Email: 335775 Autolearn: 0 AvgScore: 2.57 AvgScanTime: 2.10 sec Spam: 92895 Autolearn: 0 AvgScore: 12.59 AvgScanTime: 2.42 sec Ham: 242880 Autolearn: 0 AvgScore: -1.27 AvgScanTime: 1.97 sec Time Spent Running SA: 195.71 hours Time Spent Processing Spam: 62.47 hours Time Spent Processing Ham: 133.24 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 84581 87.51 91.05 86.16 2 DCC_CHECK 71008 57.76 76.44 50.61 3 DKIM_SIGNED 70635 79.79 76.04 81.23 4 XM_DK_Pass 69092 78.68 74.38 80.32 5 DKIM_VALID 65561 75.29 70.58 77.09 6 XMListUnsubscribeExists 64773 60.76 69.73 57.33 7 DKIM_VALID_AU 55095 62.24 59.31 63.36 8 XM_H_QuotedFrom 46610 42.30 50.17 39.29 9 XM_DK_Undo_02 42216 27.57 45.44 20.73 10 BAYES_99 38373 25.12 41.31 18.92 11 HTML_FONT_LOW_CONTRAST 34149 35.34 36.76 34.79 12 BAYES_50 32640 44.20 35.14 47.67 13 BAYES_999 32612 22.18 35.11 17.23 14 LOC_TINY_FONT_1 31071 31.71 33.45 31.04 15 MIME_HTML_ONLY 30335 26.32 32.66 23.90 16 TR_DCC_Bayes_99 29794 16.35 32.07 10.33 17 RELAYCOUNTRY_META 23874 10.07 25.70 4.10 18 XM_Body_Dirty_Words 22764 18.69 24.51 16.46 19 FVGT_m_MULTI_ODD 22630 22.29 24.36 21.50 20 DCC_CHECK_NEGATIVE 20340 41.00 21.90 48.31 21 T_KAM_HTML_FONT_INVALID 18116 15.72 19.50 14.27 22 MultiRelay 17798 16.19 19.16 15.06 23 BOTNET 17642 6.80 18.99 2.14 24 XMSubLong 17425 23.47 18.76 25.27 25 BOTNET_IPINHOSTNAME 15972 10.34 17.19 7.72 26 DKIM_VALID_EF 15823 26.46 17.03 30.06 27 HTML_IMAGE_RATIO_02 15407 13.04 16.59 11.69 28 T_TM2_M_HEADER_IN_MSG 15301 20.35 16.47 21.83 29 FSL_BULK_SIG 14659 11.14 15.78 9.36 30 XM_Multi_Part_URI 13427 14.00 14.45 13.82 31 UNTRUSTED_Relay 12660 4.75 13.63 1.36 32 XMSexyCombo_05 11767 8.25 12.67 6.56 33 XM_UncommonTLD01 10877 6.36 11.71 4.32 34 XM_Evil_Numbers_Gen 9409 11.19 10.13 11.59 35 LOTS_OF_MONEY 9000 9.41 9.69 9.31 36 TooManyTo_001 8421 6.84 9.07 6.00 37 XM_H_Long_From01 7859 6.81 8.46 6.18 38 HTML_IMAGE_RATIO_04 7502 9.07 8.08 9.45 39 DKIM_ADSP_NXDOMAIN 7118 2.82 7.66 0.96 40 XMSubMetaSx_00 7092 6.14 7.63 5.56 41 XM_DIRTYINTL 6681 4.08 7.19 2.89 42 XM_B_Phish_Phrases 6573 8.19 7.08 8.62 43 T_XMDrugObfuBody_14 6470 7.63 6.96 7.88 44 MPART_ALT_DIFF 6428 4.57 6.92 3.68 45 XM_UB50 6350 2.46 6.84 0.79 46 BAYES_80 6315 4.91 6.80 4.19 47 RCVD_IN_RP_RNBL 6016 1.81 6.48 0.02 48 LotsOfNums_01 5810 7.50 6.25 7.98 49 BAYES_60 5781 6.70 6.22 6.88 50 FROM_EXCESS_BASE64 5305 6.13 5.71 6.28 51 RCVD_IN_RP_SAFE 5242 13.15 5.64 16.01 52 DKIM_INVALID 5074 4.51 5.46 4.14 53 SpammyFromTLD_02 4916 1.61 5.29 0.20 54 MIME_HTML_MOSTLY 4834 3.79 5.20 3.25 55 XMBdyGiftCard01 4737 3.06 5.10 2.28 56 RELAYCOUNTRY_DE 4731 1.67 5.09 0.36 57 RELAYCOUNTRY_CA 4273 2.25 4.60 1.35 58 RCVD_IN_RP_CERTIFIED 4212 11.95 4.53 14.79 59 NUMERIC_HTTP_ADDR 4208 1.53 4.53 0.38 60 MultiRelay_CC 4164 1.35 4.48 0.15 61 MultiRelay_Combo 4164 1.35 4.48 0.15 62 RELAYCOUNTRY_JP 4112 1.24 4.43 0.02 63 HTML_MIME_NO_HTML_TAG 4076 2.70 4.39 2.06 64 HTML_IMAGE_RATIO_06 4070 3.42 4.38 3.06 65 MIME_HEADER_CTYPE_ONLY 4045 1.30 4.35 0.14 66 NORMAL_HTTP_TO_IP 4020 1.25 4.33 0.07 67 BAYES_95 3941 3.10 4.24 2.66 68 XM_OfRef6 3940 2.15 4.24 1.35 69 BAD_ENC_HEADER 3921 1.18 4.22 0.02 70 XM_CamelCaseFrm001 3907 2.45 4.21 1.77 71 XMStrtUSub 3617 5.29 3.89 5.82 72 RELAYCOUNTRY_FR 3472 1.15 3.74 0.17 73 XM_SPF_SoftFail 3245 1.74 3.49 1.07 74 NO_DNS_FOR_FROM 3205 1.92 3.45 1.33 75 URI_HEX 3006 2.35 3.24 2.01 76 MIME_HTML_ONLY_MULTI 2918 2.12 3.14 1.73 77 TR_Mismatch_TLD_02 2833 0.95 3.05 0.15 78 XMMoneyMeta_00 2816 1.04 3.03 0.28 79 BODY_URI_ONLY 2687 0.83 2.89 0.04 80 RCVD_IN_BL_SPAMCOP_NET 2652 1.08 2.85 0.40 81 XM_SendGrid 2588 5.97 2.79 7.19 82 MIME_QP_LONG_LINE 2575 3.75 2.77 4.12 83 T_TooManySym_01 2513 6.67 2.71 8.19 84 PDS_TO_EQ_FROM_NAME 2493 0.77 2.68 0.04 85 URIBL_DBL_ABUSE_REDIR 2487 0.77 2.68 0.04 86 XM_URI_RBL 2475 1.21 2.66 0.65 87 FILL_THIS_FORM 2462 1.36 2.65 0.86 88 TR_XM_PHPDW 2454 1.18 2.64 0.62 89 TM2_M_URI_OPT_OUT 2452 2.05 2.64 1.82 90 TR_XM_PHPForged 2442 1.18 2.63 0.62 91 SUBJ_ALL_CAPS 2434 1.80 2.62 1.49 92 FILL_THIS_FORM_LONG 2420 1.30 2.61 0.80 93 TR_XM_FormFill2 2410 1.16 2.59 0.61 94 HTML_IMAGE_RATIO_08 2404 2.39 2.59 2.32 95 XM_H_PHPOS 2386 1.15 2.57 0.60 96 T_HTML_TAG_BALANCE_CENTER 2377 0.77 2.56 0.09 97 T_REMOTE_IMAGE 2329 3.15 2.51 3.40 98 BAYES_40 2312 2.88 2.49 3.02 99 XMSubMetaI_00 2308 1.37 2.48 0.94 100 SpammyFromTLD_01 2281 0.99 2.46 0.43 101 XMNumbers 2268 2.70 2.44 2.79 102 XMSexyCombo_01 2203 1.70 2.37 1.45 103 XMDiploma_00 2189 1.83 2.36 1.63 104 FSL_THIS_IS_ADV 2179 0.81 2.35 0.23 105 XMSubGiftCard1 2136 0.67 2.30 0.05 106 XM_H_Long_From02 2126 1.36 2.29 1.01 107 ALL_TRUSTED 2108 11.03 2.27 14.37 108 UNPARSEABLE_RELAY 2079 4.62 2.24 5.53 109 FILL_THIS_FORM_LOAN 2060 1.01 2.22 0.55 110 HTML_IMAGE_ONLY_16 2049 0.74 2.21 0.18 111 NORDNS_LOW_CONTRAST 2048 0.61 2.20 0.00 112 XMSubGiftCard2 2033 0.63 2.19 0.04 113 HDRS_LCASE_IMGONLY 2015 0.63 2.17 0.04 114 HTML_SHORT_LINK_IMG_3 2015 0.63 2.17 0.04 115 ADMITS_SPAM 1978 0.62 2.13 0.05 116 RCVD_IN_MSPIKE_H2 1976 4.22 2.13 5.01 117 DIET_1 1959 0.93 2.11 0.47 118 T_XMDrugObfuBody_08 1890 1.45 2.03 1.23 119 XMBody_17 1863 1.09 2.01 0.74 120 T_XMHurry_00 1835 1.30 1.98 1.04 121 BAYES_20 1753 2.22 1.89 2.35 122 FROM_SUSPICIOUS_NTLD 1722 0.56 1.85 0.06 123 XM_ProductURIs 1660 1.17 1.79 0.94 124 XM_B_REG_HTML 1596 0.91 1.72 0.61 125 XMGenDplmaNmb 1582 1.28 1.70 1.11 126 XM_UB99 1563 0.50 1.68 0.05 127 HTML_OFF_PAGE 1531 0.46 1.65 0.00 128 RELAYCOUNTRY_GB 1510 0.81 1.63 0.50 129 XM_H_PHPMailer 1421 0.85 1.53 0.60 130 REPLYTO_WITHOUT_TO_CC 1404 0.46 1.51 0.06 131 RELAYCOUNTRY_IN 1347 0.45 1.45 0.06 132 XMStockSpam_06 1339 2.59 1.44 3.04 133 XM_H_Undi_Recip 1326 0.55 1.43 0.21 134 URIBL_BLACK 1314 0.45 1.41 0.08 135 XMBrknScrpt_02 1301 0.93 1.40 0.76 136 XM_UB60 1298 0.43 1.40 0.06 137 BOTNET_NORDNS 1295 0.40 1.39 0.01 138 XMPhish30 1276 0.79 1.37 0.57 139 XMSexyCombo_04 1269 1.14 1.37 1.05 140 MISSING_HEADERS 1265 0.58 1.36 0.28 141 MAILING_LIST_MULTI 1239 1.68 1.33 1.81 142 TM2_M_VERY_LONG_WORD 1219 1.44 1.31 1.48 143 T_FILL_THIS_FORM_SHORT 1197 1.16 1.29 1.11 144 TR_XM_RelayPhish 1145 1.04 1.23 0.96 145 XMBody_78 1118 0.77 1.20 0.60 146 RELAYCOUNTRY_UA 1117 0.33 1.20 0.00 147 RCVD_IN_PSBL 1111 0.34 1.20 0.02 148 XM_H_PHPOS_M 1109 0.54 1.19 0.29 149 XMHTMLBadTable_001 1090 0.73 1.17 0.56 150 LONG_IMG_URI 1083 0.35 1.17 0.04 151 DEAR_BENEFICIARY 1077 0.32 1.16 0.00 152 DATE_IN_PAST_06_12 1074 0.35 1.16 0.04 153 TRACKER_ID 1074 0.41 1.16 0.12 154 FROMSPACE 1067 0.32 1.15 0.00 155 TR_XM_DK_SendGrid 1061 3.27 1.14 4.09 156 XM_Combo_Sbj 1057 0.37 1.14 0.08 157 XM_HighProb1 1041 0.32 1.12 0.01 158 RCVD_IN_IADB_LISTED 1038 3.16 1.12 3.94 159 XM_UB999 1037 0.34 1.12 0.04 160 XMSubMetaSSx_00 1037 0.43 1.12 0.17 161 XM_B_Crypto 1014 0.34 1.09 0.05 162 TR_XM_Undi_Recip5 989 0.32 1.06 0.03 163 RELAYCOUNTRY_IT 989 0.31 1.06 0.02 164 XM_Attn_01 967 0.31 1.04 0.03 165 XMPhish11 965 1.06 1.04 1.07 166 LONG_JUNK_URI 959 0.34 1.03 0.07 167 HK_RANDOM_FROM 946 0.37 1.02 0.13 168 URI_TRY_3LD 932 1.95 1.00 2.31 169 BAYES_05 917 1.48 0.99 1.67 170 HELO_ADMIN 913 0.27 0.98 0.00 171 TR_MetaPhish_Combo_01 874 2.05 0.94 2.47 172 DKIM_ADSP_CUSTOM_MED 870 0.89 0.94 0.87 173 XMGppyBdWords 868 0.42 0.93 0.22 174 XMSlimDrugH 864 0.52 0.93 0.36 175 URIBL_DBL_SPAM 858 0.26 0.92 0.01 176 BODY_ENHANCEMENT 848 0.29 0.91 0.05 177 XM_UB80 846 0.28 0.91 0.04 178 RCVD_IN_IADB_SPF 845 2.73 0.91 3.43 179 NML_ADSP_CUSTOM_MED 832 0.67 0.90 0.59 180 RELAYCOUNTRY_AU 832 0.47 0.90 0.30 181 SUBJ_DOLLARS 823 0.52 0.89 0.39 182 RCVD_IN_IADB_SENDERID 798 2.43 0.86 3.04 183 XMSubMetaSx_01 797 1.00 0.86 1.06 184 TR_Symld_Words 791 1.22 0.85 1.36 185 XMHTML_After_End 789 0.47 0.85 0.33 186 XM_B_COPY_HTML 785 0.71 0.85 0.66 187 FVGT_m_MULTI_ODD_EMAIL 781 0.26 0.84 0.03 188 RCVD_IN_IADB_DK 775 2.37 0.83 2.96 189 T_XMDrugObfuBody_00 763 2.09 0.82 2.57 190 TooManyTo_002 758 1.14 0.82 1.26 191 TR_Mismatch_TLD_01 743 0.31 0.80 0.12 192 XMSolicitRefs_0 740 0.46 0.80 0.34 193 RELAYCOUNTRY_AT 730 0.36 0.79 0.19 194 MONEY_FORM_SHORT 729 0.24 0.78 0.03 195 TR_Caps_n_Bayes_99 726 0.28 0.78 0.09 196 FORGED_GMAIL_RCVD 711 0.50 0.77 0.40 197 TR_LOTS_OF_MONEY2 699 0.35 0.75 0.20 198 T_MONEY_PERCENT 699 0.35 0.75 0.20 199 XMPhish14 694 0.48 0.75 0.37 200 BAYES_00 679 9.08 0.73 12.27 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 209267 87.51 91.05 86.16 2 DKIM_SIGNED 197292 79.79 76.04 81.23 3 XM_DK_Pass 195091 78.68 74.38 80.32 4 DKIM_VALID 187237 75.29 70.58 77.09 5 DKIM_VALID_AU 153884 62.24 59.31 63.36 6 XMListUnsubscribeExists 139235 60.76 69.73 57.33 7 DCC_CHECK 122933 57.76 76.44 50.61 8 DCC_CHECK_NEGATIVE 117339 41.00 21.90 48.31 9 BAYES_50 115774 44.20 35.14 47.67 10 XM_H_QuotedFrom 95437 42.30 50.17 39.29 11 HTML_FONT_LOW_CONTRAST 84498 35.34 36.76 34.79 12 LOC_TINY_FONT_1 75395 31.71 33.45 31.04 13 DKIM_VALID_EF 73017 26.46 17.03 30.06 14 XMSubLong 61373 23.47 18.76 25.27 15 MIME_HTML_ONLY 58050 26.32 32.66 23.90 16 T_TM2_M_HEADER_IN_MSG 53027 20.35 16.47 21.83 17 FVGT_m_MULTI_ODD 52221 22.29 24.36 21.50 18 XM_DK_Undo_02 50361 27.57 45.44 20.73 19 BAYES_99 45965 25.12 41.31 18.92 20 XM_DKIMWhitelistDomains 44435 13.24 0.04 18.30 21 BAYES_999 41847 22.18 35.11 17.23 22 XM_Body_Dirty_Words 39987 18.69 24.51 16.46 23 RCVD_IN_RP_SAFE 38897 13.15 5.64 16.01 24 MultiRelay 36570 16.19 19.16 15.06 25 RCVD_IN_RP_CERTIFIED 35924 11.95 4.53 14.79 26 ALL_TRUSTED 34913 11.03 2.27 14.37 27 T_KAM_HTML_FONT_INVALID 34659 15.72 19.50 14.27 28 XM_Multi_Part_URI 33571 14.00 14.45 13.82 29 BAYES_00 29809 9.08 0.73 12.27 30 HTML_IMAGE_RATIO_02 28394 13.04 16.59 11.69 31 XM_Evil_Numbers_Gen 28156 11.19 10.13 11.59 32 TR_XM_DK_Bayes 27051 8.20 0.53 11.14 33 TR_XM_DK_Bayes1 26038 7.88 0.46 10.72 34 TR_DCC_Bayes_99 25095 16.35 32.07 10.33 35 TR_XM_DK_Bayes2 24295 7.36 0.44 10.00 36 HTML_IMAGE_RATIO_04 22959 9.07 8.08 9.45 37 FSL_BULK_SIG 22743 11.14 15.78 9.36 38 LOTS_OF_MONEY 22610 9.41 9.69 9.31 39 XM_B_Phish_Phrases 20936 8.19 7.08 8.62 40 T_TooManySym_01 19886 6.67 2.71 8.19 41 LotsOfNums_01 19375 7.50 6.25 7.98 42 T_XMDrugObfuBody_14 19133 7.63 6.96 7.88 43 BOTNET_IPINHOSTNAME 18760 10.34 17.19 7.72 44 TO_MALFORMED 18178 5.44 0.08 7.48 45 XM_SendGrid 17472 5.97 2.79 7.19 46 BAYES_60 16712 6.70 6.22 6.88 47 XMSexyCombo_05 15931 8.25 12.67 6.56 48 FROM_EXCESS_BASE64 15264 6.13 5.71 6.28 49 XM_H_Long_From01 15019 6.81 8.46 6.18 50 TooManyTo_001 14561 6.84 9.07 6.00 51 XMStrtUSub 14141 5.29 3.89 5.82 52 XMSubMetaSx_00 13508 6.14 7.63 5.56 53 UNPARSEABLE_RELAY 13436 4.62 2.24 5.53 54 RCVD_IN_MSPIKE_H2 12180 4.22 2.13 5.01 55 TVD_RCVD_IP 12177 3.75 0.46 5.01 56 XM_UncommonTLD01 10495 6.36 11.71 4.32 57 BAYES_80 10165 4.91 6.80 4.19 58 DKIM_INVALID 10055 4.51 5.46 4.14 59 MIME_QP_LONG_LINE 10014 3.75 2.77 4.12 60 RELAYCOUNTRY_META 9954 10.07 25.70 4.10 61 TR_XM_DK_SendGrid 9931 3.27 1.14 4.09 62 RCVD_IN_IADB_LISTED 9576 3.16 1.12 3.94 63 MPART_ALT_DIFF 8933 4.57 6.92 3.68 64 IN_ZIMBRA_NJ_WHITELIST 8922 2.66 0.01 3.67 65 RCVD_IN_IADB_SPF 8319 2.73 0.91 3.43 66 T_REMOTE_IMAGE 8259 3.15 2.51 3.40 67 MIME_HTML_MOSTLY 7900 3.79 5.20 3.25 68 HTML_IMAGE_RATIO_06 7425 3.42 4.38 3.06 69 INVALID_MSGID 7395 2.25 0.16 3.04 70 RCVD_IN_IADB_SENDERID 7375 2.43 0.86 3.04 71 XMStockSpam_06 7372 2.59 1.44 3.04 72 BAYES_40 7345 2.88 2.49 3.02 73 RCVD_IN_MSPIKE_H3 7202 2.22 0.29 2.97 74 RCVD_IN_MSPIKE_WL 7202 2.22 0.29 2.97 75 RCVD_IN_IADB_DK 7184 2.37 0.83 2.96 76 XM_DIRTYINTL 7031 4.08 7.19 2.89 77 XMNumbers 6788 2.70 2.44 2.79 78 BAYES_95 6471 3.10 4.24 2.66 79 T_XMDrugObfuBody_00 6249 2.09 0.82 2.57 80 TR_MetaPhish_Combo_01 6006 2.05 0.94 2.47 81 RCVD_IN_IADB_VOUCHED 5924 1.94 0.64 2.44 82 BAYES_20 5704 2.22 1.89 2.35 83 HTML_IMAGE_RATIO_08 5635 2.39 2.59 2.32 84 URI_TRY_3LD 5602 1.95 1.00 2.31 85 XMBdyGiftCard01 5527 3.06 5.10 2.28 86 BOTNET 5199 6.80 18.99 2.14 87 T_TooManySym_02 5134 1.72 0.69 2.11 88 HTML_MIME_NO_HTML_TAG 5001 2.70 4.39 2.06 89 XM_PDF 4936 1.55 0.30 2.03 90 IN_HORDE_ADDRESS_BOOK 4897 1.47 0.03 2.02 91 URI_HEX 4873 2.35 3.24 2.01 92 USER_IN_DEF_DKIM_WL 4769 1.43 0.03 1.96 93 TM2_M_URI_OPT_OUT 4422 2.05 2.64 1.82 94 MAILING_LIST_MULTI 4393 1.68 1.33 1.81 95 XM_CamelCaseFrm001 4307 2.45 4.21 1.77 96 MIME_HTML_ONLY_MULTI 4193 2.12 3.14 1.73 97 BAYES_05 4067 1.48 0.99 1.67 98 XMDiploma_00 3961 1.83 2.36 1.63 99 RCVD_IN_IADB_OPTIN 3821 1.26 0.44 1.57 100 XM_DK_Undo_01 3622 1.24 0.60 1.49 101 SUBJ_ALL_CAPS 3610 1.80 2.62 1.49 102 TM2_M_VERY_LONG_WORD 3602 1.44 1.31 1.48 103 ANY_BOUNCE_MESSAGE 3592 1.13 0.22 1.48 104 BOUNCE_MESSAGE 3592 1.13 0.22 1.48 105 XMSubMetaSxObfu_03 3514 1.21 0.59 1.45 106 XMSexyCombo_01 3510 1.70 2.37 1.45 107 TR_Symld_Words 3299 1.22 0.85 1.36 108 UNTRUSTED_Relay 3294 4.75 13.63 1.36 109 RELAYCOUNTRY_CA 3287 2.25 4.60 1.35 110 XM_OfRef6 3273 2.15 4.24 1.35 111 NO_DNS_FOR_FROM 3231 1.92 3.45 1.33 112 TooManyTo_002 3068 1.14 0.82 1.26 113 T_XMDrugObfuBody_08 2990 1.45 2.03 1.23 114 XM_GoogleGroups 2909 0.97 0.38 1.20 115 XMBody_95 2868 0.88 0.10 1.18 116 XMGenDplmaNmb 2702 1.28 1.70 1.11 117 T_FILL_THIS_FORM_SHORT 2700 1.16 1.29 1.11 118 XMSubMetaSxObfu_02 2611 0.95 0.64 1.08 119 XM_SPF_SoftFail 2607 1.74 3.49 1.07 120 XMPhish11 2595 1.06 1.04 1.07 121 XMSubMetaSx_01 2576 1.00 0.86 1.06 122 XMSexyCombo_04 2544 1.14 1.37 1.05 123 T_XMHurry_00 2516 1.30 1.98 1.04 124 XM_H_Long_From02 2450 1.36 2.29 1.01 125 XMSexyCombo_02 2383 0.78 0.27 0.98 126 DKIM_ADSP_NXDOMAIN 2338 2.82 7.66 0.96 127 TR_XM_RelayPhish 2336 1.04 1.23 0.96 128 XMSubMetaI_00 2294 1.37 2.48 0.94 129 XM_ProductURIs 2278 1.17 1.79 0.94 130 USER_IN_WHITELIST 2256 0.67 0.00 0.93 131 TooManyTo_003 2196 0.84 0.67 0.90 132 DKIM_ADSP_CUSTOM_MED 2120 0.89 0.94 0.87 133 FILL_THIS_FORM 2097 1.36 2.65 0.86 134 FILL_THIS_FORM_LONG 1955 1.30 2.61 0.80 135 XM_UB50 1910 2.46 6.84 0.79 136 XMBrknScrpt_02 1835 0.93 1.40 0.76 137 XMBody_17 1808 1.09 2.01 0.74 138 TooManyTo_004 1784 0.69 0.57 0.73 139 T_TooManySym_03 1758 0.57 0.16 0.72 140 PLING_QUERY 1604 0.58 0.37 0.66 141 XM_B_COPY_HTML 1604 0.71 0.85 0.66 142 XM_URI_RBL 1581 1.21 2.66 0.65 143 XMLngstWrd_00 1575 0.55 0.29 0.65 144 TooManyTo_005 1568 0.59 0.46 0.65 145 TR_XM_PHPDW 1509 1.18 2.64 0.62 146 TR_XM_PHPForged 1509 1.18 2.63 0.62 147 TR_XM_FormFill2 1470 1.16 2.59 0.61 148 XM_B_REG_HTML 1470 0.91 1.72 0.61 149 XMBody_78 1464 0.77 1.20 0.60 150 XM_H_PHPOS 1463 1.15 2.57 0.60 151 HTML_FONT_FACE_BAD 1457 0.63 0.71 0.60 152 XMLngstWrd_01 1451 0.51 0.26 0.60 153 XM_H_PHPMailer 1448 0.85 1.53 0.60 154 RDNS_DYNAMIC 1439 0.62 0.70 0.59 155 NML_ADSP_CUSTOM_MED 1427 0.67 0.90 0.59 156 XMPhish30 1375 0.79 1.37 0.57 157 XMBSHREFv2 1366 0.50 0.35 0.56 158 XMHTMLBadTable_001 1362 0.73 1.17 0.56 159 FILL_THIS_FORM_LOAN 1339 1.01 2.22 0.55 160 HTML_TAG_BALANCE_BODY 1276 0.55 0.60 0.53 161 HELO_NODOT 1269 0.44 0.24 0.52 162 RELAYCOUNTRY_GB 1224 0.81 1.63 0.50 163 XMNoVowels 1211 0.47 0.39 0.50 164 XM_RXBody 1202 0.54 0.66 0.49 165 HELO_NO_DOMAIN 1173 0.41 0.24 0.48 166 DIET_1 1152 0.93 2.11 0.47 167 XMRcvdHeader_15 1132 0.34 0.00 0.47 168 TM2_M_A_HREF_HREF 1058 0.45 0.50 0.44 169 SpammyFromTLD_01 1046 0.99 2.46 0.43 170 XMCapTrack 1034 0.34 0.13 0.43 171 XMLngstWrd_02 1019 0.37 0.24 0.42 172 FORGED_GMAIL_RCVD 969 0.50 0.77 0.40 173 RCVD_IN_BL_SPAMCOP_NET 967 1.08 2.85 0.40 174 MPART_ALT_DIFF_COUNT 962 0.47 0.67 0.40 175 HTTPS_HTTP_MISMATCH 955 0.41 0.45 0.39 176 SUBJ_DOLLARS 938 0.52 0.89 0.39 177 NUMERIC_HTTP_ADDR 935 1.53 4.53 0.38 178 T_TooManySym_04 931 0.29 0.04 0.38 179 XM_Walgreens_Forge 918 0.33 0.19 0.38 180 XM_ShortIntro_01 916 0.40 0.44 0.38 181 XMPhish14 906 0.48 0.75 0.37 182 XMSubject_48 905 0.32 0.18 0.37 183 T_Symld_Words_02 889 0.44 0.62 0.37 184 THIS_AD 880 0.46 0.71 0.36 185 RELAYCOUNTRY_DE 872 1.67 5.09 0.36 186 XMSlimDrugH 867 0.52 0.93 0.36 187 XM_Akamai 861 0.26 0.02 0.35 188 XM_H_SpoofStaff4 837 0.26 0.04 0.34 189 XMLngstWrd_03 827 0.30 0.20 0.34 190 XMSolicitRefs_0 815 0.46 0.80 0.34 191 XMHTML_After_End 801 0.47 0.85 0.33 192 URI_NOVOWEL 795 0.40 0.59 0.33 193 XMBody_29 773 0.28 0.18 0.32 194 XMSUPPORT 750 0.22 0.00 0.31 195 RELAYCOUNTRY_AU 734 0.47 0.90 0.30 196 XMGappySubj_01 732 0.28 0.21 0.30 197 XM_OverStock_LProb 727 0.25 0.12 0.30 198 TR_LOTS_OF_MONEY3 727 0.41 0.69 0.30 199 REMOVE_BEFORE_LINK 713 0.31 0.34 0.29 200 XM_H_PHPOS_M 698 0.54 1.19 0.29 ----------------------------------------------------------------------