Email: 476358 Autolearn: 0 AvgScore: 3.10 AvgScanTime: 1.27 sec Spam: 126454 Autolearn: 0 AvgScore: 14.62 AvgScanTime: 1.43 sec Ham: 349904 Autolearn: 0 AvgScore: -1.06 AvgScanTime: 1.22 sec Time Spent Running SA: 168.18 hours Time Spent Processing Spam: 50.06 hours Time Spent Processing Ham: 118.11 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 120969 88.65 95.66 86.12 2 DCC_CHECK 98601 47.73 77.97 36.79 3 DKIM_SIGNED 97477 72.69 77.08 71.10 4 RELAYCOUNTRY_US 93892 78.70 74.25 80.31 5 XM_DK_Pass 93702 70.82 74.10 69.63 6 XM_B_Unicode 91127 69.34 72.06 68.35 7 DKIM_VALID 90992 68.61 71.96 67.40 8 XM_B_SpammyWords 81487 47.42 64.44 41.27 9 XMListUnsubscribeExists 78193 48.63 61.84 43.85 10 DKIM_VALID_AU 66644 50.79 52.70 50.10 11 BAYES_50 57749 51.91 45.67 54.16 12 XM_B_Unicode3 50530 39.46 39.96 39.29 13 MIME_HTML_ONLY 47601 24.75 37.64 20.10 14 XM_DK_Undo_02 47487 14.60 37.55 6.31 15 XM_B_SpammyWords2 43628 22.00 34.50 17.49 16 LOC_TINY_FONT_1 41116 24.50 32.51 21.60 17 HTML_FONT_LOW_CONTRAST 39542 27.45 31.27 26.07 18 TR_XM_DKIM_Undo 37730 11.43 29.84 4.77 19 DKIM_VALID_EF 35883 27.32 28.38 26.93 20 T_KAM_HTML_FONT_INVALID 35348 20.17 27.95 17.36 21 BAYES_99 33819 11.65 26.74 6.19 22 FVGT_m_MULTI_ODD 31816 23.44 25.16 22.82 23 RELAYCOUNTRY_META 30213 9.38 23.89 4.14 24 T_TM2_M_HEADER_IN_MSG 29346 29.55 23.21 31.84 25 XMSubLong 29039 21.57 22.96 21.06 26 DCC_CHECK_NEGATIVE 27800 52.23 21.98 63.16 27 FSL_BULK_SIG 27197 11.18 21.51 7.45 28 RCVD_IN_MSPIKE_WL 26674 27.13 21.09 29.32 29 RCVD_IN_MSPIKE_H2 26596 21.01 21.03 21.01 30 BAYES_999 26197 9.37 20.72 5.27 31 XM_Body_Dirty_Words 25960 13.51 20.53 10.97 32 TR_DCC_Bayes_99 25397 6.96 20.08 2.22 33 UNTRUSTED_Relay 23603 6.11 18.67 1.57 34 BOTNET 22905 5.79 18.11 1.33 35 XM_UncommonTLD01 19063 6.73 15.08 3.71 36 XM_Multi_Part_URI 18948 11.77 14.98 10.61 37 BOTNET_IPINHOSTNAME 18750 7.00 14.83 4.17 38 LOTS_OF_MONEY 17332 8.66 13.71 6.83 39 XM_B_Unsub 15848 10.53 12.53 9.80 40 UNPARSEABLE_RELAY 15457 9.33 12.22 8.28 41 TR_XM_SpammyRelay 15236 4.29 12.05 1.49 42 TR_XM_UnparsRelay 15107 7.63 11.95 6.07 43 XM_B_SpammyWords3 14681 5.97 11.61 3.93 44 TR_XM_SpammyWords4 14542 6.05 11.50 4.08 45 RCVD_IN_MSPIKE_H3 14460 13.25 11.43 13.91 46 HTML_IMAGE_RATIO_02 13712 7.56 10.84 6.38 47 XMSexyCombo_05 13308 5.12 10.52 3.17 48 XM_UB50 12416 3.35 9.82 1.01 49 SpammyFromTLD_02 12061 2.75 9.54 0.29 50 XM_SendGrid 11747 7.89 9.29 7.39 51 TR_XM_SpammyWords2 11694 3.14 9.25 0.93 52 XM_Evil_Numbers_Gen 11591 8.15 9.17 7.79 53 RCVD_IN_MSPIKE_H4 11560 12.10 9.14 13.17 54 HTML_MIME_NO_HTML_TAG 11186 3.99 8.85 2.23 55 TR_XM_PhishingBody 11016 4.93 8.71 3.56 56 T_REMOTE_IMAGE 10806 5.33 8.55 4.17 57 MPART_ALT_DIFF 9694 5.74 7.67 5.05 58 XMSubMetaSx_00 9385 4.67 7.42 3.67 59 KHOP_HELO_FCRDNS 9345 3.45 7.39 2.02 60 BAYES_80 9286 4.84 7.34 3.94 61 BAYES_60 9270 8.05 7.33 8.31 62 T_HTML_TAG_BALANCE_CENTER 8821 1.90 6.98 0.06 63 RCVD_IN_BL_SPAMCOP_NET 8787 2.27 6.95 0.58 64 LotsOfNums_01 8673 8.24 6.86 8.73 65 HTML_IMAGE_ONLY_08 8667 1.91 6.85 0.13 66 GOOG_STO_IMG_HTML 8488 1.78 6.71 0.00 67 XM_B_Phish_Phrases 7831 4.28 6.19 3.59 68 BODY_URI_ONLY 7618 1.61 6.02 0.02 69 XM_B_Phish66 7281 3.30 5.76 2.41 70 MIXED_CENTER_CASE 7168 1.51 5.67 0.00 71 MIXED_HREF_CASE 7164 1.50 5.67 0.00 72 MIXED_AREA_CASE 7158 1.50 5.66 0.00 73 MIXED_IMG_CASE 7158 1.51 5.66 0.00 74 XMNumbers 7134 3.82 5.64 3.17 75 XM_H_Long_From01 6952 4.82 5.50 4.58 76 MIME_HTML_MOSTLY 6922 3.19 5.47 2.36 77 TR_XM_DK_SendGrid 6838 4.58 5.41 4.28 78 MIXED_FONT_CASE 6756 1.42 5.34 0.00 79 TooManyTo_001 6649 8.11 5.26 9.14 80 HTML_FONT_SIZE_LARGE 6550 1.46 5.18 0.12 81 DKIM_INVALID 6485 4.08 5.13 3.69 82 XM_SPF_SoftFail 6261 2.93 4.95 2.20 83 XM_B_Investor 6104 2.36 4.83 1.47 84 MIXED_CTYPE_CASE 6018 1.27 4.76 0.00 85 TR_XM_SPAMCOP 5694 1.36 4.50 0.23 86 RELAYCOUNTRY_CA 5521 1.82 4.37 0.91 87 RCVD_IN_PSBL 5477 1.24 4.33 0.13 88 XM_B_SpammyTLD 5215 2.50 4.12 1.91 89 HTML_IMAGE_RATIO_04 5194 4.94 4.11 5.24 90 BAYES_95 4987 2.82 3.94 2.41 91 MIME_QP_LONG_LINE 4981 5.19 3.94 5.64 92 SpammyFromTLD_01 4705 1.62 3.72 0.86 93 RCVD_IN_RP_RNBL 4576 1.02 3.62 0.09 94 XM_DrugUnitList 4549 0.96 3.60 0.00 95 ALIBABA_IMG_NOT_RCVD_ALI 4549 0.96 3.60 0.00 96 HOSTED_IMG_DIRECT_MX 4522 0.95 3.58 0.00 97 TM2_M_URI_OPT_OUT 4351 3.15 3.44 3.05 98 XMStrtUSub 4336 4.12 3.43 4.37 99 TR_XM_SpammyWords5 4299 1.96 3.40 1.44 100 BAYES_40 4228 4.80 3.34 5.32 101 HTML_IMAGE_RATIO_06 4156 3.10 3.29 3.03 102 MIME_HTML_ONLY_MULTI 4052 3.32 3.20 3.36 103 XM_OfRef6 3967 1.54 3.14 0.97 104 URIBL_DBL_SPAM 3910 0.84 3.09 0.02 105 RCVD_IN_MSPIKE_BL 3858 0.84 3.05 0.05 106 T_TooManySym_01 3785 5.42 2.99 6.30 107 RELAYCOUNTRY_AZ 3779 0.79 2.99 0.00 108 RCVD_IN_RP_SAFE 3766 5.67 2.98 6.65 109 TR_XM_PHPDW 3717 1.10 2.94 0.43 110 T_XMDrugObfuBody_08 3717 1.83 2.94 1.43 111 URI_NOVOWEL 3708 2.82 2.93 2.78 112 TR_XM_PHPForged 3589 1.04 2.84 0.39 113 TR_XM_FormFill2 3554 1.03 2.81 0.39 114 TR_XM_MSPIKECOMBO 3550 0.77 2.81 0.04 115 XM_H_PHPOS 3535 1.02 2.80 0.38 116 T_XMDrugObfuBody_14 3425 2.40 2.71 2.28 117 RCVD_IN_MSPIKE_L3 3391 0.74 2.68 0.04 118 XM_DIRTYINTL 3271 0.89 2.59 0.28 119 BOTNET_NORDNS 3267 0.69 2.58 0.01 120 XM_B_Unsub2 3265 1.90 2.58 1.65 121 XM_B_COVIDMETA 3242 1.15 2.56 0.64 122 XMSexyCombo_01 3085 1.38 2.44 1.00 123 WANT_TO_ORDER 2983 0.63 2.36 0.00 124 BAYES_00 2867 10.15 2.27 12.99 125 RCVD_IN_RP_CERTIFIED 2769 4.91 2.19 5.90 126 TM2_M_VERY_LONG_WORD 2762 1.32 2.18 1.01 127 RELAYCOUNTRY_IN 2758 0.65 2.18 0.09 128 BAYES_20 2746 3.57 2.17 4.07 129 XMNoVowels 2721 2.18 2.15 2.19 130 XMDiploma_00 2707 1.55 2.14 1.33 131 TR_XM_SB_Phish 2703 2.02 2.14 1.98 132 RCVD_IN_IADB_LISTED 2678 4.20 2.12 4.95 133 T_XMHurry_00 2651 0.93 2.10 0.51 134 XMSubPhish11 2615 1.97 2.07 1.94 135 TR_XM_NoHeaderRelay 2597 0.71 2.05 0.22 136 HTML_IMAGE_RATIO_08 2594 2.23 2.05 2.30 137 TR_LOTS_OF_MONEY3 2573 0.77 2.03 0.32 138 HTML_FONT_SIZE_HUGE 2564 0.57 2.03 0.04 139 XM_B_SpammyWords4 2494 0.84 1.97 0.44 140 MAILING_LIST_MULTI 2483 3.03 1.96 3.42 141 XM_DK_Undo_01 2468 1.72 1.95 1.64 142 TR_XM_SpammyWords3 2446 0.53 1.93 0.02 143 XM_CamelCaseFrm001 2423 1.80 1.92 1.76 144 RCVD_IN_IADB_SPF 2380 3.70 1.88 4.35 145 ALL_TRUSTED 2353 12.89 1.86 16.88 146 XM_UB60 2341 0.56 1.85 0.10 147 XM_URI_RBL 2332 0.56 1.84 0.09 148 FROM_EXCESS_BASE64 2317 2.21 1.83 2.35 149 SUBJ_ALL_CAPS 2313 1.94 1.83 1.98 150 RELAYCOUNTRY_NL 2276 0.61 1.80 0.18 151 RCVD_IN_IADB_DK 2249 3.27 1.78 3.81 152 XMBody_17 2198 0.75 1.74 0.39 153 XMStockSpam_06 2192 1.21 1.73 1.02 154 RCVD_IN_IADB_SENDERID 2182 3.34 1.73 3.93 155 XMBrknScrpt_02 2146 1.21 1.70 1.04 156 PDS_OTHER_BAD_TLD 2128 0.66 1.68 0.29 157 TR_XM_COVIDMETA1 2123 0.86 1.68 0.57 158 JH_SPAMMY_HEADERS 2103 0.44 1.66 0.00 159 URI_HEX 2100 1.26 1.66 1.11 160 URI_TRY_3LD 2022 1.21 1.60 1.06 161 RELAYCOUNTRY_DE 1939 0.70 1.53 0.40 162 URIBL_BLACK 1897 0.41 1.50 0.02 163 XM_UB99 1873 0.39 1.48 0.00 164 XM_H_PHPMailer 1850 0.90 1.46 0.70 165 DATE_IN_PAST_03_06 1829 0.61 1.45 0.31 166 TR_Symld_Words 1813 1.59 1.43 1.65 167 XMMoneyMeta_00 1802 0.74 1.43 0.50 168 DIET_1 1777 0.75 1.41 0.51 169 HTML_FONT_FACE_BAD 1709 1.20 1.35 1.15 170 XMHTML_After_End 1690 0.90 1.34 0.75 171 T_FILL_THIS_FORM_SHORT 1680 1.00 1.33 0.88 172 DATE_IN_PAST_06_12 1602 0.43 1.27 0.13 173 TR_XM_COVIDMETA4 1596 0.56 1.26 0.31 174 T_Symld_Words_02 1586 0.66 1.25 0.45 175 XM_UB80 1562 0.35 1.24 0.03 176 XMBdyGiftCard01 1552 0.76 1.23 0.60 177 XMGenDplmaNmb 1529 0.81 1.21 0.67 178 RCVD_IN_VALIDITY_RPBL 1511 0.34 1.19 0.03 179 XM_Body_Dirty_Words_01 1505 0.41 1.19 0.13 180 BAYES_05 1499 2.22 1.19 2.59 181 RELAYCOUNTRY_FR 1476 0.53 1.17 0.30 182 XMSexyCombo_04 1470 0.68 1.16 0.51 183 TR_XM_INV_DKIM 1468 0.41 1.16 0.14 184 RELAYCOUNTRY_GB 1456 1.00 1.15 0.94 185 XM_PDF 1452 4.62 1.15 5.88 186 T_XMDrugObfuBody_00 1452 0.91 1.15 0.82 187 TR_BOTNET_NEGATE 1438 0.46 1.14 0.21 188 RELAYCOUNTRY_UA 1405 0.30 1.11 0.01 189 XM_ProductURIs 1397 1.02 1.10 0.99 190 XMSubMetaI_00 1394 0.85 1.10 0.76 191 XMPhish30 1377 0.66 1.09 0.50 192 XM_H_Undi_Recip 1370 0.43 1.08 0.19 193 HTTPS_HTTP_MISMATCH 1365 0.85 1.08 0.77 194 TO_NO_BRKTS_PCNT 1344 0.28 1.06 0.00 195 RELAYCOUNTRY_AU 1302 0.46 1.03 0.25 196 XM_UB999 1301 0.27 1.03 0.00 197 HK_RANDOM_REPLYTO 1293 0.36 1.02 0.12 198 XM_Attn_01 1276 0.30 1.01 0.05 199 XM_H_PHPOS_M 1255 0.34 0.99 0.10 200 DEAR_BENEFICIARY 1253 0.26 0.99 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 301338 88.65 95.66 86.12 2 RELAYCOUNTRY_US 280996 78.70 74.25 80.31 3 DKIM_SIGNED 248768 72.69 77.08 71.10 4 XM_DK_Pass 243635 70.82 74.10 69.63 5 XM_B_Unicode 239165 69.34 72.06 68.35 6 DKIM_VALID 235840 68.61 71.96 67.40 7 DCC_CHECK_NEGATIVE 221012 52.23 21.98 63.16 8 BAYES_50 189514 51.91 45.67 54.16 9 DKIM_VALID_AU 175305 50.79 52.70 50.10 10 XMListUnsubscribeExists 153441 48.63 61.84 43.85 11 XM_B_SpammyWords 144419 47.42 64.44 41.27 12 XM_B_Unicode3 137463 39.46 39.96 39.29 13 DCC_CHECK 128744 47.73 77.97 36.79 14 T_TM2_M_HEADER_IN_MSG 111425 29.55 23.21 31.84 15 RCVD_IN_MSPIKE_WL 102576 27.13 21.09 29.32 16 DKIM_VALID_EF 94240 27.32 28.38 26.93 17 HTML_FONT_LOW_CONTRAST 91227 27.45 31.27 26.07 18 FVGT_m_MULTI_ODD 79837 23.44 25.16 22.82 19 LOC_TINY_FONT_1 75579 24.50 32.51 21.60 20 XMSubLong 73691 21.57 22.96 21.06 21 RCVD_IN_MSPIKE_H2 73499 21.01 21.03 21.01 22 MIME_HTML_ONLY 70318 24.75 37.64 20.10 23 XM_B_SpammyWords2 61192 22.00 34.50 17.49 24 T_KAM_HTML_FONT_INVALID 60738 20.17 27.95 17.36 25 ALL_TRUSTED 59061 12.89 1.86 16.88 26 RCVD_IN_MSPIKE_H3 48656 13.25 11.43 13.91 27 RCVD_IN_MSPIKE_H4 46075 12.10 9.14 13.17 28 BAYES_00 45466 10.15 2.27 12.99 29 USER_IN_DEF_DKIM_WL 39112 8.47 0.98 11.18 30 XM_Body_Dirty_Words 38373 13.51 20.53 10.97 31 XM_Multi_Part_URI 37120 11.77 14.98 10.61 32 XM_B_Unsub 34308 10.53 12.53 9.80 33 TooManyTo_001 31994 8.11 5.26 9.14 34 LotsOfNums_01 30562 8.24 6.86 8.73 35 BAYES_60 29067 8.05 7.33 8.31 36 UNPARSEABLE_RELAY 28982 9.33 12.22 8.28 37 XM_Evil_Numbers_Gen 27244 8.15 9.17 7.79 38 TR_XM_DK_Bayes 26722 5.81 0.76 7.64 39 FSL_BULK_SIG 26080 11.18 21.51 7.45 40 XM_DKIMWhitelistDomains 25969 5.54 0.35 7.42 41 XM_SendGrid 25842 7.89 9.29 7.39 42 TR_XM_DK_Bayes1 25798 5.61 0.74 7.37 43 LOTS_OF_MONEY 23901 8.66 13.71 6.83 44 RCVD_IN_RP_SAFE 23257 5.67 2.98 6.65 45 HTML_IMAGE_RATIO_02 22316 7.56 10.84 6.38 46 XM_DK_Undo_02 22078 14.60 37.55 6.31 47 T_TooManySym_01 22028 5.42 2.99 6.30 48 BAYES_99 21671 11.65 26.74 6.19 49 TR_XM_UnparsRelay 21251 7.63 11.95 6.07 50 TR_XM_DK_Bayes2 21197 4.60 0.56 6.06 51 RCVD_IN_RP_CERTIFIED 20629 4.91 2.19 5.90 52 XM_PDF 20575 4.62 1.15 5.88 53 MIME_QP_LONG_LINE 19736 5.19 3.94 5.64 54 BAYES_40 18619 4.80 3.34 5.32 55 BAYES_999 18451 9.37 20.72 5.27 56 HTML_IMAGE_RATIO_04 18344 4.94 4.11 5.24 57 MPART_ALT_DIFF 17671 5.74 7.67 5.05 58 RCVD_IN_IADB_LISTED 17335 4.20 2.12 4.95 59 TR_XM_DKIM_Undo 16695 11.43 29.84 4.77 60 XM_H_Trusted_IP 16147 3.39 0.00 4.61 61 XM_H_Long_From01 16013 4.82 5.50 4.58 62 XMStrtUSub 15301 4.12 3.43 4.37 63 RCVD_IN_IADB_SPF 15232 3.70 1.88 4.35 64 TR_XM_DK_SendGrid 14975 4.58 5.41 4.28 65 T_REMOTE_IMAGE 14596 5.33 8.55 4.17 66 BOTNET_IPINHOSTNAME 14578 7.00 14.83 4.17 67 RELAYCOUNTRY_META 14477 9.38 23.89 4.14 68 TR_XM_SpammyWords4 14273 6.05 11.50 4.08 69 BAYES_20 14253 3.57 2.17 4.07 70 BAYES_80 13790 4.84 7.34 3.94 71 XM_B_SpammyWords3 13757 5.97 11.61 3.93 72 RCVD_IN_IADB_SENDERID 13750 3.34 1.73 3.93 73 RCVD_IN_IADB_DK 13348 3.27 1.78 3.81 74 XM_UncommonTLD01 12986 6.73 15.08 3.71 75 DKIM_INVALID 12928 4.08 5.13 3.69 76 XMSubMetaSx_00 12854 4.67 7.42 3.67 77 XM_B_Phish_Phrases 12579 4.28 6.19 3.59 78 TR_XM_PhishingBody 12473 4.93 8.71 3.56 79 MAILING_LIST_MULTI 11973 3.03 1.96 3.42 80 MIME_HTML_ONLY_MULTI 11765 3.32 3.20 3.36 81 XMSexyCombo_05 11102 5.12 10.52 3.17 82 XMNumbers 11081 3.82 5.64 3.17 83 T_TooManySym_02 10877 2.45 0.61 3.11 84 TM2_M_URI_OPT_OUT 10655 3.15 3.44 3.05 85 HTML_IMAGE_RATIO_06 10603 3.10 3.29 3.03 86 RCVD_IN_IADB_VOUCHED 10222 2.40 0.94 2.92 87 ANY_BOUNCE_MESSAGE 9836 2.28 0.81 2.81 88 BOUNCE_MESSAGE 9828 2.28 0.81 2.81 89 RCVD_IN_VALIDITY_SAFE 9812 2.16 0.38 2.80 90 URI_NOVOWEL 9742 2.82 2.93 2.78 91 TooManyTo_002 9158 2.17 0.92 2.62 92 BAYES_05 9079 2.22 1.19 2.59 93 RCVD_IN_VALIDITY_CERTIFIED 8551 1.82 0.10 2.44 94 XM_B_Phish66 8440 3.30 5.76 2.41 95 BAYES_95 8430 2.82 3.94 2.41 96 MIME_HTML_MOSTLY 8256 3.19 5.47 2.36 97 FROM_EXCESS_BASE64 8230 2.21 1.83 2.35 98 HTML_IMAGE_RATIO_08 8052 2.23 2.05 2.30 99 T_XMDrugObfuBody_14 7987 2.40 2.71 2.28 100 RCVD_IN_MSPIKE_H5 7845 1.78 0.52 2.24 101 HTML_MIME_NO_HTML_TAG 7815 3.99 8.85 2.23 102 TR_DCC_Bayes_99 7771 6.96 20.08 2.22 103 XM_SPF_SoftFail 7705 2.93 4.95 2.20 104 XMNoVowels 7663 2.18 2.15 2.19 105 XMSubNoVowel 7477 1.75 0.66 2.14 106 KHOP_HELO_FCRDNS 7075 3.45 7.39 2.02 107 HELO_NODOT 7061 1.71 0.84 2.02 108 HELO_NO_DOMAIN 7056 1.70 0.84 2.02 109 INVALID_MSGID 7053 1.53 0.19 2.02 110 TR_XM_SB_Phish 6926 2.02 2.14 1.98 111 SUBJ_ALL_CAPS 6924 1.94 1.83 1.98 112 IN_HORDE_ADDRESS_BOOK 6835 1.46 0.10 1.95 113 XMSubPhish11 6783 1.97 2.07 1.94 114 RCVD_IN_IADB_OPTIN 6733 1.59 0.65 1.92 115 XM_B_SpammyTLD 6690 2.50 4.12 1.91 116 TooManyTo_003 6177 1.48 0.69 1.77 117 TVD_RCVD_IP 6168 1.39 0.34 1.76 118 XM_CamelCaseFrm001 6163 1.80 1.92 1.76 119 MSGID_NOFQDN1 6140 1.30 0.05 1.75 120 TO_MALFORMED 6085 1.28 0.02 1.74 121 XM_B_Unsub2 5765 1.90 2.58 1.65 122 TR_Symld_Words 5765 1.59 1.43 1.65 123 XM_DK_Undo_01 5721 1.72 1.95 1.64 124 UNTRUSTED_Relay 5488 6.11 18.67 1.57 125 TR_XM_SpammyRelay 5199 4.29 12.05 1.49 126 XM_B_Investor 5134 2.36 4.83 1.47 127 XMCapTrack 5054 1.17 0.42 1.44 128 TR_XM_SpammyWords5 5051 1.96 3.40 1.44 129 T_XMDrugObfuBody_08 5019 1.83 2.94 1.43 130 BOTNET 4667 5.79 18.11 1.33 131 XMDiploma_00 4657 1.55 2.14 1.33 132 XM_GoogleGroups 4531 1.15 0.75 1.29 133 TooManyTo_004 4396 1.07 0.55 1.26 134 XMGappySubj_01 4227 0.92 0.12 1.21 135 HTML_FONT_FACE_BAD 4011 1.20 1.35 1.15 136 URI_HEX 3892 1.26 1.66 1.11 137 URI_TRY_3LD 3723 1.21 1.60 1.06 138 XMBrknScrpt_02 3639 1.21 1.70 1.04 139 XMStockSpam_06 3570 1.21 1.73 1.02 140 XM_UB50 3551 3.35 9.82 1.01 141 TooManyTo_005 3535 0.87 0.47 1.01 142 XMBSHREFv2 3526 0.83 0.34 1.01 143 TM2_M_VERY_LONG_WORD 3517 1.32 2.18 1.01 144 XMSexyCombo_01 3502 1.38 2.44 1.00 145 DKIM_ADSP_CUSTOM_MED 3470 0.97 0.92 0.99 146 T_TooManySym_03 3452 0.77 0.18 0.99 147 XM_ProductURIs 3450 1.02 1.10 0.99 148 HELO_MISC_IP 3447 0.76 0.13 0.99 149 TVD_SPACE_RATIO_MINFP 3397 0.78 0.27 0.97 150 XM_H_Long_From02 3396 0.92 0.79 0.97 151 XM_OfRef6 3392 1.54 3.14 0.97 152 RELAYCOUNTRY_GB 3289 1.00 1.15 0.94 153 TR_XM_SpammyWords2 3267 3.14 9.25 0.93 154 IN_ZIMBRA_NJ_WHITELIST 3242 0.68 0.01 0.93 155 RELAYCOUNTRY_CA 3170 1.82 4.37 0.91 156 HTML_IMAGE_ONLY_20 3118 0.75 0.35 0.89 157 T_FILL_THIS_FORM_SHORT 3082 1.00 1.33 0.88 158 XM_E_Blogspot 3017 0.65 0.07 0.86 159 SpammyFromTLD_01 3011 1.62 3.72 0.86 160 XMSubMetaSxObfu_03 2895 0.86 0.95 0.83 161 T_XMDrugObfuBody_00 2877 0.91 1.15 0.82 162 TR_MetaPhish_Combo_01 2843 0.84 0.90 0.81 163 XMBody_95 2771 0.63 0.18 0.79 164 HTTPS_HTTP_MISMATCH 2695 0.85 1.08 0.77 165 MPART_ALT_DIFF_COUNT 2675 0.80 0.90 0.76 166 XMSubMetaI_00 2647 0.85 1.10 0.76 167 XMHTML_After_End 2618 0.90 1.34 0.75 168 XM_H_PHPMailer 2446 0.90 1.46 0.70 169 XM_ShortIntro_01 2396 0.68 0.68 0.68 170 NML_ADSP_CUSTOM_MED 2378 0.70 0.76 0.68 171 T_OBFU_PDF_ATTACH 2363 0.55 0.19 0.68 172 XMGenDplmaNmb 2332 0.81 1.21 0.67 173 BASE64_LENGTH_79_INF 2262 0.56 0.30 0.65 174 XM_B_COVIDMETA 2236 1.15 2.56 0.64 175 XMBdyGiftCard01 2084 0.76 1.23 0.60 176 RCVD_IN_SORBS_DUL 2065 0.52 0.34 0.59 177 XM_RXBody 2050 0.56 0.47 0.59 178 RCVD_IN_BL_SPAMCOP_NET 2038 2.27 6.95 0.58 179 TR_XM_COVIDMETA1 1995 0.86 1.68 0.57 180 SHORT_HELO_AND_INLINE_IMAGE 1993 0.44 0.08 0.57 181 TVD_SPACE_RATIO 1992 0.48 0.24 0.57 182 TR_MSPIKEBAYES00 1888 0.41 0.05 0.54 183 XMSexyCombo_04 1789 0.68 1.16 0.51 184 T_XMHurry_00 1786 0.93 2.10 0.51 185 DIET_1 1781 0.75 1.41 0.51 186 HTML_IMAGE_ONLY_28 1765 0.48 0.42 0.50 187 XMPhish30 1749 0.66 1.09 0.50 188 FORGED_GMAIL_RCVD 1745 0.57 0.76 0.50 189 XMMoneyMeta_00 1744 0.74 1.43 0.50 190 XMLngstWrd_00 1739 0.45 0.31 0.50 191 HTML_IMAGE_ONLY_32 1734 0.46 0.36 0.50 192 TM2_M_BODY_EMPTY 1703 0.39 0.11 0.49 193 XMHTMLBadTable_001 1670 0.48 0.47 0.48 194 XM_B_COPY_HTML 1668 0.54 0.72 0.48 195 MISSING_HEADERS 1618 0.60 0.96 0.46 196 USER_IN_WHITELIST 1593 0.33 0.00 0.46 197 USER_IN_WELCOMELIST 1593 0.33 0.00 0.46 198 XMOemUri 1571 0.41 0.28 0.45 199 T_Symld_Words_02 1561 0.66 1.25 0.45 200 RDNS_DYNAMIC 1550 0.56 0.90 0.44 ----------------------------------------------------------------------