Email: 673833 Autolearn: 0 AvgScore: 3.53 AvgScanTime: 2.11 sec Spam: 171399 Autolearn: 0 AvgScore: 17.25 AvgScanTime: 2.53 sec Ham: 502434 Autolearn: 0 AvgScore: -1.16 AvgScanTime: 1.97 sec Time Spent Running SA: 395.78 hours Time Spent Processing Spam: 120.40 hours Time Spent Processing Ham: 275.38 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 161029 90.73 93.95 89.63 2 DCC_CHECK 137732 51.13 80.36 41.17 3 XM_B_Unicode 95583 67.02 55.77 70.86 4 MIME_HTML_ONLY 90994 30.13 53.09 22.29 5 DKIM_SIGNED 89252 70.92 52.07 77.35 6 XM_DK_Pass 84478 69.38 49.29 76.24 7 DKIM_VALID 78996 65.76 46.09 72.48 8 BAYES_50 77685 51.49 45.32 53.60 9 XMListUnsubscribeExists 72785 50.55 42.47 53.31 10 XM_UncommonTLD01 66775 13.06 38.96 4.23 11 FSL_BULK_SIG 66586 14.62 38.85 6.35 12 DKIM_VALID_AU 58203 49.81 33.96 55.22 13 XM_B_Unicode3 53675 38.92 31.32 41.52 14 SpammyFromTLD_02 47027 7.21 27.44 0.31 15 RELAYCOUNTRY_META 46460 11.17 27.11 5.73 16 XMSubLong 43826 22.42 25.57 21.34 17 KHOP_HELO_FCRDNS 43774 8.08 25.54 2.13 18 HTML_MIME_NO_HTML_TAG 43222 8.13 25.22 2.31 19 HTML_FONT_LOW_CONTRAST 42795 27.33 24.97 28.14 20 FROM_SUSPICIOUS_NTLD 40446 6.03 23.60 0.03 21 T_REMOTE_IMAGE 40443 9.38 23.60 4.53 22 FROM_SUSPICIOUS_NTLD_FP 40345 6.01 23.54 0.03 23 BOTNET 39309 7.25 22.93 1.90 24 RDNS_DYNAMIC 39143 6.05 22.84 0.33 25 XM_DK_Undo_02 38150 10.53 22.26 6.53 26 LOC_TINY_FONT_1 37721 23.24 22.01 23.66 27 HTML_SHORT_LINK_IMG_1 37153 5.54 21.68 0.04 28 DKIM_ADSP_NXDOMAIN 35940 6.27 20.97 1.25 29 XM_Body_Dirty_Words 33850 15.33 19.75 13.83 30 XM_B_Unsub 31637 12.52 18.46 10.49 31 T_HTML_TAG_BALANCE_CENTER 31369 4.75 18.30 0.13 32 BODY_URI_ONLY 31205 4.68 18.21 0.06 33 UNTRUSTED_Relay 30637 5.77 17.87 1.64 34 HTML_IMAGE_ONLY_08 30340 4.60 17.70 0.14 35 DCC_CHECK_NEGATIVE 30323 46.81 17.69 56.74 36 MultiRelay 30293 18.74 17.67 19.11 37 XMSexyCombo_05 29655 7.79 17.30 4.54 38 BOTNET_IPINHOSTNAME 29525 7.74 17.23 4.50 39 DKIM_VALID_EF 29203 25.32 17.04 28.15 40 BAYES_99 28925 7.11 16.88 3.78 41 XM_SPF_SoftFail 28620 5.66 16.70 1.89 42 FVGT_m_MULTI_ODD 28310 19.71 16.52 20.79 43 SHORT_IMG_SUSP_NTLD 27492 4.08 16.04 0.00 44 T_TM2_M_HEADER_IN_MSG 25619 26.18 14.95 30.01 45 XM_BadFromFormat 24453 3.72 14.27 0.12 46 FROM_MISSP_REPLYTO 22843 3.39 13.33 0.01 47 HTML_FONT_SIZE_LARGE 22550 3.45 13.16 0.14 48 FROM_MISSP_DYNIP 22237 3.30 12.97 0.00 49 TO_MALFORMED 22180 4.27 12.94 1.31 50 HDRS_MISSP 21565 3.22 12.58 0.02 51 BAYES_999 21496 5.51 12.54 3.12 52 TR_DCC_Bayes_99 21414 4.49 12.49 1.76 53 T_KAM_HTML_FONT_INVALID 21265 16.83 12.41 18.34 54 XMNumbers 21053 5.90 12.28 3.72 55 XMSubMetaSx_00 21046 6.01 12.28 3.87 56 XM_Multi_Part_URI 19741 11.83 11.52 11.94 57 RCVD_IN_BL_SPAMCOP_NET 19525 3.64 11.39 1.00 58 MIME_HEADER_CTYPE_ONLY 19471 2.95 11.36 0.08 59 RCVD_IN_RP_RNBL 17995 2.76 10.50 0.12 60 LOTS_OF_MONEY 17861 9.09 10.42 8.64 61 BAYES_60 17679 6.06 10.31 4.61 62 XM_DIRTYINTL 14817 4.14 8.64 2.61 63 HTML_IMAGE_RATIO_02 13682 8.56 7.98 8.76 64 BAYES_80 13355 3.84 7.79 2.49 65 XM_UB50 13190 2.66 7.70 0.94 66 XM_H_Long_From01 12823 6.57 7.48 6.25 67 XM_Evil_Numbers_Gen 12718 8.57 7.42 8.96 68 RCVD_IN_PSBL 12379 1.87 7.22 0.05 69 MISSING_HEADERS 12155 2.12 7.09 0.43 70 TooManyTo_001 12101 7.87 7.06 8.15 71 T_XMDrugObfuBody_14 11481 7.93 6.70 8.35 72 BOTNET_NORDNS 11076 1.70 6.46 0.08 73 MPART_ALT_DIFF 10984 5.14 6.41 4.71 74 RCVD_IN_MSPIKE_BL 10695 2.32 6.24 0.98 75 HK_RANDOM_FROM 10398 1.64 6.07 0.13 76 DKIM_INVALID 10256 5.16 5.98 4.88 77 HTML_IMAGE_ONLY_12 10066 1.63 5.87 0.18 78 BAYES_40 9182 5.84 5.36 6.00 79 XM_B_Phish_Phrases 8950 5.50 5.22 5.59 80 NO_DNS_FOR_FROM 8837 2.82 5.16 2.03 81 HDRS_LCASE_IMGONLY 8600 1.30 5.02 0.03 82 LotsOfNums_01 8599 7.42 5.02 8.24 83 REPLYTO_WITHOUT_TO_CC 8329 1.26 4.86 0.04 84 FROM_EXCESS_BASE64 8223 4.05 4.80 3.79 85 XM_CamelCaseFrm001 8153 2.99 4.76 2.38 86 RCVD_IN_MSPIKE_H2 8123 8.03 4.74 9.15 87 XMSexyCombo_01 7903 1.66 4.61 0.66 88 HTML_IMAGE_RATIO_04 7811 5.86 4.56 6.30 89 RCVD_IN_MSPIKE_L5 7803 1.40 4.55 0.32 90 XMStrtUSub 7790 4.85 4.54 4.95 91 SpammyFromTLD_01 7777 1.82 4.54 0.89 92 XM_B_SpammyTLD 7585 2.57 4.43 1.93 93 MIME_HTML_MOSTLY 7523 2.89 4.39 2.37 94 BAYES_95 7303 2.22 4.26 1.52 95 HTML_IMAGE_RATIO_08 7119 3.38 4.15 3.11 96 TO_EQ_FM_DOM_HTML_IMG 7116 1.06 4.15 0.01 97 BAYES_20 6903 4.48 4.03 4.63 98 HTML_SHORT_LINK_IMG_2 6468 0.99 3.77 0.05 99 RELAYCOUNTRY_CA 6383 2.25 3.72 1.74 100 XM_SendGrid 6269 5.48 3.66 6.10 101 XMSexyCombo_04 6207 1.08 3.62 0.21 102 BAYES_00 6089 15.88 3.55 20.09 103 FVGT_m_MULTI_ODD_EMAIL 6009 0.91 3.51 0.02 104 MultiRelay_Combo 5822 1.06 3.40 0.27 105 MultiRelay_CC 5822 1.06 3.40 0.27 106 XMMoneyMeta_00 5702 1.26 3.33 0.55 107 XM_SPF_Unknown 5627 1.34 3.28 0.67 108 MIME_QP_LONG_LINE 5420 5.58 3.16 6.40 109 XMSubMetaSSx_00 5370 0.95 3.13 0.20 110 URI_BUFFLY 5369 0.80 3.13 0.00 111 RELAYCOUNTRY_GB 5336 1.69 3.11 1.21 112 RELAYCOUNTRY_FR 5328 1.04 3.11 0.33 113 TR_Mismatch_TLD_02 5259 0.82 3.07 0.06 114 TM2_M_URI_OPT_OUT 5235 2.54 3.05 2.37 115 HTML_IMAGE_RATIO_06 4960 3.72 2.89 4.00 116 DIET_1 4885 1.18 2.85 0.61 117 URI_HEX 4843 1.75 2.83 1.39 118 MIME_HTML_ONLY_MULTI 4750 3.03 2.77 3.11 119 T_TooManySym_01 4713 4.16 2.75 4.64 120 XM_OfRef6 4597 1.57 2.68 1.19 121 HTML_IMAGE_ONLY_16 4462 0.86 2.60 0.27 122 RCVD_IN_MSPIKE_WL 4333 8.48 2.53 10.51 123 RCVD_IN_MSPIKE_H3 4332 8.47 2.53 10.50 124 DATE_IN_PAST_03_06 4156 0.71 2.42 0.12 125 RELAYCOUNTRY_CN 4002 0.64 2.33 0.06 126 XM_URI_RBL 3965 0.81 2.31 0.29 127 TR_Symld_Words 3919 1.75 2.29 1.56 128 XM_UB60 3667 0.60 2.14 0.07 129 FROM_LOCAL_NOVOWEL 3659 0.56 2.13 0.02 130 T_XMDrugObfuBody_08 3650 1.77 2.13 1.64 131 BAYES_05 3634 2.70 2.12 2.90 132 XM_H_TOP 3591 0.54 2.10 0.00 133 UNPARSEABLE_RELAY 3421 2.14 2.00 2.18 134 LongTLD 3400 0.62 1.98 0.15 135 XMHTML_After_End 3329 1.34 1.94 1.13 136 DRUGS_ERECTILE 3269 0.49 1.91 0.01 137 XM_Palau_URI 3228 0.49 1.88 0.01 138 DKIM_ADSP_CUSTOM_MED 3175 1.26 1.85 1.05 139 XMSubMetaD_00 3160 0.53 1.84 0.08 140 TR_XM_DK_SendGrid 3118 2.88 1.82 3.25 141 SUBJECT_NEEDS_ENCODING 3076 0.46 1.79 0.00 142 XM_UB80 3071 0.47 1.79 0.02 143 XM_UB99 3067 0.46 1.79 0.00 144 XMSlimDrugH 3062 0.71 1.79 0.34 145 T_Symld_Words_02 3051 1.03 1.78 0.78 146 NML_ADSP_CUSTOM_MED 3023 1.04 1.76 0.79 147 SUBJ_ILLEGAL_CHARS 3018 0.45 1.76 0.00 148 TR_XM_RelayPhish 2996 1.09 1.75 0.87 149 RELAYCOUNTRY_IN 2990 0.55 1.74 0.14 150 NORDNS_LOW_CONTRAST 2892 0.43 1.69 0.01 151 XMDiploma_00 2868 1.69 1.67 1.69 152 FORGED_GMAIL_RCVD 2794 0.81 1.63 0.53 153 XM_H_Long_From02 2747 1.49 1.60 1.45 154 XM_B_Unsub2 2699 2.35 1.57 2.62 155 XMSubMetaI_00 2653 1.19 1.55 1.07 156 XMPhish11 2622 1.30 1.53 1.22 157 MISSING_MIMEOLE 2606 0.45 1.52 0.09 158 ALL_TRUSTED 2572 9.92 1.50 12.79 159 TR_XM_PHPDW 2542 0.79 1.48 0.55 160 RCVD_IN_IADB_LISTED 2467 4.40 1.44 5.41 161 TR_XM_PHPForged 2456 0.75 1.43 0.52 162 SUBJ_ALL_CAPS 2448 1.71 1.43 1.80 163 TR_XM_FormFill2 2446 0.75 1.43 0.51 164 HK_RANDOM_REPLYTO 2443 0.59 1.43 0.30 165 XM_H_PHPOS 2434 0.74 1.42 0.51 166 BODY_SINGLE_WORD 2420 0.36 1.41 0.01 167 FROM_NTLD_LINKBAIT 2406 0.36 1.40 0.00 168 HK_RANDOM_ENVFROM 2396 0.43 1.40 0.10 169 BODY_SINGLE_URI 2388 0.36 1.39 0.00 170 RELAYCOUNTRY_DE 2334 0.68 1.36 0.45 171 RCVD_IN_IADB_SPF 2296 3.83 1.34 4.68 172 TO_NO_BRKTS_HTML_ONLY 2267 0.52 1.32 0.25 173 RCVD_IN_IADB_DK 2263 3.36 1.32 4.05 174 RCVD_IN_IADB_SENDERID 2261 3.38 1.32 4.09 175 RELAYCOUNTRY_RU 2258 0.34 1.32 0.01 176 SERGIO_SUBJECT_PORN014 2197 0.33 1.28 0.00 177 RELAYCOUNTRY_JP 2184 0.35 1.27 0.04 178 TVD_SPACE_RATIO_MINFP 2173 0.33 1.27 0.02 179 XMStockSpam_06 2172 1.14 1.27 1.10 180 T_XMDrugObfuBody_00 2148 1.35 1.25 1.38 181 XMGenDplmaNmb 2136 1.16 1.25 1.13 182 TM2_M_VERY_LONG_WORD 2109 1.17 1.23 1.15 183 XM_H_PHPMailer 2103 0.70 1.23 0.52 184 NO_FM_NAME_IP_HOSTN 2076 0.31 1.21 0.00 185 TVD_RCVD_SPACE_BRACKET 2027 0.30 1.18 0.00 186 RCVD_IN_MSPIKE_L3 2012 0.59 1.17 0.39 187 RCVD_IN_RP_SAFE 1983 7.44 1.16 9.58 188 XMBody_17 1975 1.00 1.15 0.95 189 T_XMHurry_00 1974 0.77 1.15 0.64 190 XM_UB999 1946 0.29 1.14 0.00 191 MIME_BASE64_TEXT 1935 0.34 1.13 0.07 192 TR_XM_DK_Bayes 1931 11.63 1.13 15.21 193 XMSlimDrugs 1870 0.30 1.09 0.03 194 XMWghtMeta_00 1851 0.30 1.08 0.03 195 TR_XM_INV_DKIM 1833 0.39 1.07 0.16 196 XMSubMetaSxObfu_03 1825 0.68 1.06 0.55 197 DATE_IN_PAST_06_12 1780 0.32 1.04 0.08 198 TR_XM_DK_Bayes1 1763 11.08 1.03 14.51 199 URI_TRY_3LD 1738 1.16 1.01 1.21 200 MAILING_LIST_MULTI 1733 2.09 1.01 2.45 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 450341 90.73 93.95 89.63 2 DKIM_SIGNED 388647 70.92 52.07 77.35 3 XM_DK_Pass 383040 69.38 49.29 76.24 4 DKIM_VALID 364142 65.76 46.09 72.48 5 XM_B_Unicode 356009 67.02 55.77 70.86 6 DCC_CHECK_NEGATIVE 285078 46.81 17.69 56.74 7 DKIM_VALID_AU 277431 49.81 33.96 55.22 8 BAYES_50 269286 51.49 45.32 53.60 9 XMListUnsubscribeExists 267836 50.55 42.47 53.31 10 XM_B_Unicode3 208591 38.92 31.32 41.52 11 DCC_CHECK 206828 51.13 80.36 41.17 12 T_TM2_M_HEADER_IN_MSG 150788 26.18 14.95 30.01 13 DKIM_VALID_EF 141443 25.32 17.04 28.15 14 HTML_FONT_LOW_CONTRAST 141396 27.33 24.97 28.14 15 LOC_TINY_FONT_1 118871 23.24 22.01 23.66 16 MIME_HTML_ONLY 112007 30.13 53.09 22.29 17 XMSubLong 107226 22.42 25.57 21.34 18 FVGT_m_MULTI_ODD 104479 19.71 16.52 20.79 19 BAYES_00 100916 15.88 3.55 20.09 20 MultiRelay 95995 18.74 17.67 19.11 21 T_KAM_HTML_FONT_INVALID 92158 16.83 12.41 18.34 22 TR_XM_DK_Bayes 76427 11.63 1.13 15.21 23 TR_XM_DK_Bayes1 72925 11.08 1.03 14.51 24 XM_Body_Dirty_Words 69462 15.33 19.75 13.83 25 TR_XM_DK_Bayes2 64795 9.79 0.69 12.90 26 ALL_TRUSTED 64285 9.92 1.50 12.79 27 XM_Multi_Part_URI 59982 11.83 11.52 11.94 28 RCVD_IN_MSPIKE_WL 52817 8.48 2.53 10.51 29 RCVD_IN_MSPIKE_H3 52739 8.47 2.53 10.50 30 XM_B_Unsub 52728 12.52 18.46 10.49 31 RCVD_IN_RP_SAFE 48144 7.44 1.16 9.58 32 RCVD_IN_MSPIKE_H2 45964 8.03 4.74 9.15 33 XM_Evil_Numbers_Gen 45022 8.57 7.42 8.96 34 HTML_IMAGE_RATIO_02 44027 8.56 7.98 8.76 35 LOTS_OF_MONEY 43420 9.09 10.42 8.64 36 RCVD_IN_RP_CERTIFIED 42531 6.53 0.84 8.46 37 T_XMDrugObfuBody_14 41949 7.93 6.70 8.35 38 LotsOfNums_01 41384 7.42 5.02 8.24 39 TooManyTo_001 40930 7.87 7.06 8.15 40 XM_DKIMWhitelistDomains 38149 5.66 0.00 7.59 41 XM_DK_Undo_02 32806 10.53 22.26 6.53 42 MIME_QP_LONG_LINE 32165 5.58 3.16 6.40 43 FSL_BULK_SIG 31901 14.62 38.85 6.35 44 HTML_IMAGE_RATIO_04 31642 5.86 4.56 6.30 45 XM_H_Long_From01 31427 6.57 7.48 6.25 46 XM_SendGrid 30647 5.48 3.66 6.10 47 BAYES_40 30146 5.84 5.36 6.00 48 RELAYCOUNTRY_META 28810 11.17 27.11 5.73 49 XM_B_Phish_Phrases 28093 5.50 5.22 5.59 50 RCVD_IN_IADB_LISTED 27168 4.40 1.44 5.41 51 XMStrtUSub 24886 4.85 4.54 4.95 52 DKIM_INVALID 24505 5.16 5.98 4.88 53 XM_PDF 24029 3.72 0.60 4.78 54 MPART_ALT_DIFF 23666 5.14 6.41 4.71 55 RCVD_IN_IADB_SPF 23519 3.83 1.34 4.68 56 T_TooManySym_01 23294 4.16 2.75 4.64 57 BAYES_20 23261 4.48 4.03 4.63 58 BAYES_60 23162 6.06 10.31 4.61 59 XMSexyCombo_05 22804 7.79 17.30 4.54 60 T_REMOTE_IMAGE 22775 9.38 23.60 4.53 61 BOTNET_IPINHOSTNAME 22614 7.74 17.23 4.50 62 XM_UncommonTLD01 21242 13.06 38.96 4.23 63 RCVD_IN_IADB_SENDERID 20537 3.38 1.32 4.09 64 RCVD_IN_IADB_DK 20357 3.36 1.32 4.05 65 HTML_IMAGE_RATIO_06 20107 3.72 2.89 4.00 66 XMSubMetaSx_00 19422 6.01 12.28 3.87 67 FROM_EXCESS_BASE64 19060 4.05 4.80 3.79 68 BAYES_99 18974 7.11 16.88 3.78 69 XMNumbers 18707 5.90 12.28 3.72 70 IN_ZIMBRA_NJ_WHITELIST 18196 2.71 0.03 3.62 71 RCVD_IN_IADB_VOUCHED 17282 2.67 0.40 3.44 72 TR_XM_DK_SendGrid 16304 2.88 1.82 3.25 73 BAYES_999 15663 5.51 12.54 3.12 74 MIME_HTML_ONLY_MULTI 15649 3.03 2.77 3.11 75 HTML_IMAGE_RATIO_08 15636 3.38 4.15 3.11 76 BAYES_05 14553 2.70 2.12 2.90 77 XM_B_Unsub2 13151 2.35 1.57 2.62 78 XM_DIRTYINTL 13099 4.14 8.64 2.61 79 BAYES_80 12504 3.84 7.79 2.49 80 MAILING_LIST_MULTI 12334 2.09 1.01 2.45 81 XM_CamelCaseFrm001 11969 2.99 4.76 2.38 82 MIME_HTML_MOSTLY 11927 2.89 4.39 2.37 83 TM2_M_URI_OPT_OUT 11903 2.54 3.05 2.37 84 HTML_MIME_NO_HTML_TAG 11586 8.13 25.22 2.31 85 T_TooManySym_02 11482 1.94 0.92 2.29 86 UNPARSEABLE_RELAY 10978 2.14 2.00 2.18 87 XM_H_Trusted_IP 10877 1.61 0.00 2.16 88 RCVD_IN_IADB_OPTIN 10854 1.69 0.32 2.16 89 KHOP_HELO_FCRDNS 10681 8.08 25.54 2.13 90 TooManyTo_002 10227 1.73 0.82 2.04 91 NO_DNS_FOR_FROM 10195 2.82 5.16 2.03 92 XM_B_SpammyTLD 9699 2.57 4.43 1.93 93 BOTNET 9536 7.25 22.93 1.90 94 XM_SPF_SoftFail 9505 5.66 16.70 1.89 95 TVD_RCVD_IP 9123 1.52 0.67 1.82 96 SUBJ_ALL_CAPS 9049 1.71 1.43 1.80 97 TR_DCC_Bayes_99 8845 4.49 12.49 1.76 98 RELAYCOUNTRY_CA 8747 2.25 3.72 1.74 99 XMDiploma_00 8503 1.69 1.67 1.69 100 XM_DK_Undo_01 8435 1.46 0.80 1.68 101 HELO_NODOT 8275 1.34 0.43 1.65 102 UNTRUSTED_Relay 8254 5.77 17.87 1.64 103 ANY_BOUNCE_MESSAGE 8252 1.33 0.43 1.64 104 BOUNCE_MESSAGE 8250 1.33 0.43 1.64 105 T_XMDrugObfuBody_08 8245 1.77 2.13 1.64 106 HELO_NO_DOMAIN 8244 1.33 0.41 1.64 107 TR_Symld_Words 7861 1.75 2.29 1.56 108 IN_HORDE_ADDRESS_BOOK 7743 1.17 0.09 1.54 109 INVALID_MSGID 7662 1.22 0.32 1.52 110 BAYES_95 7633 2.22 4.26 1.52 111 XM_H_Long_From02 7270 1.49 1.60 1.45 112 CK_HELO_DYNAMIC_SPLIT_IP 7081 1.30 0.98 1.41 113 HELO_DYNAMIC_IPADDR2 7076 1.17 0.47 1.41 114 TooManyTo_003 6966 1.20 0.64 1.39 115 URI_HEX 6966 1.75 2.83 1.39 116 T_XMDrugObfuBody_00 6916 1.35 1.25 1.38 117 XMCapTrack 6639 1.05 0.26 1.32 118 TO_MALFORMED 6589 4.27 12.94 1.31 119 DKIM_ADSP_NXDOMAIN 6289 6.27 20.97 1.25 120 XM_GoogleGroups 6253 0.99 0.26 1.24 121 XMPhish11 6133 1.30 1.53 1.22 122 RELAYCOUNTRY_GB 6077 1.69 3.11 1.21 123 URI_TRY_3LD 6069 1.16 1.01 1.21 124 XM_OfRef6 5988 1.57 2.68 1.19 125 USER_IN_DEF_DKIM_WL 5832 0.87 0.03 1.16 126 T_FILL_THIS_FORM_SHORT 5783 1.07 0.84 1.15 127 TM2_M_VERY_LONG_WORD 5780 1.17 1.23 1.15 128 TR_MetaPhish_Combo_01 5753 1.08 0.88 1.15 129 XMHTML_After_End 5701 1.34 1.94 1.13 130 XMGenDplmaNmb 5690 1.16 1.25 1.13 131 XMBdyGiftCard01 5517 1.05 0.91 1.10 132 XMStockSpam_06 5505 1.14 1.27 1.10 133 XMSubNoVowel 5463 0.98 0.67 1.09 134 HTML_FONT_FACE_BAD 5440 0.96 0.61 1.08 135 XMSubMetaI_00 5376 1.19 1.55 1.07 136 DKIM_ADSP_CUSTOM_MED 5292 1.26 1.85 1.05 137 TooManyTo_004 5115 0.89 0.52 1.02 138 RCVD_IN_BL_SPAMCOP_NET 5021 3.64 11.39 1.00 139 XMGappySubj_01 4962 0.79 0.22 0.99 140 AC_FROM_MANY_DOTS 4930 0.74 0.02 0.98 141 RCVD_IN_MSPIKE_BL 4907 2.32 6.24 0.98 142 XMBody_17 4760 1.00 1.15 0.95 143 XM_UB50 4701 2.66 7.70 0.94 144 SpammyFromTLD_01 4462 1.82 4.54 0.89 145 TR_XM_RelayPhish 4364 1.09 1.75 0.87 146 TooManyTo_005 4287 0.74 0.41 0.85 147 XMBody_95 4138 0.63 0.06 0.82 148 NML_ADSP_CUSTOM_MED 3987 1.04 1.76 0.79 149 T_Symld_Words_02 3909 1.03 1.78 0.78 150 T_OBFU_PDF_ATTACH 3670 0.58 0.13 0.73 151 XMHTMLBadTable_001 3489 0.65 0.52 0.69 152 XM_ProductURIs 3441 0.71 0.79 0.68 153 XM_SPF_Unknown 3379 1.34 3.28 0.67 154 XMSexyCombo_01 3314 1.66 4.61 0.66 155 XMBrknScrpt_02 3254 0.69 0.83 0.65 156 T_XMHurry_00 3212 0.77 1.15 0.64 157 DIET_1 3077 1.18 2.85 0.61 158 XMPhish30 3075 0.62 0.65 0.61 159 XMNoVowels 3070 0.58 0.50 0.61 160 HTML_IMAGE_ONLY_20 3052 0.52 0.25 0.61 161 HTML_TAG_BALANCE_BODY 2991 0.58 0.55 0.60 162 XM_B_REG_HTML 2924 0.47 0.15 0.58 163 XMBody_78 2909 0.58 0.57 0.58 164 XM_ShortIntro_01 2879 0.52 0.37 0.57 165 HTTPS_HTTP_MISMATCH 2853 0.65 0.89 0.57 166 USER_IN_WHITELIST 2848 0.42 0.00 0.57 167 PLING_QUERY 2820 0.56 0.54 0.56 168 XMMoneyMeta_00 2788 1.26 3.33 0.55 169 XMSubMetaSxObfu_03 2754 0.68 1.06 0.55 170 TR_XM_PHPDW 2751 0.79 1.48 0.55 171 FROM_GOV_DKIM_AU 2734 0.45 0.17 0.54 172 FORGED_GMAIL_RCVD 2676 0.81 1.63 0.53 173 SUBJ_DOLLARS 2612 0.50 0.44 0.52 174 XM_H_PHPMailer 2598 0.70 1.23 0.52 175 TR_XM_PHPForged 2590 0.75 1.43 0.52 176 TR_XM_FormFill2 2585 0.75 1.43 0.51 177 XM_H_PHPOS 2558 0.74 1.42 0.51 178 XM_Body_Obfu01 2548 0.49 0.43 0.51 179 RELAYCOUNTRY_AU 2465 0.48 0.44 0.49 180 TR_LOTS_OF_MONEY3 2370 0.53 0.71 0.47 181 T_TooManySym_03 2364 0.52 0.67 0.47 182 RELAYCOUNTRY_DE 2263 0.68 1.36 0.45 183 T_MONEY_PERCENT 2240 0.54 0.80 0.45 184 TR_LOTS_OF_MONEY2 2240 0.54 0.80 0.45 185 FSL_THIS_IS_ADV 2238 0.41 0.31 0.45 186 XMLngstWrd_00 2236 0.41 0.30 0.45 187 SHORT_HELO_AND_INLINE_IMAGE 2228 0.34 0.02 0.44 188 RCVD_IN_SORBS_DUL 2205 0.50 0.68 0.44 189 MISSING_HEADERS 2159 2.12 7.09 0.43 190 HTML_IMAGE_ONLY_28 2137 0.48 0.64 0.43 191 AC_DIV_BONANZA 2111 0.34 0.09 0.42 192 FILL_THIS_FORM 2100 0.55 0.94 0.42 193 FROM_GOV_SPOOF 2085 0.37 0.25 0.41 194 XMDateMe_00 2022 0.38 0.31 0.40 195 XMLngstWrd_01 2007 0.37 0.28 0.40 196 MPART_ALT_DIFF_COUNT 1998 0.43 0.54 0.40 197 TM2_M_BODY_EMPTY 1962 0.32 0.10 0.39 198 RCVD_IN_MSPIKE_L3 1950 0.59 1.17 0.39 199 HTML_IMAGE_ONLY_32 1896 0.42 0.53 0.38 200 TVD_SPACE_RATIO 1866 0.46 0.72 0.37 ----------------------------------------------------------------------