Email: 262562 Autolearn: 0 AvgScore: 3.09 AvgScanTime: 1.25 sec Spam: 85934 Autolearn: 0 AvgScore: 13.79 AvgScanTime: 1.38 sec Ham: 176628 Autolearn: 0 AvgScore: -2.11 AvgScanTime: 1.19 sec Time Spent Running SA: 91.21 hours Time Spent Processing Spam: 32.90 hours Time Spent Processing Ham: 58.30 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 80245 83.81 93.38 79.16 2 DKIM_SIGNED 74611 79.96 86.82 76.62 3 XM_DK_Pass 73311 78.53 85.31 75.23 4 DKIM_VALID 72992 78.08 84.94 74.74 5 RELAYCOUNTRY_US 70793 81.32 82.38 80.80 6 XM_B_Unicode 68435 70.99 79.64 66.78 7 DCC_CHECK 60311 45.37 70.18 33.29 8 XMListUnsubscribeExists 57692 55.83 67.14 50.33 9 XM_B_SpammyWords 56118 49.55 65.30 41.88 10 DKIM_VALID_AU 55401 59.96 64.47 57.77 11 RCVD_IN_MSPIKE_H2 43246 42.93 50.32 39.33 12 XM_B_Unicode3 40328 44.21 46.93 42.89 13 BAYES_50 36477 49.21 42.45 52.50 14 XM_DK_Undo_02 35915 19.12 41.79 8.10 15 XM_B_SpammyWords2 32487 24.64 37.80 18.24 16 BAYES_99 29527 16.22 34.36 7.39 17 LOC_TINY_FONT_1 29263 27.94 34.05 24.96 18 HTML_FONT_LOW_CONTRAST 28708 30.38 33.41 28.90 19 TR_XM_DKIM_Undo 28539 14.18 33.21 4.92 20 MIME_HTML_ONLY 28364 24.36 33.01 20.15 21 FVGT_m_MULTI_ODD 26762 26.50 31.14 24.25 22 DCC_CHECK_NEGATIVE 25597 54.60 29.79 66.68 23 DKIM_VALID_EF 24183 29.17 28.14 29.67 24 BAYES_999 23634 13.04 27.50 6.00 25 T_KAM_HTML_FONT_INVALID 22359 20.06 26.02 17.15 26 XM_Body_Dirty_Words 19191 14.84 22.33 11.19 27 TR_DCC_Bayes_99 18987 8.60 22.09 2.04 28 XMSubLong 18304 21.99 21.30 22.33 29 RELAYCOUNTRY_META 17959 8.96 20.90 3.15 30 T_TM2_M_HEADER_IN_MSG 16469 20.86 19.16 21.68 31 XM_Multi_Part_URI 15169 15.41 17.65 14.32 32 XM_B_Unsub 14119 11.61 16.43 9.26 33 TR_XM_BayesUnsub 13792 10.21 16.05 7.38 34 LOTS_OF_MONEY 11872 9.55 13.82 7.47 35 TR_XM_SpammyWords2 11193 5.12 13.03 1.27 36 TR_XM_SpammyRelay 10794 5.15 12.56 1.55 37 BOTNET_IPINHOSTNAME 10622 8.58 12.36 6.74 38 XM_B_SpammyWords3 10485 7.50 12.20 5.21 39 UNPARSEABLE_RELAY 10251 8.79 11.93 7.26 40 FSL_BULK_SIG 10093 5.94 11.75 3.12 41 TR_XM_UnparsRelay 9932 7.58 11.56 5.65 42 XMSexyCombo_05 9774 6.16 11.37 3.62 43 BOTNET 9680 4.76 11.26 1.59 44 TR_XM_SpammyWords4 9431 6.10 10.97 3.72 45 RCVD_IN_BL_SPAMCOP_NET 8768 3.70 10.20 0.53 46 XM_UncommonTLD01 8581 6.41 9.99 4.68 47 RCVD_IN_MSPIKE_WL 8525 15.22 9.92 17.80 48 RELAYCOUNTRY_CA 7271 3.67 8.46 1.35 49 MPART_ALT_DIFF 7268 6.49 8.46 5.54 50 UNTRUSTED_Relay 7189 3.58 8.37 1.25 51 XM_Evil_Numbers_Gen 7074 8.82 8.23 9.10 52 HTML_IMAGE_RATIO_02 6886 7.13 8.01 6.71 53 RCVD_IN_MSPIKE_H3 6694 10.38 7.79 11.64 54 BAYES_80 6442 5.77 7.50 4.93 55 BAYES_60 6168 9.80 7.18 11.07 56 XM_H_Long_From01 5584 5.28 6.50 4.68 57 MIME_HTML_ONLY_MULTI 5451 4.39 6.34 3.43 58 LotsOfNums_01 5441 7.75 6.33 8.43 59 TM2_M_VERY_LONG_WORD 5209 2.74 6.06 1.13 60 HTML_MIME_NO_HTML_TAG 4861 2.85 5.66 1.49 61 TR_XM_PhishingBody 4777 3.35 5.56 2.28 62 T_XMDrugObfuBody_14 4765 3.00 5.54 1.76 63 RCVD_IN_MSPIKE_BL 4408 2.34 5.13 0.99 64 XM_SPF_SoftFail 4364 2.69 5.08 1.52 65 XM_B_Investor 4363 2.53 5.08 1.29 66 TR_XM_MSPIKECOMBO 4315 2.30 5.02 0.98 67 XMSubMetaSx_00 4282 4.66 4.98 4.50 68 XM_SendGrid 4232 4.32 4.92 4.03 69 T_REMOTE_IMAGE 4161 4.18 4.84 3.85 70 TR_XM_SPAMCOP 4149 1.71 4.83 0.19 71 TooManyTo_001 4138 5.92 4.82 6.45 72 XM_OfRef6 4074 2.42 4.74 1.30 73 XM_B_Phish_Phrases 3870 3.66 4.50 3.25 74 XM_GoogleGroups 3795 2.34 4.42 1.33 75 XM_DIRTYINTL 3740 1.63 4.35 0.31 76 XMLngstWrd_00 3732 1.93 4.34 0.76 77 BAYES_95 3704 3.45 4.31 3.03 78 HTML_IMAGE_RATIO_04 3688 4.63 4.29 4.79 79 XMLngstWrd_01 3661 1.84 4.26 0.67 80 XMLngstWrd_02 3574 1.70 4.16 0.50 81 RCVD_IN_VALIDITY_SAFE 3540 5.68 4.12 6.44 82 XMLngstWrd_03 3512 1.60 4.09 0.39 83 XM_CamelCaseFrm001 3507 2.89 4.08 2.31 84 TR_XM_SpammyWords5 3476 2.14 4.04 1.22 85 XMLngstWrd_04 3455 1.51 4.02 0.28 86 HTML_TITLE_SUBJ_DIFF 3399 1.31 3.96 0.02 87 XM_UB50 3326 1.76 3.87 0.73 88 UPPERCASE_75_100 3283 1.27 3.82 0.03 89 XMNumbers 3274 4.25 3.81 4.47 90 SpammyFromTLD_01 3270 1.53 3.81 0.43 91 KHOP_HELO_FCRDNS 3267 1.99 3.80 1.11 92 RCVD_IN_VALIDITY_RPBL 3173 1.30 3.69 0.13 93 XMStrtUSub 3023 4.61 3.52 5.14 94 MIME_HTML_MOSTLY 2812 2.74 3.27 2.49 95 SpammyFromTLD_02 2774 1.20 3.23 0.22 96 RCVD_IN_VALIDITY_CERTIFIED 2470 4.66 2.87 5.53 97 TR_XM_DK_SendGrid 2466 2.71 2.87 2.63 98 XM_B_SpammyTLD 2417 2.21 2.81 1.92 99 XM_B_Unsub2 2406 1.65 2.80 1.10 100 TR_XM_MSPIKECOMBO2 2396 1.15 2.79 0.35 101 XMDiploma_00 2376 1.73 2.76 1.23 102 T_TooManySym_01 2359 6.42 2.75 8.20 103 T_XMDrugObfuBody_08 2355 1.64 2.74 1.11 104 TR_XM_SpammyWords3 2334 1.12 2.72 0.34 105 XM_B_SpammyWords4 2309 1.56 2.69 1.01 106 BOTNET_NORDNS 2300 0.89 2.68 0.02 107 URI_NOVOWEL 2293 2.46 2.67 2.36 108 XM_B_Phish66 2280 1.60 2.65 1.09 109 RCVD_IN_MSPIKE_L3 2078 1.11 2.42 0.47 110 TM2_M_URI_OPT_OUT 2068 2.67 2.41 2.79 111 HTML_IMAGE_RATIO_06 2037 2.88 2.37 3.12 112 TM2_M_A_HREF_HREF 1957 1.26 2.28 0.77 113 HTML_TAG_BALANCE_BODY 1945 1.05 2.26 0.46 114 XMBody_17 1876 1.01 2.18 0.44 115 TR_Symld_Words 1839 2.05 2.14 2.00 116 SUBJ_ALL_CAPS 1838 1.72 2.14 1.52 117 USER_IN_DEF_DKIM_WL 1805 12.15 2.10 17.04 118 FROM_EXCESS_BASE64 1790 2.98 2.08 3.42 119 HTML_IMAGE_RATIO_08 1769 1.88 2.06 1.79 120 MIME_QP_LONG_LINE 1737 3.28 2.02 3.89 121 XM_B_DynamicLink 1726 0.69 2.01 0.04 122 XM_DK_Undo_01 1714 1.54 1.99 1.32 123 TR_XM_PHPDW 1696 0.91 1.97 0.39 124 XM_UB99 1696 0.65 1.97 0.00 125 TR_XM_PHPForged 1682 0.83 1.96 0.29 126 TR_XM_FormFill2 1658 0.82 1.93 0.28 127 XM_H_PHPOS 1654 0.81 1.92 0.27 128 RCVD_IN_MSPIKE_H4 1647 4.07 1.92 5.11 129 DKIM_INVALID 1619 1.88 1.88 1.88 130 RCVD_IN_IADB_LISTED 1561 3.46 1.82 4.26 131 TR_Mismatch_TLD_02 1555 0.65 1.81 0.09 132 RCVD_IN_MSPIKE_L5 1531 0.61 1.78 0.03 133 MPART_ALT_DIFF_COUNT 1531 1.12 1.78 0.80 134 TR_XM_SB_Phish 1441 2.00 1.68 2.16 135 URI_HEX 1421 1.26 1.65 1.06 136 RCVD_IN_PSBL 1418 0.85 1.65 0.46 137 XM_H_Long_From02 1377 1.18 1.60 0.97 138 XMSubPhish11 1373 1.97 1.60 2.15 139 URIBL_DBL_SPAM 1373 0.54 1.60 0.02 140 TR_XM_NoHeaderRelay 1356 0.58 1.58 0.09 141 TR_XM_MaxSPIKE 1354 0.62 1.58 0.15 142 T_FILL_THIS_FORM_SHORT 1353 0.79 1.57 0.42 143 MAILING_LIST_MULTI 1336 2.02 1.55 2.24 144 RCVD_IN_IADB_SPF 1331 3.07 1.55 3.81 145 ALL_TRUSTED 1308 11.55 1.52 16.43 146 RELAYCOUNTRY_RU 1303 0.51 1.52 0.02 147 BAYES_40 1289 4.22 1.50 5.55 148 XM_UB999 1282 0.49 1.49 0.00 149 LongTLD 1264 0.57 1.47 0.13 150 XMBrknScrpt_02 1262 0.80 1.47 0.48 151 RCVD_IN_IADB_SENDERID 1233 2.78 1.43 3.43 152 RCVD_IN_IADB_DK 1231 2.73 1.43 3.36 153 XM_Body_Dirty_Words_01 1218 0.53 1.42 0.10 154 XMStockSpam_06 1218 1.00 1.42 0.80 155 XMBdyGiftCard01 1217 1.19 1.42 1.08 156 XM_URI_RBL 1215 0.53 1.41 0.10 157 TR_LOTS_OF_MONEY3 1194 0.54 1.39 0.13 158 T_XMDrugObfuBody_00 1187 0.84 1.38 0.57 159 FROM_SUSPICIOUS_NTLD 1181 0.48 1.37 0.04 160 DIET_1 1152 0.68 1.34 0.36 161 HTML_OBFUSCATE_05_10 1152 0.51 1.34 0.11 162 URI_TRY_3LD 1151 0.68 1.34 0.35 163 XMSexyCombo_01 1135 0.68 1.32 0.37 164 NO_DNS_FOR_FROM 1130 0.67 1.31 0.36 165 XM_OfRef7 1121 0.49 1.30 0.10 166 SUBJ_DOLLARS 1115 0.89 1.30 0.70 167 TR_XM_MaxWHORU 1115 0.61 1.30 0.28 168 FROM_SUSPICIOUS_NTLD_FP 1109 0.45 1.29 0.04 169 XMPhish30 1092 0.87 1.27 0.68 170 MONEY_NOHTML 1087 0.46 1.26 0.07 171 XMReplyNow 1075 0.58 1.25 0.25 172 BAYES_20 1059 3.13 1.23 4.05 173 HTTPS_HTTP_MISMATCH 1051 0.81 1.22 0.61 174 DKIM_ADSP_NXDOMAIN 1040 0.68 1.21 0.43 175 TR_XM_COVIDMETA4 1039 0.47 1.21 0.10 176 RELAYCOUNTRY_AU 1034 0.54 1.20 0.22 177 T_XMHurry_00 1010 0.64 1.18 0.39 178 HTML_IMAGE_ONLY_20 1010 0.85 1.18 0.69 179 HTML_SHORT_LINK_IMG_3 1008 0.41 1.17 0.04 180 SHOPIFY_IMG_NOT_RCVD_SFY 986 0.51 1.15 0.21 181 RELAYCOUNTRY_DE 976 0.59 1.14 0.32 182 XMGenDplmaNmb 964 0.69 1.12 0.48 183 PDS_OTHER_BAD_TLD 961 0.47 1.12 0.16 184 URIBL_BLACK 961 0.39 1.12 0.03 185 XM_H_Undi_Recip 946 0.49 1.10 0.19 186 XM_B_COVIDMETA 925 0.80 1.08 0.66 187 XMSubNoVowel 900 1.03 1.05 1.03 188 FORM_FRAUD_5 900 0.34 1.05 0.00 189 RCVD_IN_IADB_VOUCHED 899 2.20 1.05 2.77 190 BODY_URI_ONLY 894 0.35 1.04 0.02 191 TR_Mismatch_TLD_01 872 0.63 1.01 0.45 192 RDNS_DYNAMIC 866 0.78 1.01 0.67 193 XM_B_COPY_HTML 862 1.03 1.00 1.04 194 MONEY_FORM_SHORT 823 0.31 0.96 0.00 195 HTML_FONT_TINY_NORDNS 817 0.36 0.95 0.07 196 GOOG_STO_IMG_NOHTML 812 0.43 0.94 0.19 197 TR_MetaPhish_Combo_01 812 0.89 0.94 0.87 198 DKIM_ADSP_CUSTOM_MED 803 0.91 0.93 0.90 199 XM_UB60 801 0.34 0.93 0.05 200 XMSubMetaI_00 800 1.06 0.93 1.12 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 142716 81.32 82.38 80.80 2 HTML_MESSAGE 139819 83.81 93.38 79.16 3 DKIM_SIGNED 135337 79.96 86.82 76.62 4 XM_DK_Pass 132871 78.53 85.31 75.23 5 DKIM_VALID 132016 78.08 84.94 74.74 6 XM_B_Unicode 117951 70.99 79.64 66.78 7 DCC_CHECK_NEGATIVE 117772 54.60 29.79 66.68 8 DKIM_VALID_AU 102031 59.96 64.47 57.77 9 BAYES_50 92728 49.21 42.45 52.50 10 XMListUnsubscribeExists 88893 55.83 67.14 50.33 11 XM_B_Unicode3 75749 44.21 46.93 42.89 12 XM_B_SpammyWords 73970 49.55 65.30 41.88 13 RCVD_IN_MSPIKE_H2 69467 42.93 50.32 39.33 14 DCC_CHECK 58808 45.37 70.18 33.29 15 DKIM_VALID_EF 52401 29.17 28.14 29.67 16 HTML_FONT_LOW_CONTRAST 51053 30.38 33.41 28.90 17 LOC_TINY_FONT_1 44095 27.94 34.05 24.96 18 FVGT_m_MULTI_ODD 42828 26.50 31.14 24.25 19 XMSubLong 39441 21.99 21.30 22.33 20 T_TM2_M_HEADER_IN_MSG 38289 20.86 19.16 21.68 21 MIME_HTML_ONLY 35587 24.36 33.01 20.15 22 XM_B_SpammyWords2 32214 24.64 37.80 18.24 23 RCVD_IN_MSPIKE_WL 31446 15.22 9.92 17.80 24 T_KAM_HTML_FONT_INVALID 30300 20.06 26.02 17.15 25 USER_IN_DEF_DKIM_WL 30103 12.15 2.10 17.04 26 ALL_TRUSTED 29026 11.55 1.52 16.43 27 XM_Multi_Part_URI 25295 15.41 17.65 14.32 28 XM_DKIMWhitelistDomains 21308 8.13 0.06 12.06 29 RCVD_IN_MSPIKE_H3 20566 10.38 7.79 11.64 30 XM_Body_Dirty_Words 19764 14.84 22.33 11.19 31 BAYES_60 19555 9.80 7.18 11.07 32 BAYES_00 16462 6.52 0.75 9.32 33 XM_B_Unsub 16354 11.61 16.43 9.26 34 XM_Evil_Numbers_Gen 16081 8.82 8.23 9.10 35 LotsOfNums_01 14898 7.75 6.33 8.43 36 T_TooManySym_01 14486 6.42 2.75 8.20 37 XM_DK_Undo_02 14299 19.12 41.79 8.10 38 LOTS_OF_MONEY 13192 9.55 13.82 7.47 39 BAYES_99 13060 16.22 34.36 7.39 40 TR_XM_BayesUnsub 13027 10.21 16.05 7.38 41 UNPARSEABLE_RELAY 12827 8.79 11.93 7.26 42 BOTNET_IPINHOSTNAME 11903 8.58 12.36 6.74 43 HTML_IMAGE_RATIO_02 11843 7.13 8.01 6.71 44 TooManyTo_001 11395 5.92 4.82 6.45 45 RCVD_IN_VALIDITY_SAFE 11382 5.68 4.12 6.44 46 TR_XM_DK_Bayes 11370 4.53 0.62 6.44 47 TR_XM_DK_Bayes1 11287 4.50 0.62 6.39 48 BAYES_999 10600 13.04 27.50 6.00 49 TR_XM_DK_Bayes2 10136 4.01 0.45 5.74 50 IN_ZIMBRA_NJ_WHITELIST 10069 3.87 0.10 5.70 51 TR_XM_UnparsRelay 9980 7.58 11.56 5.65 52 BAYES_40 9802 4.22 1.50 5.55 53 MPART_ALT_DIFF 9785 6.49 8.46 5.54 54 RCVD_IN_VALIDITY_CERTIFIED 9771 4.66 2.87 5.53 55 T_TooManySym_02 9556 3.90 0.79 5.41 56 XM_B_SpammyWords3 9203 7.50 12.20 5.21 57 XMStrtUSub 9071 4.61 3.52 5.14 58 RCVD_IN_MSPIKE_H4 9034 4.07 1.92 5.11 59 BAYES_80 8714 5.77 7.50 4.93 60 TR_XM_DKIM_Undo 8687 14.18 33.21 4.92 61 HTML_IMAGE_RATIO_04 8457 4.63 4.29 4.79 62 XM_H_Long_From01 8272 5.28 6.50 4.68 63 XM_UncommonTLD01 8259 6.41 9.99 4.68 64 T_HTML_ATTACH 8077 3.10 0.07 4.57 65 XMSubMetaSx_00 7943 4.66 4.98 4.50 66 XMNumbers 7892 4.25 3.81 4.47 67 RCVD_IN_IADB_LISTED 7530 3.46 1.82 4.26 68 INVALID_MSGID 7229 2.81 0.16 4.09 69 BAYES_20 7150 3.13 1.23 4.05 70 XM_SendGrid 7118 4.32 4.92 4.03 71 MIME_QP_LONG_LINE 6871 3.28 2.02 3.89 72 T_REMOTE_IMAGE 6809 4.18 4.84 3.85 73 RCVD_IN_IADB_SPF 6738 3.07 1.55 3.81 74 TR_XM_SpammyWords4 6577 6.10 10.97 3.72 75 TVD_RCVD_IP 6476 2.65 0.56 3.67 76 XMSexyCombo_05 6400 6.16 11.37 3.62 77 MIME_HTML_ONLY_MULTI 6067 4.39 6.34 3.43 78 RCVD_IN_IADB_SENDERID 6059 2.78 1.43 3.43 79 FROM_EXCESS_BASE64 6045 2.98 2.08 3.42 80 TO_MALFORMED 5935 2.27 0.02 3.36 81 RCVD_IN_IADB_DK 5928 2.73 1.43 3.36 82 XM_B_Phish_Phrases 5744 3.66 4.50 3.25 83 RELAYCOUNTRY_META 5557 8.96 20.90 3.15 84 HTML_IMAGE_RATIO_06 5514 2.88 2.37 3.12 85 FSL_BULK_SIG 5511 5.94 11.75 3.12 86 BAYES_95 5357 3.45 4.31 3.03 87 XM_H_Trusted_IP 5338 2.03 0.00 3.02 88 TM2_M_URI_OPT_OUT 4935 2.67 2.41 2.79 89 RCVD_IN_IADB_VOUCHED 4884 2.20 1.05 2.77 90 TR_XM_DK_SendGrid 4653 2.71 2.87 2.63 91 MIME_HTML_MOSTLY 4393 2.74 3.27 2.49 92 XMBSHREFv2 4293 1.71 0.23 2.43 93 ANY_BOUNCE_MESSAGE 4287 1.90 0.82 2.43 94 BOUNCE_MESSAGE 4286 1.90 0.81 2.43 95 XM_PDF 4253 1.75 0.39 2.41 96 URI_NOVOWEL 4169 2.46 2.67 2.36 97 XM_CamelCaseFrm001 4075 2.89 4.08 2.31 98 TR_XM_PhishingBody 4029 3.35 5.56 2.28 99 MAILING_LIST_MULTI 3958 2.02 1.55 2.24 100 TR_XM_SB_Phish 3820 2.00 1.68 2.16 101 XMSubPhish11 3806 1.97 1.60 2.15 102 BAYES_05 3799 1.68 0.71 2.15 103 IN_HORDE_ADDRESS_BOOK 3662 1.43 0.11 2.07 104 TR_DCC_Bayes_99 3605 8.60 22.09 2.04 105 TR_Symld_Words 3537 2.05 2.14 2.00 106 XM_B_SpammyTLD 3394 2.21 2.81 1.92 107 DKIM_INVALID 3321 1.88 1.88 1.88 108 RCVD_IN_IADB_OPTIN 3227 1.45 0.68 1.83 109 HTML_IMAGE_RATIO_08 3160 1.88 2.06 1.79 110 T_XMDrugObfuBody_14 3110 3.00 5.54 1.76 111 TVD_SPACE_RATIO 2981 1.19 0.15 1.69 112 XMGappySubj_01 2954 1.15 0.08 1.67 113 BOTNET 2811 4.76 11.26 1.59 114 TR_XM_SpammyRelay 2738 5.15 12.56 1.55 115 TR_XM_Base64_M1 2730 1.31 0.83 1.55 116 XM_SPF_SoftFail 2693 2.69 5.08 1.52 117 SUBJ_ALL_CAPS 2677 1.72 2.14 1.52 118 HTML_MIME_NO_HTML_TAG 2623 2.85 5.66 1.49 119 MSGID_NOFQDN1 2397 0.92 0.01 1.36 120 RELAYCOUNTRY_CA 2376 3.67 8.46 1.35 121 XM_GoogleGroups 2354 2.34 4.42 1.33 122 XM_DK_Undo_01 2338 1.54 1.99 1.32 123 XM_OfRef6 2291 2.42 4.74 1.30 124 XM_B_Investor 2278 2.53 5.08 1.29 125 HTML_FONT_FACE_BAD 2272 1.10 0.73 1.29 126 TR_XM_SpammyWords2 2241 5.12 13.03 1.27 127 RCVD_IN_RP_SAFE 2216 1.14 0.90 1.25 128 UNTRUSTED_Relay 2212 3.58 8.37 1.25 129 TooManyTo_002 2195 0.98 0.44 1.24 130 XMDiploma_00 2176 1.73 2.76 1.23 131 TR_XM_SpammyWords5 2153 2.14 4.04 1.22 132 XM_D_tchamptons_WL 2153 0.82 0.00 1.22 133 XMBody_95 2030 0.82 0.15 1.15 134 T_TooManySym_03 1995 0.88 0.35 1.13 135 TM2_M_VERY_LONG_WORD 1989 2.74 6.06 1.13 136 XMSubMetaI_00 1985 1.06 0.93 1.12 137 T_XMDrugObfuBody_08 1955 1.64 2.74 1.11 138 KHOP_HELO_FCRDNS 1952 1.99 3.80 1.11 139 XM_B_Unsub2 1937 1.65 2.80 1.10 140 RCVD_IN_RP_CERTIFIED 1936 0.94 0.63 1.10 141 XM_B_Phish66 1921 1.60 2.65 1.09 142 XMBdyGiftCard01 1900 1.19 1.42 1.08 143 URI_HEX 1880 1.26 1.65 1.06 144 RCVD_IN_MSPIKE_H5 1846 0.77 0.21 1.05 145 XM_B_COPY_HTML 1845 1.03 1.00 1.04 146 XMSubNoVowel 1813 1.03 1.05 1.03 147 XM_B_SpammyWords4 1784 1.56 2.69 1.01 148 RCVD_IN_MSPIKE_BL 1742 2.34 5.13 0.99 149 TR_XM_MSPIKECOMBO 1729 2.30 5.02 0.98 150 XM_H_Long_From02 1715 1.18 1.60 0.97 151 TooManyTo_003 1582 0.73 0.38 0.90 152 DKIM_ADSP_CUSTOM_MED 1581 0.91 0.93 0.90 153 TR_MetaPhish_Combo_01 1534 0.89 0.94 0.87 154 USER_IN_WELCOMELIST 1475 0.56 0.00 0.84 155 USER_IN_WHITELIST 1475 0.56 0.00 0.84 156 XMSubMetaSxObfu_02 1432 0.63 0.25 0.81 157 MPART_ALT_DIFF_COUNT 1417 1.12 1.78 0.80 158 XMStockSpam_06 1405 1.00 1.42 0.80 159 TM2_M_A_HREF_HREF 1352 1.26 2.28 0.77 160 XMLngstWrd_00 1343 1.93 4.34 0.76 161 XM_UB50 1289 1.76 3.87 0.73 162 XMHTMLBadTable_001 1242 0.76 0.88 0.70 163 SUBJ_DOLLARS 1232 0.89 1.30 0.70 164 TooManyTo_004 1229 0.59 0.36 0.70 165 HTML_IMAGE_ONLY_20 1212 0.85 1.18 0.69 166 XMPhish30 1196 0.87 1.27 0.68 167 RDNS_DYNAMIC 1191 0.78 1.01 0.67 168 XMLngstWrd_01 1178 1.84 4.26 0.67 169 XM_B_COVIDMETA 1168 0.80 1.08 0.66 170 XM_H_PHPMailer 1159 0.72 0.86 0.66 171 XMHTML_After_End 1089 0.66 0.76 0.62 172 TooManyTo_005 1080 0.53 0.35 0.61 173 HTTPS_HTTP_MISMATCH 1078 0.81 1.22 0.61 174 TR_Caps_n_Bayes_99 1055 0.49 0.28 0.60 175 T_XMDrugObfuBody_00 1012 0.84 1.38 0.57 176 XM_ProductURIs 1001 0.58 0.60 0.57 177 TR_XM_INV_DKIM 997 0.51 0.41 0.56 178 PLING_QUERY 988 0.67 0.88 0.56 179 HELO_NODOT 981 0.55 0.54 0.56 180 HELO_NO_DOMAIN 980 0.55 0.54 0.55 181 XM_B_REG_HTML 978 0.54 0.50 0.55 182 XM_shorewaves_Whitelist 965 0.37 0.00 0.55 183 XMSlimDrugH 956 0.65 0.86 0.54 184 XMNoVowels 938 0.51 0.46 0.53 185 RCVD_IN_BL_SPAMCOP_NET 934 3.70 10.20 0.53 186 DATE_IN_PAST_03_06 914 0.53 0.55 0.52 187 FORGED_GMAIL_RCVD 905 0.60 0.79 0.51 188 TR_XM_Base64_M2 902 0.43 0.27 0.51 189 XMLngstWrd_02 883 1.70 4.16 0.50 190 NML_ADSP_CUSTOM_MED 871 0.59 0.79 0.49 191 XMGenDplmaNmb 850 0.69 1.12 0.48 192 XMBrknScrpt_02 849 0.80 1.47 0.48 193 RCVD_IN_MSPIKE_L4 841 0.59 0.82 0.48 194 RCVD_IN_MSPIKE_L3 827 1.11 2.42 0.47 195 T_TooManySym_04 823 0.39 0.23 0.47 196 RCVD_IN_PSBL 810 0.85 1.65 0.46 197 HTML_TAG_BALANCE_BODY 805 1.05 2.26 0.46 198 TR_Mismatch_TLD_01 794 0.63 1.01 0.45 199 XMBody_17 777 1.01 2.18 0.44 200 XM_ShortIntro_01 761 0.42 0.41 0.43 ----------------------------------------------------------------------