Email: 286523 Autolearn: 0 AvgScore: 2.67 AvgScanTime: 1.29 sec Spam: 71734 Autolearn: 0 AvgScore: 13.91 AvgScanTime: 1.51 sec Ham: 214789 Autolearn: 0 AvgScore: -1.09 AvgScanTime: 1.22 sec Time Spent Running SA: 102.91 hours Time Spent Processing Spam: 30.15 hours Time Spent Processing Ham: 72.76 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 66768 80.45 93.08 76.23 2 DKIM_SIGNED 62473 75.40 87.09 71.50 3 XM_DK_Pass 59594 73.07 83.08 69.72 4 DKIM_VALID 58243 70.86 81.19 67.41 5 DCC_CHECK 56935 51.29 79.37 41.91 6 XM_B_Unicode 55374 70.77 77.19 68.63 7 RELAYCOUNTRY_US 54769 72.87 76.35 71.71 8 XMListUnsubscribeExists 52309 51.12 72.92 43.84 9 XM_B_SpammyWords 48837 47.40 68.08 40.49 10 DKIM_VALID_AU 45680 57.40 63.68 55.30 11 XM_DK_Undo_02 32912 17.45 45.88 7.96 12 XM_B_Unicode3 31359 41.82 43.72 41.19 13 BAYES_50 30425 49.77 42.41 52.23 14 XM_B_SpammyWords2 27537 23.39 38.39 18.38 15 HTML_FONT_LOW_CONTRAST 27529 30.25 38.38 27.54 16 TR_XM_DKIM_Undo 26276 13.77 36.63 6.14 17 LOC_TINY_FONT_1 24782 28.00 34.55 25.82 18 BAYES_99 24063 13.72 33.54 7.10 19 RCVD_IN_MSPIKE_H2 22553 23.98 31.44 21.49 20 DKIM_VALID_EF 20436 26.77 28.49 26.20 21 MIME_HTML_ONLY 20426 23.63 28.47 22.01 22 BAYES_999 19040 11.14 26.54 6.00 23 TR_DCC_Bayes_99 18483 9.26 25.77 3.75 24 T_KAM_HTML_FONT_INVALID 17986 16.82 25.07 14.06 25 XMSubLong 17720 21.11 24.70 19.91 26 FVGT_m_MULTI_ODD 17537 21.46 24.45 20.46 27 RELAYCOUNTRY_META 16938 11.95 23.61 8.05 28 XM_Body_Dirty_Words 16648 18.07 23.21 16.36 29 T_TM2_M_HEADER_IN_MSG 14826 24.40 20.67 25.64 30 DCC_CHECK_NEGATIVE 14768 48.68 20.59 58.06 31 RCVD_IN_MSPIKE_WL 14739 27.15 20.55 29.36 32 UNTRUSTED_Relay 10937 8.24 15.25 5.90 33 XM_Multi_Part_URI 10610 12.81 14.79 12.15 34 BOTNET_IPINHOSTNAME 10411 7.55 14.51 5.23 35 BOTNET 10234 4.59 14.27 1.35 36 XM_B_SpammyWords3 9953 6.58 13.87 4.14 37 UNPARSEABLE_RELAY 9786 9.31 13.64 7.86 38 TR_XM_UnparsRelay 9504 7.98 13.25 6.22 39 FSL_BULK_SIG 9224 9.98 12.86 9.02 40 TR_XM_SpammyWords2 9000 4.39 12.55 1.66 41 XMSexyCombo_05 8183 10.07 11.41 9.63 42 LOTS_OF_MONEY 7970 7.32 11.11 6.05 43 RCVD_IN_MSPIKE_H3 7907 14.38 11.02 15.50 44 XM_B_Unsub 7786 11.30 10.85 11.45 45 RCVD_IN_BL_SPAMCOP_NET 7495 3.14 10.45 0.70 46 MPART_ALT_DIFF 7341 6.08 10.23 4.70 47 XM_UncommonTLD01 7149 5.62 9.97 4.17 48 XM_SendGrid 6767 7.51 9.43 6.87 49 MIME_HTML_MOSTLY 6459 4.00 9.00 2.33 50 RCVD_IN_MSPIKE_H4 6223 11.01 8.68 11.79 51 XM_Evil_Numbers_Gen 5919 8.78 8.25 8.95 52 SpammyFromTLD_02 5760 2.11 8.03 0.13 53 URIBL_DBL_SPAM 5760 2.04 8.03 0.03 54 XMSubMetaSx_00 5654 5.04 7.88 4.09 55 HTML_IMAGE_RATIO_02 5650 6.68 7.88 6.27 56 TR_XM_SpammyWords4 5595 4.80 7.80 3.80 57 XM_UB50 5582 5.83 7.78 5.18 58 BAYES_60 5480 9.33 7.64 9.90 59 XM_B_SpammyTLD 5264 3.35 7.34 2.01 60 BAYES_80 5169 5.09 7.21 4.39 61 URI_NOVOWEL 4936 3.23 6.88 2.01 62 TooManyTo_001 4924 6.59 6.86 6.50 63 RCVD_IN_MSPIKE_BL 4686 1.89 6.53 0.34 64 TR_XM_MSPIKECOMBO 4549 1.84 6.34 0.33 65 TR_XM_PhishingBody 4502 3.45 6.28 2.51 66 RELAYCOUNTRY_CA 4419 2.39 6.16 1.14 67 XM_H_Long_From01 4398 5.03 6.13 4.67 68 XM_B_Phish_Phrases 4383 3.75 6.11 2.96 69 DKIM_INVALID 4230 4.54 5.90 4.09 70 XMStrtUSub 4155 4.92 5.79 4.62 71 RCVD_IN_RP_SAFE 4137 7.76 5.77 8.42 72 HTML_IMAGE_RATIO_04 3777 6.47 5.27 6.87 73 TR_XM_SPAMCOP 3774 1.47 5.26 0.20 74 LotsOfNums_01 3699 6.87 5.16 7.44 75 TR_XM_DK_SendGrid 3666 4.43 5.11 4.21 76 PDS_OTHER_BAD_TLD 3430 1.62 4.78 0.56 77 JH_SPAMMY_HEADERS 3411 1.19 4.76 0.00 78 RCVD_IN_RP_CERTIFIED 3163 6.74 4.41 7.52 79 T_REMOTE_IMAGE 3126 3.18 4.36 2.79 80 XM_SPF_SoftFail 3032 1.88 4.23 1.10 81 HTML_IMAGE_RATIO_06 3025 3.78 4.22 3.63 82 BAYES_95 2837 3.11 3.95 2.83 83 TR_XM_SpammyWords3 2752 1.17 3.84 0.28 84 BOTNET_NORDNS 2558 0.90 3.57 0.01 85 RELAYCOUNTRY_IN 2557 0.94 3.56 0.07 86 RCVD_IN_MSPIKE_L5 2424 0.88 3.38 0.04 87 TM2_M_URI_OPT_OUT 2388 6.98 3.33 8.20 88 XMNumbers 2374 3.96 3.31 4.18 89 TR_XM_SpammyWords5 2292 2.02 3.20 1.63 90 USER_IN_DEF_DKIM_WL 2285 12.42 3.19 15.50 91 KHOP_HELO_FCRDNS 2284 1.48 3.18 0.91 92 MIME_HTML_ONLY_MULTI 2245 3.25 3.13 3.30 93 XM_OfRef6 2147 1.55 2.99 1.07 94 SpammyFromTLD_01 2125 1.05 2.96 0.41 95 XM_UB99 2105 0.74 2.93 0.00 96 XM_B_Phish66 2090 1.72 2.91 1.33 97 XM_DIRTYINTL 2072 4.28 2.89 4.74 98 XMSexyCombo_01 2061 1.22 2.87 0.67 99 RCVD_IN_RP_RNBL 2021 0.74 2.82 0.04 100 T_XMDrugObfuBody_14 1985 2.53 2.77 2.45 101 XMBdyGiftCard01 1979 1.36 2.76 0.89 102 XM_B_Unsub2 1941 1.34 2.71 0.89 103 XM_CamelCaseFrm001 1931 1.82 2.69 1.53 104 FROM_EXCESS_BASE64 1910 3.02 2.66 3.14 105 XMNoVowels 1873 1.85 2.61 1.60 106 T_TooManySym_01 1788 6.85 2.49 8.31 107 TR_XM_PHPDW 1754 0.84 2.45 0.30 108 HTML_IMAGE_RATIO_08 1707 2.00 2.38 1.88 109 URI_PHP_REDIR 1692 0.62 2.36 0.03 110 TM2_M_VERY_LONG_WORD 1646 1.45 2.29 1.17 111 XM_B_SpammyWords4 1632 0.97 2.28 0.53 112 TR_XM_PHPForged 1595 0.72 2.22 0.22 113 MIME_QP_LONG_LINE 1593 3.00 2.22 3.26 114 XM_UB999 1573 0.55 2.19 0.00 115 RCVD_IN_MSPIKE_L3 1571 0.63 2.19 0.10 116 TR_XM_FormFill2 1569 0.73 2.19 0.24 117 XM_H_PHPOS 1561 0.71 2.18 0.21 118 XMDiploma_00 1552 1.38 2.16 1.12 119 XM_ShortIntro_01 1510 0.79 2.10 0.35 120 RCVD_IN_PSBL 1504 0.54 2.10 0.02 121 T_XMDrugObfuBody_08 1464 1.34 2.04 1.10 122 URI_HEX 1460 1.55 2.04 1.39 123 XMBody_17 1436 0.81 2.00 0.42 124 HTML_MIME_NO_HTML_TAG 1408 1.85 1.96 1.81 125 BAYES_40 1323 3.59 1.84 4.17 126 DIET_1 1291 0.90 1.80 0.60 127 RCVD_IN_IADB_LISTED 1283 2.86 1.79 3.21 128 ALL_TRUSTED 1266 16.14 1.76 20.94 129 XM_UB60 1265 0.50 1.76 0.08 130 XMBrknScrpt_02 1225 1.19 1.71 1.02 131 TR_XM_BayesRelay 1196 0.42 1.67 0.00 132 XMStockSpam_06 1181 1.62 1.65 1.61 133 MAILING_LIST_MULTI 1158 1.94 1.61 2.05 134 T_XMHurry_00 1143 0.77 1.59 0.50 135 TR_XM_SB_Phish 1125 1.68 1.57 1.72 136 SUBJ_ALL_CAPS 1122 1.26 1.56 1.15 137 XM_Body_Dirty_Words_01 1117 1.15 1.56 1.01 138 XMSubMetaI_00 1107 1.01 1.54 0.83 139 RCVD_IN_IADB_SPF 1104 2.46 1.54 2.76 140 XM_URI_RBL 1092 0.45 1.52 0.09 141 BAYES_20 1085 5.52 1.51 6.85 142 XMSubPhish11 1073 1.65 1.50 1.71 143 RELAYCOUNTRY_PL 1066 0.40 1.49 0.03 144 XM_DK_Undo_01 1052 1.46 1.47 1.45 145 T_HTML_TAG_BALANCE_CENTER 1030 0.45 1.44 0.12 146 RCVD_IN_IADB_DK 1027 2.14 1.43 2.38 147 XM_B_COVIDMETA 1027 0.86 1.43 0.68 148 RCVD_IN_IADB_SENDERID 1022 2.20 1.42 2.47 149 IMPOTENCE 1020 0.36 1.42 0.01 150 XMSlimDrugH 1014 0.59 1.41 0.31 151 XMPhish30 1010 0.79 1.41 0.58 152 XM_H_Undi_Recip 1004 0.47 1.40 0.16 153 XM_H_PHPMailer 1001 0.74 1.40 0.51 154 T_FILL_THIS_FORM_SHORT 997 0.74 1.39 0.52 155 TR_XM_INV_DKIM 996 0.38 1.39 0.04 156 XMPhish08 973 0.47 1.36 0.17 157 TR_Mismatch_TLD_01 946 0.50 1.32 0.23 158 URIBL_BLACK 938 0.33 1.31 0.01 159 XM_ProductURIs 931 1.01 1.30 0.91 160 TooManyTo_002 925 1.41 1.29 1.45 161 TR_XM_COVIDMETA4 913 0.48 1.27 0.21 162 HTML_IMAGE_ONLY_08 908 0.40 1.27 0.12 163 HTTPS_HTTP_MISMATCH 895 0.81 1.25 0.66 164 T_XMDrugObfuBody_00 891 0.74 1.24 0.57 165 XM_B_SEO 870 0.44 1.21 0.18 166 RELAYCOUNTRY_AU 855 0.45 1.19 0.21 167 TooManyTo_003 840 1.07 1.17 1.04 168 RELAYCOUNTRY_SG 834 0.34 1.16 0.07 169 DKIM_ADSP_CUSTOM_MED 831 0.95 1.16 0.88 170 TR_Mismatch_TLD_02 826 0.34 1.15 0.06 171 TR_XM_SEO4 812 0.39 1.13 0.14 172 XMEmptySub 808 0.31 1.13 0.04 173 XM_H_Long_From02 807 0.96 1.12 0.91 174 NUMERIC_HTTP_ADDR 800 0.66 1.12 0.50 175 RELAYCOUNTRY_DZ 795 0.28 1.11 0.00 176 XMGenDplmaNmb 793 0.71 1.11 0.57 177 TooManyTo_004 766 0.87 1.07 0.80 178 XM_UB80 764 0.29 1.07 0.03 179 HTML_FONT_SIZE_LARGE 759 0.37 1.06 0.15 180 URI_TRY_3LD 750 0.92 1.05 0.87 181 URIBL_SBL_A 750 0.34 1.05 0.11 182 SHOPIFY_IMG_NOT_RCVD_SFY 729 0.38 1.02 0.16 183 TooManyTo_005 723 0.77 1.01 0.69 184 TR_XM_COVIDMETA1 707 0.34 0.99 0.12 185 FORGED_GMAIL_RCVD 691 0.55 0.96 0.41 186 RELAYCOUNTRY_FR 690 3.71 0.96 4.62 187 XM_B_REG_HTML 683 0.67 0.95 0.57 188 BAYES_00 681 8.04 0.95 10.41 189 TR_XM_FormFill 679 0.24 0.95 0.00 190 TM2_M_A_HREF_HREF 674 0.44 0.94 0.27 191 NML_ADSP_CUSTOM_MED 669 0.65 0.93 0.55 192 HK_RANDOM_REPLYTO 669 0.33 0.93 0.13 193 HELO_NODOT 668 0.60 0.93 0.49 194 HELO_NO_DOMAIN 668 0.60 0.93 0.49 195 PLING_QUERY 665 0.53 0.93 0.40 196 XMReplyNow 664 0.32 0.93 0.12 197 XM_UB95 662 0.25 0.92 0.02 198 XMSubMetaSSx_00 644 0.38 0.90 0.21 199 XM_SPF_Unknown 642 0.48 0.89 0.34 200 RELAYCOUNTRY_NL 639 0.35 0.89 0.17 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 163734 80.45 93.08 76.23 2 RELAYCOUNTRY_US 154021 72.87 76.35 71.71 3 DKIM_SIGNED 153574 75.40 87.09 71.50 4 XM_DK_Pass 149755 73.07 83.08 69.72 5 XM_B_Unicode 147400 70.77 77.19 68.63 6 DKIM_VALID 144788 70.86 81.19 67.41 7 DCC_CHECK_NEGATIVE 124711 48.68 20.59 58.06 8 DKIM_VALID_AU 118775 57.40 63.68 55.30 9 BAYES_50 112186 49.77 42.41 52.23 10 XMListUnsubscribeExists 94168 51.12 72.92 43.84 11 DCC_CHECK 90015 51.29 79.37 41.91 12 XM_B_Unicode3 88477 41.82 43.72 41.19 13 XM_B_SpammyWords 86967 47.40 68.08 40.49 14 RCVD_IN_MSPIKE_WL 63060 27.15 20.55 29.36 15 HTML_FONT_LOW_CONTRAST 59154 30.25 38.38 27.54 16 DKIM_VALID_EF 56267 26.77 28.49 26.20 17 LOC_TINY_FONT_1 55458 28.00 34.55 25.82 18 T_TM2_M_HEADER_IN_MSG 55076 24.40 20.67 25.64 19 MIME_HTML_ONLY 47282 23.63 28.47 22.01 20 RCVD_IN_MSPIKE_H2 46152 23.98 31.44 21.49 21 ALL_TRUSTED 44980 16.14 1.76 20.94 22 FVGT_m_MULTI_ODD 43956 21.46 24.45 20.46 23 XMSubLong 42770 21.11 24.70 19.91 24 XM_B_SpammyWords2 39480 23.39 38.39 18.38 25 XM_Body_Dirty_Words 35137 18.07 23.21 16.36 26 RCVD_IN_MSPIKE_H3 33303 14.38 11.02 15.50 27 USER_IN_DEF_DKIM_WL 33297 12.42 3.19 15.50 28 T_KAM_HTML_FONT_INVALID 30203 16.82 25.07 14.06 29 XM_Multi_Part_URI 26094 12.81 14.79 12.15 30 ANY_BOUNCE_MESSAGE 25485 9.05 0.62 11.87 31 BOUNCE_MESSAGE 25482 9.05 0.62 11.86 32 RCVD_IN_MSPIKE_H4 25326 11.01 8.68 11.79 33 XM_B_Unsub 24598 11.30 10.85 11.45 34 XM_DKIMWhitelistDomains 23502 8.21 0.01 10.94 35 BAYES_00 22362 8.04 0.95 10.41 36 BAYES_60 21258 9.33 7.64 9.90 37 XMSexyCombo_05 20683 10.07 11.41 9.63 38 FSL_BULK_SIG 19367 9.98 12.86 9.02 39 XM_Evil_Numbers_Gen 19228 8.78 8.25 8.95 40 RCVD_IN_RP_SAFE 18087 7.76 5.77 8.42 41 T_TooManySym_01 17840 6.85 2.49 8.31 42 TM2_M_URI_OPT_OUT 17621 6.98 3.33 8.20 43 RELAYCOUNTRY_META 17291 11.95 23.61 8.05 44 XM_DK_Undo_02 17096 17.45 45.88 7.96 45 UNPARSEABLE_RELAY 16879 9.31 13.64 7.86 46 RCVD_IN_RP_CERTIFIED 16146 6.74 4.41 7.52 47 LotsOfNums_01 15985 6.87 5.16 7.44 48 BAYES_99 15254 13.72 33.54 7.10 49 HTML_IMAGE_RATIO_04 14766 6.47 5.27 6.87 50 XM_SendGrid 14749 7.51 9.43 6.87 51 BAYES_20 14719 5.52 1.51 6.85 52 TR_XM_DK_Bayes 14375 5.15 0.53 6.69 53 TR_XM_DK_Bayes1 14022 5.02 0.52 6.53 54 TooManyTo_001 13958 6.59 6.86 6.50 55 HTML_IMAGE_RATIO_02 13476 6.68 7.88 6.27 56 TR_XM_UnparsRelay 13368 7.98 13.25 6.22 57 TR_XM_DKIM_Undo 13184 13.77 36.63 6.14 58 LOTS_OF_MONEY 12999 7.32 11.11 6.05 59 BAYES_999 12889 11.14 26.54 6.00 60 TR_XM_DK_Bayes2 12830 4.60 0.47 5.97 61 UNTRUSTED_Relay 12664 8.24 15.25 5.90 62 BOTNET_IPINHOSTNAME 11227 7.55 14.51 5.23 63 XM_UB50 11116 5.83 7.78 5.18 64 XM_DIRTYINTL 10184 4.28 2.89 4.74 65 MPART_ALT_DIFF 10088 6.08 10.23 4.70 66 XM_H_Long_From01 10025 5.03 6.13 4.67 67 XM_H_Trusted_IP 9941 3.47 0.00 4.63 68 RELAYCOUNTRY_FR 9932 3.71 0.96 4.62 69 XMStrtUSub 9930 4.92 5.79 4.62 70 XMBounce_01 9639 3.39 0.11 4.49 71 BAYES_80 9429 5.09 7.21 4.39 72 TR_XM_DK_SendGrid 9032 4.43 5.11 4.21 73 XMNumbers 8972 3.96 3.31 4.18 74 BAYES_40 8960 3.59 1.84 4.17 75 XM_UncommonTLD01 8950 5.62 9.97 4.17 76 XM_B_SpammyWords3 8896 6.58 13.87 4.14 77 XMSubMetaSx_00 8787 5.04 7.88 4.09 78 DKIM_INVALID 8786 4.54 5.90 4.09 79 TR_XM_SpammyWords4 8157 4.80 7.80 3.80 80 TR_DCC_Bayes_99 8057 9.26 25.77 3.75 81 T_TooManySym_02 8039 3.01 0.82 3.74 82 HTML_IMAGE_RATIO_06 7798 3.78 4.22 3.63 83 INVALID_MSGID 7667 2.76 0.35 3.57 84 MSGID_NOFQDN1 7345 2.61 0.19 3.42 85 MIME_HTML_ONLY_MULTI 7078 3.25 3.13 3.30 86 MIME_QP_LONG_LINE 7002 3.00 2.22 3.26 87 RCVD_IN_IADB_LISTED 6898 2.86 1.79 3.21 88 FROM_EXCESS_BASE64 6739 3.02 2.66 3.14 89 XM_B_Phish_Phrases 6354 3.75 6.11 2.96 90 TO_MALFORMED 6262 2.19 0.02 2.92 91 BAYES_95 6074 3.11 3.95 2.83 92 T_REMOTE_IMAGE 5985 3.18 4.36 2.79 93 RCVD_IN_IADB_SPF 5936 2.46 1.54 2.76 94 TR_XM_PhishingBody 5397 3.45 6.28 2.51 95 RCVD_IN_IADB_SENDERID 5295 2.20 1.42 2.47 96 T_XMDrugObfuBody_14 5272 2.53 2.77 2.45 97 RCVD_IN_IADB_DK 5104 2.14 1.43 2.38 98 MIME_HTML_MOSTLY 5012 4.00 9.00 2.33 99 TVD_RCVD_IP 4743 1.73 0.30 2.21 100 IN_HORDE_ADDRESS_BOOK 4703 1.66 0.06 2.19 101 XMSubNoVowel 4583 1.80 0.79 2.13 102 BAYES_05 4543 1.80 0.85 2.12 103 RCVD_IN_MSPIKE_H5 4431 1.76 0.85 2.06 104 MAILING_LIST_MULTI 4398 1.94 1.61 2.05 105 XM_PDF 4390 1.70 0.66 2.04 106 RCVD_IN_IADB_VOUCHED 4368 1.73 0.81 2.03 107 XM_B_SpammyTLD 4325 3.35 7.34 2.01 108 URI_NOVOWEL 4325 3.23 6.88 2.01 109 HTML_IMAGE_RATIO_08 4028 2.00 2.38 1.88 110 HTML_MIME_NO_HTML_TAG 3891 1.85 1.96 1.81 111 TR_XM_SB_Phish 3685 1.68 1.57 1.72 112 XMSubPhish11 3665 1.65 1.50 1.71 113 TR_XM_SpammyWords2 3570 4.39 12.55 1.66 114 TR_XM_SpammyWords5 3502 2.02 3.20 1.63 115 XMStockSpam_06 3461 1.62 1.65 1.61 116 XMNoVowels 3439 1.85 2.61 1.60 117 XMBSHREFv2 3369 1.22 0.18 1.57 118 HELO_MISC_IP 3365 1.23 0.21 1.57 119 XM_CamelCaseFrm001 3277 1.82 2.69 1.53 120 XM_DK_Undo_01 3123 1.46 1.47 1.45 121 TooManyTo_002 3119 1.41 1.29 1.45 122 URI_HEX 2993 1.55 2.04 1.39 123 XMGappySubj_01 2986 1.06 0.07 1.39 124 BOTNET 2908 4.59 14.27 1.35 125 HTML_IMAGE_ONLY_20 2861 1.07 0.30 1.33 126 XM_B_Phish66 2849 1.72 2.91 1.33 127 RCVD_IN_IADB_OPTIN 2735 1.11 0.63 1.27 128 XM_GoogleGroups 2523 1.08 0.81 1.17 129 TM2_M_VERY_LONG_WORD 2508 1.45 2.29 1.17 130 SUBJ_ALL_CAPS 2479 1.26 1.56 1.15 131 TR_Symld_Words 2456 1.07 0.86 1.14 132 RELAYCOUNTRY_CA 2442 2.39 6.16 1.14 133 HTML_FONT_FACE_BAD 2418 1.05 0.83 1.13 134 XMDiploma_00 2399 1.38 2.16 1.12 135 T_TooManySym_03 2388 0.95 0.46 1.11 136 T_XMDrugObfuBody_08 2367 1.34 2.04 1.10 137 XM_SPF_SoftFail 2365 1.88 4.23 1.10 138 XM_OfRef6 2301 1.55 2.99 1.07 139 TooManyTo_003 2227 1.07 1.17 1.04 140 XMBrknScrpt_02 2192 1.19 1.71 1.02 141 XM_Body_Dirty_Words_01 2166 1.15 1.56 1.01 142 XM_ProductURIs 1962 1.01 1.30 0.91 143 KHOP_HELO_FCRDNS 1961 1.48 3.18 0.91 144 XM_H_Long_From02 1954 0.96 1.12 0.91 145 XMBdyGiftCard01 1906 1.36 2.76 0.89 146 XM_B_Unsub2 1901 1.34 2.71 0.89 147 DKIM_ADSP_CUSTOM_MED 1889 0.95 1.16 0.88 148 URI_TRY_3LD 1876 0.92 1.05 0.87 149 TR_MetaPhish_Combo_01 1873 0.82 0.65 0.87 150 TVD_SPACE_RATIO_MINFP 1859 0.67 0.10 0.87 151 XM_B_COPY_HTML 1777 0.80 0.73 0.83 152 XMSubMetaI_00 1773 1.01 1.54 0.83 153 TVD_SPACE_RATIO 1765 0.65 0.13 0.82 154 TR_MSPIKEBAYES00 1718 0.60 0.00 0.80 155 TooManyTo_004 1715 0.87 1.07 0.80 156 XMHTMLBadTable_001 1598 0.78 0.89 0.74 157 XMBody_95 1568 0.61 0.24 0.73 158 RCVD_IN_BL_SPAMCOP_NET 1500 3.14 10.45 0.70 159 TooManyTo_005 1480 0.77 1.01 0.69 160 XM_B_COVIDMETA 1450 0.86 1.43 0.68 161 XMSexyCombo_01 1441 1.22 2.87 0.67 162 HTTPS_HTTP_MISMATCH 1414 0.81 1.25 0.66 163 IN_ZIMBRA_NJ_WHITELIST 1385 0.49 0.01 0.64 164 USER_IN_WELCOMELIST 1353 0.47 0.00 0.63 165 USER_IN_WHITELIST 1353 0.47 0.00 0.63 166 RDNS_DYNAMIC 1327 0.66 0.79 0.62 167 DIET_1 1296 0.90 1.80 0.60 168 XMPhish30 1251 0.79 1.41 0.58 169 XMGenDplmaNmb 1233 0.71 1.11 0.57 170 XM_B_REG_HTML 1230 0.67 0.95 0.57 171 T_XMDrugObfuBody_00 1225 0.74 1.24 0.57 172 XMHTML_After_End 1210 0.58 0.64 0.56 173 PDS_OTHER_BAD_TLD 1206 1.62 4.78 0.56 174 NML_ADSP_CUSTOM_MED 1189 0.65 0.93 0.55 175 RELAYCOUNTRY_GB 1170 0.58 0.69 0.54 176 XM_B_SpammyWords4 1140 0.97 2.28 0.53 177 T_FILL_THIS_FORM_SHORT 1115 0.74 1.39 0.52 178 XMLngstWrd_00 1115 0.59 0.78 0.52 179 XM_H_PHPMailer 1106 0.74 1.40 0.51 180 T_TooManySym_04 1088 0.40 0.07 0.51 181 NUMERIC_HTTP_ADDR 1082 0.66 1.12 0.50 182 DATE_IN_PAST_03_06 1079 0.52 0.57 0.50 183 T_XMHurry_00 1065 0.77 1.59 0.50 184 HELO_NODOT 1063 0.60 0.93 0.49 185 HELO_NO_DOMAIN 1063 0.60 0.93 0.49 186 XM_S_SpammyWords 1041 0.48 0.48 0.48 187 TR_XM_Spammywords 1041 0.48 0.48 0.48 188 XMCapTrack 1005 0.48 0.51 0.47 189 XMSubMetaSxObfu_02 1005 0.47 0.46 0.47 190 XMLngstWrd_01 981 0.53 0.73 0.46 191 XMBody_17 899 0.81 2.00 0.42 192 FORGED_GMAIL_RCVD 885 0.55 0.96 0.41 193 SpammyFromTLD_01 879 1.05 2.96 0.41 194 XMLngstWrd_02 869 0.48 0.71 0.40 195 PLING_QUERY 855 0.53 0.93 0.40 196 DKIM_ADSP_NXDOMAIN 852 0.41 0.45 0.40 197 MPART_ALT_DIFF_COUNT 815 0.40 0.44 0.38 198 XMPhish14 785 0.41 0.53 0.37 199 NO_DNS_FOR_FROM 773 0.41 0.58 0.36 200 HTML_TAG_BALANCE_BODY 766 0.48 0.86 0.36 ----------------------------------------------------------------------