Email: 785677 Autolearn: 0 AvgScore: 2.10 AvgScanTime: 3.93 sec Spam: 227297 Autolearn: 0 AvgScore: 12.41 AvgScanTime: 4.74 sec Ham: 558380 Autolearn: 0 AvgScore: -2.10 AvgScanTime: 3.60 sec Time Spent Running SA: 858.13 hours Time Spent Processing Spam: 299.47 hours Time Spent Processing Ham: 558.65 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 219251 90.57 96.46 88.17 2 DKIM_SIGNED 186264 63.22 81.95 55.60 3 XM_DK_Pass 180911 61.83 79.59 54.60 4 DCC_CHECK 176548 41.32 77.67 26.52 5 DKIM_VALID 171573 57.96 75.48 50.83 6 XMListUnsubscribeExists 159674 45.85 70.25 35.92 7 DKIM_VALID_AU 133569 42.26 58.76 35.54 8 XM_H_QuotedFrom 119540 46.85 52.59 44.51 9 XM_DK_Undo_02 106556 20.96 46.88 10.40 10 BAYES_99 95402 19.14 41.97 9.85 11 BAYES_999 81245 16.49 35.74 8.66 12 HTML_FONT_LOW_CONTRAST 79509 25.56 34.98 21.72 13 LOC_TINY_FONT_1 78832 20.45 34.68 14.66 14 BAYES_50 77793 46.06 34.23 50.88 15 TR_DCC_Bayes_99 75213 12.90 33.09 4.68 16 MIME_HTML_ONLY 74435 19.72 32.75 14.41 17 FVGT_m_MULTI_ODD 60919 20.27 26.80 17.61 18 XMSubLong 60304 20.04 26.53 17.40 19 DKIM_VALID_EF 50348 20.50 22.15 19.83 20 T_KAM_HTML_FONT_INVALID 46955 14.58 20.66 12.10 21 DCC_CHECK_NEGATIVE 46819 57.09 20.60 71.95 22 T_TM2_M_HEADER_IN_MSG 44753 24.30 19.69 26.18 23 XM_Body_Dirty_Words 42556 11.84 18.72 9.04 24 RELAYCOUNTRY_META 39716 7.89 17.47 3.98 25 XM_Multi_Part_URI 38682 10.70 17.02 8.13 26 HTML_IMAGE_RATIO_02 35224 8.43 15.50 5.56 27 MultiRelay 33794 14.85 14.87 14.85 28 XM_Evil_Numbers_Gen 32709 10.93 14.39 9.52 29 FSL_BULK_SIG 32583 8.12 14.33 5.59 30 BOTNET 29160 4.55 12.83 1.18 31 BOTNET_IPINHOSTNAME 28394 5.64 12.49 2.85 32 LOTS_OF_MONEY 27010 8.74 11.88 7.46 33 UNTRUSTED_Relay 25732 4.03 11.32 1.06 34 XMSexyCombo_05 22851 4.77 10.05 2.63 35 FROM_EXCESS_BASE64 22522 4.79 9.91 2.71 36 TooManyTo_001 22072 7.91 9.71 7.17 37 T_XMDrugObfuBody_14 21990 7.23 9.67 6.23 38 XM_B_Phish_Phrases 21208 5.91 9.33 4.52 39 HTML_IMAGE_RATIO_04 19328 16.99 8.50 20.44 40 LotsOfNums_01 18337 7.23 8.07 6.88 41 XM_H_Long_From01 18027 5.14 7.93 4.01 42 BAYES_80 17500 4.67 7.70 3.43 43 MPART_ALT_DIFF 17275 4.08 7.60 2.65 44 TR_XM_DocInvoice 16577 4.05 7.29 2.73 45 XMSubMetaSx_00 16354 4.03 7.19 2.75 46 BAYES_60 16186 5.87 7.12 5.36 47 T_REMOTE_IMAGE 15749 4.72 6.93 3.81 48 XMNumbers 15530 3.80 6.83 2.56 49 DKIM_INVALID 14691 5.26 6.46 4.77 50 HTML_IMAGE_RATIO_06 14506 5.15 6.38 4.65 51 XM_UncommonTLD01 13387 3.51 5.89 2.54 52 HTML_MIME_NO_HTML_TAG 12962 2.79 5.70 1.60 53 XM_UB50 11050 1.84 4.86 0.61 54 BAYES_95 9981 2.80 4.39 2.15 55 RCVD_IN_RP_SAFE 9973 6.02 4.39 6.68 56 MIME_QP_LONG_LINE 9719 4.57 4.28 4.68 57 TM2_M_URI_OPT_OUT 9652 2.77 4.25 2.17 58 BODY_URI_ONLY 9466 1.25 4.16 0.06 59 MISSING_HEADERS 9173 1.51 4.04 0.48 60 HTML_SHORT_LINK_IMG_1 9110 1.64 4.01 0.68 61 ALL_TRUSTED 9066 13.36 3.99 17.17 62 MIME_HTML_MOSTLY 8861 2.45 3.90 1.86 63 MIME_HTML_ONLY_MULTI 8493 1.83 3.74 1.06 64 URI_HEX 8430 2.07 3.71 1.40 65 XM_SendGrid 8379 3.78 3.69 3.82 66 XMStrtUSub 8334 10.85 3.67 13.77 67 XM_DIRTYINTL 8250 1.96 3.63 1.29 68 TooManyTo_002 8155 2.84 3.59 2.54 69 RCVD_IN_RP_CERTIFIED 7906 5.27 3.48 5.99 70 TooManyTo_003 7881 2.31 3.47 1.84 71 MIME_HEADER_CTYPE_ONLY 7862 1.10 3.46 0.14 72 XMDiploma_00 7578 2.24 3.33 1.79 73 HTML_IMAGE_ONLY_04 7500 1.45 3.30 0.69 74 RCVD_IN_MSPIKE_H2 7469 3.51 3.29 3.60 75 XM_CamelCaseFrm001 7375 1.84 3.24 1.27 76 RELAYCOUNTRY_NL 7154 1.01 3.15 0.14 77 XM_SPF_SoftFail 7090 2.00 3.12 1.54 78 TooManyTo_004 7014 1.60 3.09 1.00 79 FORGED_MUA_MOZILLA 6846 1.04 3.01 0.24 80 TooManyTo_005 6807 1.46 2.99 0.83 81 RELAYCOUNTRY_CA 6377 1.57 2.81 1.07 82 HTML_IMAGE_RATIO_08 6184 2.12 2.72 1.88 83 T_TooManySym_01 6148 3.06 2.70 3.21 84 RCVD_IN_BL_SPAMCOP_NET 5992 0.99 2.64 0.32 85 XM_OfRef6 5985 1.55 2.63 1.11 86 T_XMDrugObfuBody_08 5866 1.67 2.58 1.29 87 XM_URI_RBL 5434 0.76 2.39 0.10 88 XMNoVowels 5260 2.12 2.31 2.04 89 SpammyFromTLD_02 5032 0.78 2.21 0.20 90 RCVD_IN_IADB_LISTED 4950 4.07 2.18 4.84 91 XM_UB60 4933 0.69 2.17 0.08 92 HTML_SHORT_CENTER 4792 0.91 2.11 0.43 93 MultiRelay_CC 4691 0.71 2.06 0.16 94 MultiRelay_Combo 4691 0.71 2.06 0.16 95 DIET_1 4651 1.02 2.05 0.61 96 XMSexyCombo_01 4594 0.82 2.02 0.33 97 RCVD_IN_IADB_SPF 4421 3.54 1.95 4.18 98 RCVD_IN_IADB_SENDERID 4180 3.11 1.84 3.62 99 RCVD_IN_IADB_DK 4151 3.06 1.83 3.57 100 XMStockSpam_06 4133 1.30 1.82 1.08 101 RCVD_IN_RP_RNBL 4034 0.53 1.77 0.03 102 URIBL_BLACK 3993 0.53 1.76 0.03 103 XMGenDplmaNmb 3957 1.16 1.74 0.92 104 BOTNET_NORDNS 3944 0.51 1.74 0.02 105 TM2_M_VERY_LONG_WORD 3942 0.99 1.73 0.69 106 TR_LOTS_OF_MONEY2 3807 0.82 1.67 0.47 107 T_MONEY_PERCENT 3807 0.82 1.67 0.47 108 XMHTML_After_End 3781 0.74 1.66 0.36 109 TR_XM_RelayPhish 3643 0.74 1.60 0.39 110 SUBJ_ALL_CAPS 3569 1.24 1.57 1.11 111 XMSubMetaI_00 3479 0.65 1.53 0.29 112 MAILING_LIST_MULTI 3472 1.88 1.53 2.02 113 XMBody_17 3470 0.76 1.53 0.45 114 RELAYCOUNTRY_FR 3420 0.59 1.50 0.22 115 BAYES_20 3395 3.86 1.49 4.82 116 SpammyFromTLD_01 3356 0.87 1.48 0.63 117 XM_ProductURIs 3285 1.08 1.45 0.93 118 XM_H_Long_From02 3271 0.88 1.44 0.66 119 URI_TRY_3LD 3160 0.92 1.39 0.73 120 XM_UB99 3057 0.45 1.34 0.08 121 XM_DK_Undo_01 2969 1.52 1.31 1.60 122 UNPARSEABLE_RELAY 2958 1.70 1.30 1.86 123 TR_LOTS_OF_MONEY3 2928 0.55 1.29 0.25 124 T_XMDrugObfuBody_00 2913 0.86 1.28 0.69 125 T_XMHurry_00 2884 0.69 1.27 0.46 126 BAYES_40 2848 3.18 1.25 3.97 127 NO_DNS_FOR_FROM 2825 0.94 1.24 0.81 128 BAYES_00 2785 11.01 1.23 14.99 129 T_FILL_THIS_FORM_SHORT 2754 0.89 1.21 0.76 130 XM_HighProb1 2742 0.36 1.21 0.01 131 XMBdyGiftCard01 2598 0.73 1.14 0.56 132 RELAYCOUNTRY_GB 2549 0.95 1.12 0.89 133 T_Symld_Words_02 2543 0.57 1.12 0.35 134 URIBL_DBL_SPAM 2537 0.34 1.12 0.02 135 MPART_ALT_DIFF_COUNT 2523 0.76 1.11 0.62 136 RELAYCOUNTRY_RO 2522 0.32 1.11 0.00 137 XMPhish11 2478 0.99 1.09 0.95 138 XMPhish14 2472 0.50 1.09 0.27 139 XMBody_78 2442 0.54 1.07 0.32 140 XMSubject_09 2422 0.31 1.07 0.01 141 XMPhish30 2390 0.46 1.05 0.21 142 DKIM_ADSP_NXDOMAIN 2384 0.47 1.05 0.24 143 TR_XM_DK_Bayes 2356 2.82 1.04 3.55 144 TR_Mismatch_TLD_02 2351 0.33 1.03 0.04 145 RELAYCOUNTRY_AT 2351 0.42 1.03 0.17 146 XM_UB80 2343 0.32 1.03 0.04 147 XM_UB999 2321 0.33 1.02 0.05 148 RCVD_IN_IADB_VOUCHED 2319 2.71 1.02 3.39 149 XMSexyCombo_04 2259 0.33 0.99 0.06 150 ANY_BOUNCE_MESSAGE 2255 4.86 0.99 6.43 151 BOUNCE_MESSAGE 2254 4.86 0.99 6.43 152 TR_XM_DK_Bayes1 2222 2.48 0.98 3.09 153 RELAYCOUNTRY_CN 2210 0.32 0.97 0.05 154 PLING_QUERY 2112 0.50 0.93 0.33 155 XM_H_PHPOS 2104 0.97 0.93 0.99 156 TR_XM_DK_Bayes2 2067 2.01 0.91 2.46 157 HTML_IMAGE_ONLY_08 2038 0.33 0.90 0.10 158 TR_Symld_Words 2014 1.47 0.89 1.71 159 SUBJ_DOLLARS 2001 0.32 0.88 0.10 160 DKIM_ADSP_CUSTOM_MED 1961 0.84 0.86 0.84 161 HTML_FONT_FACE_BAD 1937 13.79 0.85 19.06 162 XMHTMLBadTable_001 1933 0.44 0.85 0.27 163 XMBrknScrpt_02 1932 0.59 0.85 0.48 164 XM_BadFromFormat 1903 0.36 0.84 0.16 165 XMMoneyMeta_00 1890 0.55 0.83 0.43 166 LONG_JUNK_URI3 1872 0.29 0.82 0.07 167 RDNS_DYNAMIC 1865 0.49 0.82 0.35 168 URI_NOVOWEL 1854 0.49 0.82 0.36 169 RCVD_IN_MSPIKE_WL 1831 1.23 0.81 1.40 170 XMLngstWrd_00 1822 1.13 0.80 1.26 171 XMLongAddy 1819 0.28 0.80 0.07 172 RCVD_IN_MSPIKE_H3 1804 1.23 0.79 1.40 173 FORGED_GMAIL_RCVD 1800 0.53 0.79 0.43 174 RELAYCOUNTRY_AU 1791 0.49 0.79 0.37 175 HTTPS_HTTP_MISMATCH 1776 0.47 0.78 0.34 176 XMSlimDrugH 1764 0.37 0.78 0.21 177 XMLngstWrd_01 1745 0.97 0.77 1.06 178 XMClaimOffer 1745 0.27 0.77 0.07 179 SHORTENED_URL_SRC 1695 0.23 0.75 0.02 180 XM_PDF 1688 2.66 0.74 3.44 181 REMOVE_BEFORE_LINK 1684 0.33 0.74 0.17 182 XM_Body_Obfu01 1611 0.33 0.71 0.17 183 SHORTENER_SHORT_IMG 1600 0.21 0.70 0.01 184 TR_MetaPhish_Combo_01 1585 0.68 0.70 0.68 185 NML_ADSP_CUSTOM_MED 1567 0.63 0.69 0.61 186 XMSubMetaSxObfu_03 1566 0.36 0.69 0.22 187 BODY_ENHANCEMENT 1566 0.22 0.69 0.03 188 XM_H_PHPMailer 1549 0.58 0.68 0.53 189 RELAYCOUNTRY_IT 1532 0.22 0.67 0.03 190 XMLngstWrd_02 1532 0.65 0.67 0.64 191 XM_B_REG_HTML 1529 0.47 0.67 0.39 192 TVD_SPACE_RATIO_MINFP 1505 0.19 0.66 0.00 193 KHOP_DYNAMIC 1499 0.57 0.66 0.54 194 T_TooManySym_02 1490 0.97 0.66 1.10 195 XM_B_COPY_HTML 1487 0.45 0.65 0.37 196 RCVD_IN_IADB_OPTIN 1479 1.70 0.65 2.13 197 HTML_FONT_SIZE_LARGE 1473 0.29 0.65 0.14 198 XMSubMetaSSx_00 1466 0.29 0.64 0.15 199 DEAR_FRIEND 1440 0.22 0.63 0.06 200 XM_RXBody 1438 0.50 0.63 0.45 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 492329 90.57 96.46 88.17 2 DCC_CHECK_NEGATIVE 401760 57.09 20.60 71.95 3 DKIM_SIGNED 310433 63.22 81.95 55.60 4 XM_DK_Pass 304874 61.83 79.59 54.60 5 BAYES_50 284085 46.06 34.23 50.88 6 DKIM_VALID 283816 57.96 75.48 50.83 7 XM_H_QuotedFrom 248545 46.85 52.59 44.51 8 XMListUnsubscribeExists 200581 45.85 70.25 35.92 9 DKIM_VALID_AU 198473 42.26 58.76 35.54 10 DCC_CHECK 148076 41.32 77.67 26.52 11 T_TM2_M_HEADER_IN_MSG 146181 24.30 19.69 26.18 12 IN_ZIMBRA_NJ_WHITELIST 126270 16.08 0.03 22.61 13 HTML_FONT_LOW_CONTRAST 121285 25.56 34.98 21.72 14 HTML_IMAGE_RATIO_04 114121 16.99 8.50 20.44 15 DKIM_VALID_EF 110737 20.50 22.15 19.83 16 HTML_FONT_FACE_BAD 106417 13.79 0.85 19.06 17 FVGT_m_MULTI_ODD 98327 20.27 26.80 17.61 18 XMSubLong 97158 20.04 26.53 17.40 19 ALL_TRUSTED 95896 13.36 3.99 17.17 20 BAYES_00 83707 11.01 1.23 14.99 21 MultiRelay 82909 14.85 14.87 14.85 22 LOC_TINY_FONT_1 81860 20.45 34.68 14.66 23 MIME_HTML_ONLY 80473 19.72 32.75 14.41 24 XMStrtUSub 76909 10.85 3.67 13.77 25 T_KAM_HTML_FONT_INVALID 67568 14.58 20.66 12.10 26 XM_DK_Undo_02 58091 20.96 46.88 10.40 27 BAYES_99 55014 19.14 41.97 9.85 28 XM_Evil_Numbers_Gen 53131 10.93 14.39 9.52 29 XM_Body_Dirty_Words 50491 11.84 18.72 9.04 30 BAYES_999 48342 16.49 35.74 8.66 31 XM_Multi_Part_URI 45399 10.70 17.02 8.13 32 LOTS_OF_MONEY 41683 8.74 11.88 7.46 33 XM_DKIMWhitelistDomains 40101 5.12 0.04 7.18 34 TooManyTo_001 40040 7.91 9.71 7.17 35 LotsOfNums_01 38444 7.23 8.07 6.88 36 RCVD_IN_RP_SAFE 37308 6.02 4.39 6.68 37 ANY_BOUNCE_MESSAGE 35906 4.86 0.99 6.43 38 BOUNCE_MESSAGE 35904 4.86 0.99 6.43 39 T_XMDrugObfuBody_14 34805 7.23 9.67 6.23 40 RCVD_IN_RP_CERTIFIED 33465 5.27 3.48 5.99 41 XMSubNoVowel 32084 4.16 0.25 5.75 42 FSL_BULK_SIG 31234 8.12 14.33 5.59 43 HTML_IMAGE_RATIO_02 31020 8.43 15.50 5.56 44 BAYES_60 29935 5.87 7.12 5.36 45 RCVD_IN_IADB_LISTED 27011 4.07 2.18 4.84 46 BAYES_20 26905 3.86 1.49 4.82 47 DKIM_INVALID 26617 5.26 6.46 4.77 48 TR_DCC_Bayes_99 26160 12.90 33.09 4.68 49 MIME_QP_LONG_LINE 26157 4.57 4.28 4.68 50 HTML_IMAGE_RATIO_06 25962 5.15 6.38 4.65 51 XM_B_Phish_Phrases 25216 5.91 9.33 4.52 52 BAYES_05 24971 3.35 0.58 4.47 53 RCVD_IN_IADB_SPF 23360 3.54 1.95 4.18 54 DATE_IN_PAST_06_12 22782 2.96 0.19 4.08 55 XM_H_Long_From01 22391 5.14 7.93 4.01 56 RELAYCOUNTRY_META 22236 7.89 17.47 3.98 57 BAYES_40 22149 3.18 1.25 3.97 58 XM_SendGrid 21320 3.78 3.69 3.82 59 T_REMOTE_IMAGE 21299 4.72 6.93 3.81 60 RCVD_IN_IADB_SENDERID 20231 3.11 1.84 3.62 61 RCVD_IN_MSPIKE_H2 20085 3.51 3.29 3.60 62 RCVD_IN_IADB_DK 19910 3.06 1.83 3.57 63 TR_XM_DK_Bayes 19805 2.82 1.04 3.55 64 XM_PDF 19189 2.66 0.74 3.44 65 BAYES_80 19159 4.67 7.70 3.43 66 RCVD_IN_IADB_VOUCHED 18956 2.71 1.02 3.39 67 T_TooManySym_01 17921 3.06 2.70 3.21 68 TR_XM_DK_Bayes1 17246 2.48 0.98 3.09 69 BOTNET_IPINHOSTNAME 15893 5.64 12.49 2.85 70 XMSubMetaSx_00 15347 4.03 7.19 2.75 71 TR_XM_DocInvoice 15264 4.05 7.29 2.73 72 FROM_EXCESS_BASE64 15111 4.79 9.91 2.71 73 MPART_ALT_DIFF 14800 4.08 7.60 2.65 74 XMSexyCombo_05 14658 4.77 10.05 2.63 75 XMNumbers 14322 3.80 6.83 2.56 76 TooManyTo_002 14175 2.84 3.59 2.54 77 XM_UncommonTLD01 14171 3.51 5.89 2.54 78 TR_XM_DK_Bayes2 13712 2.01 0.91 2.46 79 TM2_M_URI_OPT_OUT 12138 2.77 4.25 2.17 80 BAYES_95 12027 2.80 4.39 2.15 81 RCVD_IN_IADB_OPTIN 11903 1.70 0.65 2.13 82 DATE_IN_PAST_12_24 11726 1.54 0.15 2.10 83 XMNoVowels 11392 2.12 2.31 2.04 84 MAILING_LIST_MULTI 11263 1.88 1.53 2.02 85 XMSubLongNoVowel 10842 1.40 0.07 1.94 86 HTML_IMAGE_RATIO_08 10502 2.12 2.72 1.88 87 XM_E_Blogspot 10479 1.36 0.08 1.88 88 UNPARSEABLE_RELAY 10403 1.70 1.30 1.86 89 MIME_HTML_MOSTLY 10390 2.45 3.90 1.86 90 TooManyTo_003 10295 2.31 3.47 1.84 91 XMSubGarbage 10206 1.31 0.03 1.83 92 XMDiploma_00 10009 2.24 3.33 1.79 93 TR_Symld_Words 9540 1.47 0.89 1.71 94 HELO_NODOT 9348 1.27 0.29 1.67 95 TVD_RCVD_IP 9308 1.25 0.23 1.67 96 XM_DK_Undo_01 8961 1.52 1.31 1.60 97 HTML_MIME_NO_HTML_TAG 8935 2.79 5.70 1.60 98 DATE_IN_PAST_03_06 8725 1.26 0.52 1.56 99 XM_SPF_SoftFail 8592 2.00 3.12 1.54 100 IN_HORDE_ADDRESS_BOOK 8305 1.08 0.06 1.49 101 RCVD_IN_MSPIKE_WL 7845 1.23 0.81 1.40 102 RCVD_IN_MSPIKE_H3 7839 1.23 0.79 1.40 103 URI_HEX 7811 2.07 3.71 1.40 104 T_XMDrugObfuBody_08 7222 1.67 2.58 1.29 105 XM_DIRTYINTL 7187 1.96 3.63 1.29 106 XM_CamelCaseFrm001 7112 1.84 3.24 1.27 107 XMLngstWrd_00 7047 1.13 0.80 1.26 108 INVALID_MSGID 6971 0.94 0.17 1.25 109 XMCapTrack 6935 1.03 0.52 1.24 110 USER_IN_DEF_DKIM_WL 6922 0.92 0.15 1.24 111 BOTNET 6581 4.55 12.83 1.18 112 TO_MALFORMED 6493 0.83 0.02 1.16 113 XM_OfRef6 6218 1.55 2.63 1.11 114 SUBJ_ALL_CAPS 6182 1.24 1.57 1.11 115 T_TooManySym_02 6132 0.97 0.66 1.10 116 XMStockSpam_06 6043 1.30 1.82 1.08 117 RELAYCOUNTRY_CA 5974 1.57 2.81 1.07 118 MIME_HTML_ONLY_MULTI 5909 1.83 3.74 1.06 119 XMLngstWrd_01 5905 0.97 0.77 1.06 120 UNTRUSTED_Relay 5902 4.03 11.32 1.06 121 XM_GoogleGroups 5834 0.86 0.40 1.04 122 TooManyTo_004 5587 1.60 3.09 1.00 123 XM_H_PHPOS 5531 0.97 0.93 0.99 124 XMPhish11 5303 0.99 1.09 0.95 125 XM_ProductURIs 5199 1.08 1.45 0.93 126 XMGenDplmaNmb 5119 1.16 1.74 0.92 127 RELAYCOUNTRY_GB 4945 0.95 1.12 0.89 128 XMGappySubj_01 4709 0.71 0.39 0.84 129 DKIM_ADSP_CUSTOM_MED 4666 0.84 0.86 0.84 130 TooManyTo_005 4658 1.46 2.99 0.83 131 NO_DNS_FOR_FROM 4539 0.94 1.24 0.81 132 T_FILL_THIS_FORM_SHORT 4250 0.89 1.21 0.76 133 URI_TRY_3LD 4093 0.92 1.39 0.73 134 HTML_IMAGE_ONLY_04 3859 1.45 3.30 0.69 135 TM2_M_VERY_LONG_WORD 3852 0.99 1.73 0.69 136 T_XMDrugObfuBody_00 3841 0.86 1.28 0.69 137 HTML_SHORT_LINK_IMG_1 3794 1.64 4.01 0.68 138 TR_MetaPhish_Combo_01 3787 0.68 0.70 0.68 139 XM_H_Long_From02 3662 0.88 1.44 0.66 140 XMLngstWrd_02 3559 0.65 0.67 0.64 141 SpammyFromTLD_01 3492 0.87 1.48 0.63 142 MPART_ALT_DIFF_COUNT 3437 0.76 1.11 0.62 143 XM_UB50 3418 1.84 4.86 0.61 144 NML_ADSP_CUSTOM_MED 3404 0.63 0.69 0.61 145 USER_IN_WHITELIST 3396 0.43 0.00 0.61 146 DIET_1 3380 1.02 2.05 0.61 147 XMGappySubj_02 3131 0.41 0.03 0.56 148 XMBdyGiftCard01 3128 0.73 1.14 0.56 149 T_TooManySym_03 3037 0.45 0.21 0.54 150 KHOP_DYNAMIC 2991 0.57 0.66 0.54 151 XM_H_PHPMailer 2987 0.58 0.68 0.53 152 T_OBFU_PDF_ATTACH 2876 0.43 0.22 0.52 153 XM_ShortIntro_01 2777 0.44 0.31 0.50 154 XMBrknScrpt_02 2704 0.59 0.85 0.48 155 MISSING_HEADERS 2699 1.51 4.04 0.48 156 TR_LOTS_OF_MONEY2 2650 0.82 1.67 0.47 157 T_MONEY_PERCENT 2650 0.82 1.67 0.47 158 T_XMHurry_00 2544 0.69 1.27 0.46 159 AC_DIV_BONANZA 2519 0.36 0.14 0.45 160 XMBody_17 2505 0.76 1.53 0.45 161 XM_RXBody 2502 0.50 0.63 0.45 162 RELAYCOUNTRY_DE 2498 0.50 0.62 0.45 163 SHORT_HELO_AND_INLINE_IMAGE 2473 0.34 0.07 0.44 164 XMMoneyMeta_00 2405 0.55 0.83 0.43 165 FORGED_GMAIL_RCVD 2402 0.53 0.79 0.43 166 HTML_SHORT_CENTER 2387 0.91 2.11 0.43 167 RCVD_IN_SORBS_DUL 2235 0.34 0.18 0.40 168 XMLngstWrd_03 2199 0.45 0.59 0.39 169 XMBody_95 2182 0.32 0.15 0.39 170 TR_XM_RelayPhish 2182 0.74 1.60 0.39 171 XM_B_REG_HTML 2175 0.47 0.67 0.39 172 HTML_IMAGE_ONLY_32 2125 0.36 0.32 0.38 173 XMDateMe_00 2108 0.44 0.58 0.38 174 TM2_M_A_HREF_HREF 2105 0.42 0.51 0.38 175 XM_B_COPY_HTML 2051 0.45 0.65 0.37 176 RELAYCOUNTRY_AU 2039 0.49 0.79 0.37 177 FILL_THIS_FORM 2029 0.42 0.57 0.36 178 URI_NOVOWEL 2000 0.49 0.82 0.36 179 XMHTML_After_End 1995 0.74 1.66 0.36 180 XMSolicitRefs_0 1970 0.38 0.43 0.35 181 RDNS_DYNAMIC 1965 0.49 0.82 0.35 182 T_Symld_Words_02 1962 0.57 1.12 0.35 183 HTTPS_HTTP_MISMATCH 1906 0.47 0.78 0.34 184 TM2_M_BODY_EMPTY 1850 0.34 0.36 0.33 185 PLING_QUERY 1838 0.50 0.93 0.33 186 XMSexyCombo_01 1823 0.82 2.02 0.33 187 XM_USANA_RCVD 1806 0.23 0.00 0.32 188 RCVD_IN_BL_SPAMCOP_NET 1789 0.99 2.64 0.32 189 XMBody_78 1786 0.54 1.07 0.32 190 HTML_TAG_BALANCE_BODY 1785 0.38 0.51 0.32 191 HTML_IMAGE_ONLY_28 1723 0.36 0.48 0.31 192 T_FILL_THIS_FORM_LONG 1641 0.34 0.46 0.29 193 XMSubMetaI_00 1622 0.65 1.53 0.29 194 HTML_IMAGE_ONLY_24 1621 0.34 0.46 0.29 195 HTML_IMAGE_ONLY_20 1621 0.38 0.61 0.29 196 XM_D_tchamptons_WL 1580 0.20 0.00 0.28 197 XMHTMLBadTable_001 1531 0.44 0.85 0.27 198 XMPhish14 1487 0.50 1.09 0.27 199 XM_H_PHPOS_M 1481 0.31 0.42 0.27 200 XM_B_TRADE_HTML 1471 0.29 0.34 0.26 ----------------------------------------------------------------------