Email: 267099 Autolearn: 0 AvgScore: 4.92 AvgScanTime: 1.26 sec Spam: 87866 Autolearn: 0 AvgScore: 14.07 AvgScanTime: 1.36 sec Ham: 179233 Autolearn: 0 AvgScore: 0.43 AvgScanTime: 1.20 sec Time Spent Running SA: 93.13 hours Time Spent Processing Spam: 33.26 hours Time Spent Processing Ham: 59.86 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 83242 88.42 94.74 85.32 2 DKIM_SIGNED 75371 74.24 85.78 68.59 3 XM_DK_Pass 73054 72.75 83.14 67.65 4 DKIM_VALID 72645 72.29 82.68 67.20 5 XM_B_Unicode 70304 69.99 80.01 65.08 6 RELAYCOUNTRY_US 68881 74.93 78.39 73.24 7 DCC_CHECK 67320 56.41 76.62 46.51 8 XMListUnsubscribeExists 59878 55.22 68.15 48.88 9 DKIM_VALID_AU 59410 60.83 67.61 57.51 10 XM_B_SpammyWords 58200 49.82 66.24 41.77 11 XM_B_Unicode3 43036 44.98 48.98 43.02 12 LOC_TINY_FONT_1 40493 36.52 46.08 31.83 13 T_SCC_BODY_TEXT_LINE 35707 41.61 40.64 42.08 14 XM_B_SpammyWords2 35636 25.83 40.56 18.61 15 HTML_FONT_LOW_CONTRAST 35575 39.20 40.49 38.57 16 XM_DK_Undo_02 35358 16.75 40.24 5.24 17 BAYES_50 32568 51.87 37.07 59.13 18 RCVD_IN_MSPIKE_H2 29940 27.62 34.07 24.46 19 BAYES_99 28848 13.75 32.83 4.40 20 FVGT_m_MULTI_ODD 28382 27.40 32.30 24.99 21 T_KAM_HTML_FONT_INVALID 27691 22.56 31.52 18.17 22 MIME_HTML_ONLY 26350 30.18 29.99 30.27 23 TR_XM_DKIM_Undo 24701 10.89 28.11 2.45 24 DKIM_VALID_EF 23182 26.37 26.38 26.36 25 BAYES_999 22219 10.68 25.29 3.53 26 TR_DCC_Bayes_99 21480 9.46 24.45 2.11 27 XMSubLong 21062 21.57 23.97 20.39 28 DCC_CHECK_NEGATIVE 20032 43.37 22.80 53.46 29 TR_XM_DK_Unsub 17930 15.76 20.41 13.48 30 T_TM2_M_HEADER_IN_MSG 17673 26.17 20.11 29.14 31 RELAYCOUNTRY_META 17163 8.54 19.53 3.15 32 XM_Multi_Part_URI 16855 15.93 19.18 14.34 33 TR_MAX_INTL_RELAY 15214 11.02 17.32 7.93 34 UNPARSEABLE_RELAY 14564 14.18 16.58 13.01 35 XM_B_Unsub 14462 11.68 16.46 9.34 36 TR_XM_BayesUnsub 13894 9.94 15.81 7.06 37 XM_B_SpammyWords3 13319 8.02 15.16 4.52 38 BOTNET_IPINHOSTNAME 10828 6.16 12.32 3.13 39 TR_XM_SpammyRelay 10742 5.21 12.23 1.77 40 TR_XM_SpammyWords2 10736 4.43 12.22 0.62 41 FSL_BULK_SIG 10665 10.10 12.14 9.10 42 BOTNET 9964 4.41 11.34 1.02 43 BAYES_80 9512 7.30 10.83 5.57 44 BAYES_60 8267 9.51 9.41 9.57 45 LOTS_OF_MONEY 8266 6.19 9.41 4.62 46 TR_XM_UnparsRelay 8101 4.04 9.22 1.50 47 UNTRUSTED_Relay 7960 3.95 9.06 1.44 48 XM_B_Phish_Phrases 7377 5.82 8.40 4.56 49 TR_XM_SpammyWords4 7209 4.92 8.20 3.31 50 RCVD_IN_BL_SPAMCOP_NET 6671 2.83 7.59 0.49 51 XM_Body_Dirty_Words 6555 3.97 7.46 2.26 52 HTML_IMAGE_RATIO_02 6516 6.27 7.42 5.71 53 RELAYCOUNTRY_CA 6471 3.27 7.36 1.26 54 XM_Evil_Numbers_Gen 6232 9.09 7.09 10.08 55 XMSubMetaSx_00 5816 4.52 6.62 3.49 56 LotsOfNums_01 5530 6.19 6.29 6.14 57 XM_UncommonTLD01 5453 5.41 6.21 5.02 58 XM_B_SpammyTLD 5388 4.23 6.13 3.30 59 BAYES_95 5311 3.57 6.04 2.35 60 XM_H_GMP 5250 6.18 5.98 6.28 61 TooManyTo_001 5148 5.70 5.86 5.62 62 ANY_BOUNCE_MESSAGE 4926 5.09 5.61 4.84 63 BOUNCE_MESSAGE 4925 5.09 5.61 4.83 64 TR_XM_PhishingBody 4852 2.90 5.52 1.61 65 MPART_ALT_DIFF 4814 4.70 5.48 4.31 66 XM_H_Long_From01 4640 5.04 5.28 4.92 67 XMSexyCombo_05 4218 2.64 4.80 1.58 68 XM_UB50 4173 2.08 4.75 0.77 69 XM_CamelCaseFrm001 4139 3.23 4.71 2.51 70 TR_XM_NoHeaderRelay 3955 1.65 4.50 0.26 71 TR_XM_SPAMCOP 3644 1.46 4.15 0.15 72 HTML_IMAGE_RATIO_04 3630 4.31 4.13 4.39 73 MIME_QP_LONG_LINE 3604 3.08 4.10 2.58 74 XM_B_PhoneNumber 3583 5.42 4.08 6.08 75 T_FILL_THIS_FORM_SHORT 3546 1.76 4.04 0.64 76 RCVD_IN_VALIDITY_RPBL 3516 1.34 4.00 0.04 77 URI_WPADMIN 3506 7.99 3.99 9.95 78 XMStrtUSub 3464 4.87 3.94 5.33 79 T_XMDrugObfuBody_14 3454 2.87 3.93 2.35 80 XMNumbers 3423 4.41 3.90 4.66 81 XM_B_Investor 3285 2.07 3.74 1.26 82 DKIM_ADSP_NXDOMAIN 3284 1.55 3.74 0.47 83 MIME_HTML_MOSTLY 3216 2.86 3.66 2.46 84 TR_XM_SpammyWords5 3204 2.26 3.65 1.57 85 RCVD_IN_MSPIKE_H3 2978 3.96 3.39 4.23 86 RCVD_IN_MSPIKE_WL 2978 3.96 3.39 4.23 87 XM_URI_RBL 2971 1.46 3.38 0.52 88 TM2_M_VERY_LONG_WORD 2895 1.99 3.29 1.35 89 ALL_TRUSTED 2885 16.97 3.28 23.68 90 HTML_IMAGE_RATIO_06 2882 2.86 3.28 2.66 91 XM_OfRef6 2859 1.57 3.25 0.74 92 DKIM_INVALID 2726 1.95 3.10 1.39 93 XM_DK_Undo_01 2580 1.91 2.94 1.41 94 XMBody_17 2528 1.40 2.88 0.67 95 MIME_HTML_ONLY_MULTI 2527 2.65 2.88 2.53 96 HTML_MIME_NO_HTML_TAG 2464 8.70 2.80 11.59 97 RCVD_IN_VALIDITY_SAFE 2456 5.05 2.80 6.15 98 XM_SPF_SoftFail 2427 1.52 2.76 0.91 99 T_XMHurry_00 2403 1.49 2.73 0.88 100 FROM_EXCESS_BASE64 2386 2.44 2.72 2.30 101 XMDiploma_00 2360 1.64 2.69 1.13 102 XMBounce_01 2360 0.89 2.69 0.01 103 XPRIO 2346 0.88 2.67 0.00 104 HTML_IMAGE_RATIO_08 2320 2.18 2.64 1.96 105 URI_OPTOUT_3LD 2287 0.89 2.60 0.06 106 T_XMDrugObfuBody_08 2276 1.58 2.59 1.08 107 RELAYCOUNTRY_AU 2261 1.19 2.57 0.51 108 XMPhish30 2199 1.21 2.50 0.58 109 RCVD_IN_PSBL 2166 1.21 2.47 0.59 110 XM_B_DNDMA 2015 1.28 2.29 0.78 111 XMBrknScrpt_02 1999 1.57 2.28 1.23 112 SUBJ_ALL_CAPS 1892 1.75 2.15 1.55 113 USER_IN_DEF_DKIM_WL 1859 12.30 2.12 17.29 114 XM_B_SpammyWords4 1850 1.27 2.11 0.87 115 XMSubMetaI_00 1833 1.13 2.09 0.66 116 MAILING_LIST_MULTI 1789 2.00 2.04 1.99 117 XM_B_Unsub2 1785 1.42 2.03 1.13 118 TM2_M_URI_OPT_OUT 1772 1.81 2.02 1.71 119 XM_B_URI_Unicode 1727 1.51 1.97 1.29 120 SpammyFromTLD_02 1663 0.73 1.89 0.17 121 XMStockSpam_06 1655 1.97 1.88 2.01 122 TR_LOTS_OF_MONEY3 1632 0.80 1.86 0.28 123 T_TooManySym_01 1615 5.52 1.84 7.32 124 URI_HEX 1601 1.23 1.82 0.93 125 RCVD_IN_VALIDITY_CERTIFIED 1577 3.75 1.79 4.71 126 MIME_HEADER_CTYPE_ONLY 1480 7.33 1.68 10.10 127 RELAYCOUNTRY_TH 1461 0.55 1.66 0.00 128 SHOPIFY_IMG_NOT_RCVD_SFY 1445 0.80 1.64 0.38 129 TR_XM_PHPDW 1418 0.70 1.61 0.25 130 KHOP_HELO_FCRDNS 1413 1.75 1.61 1.82 131 LongTLD 1385 0.64 1.58 0.19 132 TR_XM_PHPForged 1380 0.68 1.57 0.24 133 TR_XM_FormFill2 1373 0.68 1.56 0.25 134 RELAYCOUNTRY_CN 1358 0.55 1.55 0.07 135 DIET_1 1356 0.89 1.54 0.57 136 SpammyFromTLD_01 1354 0.82 1.54 0.47 137 XM_H_PHPOS 1334 0.66 1.52 0.23 138 XMClaimOffer 1330 0.56 1.51 0.09 139 HTTPS_HTTP_MISMATCH 1321 0.75 1.50 0.38 140 XM_UB60 1315 0.53 1.50 0.05 141 URI_NOVOWEL 1288 1.64 1.47 1.73 142 XM_B_COPY_HTML 1249 1.44 1.42 1.45 143 RCVD_IN_PBL 1247 0.80 1.42 0.49 144 BAYES_40 1181 4.18 1.34 5.57 145 BOTNET_NORDNS 1161 0.44 1.32 0.01 146 TR_XM_INV_DKIM 1146 0.54 1.30 0.17 147 T_REMOTE_IMAGE 1129 2.41 1.28 2.97 148 XM_B_REG_HTML 1122 0.55 1.28 0.20 149 XM_DIRTYINTL 1117 0.47 1.27 0.08 150 XMSubMetaI_01 1115 0.43 1.27 0.02 151 XMSubMetaD_03 1113 0.46 1.27 0.06 152 XM_UB99 1105 0.42 1.26 0.01 153 XM_HighProb1 1098 0.42 1.25 0.01 154 T_XMDrugObfuBody_00 1088 0.78 1.24 0.56 155 XM_H_Long_From02 1064 0.84 1.21 0.66 156 XM_H_Undi_Recip 1063 0.49 1.21 0.14 157 TR_Mismatch_TLD_02 1063 0.43 1.21 0.05 158 URI_TRY_3LD 1026 0.74 1.17 0.53 159 HTML_TAG_BALANCE_BODY 1011 1.01 1.15 0.94 160 PLING_QUERY 988 0.60 1.12 0.34 161 DEAR_FRIEND 986 0.43 1.12 0.09 162 TVD_RCVD_IP 977 1.22 1.11 1.27 163 DKIM_ADSP_CUSTOM_MED 969 0.87 1.10 0.76 164 RDNS_DYNAMIC 966 0.52 1.10 0.23 165 MISSING_HEADERS 926 0.49 1.05 0.21 166 XM_B_Phish66 919 0.56 1.05 0.33 167 XMReplyNow 916 0.45 1.04 0.16 168 MultiRelay_CC 915 0.41 1.04 0.10 169 TR_MetaPhish_Combo_01 914 0.80 1.04 0.68 170 HDRS_MISSP 901 0.34 1.03 0.01 171 RELAYCOUNTRY_RU 882 0.35 1.00 0.02 172 TR_XM_InvalidRelay 880 0.34 1.00 0.01 173 BAYES_20 877 2.53 1.00 3.28 174 NML_ADSP_CUSTOM_MED 876 0.67 1.00 0.51 175 XMGenDplmaNmb 864 0.63 0.98 0.46 176 HELO_DYNAMIC_SPLIT_IP 848 0.33 0.97 0.01 177 XM_ProductURIs 843 0.75 0.96 0.65 178 TR_Mismatch_TLD_01 835 0.46 0.95 0.22 179 FORGED_GMAIL_RCVD 832 0.65 0.95 0.51 180 XM_H_PHPMailer 814 0.85 0.93 0.81 181 FONT_INVIS_LONG_LINE 804 0.36 0.92 0.09 182 XM_UB999 790 0.30 0.90 0.00 183 XM_SendGrid 786 1.05 0.89 1.13 184 HTML_FONT_TINY_NORDNS 784 0.31 0.89 0.02 185 XM_UB80 782 0.30 0.89 0.01 186 THIS_AD 778 0.48 0.89 0.29 187 XM_GoogleGroups 763 1.07 0.87 1.16 188 XMSexyCombo_01 747 0.39 0.85 0.17 189 T_STY_INVIS_DIRECT 736 0.65 0.84 0.55 190 HTML_FONT_FACE_BAD 734 0.55 0.84 0.41 191 TR_LOTS_OF_MONEY2 734 0.38 0.84 0.16 192 T_MONEY_PERCENT 734 0.38 0.84 0.16 193 TR_XM_RelayPhish 729 0.31 0.83 0.06 194 TR_Symld_Words 722 1.04 0.82 1.15 195 MPART_ALT_DIFF_COUNT 717 0.59 0.82 0.48 196 RCVD_IN_XBL 712 0.27 0.81 0.01 197 XMBody_78 706 0.46 0.80 0.29 198 XMPhish14 701 0.50 0.80 0.35 199 XMSlimDrugH 696 0.68 0.79 0.62 200 FORGED_MUA_OUTLOOK 677 0.28 0.77 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 152917 88.42 94.74 85.32 2 RELAYCOUNTRY_US 131268 74.93 78.39 73.24 3 DKIM_SIGNED 122929 74.24 85.78 68.59 4 XM_DK_Pass 121249 72.75 83.14 67.65 5 DKIM_VALID 120444 72.29 82.68 67.20 6 XM_B_Unicode 116646 69.99 80.01 65.08 7 BAYES_50 105981 51.87 37.07 59.13 8 DKIM_VALID_AU 103071 60.83 67.61 57.51 9 DCC_CHECK_NEGATIVE 95819 43.37 22.80 53.46 10 XMListUnsubscribeExists 87618 55.22 68.15 48.88 11 DCC_CHECK 83362 56.41 76.62 46.51 12 XM_B_Unicode3 77113 44.98 48.98 43.02 13 T_SCC_BODY_TEXT_LINE 75428 41.61 40.64 42.08 14 XM_B_SpammyWords 74857 49.82 66.24 41.77 15 HTML_FONT_LOW_CONTRAST 69133 39.20 40.49 38.57 16 LOC_TINY_FONT_1 57044 36.52 46.08 31.83 17 MIME_HTML_ONLY 54261 30.18 29.99 30.27 18 T_TM2_M_HEADER_IN_MSG 52220 26.17 20.11 29.14 19 DKIM_VALID_EF 47247 26.37 26.38 26.36 20 FVGT_m_MULTI_ODD 44793 27.40 32.30 24.99 21 RCVD_IN_MSPIKE_H2 43836 27.62 34.07 24.46 22 ALL_TRUSTED 42450 16.97 3.28 23.68 23 XMSubLong 36543 21.57 23.97 20.39 24 XM_B_SpammyWords2 33350 25.83 40.56 18.61 25 T_KAM_HTML_FONT_INVALID 32567 22.56 31.52 18.17 26 USER_IN_DEF_DKIM_WL 30987 12.30 2.12 17.29 27 XM_Multi_Part_URI 25698 15.93 19.18 14.34 28 TR_XM_DK_Unsub 24167 15.76 20.41 13.48 29 UNPARSEABLE_RELAY 23311 14.18 16.58 13.01 30 HTML_MIME_NO_HTML_TAG 20765 8.70 2.80 11.59 31 MIME_HEADER_CTYPE_ONLY 18103 7.33 1.68 10.10 32 XM_Evil_Numbers_Gen 18059 9.09 7.09 10.08 33 URI_WPADMIN 17839 7.99 3.99 9.95 34 BAYES_60 17146 9.51 9.41 9.57 35 XM_B_Unsub 16748 11.68 16.46 9.34 36 FSL_BULK_SIG 16316 10.10 12.14 9.10 37 XM_DKIMWhitelistDomains 15205 5.71 0.05 8.48 38 BAYES_00 14910 5.71 0.40 8.32 39 TR_MAX_INTL_RELAY 14207 11.02 17.32 7.93 40 T_TooManySym_01 13120 5.52 1.84 7.32 41 TR_XM_BayesUnsub 12646 9.94 15.81 7.06 42 XM_H_GMP 11259 6.18 5.98 6.28 43 TR_XM_DK_Bayes 11205 4.28 0.27 6.25 44 TR_XM_DK_Bayes1 11089 4.24 0.27 6.19 45 RCVD_IN_VALIDITY_SAFE 11021 5.05 2.80 6.15 46 LotsOfNums_01 11006 6.19 6.29 6.14 47 XM_B_PhoneNumber 10897 5.42 4.08 6.08 48 HTML_IMAGE_RATIO_02 10241 6.27 7.42 5.71 49 TooManyTo_001 10071 5.70 5.86 5.62 50 BAYES_80 9992 7.30 10.83 5.57 51 BAYES_40 9985 4.18 1.34 5.57 52 TR_XM_DK_Bayes2 9674 3.69 0.20 5.40 53 XMStrtUSub 9550 4.87 3.94 5.33 54 XM_DK_Undo_02 9386 16.75 40.24 5.24 55 IN_ZIMBRA_NJ_WHITELIST 9381 3.53 0.05 5.23 56 XM_UncommonTLD01 8990 5.41 6.21 5.02 57 XM_H_Long_From01 8827 5.04 5.28 4.92 58 ANY_BOUNCE_MESSAGE 8678 5.09 5.61 4.84 59 BOUNCE_MESSAGE 8664 5.09 5.61 4.83 60 RCVD_IN_VALIDITY_CERTIFIED 8443 3.75 1.79 4.71 61 XMNumbers 8350 4.41 3.90 4.66 62 LOTS_OF_MONEY 8279 6.19 9.41 4.62 63 XM_B_Phish_Phrases 8181 5.82 8.40 4.56 64 XM_B_SpammyWords3 8108 8.02 15.16 4.52 65 BAYES_99 7882 13.75 32.83 4.40 66 HTML_IMAGE_RATIO_04 7875 4.31 4.13 4.39 67 MPART_ALT_DIFF 7733 4.70 5.48 4.31 68 T_TooManySym_02 7652 3.04 0.55 4.27 69 RCVD_IN_MSPIKE_WL 7589 3.96 3.39 4.23 70 RCVD_IN_MSPIKE_H3 7589 3.96 3.39 4.23 71 INVALID_MSGID 6597 2.55 0.23 3.68 72 BAYES_999 6320 10.68 25.29 3.53 73 TO_MALFORMED 6302 2.36 0.00 3.52 74 XMSubMetaSx_00 6251 4.52 6.62 3.49 75 TR_XM_SpammyWords4 5930 4.92 8.20 3.31 76 XM_B_SpammyTLD 5919 4.23 6.13 3.30 77 BAYES_20 5877 2.53 1.00 3.28 78 RELAYCOUNTRY_META 5641 8.54 19.53 3.15 79 BOTNET_IPINHOSTNAME 5614 6.16 12.32 3.13 80 T_REMOTE_IMAGE 5317 2.41 1.28 2.97 81 HTML_IMAGE_RATIO_06 4763 2.86 3.28 2.66 82 MIME_QP_LONG_LINE 4621 3.08 4.10 2.58 83 MIME_HTML_ONLY_MULTI 4538 2.65 2.88 2.53 84 XM_CamelCaseFrm001 4491 3.23 4.71 2.51 85 MIME_HTML_MOSTLY 4413 2.86 3.66 2.46 86 TR_XM_DKIM_Undo 4393 10.89 28.11 2.45 87 BAYES_95 4212 3.57 6.04 2.35 88 T_XMDrugObfuBody_14 4209 2.87 3.93 2.35 89 T_TVD_MIME_NO_HEADERS 4179 1.58 0.05 2.33 90 TooManyTo_002 4170 1.74 0.55 2.33 91 FROM_EXCESS_BASE64 4129 2.44 2.72 2.30 92 XM_Body_Dirty_Words 4048 3.97 7.46 2.26 93 TR_DCC_Bayes_99 3787 9.46 24.45 2.11 94 XMStockSpam_06 3600 1.97 1.88 2.01 95 MAILING_LIST_MULTI 3560 2.00 2.04 1.99 96 HTML_IMAGE_RATIO_08 3509 2.18 2.64 1.96 97 RCVD_IN_IADB_LISTED 3435 1.41 0.39 1.92 98 XM_PDF 3370 1.40 0.42 1.88 99 HTML_IMAGE_ONLY_32 3337 1.28 0.09 1.86 100 T_TooManySym_03 3325 1.30 0.18 1.86 101 KHOP_HELO_FCRDNS 3259 1.75 1.61 1.82 102 BAYES_05 3245 1.38 0.52 1.81 103 TR_XM_SpammyRelay 3165 5.21 12.23 1.77 104 URI_NOVOWEL 3097 1.64 1.47 1.73 105 TM2_M_URI_OPT_OUT 3066 1.81 2.02 1.71 106 RCVD_IN_IADB_SPF 3035 1.25 0.36 1.69 107 TR_XM_PhishingBody 2885 2.90 5.52 1.61 108 XMSexyCombo_05 2837 2.64 4.80 1.58 109 TR_XM_SpammyWords5 2821 2.26 3.65 1.57 110 SUBJ_ALL_CAPS 2771 1.75 2.15 1.55 111 RCVD_IN_IADB_SENDERID 2687 1.12 0.35 1.50 112 TVD_SPACE_RATIO 2682 1.08 0.22 1.50 113 TR_XM_UnparsRelay 2681 4.04 9.22 1.50 114 RCVD_IN_IADB_DK 2661 1.11 0.35 1.48 115 XM_B_COPY_HTML 2603 1.44 1.42 1.45 116 IN_HORDE_ADDRESS_BOOK 2595 0.99 0.06 1.45 117 UNTRUSTED_Relay 2580 3.95 9.06 1.44 118 XM_DK_Undo_01 2521 1.91 2.94 1.41 119 DKIM_INVALID 2485 1.95 3.10 1.39 120 TM2_M_VERY_LONG_WORD 2422 1.99 3.29 1.35 121 RCVD_IN_IADB_VOUCHED 2346 0.93 0.16 1.31 122 XM_B_URI_Unicode 2310 1.51 1.97 1.29 123 TVD_RCVD_IP 2278 1.22 1.11 1.27 124 RELAYCOUNTRY_CA 2266 3.27 7.36 1.26 125 XM_B_Investor 2253 2.07 3.74 1.26 126 XMBrknScrpt_02 2207 1.57 2.28 1.23 127 XMGappySubj_01 2138 0.89 0.26 1.19 128 XM_GoogleGroups 2084 1.07 0.87 1.16 129 XMBdyGiftCard01 2068 1.00 0.69 1.15 130 TR_Symld_Words 2054 1.04 0.82 1.15 131 XM_SendGrid 2028 1.05 0.89 1.13 132 XMDiploma_00 2024 1.64 2.69 1.13 133 XM_B_Unsub2 2021 1.42 2.03 1.13 134 T_XMDrugObfuBody_08 1936 1.58 2.59 1.08 135 BOTNET 1827 4.41 11.34 1.02 136 TooManyTo_003 1785 0.83 0.48 1.00 137 XM_B_FormFill 1727 0.66 0.05 0.96 138 RCVD_IN_IADB_OPTIN 1698 0.67 0.10 0.95 139 HTML_TAG_BALANCE_BODY 1692 1.01 1.15 0.94 140 URI_HEX 1671 1.23 1.82 0.93 141 XM_SPF_SoftFail 1627 1.52 2.76 0.91 142 XMGappySubj_02 1573 0.60 0.04 0.88 143 T_XMHurry_00 1572 1.49 2.73 0.88 144 XM_B_SpammyWords4 1552 1.27 2.11 0.87 145 XMBSHREFv2 1551 0.67 0.26 0.87 146 TR_XM_DK_SendGrid 1521 0.76 0.59 0.85 147 XM_H_PHPMailer 1459 0.85 0.93 0.81 148 XM_B_DNDMA 1398 1.28 2.29 0.78 149 TooManyTo_004 1385 0.67 0.45 0.77 150 XM_UB50 1383 2.08 4.75 0.77 151 DKIM_ADSP_CUSTOM_MED 1364 0.87 1.10 0.76 152 TR_XM_Base64_M1 1342 0.74 0.73 0.75 153 XM_OfRef6 1332 1.57 3.25 0.74 154 TR_MetaPhish_Combo_01 1226 0.80 1.04 0.68 155 MSGID_FROM_MTA_HEADER 1218 0.50 0.15 0.68 156 XMBody_17 1203 1.40 2.88 0.67 157 TooManyTo_005 1201 0.58 0.40 0.67 158 XMSubMetaI_00 1191 1.13 2.09 0.66 159 XM_H_Long_From02 1185 0.84 1.21 0.66 160 XM_ProductURIs 1170 0.75 0.96 0.65 161 T_FILL_THIS_FORM_SHORT 1156 1.76 4.04 0.64 162 XMBody_95 1156 0.48 0.15 0.64 163 XMSlimDrugH 1114 0.68 0.79 0.62 164 TM2_M_OBFU_COMMENT 1112 0.66 0.75 0.62 165 TR_XM_SpammyWords2 1103 4.43 12.22 0.62 166 USER_IN_WELCOMELIST 1092 0.41 0.00 0.61 167 USER_IN_WHITELIST 1092 0.41 0.00 0.61 168 RCVD_IN_PSBL 1058 1.21 2.47 0.59 169 XMPhish30 1042 1.21 2.50 0.58 170 DIET_1 1025 0.89 1.54 0.57 171 T_TooManySym_04 1001 0.39 0.03 0.56 172 T_XMDrugObfuBody_00 996 0.78 1.24 0.56 173 XMNoVowels 995 0.46 0.27 0.56 174 T_STY_INVIS_DIRECT 992 0.65 0.84 0.55 175 XMLngstWrd_00 978 0.56 0.59 0.55 176 HELO_MISC_IP 970 0.38 0.04 0.54 177 URI_TRY_3LD 943 0.74 1.17 0.53 178 XM_URI_RBL 938 1.46 3.38 0.52 179 RELAYCOUNTRY_AU 914 1.19 2.57 0.51 180 FORGED_GMAIL_RCVD 912 0.65 0.95 0.51 181 NML_ADSP_CUSTOM_MED 908 0.67 1.00 0.51 182 RCVD_IN_BL_SPAMCOP_NET 887 2.83 7.59 0.49 183 RCVD_IN_PBL 883 0.80 1.42 0.49 184 XMLngstWrd_01 873 0.51 0.54 0.49 185 MPART_ALT_DIFF_COUNT 866 0.59 0.82 0.48 186 DKIM_ADSP_NXDOMAIN 850 1.55 3.74 0.47 187 SpammyFromTLD_01 844 0.82 1.54 0.47 188 HTML_EXTRA_CLOSE 836 0.34 0.08 0.47 189 XMGenDplmaNmb 817 0.63 0.98 0.46 190 AD_PREFS 792 0.33 0.10 0.44 191 NO_DNS_FOR_FROM 783 0.47 0.55 0.44 192 XMHTML_After_End 777 0.48 0.58 0.43 193 XM_S_SubURI 765 0.33 0.13 0.43 194 XM_ShortIntro_01 755 0.45 0.52 0.42 195 HTML_FONT_FACE_BAD 739 0.55 0.84 0.41 196 HTML_IMAGE_ONLY_20 726 0.49 0.65 0.41 197 LOW_PRICE 712 0.40 0.40 0.40 198 SHOPIFY_IMG_NOT_RCVD_SFY 681 0.80 1.64 0.38 199 HTTPS_HTTP_MISMATCH 676 0.75 1.50 0.38 200 XMCapTrack 655 0.41 0.49 0.37 ----------------------------------------------------------------------