Email: 487260 Autolearn: 0 AvgScore: 2.67 AvgScanTime: 2.00 sec Spam: 132227 Autolearn: 0 AvgScore: 12.52 AvgScanTime: 2.34 sec Ham: 355033 Autolearn: 0 AvgScore: -1.00 AvgScanTime: 1.87 sec Time Spent Running SA: 270.05 hours Time Spent Processing Spam: 85.90 hours Time Spent Processing Ham: 184.14 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 122714 86.79 92.81 84.55 2 DKIM_SIGNED 112588 72.58 85.15 67.90 3 XM_DK_Pass 108839 70.79 82.31 66.49 4 DKIM_VALID 107399 68.89 81.22 64.30 5 DCC_CHECK 103011 44.52 77.90 32.08 6 XMListUnsubscribeExists 94155 48.53 71.21 40.09 7 DKIM_VALID_AU 82530 51.23 62.42 47.06 8 XM_H_QuotedFrom 72739 40.31 55.01 34.84 9 XM_DK_Undo_02 66459 23.24 50.26 13.18 10 BAYES_99 61240 21.85 46.31 12.74 11 BAYES_999 52744 19.06 39.89 11.31 12 TR_DCC_Bayes_99 47427 13.99 35.87 5.84 13 HTML_FONT_LOW_CONTRAST 46538 25.60 35.20 22.02 14 LOC_TINY_FONT_1 43505 21.53 32.90 17.29 15 BAYES_50 40502 49.87 30.63 57.04 16 MIME_HTML_ONLY 40034 21.50 30.28 18.23 17 FVGT_m_MULTI_ODD 35648 20.55 26.96 18.16 18 XMSubLong 34633 20.83 26.19 18.84 19 XM_Body_Dirty_Words 27864 12.42 21.07 9.20 20 DKIM_VALID_EF 26655 21.78 20.16 22.38 21 DCC_CHECK_NEGATIVE 26210 53.15 19.82 65.56 22 T_TM2_M_HEADER_IN_MSG 24988 28.89 18.90 32.62 23 T_KAM_HTML_FONT_INVALID 23582 13.59 17.83 12.00 24 RELAYCOUNTRY_META 23544 8.60 17.81 5.18 25 XM_Multi_Part_URI 22944 12.18 17.35 10.26 26 HTML_IMAGE_RATIO_02 22311 9.29 16.87 6.47 27 XM_Evil_Numbers_Gen 20566 10.24 15.55 8.26 28 MultiRelay 19791 18.73 14.97 20.14 29 BOTNET 19084 4.57 14.43 0.89 30 BOTNET_IPINHOSTNAME 16864 6.67 12.75 4.41 31 FSL_BULK_SIG 15825 9.08 11.97 8.01 32 LOTS_OF_MONEY 15586 8.61 11.79 7.43 33 XMSexyCombo_05 15285 5.24 11.56 2.89 34 T_XMDrugObfuBody_14 14471 8.36 10.94 7.40 35 XM_B_Phish_Phrases 13606 6.56 10.29 5.16 36 UNTRUSTED_Relay 12463 3.56 9.43 1.38 37 LotsOfNums_01 12090 7.46 9.14 6.84 38 HTML_IMAGE_RATIO_04 11993 5.82 9.07 4.61 39 XM_H_Long_From01 10889 6.36 8.24 5.66 40 BAYES_80 10599 5.02 8.02 3.91 41 TR_XM_DocInvoice 10450 5.76 7.90 4.97 42 MPART_ALT_DIFF 9717 4.01 7.35 2.76 43 FROM_EXCESS_BASE64 9156 4.35 6.92 3.39 44 RCVD_IN_RP_SAFE 8902 8.84 6.73 9.62 45 XMSubMetaSx_00 8805 4.16 6.66 3.23 46 XM_UncommonTLD01 8606 4.59 6.51 3.88 47 TooManyTo_001 8388 8.74 6.34 9.63 48 BAYES_60 7749 6.53 5.86 6.77 49 RCVD_IN_RP_CERTIFIED 7453 7.87 5.64 8.70 50 HTML_IMAGE_RATIO_06 7306 3.26 5.53 2.42 51 XMStrtUSub 6843 4.66 5.18 4.46 52 MIME_QP_LONG_LINE 6680 4.81 5.05 4.72 53 BAYES_95 6301 3.21 4.77 2.64 54 RCVD_IN_MSPIKE_H2 6144 4.64 4.65 4.63 55 TM2_M_URI_OPT_OUT 5726 2.49 4.33 1.81 56 XM_DIRTYINTL 5568 2.33 4.21 1.63 57 MIME_HTML_MOSTLY 5502 3.06 4.16 2.64 58 XMNumbers 5490 3.79 4.15 3.65 59 XM_SendGrid 5320 4.42 4.02 4.56 60 DKIM_INVALID 5189 3.69 3.92 3.60 61 XM_UB50 5048 1.62 3.82 0.80 62 T_REMOTE_IMAGE 4904 4.48 3.71 4.77 63 MIME_HTML_ONLY_MULTI 4824 1.71 3.65 0.98 64 XM_H_Long_From02 4753 1.82 3.59 1.16 65 XM_SPF_SoftFail 4739 2.80 3.58 2.51 66 XM_OfRef6 4615 2.17 3.49 1.68 67 RELAYCOUNTRY_CA 4609 1.96 3.49 1.40 68 XMBody_17 4492 1.25 3.40 0.45 69 RELAYCOUNTRY_GB 4483 1.93 3.39 1.38 70 RCVD_IN_BL_SPAMCOP_NET 4193 1.25 3.17 0.54 71 XM_CamelCaseFrm001 4193 2.07 3.17 1.66 72 URI_HEX 4038 1.56 3.05 1.00 73 HTML_IMAGE_RATIO_08 3956 2.20 2.99 1.91 74 T_TooManySym_01 3873 4.00 2.93 4.40 75 HTML_MIME_NO_HTML_TAG 3565 2.83 2.70 2.88 76 TR_Mismatch_TLD_01 3299 0.80 2.49 0.17 77 T_XMDrugObfuBody_08 3291 1.63 2.49 1.31 78 XM_URI_RBL 3243 0.75 2.45 0.11 79 SUBJ_ALL_CAPS 3242 1.98 2.45 1.80 80 XMSubMetaI_00 3179 1.30 2.40 0.90 81 BOTNET_NORDNS 3161 0.66 2.39 0.02 82 SpammyFromTLD_01 3110 1.42 2.35 1.07 83 RCVD_IN_IADB_LISTED 2967 4.08 2.24 4.76 84 XMDiploma_00 2877 1.55 2.18 1.31 85 RCVD_IN_PSBL 2813 0.68 2.13 0.14 86 RCVD_IN_RP_RNBL 2728 0.60 2.06 0.05 87 XM_OfRef7 2728 0.70 2.06 0.19 88 TM2_M_VERY_LONG_WORD 2670 1.13 2.02 0.80 89 XM_Lotto 2649 0.62 2.00 0.11 90 FSL_THIS_IS_ADV 2643 0.58 2.00 0.05 91 RCVD_IN_IADB_SPF 2577 3.51 1.95 4.09 92 FILL_THIS_FORM 2556 1.05 1.93 0.72 93 RELAYCOUNTRY_DE 2545 0.88 1.92 0.49 94 MONEY_FRAUD_5 2472 0.51 1.87 0.00 95 XMPhish30 2434 0.81 1.84 0.43 96 RCVD_IN_IADB_SENDERID 2415 3.09 1.83 3.55 97 XM_OfRef8 2392 0.52 1.81 0.03 98 MultiRelay_Combo 2391 0.64 1.81 0.21 99 MultiRelay_CC 2391 0.64 1.81 0.21 100 DIET_1 2388 0.90 1.81 0.57 101 FORM_FRAUD_5 2386 0.49 1.80 0.00 102 RCVD_IN_IADB_DK 2379 3.02 1.80 3.48 103 T_FILL_THIS_FORM_LOAN 2354 0.89 1.78 0.56 104 XM_ProductURIs 2325 1.23 1.76 1.03 105 XM_DK_Undo_01 2306 1.95 1.74 2.03 106 MAILING_LIST_MULTI 2301 2.31 1.74 2.52 107 HK_LOTTO 2292 0.47 1.73 0.00 108 XMRefNum 2285 0.47 1.73 0.01 109 URIBL_BLACK 2217 0.49 1.68 0.05 110 RELAYCOUNTRY_FR 2160 0.72 1.63 0.39 111 PHOTO_EDITING_FREEM 2139 0.44 1.62 0.00 112 XM_UB99 2138 0.45 1.62 0.01 113 PHOTO_EDITING_DIRECT 2127 0.44 1.61 0.00 114 BAYES_00 2035 6.28 1.54 8.04 115 SpammyFromTLD_02 2022 0.54 1.53 0.17 116 ALL_TRUSTED 2022 14.72 1.53 19.64 117 TR_XM_RelayPhish 2006 0.78 1.52 0.50 118 T_XMHurry_00 1948 0.73 1.47 0.45 119 XMGenDplmaNmb 1879 1.03 1.42 0.89 120 XMBdyGiftCard01 1872 0.94 1.42 0.76 121 XMSlimDrugH 1857 0.65 1.40 0.37 122 XM_UB80 1811 0.39 1.37 0.02 123 T_XMDrugObfuBody_00 1808 0.79 1.37 0.57 124 XMSexyCombo_01 1799 0.62 1.36 0.35 125 XM_HighProb1 1798 0.38 1.36 0.02 126 XM_UB999 1756 0.37 1.33 0.01 127 XMStockSpam_06 1735 1.38 1.31 1.41 128 BAYES_40 1729 3.30 1.31 4.04 129 TR_XM_DK_Bayes 1714 3.91 1.30 4.88 130 XM_UB60 1693 0.39 1.28 0.06 131 TR_XM_DK_Bayes1 1672 3.77 1.26 4.70 132 TR_XM_DK_Bayes2 1638 3.34 1.24 4.13 133 XMHTML_After_End 1627 0.59 1.23 0.35 134 DKIM_ADSP_CUSTOM_MED 1622 1.20 1.23 1.19 135 XM_H_PHPOS 1601 1.65 1.21 1.81 136 UNPARSEABLE_RELAY 1595 3.07 1.21 3.76 137 LONG_JUNK_URI 1568 0.48 1.19 0.22 138 XM_B_REG_HTML 1558 0.81 1.18 0.68 139 XMSubMetaSxObfu_03 1549 0.75 1.17 0.60 140 TR_Mismatch_TLD_02 1531 0.36 1.16 0.06 141 XM_BadFromFormat 1483 0.59 1.12 0.39 142 URIBL_DBL_SPAM 1451 0.30 1.10 0.01 143 XM_PDF 1449 4.97 1.10 6.41 144 RELAYCOUNTRY_AT 1444 0.39 1.09 0.13 145 URI_TRY_3LD 1417 0.75 1.07 0.63 146 XMBody_78 1398 0.66 1.06 0.51 147 RCVD_IN_IADB_VOUCHED 1395 2.81 1.06 3.46 148 NML_ADSP_CUSTOM_MED 1372 0.93 1.04 0.88 149 BAYES_20 1334 2.42 1.01 2.95 150 HTML_IMAGE_ONLY_08 1291 0.38 0.98 0.16 151 XMMoneyMeta_00 1281 0.64 0.97 0.51 152 SUBJ_DOLLARS 1274 0.38 0.96 0.16 153 FORGED_GMAIL_RCVD 1274 0.57 0.96 0.42 154 T_MONEY_PERCENT 1250 0.62 0.95 0.50 155 TR_LOTS_OF_MONEY2 1250 0.62 0.95 0.50 156 ANY_BOUNCE_MESSAGE 1247 2.94 0.94 3.68 157 BOUNCE_MESSAGE 1247 2.94 0.94 3.68 158 TR_Symld_Words 1221 1.81 0.92 2.14 159 INVALID_MSGID 1217 1.78 0.92 2.10 160 T_FILL_THIS_FORM_SHORT 1200 0.99 0.91 1.02 161 RELAYCOUNTRY_CN 1199 0.29 0.91 0.06 162 XMPhish14 1196 0.47 0.90 0.31 163 XM_B_COPY_HTML 1171 0.68 0.89 0.60 164 T_Symld_Words_02 1166 0.50 0.88 0.36 165 XMBrknScrpt_02 1153 0.70 0.87 0.63 166 ADMITS_SPAM 1129 0.25 0.85 0.02 167 T_TooManySym_02 1129 1.45 0.85 1.67 168 XMPhish11 1105 1.05 0.84 1.13 169 XMClaimOffer 1104 0.32 0.83 0.13 170 HTML_FONT_FACE_BAD 1078 0.60 0.82 0.52 171 RDNS_DYNAMIC 1075 0.52 0.81 0.42 172 XM_H_PHPMailer 1039 0.96 0.79 1.02 173 XMHTMLBadTable_001 1038 0.61 0.79 0.55 174 URI_NOVOWEL 1033 0.48 0.78 0.37 175 TooManyTo_002 1028 2.34 0.78 2.93 176 MISSING_HEADERS 1027 0.64 0.78 0.58 177 T_HTML_TAG_BALANCE_CENTER 1000 0.46 0.76 0.35 178 XMSubMetaI_01 981 0.30 0.74 0.14 179 XMSubMetaSx_01 963 0.28 0.73 0.12 180 XM_RXBody 945 0.34 0.71 0.19 181 DATE_IN_PAST_03_06 943 0.27 0.71 0.10 182 XM_Combo_Sbj 941 0.36 0.71 0.23 183 XM_Body_Obfu01 922 0.34 0.70 0.21 184 MPART_ALT_DIFF_COUNT 919 0.47 0.70 0.38 185 HTTPS_HTTP_MISMATCH 901 0.61 0.68 0.58 186 HTML_TAG_BALANCE_BODY 900 0.43 0.68 0.34 187 XMSubMetaD_03 886 0.30 0.67 0.16 188 HTML_IMAGE_ONLY_28 857 0.52 0.65 0.47 189 XMNoVowels 852 0.63 0.64 0.63 190 HTML_FONT_SIZE_HUGE 850 0.37 0.64 0.27 191 XMSubMetaSSx_00 846 0.31 0.64 0.18 192 TooManyTo_003 841 1.57 0.64 1.91 193 BODY_URI_ONLY 815 0.20 0.62 0.04 194 HTML_SHORT_LINK_IMG_1 803 0.18 0.61 0.02 195 REPLYTO_WITHOUT_TO_CC 793 0.20 0.60 0.05 196 XMWghtMeta_00 780 0.18 0.59 0.03 197 TR_Sbj_FN_Bdy 776 0.34 0.59 0.25 198 XMSexyCombo_04 776 0.21 0.59 0.07 199 BODY_ENHANCEMENT 769 0.18 0.58 0.04 200 XM_GoogleGroups 766 1.10 0.58 1.29 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 300175 86.79 92.81 84.55 2 DKIM_SIGNED 241084 72.58 85.15 67.90 3 XM_DK_Pass 236075 70.79 82.31 66.49 4 DCC_CHECK_NEGATIVE 232768 53.15 19.82 65.56 5 DKIM_VALID 228291 68.89 81.22 64.30 6 BAYES_50 202503 49.87 30.63 57.04 7 DKIM_VALID_AU 167080 51.23 62.42 47.06 8 XMListUnsubscribeExists 142315 48.53 71.21 40.09 9 XM_H_QuotedFrom 123677 40.31 55.01 34.84 10 T_TM2_M_HEADER_IN_MSG 115801 28.89 18.90 32.62 11 DCC_CHECK 113898 44.52 77.90 32.08 12 DKIM_VALID_EF 79461 21.78 20.16 22.38 13 HTML_FONT_LOW_CONTRAST 78179 25.60 35.20 22.02 14 MultiRelay 71497 18.73 14.97 20.14 15 ALL_TRUSTED 69719 14.72 1.53 19.64 16 XMSubLong 66872 20.83 26.19 18.84 17 MIME_HTML_ONLY 64705 21.50 30.28 18.23 18 FVGT_m_MULTI_ODD 64491 20.55 26.96 18.16 19 LOC_TINY_FONT_1 61385 21.53 32.90 17.29 20 XM_DK_Undo_02 46788 23.24 50.26 13.18 21 BAYES_99 45228 21.85 46.31 12.74 22 T_KAM_HTML_FONT_INVALID 42614 13.59 17.83 12.00 23 BAYES_999 40150 19.06 39.89 11.31 24 XM_DKIMWhitelistDomains 36556 7.51 0.03 10.30 25 XM_Multi_Part_URI 36411 12.18 17.35 10.26 26 TooManyTo_001 34181 8.74 6.34 9.63 27 RCVD_IN_RP_SAFE 34166 8.84 6.73 9.62 28 XM_Body_Dirty_Words 32676 12.42 21.07 9.20 29 RCVD_IN_RP_CERTIFIED 30880 7.87 5.64 8.70 30 XM_Evil_Numbers_Gen 29329 10.24 15.55 8.26 31 BAYES_00 28550 6.28 1.54 8.04 32 FSL_BULK_SIG 28430 9.08 11.97 8.01 33 LOTS_OF_MONEY 26384 8.61 11.79 7.43 34 T_XMDrugObfuBody_14 26259 8.36 10.94 7.40 35 LotsOfNums_01 24267 7.46 9.14 6.84 36 BAYES_60 24048 6.53 5.86 6.77 37 HTML_IMAGE_RATIO_02 22956 9.29 16.87 6.47 38 XM_PDF 22760 4.97 1.10 6.41 39 IN_ZIMBRA_NJ_WHITELIST 21518 4.42 0.03 6.06 40 TR_DCC_Bayes_99 20749 13.99 35.87 5.84 41 XM_H_Long_From01 20084 6.36 8.24 5.66 42 RELAYCOUNTRY_META 18377 8.60 17.81 5.18 43 XM_B_Phish_Phrases 18334 6.56 10.29 5.16 44 TR_XM_DocInvoice 17632 5.76 7.90 4.97 45 TR_XM_DK_Bayes 17326 3.91 1.30 4.88 46 T_REMOTE_IMAGE 16923 4.48 3.71 4.77 47 RCVD_IN_IADB_LISTED 16907 4.08 2.24 4.76 48 MIME_QP_LONG_LINE 16746 4.81 5.05 4.72 49 TR_XM_DK_Bayes1 16697 3.77 1.26 4.70 50 RCVD_IN_MSPIKE_H2 16446 4.64 4.65 4.63 51 HTML_IMAGE_RATIO_04 16380 5.82 9.07 4.61 52 XM_SendGrid 16206 4.42 4.02 4.56 53 XMStrtUSub 15850 4.66 5.18 4.46 54 BOTNET_IPINHOSTNAME 15653 6.67 12.75 4.41 55 T_TooManySym_01 15624 4.00 2.93 4.40 56 TR_XM_DK_Bayes2 14650 3.34 1.24 4.13 57 RCVD_IN_IADB_SPF 14533 3.51 1.95 4.09 58 BAYES_40 14361 3.30 1.31 4.04 59 BAYES_80 13877 5.02 8.02 3.91 60 XM_UncommonTLD01 13781 4.59 6.51 3.88 61 UNPARSEABLE_RELAY 13342 3.07 1.21 3.76 62 ANY_BOUNCE_MESSAGE 13081 2.94 0.94 3.68 63 BOUNCE_MESSAGE 13076 2.94 0.94 3.68 64 XMNumbers 12960 3.79 4.15 3.65 65 DKIM_INVALID 12793 3.69 3.92 3.60 66 RCVD_IN_IADB_SENDERID 12620 3.09 1.83 3.55 67 RCVD_IN_IADB_DK 12347 3.02 1.80 3.48 68 RCVD_IN_IADB_VOUCHED 12282 2.81 1.06 3.46 69 FROM_EXCESS_BASE64 12031 4.35 6.92 3.39 70 XMSubMetaSx_00 11481 4.16 6.66 3.23 71 TVD_RCVD_IP 11407 2.39 0.16 3.21 72 BAYES_20 10465 2.42 1.01 2.95 73 TooManyTo_002 10387 2.34 0.78 2.93 74 XMSexyCombo_05 10271 5.24 11.56 2.89 75 HTML_MIME_NO_HTML_TAG 10242 2.83 2.70 2.88 76 HELO_NODOT 10034 2.16 0.38 2.83 77 MPART_ALT_DIFF 9805 4.01 7.35 2.76 78 MIME_HTML_MOSTLY 9384 3.06 4.16 2.64 79 BAYES_95 9356 3.21 4.77 2.64 80 MAILING_LIST_MULTI 8936 2.31 1.74 2.52 81 IN_HORDE_ADDRESS_BOOK 8919 1.85 0.07 2.51 82 XM_SPF_SoftFail 8918 2.80 3.58 2.51 83 HTML_IMAGE_RATIO_06 8585 3.26 5.53 2.42 84 TR_Symld_Words 7613 1.81 0.92 2.14 85 INVALID_MSGID 7452 1.78 0.92 2.10 86 XM_DK_Undo_01 7205 1.95 1.74 2.03 87 TooManyTo_003 6796 1.57 0.64 1.91 88 HTML_IMAGE_RATIO_08 6768 2.20 2.99 1.91 89 BAYES_05 6645 1.52 0.56 1.87 90 TO_MALFORMED 6495 1.34 0.01 1.83 91 XM_H_PHPOS 6429 1.65 1.21 1.81 92 TM2_M_URI_OPT_OUT 6413 2.49 4.33 1.81 93 SUBJ_ALL_CAPS 6407 1.98 2.45 1.80 94 XM_OfRef6 5959 2.17 3.49 1.68 95 T_TooManySym_02 5932 1.45 0.85 1.67 96 XM_CamelCaseFrm001 5879 2.07 3.17 1.66 97 XM_DIRTYINTL 5791 2.33 4.21 1.63 98 RCVD_IN_IADB_OPTIN 5629 1.31 0.56 1.59 99 XMCapTrack 5340 1.25 0.55 1.50 100 TooManyTo_004 4998 1.16 0.51 1.41 101 XMStockSpam_06 4994 1.38 1.31 1.41 102 RELAYCOUNTRY_CA 4956 1.96 3.49 1.40 103 USER_IN_DEF_DKIM_WL 4931 1.06 0.17 1.39 104 RELAYCOUNTRY_GB 4906 1.93 3.39 1.38 105 UNTRUSTED_Relay 4886 3.56 9.43 1.38 106 XMDiploma_00 4658 1.55 2.18 1.31 107 T_XMDrugObfuBody_08 4639 1.63 2.49 1.31 108 XM_GoogleGroups 4572 1.10 0.58 1.29 109 DKIM_ADSP_CUSTOM_MED 4231 1.20 1.23 1.19 110 XM_H_Long_From02 4104 1.82 3.59 1.16 111 TooManyTo_005 4045 0.94 0.42 1.14 112 XMPhish11 4024 1.05 0.84 1.13 113 T_OBFU_PDF_ATTACH 3929 0.90 0.33 1.11 114 SpammyFromTLD_01 3812 1.42 2.35 1.07 115 XM_ProductURIs 3666 1.23 1.76 1.03 116 XM_H_PHPMailer 3636 0.96 0.79 1.02 117 T_FILL_THIS_FORM_SHORT 3625 0.99 0.91 1.02 118 RCVD_IN_MSPIKE_WL 3624 0.80 0.21 1.02 119 RCVD_IN_MSPIKE_H3 3624 0.80 0.21 1.02 120 URI_HEX 3548 1.56 3.05 1.00 121 MIME_HTML_ONLY_MULTI 3485 1.71 3.65 0.98 122 TR_MetaPhish_Combo_01 3365 0.84 0.55 0.95 123 XMSubMetaI_00 3179 1.30 2.40 0.90 124 BOTNET 3173 4.57 14.43 0.89 125 XMGenDplmaNmb 3149 1.03 1.42 0.89 126 NML_ADSP_CUSTOM_MED 3138 0.93 1.04 0.88 127 XM_ShortIntro_01 3084 0.76 0.45 0.87 128 USER_IN_WHITELIST 2986 0.61 0.00 0.84 129 XM_UB50 2841 1.62 3.82 0.80 130 TM2_M_VERY_LONG_WORD 2838 1.13 2.02 0.80 131 XMBdyGiftCard01 2714 0.94 1.42 0.76 132 RCVD_IN_SORBS_DUL 2662 0.61 0.22 0.75 133 T_TooManySym_03 2587 0.62 0.33 0.73 134 XMBody_95 2570 0.57 0.16 0.72 135 FILL_THIS_FORM 2542 1.05 1.93 0.72 136 SHORT_HELO_AND_INLINE_IMAGE 2451 0.53 0.08 0.69 137 XM_B_REG_HTML 2399 0.81 1.18 0.68 138 RCVD_IN_IADB_DOPTIN 2276 0.49 0.07 0.64 139 URI_TRY_3LD 2244 0.75 1.07 0.63 140 XMBrknScrpt_02 2241 0.70 0.87 0.63 141 XMNoVowels 2222 0.63 0.64 0.63 142 XM_B_COPY_HTML 2142 0.68 0.89 0.60 143 HTML_IMAGE_ONLY_32 2140 0.55 0.42 0.60 144 XMSubMetaSxObfu_03 2118 0.75 1.17 0.60 145 T_FILL_THIS_FORM_LONG 2082 0.45 0.10 0.59 146 AC_DIV_BONANZA 2078 0.51 0.29 0.59 147 MISSING_HEADERS 2072 0.64 0.78 0.58 148 HTML_FONT_SIZE_LARGE 2055 0.51 0.32 0.58 149 HTTPS_HTTP_MISMATCH 2053 0.61 0.68 0.58 150 T_XMDrugObfuBody_00 2028 0.79 1.37 0.57 151 DIET_1 2012 0.90 1.81 0.57 152 XM_USANA_RCVD 1988 0.41 0.00 0.56 153 T_FILL_THIS_FORM_LOAN 1973 0.89 1.78 0.56 154 XMHTMLBadTable_001 1939 0.61 0.79 0.55 155 XMSubMetaSxObfu_02 1919 0.48 0.32 0.54 156 RCVD_IN_BL_SPAMCOP_NET 1906 1.25 3.17 0.54 157 XMGappySubj_01 1856 0.49 0.40 0.52 158 HTML_FONT_FACE_BAD 1843 0.60 0.82 0.52 159 XMMoneyMeta_00 1817 0.64 0.97 0.51 160 XMBody_78 1810 0.66 1.06 0.51 161 TR_LOTS_OF_MONEY2 1790 0.62 0.95 0.50 162 T_MONEY_PERCENT 1790 0.62 0.95 0.50 163 TR_XM_RelayPhish 1775 0.78 1.52 0.50 164 TM2_M_BODY_EMPTY 1757 0.43 0.25 0.49 165 RELAYCOUNTRY_DE 1734 0.88 1.92 0.49 166 XM_H_PHPOS_M 1723 0.50 0.53 0.49 167 XMDateMe_00 1711 0.45 0.36 0.48 168 HTML_IMAGE_ONLY_28 1671 0.52 0.65 0.47 169 DOS_OUTLOOK_TO_MX 1636 0.37 0.13 0.46 170 T_XMHurry_00 1613 0.73 1.47 0.45 171 XMBody_17 1598 1.25 3.40 0.45 172 HTML_IMAGE_ONLY_24 1558 0.45 0.48 0.44 173 XMPhish30 1535 0.81 1.84 0.43 174 XMSolicitRefs_0 1531 0.43 0.42 0.43 175 HTML_IMAGE_ONLY_12 1530 0.36 0.17 0.43 176 XMSubNoVowel 1524 0.43 0.42 0.43 177 FORGED_GMAIL_RCVD 1500 0.57 0.96 0.42 178 RDNS_DYNAMIC 1476 0.52 0.81 0.42 179 MSGID_FROM_MTA_HEADER 1400 0.36 0.28 0.39 180 RELAYCOUNTRY_AU 1386 0.44 0.56 0.39 181 XMRcvdHeader_15 1385 0.28 0.00 0.39 182 XM_BadFromFormat 1378 0.59 1.12 0.39 183 RELAYCOUNTRY_FR 1372 0.72 1.63 0.39 184 HTML_IMAGE_ONLY_20 1353 0.35 0.27 0.38 185 MPART_ALT_DIFF_COUNT 1352 0.47 0.70 0.38 186 T_TooManySym_04 1333 0.28 0.02 0.38 187 XMSlimDrugH 1331 0.65 1.40 0.37 188 URI_NOVOWEL 1318 0.48 0.78 0.37 189 XM_B_TRADE_HTML 1311 0.39 0.44 0.37 190 T_Symld_Words_02 1293 0.50 0.88 0.36 191 XMSubEmpty 1289 0.30 0.14 0.36 192 TVD_SPACE_RATIO 1277 0.31 0.17 0.36 193 XMHTML_After_End 1246 0.59 1.23 0.35 194 T_HTML_TAG_BALANCE_CENTER 1230 0.46 0.76 0.35 195 XMSexyCombo_01 1226 0.62 1.36 0.35 196 HTML_TAG_BALANCE_BODY 1204 0.43 0.68 0.34 197 HTML_IMAGE_ONLY_16 1163 0.29 0.17 0.33 198 GMD_PDF_EMPTY_BODY 1160 0.28 0.14 0.33 199 XM_H_SpoofStaff4 1135 0.24 0.03 0.32 200 XMLngstWrd_00 1135 0.36 0.45 0.32 ----------------------------------------------------------------------