FROM_EXCESS_BASE64 2807 4.47 3.96 4.59 84 RELAYCOUNTRY_RU 2786 0.76 3.93 0.02 85 MIME_QP_LONG_LINE 2723 4.53 3.84 4.69 86 RELAYCOUNTRY_FR 2676 1.04 3.78 0.41 87 INVALID_DATE 2564 0.73 3.62 0.06 88 FROM_SUSPICIOUS_NTLD 2462 0.67 3.47 0.02 89 FROM_SUSPICIOUS_NTLD_FP 2442 0.66 3.45 0.02 90 RCVD_IN_RP_RNBL 2387 0.77 3.37 0.17 91 RDNS_DYNAMIC 2337 0.96 3.30 0.42 92 HTML_TAG_BALANCE_HEAD 2222 0.65 3.14 0.07 93 MultiRelay_CC 2207 0.74 3.11 0.19 94 MultiRelay_Combo 2207 0.74 3.11 0.19 95 XMSexyCombo_01 2159 1.19 3.05 0.76 96 XM_OfRef6 2107 1.71 2.97 1.42 97 BAYES_95 2096 1.80 2.96 1.54 98 XMDiploma_00 2053 1.64 2.90 1.35 99 T_TooManySym_01 2014 6.84 2.84 7.77 100 NO_DNS_FOR_FROM 1986 1.64 2.80 1.37 101 BOTNET_NORDNS 1900 0.52 2.68 0.01 102 BAYES_05 1890 2.54 2.67 2.51 103 XM_SendGrid 1862 6.50 2.63 7.39 104 XMSubMetaI_00 1846 1.12 2.60 0.77 105 TR_XM_PHPDW 1841 0.89 2.60 0.49 106 TR_XM_PHPForged 1821 0.91 2.57 0.53 107 TR_XM_FormFill2 1805 0.87 2.55 0.48 108 XM_H_PHPOS 1804 0.86 2.55 0.47 109 TR_Mismatch_TLD_01 1802 0.66 2.54 0.23 110 SUBJ_ALL_CAPS 1756 2.17 2.48 2.10 111 SpammyFromTLD_01 1733 0.98 2.45 0.64 112 T_XMDrugObfuBody_04 1726 0.46 2.44 0.01 113 T_XMHurry_00 1691 1.38 2.39 1.14 114 T_XMDrugObfuBody_08 1682 1.39 2.37 1.16 115 XMBdyGiftCard01 1662 2.37 2.35 2.38 116 XMGenDplmaNmb 1625 1.05 2.29 0.76 117 XMBody_17 1589 1.22 2.24 0.98 118 T_XMDrugObfuBody_00 1562 1.32 2.20 1.11 119 DKIM_ADSP_CUSTOM_MED 1561 1.10 2.20 0.84 120 TM2_M_VERY_LONG_WORD 1556 1.87 2.20 1.79 121 HTML_IMAGE_RATIO_08 1552 2.22 2.19 2.22 122 DIET_1 1520 0.79 2.14 0.47 123 TR_LOTS_OF_MONEY2 1516 0.82 2.14 0.51 124 T_MONEY_PERCENT 1516 0.82 2.14 0.51 125 TR_XM_DK_Bayes 1507 16.20 2.13 19.46 126 TM2_M_URI_OPT_OUT 1499 1.52 2.12 1.38 127 XMSubMetaSx_01 1488 0.57 2.10 0.21 128 FORGED_GMAIL_RCVD 1479 0.81 2.09 0.51 129 NML_ADSP_CUSTOM_MED 1469 0.86 2.07 0.58 130 RCVD_IN_RP_SAFE 1469 11.97 2.07 14.26 131 XM_Combo_Sbj 1431 0.52 2.02 0.17 132 XMPhish14 1424 0.79 2.01 0.51 133 XMSexyCombo_04 1375 0.48 1.94 0.14 134 TR_XM_DK_Bayes1 1361 15.59 1.92 18.75 135 URI_TRY_3LD 1308 1.93 1.85 1.95 136 XM_H_PHPMailer 1307 0.77 1.84 0.52 137 FILL_THIS_FORM 1298 0.77 1.83 0.53 138 URI_NOVOWEL 1272 0.73 1.79 0.48 139 FILL_THIS_FORM_LONG 1258 0.71 1.78 0.46 140 FROM_MISSP_REPLYTO 1246 0.33 1.76 0.00 141 TR_XM_INV_DKIM 1215 0.57 1.71 0.31 142 TR_Mismatch_TLD_02 1210 0.38 1.71 0.07 143 XM_H_PHPOS_M 1204 0.51 1.70 0.24 144 XM_BadFromFormat 1197 0.42 1.69 0.13 145 ALL_TRUSTED 1190 12.01 1.68 14.40 146 RELAYCOUNTRY_AT 1177 0.49 1.66 0.21 147 RELAYCOUNTRY_DE 1162 0.56 1.64 0.31 148 XMStockSpam_06 1158 1.36 1.63 1.30 149 XMPhish11 1121 1.25 1.58 1.18 150 XM_UB60 1119 0.34 1.58 0.05 151 MONEY_FORM 1110 0.30 1.57 0.01 152 RCVD_IN_IADB_LISTED 1093 3.68 1.54 4.17 153 RELAYCOUNTRY_MX 1048 0.28 1.48 0.01 154 RCVD_IN_PSBL 1030 0.28 1.45 0.01 155 TR_XM_RelayPhish 1020 1.22 1.44 1.17 156 RCVD_IN_IADB_SPF 1008 3.13 1.42 3.52 157 RCVD_IN_IADB_SENDERID 990 2.74 1.40 3.05 158 RCVD_IN_IADB_DK 988 2.65 1.39 2.94 159 XM_H_Long_From02 979 1.35 1.38 1.34 160 XMPhish30 960 0.96 1.35 0.87 161 TM2_M_A_HREF_HREF 950 1.70 1.34 1.79 162 FROM_MISSP_DYNIP 944 0.25 1.33 0.00 163 XMSexyCombo_02 926 0.29 1.31 0.06 164 TR_XM_DK_SendGrid 926 3.38 1.31 3.86 165 XMMoneyMeta_00 914 0.48 1.29 0.30 166 FORM_FRAUD 896 0.24 1.26 0.00 167 XMSlimDrugH 869 0.55 1.23 0.39 168 TO_NO_BRKTS_FROM_MSSP 844 0.23 1.19 0.01 169 TR_Symld_Words 816 2.14 1.15 2.37 170 URIBL_DBL_SPAM 814 0.28 1.15 0.08 171 HK_RANDOM_REPLYTO 812 0.48 1.15 0.33 172 XM_UB80 801 0.22 1.13 0.01 173 XM_HighProb1 799 0.22 1.13 0.00 174 RCVD_IN_MSPIKE_WL 793 4.67 1.12 5.50 175 XMBrknScrpt_02 792 0.84 1.12 0.78 176 URIBL_BLACK 769 0.22 1.09 0.02 177 TR_XM_DK_Bayes2 768 13.45 1.08 16.31 178 TR_LOTS_OF_MONEY3 760 0.66 1.07 0.56 179 XM_UB99 745 0.21 1.05 0.01 180 XM_ProductURIs 733 1.45 1.03 1.55 181 XM_DK_Undo_01 733 1.53 1.03 1.65 182 THIS_AD 732 0.40 1.03 0.26 183 RCVD_IN_MSPIKE_H3 688 4.05 0.97 4.76 184 XM_OneSimpleTrick 674 0.19 0.95 0.01 185 DATE_IN_PAST_03_06 666 0.30 0.94 0.15 186 MAILING_LIST_MULTI 661 1.74 0.93 1.93 187 RELAYCOUNTRY_IN 652 0.24 0.92 0.08 188 TM2_M_OBFU_COMMENT 652 0.23 0.92 0.07 189 URIBL_SBL_A 646 0.46 0.91 0.35 190 XMSubNoVowel 642 1.28 0.91 1.36 191 CK_HELO_DYNAMIC_SPLIT_IP 638 2.36 0.90 2.70 192 HK_RANDOM_FROM 638 0.25 0.90 0.10 193 RELAYCOUNTRY_PL 611 0.18 0.86 0.02 194 XM_B_COPY_HTML 598 0.57 0.84 0.51 195 RCVD_IN_RP_CERTIFIED 592 10.32 0.84 12.51 196 DEAR_FRIEND 577 0.20 0.81 0.05 197 XMBody_78 575 0.55 0.81 0.48 198 XMSubMetaD_03 570 0.24 0.80 0.11 199 XMSubMetaI_01 568 0.23 0.80 0.09 200 T_HTML_TAG_BALANCE_CENTER 564 0.25 0.80 0.12 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 264844 87.52 91.85 86.52 2 DKIM_SIGNED 250711 80.13 72.46 81.90 3 XM_DK_Pass 247301 78.20 67.00 80.79 4 DKIM_VALID 238001 74.95 62.83 77.75 5 XM_B_Unicode 221202 71.72 69.37 72.26 6 DKIM_VALID_AU 186037 58.64 49.44 60.77 7 XMListUnsubscribeExists 181326 60.84 67.77 59.23 8 BAYES_50 166022 53.05 47.92 54.24 9 DCC_CHECK 156296 56.78 81.50 51.06 10 DCC_CHECK_NEGATIVE 146724 42.04 16.58 47.93 11 XM_B_Unicode3 142351 46.70 47.53 46.50 12 HTML_FONT_LOW_CONTRAST 105410 34.71 35.90 34.43 13 LOC_TINY_FONT_1 89778 29.46 30.02 29.33 14 DKIM_VALID_EF 88987 26.90 17.52 29.07 15 MIME_HTML_ONLY 79774 27.11 31.64 26.06 16 XMSubLong 77259 25.42 26.22 25.24 17 T_TM2_M_HEADER_IN_MSG 74662 23.18 17.94 24.39 18 FVGT_m_MULTI_ODD 68200 22.85 25.32 22.28 19 BAYES_00 64554 17.88 4.02 21.09 20 TR_XM_DK_Bayes 59557 16.20 2.13 19.46 21 TR_XM_DK_Bayes1 57401 15.59 1.92 18.75 22 T_KAM_HTML_FONT_INVALID 53493 16.83 14.03 17.47 23 MultiRelay 50941 17.03 18.72 16.64 24 XM_Body_Dirty_Words 50051 17.60 22.98 16.35 25 TR_XM_DK_Bayes2 49936 13.45 1.08 16.31 26 ALL_TRUSTED 44067 12.01 1.68 14.40 27 XM_Multi_Part_URI 43868 14.82 16.95 14.33 28 RCVD_IN_RP_SAFE 43644 11.97 2.07 14.26 29 RCVD_IN_RP_CERTIFIED 38296 10.32 0.84 12.51 30 HTML_IMAGE_RATIO_02 35702 11.93 13.07 11.66 31 LOTS_OF_MONEY 35637 11.87 12.84 11.64 32 XM_DKIMWhitelistDomains 31199 8.28 0.03 10.19 33 XM_Evil_Numbers_Gen 30836 10.88 14.35 10.07 34 FSL_BULK_SIG 25374 10.59 20.54 8.29 35 T_TooManySym_01 23787 6.84 2.84 7.77 36 T_XMDrugObfuBody_14 23473 7.94 9.12 7.67 37 LotsOfNums_01 23423 7.35 6.06 7.65 38 XM_SendGrid 22636 6.50 2.63 7.39 39 XM_B_Phish_Phrases 22446 7.08 6.00 7.33 40 HTML_IMAGE_RATIO_04 21388 7.48 9.60 6.99 41 RCVD_IN_MSPIKE_H2 21071 6.65 5.66 6.88 42 XM_DK_Undo_02 21011 12.00 34.20 6.86 43 XM_H_Long_From01 20543 7.29 9.82 6.71 44 BOTNET_IPINHOSTNAME 18113 8.96 22.11 5.92 45 XMSexyCombo_05 17756 6.75 10.83 5.80 46 TooManyTo_001 16993 5.82 6.99 5.55 47 RCVD_IN_MSPIKE_WL 16830 4.67 1.12 5.50 48 BAYES_40 16594 5.17 4.11 5.42 49 RCVD_IN_MSPIKE_H3 14578 4.05 0.97 4.76 50 MIME_QP_LONG_LINE 14353 4.53 3.84 4.69 51 FROM_EXCESS_BASE64 14057 4.47 3.96 4.59 52 RELAYCOUNTRY_META 13962 9.51 30.90 4.56 53 XM_B_SpammyTLD 13932 5.37 8.89 4.55 54 TO_MALFORMED 13889 3.69 0.02 4.54 55 BAYES_60 13480 4.49 4.87 4.40 56 XMSubMetaSx_00 12988 5.06 8.59 4.24 57 XMStrtUSub 12892 4.33 4.82 4.21 58 RCVD_IN_IADB_LISTED 12775 3.68 1.54 4.17 59 DKIM_INVALID 12710 5.18 9.62 4.15 60 XMNumbers 12683 4.31 5.04 4.14 61 BAYES_20 12613 4.11 4.07 4.12 62 XM_UncommonTLD01 12024 7.15 21.08 3.93 63 MPART_ALT_DIFF 12019 5.25 10.99 3.93 64 BAYES_99 11903 7.56 23.43 3.89 65 TR_XM_DK_SendGrid 11806 3.38 1.31 3.86 66 HTML_IMAGE_RATIO_06 11314 3.84 4.46 3.70 67 T_REMOTE_IMAGE 10856 4.19 6.99 3.55 68 RCVD_IN_IADB_SPF 10777 3.13 1.42 3.52 69 UNPARSEABLE_RELAY 10601 3.67 4.57 3.46 70 BAYES_999 9808 5.97 17.94 3.20 71 TVD_RCVD_IP 9720 2.69 0.57 3.18 72 IN_ZIMBRA_NJ_WHITELIST 9576 2.54 0.01 3.13 73 RCVD_IN_IADB_SENDERID 9324 2.74 1.40 3.05 74 XM_DIRTYINTL 9302 4.17 9.08 3.04 75 T_TooManySym_02 9296 2.56 0.49 3.04 76 RCVD_IN_IADB_DK 9011 2.65 1.39 2.94 77 RCVD_IN_IADB_VOUCHED 8870 2.42 0.36 2.90 78 MIME_HTML_MOSTLY 8530 3.53 6.73 2.79 79 CK_HELO_DYNAMIC_SPLIT_IP 8274 2.36 0.90 2.70 80 HELO_DYNAMIC_IPADDR2 8245 2.24 0.28 2.69 81 BAYES_80 7754 3.12 5.68 2.53 82 BAYES_05 7697 2.54 2.67 2.51 83 URI_HEX 7663 2.95 4.87 2.50 84 INVALID_MSGID 7387 2.06 0.54 2.41 85 XMBdyGiftCard01 7283 2.37 2.35 2.38 86 TR_Symld_Words 7267 2.14 1.15 2.37 87 BOTNET 6896 6.18 23.15 2.25 88 HTML_IMAGE_RATIO_08 6799 2.22 2.19 2.22 89 SUBJ_ALL_CAPS 6420 2.17 2.48 2.10 90 TR_MetaPhish_Combo_01 6108 1.71 0.49 2.00 91 MIME_HTML_ONLY_MULTI 6065 2.66 5.59 1.98 92 URI_TRY_3LD 5981 1.93 1.85 1.95 93 MAILING_LIST_MULTI 5915 1.74 0.93 1.93 94 RCVD_IN_IADB_OPTIN 5789 1.59 0.30 1.89 95 XM_CamelCaseFrm001 5739 2.56 5.50 1.87 96 TM2_M_VERY_LONG_WORD 5494 1.87 2.20 1.79 97 TM2_M_A_HREF_HREF 5474 1.70 1.34 1.79 98 TR_DCC_Bayes_99 5201 4.95 18.98 1.70 99 XM_PDF 5164 1.44 0.35 1.69 100 UNTRUSTED_Relay 5137 4.27 15.46 1.68 101 RELAYCOUNTRY_CA 5057 2.14 4.27 1.65 102 XM_DK_Undo_01 5038 1.53 1.03 1.65 103 IN_HORDE_ADDRESS_BOOK 4906 1.31 0.06 1.60 104 XM_ProductURIs 4738 1.45 1.03 1.55 105 BAYES_95 4705 1.80 2.96 1.54 106 ANY_BOUNCE_MESSAGE 4650 1.27 0.17 1.52 107 BOUNCE_MESSAGE 4647 1.26 0.17 1.52 108 USER_IN_DEF_DKIM_WL 4562 1.21 0.02 1.49 109 HTML_MIME_NO_HTML_TAG 4393 1.91 3.96 1.44 110 XM_OfRef6 4350 1.71 2.97 1.42 111 TM2_M_URI_OPT_OUT 4220 1.52 2.12 1.38 112 NO_DNS_FOR_FROM 4201 1.64 2.80 1.37 113 XMSubNoVowel 4170 1.28 0.91 1.36 114 XMSubEmpty 4170 1.14 0.17 1.36 115 XMDiploma_00 4127 1.64 2.90 1.35 116 TVD_SPACE_RATIO 4124 1.10 0.06 1.35 117 XM_H_Long_From02 4113 1.35 1.38 1.34 118 XM_SPF_SoftFail 4096 2.03 5.02 1.34 119 XMStockSpam_06 3977 1.36 1.63 1.30 120 XMGappySubj_01 3621 1.04 0.42 1.18 121 XMPhish11 3603 1.25 1.58 1.18 122 TR_XM_RelayPhish 3596 1.22 1.44 1.17 123 KHOP_HELO_FCRDNS 3576 2.69 9.26 1.17 124 T_XMDrugObfuBody_08 3541 1.39 2.37 1.16 125 T_XMHurry_00 3497 1.38 2.39 1.14 126 T_XMDrugObfuBody_00 3410 1.32 2.20 1.11 127 XM_GoogleGroups 3380 0.98 0.43 1.10 128 TooManyTo_002 3370 1.00 0.58 1.10 129 XMBody_17 3008 1.22 2.24 0.98 130 RCVD_IN_BL_SPAMCOP_NET 2984 1.58 4.20 0.97 131 XMHTMLBadTable_001 2962 0.92 0.73 0.97 132 XM_UB50 2774 2.22 7.87 0.91 133 XM_B_REG_HTML 2750 0.76 0.15 0.90 134 XMBody_95 2701 0.73 0.06 0.88 135 XMPhish30 2657 0.96 1.35 0.87 136 DKIM_ADSP_CUSTOM_MED 2586 1.10 2.20 0.84 137 PLING_QUERY 2573 0.82 0.73 0.84 138 XMHTML_After_End 2528 0.82 0.78 0.83 139 USER_IN_WHITELIST 2523 0.67 0.00 0.82 140 XM_D_tchamptons_WL 2478 0.66 0.00 0.81 141 XMBrknScrpt_02 2376 0.84 1.12 0.78 142 XMSubMetaI_00 2359 1.12 2.60 0.77 143 T_FILL_THIS_FORM_SHORT 2323 0.76 0.75 0.76 144 XMGenDplmaNmb 2317 1.05 2.29 0.76 145 XMSexyCombo_01 2313 1.19 3.05 0.76 146 TooManyTo_003 2215 0.68 0.48 0.72 147 XMOemUri 2209 0.62 0.16 0.72 148 HTML_TAG_BALANCE_BODY 2172 0.67 0.49 0.71 149 DKIM_ADSP_NXDOMAIN 2052 1.67 5.98 0.67 150 SpammyFromTLD_01 1963 0.98 2.45 0.64 151 SUBJ_DOLLARS 1905 0.56 0.29 0.62 152 T_TooManySym_03 1890 0.54 0.22 0.62 153 XM_Sams_Club_Forge 1866 0.56 0.35 0.61 154 XMGppyBdWords 1806 0.58 0.55 0.59 155 NML_ADSP_CUSTOM_MED 1784 0.86 2.07 0.58 156 TooManyTo_004 1762 0.54 0.41 0.58 157 TR_LOTS_OF_MONEY3 1720 0.66 1.07 0.56 158 HTML_FONT_FACE_BAD 1642 0.58 0.78 0.54 159 XMSubMetaSxObfu_02 1633 0.51 0.39 0.53 160 FILL_THIS_FORM 1614 0.77 1.83 0.53 161 TR_XM_PHPForged 1612 0.91 2.57 0.53 162 XM_H_PHPMailer 1585 0.77 1.84 0.52 163 RELAYCOUNTRY_AU 1579 0.57 0.79 0.52 164 TR_LOTS_OF_MONEY2 1571 0.82 2.14 0.51 165 T_MONEY_PERCENT 1571 0.82 2.14 0.51 166 XMPhish14 1568 0.79 2.01 0.51 167 XM_B_COPY_HTML 1566 0.57 0.84 0.51 168 FORGED_GMAIL_RCVD 1562 0.81 2.09 0.51 169 TooManyTo_005 1507 0.47 0.36 0.49 170 TR_XM_PHPDW 1505 0.89 2.60 0.49 171 BODY_ENHANCEMENT 1487 0.46 0.37 0.49 172 XMBody_78 1484 0.55 0.81 0.48 173 URI_NOVOWEL 1462 0.73 1.79 0.48 174 TR_XM_FormFill2 1459 0.87 2.55 0.48 175 XM_H_PHPOS 1447 0.86 2.55 0.47 176 DIET_1 1443 0.79 2.14 0.47 177 XM_URI_RBL 1431 1.13 3.99 0.47 178 HELO_NODOT 1424 0.49 0.58 0.47 179 HELO_NO_DOMAIN 1423 0.48 0.57 0.46 180 FILL_THIS_FORM_LONG 1413 0.71 1.78 0.46 181 T_Symld_Words_02 1374 0.50 0.71 0.45 182 FILL_THIS_FORM_LOAN 1373 0.40 0.17 0.45 183 RELAYCOUNTRY_GB 1371 1.37 5.33 0.45 184 RCVD_IN_MSPIKE_H5 1352 0.37 0.07 0.44 185 XM_RXBody 1317 0.40 0.28 0.43 186 RDNS_DYNAMIC 1292 0.96 3.30 0.42 187 XMCapTrack 1290 0.37 0.17 0.42 188 RELAYCOUNTRY_FR 1262 1.04 3.78 0.41 189 XMSlimDrugH 1194 0.55 1.23 0.39 190 XMBSHREFv2 1169 0.39 0.42 0.38 191 HTTPS_HTTP_MISMATCH 1166 0.38 0.40 0.38 192 XM_SPF_Unknown 1156 0.37 0.35 0.38 193 UPPERCASE_50_75 1144 0.33 0.14 0.37 194 XMLngstWrd_00 1098 0.35 0.31 0.36 195 URIBL_SBL_A 1079 0.46 0.91 0.35 196 XMSubMetaSxObfu_03 1015 0.36 0.46 0.33 197 HK_RANDOM_REPLYTO 1013 0.48 1.15 0.33 198 XMLngstWrd_01 994 0.32 0.29 0.32 199 XMNoVowels 987 0.30 0.19 0.32 200 XM_Body_Obfu01 977 0.31 0.29 0.32 ----------------------------------------------------------------------