Email: 679000 Autolearn: 0 AvgScore: 4.51 AvgScanTime: 4.44 sec Spam: 234477 Autolearn: 0 AvgScore: 12.50 AvgScanTime: 5.26 sec Ham: 444523 Autolearn: 0 AvgScore: 0.30 AvgScanTime: 4.02 sec Time Spent Running SA: 838.26 hours Time Spent Processing Spam: 342.47 hours Time Spent Processing Ham: 495.79 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 221188 89.77 94.33 87.36 2 DKIM_SIGNED 200387 76.73 85.46 72.13 3 XM_DK_Pass 196374 75.19 83.75 70.68 4 DCC_CHECK 186635 50.54 79.60 35.21 5 DKIM_VALID 185928 71.26 79.29 67.02 6 XMListUnsubscribeExists 171225 56.65 73.02 48.02 7 DKIM_VALID_AU 141037 51.23 60.15 46.53 8 XM_H_QuotedFrom 130312 41.36 55.58 33.87 9 XM_DK_Undo_02 115127 26.00 49.10 13.82 10 BAYES_99 103663 24.06 44.21 13.43 11 BAYES_999 86731 20.38 36.99 11.62 12 HTML_FONT_LOW_CONTRAST 84706 30.39 36.13 27.36 13 LOC_TINY_FONT_1 81775 25.47 34.88 20.51 14 TR_DCC_Bayes_99 81347 16.19 34.69 6.43 15 BAYES_50 74857 48.88 31.93 57.83 16 MIME_HTML_ONLY 71475 22.83 30.48 18.79 17 FVGT_m_MULTI_ODD 63542 24.09 27.10 22.50 18 XMSubLong 61666 22.66 26.30 20.74 19 DKIM_VALID_EF 56101 25.68 23.93 26.61 20 T_KAM_HTML_FONT_INVALID 53396 18.74 22.77 16.62 21 T_TM2_M_HEADER_IN_MSG 49008 27.21 20.90 30.55 22 DCC_CHECK_NEGATIVE 43998 47.45 18.76 62.59 23 XM_Body_Dirty_Words 42574 13.21 18.16 10.60 24 XM_Multi_Part_URI 39546 12.66 16.87 10.45 25 MultiRelay 39018 17.73 16.64 18.30 26 HTML_IMAGE_RATIO_02 38581 10.56 16.45 7.45 27 RELAYCOUNTRY_META 37935 9.11 16.18 5.38 28 XM_Evil_Numbers_Gen 32211 9.97 13.74 7.99 29 BOTNET 30538 5.25 13.02 1.15 30 BOTNET_IPINHOSTNAME 30326 7.90 12.93 5.24 31 FSL_BULK_SIG 27620 8.38 11.78 6.58 32 LOTS_OF_MONEY 26619 9.69 11.35 8.81 33 T_XMDrugObfuBody_14 23626 8.67 10.08 7.93 34 UNTRUSTED_Relay 22977 4.33 9.80 1.45 35 XMSexyCombo_05 22904 5.39 9.77 3.08 36 XM_B_Phish_Phrases 21456 6.18 9.15 4.61 37 HTML_IMAGE_RATIO_04 21134 6.80 9.01 5.63 38 LotsOfNums_01 20159 8.97 8.60 9.17 39 BAYES_80 19277 6.06 8.22 4.92 40 XM_H_Long_From01 19108 6.36 8.15 5.41 41 TooManyTo_001 18398 7.94 7.85 7.98 42 TR_XM_DocInvoice 17632 4.74 7.52 3.27 43 FROM_EXCESS_BASE64 17340 4.57 7.40 3.08 44 XMSubMetaSx_00 16202 4.78 6.91 3.65 45 MPART_ALT_DIFF 15945 4.37 6.80 3.09 46 XM_UncommonTLD01 15738 4.55 6.71 3.41 47 BAYES_60 15538 7.96 6.63 8.67 48 DKIM_INVALID 14459 5.47 6.17 5.11 49 URIBL_RHS_DOB 14349 3.65 6.12 2.35 50 RCVD_IN_RP_SAFE 12734 7.76 5.43 8.98 51 MIME_QP_LONG_LINE 12010 5.66 5.12 5.94 52 HTML_IMAGE_RATIO_06 11548 3.83 4.93 3.25 53 BAYES_95 11471 3.85 4.89 3.31 54 XM_UB50 11294 2.29 4.82 0.96 55 MIME_HTML_MOSTLY 10523 2.96 4.49 2.15 56 RCVD_IN_RP_CERTIFIED 10400 7.05 4.44 8.43 57 XMNumbers 9696 3.75 4.14 3.54 58 XM_SendGrid 9676 4.60 4.13 4.85 59 XMStrtUSub 9425 3.63 4.02 3.42 60 TM2_M_URI_OPT_OUT 9277 2.52 3.96 1.76 61 XM_DIRTYINTL 9207 2.62 3.93 1.93 62 XM_SPF_SoftFail 9182 2.61 3.92 1.93 63 MIME_HTML_ONLY_MULTI 8398 2.19 3.58 1.46 64 HTML_IMAGE_RATIO_08 8347 2.63 3.56 2.14 65 T_REMOTE_IMAGE 8325 4.20 3.55 4.54 66 RELAYCOUNTRY_CA 8311 2.17 3.54 1.44 67 XM_CamelCaseFrm001 8047 2.39 3.43 1.84 68 RCVD_IN_MSPIKE_H2 7990 4.49 3.41 5.06 69 MultiRelay_CC 7544 1.22 3.22 0.17 70 MultiRelay_Combo 7544 1.22 3.22 0.17 71 XMDiploma_00 6897 2.04 2.94 1.56 72 RCVD_IN_IADB_LISTED 6849 5.41 2.92 6.72 73 RCVD_IN_RP_RNBL 6716 1.02 2.86 0.05 74 URI_HEX 6489 1.98 2.77 1.56 75 RCVD_IN_IADB_SPF 6208 4.73 2.65 5.83 76 XM_OfRef6 6142 1.77 2.62 1.31 77 RCVD_IN_BL_SPAMCOP_NET 5903 1.08 2.52 0.32 78 SpammyFromTLD_01 5893 1.48 2.51 0.94 79 RCVD_IN_IADB_SENDERID 5879 4.19 2.51 5.07 80 RCVD_IN_IADB_DK 5787 4.12 2.47 4.99 81 XM_URI_RBL 5636 0.90 2.40 0.10 82 HTML_MIME_NO_HTML_TAG 5539 2.68 2.36 2.84 83 XMGenDplmaNmb 5490 1.47 2.34 1.01 84 T_TooManySym_01 5483 3.32 2.34 3.84 85 T_XMDrugObfuBody_08 5359 1.83 2.29 1.59 86 URI_TRY_3LD 5117 1.55 2.18 1.22 87 XM_H_Long_From02 4749 1.30 2.03 0.92 88 XMSubMetaI_00 4687 0.99 2.00 0.46 89 XMBdyGiftCard01 4312 1.08 1.84 0.68 90 BOTNET_NORDNS 4183 0.62 1.78 0.01 91 XM_DK_Undo_01 4138 1.91 1.76 1.99 92 T_XMHurry_00 4117 0.97 1.76 0.55 93 SpammyFromTLD_02 4110 0.80 1.75 0.30 94 SUBJ_ALL_CAPS 3925 1.72 1.67 1.74 95 XM_UB60 3837 0.63 1.64 0.11 96 XM_H_PHPOS 3721 1.46 1.59 1.40 97 MAILING_LIST_MULTI 3645 2.28 1.55 2.67 98 XMSexyCombo_01 3634 0.78 1.55 0.37 99 T_XMDrugObfuBody_00 3616 1.12 1.54 0.90 100 XMBody_17 3581 0.84 1.53 0.48 101 TM2_M_VERY_LONG_WORD 3568 1.10 1.52 0.87 102 XMHTML_After_End 3471 0.82 1.48 0.47 103 DKIM_ADSP_CUSTOM_MED 3423 1.18 1.46 1.04 104 ALL_TRUSTED 3350 12.42 1.43 18.22 105 TR_XM_RelayPhish 3312 0.83 1.41 0.52 106 UNPARSEABLE_RELAY 3304 3.19 1.41 4.13 107 T_FILL_THIS_FORM_SHORT 3236 1.09 1.38 0.94 108 BAYES_00 3218 4.07 1.37 5.50 109 RCVD_IN_IADB_VOUCHED 3181 3.45 1.36 4.55 110 URIBL_BLACK 3093 0.48 1.32 0.04 111 XMBody_78 3078 0.80 1.31 0.53 112 BAYES_40 3059 2.36 1.30 2.92 113 FORGED_GMAIL_RCVD 3059 0.82 1.30 0.56 114 XMPhish11 3041 1.23 1.30 1.19 115 TR_LOTS_OF_MONEY2 3033 0.75 1.29 0.46 116 T_MONEY_PERCENT 3033 0.75 1.29 0.46 117 XM_H_PHPMailer 3006 0.89 1.28 0.68 118 TR_Mismatch_TLD_02 2995 0.48 1.28 0.05 119 NML_ADSP_CUSTOM_MED 2977 0.93 1.27 0.74 120 XM_ProductURIs 2959 1.34 1.26 1.38 121 XM_UB99 2957 0.46 1.26 0.04 122 RELAYCOUNTRY_IN 2945 0.50 1.26 0.10 123 XMBrknScrpt_02 2932 0.84 1.25 0.63 124 HTML_FONT_FACE_BAD 2889 0.74 1.23 0.49 125 RELAYCOUNTRY_GB 2854 1.12 1.22 1.07 126 TR_XM_DK_Bayes 2816 2.72 1.20 3.52 127 SUBJ_DOLLARS 2789 0.60 1.19 0.29 128 DIET_1 2770 0.62 1.18 0.32 129 RELAYCOUNTRY_FR 2761 0.57 1.18 0.25 130 TR_LOTS_OF_MONEY3 2722 0.58 1.16 0.27 131 XMPhish30 2719 0.56 1.16 0.25 132 XMStockSpam_06 2686 1.13 1.15 1.13 133 TR_XM_DK_Bayes1 2664 2.57 1.14 3.32 134 TR_XM_DK_Bayes2 2593 2.27 1.11 2.88 135 TooManyTo_002 2561 1.82 1.09 2.21 136 XMSubMetaSSx_00 2556 0.47 1.09 0.14 137 RELAYCOUNTRY_DE 2523 0.88 1.08 0.77 138 MPART_ALT_DIFF_COUNT 2520 0.58 1.07 0.31 139 XM_RXBody 2503 0.43 1.07 0.09 140 XM_HighProb1 2472 0.37 1.05 0.01 141 RELAYCOUNTRY_AT 2464 0.44 1.05 0.12 142 TM2_M_A_HREF_HREF 2409 0.66 1.03 0.47 143 HTML_TAG_BALANCE_BODY 2404 0.72 1.03 0.56 144 KHOP_DYNAMIC 2380 0.78 1.02 0.66 145 URI_NOVOWEL 2360 0.68 1.01 0.52 146 RELAYCOUNTRY_NG 2349 0.35 1.00 0.00 147 REMOVE_BEFORE_LINK 2285 0.52 0.97 0.28 148 RCVD_IN_PSBL 2264 0.36 0.97 0.04 149 HTML_IMAGE_ONLY_24 2247 0.58 0.96 0.37 150 TooManyTo_003 2242 1.28 0.96 1.45 151 NO_DNS_FOR_FROM 2212 0.63 0.94 0.46 152 XMMoneyMeta_00 2200 0.67 0.94 0.52 153 HTTPS_HTTP_MISMATCH 2138 0.61 0.91 0.45 154 BAYES_20 2131 1.68 0.91 2.09 155 XMSubMetaSxObfu_03 2096 0.59 0.89 0.43 156 XMHTMLBadTable_001 2092 0.59 0.89 0.44 157 TR_Symld_Words 2074 1.41 0.88 1.69 158 BOUNCE_MESSAGE 2031 4.22 0.87 5.98 159 TRACKER_ID 2031 0.41 0.87 0.18 160 ANY_BOUNCE_MESSAGE 2031 4.22 0.87 5.99 161 URIBL_DBL_SPAM 2025 0.32 0.86 0.03 162 XM_UB999 2021 0.31 0.86 0.02 163 RELAYCOUNTRY_CN 1966 0.32 0.84 0.05 164 T_Symld_Words_02 1958 0.57 0.84 0.43 165 XM_Nigeria_01 1932 0.33 0.82 0.06 166 XMSubNoVowel 1912 0.66 0.82 0.58 167 TooManyTo_004 1903 0.97 0.81 1.05 168 XM_UB80 1893 0.33 0.81 0.08 169 XM_PDF 1877 3.60 0.80 5.07 170 RCVD_IN_MSPIKE_WL 1848 1.82 0.79 2.36 171 T_TooManySym_02 1831 1.36 0.78 1.67 172 RCVD_IN_MSPIKE_H3 1829 1.81 0.78 2.36 173 DEAR_SOMETHING 1827 0.33 0.78 0.09 174 HTML_FONT_SIZE_HUGE 1811 0.50 0.77 0.35 175 RCVD_IN_IADB_OPTIN 1806 2.11 0.77 2.81 176 XM_B_REG_HTML 1791 0.55 0.76 0.44 177 XM_OverStock_LProb 1784 0.29 0.76 0.04 178 XMPhish14 1780 0.49 0.76 0.35 179 BODY_URI_ONLY 1759 0.33 0.75 0.10 180 XM_H_PHPOS_M 1721 0.47 0.73 0.32 181 HTML_SHORT_LINK_IMG_1 1694 0.30 0.72 0.08 182 FILL_THIS_FORM 1692 0.54 0.72 0.44 183 RDNS_DYNAMIC 1660 0.53 0.71 0.44 184 DATE_IN_PAST_03_06 1647 0.31 0.70 0.11 185 XMClaimOffer 1645 0.37 0.70 0.20 186 XM_Body_Obfu01 1631 0.38 0.70 0.22 187 XMSexyCombo_04 1606 0.27 0.68 0.05 188 TooManyTo_005 1581 0.80 0.67 0.87 189 HTML_IMAGE_ONLY_28 1570 0.49 0.67 0.39 190 PP_MIME_FAKE_ASCII_TEXT 1568 0.36 0.67 0.20 191 T_FILL_THIS_FORM_LONG 1563 0.46 0.67 0.35 192 RELAYCOUNTRY_AU 1552 0.58 0.66 0.54 193 T_HTML_TAG_BALANCE_CENTER 1513 0.38 0.65 0.25 194 MILLION_USD 1495 0.24 0.64 0.03 195 DKIM_ADSP_NXDOMAIN 1489 0.51 0.64 0.44 196 ADVANCE_FEE_5_NEW_MONEY 1488 0.22 0.63 0.01 197 TR_MetaPhish_Combo_01 1450 0.62 0.62 0.62 198 XM_B_COPY_HTML 1449 0.66 0.62 0.68 199 XM_Combo_Sbj 1440 0.40 0.61 0.29 200 FILL_THIS_FORM_LOAN 1419 0.41 0.61 0.31 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 388319 89.77 94.33 87.36 2 DKIM_SIGNED 320640 76.73 85.46 72.13 3 XM_DK_Pass 314195 75.19 83.75 70.68 4 DKIM_VALID 297932 71.26 79.29 67.02 5 DCC_CHECK_NEGATIVE 278215 47.45 18.76 62.59 6 BAYES_50 257049 48.88 31.93 57.83 7 XMListUnsubscribeExists 213461 56.65 73.02 48.02 8 DKIM_VALID_AU 206837 51.23 60.15 46.53 9 DCC_CHECK 156512 50.54 79.60 35.21 10 XM_H_QuotedFrom 150554 41.36 55.58 33.87 11 T_TM2_M_HEADER_IN_MSG 135780 27.21 20.90 30.55 12 HTML_FONT_LOW_CONTRAST 121633 30.39 36.13 27.36 13 DKIM_VALID_EF 118295 25.68 23.93 26.61 14 FVGT_m_MULTI_ODD 100039 24.09 27.10 22.50 15 XMSubLong 92173 22.66 26.30 20.74 16 LOC_TINY_FONT_1 91174 25.47 34.88 20.51 17 MIME_HTML_ONLY 83516 22.83 30.48 18.79 18 MultiRelay 81355 17.73 16.64 18.30 19 ALL_TRUSTED 80988 12.42 1.43 18.22 20 T_KAM_HTML_FONT_INVALID 73874 18.74 22.77 16.62 21 XM_DK_Undo_02 61427 26.00 49.10 13.82 22 BAYES_99 59720 24.06 44.21 13.43 23 BAYES_999 51667 20.38 36.99 11.62 24 XM_Body_Dirty_Words 47130 13.21 18.16 10.60 25 XM_Multi_Part_URI 46431 12.66 16.87 10.45 26 XM_DKIMWhitelistDomains 45041 6.64 0.02 10.13 27 LotsOfNums_01 40742 8.97 8.60 9.17 28 RCVD_IN_RP_SAFE 39926 7.76 5.43 8.98 29 LOTS_OF_MONEY 39148 9.69 11.35 8.81 30 BAYES_60 38530 7.96 6.63 8.67 31 RCVD_IN_RP_CERTIFIED 37481 7.05 4.44 8.43 32 XM_Evil_Numbers_Gen 35499 9.97 13.74 7.99 33 TooManyTo_001 35489 7.94 7.85 7.98 34 T_XMDrugObfuBody_14 35243 8.67 10.08 7.93 35 HTML_IMAGE_RATIO_02 33098 10.56 16.45 7.45 36 RCVD_IN_IADB_LISTED 29893 5.41 2.92 6.72 37 FSL_BULK_SIG 29254 8.38 11.78 6.58 38 TR_DCC_Bayes_99 28604 16.19 34.69 6.43 39 ANY_BOUNCE_MESSAGE 26605 4.22 0.87 5.99 40 BOUNCE_MESSAGE 26604 4.22 0.87 5.98 41 MIME_QP_LONG_LINE 26393 5.66 5.12 5.94 42 RCVD_IN_IADB_SPF 25926 4.73 2.65 5.83 43 HTML_IMAGE_RATIO_04 25038 6.80 9.01 5.63 44 BAYES_00 24429 4.07 1.37 5.50 45 XM_H_Long_From01 24067 6.36 8.15 5.41 46 RELAYCOUNTRY_META 23937 9.11 16.18 5.38 47 BOTNET_IPINHOSTNAME 23293 7.90 12.93 5.24 48 DKIM_INVALID 22708 5.47 6.17 5.11 49 XM_PDF 22548 3.60 0.80 5.07 50 RCVD_IN_IADB_SENDERID 22543 4.19 2.51 5.07 51 RCVD_IN_MSPIKE_H2 22509 4.49 3.41 5.06 52 RCVD_IN_IADB_DK 22191 4.12 2.47 4.99 53 BAYES_80 21863 6.06 8.22 4.92 54 XM_SendGrid 21569 4.60 4.13 4.85 55 XM_B_Phish_Phrases 20493 6.18 9.15 4.61 56 RCVD_IN_IADB_VOUCHED 20217 3.45 1.36 4.55 57 T_REMOTE_IMAGE 20202 4.20 3.55 4.54 58 IN_ZIMBRA_NJ_WHITELIST 19217 2.84 0.03 4.32 59 UNPARSEABLE_RELAY 18351 3.19 1.41 4.13 60 T_TooManySym_01 17074 3.32 2.34 3.84 61 TVD_RCVD_IP 16667 2.52 0.20 3.75 62 XMSubMetaSx_00 16239 4.78 6.91 3.65 63 XMNumbers 15757 3.75 4.14 3.54 64 TR_XM_DK_Bayes 15666 2.72 1.20 3.52 65 XMStrtUSub 15211 3.63 4.02 3.42 66 XM_UncommonTLD01 15152 4.55 6.71 3.41 67 TR_XM_DK_Bayes1 14769 2.57 1.14 3.32 68 BAYES_95 14699 3.85 4.89 3.31 69 TR_XM_DocInvoice 14550 4.74 7.52 3.27 70 HTML_IMAGE_RATIO_06 14445 3.83 4.93 3.25 71 MPART_ALT_DIFF 13746 4.37 6.80 3.09 72 XMSexyCombo_05 13690 5.39 9.77 3.08 73 FROM_EXCESS_BASE64 13690 4.57 7.40 3.08 74 BAYES_40 12997 2.36 1.30 2.92 75 TR_XM_DK_Bayes2 12820 2.27 1.11 2.88 76 HTML_MIME_NO_HTML_TAG 12629 2.68 2.36 2.84 77 RCVD_IN_IADB_OPTIN 12508 2.11 0.77 2.81 78 MAILING_LIST_MULTI 11869 2.28 1.55 2.67 79 RCVD_IN_MSPIKE_WL 10486 1.82 0.79 2.36 80 RCVD_IN_MSPIKE_H3 10480 1.81 0.78 2.36 81 URIBL_RHS_DOB 10438 3.65 6.12 2.35 82 TooManyTo_002 9803 1.82 1.09 2.21 83 MIME_HTML_MOSTLY 9552 2.96 4.49 2.15 84 HTML_IMAGE_RATIO_08 9517 2.63 3.56 2.14 85 BAYES_20 9291 1.68 0.91 2.09 86 XM_DK_Undo_01 8838 1.91 1.76 1.99 87 XM_DIRTYINTL 8583 2.62 3.93 1.93 88 XM_SPF_SoftFail 8571 2.61 3.92 1.93 89 HELO_NODOT 8329 1.32 0.28 1.87 90 IN_HORDE_ADDRESS_BOOK 8310 1.25 0.06 1.87 91 XM_CamelCaseFrm001 8190 2.39 3.43 1.84 92 TM2_M_URI_OPT_OUT 7810 2.52 3.96 1.76 93 SUBJ_ALL_CAPS 7750 1.72 1.67 1.74 94 TR_Symld_Words 7527 1.41 0.88 1.69 95 T_TooManySym_02 7430 1.36 0.78 1.67 96 T_XMDrugObfuBody_08 7056 1.83 2.29 1.59 97 INVALID_MSGID 7035 1.09 0.17 1.58 98 XMDiploma_00 6954 2.04 2.94 1.56 99 URI_HEX 6934 1.98 2.77 1.56 100 USER_IN_DEF_DKIM_WL 6875 1.03 0.06 1.55 101 MIME_HTML_ONLY_MULTI 6476 2.19 3.58 1.46 102 UNTRUSTED_Relay 6426 4.33 9.80 1.45 103 TooManyTo_003 6425 1.28 0.96 1.45 104 RELAYCOUNTRY_CA 6406 2.17 3.54 1.44 105 TO_MALFORMED 6348 0.94 0.01 1.43 106 XM_H_PHPOS 6217 1.46 1.59 1.40 107 XM_ProductURIs 6132 1.34 1.26 1.38 108 XMCapTrack 5963 1.08 0.58 1.34 109 BAYES_05 5870 1.05 0.53 1.32 110 XM_OfRef6 5843 1.77 2.62 1.31 111 XM_GoogleGroups 5543 0.96 0.42 1.25 112 URI_TRY_3LD 5440 1.55 2.18 1.22 113 XMPhish11 5296 1.23 1.30 1.19 114 BOTNET 5123 5.25 13.02 1.15 115 XMLngstWrd_00 5058 0.89 0.42 1.14 116 XMStockSpam_06 5017 1.13 1.15 1.13 117 RELAYCOUNTRY_GB 4749 1.12 1.22 1.07 118 TooManyTo_004 4684 0.97 0.81 1.05 119 DKIM_ADSP_CUSTOM_MED 4609 1.18 1.46 1.04 120 XMGenDplmaNmb 4489 1.47 2.34 1.01 121 XMLngstWrd_01 4430 0.78 0.36 1.00 122 XM_UB50 4274 2.29 4.82 0.96 123 T_FILL_THIS_FORM_SHORT 4190 1.09 1.38 0.94 124 SpammyFromTLD_01 4171 1.48 2.51 0.94 125 XM_H_Long_From02 4079 1.30 2.03 0.92 126 T_XMDrugObfuBody_00 3982 1.12 1.54 0.90 127 TM2_M_VERY_LONG_WORD 3889 1.10 1.52 0.87 128 TooManyTo_005 3863 0.80 0.67 0.87 129 MISSING_HEADERS 3549 0.65 0.36 0.80 130 RELAYCOUNTRY_DE 3433 0.88 1.08 0.77 131 NML_ADSP_CUSTOM_MED 3307 0.93 1.27 0.74 132 XMNoVowels 3273 0.61 0.38 0.74 133 XMBdyGiftCard01 3040 1.08 1.84 0.68 134 XM_H_PHPMailer 3028 0.89 1.28 0.68 135 XM_B_COPY_HTML 3006 0.66 0.62 0.68 136 XMGappySubj_01 2997 0.56 0.36 0.67 137 T_TooManySym_03 2946 0.49 0.15 0.66 138 KHOP_DYNAMIC 2919 0.78 1.02 0.66 139 USER_IN_WHITELIST 2895 0.43 0.00 0.65 140 XMBody_95 2830 0.47 0.16 0.64 141 XMBrknScrpt_02 2805 0.84 1.25 0.63 142 XMSubMetaSxObfu_02 2777 0.58 0.48 0.62 143 TR_MetaPhish_Combo_01 2741 0.62 0.62 0.62 144 T_OBFU_PDF_ATTACH 2678 0.47 0.21 0.60 145 XMSubNoVowel 2591 0.66 0.82 0.58 146 XMLngstWrd_02 2521 0.46 0.26 0.57 147 HTML_TAG_BALANCE_BODY 2491 0.72 1.03 0.56 148 FORGED_GMAIL_RCVD 2478 0.82 1.30 0.56 149 T_XMHurry_00 2446 0.97 1.76 0.55 150 RELAYCOUNTRY_AU 2414 0.58 0.66 0.54 151 XMBody_78 2352 0.80 1.31 0.53 152 XMMoneyMeta_00 2328 0.67 0.94 0.52 153 XM_D_tchamptons_WL 2322 0.34 0.00 0.52 154 TR_XM_RelayPhish 2293 0.83 1.41 0.52 155 URI_NOVOWEL 2290 0.68 1.01 0.52 156 HTML_FONT_FACE_BAD 2158 0.74 1.23 0.49 157 XM_ShortIntro_01 2158 0.47 0.44 0.49 158 XM_H_Trusted_IP 2155 0.32 0.00 0.48 159 XMBody_17 2152 0.84 1.53 0.48 160 TM2_M_BODY_EMPTY 2140 0.38 0.19 0.48 161 LOW_PRICE 2139 0.47 0.45 0.48 162 TM2_M_A_HREF_HREF 2101 0.66 1.03 0.47 163 XMHTML_After_End 2088 0.82 1.48 0.47 164 XMSubMetaI_00 2054 0.99 2.00 0.46 165 HTML_IMAGE_ONLY_32 2049 0.50 0.57 0.46 166 T_MONEY_PERCENT 2049 0.75 1.29 0.46 167 TR_LOTS_OF_MONEY2 2049 0.75 1.29 0.46 168 NO_DNS_FOR_FROM 2036 0.63 0.94 0.46 169 XMDateMe_00 2012 0.44 0.42 0.45 170 SHORT_HELO_AND_INLINE_IMAGE 2008 0.32 0.06 0.45 171 HTTPS_HTTP_MISMATCH 1980 0.61 0.91 0.45 172 XM_B_REG_HTML 1951 0.55 0.76 0.44 173 DKIM_ADSP_NXDOMAIN 1949 0.51 0.64 0.44 174 XMHTMLBadTable_001 1944 0.59 0.89 0.44 175 FILL_THIS_FORM 1943 0.54 0.72 0.44 176 RDNS_DYNAMIC 1942 0.53 0.71 0.44 177 RCVD_IN_SORBS_DUL 1925 0.35 0.18 0.43 178 T_Symld_Words_02 1908 0.57 0.84 0.43 179 XMSubMetaSxObfu_03 1895 0.59 0.89 0.43 180 AC_DIV_BONANZA 1760 0.29 0.09 0.40 181 HTML_IMAGE_ONLY_28 1751 0.49 0.67 0.39 182 HTML_IMAGE_ONLY_24 1665 0.58 0.96 0.37 183 XMSexyCombo_01 1653 0.78 1.55 0.37 184 HTML_FONT_SIZE_HUGE 1577 0.50 0.77 0.35 185 T_FILL_THIS_FORM_LONG 1564 0.46 0.67 0.35 186 HTML_IMAGE_ONLY_16 1554 0.31 0.23 0.35 187 XMPhish14 1549 0.49 0.76 0.35 188 TVD_SPACE_RATIO 1548 0.32 0.28 0.35 189 XMSolicitRefs_0 1524 0.32 0.28 0.34 190 XM_B_TRADE_HTML 1513 0.35 0.38 0.34 191 XMLngstWrd_03 1454 0.27 0.17 0.33 192 HTML_IMAGE_ONLY_20 1445 0.30 0.26 0.33 193 XM_H_PHPOS_M 1442 0.47 0.73 0.32 194 RCVD_IN_BL_SPAMCOP_NET 1434 1.08 2.52 0.32 195 XM_Walgreens_Forge 1423 0.21 0.01 0.32 196 XMSlimDrugH 1414 0.38 0.50 0.32 197 DIET_1 1411 0.62 1.18 0.32 198 XMSubEmpty 1395 0.26 0.16 0.31 199 MPART_ALT_DIFF_COUNT 1387 0.58 1.07 0.31 200 T_TooManySym_04 1385 0.21 0.02 0.31 ----------------------------------------------------------------------