Email: 290793 Autolearn: 0 AvgScore: 4.39 AvgScanTime: 1.13 sec Spam: 104268 Autolearn: 0 AvgScore: 13.90 AvgScanTime: 1.17 sec Ham: 186525 Autolearn: 0 AvgScore: -0.93 AvgScanTime: 1.10 sec Time Spent Running SA: 90.88 hours Time Spent Processing Spam: 33.82 hours Time Spent Processing Ham: 57.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 95725 84.93 91.81 81.09 2 DKIM_SIGNED 94866 82.25 90.98 77.38 3 XM_DK_Pass 92467 80.78 88.68 76.36 4 DKIM_VALID 91319 80.10 87.58 75.92 5 XM_B_Unicode 86545 75.42 83.00 71.18 6 T_SCC_BODY_TEXT_LINE 82713 81.94 79.33 83.40 7 RELAYCOUNTRY_US 80631 79.02 77.33 79.97 8 XMListUnsubscribeExists 77226 63.13 74.06 57.01 9 XM_B_SpammyWords 73300 52.91 70.30 43.19 10 DCC_CHECK 72604 50.59 69.63 39.95 11 DKIM_VALID_AU 70350 66.37 67.47 65.75 12 XM_DK_Undo_02 50122 21.41 48.07 6.51 13 TR_MAX_INTL_RELAY 47008 21.29 45.08 7.99 14 XM_B_Unicode3 45674 45.50 43.80 46.46 15 BAYES_99 40280 17.18 38.63 5.18 16 LOC_TINY_FONT_1 39867 33.39 38.24 30.69 17 XM_B_SpammyWords2 39211 25.12 37.61 18.14 18 TR_XM_DKIM_Undo 38478 14.89 36.90 2.59 19 HTML_FONT_LOW_CONTRAST 35445 33.89 33.99 33.83 20 BAYES_50 35038 50.44 33.60 59.85 21 DKIM_VALID_EF 33634 30.17 32.26 29.00 22 MIME_HTML_ONLY 32163 24.64 30.85 21.16 23 BAYES_999 31897 13.57 30.59 4.05 24 FVGT_m_MULTI_ODD 31799 27.95 30.50 26.53 25 DCC_CHECK_NEGATIVE 31650 49.38 30.35 60.02 26 T_KAM_HTML_FONT_INVALID 30593 23.43 29.34 20.12 27 RCVD_IN_MSPIKE_H2 28041 26.50 26.89 26.29 28 TR_DCC_Bayes_99 27904 10.72 26.76 1.75 29 TR_XM_DK_Unsub 25231 18.93 24.20 15.98 30 RELAYCOUNTRY_META 23340 10.69 22.38 4.16 31 T_TM2_M_HEADER_IN_MSG 19985 20.20 19.17 20.77 32 XMSubLong 19934 22.15 19.12 23.84 33 TR_XM_SpammyRelay 19053 7.93 18.27 2.14 34 XM_Multi_Part_URI 18851 17.18 18.08 16.68 35 UNPARSEABLE_RELAY 15358 12.69 14.73 11.55 36 TR_XM_SpammyWords2 15312 5.51 14.69 0.38 37 XM_B_Unsub 14449 10.57 13.86 8.73 38 RCVD_IN_BL_SPAMCOP_NET 14102 5.47 13.52 0.97 39 TR_XM_BayesUnsub 14017 9.60 13.44 7.45 40 RELAYCOUNTRY_CA 13696 5.70 13.14 1.55 41 BOTNET_IPINHOSTNAME 13588 8.31 13.03 5.67 42 XM_B_SpammyWords3 12034 7.29 11.54 4.92 43 TR_XM_SPAMCOP 11430 4.11 10.96 0.28 44 LOTS_OF_MONEY 10137 7.39 9.72 6.09 45 RCVD_IN_MSPIKE_WL 10058 7.57 9.65 6.41 46 RCVD_IN_MSPIKE_H3 10058 7.57 9.65 6.41 47 BAYES_80 9382 6.39 9.00 4.93 48 XM_Body_Dirty_Words 9170 6.04 8.79 4.49 49 HTML_IMAGE_RATIO_02 9031 7.39 8.66 6.69 50 XMBody_17 9003 3.51 8.63 0.64 51 XM_UncommonTLD01 8823 6.35 8.46 5.17 52 TR_XM_UnparsRelay 8777 4.23 8.42 1.89 53 TR_XM_SpammyWords4 8776 5.94 8.42 4.55 54 BOTNET 8436 3.69 8.09 1.24 55 BAYES_60 8328 10.02 7.99 11.16 56 XM_Evil_Numbers_Gen 8296 9.24 7.96 9.96 57 FSL_BULK_SIG 8043 4.69 7.71 3.00 58 UNTRUSTED_Relay 7225 3.79 6.93 2.04 59 BAYES_95 6460 4.01 6.20 2.79 60 MPART_ALT_DIFF 6317 4.72 6.06 3.96 61 LotsOfNums_01 6280 7.55 6.02 8.41 62 HTML_IMAGE_RATIO_04 6143 6.31 5.89 6.54 63 XMNumbers 6142 4.28 5.89 3.37 64 TooManyTo_001 6034 6.56 5.79 6.99 65 T_FILL_THIS_FORM_SHORT 6000 2.37 5.75 0.48 66 TR_XM_PHPDW 5781 2.20 5.54 0.33 67 TR_XM_PHPForged 5774 2.21 5.54 0.35 68 TR_XM_FormFill2 5694 2.16 5.46 0.31 69 XM_H_PHPOS 5674 2.14 5.44 0.29 70 XM_H_GMP 5579 6.80 5.35 7.61 71 SpammyFromTLD_01 5405 2.25 5.18 0.60 72 XMSubMetaSx_00 5366 4.40 5.15 3.99 73 MIME_HTML_MOSTLY 5260 3.68 5.04 2.91 74 XM_SPF_SoftFail 5207 3.31 4.99 2.37 75 TR_XM_SpammyWords5 4913 2.53 4.71 1.32 76 XMSexyCombo_05 4862 2.95 4.66 1.99 77 FONT_INVIS_LONG_LINE 4834 1.73 4.64 0.11 78 XMStrtUSub 4705 5.21 4.51 5.60 79 TR_XM_BayesRelay 4553 1.57 4.37 0.00 80 HTML_IMAGE_RATIO_06 4528 3.97 4.34 3.75 81 XM_H_Long_From01 4447 4.72 4.26 4.97 82 T_XMDrugObfuBody_14 4111 2.46 3.94 1.63 83 TR_XM_FormFill 4098 1.41 3.93 0.01 84 RCVD_IN_VALIDITY_SAFE 4081 6.84 3.91 8.48 85 XM_B_Phish_Phrases 3925 2.90 3.76 2.42 86 TR_XM_PhishingBody 3867 2.80 3.71 2.30 87 XM_UB50 3801 2.03 3.65 1.12 88 SCC_BODY_URI_ONLY 3706 3.54 3.55 3.53 89 USER_IN_DEF_DKIM_WL 3574 12.43 3.43 17.46 90 DKIM_INVALID 3547 2.15 3.40 1.45 91 MIME_HTML_ONLY_MULTI 3452 2.58 3.31 2.17 92 T_XMDrugObfuBody_08 3451 2.03 3.31 1.31 93 XM_OfRef6 3416 1.91 3.28 1.14 94 XM_B_SpammyTLD 3409 2.89 3.27 2.68 95 XM_B_Investor 3407 2.01 3.27 1.31 96 XM_URI_RBL 3295 1.24 3.16 0.17 97 TM2_M_URI_OPT_OUT 3284 2.40 3.15 1.98 98 RCVD_IN_VALIDITY_CERTIFIED 3247 5.79 3.11 7.29 99 SUBJ_ALL_CAPS 3157 1.63 3.03 0.84 100 XM_CamelCaseFrm001 2977 2.44 2.86 2.21 101 TM2_M_BODY_EMPTY 2840 1.12 2.72 0.22 102 XMEmptyBody_01 2805 1.02 2.69 0.09 103 HTML_IMAGE_RATIO_08 2625 2.35 2.52 2.26 104 TM2_M_VERY_LONG_WORD 2602 1.76 2.50 1.35 105 TR_XM_NoHeaderRelay 2511 0.95 2.41 0.14 106 TR_LOTS_OF_MONEY3 2463 1.00 2.36 0.24 107 T_TooManySym_01 2462 5.52 2.36 7.28 108 HTML_TAG_BALANCE_BODY 2397 1.08 2.30 0.40 109 RELAYCOUNTRY_AU 2354 1.11 2.26 0.47 110 XMBdyGiftCard01 2284 1.66 2.19 1.36 111 XM_HighProb1 2179 0.75 2.09 0.01 112 FROM_EXCESS_BASE64 2129 2.60 2.04 2.92 113 XM_B_Unsub2 2074 1.38 1.99 1.03 114 URI_HEX 2031 1.26 1.95 0.88 115 HK_RANDOM_REPLYTO 2028 0.75 1.94 0.08 116 T_XMHurry_00 2017 1.07 1.93 0.59 117 XM_H_PHPMailer 1936 1.23 1.86 0.88 118 BOTNET_NORDNS 1882 0.66 1.80 0.02 119 AC_BR_BONANZA 1874 0.72 1.80 0.12 120 XM_B_SpammyWords4 1866 1.13 1.79 0.76 121 XM_DIRTYINTL 1796 0.71 1.72 0.15 122 XMDiploma_00 1777 1.38 1.70 1.19 123 XMStockSpam_06 1773 2.18 1.70 2.44 124 XM_SendGrid 1757 1.45 1.69 1.32 125 BAYES_40 1718 3.07 1.65 3.86 126 RCVD_IN_PSBL 1703 0.98 1.63 0.62 127 XMPhish30 1684 1.09 1.62 0.79 128 XM_H_Undi_Recip 1675 0.66 1.61 0.13 129 XM_DK_Undo_01 1671 1.53 1.60 1.49 130 T_REMOTE_IMAGE 1660 2.40 1.59 2.86 131 MIME_QP_LONG_LINE 1655 2.84 1.59 3.53 132 BAYES_20 1647 2.31 1.58 2.72 133 TR_Mismatch_TLD_02 1623 0.65 1.56 0.14 134 SpammyFromTLD_02 1541 0.67 1.48 0.21 135 MAILING_LIST_MULTI 1510 1.89 1.45 2.14 136 URIBL_DBL_SPAM 1481 0.51 1.42 0.01 137 URI_TRY_3LD 1480 1.13 1.42 0.96 138 TR_Caps_n_Bayes_99 1447 0.51 1.39 0.01 139 SHOPIFY_IMG_NOT_RCVD_SFY 1446 0.76 1.39 0.41 140 XMReplyNow 1437 0.65 1.38 0.24 141 TR_XM_Undi_Recip11 1352 0.49 1.30 0.03 142 TR_XM_DK_SendGrid 1329 1.08 1.27 0.97 143 KHOP_HELO_FCRDNS 1324 0.80 1.27 0.53 144 HTTPS_HTTP_MISMATCH 1302 0.79 1.25 0.53 145 ALL_TRUSTED 1274 10.78 1.22 16.12 146 HTML_MIME_NO_HTML_TAG 1265 1.17 1.21 1.15 147 RDNS_DYNAMIC 1261 0.70 1.21 0.41 148 XM_RXBody 1255 0.59 1.20 0.25 149 TR_XM_INV_DKIM 1245 0.47 1.19 0.07 150 XMSubMetaI_00 1241 0.79 1.19 0.57 151 XM_H_PHPOS_M 1213 0.46 1.16 0.07 152 TR_Sbj_FN_Bdy 1212 0.49 1.16 0.11 153 TR_XM_Undi_Recip2 1191 0.43 1.14 0.04 154 XM_Combo_Sbj 1182 0.48 1.13 0.11 155 XM_H_Long_From02 1174 1.03 1.13 0.97 156 RCVD_IN_VALIDITY_RPBL 1138 0.41 1.09 0.03 157 TVD_RCVD_IP 1075 1.97 1.03 2.49 158 PDS_OTHER_BAD_TLD 1034 0.42 0.99 0.11 159 T_XMDrugObfuBody_00 1032 0.61 0.99 0.39 160 XM_UB99 1028 0.36 0.99 0.00 161 TR_XM_InvalidRelay 1014 0.37 0.97 0.03 162 BAYES_05 996 2.11 0.96 2.76 163 XM_B_COPY_HTML 991 1.23 0.95 1.39 164 ANY_BOUNCE_MESSAGE 983 3.85 0.94 5.47 165 BOUNCE_MESSAGE 983 3.85 0.94 5.47 166 T_XMDrugObfuBody_10 981 0.36 0.94 0.04 167 XMClaimOffer 979 0.42 0.94 0.13 168 TooManyTo_002 975 1.42 0.94 1.69 169 HELO_NODOT 969 0.54 0.93 0.33 170 HELO_DYNAMIC_SPLIT_IP 968 0.33 0.93 0.00 171 HELO_NO_DOMAIN 968 0.54 0.93 0.33 172 XMBrknScrpt_02 962 0.63 0.92 0.47 173 RCVD_IN_IADB_LISTED 962 2.19 0.92 2.90 174 XMSexyCombo_01 953 0.51 0.91 0.28 175 TooManyTo_003 929 0.87 0.89 0.86 176 FSL_HELO_NON_FQDN_1 923 0.32 0.89 0.00 177 THIS_AD 916 0.46 0.88 0.22 178 DIET_1 916 0.69 0.88 0.59 179 MPART_ALT_DIFF_COUNT 907 0.87 0.87 0.87 180 DKIM_ADSP_CUSTOM_MED 901 0.87 0.86 0.87 181 XM_DrugUnitList 900 0.31 0.86 0.00 182 XM_UB60 900 0.37 0.86 0.10 183 TooManyTo_004 891 0.74 0.85 0.68 184 TR_Symld_Words 880 0.96 0.84 1.02 185 RCVD_IN_IADB_SPF 873 1.99 0.84 2.64 186 TooManyTo_005 863 0.67 0.83 0.58 187 XMBody_78 853 0.59 0.82 0.46 188 RCVD_IN_RP_SAFE 852 1.39 0.82 1.70 189 T_STY_INVIS_DIRECT 843 0.41 0.81 0.19 190 SUBJ_DOLLARS 839 0.53 0.80 0.37 191 RCVD_IN_IADB_DK 829 1.82 0.80 2.40 192 TR_Mismatch_TLD_01 826 0.47 0.79 0.30 193 RCVD_IN_IADB_SENDERID 822 1.85 0.79 2.45 194 XM_ProductURIs 821 0.80 0.79 0.80 195 FORGED_GMAIL_RCVD 820 0.64 0.79 0.56 196 HTML_TAG_BALANCE_CENTER 819 0.31 0.79 0.05 197 TR_XM_Base64_M1 793 0.79 0.76 0.81 198 LOADSA_MONEY_COMBO 789 0.29 0.76 0.04 199 HTML_TEXT_INVISIBLE_STYLE 788 0.32 0.76 0.07 200 XM_UB80 779 0.29 0.75 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 155554 81.94 79.33 83.40 2 HTML_MESSAGE 151255 84.93 91.81 81.09 3 RELAYCOUNTRY_US 149157 79.02 77.33 79.97 4 DKIM_SIGNED 144324 82.25 90.98 77.38 5 XM_DK_Pass 142428 80.78 88.68 76.36 6 DKIM_VALID 141617 80.10 87.58 75.92 7 XM_B_Unicode 132762 75.42 83.00 71.18 8 DKIM_VALID_AU 122636 66.37 67.47 65.75 9 DCC_CHECK_NEGATIVE 111946 49.38 30.35 60.02 10 BAYES_50 111634 50.44 33.60 59.85 11 XMListUnsubscribeExists 106343 63.13 74.06 57.01 12 XM_B_Unicode3 86651 45.50 43.80 46.46 13 XM_B_SpammyWords 80569 52.91 70.30 43.19 14 DCC_CHECK 74509 50.59 69.63 39.95 15 HTML_FONT_LOW_CONTRAST 63095 33.89 33.99 33.83 16 LOC_TINY_FONT_1 57236 33.39 38.24 30.69 17 DKIM_VALID_EF 54089 30.17 32.26 29.00 18 FVGT_m_MULTI_ODD 49486 27.95 30.50 26.53 19 RCVD_IN_MSPIKE_H2 49032 26.50 26.89 26.29 20 XMSubLong 44465 22.15 19.12 23.84 21 MIME_HTML_ONLY 39475 24.64 30.85 21.16 22 T_TM2_M_HEADER_IN_MSG 38750 20.20 19.17 20.77 23 T_KAM_HTML_FONT_INVALID 37535 23.43 29.34 20.12 24 XM_B_SpammyWords2 33837 25.12 37.61 18.14 25 USER_IN_DEF_DKIM_WL 32573 12.43 3.43 17.46 26 XM_Multi_Part_URI 31104 17.18 18.08 16.68 27 ALL_TRUSTED 30059 10.78 1.22 16.12 28 TR_XM_DK_Unsub 29807 18.93 24.20 15.98 29 XM_DKIMWhitelistDomains 22829 7.85 0.01 12.24 30 UNPARSEABLE_RELAY 21547 12.69 14.73 11.55 31 BAYES_60 20816 10.02 7.99 11.16 32 XM_Evil_Numbers_Gen 18578 9.24 7.96 9.96 33 XM_B_Unsub 16275 10.57 13.86 8.73 34 RCVD_IN_VALIDITY_SAFE 15815 6.84 3.91 8.48 35 LotsOfNums_01 15681 7.55 6.02 8.41 36 TR_MAX_INTL_RELAY 14899 21.29 45.08 7.99 37 XM_H_GMP 14197 6.80 5.35 7.61 38 TR_XM_BayesUnsub 13893 9.60 13.44 7.45 39 RCVD_IN_VALIDITY_CERTIFIED 13589 5.79 3.11 7.29 40 T_TooManySym_01 13587 5.52 2.36 7.28 41 TooManyTo_001 13036 6.56 5.79 6.99 42 BAYES_00 12583 4.47 0.40 6.75 43 HTML_IMAGE_RATIO_02 12473 7.39 8.66 6.69 44 HTML_IMAGE_RATIO_04 12194 6.31 5.89 6.54 45 XM_DK_Undo_02 12148 21.41 48.07 6.51 46 RCVD_IN_MSPIKE_H3 11959 7.57 9.65 6.41 47 RCVD_IN_MSPIKE_WL 11959 7.57 9.65 6.41 48 LOTS_OF_MONEY 11356 7.39 9.72 6.09 49 TR_XM_DK_Bayes 10721 3.81 0.35 5.75 50 TR_XM_DK_Bayes1 10661 3.79 0.35 5.72 51 BOTNET_IPINHOSTNAME 10573 8.31 13.03 5.67 52 XMStrtUSub 10446 5.21 4.51 5.60 53 ANY_BOUNCE_MESSAGE 10210 3.85 0.94 5.47 54 BOUNCE_MESSAGE 10206 3.85 0.94 5.47 55 IN_ZIMBRA_NJ_WHITELIST 9753 3.37 0.05 5.23 56 BAYES_99 9669 17.18 38.63 5.18 57 XM_UncommonTLD01 9644 6.35 8.46 5.17 58 TR_XM_DK_Bayes2 9564 3.39 0.28 5.13 59 XM_H_Long_From01 9272 4.72 4.26 4.97 60 BAYES_80 9188 6.39 9.00 4.93 61 XM_B_SpammyWords3 9173 7.29 11.54 4.92 62 TR_XM_SpammyWords4 8495 5.94 8.42 4.55 63 XM_Body_Dirty_Words 8380 6.04 8.79 4.49 64 RELAYCOUNTRY_META 7760 10.69 22.38 4.16 65 BAYES_999 7551 13.57 30.59 4.05 66 XMSubMetaSx_00 7441 4.40 5.15 3.99 67 MPART_ALT_DIFF 7395 4.72 6.06 3.96 68 BAYES_40 7209 3.07 1.65 3.86 69 HTML_IMAGE_RATIO_06 7004 3.97 4.34 3.75 70 T_TooManySym_02 6776 2.58 0.71 3.63 71 INVALID_MSGID 6716 2.38 0.19 3.60 72 MIME_QP_LONG_LINE 6590 2.84 1.59 3.53 73 SCC_BODY_URI_ONLY 6579 3.54 3.55 3.53 74 TO_MALFORMED 6367 2.19 0.01 3.41 75 XMNumbers 6292 4.28 5.89 3.37 76 FSL_BULK_SIG 5595 4.69 7.71 3.00 77 FROM_EXCESS_BASE64 5442 2.60 2.04 2.92 78 MIME_HTML_MOSTLY 5433 3.68 5.04 2.91 79 RCVD_IN_IADB_LISTED 5405 2.19 0.92 2.90 80 T_REMOTE_IMAGE 5332 2.40 1.59 2.86 81 BAYES_95 5208 4.01 6.20 2.79 82 BAYES_05 5140 2.11 0.96 2.76 83 BAYES_20 5078 2.31 1.58 2.72 84 XM_B_SpammyTLD 5003 2.89 3.27 2.68 85 RCVD_IN_IADB_SPF 4927 1.99 0.84 2.64 86 TR_XM_DKIM_Undo 4834 14.89 36.90 2.59 87 XMGappySubj_01 4661 1.70 0.26 2.50 88 TVD_RCVD_IP 4642 1.97 1.03 2.49 89 RCVD_IN_IADB_SENDERID 4572 1.85 0.79 2.45 90 XMStockSpam_06 4557 2.18 1.70 2.44 91 XM_B_Phish_Phrases 4517 2.90 3.76 2.42 92 RCVD_IN_IADB_DK 4475 1.82 0.80 2.40 93 XM_SPF_SoftFail 4419 3.31 4.99 2.37 94 XMGappySubj_02 4294 1.50 0.07 2.30 95 TR_XM_PhishingBody 4283 2.80 3.71 2.30 96 HTML_IMAGE_RATIO_08 4219 2.35 2.52 2.26 97 XM_CamelCaseFrm001 4123 2.44 2.86 2.21 98 MIME_HTML_ONLY_MULTI 4040 2.58 3.31 2.17 99 MAILING_LIST_MULTI 3999 1.89 1.45 2.14 100 TR_XM_SpammyRelay 3996 7.93 18.27 2.14 101 XMBSHREFv2 3890 1.42 0.23 2.09 102 UNTRUSTED_Relay 3800 3.79 6.93 2.04 103 XMBody_95 3764 1.37 0.22 2.02 104 XMSexyCombo_05 3712 2.95 4.66 1.99 105 TM2_M_URI_OPT_OUT 3692 2.40 3.15 1.98 106 TR_XM_UnparsRelay 3529 4.23 8.42 1.89 107 IN_HORDE_ADDRESS_BOOK 3318 1.16 0.07 1.78 108 TVD_SPACE_RATIO 3318 1.20 0.16 1.78 109 TR_DCC_Bayes_99 3260 10.72 26.76 1.75 110 RCVD_IN_RP_SAFE 3176 1.39 0.82 1.70 111 TooManyTo_002 3154 1.42 0.94 1.69 112 RCVD_IN_IADB_VOUCHED 3109 1.20 0.37 1.67 113 T_XMDrugObfuBody_14 3041 2.46 3.94 1.63 114 XM_PDF 2893 1.07 0.20 1.55 115 RELAYCOUNTRY_CA 2886 5.70 13.14 1.55 116 XM_DK_Undo_01 2783 1.53 1.60 1.49 117 RCVD_IN_RP_CERTIFIED 2752 1.17 0.63 1.48 118 DKIM_INVALID 2707 2.15 3.40 1.45 119 XM_B_COPY_HTML 2592 1.23 0.95 1.39 120 XMBdyGiftCard01 2539 1.66 2.19 1.36 121 TM2_M_VERY_LONG_WORD 2526 1.76 2.50 1.35 122 T_TooManySym_03 2478 0.95 0.27 1.33 123 XM_SendGrid 2458 1.45 1.69 1.32 124 TR_XM_SpammyWords5 2455 2.53 4.71 1.32 125 XM_B_Investor 2449 2.01 3.27 1.31 126 T_XMDrugObfuBody_08 2446 2.03 3.31 1.31 127 XM_GoogleGroups 2365 0.98 0.47 1.27 128 MSGID_NOFQDN1 2324 0.80 0.01 1.25 129 BOTNET 2304 3.69 8.09 1.24 130 XMDiploma_00 2224 1.38 1.70 1.19 131 HTML_MIME_NO_HTML_TAG 2146 1.17 1.21 1.15 132 RCVD_IN_IADB_OPTIN 2133 0.84 0.29 1.14 133 XM_OfRef6 2130 1.91 3.28 1.14 134 URI_NOVOWEL 2098 0.93 0.57 1.12 135 XM_UB50 2096 2.03 3.65 1.12 136 USER_IN_WHITELIST 1974 0.68 0.00 1.06 137 USER_IN_WELCOMELIST 1974 0.68 0.00 1.06 138 XM_B_Unsub2 1930 1.38 1.99 1.03 139 TR_Symld_Words 1907 0.96 0.84 1.02 140 RCVD_IN_BL_SPAMCOP_NET 1818 5.47 13.52 0.97 141 TR_XM_DK_SendGrid 1811 1.08 1.27 0.97 142 XM_H_Long_From02 1810 1.03 1.13 0.97 143 URI_TRY_3LD 1794 1.13 1.42 0.96 144 XM_H_PHPMailer 1649 1.23 1.86 0.88 145 URI_HEX 1640 1.26 1.95 0.88 146 MPART_ALT_DIFF_COUNT 1623 0.87 0.87 0.87 147 DKIM_ADSP_CUSTOM_MED 1622 0.87 0.86 0.87 148 TooManyTo_003 1608 0.87 0.89 0.86 149 SUBJ_ALL_CAPS 1570 1.63 3.03 0.84 150 TR_XM_Base64_M1 1513 0.79 0.76 0.81 151 XM_ProductURIs 1499 0.80 0.79 0.80 152 XMSubMetaSxObfu_02 1482 0.63 0.35 0.79 153 XMPhish30 1480 1.09 1.62 0.79 154 XM_B_SpammyWords4 1415 1.13 1.79 0.76 155 TooManyTo_004 1265 0.74 0.85 0.68 156 XMBody_17 1200 3.51 8.63 0.64 157 XM_H_Trusted_IP 1191 0.41 0.00 0.64 158 FILL_THIS_FORM 1168 0.53 0.37 0.63 159 RCVD_IN_PSBL 1152 0.98 1.63 0.62 160 SpammyFromTLD_01 1127 2.25 5.18 0.60 161 T_XMHurry_00 1094 1.07 1.93 0.59 162 DIET_1 1093 0.69 0.88 0.59 163 TooManyTo_005 1077 0.67 0.83 0.58 164 XMSubMetaI_00 1056 0.79 1.19 0.57 165 XMPhish14 1046 0.62 0.74 0.56 166 FORGED_GMAIL_RCVD 1039 0.64 0.79 0.56 167 XMSubNoVowel 1037 0.54 0.52 0.56 168 XMLngstWrd_00 1012 0.58 0.65 0.54 169 NML_ADSP_CUSTOM_MED 1011 0.60 0.70 0.54 170 XMPhish08 1003 0.57 0.63 0.54 171 TR_MetaPhish_Combo_01 1002 0.56 0.61 0.54 172 KHOP_HELO_FCRDNS 992 0.80 1.27 0.53 173 HTTPS_HTTP_MISMATCH 989 0.79 1.25 0.53 174 XMSolicitRefs_0 973 0.51 0.48 0.52 175 XM_Ancestry_Forge 972 0.34 0.01 0.52 176 GAPPY_SUBJECT 955 0.35 0.05 0.51 177 T_TooManySym_04 944 0.38 0.16 0.51 178 XM_B_REG_HTML 944 0.53 0.57 0.51 179 XM_B_FormFill 911 0.32 0.02 0.49 180 T_FILL_THIS_FORM_SHORT 893 2.37 5.75 0.48 181 FILL_THIS_FORM_LONG 890 0.41 0.30 0.48 182 RELAYCOUNTRY_AU 884 1.11 2.26 0.47 183 XMGenDplmaNmb 883 0.57 0.74 0.47 184 XMBrknScrpt_02 878 0.63 0.92 0.47 185 XMHTML_After_End 873 0.50 0.57 0.47 186 XM_S_SubURI 865 0.31 0.04 0.46 187 XMBody_78 857 0.59 0.82 0.46 188 XMNoVowels 828 0.39 0.28 0.44 189 TRACKER_ID 825 0.34 0.16 0.44 190 HTML_FONT_FACE_BAD 797 0.50 0.63 0.43 191 RDNS_DYNAMIC 774 0.70 1.21 0.41 192 PLING_QUERY 763 0.37 0.31 0.41 193 SHOPIFY_IMG_NOT_RCVD_SFY 759 0.76 1.39 0.41 194 T_FILL_THIS_FORM_LOAN 756 0.30 0.10 0.41 195 HTML_TAG_BALANCE_BODY 743 1.08 2.30 0.40 196 DKIM_ADSP_NXDOMAIN 743 0.44 0.50 0.40 197 CTE_8BIT_MISMATCH 736 0.26 0.03 0.39 198 T_XMDrugObfuBody_00 735 0.61 0.99 0.39 199 NO_DNS_FOR_FROM 727 0.47 0.62 0.39 200 RELAYCOUNTRY_DE 720 0.39 0.40 0.39 ----------------------------------------------------------------------