Email: 626857 Autolearn: 0 AvgScore: 1.14 AvgScanTime: 1.89 sec Spam: 106354 Autolearn: 0 AvgScore: 12.02 AvgScanTime: 3.40 sec Ham: 520503 Autolearn: 0 AvgScore: -1.08 AvgScanTime: 1.58 sec Time Spent Running SA: 328.96 hours Time Spent Processing Spam: 100.42 hours Time Spent Processing Ham: 228.54 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 99888 89.86 93.92 89.03 2 DKIM_SIGNED 87405 72.56 82.18 70.59 3 XM_DK_Pass 84620 71.12 79.56 69.39 4 DCC_CHECK 80523 44.61 75.71 38.26 5 RELAYCOUNTRY_US 80030 77.09 75.25 77.47 6 XM_B_Unicode 79565 72.47 74.81 71.99 7 XMListUnsubscribeExists 72842 50.86 68.49 47.25 8 DKIM_VALID 71923 65.91 67.63 65.56 9 DKIM_VALID_AU 53591 49.29 50.39 49.06 10 XM_B_Unicode3 50152 45.85 47.16 45.58 11 BAYES_50 47993 52.34 45.13 53.81 12 XM_DK_Undo_02 43891 13.28 41.27 7.56 13 LOC_TINY_FONT_1 39098 30.31 36.76 29.00 14 MIME_HTML_ONLY 37553 23.90 35.31 21.57 15 HTML_FONT_LOW_CONTRAST 33349 26.92 31.36 26.01 16 DKIM_VALID_EF 29278 25.17 27.53 24.69 17 BAYES_99 28361 7.94 26.67 4.12 18 FVGT_m_MULTI_ODD 28212 21.65 26.53 20.65 19 XMSubLong 28122 20.89 26.44 19.75 20 BOTNET 25431 6.20 23.91 2.58 21 T_KAM_HTML_FONT_INVALID 25187 17.79 23.68 16.58 22 RELAYCOUNTRY_META 25063 8.31 23.57 5.19 23 XM_Body_Dirty_Words 23971 14.36 22.54 12.69 24 DCC_CHECK_NEGATIVE 23869 53.41 22.44 59.74 25 T_TM2_M_HEADER_IN_MSG 22356 25.97 21.02 26.99 26 BAYES_999 21727 6.20 20.43 3.30 27 TR_DCC_Bayes_99 21348 5.02 20.07 1.95 28 XM_Multi_Part_URI 20405 17.93 19.19 17.68 29 XM_UncommonTLD01 17295 5.35 16.26 3.12 30 UNTRUSTED_Relay 17216 4.02 16.19 1.53 31 BOTNET_IPINHOSTNAME 16348 5.97 15.37 4.05 32 DKIM_INVALID 15482 6.65 14.56 5.04 33 HTML_IMAGE_RATIO_02 15394 9.10 14.47 8.00 34 LOTS_OF_MONEY 15378 10.53 14.46 9.73 35 XM_B_Unsub 13789 10.81 12.97 10.38 36 FSL_BULK_SIG 13743 8.49 12.92 7.58 37 XMSexyCombo_05 12056 5.53 11.34 4.35 38 XM_Evil_Numbers_Gen 11586 8.87 10.89 8.45 39 NO_DNS_FOR_FROM 11494 4.23 10.81 2.89 40 XM_B_Phish_Phrases 10808 7.43 10.16 6.87 41 LotsOfNums_01 10132 7.68 9.53 7.30 42 XM_UB50 10083 2.31 9.48 0.85 43 XMSubMetaSx_00 9906 4.63 9.31 3.67 44 SpammyFromTLD_02 8069 1.74 7.59 0.54 45 XMNumbers 8027 9.30 7.55 9.65 46 MPART_ALT_DIFF 7712 6.00 7.25 5.75 47 BAYES_80 7615 3.50 7.16 2.75 48 XM_H_Long_From01 7387 6.26 6.95 6.12 49 BAYES_60 7094 5.06 6.67 4.73 50 TooManyTo_001 7046 7.54 6.63 7.73 51 HTML_IMAGE_RATIO_04 6956 5.81 6.54 5.67 52 MIME_QP_LONG_LINE 6161 5.12 5.79 4.98 53 RCVD_IN_MSPIKE_BL 5971 1.95 5.61 1.20 54 RCVD_IN_MSPIKE_L3 5602 1.64 5.27 0.89 55 RELAYCOUNTRY_CA 5397 2.14 5.07 1.54 56 XM_B_SpammyTLD 5369 2.39 5.05 1.85 57 T_REMOTE_IMAGE 5357 4.04 5.04 3.84 58 XM_CamelCaseFrm001 5132 2.74 4.83 2.32 59 MIME_HTML_MOSTLY 5068 2.86 4.77 2.47 60 RCVD_IN_BL_SPAMCOP_NET 5067 1.74 4.76 1.12 61 XM_SPF_SoftFail 4999 2.20 4.70 1.68 62 PDS_OTHER_BAD_TLD 4665 1.11 4.39 0.44 63 RELAYCOUNTRY_FR 4419 0.93 4.15 0.27 64 TR_Symld_Words 4368 7.09 4.11 7.70 65 RCVD_IN_MSPIKE_H2 4320 8.74 4.06 9.70 66 TM2_M_URI_OPT_OUT 4174 2.79 3.92 2.56 67 XM_URI_RBL 4118 0.82 3.87 0.20 68 XM_DIRTYINTL 4092 1.09 3.85 0.52 69 RCVD_IN_RP_RNBL 4033 0.81 3.79 0.20 70 HTML_IMAGE_RATIO_06 3926 3.60 3.69 3.58 71 XMStrtUSub 3827 3.82 3.60 3.86 72 BAYES_40 3823 5.65 3.59 6.07 73 BAYES_95 3723 1.99 3.50 1.69 74 XMSexyCombo_01 3710 1.29 3.49 0.84 75 T_XMDrugObfuBody_08 3705 1.84 3.48 1.51 76 XM_SendGrid 3673 6.01 3.45 6.53 77 FROM_EXCESS_BASE64 3664 3.17 3.45 3.11 78 MIME_HTML_ONLY_MULTI 3654 3.73 3.44 3.79 79 FROM_SUSPICIOUS_NTLD 3427 0.57 3.22 0.03 80 T_TooManySym_01 3423 4.17 3.22 4.36 81 RCVD_IN_MSPIKE_H3 3417 8.24 3.21 9.27 82 RCVD_IN_MSPIKE_WL 3417 8.24 3.21 9.27 83 XM_OfRef6 3394 1.92 3.19 1.66 84 FROM_SUSPICIOUS_NTLD_FP 3391 0.56 3.19 0.03 85 BAYES_20 3252 4.05 3.06 4.26 86 TR_XM_INV_DKIM 3233 0.65 3.04 0.16 87 URIBL_SBL_A 3232 0.70 3.04 0.22 88 REPLYTO_WITHOUT_TO_CC 3168 0.60 2.98 0.11 89 ALL_TRUSTED 3128 16.45 2.94 19.21 90 HTML_IMAGE_ONLY_12 3125 0.66 2.94 0.19 91 UNICODE_OBFU_ASC 3059 5.48 2.88 6.01 92 KHOP_HELO_FCRDNS 3035 2.07 2.85 1.91 93 LongTLD 3006 0.62 2.83 0.17 94 SpammyFromTLD_01 3000 1.02 2.82 0.65 95 XMDiploma_00 2959 1.77 2.78 1.57 96 HTML_SHORT_LINK_IMG_1 2945 0.48 2.77 0.01 97 MIME_HEADER_CTYPE_ONLY 2864 0.70 2.69 0.30 98 RCVD_IN_RP_SAFE 2833 7.18 2.66 8.11 99 HTML_IMAGE_RATIO_08 2797 2.63 2.63 2.63 100 XM_B_Unsub2 2796 1.81 2.63 1.64 101 XMNoVowels 2780 2.30 2.61 2.23 102 HDRS_LCASE_IMGONLY 2765 0.45 2.60 0.01 103 RELAYCOUNTRY_IN 2525 0.50 2.37 0.12 104 RCVD_IN_IADB_LISTED 2498 4.20 2.35 4.58 105 DIET_1 2473 1.02 2.33 0.75 106 TR_XM_PHPForged 2424 0.73 2.28 0.42 107 ANY_BOUNCE_MESSAGE 2421 2.49 2.28 2.54 108 TR_XM_PHPDW 2418 0.74 2.27 0.43 109 BOUNCE_MESSAGE 2412 2.49 2.27 2.54 110 TR_XM_FormFill2 2372 0.72 2.23 0.41 111 XM_H_PHPOS 2364 0.71 2.22 0.41 112 SUBJ_ALL_CAPS 2363 1.97 2.22 1.92 113 T_XMDrugObfuBody_14 2343 1.92 2.20 1.86 114 RCVD_IN_IADB_SPF 2339 3.66 2.20 3.96 115 BAYES_00 2338 16.67 2.20 19.63 116 HTML_MIME_NO_HTML_TAG 2319 2.25 2.18 2.27 117 URI_HEX 2313 1.45 2.17 1.30 118 RCVD_IN_PSBL 2298 0.40 2.16 0.04 119 XMBody_17 2293 0.82 2.16 0.55 120 RCVD_IN_IADB_SENDERID 2286 3.21 2.15 3.43 121 RCVD_IN_IADB_DK 2276 3.18 2.14 3.39 122 DATE_IN_PAST_06_12 2230 0.40 2.10 0.05 123 TM2_M_VERY_LONG_WORD 2209 1.44 2.08 1.31 124 RCVD_IN_RP_CERTIFIED 2145 6.51 2.02 7.42 125 TR_XM_MaxBayes 2141 0.35 2.01 0.01 126 T_XMDrugObfuBody_00 2078 0.95 1.95 0.75 127 XM_UB99 2030 0.33 1.91 0.01 128 BOTNET_NORDNS 2021 0.37 1.90 0.05 129 TR_Mismatch_TLD_01 1997 0.48 1.88 0.20 130 XMGenDplmaNmb 1972 1.18 1.85 1.05 131 TO_EQ_FM_DOM_HTML_IMG 1971 0.32 1.85 0.01 132 SUBJ_DOLLARS 1947 0.70 1.83 0.47 133 URI_OPTOUT_3LD 1901 0.35 1.79 0.05 134 BAYES_05 1900 2.65 1.79 2.82 135 TR_Mismatch_TLD_02 1885 0.36 1.77 0.07 136 RELAYCOUNTRY_DE 1873 0.64 1.76 0.41 137 TR_XM_DK_Bayes 1810 11.23 1.70 13.18 138 XMStockSpam_06 1808 1.17 1.70 1.06 139 XMSubMetaI_00 1765 0.85 1.66 0.68 140 DKIM_ADSP_CUSTOM_MED 1733 1.29 1.63 1.22 141 T_Symld_Words_02 1732 0.91 1.63 0.76 142 REMOVE_BEFORE_LINK 1729 0.59 1.63 0.37 143 XM_H_PHPMailer 1729 0.69 1.63 0.49 144 XM_UB60 1687 0.32 1.59 0.06 145 LOADSA_MONEY_COMBO 1629 0.29 1.53 0.04 146 XM_UB999 1621 0.26 1.52 0.01 147 BODY_URI_ONLY 1613 0.28 1.52 0.03 148 FORGED_GMAIL_RCVD 1584 0.67 1.49 0.50 149 THIS_AD 1577 0.49 1.48 0.29 150 T_XMHurry_00 1571 0.72 1.48 0.57 151 XMSexyCombo_04 1566 0.62 1.47 0.45 152 UNPARSEABLE_RELAY 1533 1.88 1.44 1.97 153 XMMoneyMeta_00 1517 0.61 1.43 0.45 154 XMBdyGiftCard01 1509 1.09 1.42 1.02 155 XMHTML_After_End 1494 0.88 1.40 0.77 156 XM_ProductURIs 1490 0.99 1.40 0.91 157 NML_ADSP_CUSTOM_MED 1483 1.01 1.39 0.93 158 XM_H_PHPOS_M 1480 0.33 1.39 0.11 159 URI_TRY_3LD 1426 1.20 1.34 1.18 160 FILL_THIS_FORM_SHORT 1386 1.08 1.30 1.04 161 TR_XM_RelayPhish 1362 0.40 1.28 0.22 162 TR_XM_DK_SendGrid 1327 3.22 1.25 3.62 163 RELAYCOUNTRY_GB 1321 0.97 1.24 0.92 164 DATE_IN_PAST_03_06 1288 0.27 1.21 0.08 165 MAILING_LIST_MULTI 1281 2.01 1.20 2.17 166 RDNS_DYNAMIC 1275 0.45 1.20 0.29 167 XMBrknScrpt_02 1273 0.56 1.20 0.43 168 FROM_MISSP_REPLYTO 1267 0.22 1.19 0.02 169 XMPhish08 1251 0.52 1.18 0.38 170 XMPhish30 1240 0.53 1.17 0.41 171 XM_H_MailChimp 1222 0.30 1.15 0.13 172 XM_DK_Undo_01 1180 1.45 1.11 1.51 173 XM_H_Long_From02 1161 1.05 1.09 1.04 174 T_MONEY_PERCENT 1150 0.49 1.08 0.37 175 TR_LOTS_OF_MONEY2 1150 0.49 1.08 0.37 176 UPPERCASE_75_100 1115 5.21 1.05 6.06 177 TR_XM_DK_Bayes1 1113 10.44 1.05 12.36 178 XM_BadFromFormat 1112 0.28 1.05 0.12 179 TR_XM_MaxSPIKE 1048 0.21 0.99 0.06 180 XMSubMetaSxObfu_03 1046 0.61 0.98 0.53 181 XMSubMetaSSx_00 1033 0.31 0.97 0.17 182 TR_MetaPhish_Combo_01 1025 0.84 0.96 0.82 183 HTML_FONT_FACE_BAD 1012 1.29 0.95 1.36 184 DKIM_ADSP_NXDOMAIN 1000 0.41 0.94 0.30 185 HK_RANDOM_REPLYTO 993 0.28 0.93 0.15 186 URIBL_DBL_SPAM 986 0.17 0.93 0.01 187 XMBSHREFv2 983 0.37 0.92 0.26 188 XM_UB80 971 0.17 0.91 0.02 189 TR_XM_DK_Bayes2 970 9.15 0.91 10.84 190 TM2_M_A_HREF_HREF 967 0.61 0.91 0.54 191 RELAYCOUNTRY_UA 878 0.14 0.83 0.00 192 URIBL_BLACK 863 0.15 0.81 0.01 193 RELAYCOUNTRY_AT 863 0.28 0.81 0.17 194 XMSubMetaSxObfu_04 862 0.21 0.81 0.08 195 XMLngstWrd_00 861 0.51 0.81 0.44 196 XMBody_78 849 0.41 0.80 0.34 197 XMLngstWrd_01 835 0.48 0.79 0.41 198 HTML_TAG_BALANCE_BODY 822 0.53 0.77 0.48 199 XM_SPF_Unknown 815 0.66 0.77 0.63 200 XMSubMetaI_01 807 0.15 0.76 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 463397 89.86 93.92 89.03 2 RELAYCOUNTRY_US 403235 77.09 75.25 77.47 3 XM_B_Unicode 374720 72.47 74.81 71.99 4 DKIM_SIGNED 367440 72.56 82.18 70.59 5 XM_DK_Pass 361199 71.12 79.56 69.39 6 DKIM_VALID 341216 65.91 67.63 65.56 7 DCC_CHECK_NEGATIVE 310938 53.41 22.44 59.74 8 BAYES_50 280107 52.34 45.13 53.81 9 DKIM_VALID_AU 255357 49.29 50.39 49.06 10 XMListUnsubscribeExists 245956 50.86 68.49 47.25 11 XM_B_Unicode3 237268 45.85 47.16 45.58 12 DCC_CHECK 199134 44.61 75.71 38.26 13 LOC_TINY_FONT_1 150926 30.31 36.76 29.00 14 T_TM2_M_HEADER_IN_MSG 140467 25.97 21.02 26.99 15 HTML_FONT_LOW_CONTRAST 135380 26.92 31.36 26.01 16 DKIM_VALID_EF 128519 25.17 27.53 24.69 17 MIME_HTML_ONLY 112252 23.90 35.31 21.57 18 FVGT_m_MULTI_ODD 107480 21.65 26.53 20.65 19 XMSubLong 102805 20.89 26.44 19.75 20 BAYES_00 102159 16.67 2.20 19.63 21 ALL_TRUSTED 99981 16.45 2.94 19.21 22 XM_Multi_Part_URI 92002 17.93 19.19 17.68 23 T_KAM_HTML_FONT_INVALID 86302 17.79 23.68 16.58 24 TR_XM_DK_Bayes 68602 11.23 1.70 13.18 25 XM_Body_Dirty_Words 66043 14.36 22.54 12.69 26 TR_XM_DK_Bayes1 64322 10.44 1.05 12.36 27 TR_XM_DK_Bayes2 56402 9.15 0.91 10.84 28 XM_B_Unsub 54004 10.81 12.97 10.38 29 LOTS_OF_MONEY 50652 10.53 14.46 9.73 30 RCVD_IN_MSPIKE_H2 50473 8.74 4.06 9.70 31 XMNumbers 50240 9.30 7.55 9.65 32 RCVD_IN_MSPIKE_H3 48227 8.24 3.21 9.27 33 RCVD_IN_MSPIKE_WL 48227 8.24 3.21 9.27 34 XM_Evil_Numbers_Gen 43991 8.87 10.89 8.45 35 RCVD_IN_RP_SAFE 42200 7.18 2.66 8.11 36 HTML_IMAGE_RATIO_02 41642 9.10 14.47 8.00 37 TooManyTo_001 40225 7.54 6.63 7.73 38 TR_Symld_Words 40103 7.09 4.11 7.70 39 FSL_BULK_SIG 39479 8.49 12.92 7.58 40 XM_DK_Undo_02 39327 13.28 41.27 7.56 41 XM_DKIMWhitelistDomains 38680 6.18 0.08 7.43 42 RCVD_IN_RP_CERTIFIED 38645 6.51 2.02 7.42 43 LotsOfNums_01 38000 7.68 9.53 7.30 44 XM_B_Phish_Phrases 35782 7.43 10.16 6.87 45 XM_SendGrid 33988 6.01 3.45 6.53 46 XM_H_Long_From01 31867 6.26 6.95 6.12 47 BAYES_40 31601 5.65 3.59 6.07 48 UPPERCASE_75_100 31539 5.21 1.05 6.06 49 UNICODE_OBFU_ASC 31308 5.48 2.88 6.01 50 MPART_ALT_DIFF 29923 6.00 7.25 5.75 51 HTML_IMAGE_RATIO_04 29487 5.81 6.54 5.67 52 RELAYCOUNTRY_META 27027 8.31 23.57 5.19 53 DKIM_INVALID 26224 6.65 14.56 5.04 54 MIME_QP_LONG_LINE 25930 5.12 5.79 4.98 55 BAYES_60 24638 5.06 6.67 4.73 56 RCVD_IN_IADB_LISTED 23846 4.20 2.35 4.58 57 XM_PDF 23283 3.83 0.67 4.47 58 T_TooManySym_01 22704 4.17 3.22 4.36 59 XMSexyCombo_05 22622 5.53 11.34 4.35 60 BAYES_20 22167 4.05 3.06 4.26 61 BAYES_99 21438 7.94 26.67 4.12 62 BOTNET_IPINHOSTNAME 21086 5.97 15.37 4.05 63 RCVD_IN_IADB_SPF 20602 3.66 2.20 3.96 64 XMStrtUSub 20093 3.82 3.60 3.86 65 T_REMOTE_IMAGE 19967 4.04 5.04 3.84 66 MIME_HTML_ONLY_MULTI 19704 3.73 3.44 3.79 67 XMSubMetaSx_00 19091 4.63 9.31 3.67 68 TR_XM_DK_SendGrid 18862 3.22 1.25 3.62 69 HTML_IMAGE_RATIO_06 18643 3.60 3.69 3.58 70 RCVD_IN_IADB_SENDERID 17838 3.21 2.15 3.43 71 RCVD_IN_IADB_DK 17660 3.18 2.14 3.39 72 IN_ZIMBRA_NJ_WHITELIST 17333 2.77 0.01 3.33 73 BAYES_999 17163 6.20 20.43 3.30 74 XM_H_Trusted_IP 16353 2.61 0.00 3.14 75 XM_UncommonTLD01 16263 5.35 16.26 3.12 76 FROM_EXCESS_BASE64 16207 3.17 3.45 3.11 77 RCVD_IN_IADB_VOUCHED 15518 2.57 0.58 2.98 78 NO_DNS_FOR_FROM 15053 4.23 10.81 2.89 79 BAYES_05 14691 2.65 1.79 2.82 80 BAYES_80 14312 3.50 7.16 2.75 81 HTML_IMAGE_RATIO_08 13700 2.63 2.63 2.63 82 BOTNET 13408 6.20 23.91 2.58 83 TM2_M_URI_OPT_OUT 13337 2.79 3.92 2.56 84 ANY_BOUNCE_MESSAGE 13211 2.49 2.28 2.54 85 BOUNCE_MESSAGE 13195 2.49 2.27 2.54 86 MIME_HTML_MOSTLY 12848 2.86 4.77 2.47 87 XM_CamelCaseFrm001 12063 2.74 4.83 2.32 88 HTML_MIME_NO_HTML_TAG 11797 2.25 2.18 2.27 89 XMNoVowels 11608 2.30 2.61 2.23 90 MAILING_LIST_MULTI 11303 2.01 1.20 2.17 91 T_TooManySym_02 10734 1.83 0.67 2.06 92 UNPARSEABLE_RELAY 10238 1.88 1.44 1.97 93 TooManyTo_002 10157 1.72 0.59 1.95 94 TR_DCC_Bayes_99 10130 5.02 20.07 1.95 95 SUBJ_ALL_CAPS 9979 1.97 2.22 1.92 96 KHOP_HELO_FCRDNS 9926 2.07 2.85 1.91 97 RCVD_IN_IADB_OPTIN 9828 1.64 0.44 1.89 98 T_XMDrugObfuBody_14 9666 1.92 2.20 1.86 99 XM_B_SpammyTLD 9629 2.39 5.05 1.85 100 BAYES_95 8771 1.99 3.50 1.69 101 XM_SPF_SoftFail 8762 2.20 4.70 1.68 102 TVD_RCVD_IP 8673 1.48 0.57 1.67 103 XM_OfRef6 8664 1.92 3.19 1.66 104 XM_B_Unsub2 8556 1.81 2.63 1.64 105 XMDiploma_00 8150 1.77 2.78 1.57 106 INVALID_MSGID 8075 1.33 0.24 1.55 107 RELAYCOUNTRY_CA 7990 2.14 5.07 1.54 108 UNTRUSTED_Relay 7977 4.02 16.19 1.53 109 XM_DK_Undo_01 7883 1.45 1.11 1.51 110 T_XMDrugObfuBody_08 7840 1.84 3.48 1.51 111 HELO_NODOT 7591 1.31 0.61 1.46 112 HELO_NO_DOMAIN 7563 1.31 0.60 1.45 113 IN_HORDE_ADDRESS_BOOK 7233 1.16 0.02 1.39 114 TO_MALFORMED 7113 1.14 0.02 1.37 115 HTML_FONT_FACE_BAD 7078 1.29 0.95 1.36 116 TM2_M_VERY_LONG_WORD 6806 1.44 2.08 1.31 117 URI_HEX 6775 1.45 2.17 1.30 118 TooManyTo_003 6665 1.14 0.46 1.28 119 CK_HELO_DYNAMIC_SPLIT_IP 6521 1.07 0.19 1.25 120 HELO_DYNAMIC_IPADDR2 6508 1.05 0.06 1.25 121 DKIM_ADSP_CUSTOM_MED 6325 1.29 1.63 1.22 122 RCVD_IN_MSPIKE_BL 6232 1.95 5.61 1.20 123 URI_TRY_3LD 6117 1.20 1.34 1.18 124 XM_GoogleGroups 6019 1.01 0.32 1.16 125 RCVD_IN_BL_SPAMCOP_NET 5837 1.74 4.76 1.12 126 XMCapTrack 5779 1.00 0.47 1.11 127 XMSubNoVowel 5521 0.97 0.51 1.06 128 XMStockSpam_06 5508 1.17 1.70 1.06 129 XMGenDplmaNmb 5446 1.18 1.85 1.05 130 XM_H_Long_From02 5426 1.05 1.09 1.04 131 FILL_THIS_FORM_SHORT 5405 1.08 1.30 1.04 132 XMBdyGiftCard01 5324 1.09 1.42 1.02 133 XMGappySubj_01 5037 0.83 0.17 0.97 134 USER_IN_DEF_DKIM_WL 4984 0.80 0.01 0.96 135 TooManyTo_004 4946 0.85 0.37 0.95 136 NML_ADSP_CUSTOM_MED 4866 1.01 1.39 0.93 137 RELAYCOUNTRY_GB 4772 0.97 1.24 0.92 138 XM_ProductURIs 4744 0.99 1.40 0.91 139 RCVD_IN_MSPIKE_L3 4653 1.64 5.27 0.89 140 XM_UB50 4421 2.31 9.48 0.85 141 XMSexyCombo_01 4382 1.29 3.49 0.84 142 TR_MetaPhish_Combo_01 4253 0.84 0.96 0.82 143 TR_MSPIKEBAYES00 4194 0.67 0.01 0.81 144 TooManyTo_005 4123 0.71 0.31 0.79 145 XMHTML_After_End 3994 0.88 1.40 0.77 146 T_Symld_Words_02 3954 0.91 1.63 0.76 147 DIET_1 3895 1.02 2.33 0.75 148 T_XMDrugObfuBody_00 3880 0.95 1.95 0.75 149 HTTPS_HTTP_MISMATCH 3724 0.70 0.62 0.72 150 XMBody_95 3555 0.59 0.12 0.68 151 XMSubMetaI_00 3535 0.85 1.66 0.68 152 SpammyFromTLD_01 3383 1.02 2.82 0.65 153 XMSolicitRefs_0 3364 0.62 0.51 0.65 154 T_OBFU_PDF_ATTACH 3332 0.56 0.18 0.64 155 XM_SPF_Unknown 3298 0.66 0.77 0.63 156 FILL_THIS_FORM 3245 0.57 0.31 0.62 157 URIBL_DBL_ABUSE_REDIR 3242 0.64 0.71 0.62 158 MSGID_FROM_MTA_HEADER 3168 0.61 0.60 0.61 159 HTML_IMAGE_ONLY_20 3079 0.55 0.38 0.59 160 T_XMHurry_00 2954 0.72 1.48 0.57 161 MISSING_HEADERS 2902 0.56 0.59 0.56 162 FROM_GOV_DKIM_AU 2877 0.53 0.40 0.55 163 XMBody_17 2868 0.82 2.16 0.55 164 TM2_M_A_HREF_HREF 2832 0.61 0.91 0.54 165 SpammyFromTLD_02 2816 1.74 7.59 0.54 166 XMSubMetaSxObfu_03 2761 0.61 0.98 0.53 167 FROM_GOV_SPOOF 2750 0.47 0.21 0.53 168 XM_DIRTYINTL 2720 1.09 3.85 0.52 169 XM_ShortIntro_01 2681 0.49 0.37 0.52 170 TONOM_EQ_TOLOC_SHRT_SHRTNER 2674 0.50 0.42 0.51 171 XM_B_REG_HTML 2600 0.52 0.63 0.50 172 FORGED_GMAIL_RCVD 2588 0.67 1.49 0.50 173 XMSlimDrugH 2569 0.53 0.71 0.49 174 XM_H_PHPMailer 2565 0.69 1.63 0.49 175 XMHTMLBadTable_001 2525 0.53 0.76 0.49 176 HTML_TAG_BALANCE_BODY 2493 0.53 0.77 0.48 177 XMPhish14 2462 0.52 0.76 0.47 178 FILL_THIS_FORM_LONG 2427 0.42 0.19 0.47 179 SUBJ_DOLLARS 2425 0.70 1.83 0.47 180 XMMoneyMeta_00 2334 0.61 1.43 0.45 181 XMSexyCombo_04 2319 0.62 1.47 0.45 182 XMLngstWrd_00 2315 0.51 0.81 0.44 183 PDS_OTHER_BAD_TLD 2308 1.11 4.39 0.44 184 T_TooManySym_03 2299 0.41 0.23 0.44 185 FSL_THIS_IS_ADV 2279 0.43 0.41 0.44 186 RELAYCOUNTRY_AU 2256 0.45 0.54 0.43 187 TM2_M_BODY_EMPTY 2251 0.38 0.11 0.43 188 XMBrknScrpt_02 2233 0.56 1.20 0.43 189 TR_XM_PHPDW 2227 0.74 2.27 0.43 190 XM_D_tchamptons_WL 2213 0.35 0.00 0.43 191 T_FILL_THIS_FORM_LOAN 2212 0.38 0.13 0.42 192 XMGppyBdWords 2198 0.47 0.68 0.42 193 XM_B_COPY_HTML 2195 0.47 0.72 0.42 194 USER_IN_WHITELIST 2178 0.35 0.00 0.42 195 TR_XM_PHPForged 2174 0.73 2.28 0.42 196 XMLngstWrd_01 2160 0.48 0.79 0.41 197 RELAYCOUNTRY_DE 2150 0.64 1.76 0.41 198 XM_RXBody 2149 0.46 0.67 0.41 199 HTML_IMAGE_ONLY_28 2126 0.41 0.42 0.41 200 TR_XM_FormFill2 2124 0.72 2.23 0.41 ----------------------------------------------------------------------