Email: 511110 Autolearn: 0 AvgScore: 3.47 AvgScanTime: 1.35 sec Spam: 167289 Autolearn: 0 AvgScore: 13.67 AvgScanTime: 1.48 sec Ham: 343821 Autolearn: 0 AvgScore: -1.49 AvgScanTime: 1.29 sec Time Spent Running SA: 192.17 hours Time Spent Processing Spam: 68.88 hours Time Spent Processing Ham: 123.29 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 159687 90.00 95.46 87.35 2 DKIM_SIGNED 146569 78.02 87.61 73.36 3 XM_DK_Pass 143266 76.29 85.64 71.74 4 DKIM_VALID 142174 75.42 84.99 70.77 5 RELAYCOUNTRY_US 138963 81.68 83.07 81.01 6 XM_B_Unicode 134955 73.13 80.67 69.46 7 XMListUnsubscribeExists 114346 54.52 68.35 47.78 8 XM_B_SpammyWords 113207 50.81 67.67 42.61 9 DCC_CHECK 112814 42.75 67.44 30.74 10 DKIM_VALID_AU 104807 57.13 62.65 54.45 11 RCVD_IN_MSPIKE_H2 82950 41.67 49.58 37.82 12 BAYES_50 72668 51.79 43.44 55.85 13 XM_B_Unicode3 70866 40.99 42.36 40.32 14 XM_DK_Undo_02 68668 17.84 41.05 6.55 15 XM_B_SpammyWords2 64337 24.19 38.46 17.24 16 LOC_TINY_FONT_1 61997 26.65 37.06 21.59 17 FVGT_m_MULTI_ODD 57669 26.87 34.47 23.17 18 HTML_FONT_LOW_CONTRAST 54527 28.21 32.59 26.08 19 DCC_CHECK_NEGATIVE 54440 57.21 32.54 69.21 20 BAYES_99 54188 14.55 32.39 5.86 21 TR_XM_DKIM_Undo 52848 13.34 31.59 4.47 22 DKIM_VALID_EF 52301 29.02 31.26 27.93 23 MIME_HTML_ONLY 52118 24.40 31.15 21.11 24 T_KAM_HTML_FONT_INVALID 51581 23.56 30.83 20.03 25 BAYES_999 42499 11.54 25.40 4.80 26 XMSubLong 39048 22.14 23.34 21.55 27 TR_DCC_Bayes_99 35685 8.14 21.33 1.72 28 T_TM2_M_HEADER_IN_MSG 35499 26.49 21.22 29.06 29 XM_Body_Dirty_Words 34908 13.69 20.87 10.19 30 XM_Multi_Part_URI 30987 14.29 18.52 12.23 31 RELAYCOUNTRY_META 30453 8.57 18.20 3.88 32 XM_B_Unsub 25254 11.08 15.10 9.13 33 TR_XM_BayesUnsub 24616 9.58 14.71 7.09 34 BOTNET_IPINHOSTNAME 24053 8.00 14.38 4.90 35 LOTS_OF_MONEY 23000 9.83 13.75 7.92 36 XM_B_SpammyWords3 21697 6.98 12.97 4.06 37 FSL_BULK_SIG 21396 6.81 12.79 3.90 38 UNPARSEABLE_RELAY 20473 9.59 12.24 8.30 39 TR_XM_UnparsRelay 20008 8.30 11.96 6.52 40 RCVD_IN_MSPIKE_WL 19846 15.67 11.86 17.53 41 TR_XM_SpammyWords4 19391 7.04 11.59 4.83 42 TR_XM_SpammyWords2 17881 4.14 10.69 0.96 43 BOTNET 17770 4.46 10.62 1.46 44 TR_XM_SpammyRelay 17193 4.52 10.28 1.72 45 RCVD_IN_BL_SPAMCOP_NET 17030 3.65 10.18 0.48 46 XMSexyCombo_05 15546 5.01 9.29 2.93 47 RCVD_IN_MSPIKE_H3 14670 10.91 8.77 11.95 48 XM_Evil_Numbers_Gen 14246 8.28 8.52 8.17 49 UNTRUSTED_Relay 13971 3.55 8.35 1.21 50 MPART_ALT_DIFF 13575 6.55 8.11 5.79 51 BAYES_80 13546 5.40 8.10 4.09 52 LotsOfNums_01 13150 8.56 7.86 8.90 53 XM_UncommonTLD01 12476 5.24 7.46 4.16 54 BAYES_60 11944 8.38 7.14 8.98 55 XMSubMetaSx_00 11870 4.79 7.10 3.67 56 XM_H_Long_From01 11709 5.84 7.00 5.28 57 HTML_IMAGE_RATIO_02 11288 6.17 6.75 5.89 58 XM_SendGrid 11111 5.78 6.64 5.36 59 RELAYCOUNTRY_CA 10719 2.94 6.41 1.25 60 XM_B_Phish_Phrases 10594 4.43 6.33 3.50 61 TR_XM_SPAMCOP 10500 2.24 6.28 0.28 62 TR_XM_PhishingBody 9899 3.87 5.92 2.88 63 XM_B_Investor 9225 3.01 5.51 1.79 64 TM2_M_VERY_LONG_WORD 8752 3.03 5.23 1.96 65 MIME_HTML_ONLY_MULTI 8628 4.34 5.16 3.94 66 BAYES_95 8036 3.38 4.80 2.68 67 XM_B_SpammyTLD 7954 3.00 4.75 2.15 68 XM_SPF_SoftFail 7866 3.23 4.70 2.51 69 HTML_MIME_NO_HTML_TAG 7774 3.43 4.65 2.84 70 HTML_IMAGE_RATIO_04 7603 4.97 4.54 5.18 71 TooManyTo_001 7399 7.08 4.42 8.38 72 RCVD_IN_MSPIKE_BL 7268 2.41 4.34 1.47 73 TR_XM_MSPIKECOMBO 6984 2.35 4.17 1.46 74 TR_XM_DK_SendGrid 6841 3.52 4.09 3.24 75 T_XMDrugObfuBody_14 6819 2.53 4.08 1.77 76 XM_UB50 6745 1.84 4.03 0.78 77 MIME_QP_LONG_LINE 6689 5.00 4.00 5.48 78 XMNumbers 6600 3.46 3.95 3.23 79 XM_CamelCaseFrm001 6516 2.51 3.90 1.83 80 T_REMOTE_IMAGE 6430 4.23 3.84 4.41 81 XM_B_Phish66 6130 2.37 3.66 1.74 82 HTML_IMAGE_RATIO_06 6125 3.63 3.66 3.61 83 TR_XM_SpammyWords5 6010 2.18 3.59 1.49 84 XMStrtUSub 5950 4.69 3.56 5.24 85 MIME_HTML_MOSTLY 5800 2.56 3.47 2.12 86 T_XMDrugObfuBody_08 5476 2.17 3.27 1.64 87 XMDiploma_00 5423 2.20 3.24 1.69 88 XM_OfRef6 5410 1.91 3.23 1.27 89 URIBL_DBL_SPAM 5379 1.07 3.22 0.02 90 XMLngstWrd_00 5264 1.94 3.15 1.36 91 XMLngstWrd_01 5208 1.88 3.11 1.28 92 XMLngstWrd_02 5089 1.79 3.04 1.18 93 RCVD_IN_IADB_LISTED 5085 4.93 3.04 5.85 94 URI_NOVOWEL 4951 2.99 2.96 3.01 95 SpammyFromTLD_01 4901 1.48 2.93 0.78 96 RCVD_IN_VALIDITY_RPBL 4870 0.99 2.91 0.06 97 RCVD_IN_VALIDITY_SAFE 4842 4.10 2.89 4.69 98 XM_GoogleGroups 4793 2.34 2.87 2.09 99 RCVD_IN_MSPIKE_H4 4759 4.12 2.84 4.73 100 XM_B_SpammyWords4 4662 1.27 2.79 0.53 101 KHOP_HELO_FCRDNS 4617 2.09 2.76 1.76 102 XMLngstWrd_03 4525 1.62 2.70 1.09 103 TM2_M_URI_OPT_OUT 4481 2.61 2.68 2.58 104 HTML_TITLE_SUBJ_DIFF 4454 1.41 2.66 0.81 105 XM_DIRTYINTL 4419 1.09 2.64 0.34 106 DKIM_INVALID 4395 2.60 2.63 2.59 107 XMLngstWrd_04 4343 1.52 2.60 1.00 108 RCVD_IN_IADB_SPF 4325 4.32 2.59 5.16 109 BOTNET_NORDNS 4315 0.85 2.58 0.01 110 USER_IN_DEF_DKIM_WL 4185 9.24 2.50 12.52 111 T_TooManySym_01 4145 4.62 2.48 5.65 112 HTML_IMAGE_RATIO_08 4137 2.49 2.47 2.49 113 XM_DK_Undo_01 4035 1.89 2.41 1.64 114 RCVD_IN_IADB_DK 4007 3.77 2.40 4.44 115 UPPERCASE_75_100 3973 1.30 2.37 0.78 116 RCVD_IN_IADB_SENDERID 3954 3.86 2.36 4.59 117 XM_B_Unsub2 3915 1.92 2.34 1.71 118 PDS_OTHER_BAD_TLD 3859 0.86 2.31 0.15 119 RCVD_IN_VALIDITY_CERTIFIED 3697 3.46 2.21 4.07 120 XMBody_17 3665 0.94 2.19 0.34 121 URI_PHP_REDIR 3664 0.72 2.19 0.00 122 TR_XM_SpammyWords3 3618 1.07 2.16 0.54 123 TR_XM_MSPIKECOMBO2 3588 0.90 2.14 0.30 124 SpammyFromTLD_02 3543 0.95 2.12 0.39 125 XM_H_Undi_Recip 3470 0.84 2.07 0.23 126 SUBJ_ALL_CAPS 3349 2.17 2.00 2.25 127 URI_HEX 3291 1.40 1.97 1.12 128 ALL_TRUSTED 3254 11.60 1.95 16.30 129 TR_XM_PHPDW 3178 0.82 1.90 0.30 130 FROM_EXCESS_BASE64 3172 2.20 1.90 2.35 131 TR_XM_PHPForged 3160 0.80 1.89 0.26 132 HK_RANDOM_REPLYTO 3114 0.70 1.86 0.13 133 TR_XM_FormFill2 3101 0.77 1.85 0.25 134 T_XMDrugObfuBody_00 3084 1.02 1.84 0.62 135 XM_H_PHPOS 3079 0.76 1.84 0.24 136 TR_XM_SB_Phish 3009 1.91 1.80 1.96 137 MAILING_LIST_MULTI 3007 2.34 1.80 2.61 138 XMGenDplmaNmb 2933 1.20 1.75 0.93 139 XMSubPhish11 2848 1.86 1.70 1.94 140 T_FILL_THIS_FORM_SHORT 2829 1.26 1.69 1.05 141 XMSexyCombo_01 2798 0.83 1.67 0.43 142 BAYES_40 2794 3.94 1.67 5.05 143 XM_UB99 2725 0.53 1.63 0.00 144 RCVD_IN_MSPIKE_L3 2703 1.08 1.62 0.82 145 XM_B_COVIDMETA 2636 0.85 1.58 0.50 146 RCVD_IN_IADB_VOUCHED 2597 2.95 1.55 3.63 147 XMStockSpam_06 2588 1.11 1.55 0.89 148 T_XMHurry_00 2555 0.82 1.53 0.48 149 HTTPS_HTTP_MISMATCH 2544 0.94 1.52 0.66 150 XM_B_DynamicLink 2534 0.52 1.51 0.03 151 TR_LOTS_OF_MONEY3 2512 0.72 1.50 0.35 152 RCVD_IN_PSBL 2390 0.54 1.43 0.10 153 HTML_TAG_BALANCE_BODY 2386 0.96 1.43 0.73 154 XMBrknScrpt_02 2379 0.86 1.42 0.59 155 RCVD_IN_MSPIKE_L5 2275 0.45 1.36 0.01 156 TR_XM_NoHeaderRelay 2268 0.52 1.36 0.12 157 URIBL_BLACK 2246 0.48 1.34 0.06 158 XM_H_Long_From02 2237 1.30 1.34 1.28 159 RELAYCOUNTRY_DE 2230 0.63 1.33 0.29 160 XM_URI_RBL 2215 0.51 1.32 0.12 161 XMReplyNow 2205 0.60 1.32 0.25 162 TR_Symld_Words 2157 1.40 1.29 1.45 163 XMHTML_After_End 2153 0.91 1.29 0.72 164 SHOPIFY_IMG_NOT_RCVD_SFY 2112 0.52 1.26 0.16 165 XMBdyGiftCard01 2072 0.83 1.24 0.63 166 XM_UB999 2031 0.40 1.21 0.00 167 RELAYCOUNTRY_AU 2011 0.60 1.20 0.30 168 RCVD_IN_MSPIKE_L4 2006 0.82 1.20 0.63 169 BAYES_20 1954 3.00 1.17 3.88 170 PLING_QUERY 1943 0.55 1.16 0.26 171 XMSubMetaSxObfu_03 1914 0.68 1.14 0.45 172 HTML_IMAGE_ONLY_20 1904 0.89 1.14 0.77 173 XM_B_SEO 1902 0.48 1.14 0.16 174 DIET_1 1885 0.71 1.13 0.51 175 URI_TRY_3LD 1870 0.71 1.12 0.51 176 TR_XM_COVIDMETA1 1845 0.48 1.10 0.17 177 RELAYCOUNTRY_RU 1825 0.38 1.09 0.03 178 TR_XM_Base64_M1 1818 1.06 1.09 1.05 179 HTML_TAG_BALANCE_CENTER 1817 0.42 1.09 0.10 180 XMSubNoVowel 1765 0.98 1.06 0.95 181 TR_XM_SEO4 1708 0.40 1.02 0.09 182 HTML_SHORT_LINK_IMG_3 1699 0.39 1.02 0.08 183 MPART_ALT_DIFF_COUNT 1697 0.78 1.01 0.66 184 DATE_IN_PAST_03_06 1646 0.56 0.98 0.35 185 TR_XM_COVIDMETA4 1595 0.46 0.95 0.22 186 TR_XM_BayesRelay 1579 0.31 0.94 0.00 187 XMPhish30 1567 0.69 0.94 0.57 188 XM_H_PHPOS_M 1560 0.36 0.93 0.08 189 RCVD_IN_IADB_OPTIN 1547 1.93 0.92 2.42 190 RELAYCOUNTRY_IN 1526 0.34 0.91 0.06 191 TR_XM_MaxSPIKE 1510 0.40 0.90 0.16 192 DKIM_ADSP_CUSTOM_MED 1491 0.94 0.89 0.96 193 MIXED_CENTER_CASE 1486 0.29 0.89 0.00 194 RELAYCOUNTRY_FR 1471 0.43 0.88 0.21 195 MIXED_HREF_CASE 1466 0.29 0.88 0.00 196 THIS_AD 1458 0.44 0.87 0.23 197 MIXED_IMG_CASE 1458 0.29 0.87 0.01 198 MIXED_AREA_CASE 1455 0.29 0.87 0.00 199 RDNS_DYNAMIC 1447 0.54 0.86 0.39 200 TM2_M_A_HREF_HREF 1440 0.75 0.86 0.69 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 300327 90.00 95.46 87.35 2 RELAYCOUNTRY_US 278526 81.68 83.07 81.01 3 DKIM_SIGNED 252211 78.02 87.61 73.36 4 XM_DK_Pass 246658 76.29 85.64 71.74 5 DKIM_VALID 243321 75.42 84.99 70.77 6 XM_B_Unicode 238821 73.13 80.67 69.46 7 DCC_CHECK_NEGATIVE 237952 57.21 32.54 69.21 8 BAYES_50 192038 51.79 43.44 55.85 9 DKIM_VALID_AU 187199 57.13 62.65 54.45 10 XMListUnsubscribeExists 164290 54.52 68.35 47.78 11 XM_B_SpammyWords 146503 50.81 67.67 42.61 12 XM_B_Unicode3 138638 40.99 42.36 40.32 13 RCVD_IN_MSPIKE_H2 130023 41.67 49.58 37.82 14 DCC_CHECK 105701 42.75 67.44 30.74 15 T_TM2_M_HEADER_IN_MSG 99910 26.49 21.22 29.06 16 DKIM_VALID_EF 96013 29.02 31.26 27.93 17 HTML_FONT_LOW_CONTRAST 89661 28.21 32.59 26.08 18 FVGT_m_MULTI_ODD 79675 26.87 34.47 23.17 19 LOC_TINY_FONT_1 74232 26.65 37.06 21.59 20 XMSubLong 74091 22.14 23.34 21.55 21 MIME_HTML_ONLY 72578 24.40 31.15 21.11 22 T_KAM_HTML_FONT_INVALID 68860 23.56 30.83 20.03 23 RCVD_IN_MSPIKE_WL 60258 15.67 11.86 17.53 24 XM_B_SpammyWords2 59283 24.19 38.46 17.24 25 ALL_TRUSTED 56053 11.60 1.95 16.30 26 USER_IN_DEF_DKIM_WL 43048 9.24 2.50 12.52 27 XM_Multi_Part_URI 42065 14.29 18.52 12.23 28 RCVD_IN_MSPIKE_H3 41072 10.91 8.77 11.95 29 BAYES_00 38095 7.69 0.72 11.08 30 XM_Body_Dirty_Words 35049 13.69 20.87 10.19 31 XM_B_Unsub 31390 11.08 15.10 9.13 32 XM_DKIMWhitelistDomains 31316 6.16 0.09 9.11 33 BAYES_60 30863 8.38 7.14 8.98 34 LotsOfNums_01 30585 8.56 7.86 8.90 35 TooManyTo_001 28803 7.08 4.42 8.38 36 UNPARSEABLE_RELAY 28528 9.59 12.24 8.30 37 XM_Evil_Numbers_Gen 28096 8.28 8.52 8.17 38 LOTS_OF_MONEY 27224 9.83 13.75 7.92 39 IN_ZIMBRA_NJ_WHITELIST 24990 4.93 0.12 7.27 40 TR_XM_BayesUnsub 24366 9.58 14.71 7.09 41 TR_XM_DK_Bayes 22679 4.61 0.53 6.60 42 XM_DK_Undo_02 22525 17.84 41.05 6.55 43 TR_XM_UnparsRelay 22428 8.30 11.96 6.52 44 TR_XM_DK_Bayes1 22263 4.53 0.53 6.48 45 HTML_IMAGE_RATIO_02 20247 6.17 6.75 5.89 46 BAYES_99 20154 14.55 32.39 5.86 47 RCVD_IN_IADB_LISTED 20099 4.93 3.04 5.85 48 MPART_ALT_DIFF 19897 6.55 8.11 5.79 49 TR_XM_DK_Bayes2 19594 3.98 0.46 5.70 50 T_TooManySym_01 19443 4.62 2.48 5.65 51 MIME_QP_LONG_LINE 18854 5.00 4.00 5.48 52 XM_PDF 18609 3.91 0.82 5.41 53 XM_SendGrid 18421 5.78 6.64 5.36 54 XM_H_Long_From01 18140 5.84 7.00 5.28 55 XMStrtUSub 18000 4.69 3.56 5.24 56 HTML_IMAGE_RATIO_04 17817 4.97 4.54 5.18 57 RCVD_IN_IADB_SPF 17732 4.32 2.59 5.16 58 BAYES_40 17362 3.94 1.67 5.05 59 BOTNET_IPINHOSTNAME 16835 8.00 14.38 4.90 60 TR_XM_SpammyWords4 16591 7.04 11.59 4.83 61 BAYES_999 16495 11.54 25.40 4.80 62 RCVD_IN_MSPIKE_H4 16275 4.12 2.84 4.73 63 RCVD_IN_VALIDITY_SAFE 16131 4.10 2.89 4.69 64 RCVD_IN_IADB_SENDERID 15775 3.86 2.36 4.59 65 TR_XM_DKIM_Undo 15358 13.34 31.59 4.47 66 RCVD_IN_IADB_DK 15269 3.77 2.40 4.44 67 T_REMOTE_IMAGE 15169 4.23 3.84 4.41 68 XM_UncommonTLD01 14287 5.24 7.46 4.16 69 BAYES_80 14047 5.40 8.10 4.09 70 RCVD_IN_VALIDITY_CERTIFIED 14000 3.46 2.21 4.07 71 XM_B_SpammyWords3 13954 6.98 12.97 4.06 72 MIME_HTML_ONLY_MULTI 13547 4.34 5.16 3.94 73 FSL_BULK_SIG 13420 6.81 12.79 3.90 74 BAYES_20 13356 3.00 1.17 3.88 75 RELAYCOUNTRY_META 13327 8.57 18.20 3.88 76 XMSubMetaSx_00 12611 4.79 7.10 3.67 77 RCVD_IN_IADB_VOUCHED 12480 2.95 1.55 3.63 78 HTML_IMAGE_RATIO_06 12406 3.63 3.66 3.61 79 XM_B_Phish_Phrases 12031 4.43 6.33 3.50 80 XM_H_Trusted_IP 11814 2.31 0.00 3.44 81 TR_XM_DK_SendGrid 11141 3.52 4.09 3.24 82 XMNumbers 11095 3.46 3.95 3.23 83 T_TooManySym_02 11015 2.38 0.69 3.20 84 URI_NOVOWEL 10345 2.99 2.96 3.01 85 XMSexyCombo_05 10062 5.01 9.29 2.93 86 TR_XM_PhishingBody 9894 3.87 5.92 2.88 87 HTML_MIME_NO_HTML_TAG 9749 3.43 4.65 2.84 88 BAYES_95 9214 3.38 4.80 2.68 89 MAILING_LIST_MULTI 8970 2.34 1.80 2.61 90 DKIM_INVALID 8890 2.60 2.63 2.59 91 TM2_M_URI_OPT_OUT 8860 2.61 2.68 2.58 92 BAYES_05 8684 1.89 0.57 2.53 93 XM_SPF_SoftFail 8636 3.23 4.70 2.51 94 ANY_BOUNCE_MESSAGE 8593 1.96 0.85 2.50 95 BOUNCE_MESSAGE 8592 1.96 0.85 2.50 96 HTML_IMAGE_RATIO_08 8575 2.49 2.47 2.49 97 RCVD_IN_IADB_OPTIN 8330 1.93 0.92 2.42 98 TooManyTo_002 8129 1.80 0.63 2.36 99 FROM_EXCESS_BASE64 8090 2.20 1.90 2.35 100 SUBJ_ALL_CAPS 7727 2.17 2.00 2.25 101 TVD_RCVD_IP 7648 1.67 0.54 2.22 102 XM_B_SpammyTLD 7375 3.00 4.75 2.15 103 MIME_HTML_MOSTLY 7306 2.56 3.47 2.12 104 XM_GoogleGroups 7181 2.34 2.87 2.09 105 INVALID_MSGID 6868 1.41 0.19 2.00 106 TM2_M_VERY_LONG_WORD 6748 3.03 5.23 1.96 107 TR_XM_SB_Phish 6739 1.91 1.80 1.96 108 XMSubPhish11 6674 1.86 1.70 1.94 109 IN_HORDE_ADDRESS_BOOK 6525 1.32 0.12 1.90 110 HELO_NODOT 6351 1.45 0.63 1.85 111 HELO_NO_DOMAIN 6344 1.45 0.63 1.85 112 XM_CamelCaseFrm001 6308 2.51 3.90 1.83 113 XM_B_Investor 6164 3.01 5.51 1.79 114 T_XMDrugObfuBody_14 6094 2.53 4.08 1.77 115 KHOP_HELO_FCRDNS 6058 2.09 2.76 1.76 116 XM_B_Phish66 5983 2.37 3.66 1.74 117 TO_MALFORMED 5957 1.18 0.04 1.73 118 TR_XM_SpammyRelay 5902 4.52 10.28 1.72 119 TR_DCC_Bayes_99 5899 8.14 21.33 1.72 120 XM_B_Unsub2 5888 1.92 2.34 1.71 121 XMDiploma_00 5827 2.20 3.24 1.69 122 HTML_FONT_FACE_BAD 5746 1.34 0.65 1.67 123 T_XMDrugObfuBody_08 5634 2.17 3.27 1.64 124 XM_DK_Undo_01 5626 1.89 2.41 1.64 125 TooManyTo_003 5290 1.21 0.53 1.54 126 TR_XM_SpammyWords5 5128 2.18 3.59 1.49 127 RCVD_IN_MSPIKE_BL 5069 2.41 4.34 1.47 128 BOTNET 5010 4.46 10.62 1.46 129 TR_XM_MSPIKECOMBO 5007 2.35 4.17 1.46 130 TR_Symld_Words 4998 1.40 1.29 1.45 131 XMLngstWrd_00 4664 1.94 3.15 1.36 132 XMGappySubj_01 4484 0.91 0.10 1.30 133 XM_H_Long_From02 4399 1.30 1.34 1.28 134 XMBSHREFv2 4395 0.94 0.23 1.28 135 XMLngstWrd_01 4386 1.88 3.11 1.28 136 XM_OfRef6 4353 1.91 3.23 1.27 137 RELAYCOUNTRY_CA 4306 2.94 6.41 1.25 138 UNTRUSTED_Relay 4170 3.55 8.35 1.21 139 XMLngstWrd_02 4053 1.79 3.04 1.18 140 XMCapTrack 4036 0.98 0.59 1.17 141 URI_HEX 3841 1.40 1.97 1.12 142 TooManyTo_004 3817 0.90 0.47 1.11 143 XMLngstWrd_03 3746 1.62 2.70 1.09 144 T_FILL_THIS_FORM_SHORT 3625 1.26 1.69 1.05 145 TR_XM_Base64_M1 3621 1.06 1.09 1.05 146 XMLngstWrd_04 3422 1.52 2.60 1.00 147 TVD_SPACE_RATIO 3356 0.67 0.05 0.98 148 TR_XM_SpammyWords2 3297 4.14 10.69 0.96 149 DKIM_ADSP_CUSTOM_MED 3295 0.94 0.89 0.96 150 XMSubNoVowel 3253 0.98 1.06 0.95 151 XMGenDplmaNmb 3188 1.20 1.75 0.93 152 TooManyTo_005 3131 0.75 0.43 0.91 153 RCVD_IN_RP_SAFE 3129 0.79 0.54 0.91 154 XMBody_95 3126 0.69 0.24 0.91 155 XMStockSpam_06 3064 1.11 1.55 0.89 156 RCVD_IN_MSPIKE_H5 2911 0.65 0.25 0.85 157 RCVD_IN_MSPIKE_L3 2814 1.08 1.62 0.82 158 HTML_TITLE_SUBJ_DIFF 2768 1.41 2.66 0.81 159 RCVD_IN_RP_CERTIFIED 2732 0.67 0.41 0.79 160 XM_D_tchamptons_WL 2717 0.53 0.01 0.79 161 T_TooManySym_03 2695 0.61 0.25 0.78 162 UPPERCASE_75_100 2687 1.30 2.37 0.78 163 SpammyFromTLD_01 2687 1.48 2.93 0.78 164 XM_UB50 2680 1.84 4.03 0.78 165 HTML_IMAGE_ONLY_20 2633 0.89 1.14 0.77 166 T_OBFU_PDF_ATTACH 2620 0.57 0.17 0.76 167 HTML_TAG_BALANCE_BODY 2502 0.96 1.43 0.73 168 XMHTML_After_End 2489 0.91 1.29 0.72 169 RELAYCOUNTRY_GB 2418 0.70 0.70 0.70 170 TM2_M_A_HREF_HREF 2387 0.75 0.86 0.69 171 TR_MetaPhish_Combo_01 2381 0.70 0.71 0.69 172 MSGID_NOFQDN1 2318 0.46 0.01 0.67 173 MPART_ALT_DIFF_COUNT 2273 0.78 1.01 0.66 174 FROM_GOV_DKIM_AU 2266 0.51 0.22 0.66 175 HTTPS_HTTP_MISMATCH 2253 0.94 1.52 0.66 176 XMSubMetaI_00 2242 0.70 0.81 0.65 177 NML_ADSP_CUSTOM_MED 2180 0.68 0.77 0.63 178 RCVD_IN_MSPIKE_L4 2163 0.82 1.20 0.63 179 XMBdyGiftCard01 2153 0.83 1.24 0.63 180 XM_ShortIntro_01 2146 0.56 0.42 0.62 181 T_XMDrugObfuBody_00 2119 1.02 1.84 0.62 182 XM_B_COPY_HTML 2118 0.63 0.67 0.62 183 XM_H_PHPMailer 2066 0.64 0.72 0.60 184 XMBrknScrpt_02 2040 0.86 1.42 0.59 185 XMNoVowels 1987 0.56 0.52 0.58 186 BASE64_LENGTH_79_INF 1977 0.45 0.20 0.58 187 XMPhish30 1974 0.69 0.94 0.57 188 XM_ProductURIs 1960 0.59 0.62 0.57 189 SHORT_HELO_AND_INLINE_IMAGE 1942 0.41 0.10 0.56 190 FORGED_GMAIL_RCVD 1912 0.62 0.75 0.56 191 XMSlimDrugH 1907 0.54 0.52 0.55 192 TR_XM_SpammyWords3 1864 1.07 2.16 0.54 193 XMHTMLBadTable_001 1835 0.63 0.83 0.53 194 XM_B_SpammyWords4 1833 1.27 2.79 0.53 195 DIET_1 1765 0.71 1.13 0.51 196 T_Symld_Words_02 1752 0.58 0.72 0.51 197 URI_TRY_3LD 1750 0.71 1.12 0.51 198 XM_B_COVIDMETA 1726 0.85 1.58 0.50 199 RCVD_IN_SORBS_DUL 1714 0.37 0.11 0.50 200 XMMoneyMeta_00 1706 0.60 0.80 0.50 ----------------------------------------------------------------------