Email: 500995 Autolearn: 0 AvgScore: 2.75 AvgScanTime: 1.42 sec Spam: 136325 Autolearn: 0 AvgScore: 15.30 AvgScanTime: 1.60 sec Ham: 364670 Autolearn: 0 AvgScore: -1.94 AvgScanTime: 1.36 sec Time Spent Running SA: 198.12 hours Time Spent Processing Spam: 60.42 hours Time Spent Processing Ham: 137.70 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 128823 90.13 94.50 88.49 2 DKIM_SIGNED 116078 72.05 85.15 67.16 3 XM_B_Unicode 108286 74.92 79.43 73.24 4 RELAYCOUNTRY_US 108174 82.19 79.35 83.25 5 XM_DK_Pass 106916 69.31 78.43 65.90 6 DKIM_VALID 106121 68.41 77.84 64.88 7 T_SCC_BODY_TEXT_LINE 104351 78.13 76.55 78.72 8 DCC_CHECK 102275 50.16 75.02 40.87 9 XM_B_SpammyWords 91829 51.18 67.36 45.13 10 XMListUnsubscribeExists 87359 47.94 64.08 41.91 11 DKIM_VALID_AU 83752 54.89 61.44 52.45 12 XM_B_Unicode3 63520 43.49 46.59 42.33 13 LOC_TINY_FONT_1 60809 30.16 44.61 24.76 14 BAYES_50 58360 54.82 42.81 59.31 15 XM_B_SpammyWords2 52453 23.67 38.48 18.13 16 XM_DK_Undo_02 50099 13.36 36.75 4.61 17 HTML_FONT_LOW_CONTRAST 47452 27.77 34.81 25.14 18 MIME_HTML_ONLY 45015 26.57 33.02 24.16 19 FVGT_m_MULTI_ODD 42925 24.84 31.49 22.36 20 T_KAM_HTML_FONT_INVALID 42270 21.99 31.01 18.62 21 BAYES_99 39163 10.28 28.73 3.38 22 DKIM_VALID_EF 38049 27.39 27.91 27.20 23 TR_XM_DKIM_Undo 36578 8.90 26.83 2.19 24 XMSubLong 34326 23.80 25.18 23.29 25 DCC_CHECK_NEGATIVE 31716 49.33 23.26 59.08 26 BAYES_999 30140 7.94 22.11 2.65 27 T_TM2_M_HEADER_IN_MSG 30089 27.18 22.07 29.09 28 XM_B_Unsub 29875 12.58 21.91 9.09 29 TR_XM_BayesUnsub 28320 10.37 20.77 6.49 30 RELAYCOUNTRY_META 28286 8.22 20.75 3.54 31 TR_XM_DK_Unsub 27689 14.30 20.31 12.05 32 XM_Multi_Part_URI 26802 13.93 19.66 11.78 33 TR_DCC_Bayes_99 26640 6.25 19.54 1.28 34 UNPARSEABLE_RELAY 23417 12.72 17.18 11.05 35 BOTNET_IPINHOSTNAME 20755 5.99 15.22 2.54 36 FSL_BULK_SIG 19967 13.60 14.65 13.21 37 TR_MAX_INTL_RELAY 19690 7.48 14.44 4.88 38 RCVD_IN_MSPIKE_H2 18877 13.59 13.85 13.49 39 XM_B_SpammyWords3 18640 6.74 13.67 4.15 40 BOTNET 18269 4.44 13.40 1.09 41 TR_XM_SpammyRelay 17838 4.82 13.08 1.74 42 LOTS_OF_MONEY 17274 8.17 12.67 6.48 43 TR_XM_SpammyWords4 15641 6.64 11.47 4.83 44 RCVD_IN_BL_SPAMCOP_NET 14543 3.41 10.67 0.70 45 XM_Evil_Numbers_Gen 13557 9.83 9.94 9.78 46 TR_XM_SpammyWords2 13338 3.06 9.78 0.55 47 TR_XM_UnparsRelay 12152 3.49 8.91 1.46 48 BAYES_80 11929 4.55 8.75 2.98 49 UNTRUSTED_Relay 11791 3.30 8.65 1.31 50 BAYES_60 11703 6.42 8.58 5.61 51 XM_B_Phish_Phrases 11695 5.87 8.58 4.86 52 RCVD_IN_MSPIKE_WL 10764 11.41 7.90 12.72 53 HTML_IMAGE_RATIO_02 10610 5.05 7.78 4.03 54 DKIM_INVALID 9957 3.65 7.30 2.28 55 MPART_ALT_DIFF 9953 8.43 7.30 8.86 56 LotsOfNums_01 9592 7.06 7.04 7.07 57 XMSubMetaSx_00 9570 4.24 7.02 3.19 58 XM_Body_Dirty_Words 9444 3.50 6.93 2.22 59 XM_B_PhoneNumber 9385 8.78 6.88 9.49 60 RCVD_IN_MSPIKE_BL 9119 2.14 6.69 0.44 61 TR_XM_MSPIKECOMBO 9116 2.14 6.69 0.44 62 TR_XM_NoHeaderRelay 8906 1.92 6.53 0.20 63 XM_UncommonTLD01 8107 4.38 5.95 3.80 64 RELAYCOUNTRY_CA 7952 2.17 5.83 0.80 65 TooManyTo_001 7725 7.35 5.67 7.98 66 XM_H_Long_From01 7515 5.02 5.51 4.84 67 XMNumbers 7312 3.95 5.36 3.42 68 MIME_QP_LONG_LINE 6988 4.69 5.13 4.53 69 RCVD_IN_VALIDITY_RPBL 6676 1.40 4.90 0.09 70 BAYES_95 6674 2.71 4.90 1.89 71 TR_XM_SpammyWords5 6593 2.24 4.84 1.27 72 XMStrtUSub 6592 8.78 4.84 10.26 73 HTML_IMAGE_RATIO_04 6580 11.20 4.83 13.58 74 XMSexyCombo_05 6507 2.27 4.77 1.34 75 TR_XM_PhishingBody 6418 2.70 4.71 1.96 76 XM_H_GMP 6337 5.21 4.65 5.42 77 XM_B_Investor 6220 2.24 4.56 1.37 78 RCVD_IN_MSPIKE_H3 5945 5.17 4.36 5.48 79 DKIM_ADSP_NXDOMAIN 5940 1.41 4.36 0.30 80 XM_UB50 5940 1.84 4.36 0.90 81 XM_OfRef6 5465 1.95 4.01 1.18 82 XM_B_SpammyTLD 5197 2.95 3.81 2.62 83 TM2_M_VERY_LONG_WORD 5068 1.80 3.72 1.09 84 T_XMDrugObfuBody_14 5022 2.23 3.68 1.69 85 RCVD_IN_MSPIKE_L5 4947 1.05 3.63 0.09 86 MIME_HTML_MOSTLY 4892 2.43 3.59 2.00 87 MIME_HTML_ONLY_MULTI 4826 6.24 3.54 7.25 88 XM_B_Unsub2 4539 1.97 3.33 1.46 89 HTML_MIME_NO_HTML_TAG 4458 2.72 3.27 2.52 90 BOUNCE_MESSAGE 4417 3.46 3.24 3.54 91 ANY_BOUNCE_MESSAGE 4417 3.46 3.24 3.54 92 XM_SPF_SoftFail 4400 1.78 3.23 1.24 93 KHOP_HELO_FCRDNS 4385 1.85 3.22 1.34 94 TR_XM_SpammyWords3 4359 1.03 3.20 0.23 95 T_XMDrugObfuBody_08 4141 1.78 3.04 1.31 96 T_TooManySym_01 4117 4.66 3.02 5.27 97 HTML_IMAGE_RATIO_06 4107 4.05 3.01 4.44 98 XM_URI_RBL 4070 1.06 2.99 0.34 99 XM_CamelCaseFrm001 4063 2.18 2.98 1.88 100 XMDiploma_00 3798 1.74 2.79 1.35 101 TR_XM_SPAMCOP 3792 0.88 2.78 0.17 102 XM_B_URI_Unicode 3757 1.90 2.76 1.58 103 TM2_M_URI_OPT_OUT 3724 2.10 2.73 1.86 104 RELAYCOUNTRY_AU 3689 1.12 2.71 0.53 105 ALL_TRUSTED 3686 11.08 2.70 14.21 106 HTML_IMAGE_RATIO_08 3651 2.45 2.68 2.36 107 RELAYCOUNTRY_TH 3590 0.72 2.63 0.00 108 TR_XM_INV_DKIM 3534 0.83 2.59 0.18 109 XM_H_Long_From02 3488 1.26 2.56 0.77 110 RCVD_IN_MSPIKE_H5 3478 4.94 2.55 5.83 111 RCVD_IN_MSPIKE_L3 3448 0.94 2.53 0.34 112 SUBJ_ALL_CAPS 3385 1.55 2.48 1.20 113 XMBounce_01 3251 0.67 2.38 0.02 114 MAILING_LIST_MULTI 3133 3.00 2.30 3.26 115 RELAYCOUNTRY_FR 3114 0.83 2.28 0.28 116 T_FILL_THIS_FORM_SHORT 3112 1.20 2.28 0.79 117 USER_IN_DEF_DKIM_WL 3069 9.07 2.25 11.61 118 T_REMOTE_IMAGE 3054 2.93 2.24 3.18 119 HTML_IMAGE_ONLY_20 3037 0.86 2.23 0.35 120 FROM_EXCESS_BASE64 2947 1.68 2.16 1.49 121 XM_B_SpammyWords4 2927 0.95 2.15 0.51 122 XMBody_17 2905 0.92 2.13 0.46 123 XMStockSpam_06 2629 1.62 1.93 1.51 124 BOTNET_NORDNS 2622 0.53 1.92 0.01 125 SpammyFromTLD_02 2594 0.81 1.90 0.41 126 HTML_FONT_SIZE_LARGE 2487 0.56 1.82 0.09 127 XMBrknScrpt_02 2466 1.01 1.81 0.71 128 T_XMHurry_00 2434 0.80 1.79 0.43 129 BAYES_40 2424 4.70 1.78 5.79 130 XM_H_DKIM_GOOG 2402 0.49 1.76 0.01 131 SpammyFromTLD_01 2395 1.05 1.76 0.78 132 RCVD_IN_VALIDITY_SAFE 2324 3.23 1.70 3.79 133 SHORTCIRCUIT 2298 0.46 1.69 0.00 134 RCVD_IN_ZEN_LASTEXTERNAL 2298 0.46 1.69 0.00 135 TR_LOTS_OF_MONEY3 2261 0.61 1.66 0.22 136 XPRIO 2257 0.46 1.66 0.01 137 XM_DK_Undo_01 2253 1.74 1.65 1.78 138 XMGenDplmaNmb 2212 1.04 1.62 0.82 139 T_XMDrugObfuBody_00 2168 0.97 1.59 0.73 140 TR_Mismatch_TLD_02 2137 0.54 1.57 0.16 141 XM_ProductURIs 2137 1.39 1.57 1.33 142 URI_HEX 2114 1.18 1.55 1.04 143 RELAYCOUNTRY_CN 2097 0.47 1.54 0.07 144 RCVD_IN_PSBL 1997 0.55 1.46 0.21 145 XMPhish30 1928 0.82 1.41 0.60 146 XM_OfRef7 1926 0.65 1.41 0.37 147 XM_UB99 1884 0.38 1.38 0.01 148 URI_NOVOWEL 1860 1.37 1.36 1.37 149 URI_TRY_3LD 1812 0.73 1.33 0.51 150 TR_LOTS_OF_MONEY2 1812 0.53 1.33 0.24 151 TR_Symld_Words 1812 1.43 1.33 1.46 152 T_MONEY_PERCENT 1812 0.53 1.33 0.24 153 RCVD_IN_XBL 1808 0.38 1.33 0.02 154 BAYES_20 1790 3.66 1.31 4.53 155 XM_SendGrid 1786 1.30 1.31 1.29 156 SCC_BODY_URI_ONLY 1758 1.33 1.29 1.35 157 TR_XM_PHPForged 1748 0.61 1.28 0.35 158 TR_XM_PHPDW 1743 0.60 1.28 0.35 159 TR_XM_FormFill2 1739 0.60 1.28 0.35 160 XM_H_PHPOS 1709 0.59 1.25 0.34 161 XM_H_Undi_Recip 1705 0.45 1.25 0.15 162 TR_MetaPhish_Combo_01 1702 1.17 1.25 1.14 163 XM_B_COPY_HTML 1674 0.77 1.23 0.60 164 XM_B_DNDMA 1667 0.70 1.22 0.50 165 XM_B_Phish66 1636 0.56 1.20 0.32 166 T_TooManySym_02 1628 2.36 1.19 2.80 167 RCVD_IN_VALIDITY_CERTIFIED 1602 2.64 1.18 3.18 168 RDNS_DYNAMIC 1591 0.44 1.17 0.16 169 RCVD_IN_IADB_LISTED 1573 2.51 1.15 3.01 170 DIET_1 1548 0.48 1.14 0.24 171 TR_XM_RelayPhish 1542 0.37 1.13 0.09 172 XM_HighProb1 1540 0.31 1.13 0.01 173 XM_DIRTYINTL 1539 0.37 1.13 0.09 174 MPART_ALT_DIFF_COUNT 1533 0.73 1.12 0.59 175 HTML_IMAGE_ONLY_28 1529 0.58 1.12 0.38 176 HDRS_MISSP 1507 0.36 1.11 0.08 177 XM_UB60 1507 0.35 1.11 0.06 178 HTTPS_HTTP_MISMATCH 1490 0.77 1.09 0.66 179 XM_B_COVIDMETA 1457 0.37 1.07 0.11 180 TVD_RCVD_IP 1441 0.85 1.06 0.78 181 TR_XM_InvalidRelay 1422 0.29 1.04 0.01 182 HTML_IMAGE_ONLY_24 1398 0.51 1.03 0.32 183 RCVD_IN_IADB_SPF 1397 2.21 1.02 2.65 184 SHOPIFY_IMG_NOT_RCVD_SFY 1390 0.45 1.02 0.23 185 HTML_FONT_TINY_NORDNS 1370 0.33 1.00 0.08 186 XM_B_SEO 1365 0.49 1.00 0.29 187 XMMoneyMeta_00 1356 0.61 0.99 0.46 188 XM_UB999 1351 0.27 0.99 0.01 189 XMSexyCombo_01 1349 0.38 0.99 0.15 190 RCVD_IN_MSPIKE_H4 1341 1.29 0.98 1.41 191 RCVD_IN_IADB_DK 1338 1.95 0.98 2.31 192 RCVD_IN_IADB_SENDERID 1327 2.00 0.97 2.38 193 PDS_RDNS_DYNAMIC_FP 1319 0.29 0.97 0.04 194 XMBody_78 1313 0.47 0.96 0.28 195 THIS_AD 1294 0.42 0.95 0.23 196 RELAYCOUNTRY_GB 1291 0.59 0.95 0.46 197 XMPhish14 1289 0.78 0.95 0.72 198 TO_NO_BRKTS_HTML_ONLY 1288 0.61 0.94 0.48 199 XMSubMetaI_00 1281 0.61 0.94 0.48 200 DKIM_ADSP_CUSTOM_MED 1258 0.79 0.92 0.74 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 322711 90.13 94.50 88.49 2 RELAYCOUNTRY_US 303596 82.19 79.35 83.25 3 T_SCC_BODY_TEXT_LINE 287071 78.13 76.55 78.72 4 XM_B_Unicode 267076 74.92 79.43 73.24 5 DKIM_SIGNED 244909 72.05 85.15 67.16 6 XM_DK_Pass 240304 69.31 78.43 65.90 7 DKIM_VALID 236603 68.41 77.84 64.88 8 BAYES_50 216282 54.82 42.81 59.31 9 DCC_CHECK_NEGATIVE 215431 49.33 23.26 59.08 10 DKIM_VALID_AU 191264 54.89 61.44 52.45 11 XM_B_SpammyWords 164561 51.18 67.36 45.13 12 XM_B_Unicode3 154350 43.49 46.59 42.33 13 XMListUnsubscribeExists 152836 47.94 64.08 41.91 14 DCC_CHECK 149046 50.16 75.02 40.87 15 T_TM2_M_HEADER_IN_MSG 106091 27.18 22.07 29.09 16 DKIM_VALID_EF 99185 27.39 27.91 27.20 17 HTML_FONT_LOW_CONTRAST 91667 27.77 34.81 25.14 18 LOC_TINY_FONT_1 90298 30.16 44.61 24.76 19 MIME_HTML_ONLY 88122 26.57 33.02 24.16 20 XMSubLong 84921 23.80 25.18 23.29 21 FVGT_m_MULTI_ODD 81533 24.84 31.49 22.36 22 T_KAM_HTML_FONT_INVALID 67890 21.99 31.01 18.62 23 XM_B_SpammyWords2 66127 23.67 38.48 18.13 24 ALL_TRUSTED 51802 11.08 2.70 14.21 25 HTML_IMAGE_RATIO_04 49532 11.20 4.83 13.58 26 RCVD_IN_MSPIKE_H2 49198 13.59 13.85 13.49 27 BAYES_00 48549 9.90 0.76 13.31 28 FSL_BULK_SIG 48191 13.60 14.65 13.21 29 RCVD_IN_MSPIKE_WL 46382 11.41 7.90 12.72 30 TR_XM_DK_Unsub 43942 14.30 20.31 12.05 31 XM_Multi_Part_URI 42965 13.93 19.66 11.78 32 HTML_FONT_FACE_BAD 42799 8.75 0.76 11.74 33 USER_IN_DEF_DKIM_WL 42349 9.07 2.25 11.61 34 UNPARSEABLE_RELAY 40308 12.72 17.18 11.05 35 XM_H_Trusted_IP 40225 8.03 0.00 11.03 36 XMStrtUSub 37412 8.78 4.84 10.26 37 XM_Evil_Numbers_Gen 35676 9.83 9.94 9.78 38 XM_B_PhoneNumber 34593 8.78 6.88 9.49 39 XM_B_Unsub 33151 12.58 21.91 9.09 40 MPART_ALT_DIFF 32297 8.43 7.30 8.86 41 TooManyTo_001 29118 7.35 5.67 7.98 42 MIME_HTML_ONLY_MULTI 26448 6.24 3.54 7.25 43 LotsOfNums_01 25779 7.06 7.04 7.07 44 XM_DKIMWhitelistDomains 24077 4.81 0.01 6.60 45 IN_ZIMBRA_NJ_WHITELIST 23883 4.81 0.15 6.55 46 TR_XM_BayesUnsub 23658 10.37 20.77 6.49 47 LOTS_OF_MONEY 23648 8.17 12.67 6.48 48 TR_XM_DK_Bayes 22276 4.57 0.44 6.11 49 TR_XM_DK_Bayes1 21822 4.48 0.44 5.98 50 RCVD_IN_MSPIKE_H5 21261 4.94 2.55 5.83 51 BAYES_40 21129 4.70 1.78 5.79 52 BAYES_60 20457 6.42 8.58 5.61 53 RCVD_IN_MSPIKE_H3 19975 5.17 4.36 5.48 54 XM_H_GMP 19749 5.21 4.65 5.42 55 T_TooManySym_01 19227 4.66 3.02 5.27 56 TR_XM_DK_Bayes2 18465 3.78 0.35 5.06 57 TR_MAX_INTL_RELAY 17788 7.48 14.44 4.88 58 XM_B_Phish_Phrases 17714 5.87 8.58 4.86 59 XM_H_Long_From01 17649 5.02 5.51 4.84 60 TR_XM_SpammyWords4 17624 6.64 11.47 4.83 61 XM_DK_Undo_02 16829 13.36 36.75 4.61 62 MIME_QP_LONG_LINE 16529 4.69 5.13 4.53 63 BAYES_20 16525 3.66 1.31 4.53 64 HTML_IMAGE_RATIO_06 16203 4.05 3.01 4.44 65 XM_B_SpammyWords3 15137 6.74 13.67 4.15 66 XMSubNoVowel 14839 3.05 0.33 4.07 67 HTML_IMAGE_RATIO_02 14696 5.05 7.78 4.03 68 XM_PDF 14557 3.10 0.72 3.99 69 XM_UncommonTLD01 13860 4.38 5.95 3.80 70 RCVD_IN_VALIDITY_SAFE 13834 3.23 1.70 3.79 71 ANY_BOUNCE_MESSAGE 12923 3.46 3.24 3.54 72 BOUNCE_MESSAGE 12919 3.46 3.24 3.54 73 RELAYCOUNTRY_META 12918 8.22 20.75 3.54 74 XMNumbers 12484 3.95 5.36 3.42 75 BAYES_99 12327 10.28 28.73 3.38 76 MAILING_LIST_MULTI 11905 3.00 2.30 3.26 77 XMSubMetaSx_00 11649 4.24 7.02 3.19 78 BAYES_05 11615 2.51 0.69 3.19 79 T_REMOTE_IMAGE 11605 2.93 2.24 3.18 80 RCVD_IN_VALIDITY_CERTIFIED 11604 2.64 1.18 3.18 81 RCVD_IN_IADB_LISTED 10985 2.51 1.15 3.01 82 BAYES_80 10871 4.55 8.75 2.98 83 TooManyTo_002 10640 2.28 0.56 2.92 84 T_TooManySym_02 10202 2.36 1.19 2.80 85 RCVD_IN_IADB_SPF 9652 2.21 1.02 2.65 86 BAYES_999 9650 7.94 22.11 2.65 87 XM_B_SpammyTLD 9566 2.95 3.81 2.62 88 BOTNET_IPINHOSTNAME 9248 5.99 15.22 2.54 89 HTML_MIME_NO_HTML_TAG 9177 2.72 3.27 2.52 90 RCVD_IN_IADB_SENDERID 8668 2.00 0.97 2.38 91 HTML_IMAGE_RATIO_08 8622 2.45 2.68 2.36 92 RCVD_IN_IADB_DK 8411 1.95 0.98 2.31 93 DKIM_INVALID 8306 3.65 7.30 2.28 94 XM_Body_Dirty_Words 8086 3.50 6.93 2.22 95 TR_XM_DKIM_Undo 7990 8.90 26.83 2.19 96 INVALID_MSGID 7566 1.60 0.35 2.07 97 XMSubLongNoVowel 7397 1.51 0.11 2.03 98 MIME_HTML_MOSTLY 7306 2.43 3.59 2.00 99 XMSubGarbage 7225 1.45 0.03 1.98 100 TR_XM_PhishingBody 7130 2.70 4.71 1.96 101 RCVD_IN_IADB_VOUCHED 7075 1.56 0.53 1.94 102 BAYES_95 6903 2.71 4.90 1.89 103 XM_CamelCaseFrm001 6872 2.18 2.98 1.88 104 TM2_M_URI_OPT_OUT 6783 2.10 2.73 1.86 105 XM_DK_Undo_01 6476 1.74 1.65 1.78 106 TR_XM_SpammyRelay 6329 4.82 13.08 1.74 107 TO_MALFORMED 6259 1.26 0.05 1.72 108 T_XMDrugObfuBody_14 6160 2.23 3.68 1.69 109 XM_B_URI_Unicode 5760 1.90 2.76 1.58 110 XMStockSpam_06 5509 1.62 1.93 1.51 111 FROM_EXCESS_BASE64 5445 1.68 2.16 1.49 112 TR_Symld_Words 5334 1.43 1.33 1.46 113 XMGappySubj_01 5333 1.14 0.26 1.46 114 XM_B_Unsub2 5328 1.97 3.33 1.46 115 TR_XM_UnparsRelay 5324 3.49 8.91 1.46 116 TooManyTo_003 5309 1.17 0.40 1.46 117 RCVD_IN_MSPIKE_H4 5146 1.29 0.98 1.41 118 XM_B_Investor 5006 2.24 4.56 1.37 119 URI_NOVOWEL 4993 1.37 1.36 1.37 120 SCC_BODY_URI_ONLY 4921 1.33 1.29 1.35 121 XMDiploma_00 4918 1.74 2.79 1.35 122 RCVD_IN_IADB_OPTIN 4899 1.07 0.33 1.34 123 KHOP_HELO_FCRDNS 4887 1.85 3.22 1.34 124 XMSexyCombo_05 4877 2.27 4.77 1.34 125 XM_ProductURIs 4841 1.39 1.57 1.33 126 XM_GoogleGroups 4826 1.20 0.86 1.32 127 T_XMDrugObfuBody_08 4786 1.78 3.04 1.31 128 UNTRUSTED_Relay 4760 3.30 8.65 1.31 129 XM_SendGrid 4721 1.30 1.31 1.29 130 TR_DCC_Bayes_99 4650 6.25 19.54 1.28 131 TR_XM_SpammyWords5 4644 2.24 4.84 1.27 132 XM_SPF_SoftFail 4506 1.78 3.23 1.24 133 HELO_NODOT 4371 0.95 0.29 1.20 134 SUBJ_ALL_CAPS 4361 1.55 2.48 1.20 135 HELO_NO_DOMAIN 4361 0.95 0.27 1.20 136 XM_OfRef6 4312 1.95 4.01 1.18 137 IN_HORDE_ADDRESS_BOOK 4299 0.89 0.11 1.18 138 XMCapTrack 4239 0.97 0.46 1.16 139 T_TooManySym_03 4172 0.99 0.58 1.14 140 TR_MetaPhish_Combo_01 4145 1.17 1.25 1.14 141 BOTNET 3969 4.44 13.40 1.09 142 TM2_M_VERY_LONG_WORD 3958 1.80 3.72 1.09 143 TooManyTo_004 3955 0.89 0.36 1.08 144 URI_HEX 3794 1.18 1.55 1.04 145 XM_E_Blogspot 3623 0.76 0.13 0.99 146 XM_UB50 3287 1.84 4.36 0.90 147 XM_ShortIntro_01 3225 0.77 0.45 0.88 148 TVD_SPACE_RATIO 3222 0.68 0.14 0.88 149 TooManyTo_005 3191 0.72 0.32 0.88 150 XM_B_FormFill 3163 0.66 0.09 0.87 151 TR_XM_DK_SendGrid 3153 0.84 0.76 0.86 152 XMNoVowels 3082 0.73 0.41 0.85 153 XMGenDplmaNmb 3003 1.04 1.62 0.82 154 XMGappySubj_02 2967 0.61 0.05 0.81 155 RELAYCOUNTRY_CA 2908 2.17 5.83 0.80 156 T_FILL_THIS_FORM_SHORT 2890 1.20 2.28 0.79 157 SpammyFromTLD_01 2850 1.05 1.76 0.78 158 TVD_RCVD_IP 2829 0.85 1.06 0.78 159 XM_H_Long_From02 2823 1.26 2.56 0.77 160 T_Symld_Words_02 2750 0.76 0.77 0.75 161 RCVD_IN_PBL 2729 0.80 0.92 0.75 162 XM_H_PHPMailer 2726 0.73 0.69 0.75 163 XMBdyGiftCard01 2715 0.76 0.81 0.74 164 DKIM_ADSP_CUSTOM_MED 2705 0.79 0.92 0.74 165 T_XMDrugObfuBody_00 2678 0.97 1.59 0.73 166 XMPhish14 2611 0.78 0.95 0.72 167 XMBrknScrpt_02 2578 1.01 1.81 0.71 168 T_TVD_MIME_NO_HEADERS 2574 0.52 0.04 0.71 169 RCVD_IN_BL_SPAMCOP_NET 2537 3.41 10.67 0.70 170 HTTPS_HTTP_MISMATCH 2392 0.77 1.09 0.66 171 FROM_GOV_DKIM_AU 2382 0.59 0.41 0.65 172 XMLngstWrd_00 2188 0.62 0.67 0.60 173 XM_B_COPY_HTML 2183 0.77 1.23 0.60 174 XMPhish30 2177 0.82 1.41 0.60 175 MPART_ALT_DIFF_COUNT 2147 0.73 1.12 0.59 176 TR_XM_Base64_M1 2102 0.66 0.89 0.58 177 TM2_M_OBFU_COMMENT 2056 0.61 0.75 0.56 178 TR_XM_SpammyWords2 1999 3.06 9.78 0.55 179 RELAYCOUNTRY_AU 1919 1.12 2.71 0.53 180 XM_B_SpammyWords4 1852 0.95 2.15 0.51 181 URI_TRY_3LD 1848 0.73 1.33 0.51 182 HTML_TAG_BALANCE_BODY 1829 0.57 0.76 0.50 183 XM_B_DNDMA 1815 0.70 1.22 0.50 184 XMLngstWrd_01 1807 0.53 0.64 0.50 185 TO_NO_BRKTS_HTML_ONLY 1767 0.61 0.94 0.48 186 XMSubMetaI_00 1764 0.61 0.94 0.48 187 NML_ADSP_CUSTOM_MED 1747 0.55 0.72 0.48 188 MSGID_FROM_MTA_HEADER 1737 0.38 0.14 0.48 189 XMSlimDrugH 1737 0.51 0.59 0.48 190 T_OBFU_PDF_ATTACH 1733 0.39 0.18 0.48 191 XMBody_17 1689 0.92 2.13 0.46 192 XMMoneyMeta_00 1685 0.61 0.99 0.46 193 RELAYCOUNTRY_GB 1660 0.59 0.95 0.46 194 FILL_THIS_FORM 1654 0.40 0.25 0.45 195 RCVD_IN_MSPIKE_BL 1592 2.14 6.69 0.44 196 TR_XM_MSPIKECOMBO 1592 2.14 6.69 0.44 197 T_XMHurry_00 1553 0.80 1.79 0.43 198 XMBody_95 1528 0.36 0.18 0.42 199 HTML_IMAGE_ONLY_32 1508 0.37 0.27 0.41 200 T_TooManySym_04 1499 0.37 0.27 0.41 ----------------------------------------------------------------------