Email: 672926 Autolearn: 0 AvgScore: 0.87 AvgScanTime: 3.53 sec Spam: 176860 Autolearn: 0 AvgScore: 12.47 AvgScanTime: 4.37 sec Ham: 496066 Autolearn: 0 AvgScore: -3.27 AvgScanTime: 3.23 sec Time Spent Running SA: 659.25 hours Time Spent Processing Spam: 214.65 hours Time Spent Processing Ham: 444.60 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 168954 87.94 95.53 85.23 2 DKIM_SIGNED 151726 59.54 85.79 50.18 3 XM_DK_Pass 147033 58.06 83.14 49.12 4 DCC_CHECK 139240 38.55 78.73 24.22 5 DKIM_VALID 138469 53.89 78.29 45.19 6 XMListUnsubscribeExists 129905 42.30 73.45 31.20 7 DKIM_VALID_AU 107263 39.37 60.65 31.79 8 XM_H_QuotedFrom 98938 49.03 55.94 46.56 9 XM_DK_Undo_02 85595 19.48 48.40 9.17 10 BAYES_99 78243 18.09 44.24 8.77 11 BAYES_999 66293 15.57 37.48 7.76 12 HTML_FONT_LOW_CONTRAST 64469 24.12 36.45 19.73 13 LOC_TINY_FONT_1 61432 18.14 34.73 12.22 14 TR_DCC_Bayes_99 60947 12.09 34.46 4.11 15 BAYES_50 58466 44.78 33.06 48.95 16 MIME_HTML_ONLY 52283 17.17 29.56 12.75 17 FVGT_m_MULTI_ODD 46355 17.57 26.21 14.50 18 XMSubLong 44986 18.81 25.44 16.44 19 DKIM_VALID_EF 43838 19.56 24.79 17.69 20 T_KAM_HTML_FONT_INVALID 39550 13.74 22.36 10.66 21 T_TM2_M_HEADER_IN_MSG 38450 26.66 21.74 28.41 22 DCC_CHECK_NEGATIVE 33715 59.61 19.06 74.07 23 XM_Body_Dirty_Words 32418 10.19 18.33 7.29 24 RELAYCOUNTRY_META 30908 7.64 17.48 4.14 25 XM_Multi_Part_URI 28811 9.56 16.29 7.16 26 MultiRelay 27798 15.00 15.72 14.74 27 HTML_IMAGE_RATIO_02 25276 6.96 14.29 4.35 28 LOTS_OF_MONEY 23598 8.31 13.34 6.51 29 XM_Evil_Numbers_Gen 23246 9.93 13.14 8.79 30 BOTNET 23121 4.19 13.07 1.03 31 BOTNET_IPINHOSTNAME 22433 5.20 12.68 2.53 32 FSL_BULK_SIG 21868 7.78 12.36 6.15 33 XM_B_Phish_Phrases 18651 5.40 10.55 3.57 34 HTML_IMAGE_RATIO_04 17250 19.59 9.75 23.10 35 T_XMDrugObfuBody_14 17090 6.96 9.66 6.00 36 UNTRUSTED_Relay 16916 3.61 9.56 1.49 37 LotsOfNums_01 16668 6.74 9.42 5.79 38 TR_XM_DocInvoice 15170 4.29 8.58 2.77 39 XMSexyCombo_05 14961 3.79 8.46 2.12 40 XM_UncommonTLD01 13599 4.02 7.69 2.71 41 XM_H_Long_From01 13544 7.56 7.66 7.53 42 DKIM_INVALID 13257 5.65 7.50 4.99 43 BAYES_80 12953 4.17 7.32 3.05 44 BAYES_60 12654 5.45 7.15 4.84 45 MPART_ALT_DIFF 12078 3.36 6.83 2.13 46 TooManyTo_001 12045 6.62 6.81 6.55 47 XMSubMetaSx_00 11334 3.48 6.41 2.43 48 FROM_EXCESS_BASE64 11224 3.40 6.35 2.35 49 HTML_IMAGE_RATIO_06 9156 4.49 5.18 4.24 50 MIME_QP_LONG_LINE 8486 4.32 4.80 4.15 51 XMNumbers 8466 3.19 4.79 2.62 52 BAYES_95 8220 2.63 4.65 1.91 53 XM_UB50 8160 2.08 4.61 1.18 54 TM2_M_URI_OPT_OUT 7775 2.16 4.40 1.36 55 XM_SendGrid 7542 3.79 4.26 3.62 56 RCVD_IN_RP_SAFE 7541 5.07 4.26 5.36 57 RELAYCOUNTRY_CA 7453 1.90 4.21 1.08 58 T_REMOTE_IMAGE 7370 3.52 4.17 3.29 59 XMStrtUSub 6871 11.99 3.88 14.87 60 RCVD_IN_MSPIKE_H2 6597 3.33 3.73 3.18 61 RCVD_IN_RP_CERTIFIED 6320 4.46 3.57 4.78 62 XM_DIRTYINTL 6319 2.02 3.57 1.47 63 XM_SPF_SoftFail 6308 2.12 3.57 1.61 64 MIME_HTML_MOSTLY 6291 2.07 3.56 1.54 65 XM_OfRef6 6101 1.80 3.45 1.21 66 HTML_IMAGE_RATIO_08 6014 2.06 3.40 1.58 67 SpammyFromTLD_02 5941 1.08 3.36 0.27 68 XM_CamelCaseFrm001 5725 1.65 3.24 1.08 69 T_TooManySym_01 5427 3.38 3.07 3.50 70 RCVD_IN_BL_SPAMCOP_NET 5348 1.08 3.02 0.38 71 URI_HEX 5043 1.45 2.85 0.95 72 RCVD_IN_RP_RNBL 4871 0.75 2.75 0.03 73 T_XMDrugObfuBody_08 4865 1.65 2.75 1.26 74 XMDiploma_00 4839 1.59 2.74 1.18 75 MIME_HTML_ONLY_MULTI 4579 1.30 2.59 0.85 76 HTML_MIME_NO_HTML_TAG 4555 1.95 2.58 1.72 77 XMPhish11 4417 1.38 2.50 0.98 78 SpammyFromTLD_01 4264 1.07 2.41 0.59 79 MultiRelay_Combo 4085 0.73 2.31 0.16 80 MultiRelay_CC 4085 0.73 2.31 0.16 81 RCVD_IN_IADB_LISTED 3955 3.45 2.24 3.89 82 XM_URI_RBL 3941 0.65 2.23 0.08 83 SUBJ_ALL_CAPS 3874 4.30 2.19 5.05 84 XMHTML_After_End 3754 0.76 2.12 0.28 85 RCVD_IN_IADB_SPF 3656 3.09 2.07 3.45 86 RCVD_IN_IADB_SENDERID 3493 2.79 1.98 3.08 87 RCVD_IN_IADB_DK 3468 2.75 1.96 3.03 88 ANY_BOUNCE_MESSAGE 3357 2.66 1.90 2.93 89 BOUNCE_MESSAGE 3357 2.66 1.90 2.93 90 XMGenDplmaNmb 3354 1.10 1.90 0.82 91 MAILING_LIST_MULTI 3296 1.86 1.86 1.86 92 TM2_M_VERY_LONG_WORD 3239 0.91 1.83 0.58 93 UNPARSEABLE_RELAY 3215 1.89 1.82 1.92 94 XMSubMetaI_00 3072 0.73 1.74 0.37 95 RELAYCOUNTRY_GB 3040 1.12 1.72 0.91 96 XMBody_17 3007 0.66 1.70 0.29 97 XM_UB99 3004 0.46 1.70 0.02 98 URIBL_BLACK 2987 0.46 1.69 0.02 99 TR_XM_RelayPhish 2970 0.71 1.68 0.37 100 BOTNET_NORDNS 2883 0.44 1.63 0.01 101 XMNoVowels 2850 1.26 1.61 1.13 102 DIET_1 2846 0.62 1.61 0.26 103 XM_ProductURIs 2841 0.96 1.61 0.73 104 URIBL_DBL_SPAM 2826 0.44 1.60 0.02 105 XM_H_Long_From02 2806 0.94 1.59 0.71 106 XMLongAddy 2773 0.48 1.57 0.09 107 T_XMHurry_00 2714 0.71 1.53 0.41 108 RELAYCOUNTRY_IN 2706 0.46 1.53 0.08 109 BODY_URI_ONLY 2642 0.44 1.49 0.06 110 NO_DNS_FOR_FROM 2625 1.23 1.48 1.14 111 XMStockSpam_06 2587 1.15 1.46 1.04 112 XM_UB60 2435 0.41 1.38 0.07 113 RELAYCOUNTRY_FR 2411 0.49 1.36 0.18 114 XMSexyCombo_01 2388 0.60 1.35 0.34 115 TR_LOTS_OF_MONEY2 2362 0.63 1.34 0.38 116 T_MONEY_PERCENT 2362 0.63 1.34 0.38 117 XMMoneyMeta_00 2343 0.62 1.32 0.37 118 XM_DK_Undo_01 2308 1.39 1.30 1.42 119 XMPhish30 2306 0.50 1.30 0.22 120 T_FILL_THIS_FORM_SHORT 2280 0.90 1.29 0.76 121 XM_UB999 2261 0.35 1.28 0.01 122 T_XMDrugObfuBody_00 2250 0.66 1.27 0.44 123 TR_LOTS_OF_MONEY3 2226 0.51 1.26 0.25 124 HTML_SHORT_LINK_IMG_1 2197 0.34 1.24 0.02 125 URI_TRY_3LD 2169 0.91 1.23 0.79 126 T_TooManySym_02 2169 1.50 1.23 1.60 127 HTML_IMAGE_ONLY_08 2161 0.39 1.22 0.09 128 BAYES_40 2138 4.11 1.21 5.14 129 XMSubMetaSSx_00 2104 0.38 1.19 0.10 130 XM_B_REG_HTML 2100 0.55 1.19 0.32 131 XMBrknScrpt_02 2056 0.59 1.16 0.38 132 ALL_TRUSTED 2055 14.14 1.16 18.77 133 RELAYCOUNTRY_CN 2017 0.34 1.14 0.05 134 TR_Symld_Words 1991 1.41 1.13 1.51 135 SUBJ_DOLLARS 1986 0.40 1.12 0.14 136 HTML_FONT_SIZE_LARGE 1983 0.41 1.12 0.15 137 XMBdyGiftCard01 1968 0.57 1.11 0.37 138 XMSlimDrugH 1954 0.58 1.10 0.39 139 HTTPS_HTTP_MISMATCH 1911 0.54 1.08 0.35 140 XM_HighProb1 1896 0.29 1.07 0.01 141 TR_MetaPhish_Combo_01 1866 0.68 1.06 0.54 142 XMPhish19 1865 0.30 1.05 0.03 143 DKIM_ADSP_NXDOMAIN 1813 1.13 1.03 1.16 144 XMBody_78 1789 0.52 1.01 0.34 145 DKIM_ADSP_CUSTOM_MED 1783 0.87 1.01 0.82 146 TooManyTo_002 1767 1.71 1.00 1.96 147 MISSING_HEADERS 1761 0.99 1.00 0.98 148 MPART_ALT_DIFF_COUNT 1717 0.48 0.97 0.30 149 XM_H_PHPOS 1651 1.10 0.93 1.16 150 BODY_ENHANCEMENT 1624 0.25 0.92 0.01 151 URI_NOVOWEL 1619 0.44 0.92 0.27 152 BAYES_00 1619 13.28 0.92 17.69 153 XM_BadFromFormat 1600 0.37 0.90 0.19 154 RELAYCOUNTRY_AU 1587 0.57 0.90 0.45 155 RELAYCOUNTRY_AT 1582 0.30 0.89 0.08 156 TooManyTo_003 1562 1.17 0.88 1.27 157 FORGED_GMAIL_RCVD 1561 0.52 0.88 0.39 158 FILL_THIS_FORM 1550 0.60 0.88 0.50 159 HTML_TAG_BALANCE_BODY 1544 0.45 0.87 0.30 160 REPLYTO_WITHOUT_TO_CC 1512 0.64 0.85 0.56 161 BAYES_20 1510 3.40 0.85 4.31 162 RCVD_IN_IADB_VOUCHED 1469 2.01 0.83 2.43 163 TR_Caps_n_Bayes_99 1456 0.24 0.82 0.03 164 LongTLD 1456 0.31 0.82 0.12 165 DATE_IN_PAST_03_06 1452 3.80 0.82 4.87 166 RDNS_DYNAMIC 1431 0.40 0.81 0.25 167 XM_XX_Yahoo 1421 0.27 0.80 0.08 168 FSL_THIS_IS_ADV 1420 0.23 0.80 0.03 169 XM_B_COPY_HTML 1418 0.45 0.80 0.32 170 T_HTML_TAG_BALANCE_CENTER 1391 0.29 0.79 0.11 171 XM_UB80 1385 0.23 0.78 0.03 172 PLING_QUERY 1384 0.43 0.78 0.31 173 FILL_THIS_FORM_LONG 1373 0.47 0.78 0.37 174 XM_PDF 1362 3.18 0.77 4.03 175 RCVD_IN_MSPIKE_WL 1360 1.13 0.77 1.26 176 TR_LOTS_OF_MONEY1 1357 0.24 0.77 0.06 177 T_Symld_Words_02 1354 0.51 0.77 0.42 178 RCVD_IN_MSPIKE_H3 1346 1.13 0.76 1.26 179 XMClaimOffer 1332 0.27 0.75 0.10 180 NML_ADSP_CUSTOM_MED 1325 0.61 0.75 0.56 181 XMPhish14 1314 0.35 0.74 0.20 182 TR_XM_DK_Bayes 1313 2.78 0.74 3.51 183 TooManyTo_004 1306 0.89 0.74 0.95 184 XM_H_PHPMailer 1305 0.70 0.74 0.69 185 HTML_FONT_FACE_BAD 1302 17.02 0.74 22.83 186 XMHTMLBadTable_001 1240 0.41 0.70 0.30 187 T_FILL_THIS_FORM_LOAN 1225 0.47 0.69 0.39 188 REMOVE_BEFORE_LINK 1218 0.29 0.69 0.14 189 FVGT_m_MULTI_ODD_EMAIL 1190 0.21 0.67 0.05 190 RELAYCOUNTRY_DE 1190 0.54 0.67 0.50 191 XMCapTrack 1188 1.13 0.67 1.29 192 XM_H_Long_From03 1177 0.24 0.67 0.09 193 TR_XM_DK_Bayes1 1171 2.41 0.66 3.04 194 LONG_HEX_URI 1160 0.26 0.66 0.11 195 XMSolicitRefs_0 1147 0.62 0.65 0.61 196 RELAYCOUNTRY_RU 1140 0.19 0.64 0.03 197 HTML_FONT_SIZE_HUGE 1140 0.25 0.64 0.11 198 XM_Body_Obfu01 1139 0.32 0.64 0.21 199 HTML_IMAGE_ONLY_28 1124 0.40 0.64 0.32 200 TR_Mismatch_TLD_02 1123 0.20 0.63 0.05 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 422811 87.94 95.53 85.23 2 DCC_CHECK_NEGATIVE 367449 59.61 19.06 74.07 3 DKIM_SIGNED 248946 59.54 85.79 50.18 4 XM_DK_Pass 243675 58.06 83.14 49.12 5 BAYES_50 242838 44.78 33.06 48.95 6 XM_H_QuotedFrom 230984 49.03 55.94 46.56 7 DKIM_VALID 224187 53.89 78.29 45.19 8 DKIM_VALID_AU 157687 39.37 60.65 31.79 9 XMListUnsubscribeExists 154772 42.30 73.45 31.20 10 T_TM2_M_HEADER_IN_MSG 140948 26.66 21.74 28.41 11 IN_ZIMBRA_NJ_WHITELIST 134906 20.06 0.05 27.20 12 DCC_CHECK 120161 38.55 78.73 24.22 13 HTML_IMAGE_RATIO_04 114595 19.59 9.75 23.10 14 HTML_FONT_FACE_BAD 113238 17.02 0.74 22.83 15 HTML_FONT_LOW_CONTRAST 97858 24.12 36.45 19.73 16 ALL_TRUSTED 93117 14.14 1.16 18.77 17 BAYES_00 87768 13.28 0.92 17.69 18 DKIM_VALID_EF 87753 19.56 24.79 17.69 19 XMSubLong 81568 18.81 25.44 16.44 20 XMStrtUSub 73788 11.99 3.88 14.87 21 MultiRelay 73115 15.00 15.72 14.74 22 FVGT_m_MULTI_ODD 71911 17.57 26.21 14.50 23 MIME_HTML_ONLY 63232 17.17 29.56 12.75 24 LOC_TINY_FONT_1 60636 18.14 34.73 12.22 25 T_KAM_HTML_FONT_INVALID 52890 13.74 22.36 10.66 26 XM_DK_Undo_02 45503 19.48 48.40 9.17 27 XM_Evil_Numbers_Gen 43588 9.93 13.14 8.79 28 BAYES_99 43485 18.09 44.24 8.77 29 DATE_IN_PAST_06_12 40046 6.10 0.57 8.07 30 BAYES_999 38494 15.57 37.48 7.76 31 XM_H_Long_From01 37353 7.56 7.66 7.53 32 XM_Body_Dirty_Words 36184 10.19 18.33 7.29 33 XM_Multi_Part_URI 35510 9.56 16.29 7.16 34 XMSubNoVowel 32820 4.98 0.38 6.62 35 TooManyTo_001 32515 6.62 6.81 6.55 36 LOTS_OF_MONEY 32289 8.31 13.34 6.51 37 XM_DKIMWhitelistDomains 31034 4.64 0.10 6.26 38 FSL_BULK_SIG 30507 7.78 12.36 6.15 39 T_XMDrugObfuBody_14 29749 6.96 9.66 6.00 40 LotsOfNums_01 28710 6.74 9.42 5.79 41 RCVD_IN_RP_SAFE 26592 5.07 4.26 5.36 42 BAYES_05 26091 4.03 0.57 5.26 43 BAYES_40 25495 4.11 1.21 5.14 44 SUBJ_ALL_CAPS 25052 4.30 2.19 5.05 45 DKIM_INVALID 24759 5.65 7.50 4.99 46 DATE_IN_PAST_03_06 24137 3.80 0.82 4.87 47 BAYES_60 24008 5.45 7.15 4.84 48 RCVD_IN_RP_CERTIFIED 23698 4.46 3.57 4.78 49 HTML_IMAGE_RATIO_02 21585 6.96 14.29 4.35 50 BAYES_20 21371 3.40 0.85 4.31 51 HTML_IMAGE_RATIO_06 21032 4.49 5.18 4.24 52 MIME_QP_LONG_LINE 20566 4.32 4.80 4.15 53 RELAYCOUNTRY_META 20532 7.64 17.48 4.14 54 TR_DCC_Bayes_99 20409 12.09 34.46 4.11 55 XM_PDF 20008 3.18 0.77 4.03 56 RCVD_IN_IADB_LISTED 19293 3.45 2.24 3.89 57 XM_SendGrid 17948 3.79 4.26 3.62 58 XM_B_Phish_Phrases 17714 5.40 10.55 3.57 59 TR_XM_DK_Bayes 17405 2.78 0.74 3.51 60 T_TooManySym_01 17350 3.38 3.07 3.50 61 RCVD_IN_IADB_SPF 17107 3.09 2.07 3.45 62 T_REMOTE_IMAGE 16314 3.52 4.17 3.29 63 RCVD_IN_MSPIKE_H2 15780 3.33 3.73 3.18 64 RCVD_IN_IADB_SENDERID 15284 2.79 1.98 3.08 65 BAYES_80 15136 4.17 7.32 3.05 66 TR_XM_DK_Bayes1 15075 2.41 0.66 3.04 67 RCVD_IN_IADB_DK 15030 2.75 1.96 3.03 68 ANY_BOUNCE_MESSAGE 14546 2.66 1.90 2.93 69 BOUNCE_MESSAGE 14545 2.66 1.90 2.93 70 TR_XM_DocInvoice 13732 4.29 8.58 2.77 71 XM_UncommonTLD01 13428 4.02 7.69 2.71 72 XMNumbers 13014 3.19 4.79 2.62 73 XM_E_Blogspot 12689 1.91 0.08 2.56 74 BOTNET_IPINHOSTNAME 12574 5.20 12.68 2.53 75 HELO_NODOT 12294 1.93 0.40 2.48 76 RCVD_IN_IADB_VOUCHED 12068 2.01 0.83 2.43 77 XMSubMetaSx_00 12057 3.48 6.41 2.43 78 TR_XM_DK_Bayes2 11708 1.90 0.62 2.36 79 FROM_EXCESS_BASE64 11647 3.40 6.35 2.35 80 MPART_ALT_DIFF 10555 3.36 6.83 2.13 81 XMSexyCombo_05 10514 3.79 8.46 2.12 82 TooManyTo_002 9742 1.71 1.00 1.96 83 UNPARSEABLE_RELAY 9526 1.89 1.82 1.92 84 BAYES_95 9477 2.63 4.65 1.91 85 MAILING_LIST_MULTI 9226 1.86 1.86 1.86 86 XMSubLongNoVowel 9189 1.38 0.06 1.85 87 XMSubGarbage 8893 1.33 0.02 1.79 88 TVD_RCVD_IP 8682 1.38 0.34 1.75 89 HTML_MIME_NO_HTML_TAG 8549 1.95 2.58 1.72 90 IN_HORDE_ADDRESS_BOOK 8033 1.21 0.06 1.62 91 XM_SPF_SoftFail 7970 2.12 3.57 1.61 92 T_TooManySym_02 7951 1.50 1.23 1.60 93 HTML_IMAGE_RATIO_08 7821 2.06 3.40 1.58 94 RCVD_IN_IADB_OPTIN 7782 1.30 0.55 1.57 95 MIME_HTML_MOSTLY 7656 2.07 3.56 1.54 96 TR_Symld_Words 7484 1.41 1.13 1.51 97 UNTRUSTED_Relay 7378 3.61 9.56 1.49 98 XM_DIRTYINTL 7303 2.02 3.57 1.47 99 XM_DK_Undo_01 7048 1.39 1.30 1.42 100 INVALID_MSGID 6953 1.08 0.17 1.40 101 TM2_M_URI_OPT_OUT 6749 2.16 4.40 1.36 102 TO_MALFORMED 6692 1.00 0.01 1.35 103 MSGID_NOFQDN1 6591 0.99 0.02 1.33 104 XMCapTrack 6387 1.13 0.67 1.29 105 TooManyTo_003 6321 1.17 0.88 1.27 106 T_XMDrugObfuBody_08 6242 1.65 2.75 1.26 107 RCVD_IN_MSPIKE_WL 6240 1.13 0.77 1.26 108 RCVD_IN_MSPIKE_H3 6234 1.13 0.76 1.26 109 XM_OfRef6 6021 1.80 3.45 1.21 110 XM_UB50 5848 2.08 4.61 1.18 111 XMDiploma_00 5830 1.59 2.74 1.18 112 XM_H_PHPOS 5766 1.10 0.93 1.16 113 DKIM_ADSP_NXDOMAIN 5760 1.13 1.03 1.16 114 NO_DNS_FOR_FROM 5667 1.23 1.48 1.14 115 XMNoVowels 5609 1.26 1.61 1.13 116 XM_CamelCaseFrm001 5378 1.65 3.24 1.08 117 RELAYCOUNTRY_CA 5347 1.90 4.21 1.08 118 XMStockSpam_06 5166 1.15 1.46 1.04 119 BOTNET 5100 4.19 13.07 1.03 120 USER_IN_DEF_DKIM_WL 4927 0.76 0.11 0.99 121 XMPhish11 4884 1.38 2.50 0.98 122 MISSING_HEADERS 4870 0.99 1.00 0.98 123 URI_HEX 4737 1.45 2.85 0.95 124 XM_GoogleGroups 4701 0.83 0.50 0.95 125 TooManyTo_004 4692 0.89 0.74 0.95 126 RELAYCOUNTRY_GB 4490 1.12 1.72 0.91 127 T_TooManySym_03 4206 0.68 0.19 0.85 128 MIME_HTML_ONLY_MULTI 4202 1.30 2.59 0.85 129 XMGenDplmaNmb 4055 1.10 1.90 0.82 130 DKIM_ADSP_CUSTOM_MED 4044 0.87 1.01 0.82 131 URI_TRY_3LD 3922 0.91 1.23 0.79 132 TooManyTo_005 3827 0.73 0.61 0.77 133 T_FILL_THIS_FORM_SHORT 3777 0.90 1.29 0.76 134 XM_ProductURIs 3621 0.96 1.61 0.73 135 USER_IN_WHITELIST 3541 0.53 0.00 0.71 136 XM_H_Long_From02 3512 0.94 1.59 0.71 137 XM_H_PHPMailer 3425 0.70 0.74 0.69 138 XMSolicitRefs_0 3019 0.62 0.65 0.61 139 SpammyFromTLD_01 2941 1.07 2.41 0.59 140 TM2_M_VERY_LONG_WORD 2888 0.91 1.83 0.58 141 REPLYTO_WITHOUT_TO_CC 2775 0.64 0.85 0.56 142 NML_ADSP_CUSTOM_MED 2763 0.61 0.75 0.56 143 XMLngstWrd_00 2732 0.57 0.63 0.55 144 T_OBFU_PDF_ATTACH 2709 0.45 0.19 0.55 145 TR_MetaPhish_Combo_01 2689 0.68 1.06 0.54 146 SHORT_HELO_AND_INLINE_IMAGE 2571 0.41 0.09 0.52 147 XMLngstWrd_01 2555 0.54 0.61 0.52 148 RCVD_IN_SORBS_DUL 2486 0.47 0.40 0.50 149 XMBody_29 2484 0.44 0.27 0.50 150 FILL_THIS_FORM 2471 0.60 0.88 0.50 151 RELAYCOUNTRY_DE 2457 0.54 0.67 0.50 152 RELAYCOUNTRY_NG_I 2423 0.38 0.07 0.49 153 RELAYCOUNTRY_AU 2255 0.57 0.90 0.45 154 T_XMDrugObfuBody_00 2180 0.66 1.27 0.44 155 XM_USANA_RCVD 2133 0.32 0.00 0.43 156 AC_DIV_BONANZA 2128 0.35 0.14 0.43 157 XM_ShortIntro_01 2119 0.38 0.27 0.43 158 T_Symld_Words_02 2085 0.51 0.77 0.42 159 XMRcvdHeader_15 2079 0.31 0.00 0.42 160 T_XMHurry_00 2036 0.71 1.53 0.41 161 XMGappySubj_01 2032 0.41 0.41 0.41 162 XMDateMe_00 2011 0.40 0.37 0.41 163 TM2_M_A_HREF_HREF 1992 0.42 0.48 0.40 164 XMSlimDrugH 1946 0.58 1.10 0.39 165 T_FILL_THIS_FORM_LOAN 1935 0.47 0.69 0.39 166 XM_RXBody 1926 0.44 0.60 0.39 167 FORGED_GMAIL_RCVD 1924 0.52 0.88 0.39 168 RCVD_IN_BL_SPAMCOP_NET 1897 1.08 3.02 0.38 169 XMBrknScrpt_02 1889 0.59 1.16 0.38 170 HTML_IMAGE_ONLY_32 1878 0.40 0.47 0.38 171 T_MONEY_PERCENT 1863 0.63 1.34 0.38 172 TR_LOTS_OF_MONEY2 1863 0.63 1.34 0.38 173 XMBdyGiftCard01 1849 0.57 1.11 0.37 174 TR_XM_RelayPhish 1836 0.71 1.68 0.37 175 XMMoneyMeta_00 1832 0.62 1.32 0.37 176 XMSubMetaI_00 1825 0.73 1.74 0.37 177 TM2_M_BODY_EMPTY 1818 0.39 0.47 0.37 178 FILL_THIS_FORM_LONG 1811 0.47 0.78 0.37 179 HTTPS_HTTP_MISMATCH 1751 0.54 1.08 0.35 180 XMSUPPORT 1734 0.26 0.00 0.35 181 XMSubMetaSxObfu_02 1725 0.33 0.29 0.35 182 XM_H_SpoofStaff4 1718 0.26 0.03 0.35 183 XMBody_78 1707 0.52 1.01 0.34 184 T_MANY_PILL_PRICE 1691 0.26 0.03 0.34 185 XMSexyCombo_01 1663 0.60 1.35 0.34 186 XMSubEmpty 1649 0.31 0.24 0.33 187 HTML_IMAGE_ONLY_20 1645 0.35 0.42 0.33 188 XM_B_REG_HTML 1608 0.55 1.19 0.32 189 XMBody_95 1601 0.28 0.15 0.32 190 XM_B_COPY_HTML 1595 0.45 0.80 0.32 191 HTML_IMAGE_ONLY_28 1581 0.40 0.64 0.32 192 PLING_QUERY 1533 0.43 0.78 0.31 193 HTML_IMAGE_ONLY_24 1529 0.36 0.49 0.31 194 HTML_TAG_BALANCE_BODY 1508 0.45 0.87 0.30 195 XMHTMLBadTable_001 1490 0.41 0.70 0.30 196 MPART_ALT_DIFF_COUNT 1481 0.48 0.97 0.30 197 XMBody_17 1432 0.66 1.70 0.29 198 TVD_SPACE_RATIO 1404 0.28 0.27 0.28 199 XMHTML_After_End 1384 0.76 2.12 0.28 200 MY_SERVERS_FOUND 1383 0.28 0.27 0.28 ----------------------------------------------------------------------