Email: 291072 Autolearn: 0 AvgScore: 3.32 AvgScanTime: 1.37 sec Spam: 87722 Autolearn: 0 AvgScore: 14.07 AvgScanTime: 1.49 sec Ham: 203350 Autolearn: 0 AvgScore: -1.32 AvgScanTime: 1.32 sec Time Spent Running SA: 110.94 hours Time Spent Processing Spam: 36.31 hours Time Spent Processing Ham: 74.64 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 83312 87.68 94.97 84.54 2 XM_B_Unicode 75100 75.94 85.61 71.77 3 DCC_CHECK 69779 55.34 79.55 44.90 4 XM_B_SpammyWords 67380 55.34 76.81 46.08 5 DKIM_SIGNED 64631 75.55 73.68 76.36 6 XM_DK_Pass 62834 74.00 71.63 75.02 7 DKIM_VALID 61244 72.36 69.82 73.46 8 RELAYCOUNTRY_US 58296 76.65 66.46 81.05 9 XMListUnsubscribeExists 51404 54.44 58.60 52.65 10 DKIM_VALID_AU 45705 56.26 52.10 58.06 11 LOC_TINY_FONT_1 41838 33.40 47.69 27.23 12 XM_DK_Undo_02 34971 18.57 39.87 9.38 13 XM_B_Unicode3 34793 43.36 39.66 44.95 14 T_KAM_HTML_FONT_INVALID 33764 24.11 38.49 17.91 15 XM_Body_Dirty_Words 32634 19.57 37.20 11.97 16 BAYES_50 31625 47.76 36.05 52.81 17 XM_B_SpammyWords2 30221 24.31 34.45 19.94 18 TR_XM_DKIM_Undo 28506 14.36 32.50 6.54 19 HTML_FONT_LOW_CONTRAST 26848 30.17 30.61 29.98 20 XM_B_Unsub 25862 16.88 29.48 11.44 21 BAYES_99 25775 14.85 29.38 8.57 22 DKIM_VALID_EF 24056 27.90 27.42 28.10 23 MIME_HTML_ONLY 22005 23.32 25.08 22.56 24 BAYES_999 20539 12.15 23.41 7.29 25 FVGT_m_MULTI_ODD 20538 24.15 23.41 24.47 26 TR_DCC_Bayes_99 19247 8.96 21.94 3.36 27 TooManyTo_001 18708 11.05 21.33 6.62 28 RCVD_IN_MSPIKE_H2 17993 19.30 20.51 18.77 29 DCC_CHECK_NEGATIVE 17919 44.64 20.43 55.08 30 RCVD_IN_MSPIKE_WL 17377 28.96 19.81 32.90 31 T_TM2_M_HEADER_IN_MSG 17054 22.20 19.44 23.39 32 URIBL_DBL_SPAM 16757 5.76 19.10 0.01 33 XMSubLong 16484 20.61 18.79 21.40 34 XM_B_Unsub2 16365 6.54 18.66 1.31 35 BAYES_60 16242 13.02 18.52 10.65 36 ALL_TRUSTED 16143 17.04 18.40 16.46 37 RELAYCOUNTRY_META 14063 6.99 16.03 3.09 38 TooManyTo_002 12667 5.30 14.44 1.36 39 UNPARSEABLE_RELAY 12553 10.80 14.31 9.29 40 XM_Multi_Part_URI 12396 13.66 14.13 13.46 41 TR_XM_UnparsRelay 12053 9.06 13.74 7.04 42 BOTNET_IPINHOSTNAME 10966 7.64 12.50 5.54 43 LOTS_OF_MONEY 10729 9.16 12.23 7.83 44 FSL_BULK_SIG 10376 9.66 11.83 8.73 45 TooManyTo_003 10184 4.16 11.61 0.94 46 XM_B_SpammyWords3 10054 6.61 11.46 4.51 47 TR_XM_SpammyRelay 9923 4.44 11.31 1.47 48 BOTNET 9914 4.42 11.30 1.45 49 XM_SendGrid 9803 9.04 11.18 8.11 50 TR_XM_SpammyWords2 9457 4.44 10.78 1.70 51 TR_XM_SpammyWords4 9263 6.69 10.56 5.02 52 XMSexyCombo_05 9033 5.99 10.30 4.13 53 RCVD_IN_MSPIKE_H3 8850 13.18 10.09 14.52 54 RCVD_IN_MSPIKE_H4 8090 13.53 9.22 15.38 55 UNTRUSTED_Relay 7966 3.59 9.08 1.22 56 TooManyTo_004 7761 3.12 8.85 0.65 57 HTML_IMAGE_RATIO_02 7649 7.94 8.72 7.60 58 URI_WP_HACKED_2 7494 2.58 8.54 0.01 59 RCVD_IN_BL_SPAMCOP_NET 6978 3.33 7.95 1.33 60 XM_UncommonTLD01 6971 5.33 7.95 4.20 61 BAYES_80 6769 5.60 7.72 4.68 62 TR_XM_DK_SendGrid 6369 5.70 7.26 5.02 63 MPART_ALT_DIFF 6241 5.67 7.11 5.04 64 XM_Evil_Numbers_Gen 6149 8.48 7.01 9.11 65 TooManyTo_005 5197 2.17 5.92 0.55 66 TR_XM_SPAMCOP 4995 1.93 5.69 0.31 67 RELAYCOUNTRY_CA 4991 2.41 5.69 1.00 68 XMSubMetaSx_00 4764 4.41 5.43 3.97 69 LotsOfNums_01 4749 8.31 5.41 9.56 70 TR_XM_PhishingBody 4641 3.51 5.29 2.75 71 MIME_HTML_MOSTLY 4632 3.40 5.28 2.59 72 XM_B_Phish_Phrases 4383 3.95 5.00 3.50 73 XM_B_SpammyTLD 4380 2.84 4.99 1.92 74 XM_UB50 4029 1.96 4.59 0.83 75 XM_H_Long_From01 3878 4.79 4.42 4.94 76 XMStrtUSub 3786 4.66 4.32 4.81 77 HTML_IMAGE_RATIO_04 3775 5.16 4.30 5.53 78 URIBL_DBL_ABUSE_SPAM 3576 1.32 4.08 0.13 79 RCVD_IN_RP_SAFE 3449 7.72 3.93 9.36 80 DKIM_INVALID 3387 3.19 3.86 2.90 81 XM_B_Investor 3173 1.92 3.62 1.19 82 SpammyFromTLD_01 3131 1.34 3.57 0.37 83 BAYES_95 3117 3.15 3.55 2.98 84 XM_OfRef6 2837 1.85 3.23 1.26 85 URI_NOVOWEL 2822 2.96 3.22 2.86 86 MIME_HTML_ONLY_MULTI 2803 3.27 3.20 3.31 87 TM2_M_URI_OPT_OUT 2699 3.28 3.08 3.37 88 RCVD_IN_RP_CERTIFIED 2691 6.67 3.07 8.22 89 XMNumbers 2660 3.69 3.03 3.97 90 XM_SPF_SoftFail 2630 1.88 3.00 1.39 91 TR_XM_SpammyWords5 2561 2.01 2.92 1.62 92 TR_XM_PHPDW 2458 1.09 2.80 0.35 93 T_XMDrugObfuBody_14 2408 3.14 2.75 3.31 94 XM_B_SpammyWords4 2332 1.09 2.66 0.41 95 XM_B_Phish66 2279 1.74 2.60 1.37 96 SpammyFromTLD_02 2278 0.92 2.60 0.19 97 TR_XM_PHPForged 2235 0.97 2.55 0.30 98 HTML_IMAGE_RATIO_06 2221 3.02 2.53 3.22 99 TR_XM_FormFill2 2206 0.97 2.51 0.30 100 XM_H_PHPOS 2198 0.95 2.51 0.28 101 XM_DIRTYINTL 2057 0.90 2.34 0.28 102 HTML_IMAGE_RATIO_08 2020 2.27 2.30 2.26 103 TR_Symld_Words 1995 2.08 2.27 1.99 104 MIME_QP_LONG_LINE 1973 3.88 2.25 4.58 105 T_TooManySym_01 1919 5.08 2.19 6.33 106 T_XMDrugObfuBody_08 1906 1.56 2.17 1.30 107 XMBody_17 1894 0.99 2.16 0.48 108 KHOP_HELO_FCRDNS 1892 1.50 2.16 1.21 109 TM2_M_VERY_LONG_WORD 1863 1.48 2.12 1.21 110 HTML_MIME_NO_HTML_TAG 1785 1.88 2.03 1.81 111 T_XMDrugObfuBody_00 1782 1.01 2.03 0.57 112 T_FILL_THIS_FORM_SHORT 1780 1.02 2.03 0.59 113 JH_SPAMMY_HEADERS 1745 0.60 1.99 0.00 114 PDS_OTHER_BAD_TLD 1741 0.90 1.98 0.43 115 T_REMOTE_IMAGE 1740 3.28 1.98 3.85 116 RCVD_IN_IADB_LISTED 1729 3.95 1.97 4.80 117 XM_CamelCaseFrm001 1725 1.93 1.97 1.92 118 BAYES_40 1687 3.70 1.92 4.47 119 SUBJ_ALL_CAPS 1686 1.47 1.92 1.27 120 USER_IN_DEF_DKIM_WL 1570 12.07 1.79 16.50 121 XMSexyCombo_01 1540 1.09 1.76 0.80 122 DIET_1 1532 0.97 1.75 0.63 123 XMBrknScrpt_02 1488 1.41 1.70 1.29 124 RCVD_IN_IADB_SPF 1482 3.41 1.69 4.15 125 RELAYCOUNTRY_IN 1473 0.53 1.68 0.04 126 BOTNET_NORDNS 1462 0.51 1.67 0.02 127 XM_DK_Undo_01 1452 1.47 1.66 1.39 128 MAILING_LIST_MULTI 1451 2.02 1.65 2.18 129 XMSubMetaI_00 1443 0.91 1.64 0.59 130 RCVD_IN_IADB_DK 1403 2.92 1.60 3.49 131 RCVD_IN_IADB_SENDERID 1379 3.01 1.57 3.63 132 TR_XM_BayesRelay 1376 0.47 1.57 0.00 133 XM_B_COVIDMETA 1314 0.80 1.50 0.50 134 XMDiploma_00 1310 1.34 1.49 1.27 135 XMBdyGiftCard01 1294 1.19 1.48 1.06 136 XM_UB99 1267 0.44 1.44 0.00 137 T_XMHurry_00 1263 0.84 1.44 0.58 138 XMStockSpam_06 1259 1.04 1.44 0.86 139 XM_H_PHPMailer 1255 0.88 1.43 0.64 140 XM_Body_Dirty_Words_01 1241 0.56 1.41 0.19 141 RELAYCOUNTRY_FR 1213 0.56 1.38 0.21 142 TR_XM_SB_Phish 1205 1.89 1.37 2.11 143 FROM_EXCESS_BASE64 1198 3.18 1.37 3.97 144 URI_TRY_3LD 1188 1.23 1.35 1.18 145 XMSubPhish11 1174 1.87 1.34 2.10 146 HTML_TAG_BALANCE_BODY 1158 0.80 1.32 0.58 147 URIBL_BLACK 1140 0.41 1.30 0.02 148 BAYES_20 1137 2.43 1.30 2.92 149 TR_XM_FormFill 1125 0.39 1.28 0.01 150 XMNoVowels 1094 1.46 1.25 1.55 151 URI_HEX 1075 1.13 1.23 1.08 152 XM_UB999 1048 0.36 1.19 0.00 153 TR_LOTS_OF_MONEY3 1048 0.59 1.19 0.34 154 TR_XM_INV_DKIM 1035 0.54 1.18 0.26 155 XM_H_Undi_Recip 1023 0.45 1.17 0.14 156 TM2_M_A_HREF_HREF 1021 0.54 1.16 0.27 157 TR_XM_NoHeaderRelay 1016 0.45 1.16 0.14 158 RCVD_IN_RP_RNBL 1003 0.44 1.14 0.13 159 TR_Mismatch_TLD_01 983 0.56 1.12 0.32 160 XMPhish30 980 0.87 1.12 0.76 161 XM_URI_RBL 973 0.46 1.11 0.18 162 HK_RANDOM_REPLYTO 954 0.43 1.09 0.14 163 TR_Mismatch_TLD_02 934 0.37 1.06 0.07 164 XM_B_SEO 916 0.36 1.04 0.07 165 RELAYCOUNTRY_NL 911 0.42 1.04 0.15 166 MIME_CHARSET_FARAWAY 909 0.44 1.04 0.19 167 XMClaimOffer 906 0.36 1.03 0.06 168 XM_UB60 899 0.34 1.02 0.04 169 TR_XM_SEO4 888 0.33 1.01 0.04 170 XMPhish08 881 0.45 1.00 0.22 171 XM_H_Long_From02 873 1.06 1.00 1.08 172 HTML_FONT_FACE_BAD 871 0.99 0.99 0.99 173 RDNS_DYNAMIC 865 0.78 0.99 0.69 174 XM_ProductURIs 861 0.78 0.98 0.69 175 XMSubNoVowel 860 1.58 0.98 1.85 176 HTTPS_HTTP_MISMATCH 858 0.66 0.98 0.53 177 SUBJ_DOLLARS 856 0.49 0.98 0.27 178 XM_H_PHPOS_M 802 0.33 0.91 0.08 179 HTML_IMAGE_ONLY_20 786 1.07 0.90 1.14 180 RELAYCOUNTRY_CN 773 0.32 0.88 0.08 181 XMGenDplmaNmb 740 0.63 0.84 0.54 182 SHOPIFY_IMG_NOT_RCVD_SFY 739 0.40 0.84 0.21 183 XM_B_COPY_HTML 736 0.76 0.84 0.72 184 RCVD_IN_IADB_VOUCHED 736 2.47 0.84 3.18 185 XM_B_DNDMA 732 0.48 0.83 0.33 186 CHARSET_FARAWAY_HEADER 732 0.26 0.83 0.02 187 BAYES_00 720 8.04 0.82 11.15 188 XMReplyNow 719 0.30 0.82 0.08 189 MONEY_NOHTML 695 0.29 0.79 0.08 190 TR_BOTNET_NEGATE 680 0.41 0.78 0.25 191 XMBody_78 669 0.64 0.76 0.59 192 NUMERIC_HTTP_ADDR 663 0.45 0.76 0.32 193 LOADSA_MONEY_COMBO 659 0.26 0.75 0.05 194 RELAYCOUNTRY_AU 657 0.36 0.75 0.20 195 BAYES_05 641 1.46 0.73 1.77 196 PLING_QUERY 638 0.79 0.73 0.82 197 DKIM_ADSP_CUSTOM_MED 634 0.94 0.72 1.03 198 TR_MetaPhish_Combo_01 629 0.74 0.72 0.75 199 T_Symld_Words_02 623 0.54 0.71 0.46 200 XMHTML_After_End 619 0.56 0.71 0.49 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 171912 87.68 94.97 84.54 2 RELAYCOUNTRY_US 164819 76.65 66.46 81.05 3 DKIM_SIGNED 155271 75.55 73.68 76.36 4 XM_DK_Pass 152547 74.00 71.63 75.02 5 DKIM_VALID 149373 72.36 69.82 73.46 6 XM_B_Unicode 145948 75.94 85.61 71.77 7 DKIM_VALID_AU 118064 56.26 52.10 58.06 8 DCC_CHECK_NEGATIVE 112002 44.64 20.43 55.08 9 BAYES_50 107381 47.76 36.05 52.81 10 XMListUnsubscribeExists 107054 54.44 58.60 52.65 11 XM_B_SpammyWords 93696 55.34 76.81 46.08 12 XM_B_Unicode3 91411 43.36 39.66 44.95 13 DCC_CHECK 91304 55.34 79.55 44.90 14 RCVD_IN_MSPIKE_WL 66911 28.96 19.81 32.90 15 HTML_FONT_LOW_CONTRAST 60963 30.17 30.61 29.98 16 DKIM_VALID_EF 57151 27.90 27.42 28.10 17 LOC_TINY_FONT_1 55382 33.40 47.69 27.23 18 FVGT_m_MULTI_ODD 49755 24.15 23.41 24.47 19 T_TM2_M_HEADER_IN_MSG 47562 22.20 19.44 23.39 20 MIME_HTML_ONLY 45880 23.32 25.08 22.56 21 XMSubLong 43518 20.61 18.79 21.40 22 XM_B_SpammyWords2 40541 24.31 34.45 19.94 23 RCVD_IN_MSPIKE_H2 38170 19.30 20.51 18.77 24 T_KAM_HTML_FONT_INVALID 36418 24.11 38.49 17.91 25 USER_IN_DEF_DKIM_WL 33552 12.07 1.79 16.50 26 ALL_TRUSTED 33463 17.04 18.40 16.46 27 RCVD_IN_MSPIKE_H4 31284 13.53 9.22 15.38 28 RCVD_IN_MSPIKE_H3 29518 13.18 10.09 14.52 29 XM_Multi_Part_URI 27377 13.66 14.13 13.46 30 XM_Body_Dirty_Words 24338 19.57 37.20 11.97 31 XM_B_Unsub 23265 16.88 29.48 11.44 32 BAYES_00 22682 8.04 0.82 11.15 33 BAYES_60 21647 13.02 18.52 10.65 34 XM_DKIMWhitelistDomains 20340 6.99 0.02 10.00 35 LotsOfNums_01 19450 8.31 5.41 9.56 36 XM_DK_Undo_02 19079 18.57 39.87 9.38 37 RCVD_IN_RP_SAFE 19029 7.72 3.93 9.36 38 UNPARSEABLE_RELAY 18886 10.80 14.31 9.29 39 XM_Evil_Numbers_Gen 18533 8.48 7.01 9.11 40 FSL_BULK_SIG 17743 9.66 11.83 8.73 41 BAYES_99 17436 14.85 29.38 8.57 42 RCVD_IN_RP_CERTIFIED 16713 6.67 3.07 8.22 43 XM_SendGrid 16500 9.04 11.18 8.11 44 LOTS_OF_MONEY 15923 9.16 12.23 7.83 45 HTML_IMAGE_RATIO_02 15464 7.94 8.72 7.60 46 TR_XM_DK_Bayes 15379 5.44 0.51 7.56 47 TR_XM_DK_Bayes1 15068 5.32 0.49 7.41 48 BAYES_999 14826 12.15 23.41 7.29 49 TR_XM_UnparsRelay 14318 9.06 13.74 7.04 50 TooManyTo_001 13461 11.05 21.33 6.62 51 TR_XM_DKIM_Undo 13290 14.36 32.50 6.54 52 TR_XM_DK_Bayes2 13120 4.64 0.45 6.45 53 T_TooManySym_01 12876 5.08 2.19 6.33 54 BOTNET_IPINHOSTNAME 11271 7.64 12.50 5.54 55 HTML_IMAGE_RATIO_04 11243 5.16 4.30 5.53 56 MPART_ALT_DIFF 10257 5.67 7.11 5.04 57 TR_XM_DK_SendGrid 10215 5.70 7.26 5.02 58 TR_XM_SpammyWords4 10209 6.69 10.56 5.02 59 XM_H_Long_From01 10055 4.79 4.42 4.94 60 XMStrtUSub 9774 4.66 4.32 4.81 61 RCVD_IN_IADB_LISTED 9764 3.95 1.97 4.80 62 BAYES_80 9521 5.60 7.72 4.68 63 MIME_QP_LONG_LINE 9322 3.88 2.25 4.58 64 XM_B_SpammyWords3 9172 6.61 11.46 4.51 65 BAYES_40 9093 3.70 1.92 4.47 66 XM_UncommonTLD01 8533 5.33 7.95 4.20 67 RCVD_IN_IADB_SPF 8430 3.41 1.69 4.15 68 XMSexyCombo_05 8395 5.99 10.30 4.13 69 XMNumbers 8083 3.69 3.03 3.97 70 XMSubMetaSx_00 8068 4.41 5.43 3.97 71 FROM_EXCESS_BASE64 8063 3.18 1.37 3.97 72 T_REMOTE_IMAGE 7820 3.28 1.98 3.85 73 INVALID_MSGID 7579 2.65 0.14 3.73 74 T_TooManySym_02 7418 2.71 0.55 3.65 75 XM_H_Trusted_IP 7403 2.54 0.00 3.64 76 RCVD_IN_IADB_SENDERID 7372 3.01 1.57 3.63 77 MSGID_NOFQDN1 7208 2.49 0.04 3.54 78 XM_B_Phish_Phrases 7116 3.95 5.00 3.50 79 RCVD_IN_IADB_DK 7101 2.92 1.60 3.49 80 TM2_M_URI_OPT_OUT 6862 3.28 3.08 3.37 81 ANY_BOUNCE_MESSAGE 6837 2.51 0.53 3.36 82 BOUNCE_MESSAGE 6835 2.51 0.53 3.36 83 TR_DCC_Bayes_99 6826 8.96 21.94 3.36 84 T_XMDrugObfuBody_14 6727 3.14 2.75 3.31 85 MIME_HTML_ONLY_MULTI 6726 3.27 3.20 3.31 86 HTML_IMAGE_RATIO_06 6556 3.02 2.53 3.22 87 RCVD_IN_IADB_VOUCHED 6462 2.47 0.84 3.18 88 RELAYCOUNTRY_META 6280 6.99 16.03 3.09 89 RCVD_IN_MSPIKE_H5 6109 2.25 0.50 3.00 90 BAYES_95 6050 3.15 3.55 2.98 91 TO_MALFORMED 6030 2.08 0.03 2.97 92 BAYES_20 5934 2.43 1.30 2.92 93 DKIM_INVALID 5898 3.19 3.86 2.90 94 URI_NOVOWEL 5807 2.96 3.22 2.86 95 TR_XM_PhishingBody 5584 3.51 5.29 2.75 96 XM_PDF 5424 1.97 0.34 2.67 97 TVD_RCVD_IP 5274 1.98 0.56 2.59 98 MIME_HTML_MOSTLY 5264 3.40 5.28 2.59 99 HTML_IMAGE_RATIO_08 4599 2.27 2.30 2.26 100 IN_HORDE_ADDRESS_BOOK 4586 1.59 0.06 2.26 101 MAILING_LIST_MULTI 4428 2.02 1.65 2.18 102 RCVD_IN_IADB_OPTIN 4340 1.68 0.62 2.13 103 TR_XM_SB_Phish 4296 1.89 1.37 2.11 104 XMSubPhish11 4266 1.87 1.34 2.10 105 TR_Symld_Words 4048 2.08 2.27 1.99 106 XM_CamelCaseFrm001 3901 1.93 1.97 1.92 107 XM_B_SpammyTLD 3899 2.84 4.99 1.92 108 XMSubNoVowel 3753 1.58 0.98 1.85 109 HTML_MIME_NO_HTML_TAG 3682 1.88 2.03 1.81 110 BAYES_05 3602 1.46 0.73 1.77 111 HELO_MISC_IP 3490 1.22 0.06 1.72 112 XMBSHREFv2 3480 1.28 0.28 1.71 113 TR_XM_SpammyWords2 3458 4.44 10.78 1.70 114 TR_XM_SpammyWords5 3301 2.01 2.92 1.62 115 XMNoVowels 3156 1.46 1.25 1.55 116 TR_XM_SpammyRelay 2995 4.44 11.31 1.47 117 XMGappySubj_01 2975 1.05 0.09 1.46 118 BOTNET 2953 4.42 11.30 1.45 119 XM_SPF_SoftFail 2832 1.88 3.00 1.39 120 XM_DK_Undo_01 2830 1.47 1.66 1.39 121 XM_B_Phish66 2778 1.74 2.60 1.37 122 TooManyTo_002 2765 5.30 14.44 1.36 123 RCVD_IN_BL_SPAMCOP_NET 2711 3.33 7.95 1.33 124 XM_B_Unsub2 2659 6.54 18.66 1.31 125 T_XMDrugObfuBody_08 2640 1.56 2.17 1.30 126 XMBrknScrpt_02 2623 1.41 1.70 1.29 127 SUBJ_ALL_CAPS 2590 1.47 1.92 1.27 128 XMDiploma_00 2589 1.34 1.49 1.27 129 XM_OfRef6 2555 1.85 3.23 1.26 130 XM_GoogleGroups 2546 1.04 0.56 1.25 131 UNTRUSTED_Relay 2473 3.59 9.08 1.22 132 KHOP_HELO_FCRDNS 2464 1.50 2.16 1.21 133 TM2_M_VERY_LONG_WORD 2456 1.48 2.12 1.21 134 XM_B_Investor 2428 1.92 3.62 1.19 135 URI_TRY_3LD 2390 1.23 1.35 1.18 136 HTML_IMAGE_ONLY_20 2320 1.07 0.90 1.14 137 XMBody_95 2297 0.84 0.16 1.13 138 URI_HEX 2202 1.13 1.23 1.08 139 XM_H_Long_From02 2201 1.06 1.00 1.08 140 XMBdyGiftCard01 2156 1.19 1.48 1.06 141 T_TooManySym_03 2125 0.78 0.16 1.04 142 DKIM_ADSP_CUSTOM_MED 2101 0.94 0.72 1.03 143 RELAYCOUNTRY_CA 2028 2.41 5.69 1.00 144 HTML_FONT_FACE_BAD 2003 0.99 0.99 0.99 145 TVD_SPACE_RATIO_MINFP 1917 0.75 0.31 0.94 146 TooManyTo_003 1911 4.16 11.61 0.94 147 XMStockSpam_06 1756 1.04 1.44 0.86 148 XM_UB50 1690 1.96 4.59 0.83 149 PLING_QUERY 1674 0.79 0.73 0.82 150 XMSexyCombo_01 1624 1.09 1.76 0.80 151 XMPhish30 1542 0.87 1.12 0.76 152 TR_MetaPhish_Combo_01 1532 0.74 0.72 0.75 153 IN_ZIMBRA_NJ_WHITELIST 1486 0.51 0.00 0.73 154 MPART_ALT_DIFF_COUNT 1466 0.70 0.66 0.72 155 XM_B_COPY_HTML 1462 0.76 0.84 0.72 156 USER_IN_WHITELIST 1411 0.48 0.00 0.69 157 USER_IN_WELCOMELIST 1411 0.48 0.00 0.69 158 XM_ProductURIs 1411 0.78 0.98 0.69 159 RDNS_DYNAMIC 1396 0.78 0.99 0.69 160 TR_MSPIKEBAYES00 1394 0.48 0.01 0.69 161 XM_D_tchamptons_WL 1347 0.46 0.00 0.66 162 FORGED_GMAIL_RCVD 1341 0.64 0.59 0.66 163 XM_B_REG_HTML 1328 0.63 0.57 0.65 164 TooManyTo_004 1321 3.12 8.85 0.65 165 XMLngstWrd_00 1305 0.52 0.25 0.64 166 XM_H_PHPMailer 1300 0.88 1.43 0.64 167 DIET_1 1285 0.97 1.75 0.63 168 HELO_NODOT 1221 0.61 0.64 0.60 169 HELO_NO_DOMAIN 1221 0.61 0.64 0.60 170 NML_ADSP_CUSTOM_MED 1214 0.61 0.64 0.60 171 XMBody_78 1203 0.64 0.76 0.59 172 T_FILL_THIS_FORM_SHORT 1197 1.02 2.03 0.59 173 XMSubMetaI_00 1192 0.91 1.64 0.59 174 TVD_SPACE_RATIO 1183 0.44 0.11 0.58 175 HTML_TAG_BALANCE_BODY 1175 0.80 1.32 0.58 176 T_XMHurry_00 1170 0.84 1.44 0.58 177 T_XMDrugObfuBody_00 1157 1.01 2.03 0.57 178 XMHTMLBadTable_001 1155 0.61 0.69 0.57 179 TooManyTo_005 1115 2.17 5.92 0.55 180 XMGenDplmaNmb 1105 0.63 0.84 0.54 181 XMCapTrack 1098 0.43 0.19 0.54 182 XMLngstWrd_01 1077 0.44 0.22 0.53 183 HTTPS_HTTP_MISMATCH 1074 0.66 0.98 0.53 184 XMSubMetaSxObfu_02 1073 0.52 0.52 0.53 185 RELAYCOUNTRY_GB 1059 0.54 0.59 0.52 186 DATE_IN_PAST_03_06 1058 0.53 0.56 0.52 187 DKIM_ADSP_NXDOMAIN 1011 0.48 0.43 0.50 188 XM_B_COVIDMETA 1009 0.80 1.50 0.50 189 XMHTML_After_End 997 0.56 0.71 0.49 190 BASE64_LENGTH_79_INF 990 0.37 0.11 0.49 191 XMBody_17 985 0.99 2.16 0.48 192 T_TooManySym_04 947 0.34 0.06 0.47 193 T_Symld_Words_02 936 0.54 0.71 0.46 194 XM_S_SubURI 936 0.33 0.04 0.46 195 XMSubMetaSxObfu_03 915 0.40 0.29 0.45 196 XM_USANA_RCVD 891 0.31 0.00 0.44 197 TR_XM_COVIDMETA1 887 0.49 0.62 0.44 198 NO_DNS_FOR_FROM 887 0.40 0.33 0.44 199 PDS_OTHER_BAD_TLD 869 0.90 1.98 0.43 200 XMLngstWrd_02 833 0.33 0.14 0.41 ----------------------------------------------------------------------