Email: 572581 Autolearn: 0 AvgScore: 3.27 AvgScanTime: 3.43 sec Spam: 168553 Autolearn: 0 AvgScore: 12.54 AvgScanTime: 4.32 sec Ham: 404028 Autolearn: 0 AvgScore: -0.60 AvgScanTime: 3.06 sec Time Spent Running SA: 546.14 hours Time Spent Processing Spam: 202.42 hours Time Spent Processing Ham: 343.72 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 156799 84.73 93.03 81.27 2 DKIM_SIGNED 143599 69.62 85.20 63.12 3 XM_DK_Pass 139566 68.10 82.80 61.97 4 DKIM_VALID 132640 63.89 78.69 57.71 5 DCC_CHECK 131289 45.64 77.89 32.19 6 XMListUnsubscribeExists 119876 47.68 71.12 37.90 7 DKIM_VALID_AU 101649 45.18 60.31 38.87 8 XM_H_QuotedFrom 94985 39.86 56.35 32.98 9 XM_DK_Undo_02 81091 22.48 48.11 11.79 10 BAYES_99 73605 20.84 43.67 11.31 11 BAYES_999 62993 18.06 37.37 10.00 12 HTML_FONT_LOW_CONTRAST 61474 26.49 36.47 22.32 13 LOC_TINY_FONT_1 59849 21.89 35.51 16.21 14 TR_DCC_Bayes_99 58068 14.00 34.45 5.47 15 BAYES_50 57275 50.30 33.98 57.11 16 MIME_HTML_ONLY 52829 24.06 31.34 21.03 17 FVGT_m_MULTI_ODD 43718 19.42 25.94 16.70 18 XMSubLong 41985 19.79 24.91 17.65 19 DKIM_VALID_EF 40261 22.64 23.89 22.11 20 T_KAM_HTML_FONT_INVALID 35112 15.15 20.83 12.78 21 DCC_CHECK_NEGATIVE 33723 52.32 20.01 65.79 22 T_TM2_M_HEADER_IN_MSG 33150 28.75 19.67 32.54 23 XM_Body_Dirty_Words 31103 12.09 18.45 9.43 24 MultiRelay 29568 18.38 17.54 18.73 25 XM_Multi_Part_URI 29381 11.63 17.43 9.21 26 RELAYCOUNTRY_META 28528 8.17 16.93 4.52 27 HTML_IMAGE_RATIO_02 27722 9.13 16.45 6.08 28 XM_Evil_Numbers_Gen 23533 9.28 13.96 7.32 29 FSL_BULK_SIG 23200 11.23 13.76 10.17 30 LOTS_OF_MONEY 22660 10.74 13.44 9.61 31 BOTNET 21350 4.45 12.67 1.02 32 BOTNET_IPINHOSTNAME 20852 6.04 12.37 3.40 33 T_XMDrugObfuBody_14 17913 8.10 10.63 7.04 34 XMSexyCombo_05 16413 4.99 9.74 3.01 35 HTML_IMAGE_RATIO_04 16140 5.37 9.58 3.62 36 UNTRUSTED_Relay 15712 3.62 9.32 1.24 37 XM_H_Long_From01 15054 9.54 8.93 9.79 38 XM_UncommonTLD01 14069 5.21 8.35 3.91 39 XM_B_Phish_Phrases 13655 6.39 8.10 5.68 40 LotsOfNums_01 13558 7.22 8.04 6.88 41 TR_XM_DocInvoice 13135 6.28 7.79 5.66 42 BAYES_80 11875 4.37 7.05 3.26 43 MPART_ALT_DIFF 11360 6.12 6.74 5.86 44 TooManyTo_001 11336 7.84 6.73 8.30 45 BAYES_60 11132 6.01 6.60 5.76 46 DKIM_INVALID 10959 5.73 6.50 5.41 47 XMSubMetaSx_00 10811 4.00 6.41 2.99 48 FROM_EXCESS_BASE64 10360 3.83 6.15 2.86 49 XMNumbers 9877 4.01 5.86 3.23 50 RCVD_IN_RP_SAFE 9071 6.44 5.38 6.88 51 HTML_IMAGE_RATIO_06 8560 3.69 5.08 3.12 52 XM_SendGrid 7910 4.50 4.69 4.42 53 TM2_M_URI_OPT_OUT 7647 4.72 4.54 4.80 54 XM_UB50 7562 1.93 4.49 0.86 55 T_REMOTE_IMAGE 7487 4.48 4.44 4.49 56 BAYES_95 7229 2.85 4.29 2.26 57 XM_OfRef6 7008 2.34 4.16 1.59 58 XM_SPF_SoftFail 6950 2.55 4.12 1.90 59 RCVD_IN_RP_CERTIFIED 6937 5.58 4.12 6.19 60 T_TooManySym_01 6918 3.64 4.10 3.45 61 SUBJ_ALL_CAPS 6831 5.67 4.05 6.34 62 MIME_HTML_MOSTLY 6802 2.62 4.04 2.03 63 RCVD_IN_MSPIKE_H2 6750 4.13 4.00 4.19 64 MIME_QP_LONG_LINE 6600 4.64 3.92 4.95 65 XM_DIRTYINTL 6501 2.44 3.86 1.85 66 XMStrtUSub 6391 4.10 3.79 4.22 67 RELAYCOUNTRY_CA 5980 1.87 3.55 1.17 68 URI_HEX 5950 1.89 3.53 1.20 69 SpammyFromTLD_02 5702 1.26 3.38 0.37 70 RCVD_IN_BL_SPAMCOP_NET 5632 1.36 3.34 0.53 71 MultiRelay_Combo 5591 1.10 3.32 0.18 72 MultiRelay_CC 5591 1.10 3.32 0.18 73 XMDiploma_00 5561 2.19 3.30 1.72 74 XM_CamelCaseFrm001 5170 1.81 3.07 1.29 75 MIME_HTML_ONLY_MULTI 5107 4.04 3.03 4.47 76 HTML_MIME_NO_HTML_TAG 5015 2.43 2.98 2.20 77 SpammyFromTLD_01 4950 1.53 2.94 0.94 78 T_FILL_THIS_FORM_SHORT 4949 1.65 2.94 1.11 79 HTML_IMAGE_RATIO_08 4614 1.96 2.74 1.64 80 ALL_TRUSTED 4600 17.68 2.73 23.92 81 XMNoVowels 4463 2.54 2.65 2.50 82 T_XMDrugObfuBody_08 4360 2.06 2.59 1.84 83 TR_Symld_Words 4140 2.19 2.46 2.07 84 T_TooManySym_02 3880 1.63 2.30 1.35 85 FILL_THIS_FORM 3858 2.07 2.29 1.98 86 RCVD_IN_IADB_LISTED 3834 4.81 2.27 5.87 87 XMGenDplmaNmb 3656 1.40 2.17 1.07 88 MISSING_HEADERS 3530 1.01 2.09 0.55 89 NO_DNS_FOR_FROM 3518 1.30 2.09 0.97 90 RELAYCOUNTRY_GB 3497 1.25 2.07 0.91 91 RCVD_IN_IADB_SPF 3484 4.16 2.07 5.04 92 TM2_M_VERY_LONG_WORD 3457 1.12 2.05 0.74 93 FILL_THIS_FORM_LONG 3448 1.78 2.05 1.66 94 XM_ProductURIs 3446 1.29 2.04 0.98 95 BOTNET_NORDNS 3411 0.61 2.02 0.02 96 RCVD_IN_RP_RNBL 3400 0.60 2.02 0.01 97 REPLYTO_WITHOUT_TO_CC 3358 0.65 1.99 0.09 98 UNPARSEABLE_RELAY 3346 2.28 1.99 2.41 99 RCVD_IN_IADB_SENDERID 3303 3.66 1.96 4.36 100 XM_RXBody 3268 0.99 1.94 0.59 101 RCVD_IN_IADB_DK 3267 3.57 1.94 4.26 102 XMHTML_After_End 3162 0.77 1.88 0.30 103 XMSubMetaI_00 3039 0.90 1.80 0.52 104 TR_LOTS_OF_MONEY1 2904 0.55 1.72 0.06 105 XM_URI_RBL 2878 0.58 1.71 0.11 106 URIBL_DBL_SPAM 2845 0.52 1.69 0.03 107 MAILING_LIST_MULTI 2825 1.99 1.68 2.13 108 XMStockSpam_06 2709 1.35 1.61 1.24 109 URIBL_BLACK 2658 0.48 1.58 0.02 110 XM_UB99 2642 0.47 1.57 0.02 111 XMLongAddy 2551 0.52 1.51 0.10 112 XM_B_REG_HTML 2498 0.76 1.48 0.45 113 XMSexyCombo_01 2496 0.69 1.48 0.37 114 XM_H_Long_From02 2460 1.05 1.46 0.88 115 BAYES_40 2425 4.45 1.44 5.70 116 XMBody_17 2393 0.65 1.42 0.33 117 TR_XM_RelayPhish 2389 0.72 1.42 0.43 118 REPTO_QUOTE_YAHOO 2388 0.47 1.42 0.08 119 T_DEAR_BENEFICIARY 2381 0.42 1.41 0.01 120 T_XMDrugObfuBody_00 2358 0.99 1.40 0.82 121 RELAYCOUNTRY_FR 2341 0.62 1.39 0.30 122 RELAYCOUNTRY_CN 2307 0.43 1.37 0.04 123 HK_SCAM_N8 2277 0.40 1.35 0.00 124 XMBdyGiftCard01 2274 0.81 1.35 0.58 125 TO_NO_BRKTS_HTML_IMG 2241 1.39 1.33 1.42 126 URI_TRY_3LD 2234 1.17 1.33 1.10 127 XMBody_106 2233 0.41 1.32 0.02 128 T_XMHurry_00 2193 0.75 1.30 0.51 129 XM_UB60 2191 0.43 1.30 0.07 130 BODY_URI_ONLY 2167 0.41 1.29 0.05 131 HTML_FONT_SIZE_LARGE 2166 0.89 1.29 0.72 132 XMPhish30 2133 0.60 1.27 0.32 133 DIET_1 2107 0.90 1.25 0.75 134 XM_H_PHPOS 2074 1.42 1.23 1.50 135 XM_DK_Undo_01 2046 1.68 1.21 1.88 136 TR_Mismatch_TLD_02 2020 0.39 1.20 0.05 137 HTML_SHORT_LINK_IMG_1 2019 0.37 1.20 0.03 138 RELAYCOUNTRY_NL 2001 0.47 1.19 0.17 139 TR_LOTS_OF_MONEY2 1986 0.63 1.18 0.39 140 T_MONEY_PERCENT 1986 0.63 1.18 0.39 141 RELAYCOUNTRY_IN 1959 0.43 1.16 0.12 142 HTML_IMAGE_ONLY_08 1946 0.42 1.15 0.12 143 TM2_M_BODY_EMPTY 1923 0.80 1.14 0.65 144 XM_B_COPY_HTML 1910 0.72 1.13 0.55 145 BAYES_00 1903 7.61 1.13 10.31 146 XM_UB999 1889 0.34 1.12 0.01 147 DKIM_ADSP_CUSTOM_MED 1875 1.07 1.11 1.05 148 XMHTMLBadTable_001 1848 0.63 1.10 0.44 149 BAYES_20 1848 2.17 1.10 2.62 150 XMEmptyBody_01 1817 0.52 1.08 0.29 151 T_Symld_Words_02 1770 0.67 1.05 0.51 152 XM_PDF 1730 4.66 1.03 6.18 153 HTML_FONT_FACE_BAD 1724 0.63 1.02 0.46 154 XMBrknScrpt_02 1717 0.65 1.02 0.50 155 RCVD_IN_IADB_VOUCHED 1715 3.29 1.02 4.24 156 XMSubMetaSxObfu_03 1699 0.55 1.01 0.35 157 FORGED_GMAIL_RCVD 1698 0.66 1.01 0.52 158 MPART_ALT_DIFF_COUNT 1662 0.53 0.99 0.33 159 XMPhish11 1606 1.00 0.95 1.01 160 RELAYCOUNTRY_AT 1605 0.37 0.95 0.12 161 FSL_THIS_IS_ADV 1603 0.38 0.95 0.15 162 RELAYCOUNTRY_AU 1514 0.53 0.90 0.38 163 RCVD_IN_PSBL 1513 0.33 0.90 0.09 164 NML_ADSP_CUSTOM_MED 1494 0.82 0.89 0.79 165 TR_LOTS_OF_MONEY3 1494 0.40 0.89 0.20 166 XMSlimDrugH 1493 0.43 0.89 0.24 167 TR_XM_DK_Bayes 1476 3.46 0.88 4.54 168 DKIM_ADSP_NXDOMAIN 1471 0.46 0.87 0.29 169 ANY_BOUNCE_MESSAGE 1428 2.55 0.85 3.26 170 BOUNCE_MESSAGE 1427 2.55 0.85 3.26 171 XM_BadFromFormat 1408 0.42 0.84 0.25 172 T_FILL_THIS_FORM_LOAN 1408 0.55 0.84 0.43 173 SUBJ_DOLLARS 1406 0.36 0.83 0.16 174 LongTLD 1397 0.34 0.83 0.13 175 XMBody_78 1361 0.56 0.81 0.46 176 RDNS_DYNAMIC 1342 0.46 0.80 0.32 177 XMClaimOffer 1326 0.35 0.79 0.16 178 DATE_IN_PAST_03_06 1321 0.30 0.78 0.09 179 HTTPS_HTTP_MISMATCH 1302 0.59 0.77 0.52 180 XMSubMetaSSx_00 1276 0.34 0.76 0.17 181 TR_XM_DK_Bayes1 1259 3.05 0.75 4.01 182 TooManyTo_002 1252 2.10 0.74 2.67 183 HTML_FONT_SIZE_HUGE 1247 0.30 0.74 0.12 184 FVGT_m_MULTI_ODD_EMAIL 1245 0.26 0.74 0.06 185 REMOVE_BEFORE_LINK 1225 0.40 0.73 0.26 186 BAYES_05 1208 1.34 0.72 1.60 187 XMMoneyMeta_00 1199 0.57 0.71 0.52 188 XM_UB80 1172 0.23 0.70 0.03 189 XM_HighProb1 1163 0.21 0.69 0.01 190 HTML_IMAGE_ONLY_28 1159 0.48 0.69 0.40 191 DEAR_FRIEND 1134 0.22 0.67 0.03 192 T_HTML_TAG_BALANCE_CENTER 1132 0.29 0.67 0.14 193 RCVD_IN_MSPIKE_WL 1126 1.44 0.67 1.76 194 RELAYCOUNTRY_DE 1126 0.57 0.67 0.53 195 XM_XX_Yahoo 1115 0.23 0.66 0.05 196 XMCapTrack 1114 1.19 0.66 1.42 197 TR_XM_DK_Bayes2 1106 2.49 0.66 3.26 198 URI_NOVOWEL 1101 0.45 0.65 0.36 199 LONG_JUNK_URI3 1100 0.25 0.65 0.08 200 PLING_QUERY 1099 0.35 0.65 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 328361 84.73 93.03 81.27 2 DCC_CHECK_NEGATIVE 265823 52.32 20.01 65.79 3 DKIM_SIGNED 255019 69.62 85.20 63.12 4 XM_DK_Pass 250378 68.10 82.80 61.97 5 DKIM_VALID 233170 63.89 78.69 57.71 6 BAYES_50 230725 50.30 33.98 57.11 7 DKIM_VALID_AU 157053 45.18 60.31 38.87 8 XMListUnsubscribeExists 153136 47.68 71.12 37.90 9 XM_H_QuotedFrom 133267 39.86 56.35 32.98 10 T_TM2_M_HEADER_IN_MSG 131465 28.75 19.67 32.54 11 DCC_CHECK 130065 45.64 77.89 32.19 12 ALL_TRUSTED 96642 17.68 2.73 23.92 13 HTML_FONT_LOW_CONTRAST 90186 26.49 36.47 22.32 14 DKIM_VALID_EF 89348 22.64 23.89 22.11 15 MIME_HTML_ONLY 84952 24.06 31.34 21.03 16 MultiRelay 75686 18.38 17.54 18.73 17 XMSubLong 71301 19.79 24.91 17.65 18 FVGT_m_MULTI_ODD 67492 19.42 25.94 16.70 19 LOC_TINY_FONT_1 65502 21.89 35.51 16.21 20 T_KAM_HTML_FONT_INVALID 51620 15.15 20.83 12.78 21 XM_DK_Undo_02 47639 22.48 48.11 11.79 22 BAYES_99 45694 20.84 43.67 11.31 23 BAYES_00 41642 7.61 1.13 10.31 24 FSL_BULK_SIG 41094 11.23 13.76 10.17 25 BAYES_999 40394 18.06 37.37 10.00 26 XM_H_Long_From01 39560 9.54 8.93 9.79 27 LOTS_OF_MONEY 38812 10.74 13.44 9.61 28 XM_Body_Dirty_Words 38100 12.09 18.45 9.43 29 XM_Multi_Part_URI 37228 11.63 17.43 9.21 30 IN_ZIMBRA_NJ_WHITELIST 35841 6.27 0.03 8.87 31 XM_DKIMWhitelistDomains 34747 6.09 0.07 8.60 32 TooManyTo_001 33547 7.84 6.73 8.30 33 XM_Evil_Numbers_Gen 29581 9.28 13.96 7.32 34 T_XMDrugObfuBody_14 28440 8.10 10.63 7.04 35 RCVD_IN_RP_SAFE 27802 6.44 5.38 6.88 36 LotsOfNums_01 27783 7.22 8.04 6.88 37 SUBJ_ALL_CAPS 25619 5.67 4.05 6.34 38 RCVD_IN_RP_CERTIFIED 25000 5.58 4.12 6.19 39 XM_PDF 24974 4.66 1.03 6.18 40 HTML_IMAGE_RATIO_02 24565 9.13 16.45 6.08 41 RCVD_IN_IADB_LISTED 23732 4.81 2.27 5.87 42 MPART_ALT_DIFF 23677 6.12 6.74 5.86 43 BAYES_60 23282 6.01 6.60 5.76 44 BAYES_40 23047 4.45 1.44 5.70 45 XM_B_Phish_Phrases 22937 6.39 8.10 5.68 46 TR_XM_DocInvoice 22849 6.28 7.79 5.66 47 TR_DCC_Bayes_99 22109 14.00 34.45 5.47 48 DKIM_INVALID 21849 5.73 6.50 5.41 49 RCVD_IN_IADB_SPF 20362 4.16 2.07 5.04 50 MIME_QP_LONG_LINE 19987 4.64 3.92 4.95 51 TM2_M_URI_OPT_OUT 19389 4.72 4.54 4.80 52 TR_XM_DK_Bayes 18336 3.46 0.88 4.54 53 RELAYCOUNTRY_META 18257 8.17 16.93 4.52 54 T_REMOTE_IMAGE 18138 4.48 4.44 4.49 55 MIME_HTML_ONLY_MULTI 18049 4.04 3.03 4.47 56 XM_SendGrid 17866 4.50 4.69 4.42 57 RCVD_IN_IADB_SENDERID 17635 3.66 1.96 4.36 58 RCVD_IN_IADB_DK 17198 3.57 1.94 4.26 59 RCVD_IN_IADB_VOUCHED 17113 3.29 1.02 4.24 60 XMStrtUSub 17058 4.10 3.79 4.22 61 RCVD_IN_MSPIKE_H2 16917 4.13 4.00 4.19 62 TR_XM_DK_Bayes1 16202 3.05 0.75 4.01 63 XM_UncommonTLD01 15779 5.21 8.35 3.91 64 HTML_IMAGE_RATIO_04 14626 5.37 9.58 3.62 65 T_TooManySym_01 13948 3.64 4.10 3.45 66 BOTNET_IPINHOSTNAME 13720 6.04 12.37 3.40 67 BAYES_80 13175 4.37 7.05 3.26 68 TR_XM_DK_Bayes2 13163 2.49 0.66 3.26 69 ANY_BOUNCE_MESSAGE 13162 2.55 0.85 3.26 70 BOUNCE_MESSAGE 13161 2.55 0.85 3.26 71 XMNumbers 13061 4.01 5.86 3.23 72 HTML_IMAGE_RATIO_06 12593 3.69 5.08 3.12 73 XMSexyCombo_05 12180 4.99 9.74 3.01 74 XMSubMetaSx_00 12075 4.00 6.41 2.99 75 FROM_EXCESS_BASE64 11559 3.83 6.15 2.86 76 RCVD_IN_IADB_OPTIN 11015 2.11 0.63 2.73 77 TooManyTo_002 10777 2.10 0.74 2.67 78 BAYES_20 10604 2.17 1.10 2.62 79 XMNoVowels 10109 2.54 2.65 2.50 80 UNPARSEABLE_RELAY 9729 2.28 1.99 2.41 81 BAYES_95 9115 2.85 4.29 2.26 82 TVD_RCVD_IP 9073 1.67 0.30 2.25 83 HTML_MIME_NO_HTML_TAG 8897 2.43 2.98 2.20 84 MAILING_LIST_MULTI 8588 1.99 1.68 2.13 85 IN_HORDE_ADDRESS_BOOK 8553 1.52 0.08 2.12 86 TR_Symld_Words 8374 2.19 2.46 2.07 87 HELO_NODOT 8319 1.55 0.33 2.06 88 MIME_HTML_MOSTLY 8201 2.62 4.04 2.03 89 FILL_THIS_FORM 8006 2.07 2.29 1.98 90 XM_SPF_SoftFail 7672 2.55 4.12 1.90 91 XM_DK_Undo_01 7582 1.68 1.21 1.88 92 XM_DIRTYINTL 7455 2.44 3.86 1.85 93 T_XMDrugObfuBody_08 7419 2.06 2.59 1.84 94 XMSubNoVowel 7221 1.44 0.60 1.79 95 INVALID_MSGID 7164 1.32 0.23 1.77 96 TooManyTo_003 7138 1.42 0.60 1.77 97 RCVD_IN_MSPIKE_WL 7092 1.44 0.67 1.76 98 RCVD_IN_MSPIKE_H3 7086 1.43 0.65 1.75 99 XMDiploma_00 6963 2.19 3.30 1.72 100 FILL_THIS_FORM_LONG 6716 1.78 2.05 1.66 101 HTML_IMAGE_RATIO_08 6618 1.96 2.74 1.64 102 TO_MALFORMED 6509 1.15 0.03 1.61 103 BAYES_05 6448 1.34 0.72 1.60 104 XM_OfRef6 6419 2.34 4.16 1.59 105 MSGID_NOFQDN1 6358 1.12 0.04 1.57 106 XM_H_PHPOS 6080 1.42 1.23 1.50 107 TO_NO_BRKTS_HTML_IMG 5730 1.39 1.33 1.42 108 XMCapTrack 5726 1.19 0.66 1.42 109 T_TooManySym_02 5457 1.63 2.30 1.35 110 XM_CamelCaseFrm001 5196 1.81 3.07 1.29 111 TooManyTo_004 5179 1.04 0.46 1.28 112 UNTRUSTED_Relay 5026 3.62 9.32 1.24 113 XMStockSpam_06 5004 1.35 1.61 1.24 114 URI_HEX 4864 1.89 3.53 1.20 115 USER_IN_DEF_DKIM_WL 4835 0.90 0.18 1.20 116 RELAYCOUNTRY_CA 4727 1.87 3.55 1.17 117 T_OBFU_PDF_ATTACH 4632 0.91 0.36 1.15 118 XM_GoogleGroups 4571 0.96 0.56 1.13 119 T_FILL_THIS_FORM_SHORT 4502 1.65 2.94 1.11 120 URI_TRY_3LD 4441 1.17 1.33 1.10 121 XMGenDplmaNmb 4343 1.40 2.17 1.07 122 DKIM_ADSP_CUSTOM_MED 4243 1.07 1.11 1.05 123 XMGappySubj_01 4243 0.88 0.47 1.05 124 BOTNET 4139 4.45 12.67 1.02 125 XMPhish11 4097 1.00 0.95 1.01 126 TooManyTo_005 4037 0.82 0.40 1.00 127 XM_ProductURIs 3942 1.29 2.04 0.98 128 NO_DNS_FOR_FROM 3938 1.30 2.09 0.97 129 SpammyFromTLD_01 3813 1.53 2.94 0.94 130 RELAYCOUNTRY_GB 3669 1.25 2.07 0.91 131 XM_H_Long_From02 3573 1.05 1.46 0.88 132 XM_UB50 3462 1.93 4.49 0.86 133 XMSolicitRefs_0 3350 0.72 0.44 0.83 134 T_XMDrugObfuBody_00 3333 0.99 1.40 0.82 135 NML_ADSP_CUSTOM_MED 3201 0.82 0.89 0.79 136 DIET_1 3047 0.90 1.25 0.75 137 TM2_M_VERY_LONG_WORD 2984 1.12 2.05 0.74 138 HTML_FONT_SIZE_LARGE 2902 0.89 1.29 0.72 139 TR_MetaPhish_Combo_01 2814 0.67 0.59 0.70 140 USER_IN_WHITELIST 2701 0.47 0.00 0.67 141 TM2_M_BODY_EMPTY 2644 0.80 1.14 0.65 142 T_TooManySym_03 2507 0.51 0.26 0.62 143 XM_H_PHPMailer 2421 0.59 0.57 0.60 144 XM_E_Blogspot 2399 0.45 0.09 0.59 145 XM_RXBody 2374 0.99 1.94 0.59 146 XMBdyGiftCard01 2340 0.81 1.35 0.58 147 XM_ShortIntro_01 2265 0.50 0.35 0.56 148 XMSubEmpty 2260 0.53 0.46 0.56 149 MISSING_HEADERS 2235 1.01 2.09 0.55 150 XM_B_COPY_HTML 2218 0.72 1.13 0.55 151 SHORT_HELO_AND_INLINE_IMAGE 2192 0.40 0.07 0.54 152 XMGappySubj_02 2188 0.41 0.10 0.54 153 RELAYCOUNTRY_DE 2152 0.57 0.67 0.53 154 RCVD_IN_BL_SPAMCOP_NET 2127 1.36 3.34 0.53 155 XMLngstWrd_00 2127 0.49 0.41 0.53 156 XMSubMetaI_00 2115 0.90 1.80 0.52 157 FORGED_GMAIL_RCVD 2109 0.66 1.01 0.52 158 RCVD_IN_SORBS_DUL 2093 0.45 0.30 0.52 159 XMMoneyMeta_00 2092 0.57 0.71 0.52 160 HTTPS_HTTP_MISMATCH 2089 0.59 0.77 0.52 161 T_XMHurry_00 2080 0.75 1.30 0.51 162 T_Symld_Words_02 2048 0.67 1.05 0.51 163 HTML_IMAGE_ONLY_32 2028 0.44 0.28 0.50 164 XMBrknScrpt_02 2006 0.65 1.02 0.50 165 XM_B_TRADE_HTML 1969 0.49 0.49 0.49 166 XMhairloss01 1935 0.37 0.12 0.48 167 AC_DIV_BONANZA 1926 0.42 0.28 0.48 168 HTML_FONT_FACE_BAD 1869 0.63 1.02 0.46 169 TM2_M_A_HREF_HREF 1867 0.46 0.47 0.46 170 XMBody_78 1851 0.56 0.81 0.46 171 XMLngstWrd_01 1849 0.44 0.39 0.46 172 XM_B_REG_HTML 1837 0.76 1.48 0.45 173 XMBody_95 1795 0.35 0.14 0.44 174 XMHTMLBadTable_001 1770 0.63 1.10 0.44 175 T_FILL_THIS_FORM_LOAN 1749 0.55 0.84 0.43 176 TR_XM_RelayPhish 1744 0.72 1.42 0.43 177 XMRcvdHeader_15 1694 0.30 0.00 0.42 178 XM_D_tchamptons_WL 1659 0.29 0.00 0.41 179 UPPERCASE_50_75 1638 0.39 0.34 0.41 180 XMDateMe_00 1629 0.37 0.29 0.40 181 XMSubMetaSxObfu_02 1616 0.35 0.23 0.40 182 HTML_IMAGE_ONLY_28 1605 0.48 0.69 0.40 183 TR_LOTS_OF_MONEY2 1594 0.63 1.18 0.39 184 T_MONEY_PERCENT 1594 0.63 1.18 0.39 185 FUZZY_CREDIT 1591 0.30 0.09 0.39 186 PRESENTAMOS_ES 1552 0.27 0.01 0.38 187 RELAYCOUNTRY_AU 1541 0.53 0.90 0.38 188 SpammyFromTLD_02 1486 1.26 3.38 0.37 189 XMSexyCombo_01 1477 0.69 1.48 0.37 190 URI_NOVOWEL 1452 0.45 0.65 0.36 191 HTML_TAG_BALANCE_BODY 1442 0.39 0.48 0.36 192 XMSubMetaSxObfu_03 1427 0.55 1.01 0.35 193 TVD_SPACE_RATIO 1389 0.32 0.27 0.34 194 MPART_ALT_DIFF_COUNT 1348 0.53 0.99 0.33 195 XMBody_17 1323 0.65 1.42 0.33 196 RDNS_DYNAMIC 1308 0.46 0.80 0.32 197 XMPhish30 1290 0.60 1.27 0.32 198 TVD_PH_SUBJ_META1 1285 0.27 0.16 0.32 199 HTML_IMAGE_ONLY_24 1277 0.38 0.54 0.32 200 TO_NO_BRKTS_HTML_ONLY 1225 0.25 0.13 0.30 ----------------------------------------------------------------------