Email: 251299 Autolearn: 0 AvgScore: 4.77 AvgScanTime: 1.33 sec Spam: 88934 Autolearn: 0 AvgScore: 13.82 AvgScanTime: 1.37 sec Ham: 162365 Autolearn: 0 AvgScore: -0.19 AvgScanTime: 1.30 sec Time Spent Running SA: 92.51 hours Time Spent Processing Spam: 33.88 hours Time Spent Processing Ham: 58.64 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 85417 87.75 96.05 83.21 2 DKIM_SIGNED 78770 81.13 88.57 77.05 3 XM_DK_Pass 75654 79.01 85.07 75.69 4 RELAYCOUNTRY_US 75530 81.91 84.93 80.26 5 DKIM_VALID 75004 78.37 84.34 75.10 6 XM_B_Unicode 74218 75.59 83.45 71.29 7 DCC_CHECK 69908 59.29 78.61 48.71 8 XMListUnsubscribeExists 65470 60.42 73.62 53.20 9 XM_B_SpammyWords 63976 55.17 71.94 45.98 10 DKIM_VALID_AU 60149 65.45 67.63 64.26 11 XM_B_Unicode3 46781 48.69 52.60 46.54 12 LOC_TINY_FONT_1 44892 38.15 50.48 31.40 13 XM_B_SpammyWords2 37312 28.64 41.95 21.35 14 XM_DK_Undo_02 36502 17.82 41.04 5.10 15 HTML_FONT_LOW_CONTRAST 35658 34.25 40.09 31.04 16 RCVD_IN_MSPIKE_H2 35416 38.80 39.82 38.24 17 BAYES_50 32092 53.22 36.09 62.60 18 BAYES_99 29800 14.23 33.51 3.68 19 T_KAM_HTML_FONT_INVALID 27815 24.48 31.28 20.76 20 FVGT_m_MULTI_ODD 27306 27.77 30.70 26.16 21 MIME_HTML_ONLY 26415 24.24 29.70 21.25 22 TR_XM_DKIM_Undo 26337 11.99 29.61 2.34 23 BAYES_999 23171 11.01 26.05 2.77 24 DKIM_VALID_EF 22961 28.71 25.82 30.30 25 TR_DCC_Bayes_99 22663 9.93 25.48 1.41 26 XM_Multi_Part_URI 20103 18.21 22.60 15.80 27 DCC_CHECK_NEGATIVE 18528 40.49 20.83 51.26 28 XMSubLong 17736 21.87 19.94 22.92 29 TR_XM_DK_Unsub 17120 16.10 19.25 14.37 30 T_TM2_M_HEADER_IN_MSG 16930 20.90 19.04 21.92 31 TR_MAX_INTL_RELAY 15157 10.05 17.04 6.22 32 UNPARSEABLE_RELAY 14198 13.96 15.96 12.86 33 XM_B_SpammyWords3 13739 9.53 15.45 6.29 34 XM_B_Unsub 13384 11.45 15.05 9.47 35 RELAYCOUNTRY_META 13247 7.91 14.90 4.08 36 TR_XM_BayesUnsub 12984 9.83 14.60 7.21 37 TR_XM_SpammyWords2 12126 5.18 13.63 0.55 38 TR_XM_SpammyRelay 10012 5.28 11.26 2.00 39 BAYES_80 9355 6.12 10.52 3.71 40 BOTNET 9019 4.48 10.14 1.38 41 RCVD_IN_BL_SPAMCOP_NET 8778 3.96 9.87 0.72 42 XM_Body_Dirty_Words 8608 5.86 9.68 3.76 43 BOTNET_IPINHOSTNAME 8444 5.72 9.49 3.65 44 BAYES_60 8260 8.00 9.29 7.29 45 LOTS_OF_MONEY 8221 6.56 9.24 5.09 46 XM_UncommonTLD01 7976 6.73 8.97 5.51 47 TR_XM_UnparsRelay 7890 4.24 8.87 1.70 48 FSL_BULK_SIG 7801 9.21 8.77 9.45 49 TR_XM_SpammyWords4 7532 5.37 8.47 3.68 50 XM_Evil_Numbers_Gen 7114 9.09 8.00 9.69 51 HTML_IMAGE_RATIO_02 6509 6.71 7.32 6.38 52 TR_XM_SPAMCOP 6503 2.91 7.31 0.50 53 MPART_ALT_DIFF 6297 5.43 7.08 4.53 54 XM_B_Phish_Phrases 6162 5.66 6.93 4.97 55 RELAYCOUNTRY_CA 5935 3.43 6.67 1.65 56 LotsOfNums_01 5609 6.70 6.31 6.92 57 BAYES_95 5559 3.83 6.25 2.51 58 XMSubMetaSx_00 5475 4.43 6.16 3.48 59 XMStrtUSub 5474 6.55 6.16 6.77 60 XM_H_GMP 5342 6.50 6.01 6.77 61 T_XMDrugObfuBody_14 5282 3.31 5.94 1.86 62 XM_H_Long_From01 4675 5.62 5.26 5.82 63 XMSexyCombo_05 4617 3.48 5.19 2.54 64 HTML_IMAGE_RATIO_06 4399 3.59 4.95 2.85 65 RCVD_IN_VALIDITY_RPBL 4362 1.88 4.90 0.23 66 UNTRUSTED_Relay 4326 2.82 4.86 1.69 67 SpammyFromTLD_02 4314 1.86 4.85 0.22 68 XM_B_PhoneNumber 3866 5.92 4.35 6.79 69 HTML_IMAGE_RATIO_04 3793 4.84 4.26 5.16 70 DKIM_INVALID 3766 2.76 4.23 1.95 71 XM_B_Investor 3743 2.33 4.21 1.30 72 TR_XM_PhishingBody 3704 2.76 4.16 1.98 73 MIME_HTML_MOSTLY 3696 3.09 4.16 2.50 74 XM_OfRef6 3548 2.11 3.99 1.09 75 RCVD_IN_MSPIKE_H3 3538 4.61 3.98 4.95 76 RCVD_IN_MSPIKE_WL 3538 4.61 3.98 4.95 77 XM_CamelCaseFrm001 3315 2.99 3.73 2.58 78 XM_B_SpammyTLD 3182 3.07 3.58 2.80 79 MIME_HTML_ONLY_MULTI 3137 2.92 3.53 2.59 80 HTML_IMAGE_RATIO_08 3116 2.93 3.50 2.61 81 TooManyTo_001 3057 5.81 3.44 7.11 82 TM2_M_VERY_LONG_WORD 2895 2.20 3.26 1.62 83 RCVD_IN_VALIDITY_SAFE 2816 5.38 3.17 6.59 84 TM2_M_URI_OPT_OUT 2721 2.34 3.06 1.94 85 T_XMDrugObfuBody_08 2624 1.90 2.95 1.32 86 XMBody_17 2563 1.36 2.88 0.52 87 T_XMHurry_00 2533 1.48 2.85 0.73 88 XM_URI_RBL 2530 1.36 2.84 0.55 89 XM_SPF_SoftFail 2467 1.79 2.77 1.25 90 TR_XM_SpammyWords5 2467 2.13 2.77 1.78 91 DIET_1 2412 1.28 2.71 0.50 92 HTML_TAG_BALANCE_BODY 2393 1.69 2.69 1.14 93 XMNumbers 2364 3.70 2.66 4.26 94 DKIM_ADSP_NXDOMAIN 2304 1.25 2.59 0.52 95 NO_DNS_FOR_FROM 2293 1.21 2.58 0.46 96 TR_XM_MaxWHORU 2283 1.15 2.57 0.38 97 XM_B_SpammyWords4 2263 1.38 2.54 0.74 98 T_REMOTE_IMAGE 2167 3.04 2.44 3.37 99 RCVD_IN_VALIDITY_CERTIFIED 2167 4.05 2.44 4.93 100 RELAYCOUNTRY_AU 2155 1.16 2.42 0.47 101 T_FILL_THIS_FORM_SHORT 2058 1.18 2.31 0.56 102 USER_IN_DEF_DKIM_WL 2038 12.40 2.29 17.94 103 FROM_EXCESS_BASE64 2015 2.27 2.27 2.27 104 XMDiploma_00 1949 1.72 2.19 1.45 105 TR_XM_NoHeaderRelay 1860 0.87 2.09 0.20 106 XM_UB50 1846 1.35 2.08 0.95 107 MAILING_LIST_MULTI 1811 2.71 2.04 3.09 108 XMBrknScrpt_02 1739 1.41 1.96 1.12 109 T_TooManySym_01 1727 6.92 1.94 9.65 110 LongTLD 1675 0.84 1.88 0.26 111 XM_B_Unsub2 1669 1.53 1.88 1.34 112 XMSlimDrugH 1654 1.10 1.86 0.69 113 NORDNS_LOW_CONTRAST 1623 0.67 1.82 0.03 114 XMSolicitRefs_0 1612 0.89 1.81 0.38 115 RCVD_IN_PSBL 1609 1.12 1.81 0.74 116 XMPhish30 1544 1.13 1.74 0.79 117 SUBJ_ALL_CAPS 1533 1.35 1.72 1.15 118 T_XMDrugObfuBody_00 1523 0.86 1.71 0.39 119 XM_B_URI_Unicode 1507 1.62 1.69 1.58 120 STY_INVIS_DIRECT 1489 0.83 1.67 0.37 121 XM_B_COPY_HTML 1481 1.58 1.67 1.54 122 BOTNET_NORDNS 1456 0.59 1.64 0.01 123 MIME_QP_LONG_LINE 1445 2.69 1.62 3.28 124 TO_NO_BRKTS_HTML_ONLY 1435 0.88 1.61 0.48 125 SpammyFromTLD_01 1397 1.01 1.57 0.70 126 XM_B_REG_HTML 1381 0.70 1.55 0.24 127 SHOPIFY_IMG_NOT_RCVD_SFY 1357 0.79 1.53 0.39 128 HTML_IMAGE_ONLY_12 1343 0.71 1.51 0.27 129 TR_XM_PHPForged 1319 0.64 1.48 0.17 130 TR_XM_PHPDW 1317 0.63 1.48 0.17 131 BAYES_40 1304 3.63 1.47 4.81 132 ALL_TRUSTED 1298 10.85 1.46 15.99 133 XMStockSpam_06 1297 1.58 1.46 1.65 134 TR_XM_FormFill2 1289 0.62 1.45 0.17 135 XM_SendGrid 1267 1.27 1.42 1.19 136 XM_H_PHPOS 1262 0.60 1.42 0.15 137 TR_LOTS_OF_MONEY3 1222 0.67 1.37 0.29 138 HTML_SHORT_LINK_IMG_2 1219 0.52 1.37 0.06 139 HTML_IMAGE_ONLY_32 1218 0.69 1.37 0.32 140 XMSexyCombo_01 1218 0.60 1.37 0.19 141 KHOP_HELO_FCRDNS 1177 1.25 1.32 1.21 142 HOSTED_IMG_MULTI_PUB_01 1176 0.48 1.32 0.03 143 XMWghtMeta_00 1168 0.48 1.31 0.03 144 DRUGS_DIET 1121 0.48 1.26 0.05 145 XM_HighProb1 1099 0.44 1.24 0.01 146 XM_B_SEO 1093 0.60 1.23 0.26 147 BAYES_20 1092 2.73 1.23 3.56 148 XMSlimDrugs 1082 0.44 1.22 0.01 149 XM_OfRef7 1080 0.59 1.21 0.24 150 TR_XM_INV_DKIM 1079 0.56 1.21 0.20 151 URI_HEX 1032 1.11 1.16 1.08 152 TR_XM_DK_SendGrid 1026 0.97 1.15 0.87 153 XMReplyNow 1017 0.61 1.14 0.32 154 XMSubMetaI_00 1014 0.88 1.14 0.74 155 XMBdyGiftCard01 1005 1.15 1.13 1.16 156 XM_DIRTYINTL 990 0.64 1.11 0.38 157 XM_DK_Undo_01 959 1.32 1.08 1.45 158 XM_B_Phish66 951 0.54 1.07 0.25 159 MPART_ALT_DIFF_COUNT 934 0.66 1.05 0.44 160 SUSP_UTF8_WORD_SUBJ 921 0.39 1.04 0.03 161 TR_XM_RelayPhish 915 0.40 1.03 0.06 162 XM_UB99 914 0.37 1.03 0.00 163 HTML_MIME_NO_HTML_TAG 906 1.64 1.02 1.98 164 TM2_M_OBFU_COMMENT 901 0.86 1.01 0.77 165 RDNS_DYNAMIC 891 0.58 1.00 0.35 166 XM_H_Long_From02 888 1.16 1.00 1.24 167 TR_XM_SEO4 864 0.41 0.97 0.10 168 RCVD_IN_PBL 859 0.81 0.97 0.73 169 TVD_RCVD_IP 854 1.02 0.96 1.05 170 XMGenDplmaNmb 850 0.69 0.96 0.54 171 URI_TRY_3LD 841 0.65 0.95 0.50 172 HTML_FONT_FACE_BAD 838 0.68 0.94 0.54 173 FROM_SUSPICIOUS_NTLD 824 0.38 0.93 0.08 174 PDS_RDNS_DYNAMIC_FP 819 0.38 0.92 0.08 175 TR_XM_Base64_M1 815 0.71 0.92 0.59 176 TR_XM_FormFill 813 0.34 0.91 0.02 177 PLING_QUERY 813 0.71 0.91 0.59 178 XM_H_PHPMailer 807 0.83 0.91 0.79 179 XM_B_DNDMA 798 0.76 0.90 0.69 180 XM_GoogleGroups 798 1.16 0.90 1.30 181 TR_Mismatch_TLD_01 784 0.48 0.88 0.26 182 TR_Mismatch_TLD_02 784 0.35 0.88 0.06 183 URI_NOVOWEL 784 1.36 0.88 1.62 184 DKIM_ADSP_CUSTOM_MED 783 0.87 0.88 0.86 185 RCVD_IN_XBL 742 0.31 0.83 0.02 186 XMBody_78 727 0.40 0.82 0.17 187 HELO_DYNAMIC_SPLIT_IP 723 0.29 0.81 0.01 188 XM_ProductURIs 720 0.60 0.81 0.49 189 HTTPS_HTTP_MISMATCH 718 0.56 0.81 0.43 190 HK_RANDOM_FROM 708 0.39 0.80 0.17 191 MIME_CHARSET_FARAWAY 703 0.62 0.79 0.52 192 XM_H_Undi_Recip 699 0.40 0.79 0.19 193 TM2_M_A_HREF_HREF 684 0.50 0.77 0.36 194 J_POPCORN_WO_D 683 0.39 0.77 0.18 195 BOUNCE_MESSAGE 671 2.86 0.75 4.02 196 ANY_BOUNCE_MESSAGE 671 2.86 0.75 4.02 197 RCVD_IN_SBL_CSS 667 0.28 0.75 0.02 198 XM_RXBody 663 0.39 0.75 0.20 199 XMHTML_After_End 663 0.43 0.75 0.26 200 NML_ADSP_CUSTOM_MED 655 0.60 0.74 0.52 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 135108 87.75 96.05 83.21 2 RELAYCOUNTRY_US 130311 81.91 84.93 80.26 3 DKIM_SIGNED 125105 81.13 88.57 77.05 4 XM_DK_Pass 122886 79.01 85.07 75.69 5 DKIM_VALID 121934 78.37 84.34 75.10 6 XM_B_Unicode 115749 75.59 83.45 71.29 7 DKIM_VALID_AU 104337 65.45 67.63 64.26 8 BAYES_50 101644 53.22 36.09 62.60 9 XMListUnsubscribeExists 86373 60.42 73.62 53.20 10 DCC_CHECK_NEGATIVE 83222 40.49 20.83 51.26 11 DCC_CHECK 79090 59.29 78.61 48.71 12 XM_B_Unicode3 75564 48.69 52.60 46.54 13 XM_B_SpammyWords 74657 55.17 71.94 45.98 14 RCVD_IN_MSPIKE_H2 62082 38.80 39.82 38.24 15 LOC_TINY_FONT_1 50977 38.15 50.48 31.40 16 HTML_FONT_LOW_CONTRAST 50406 34.25 40.09 31.04 17 DKIM_VALID_EF 49195 28.71 25.82 30.30 18 FVGT_m_MULTI_ODD 42475 27.77 30.70 26.16 19 XMSubLong 37220 21.87 19.94 22.92 20 T_TM2_M_HEADER_IN_MSG 35594 20.90 19.04 21.92 21 XM_B_SpammyWords2 34670 28.64 41.95 21.35 22 MIME_HTML_ONLY 34508 24.24 29.70 21.25 23 T_KAM_HTML_FONT_INVALID 33714 24.48 31.28 20.76 24 USER_IN_DEF_DKIM_WL 29130 12.40 2.29 17.94 25 ALL_TRUSTED 25968 10.85 1.46 15.99 26 XM_Multi_Part_URI 25652 18.21 22.60 15.80 27 TR_XM_DK_Unsub 23328 16.10 19.25 14.37 28 UNPARSEABLE_RELAY 20873 13.96 15.96 12.86 29 BAYES_00 15980 6.50 0.41 9.84 30 XM_DKIMWhitelistDomains 15893 6.35 0.07 9.79 31 XM_Evil_Numbers_Gen 15735 9.09 8.00 9.69 32 T_TooManySym_01 15670 6.92 1.94 9.65 33 XM_B_Unsub 15381 11.45 15.05 9.47 34 FSL_BULK_SIG 15345 9.21 8.77 9.45 35 BAYES_60 11844 8.00 9.29 7.29 36 TR_XM_DK_Bayes 11714 4.78 0.34 7.21 37 TR_XM_BayesUnsub 11708 9.83 14.60 7.21 38 TR_XM_DK_Bayes1 11571 4.72 0.34 7.13 39 TooManyTo_001 11545 5.81 3.44 7.11 40 LotsOfNums_01 11240 6.70 6.31 6.92 41 XM_B_PhoneNumber 11018 5.92 4.35 6.79 42 XMStrtUSub 10992 6.55 6.16 6.77 43 XM_H_GMP 10989 6.50 6.01 6.77 44 RCVD_IN_VALIDITY_SAFE 10698 5.38 3.17 6.59 45 HTML_IMAGE_RATIO_02 10364 6.71 7.32 6.38 46 XM_B_SpammyWords3 10209 9.53 15.45 6.29 47 TR_MAX_INTL_RELAY 10091 10.05 17.04 6.22 48 TR_XM_DK_Bayes2 10087 4.09 0.21 6.21 49 XM_H_Long_From01 9448 5.62 5.26 5.82 50 IN_ZIMBRA_NJ_WHITELIST 8950 3.60 0.10 5.51 51 XM_UncommonTLD01 8948 6.73 8.97 5.51 52 HTML_IMAGE_RATIO_04 8376 4.84 4.26 5.16 53 XM_DK_Undo_02 8287 17.82 41.04 5.10 54 LOTS_OF_MONEY 8267 6.56 9.24 5.09 55 T_TooManySym_02 8197 3.51 0.71 5.05 56 XM_B_Phish_Phrases 8073 5.66 6.93 4.97 57 RCVD_IN_MSPIKE_H3 8045 4.61 3.98 4.95 58 RCVD_IN_MSPIKE_WL 8045 4.61 3.98 4.95 59 RCVD_IN_VALIDITY_CERTIFIED 8007 4.05 2.44 4.93 60 BAYES_40 7812 3.63 1.47 4.81 61 MPART_ALT_DIFF 7355 5.43 7.08 4.53 62 XMNumbers 6923 3.70 2.66 4.26 63 INVALID_MSGID 6696 2.78 0.33 4.12 64 RELAYCOUNTRY_META 6624 7.91 14.90 4.08 65 ANY_BOUNCE_MESSAGE 6528 2.86 0.75 4.02 66 BOUNCE_MESSAGE 6527 2.86 0.75 4.02 67 TO_MALFORMED 6217 2.48 0.00 3.83 68 XM_Body_Dirty_Words 6111 5.86 9.68 3.76 69 BAYES_80 6019 6.12 10.52 3.71 70 BAYES_99 5972 14.23 33.51 3.68 71 TR_XM_SpammyWords4 5967 5.37 8.47 3.68 72 BOTNET_IPINHOSTNAME 5922 5.72 9.49 3.65 73 BAYES_20 5775 2.73 1.23 3.56 74 XMSubMetaSx_00 5645 4.43 6.16 3.48 75 T_REMOTE_IMAGE 5474 3.04 2.44 3.37 76 MIME_QP_LONG_LINE 5320 2.69 1.62 3.28 77 MAILING_LIST_MULTI 5010 2.71 2.04 3.09 78 HTML_IMAGE_RATIO_06 4630 3.59 4.95 2.85 79 XM_B_SpammyTLD 4543 3.07 3.58 2.80 80 BAYES_999 4492 11.01 26.05 2.77 81 HTML_IMAGE_RATIO_08 4240 2.93 3.50 2.61 82 MIME_HTML_ONLY_MULTI 4204 2.92 3.53 2.59 83 XM_CamelCaseFrm001 4193 2.99 3.73 2.58 84 TooManyTo_002 4168 1.86 0.57 2.57 85 XMSexyCombo_05 4122 3.48 5.19 2.54 86 BAYES_95 4071 3.83 6.25 2.51 87 MIME_HTML_MOSTLY 4067 3.09 4.16 2.50 88 XM_PDF 4055 1.75 0.37 2.50 89 TR_XM_DKIM_Undo 3803 11.99 29.61 2.34 90 FROM_EXCESS_BASE64 3681 2.27 2.27 2.27 91 T_TooManySym_03 3557 1.47 0.16 2.19 92 RCVD_IN_IADB_LISTED 3469 1.61 0.65 2.14 93 TR_XM_SpammyRelay 3253 5.28 11.26 2.00 94 BAYES_05 3241 1.54 0.69 2.00 95 TR_XM_PhishingBody 3220 2.76 4.16 1.98 96 HTML_MIME_NO_HTML_TAG 3219 1.64 1.02 1.98 97 IN_HORDE_ADDRESS_BOOK 3202 1.32 0.12 1.97 98 DKIM_INVALID 3171 2.76 4.23 1.95 99 TM2_M_URI_OPT_OUT 3155 2.34 3.06 1.94 100 RCVD_IN_IADB_SPF 3061 1.42 0.57 1.89 101 T_XMDrugObfuBody_14 3026 3.31 5.94 1.86 102 TR_XM_SpammyWords5 2882 2.13 2.77 1.78 103 TR_XM_UnparsRelay 2767 4.24 8.87 1.70 104 RCVD_IN_IADB_SENDERID 2766 1.29 0.54 1.70 105 UNTRUSTED_Relay 2750 2.82 4.86 1.69 106 RCVD_IN_IADB_DK 2721 1.28 0.55 1.68 107 RELAYCOUNTRY_CA 2685 3.43 6.67 1.65 108 XMStockSpam_06 2677 1.58 1.46 1.65 109 URI_NOVOWEL 2627 1.36 0.88 1.62 110 TM2_M_VERY_LONG_WORD 2627 2.20 3.26 1.62 111 XM_B_URI_Unicode 2558 1.62 1.69 1.58 112 TVD_SPACE_RATIO 2532 1.06 0.14 1.56 113 XM_B_COPY_HTML 2494 1.58 1.67 1.54 114 XMGappySubj_01 2462 1.03 0.13 1.52 115 RCVD_IN_IADB_VOUCHED 2377 1.06 0.32 1.46 116 XMDiploma_00 2362 1.72 2.19 1.45 117 XM_DK_Undo_01 2354 1.32 1.08 1.45 118 TR_DCC_Bayes_99 2283 9.93 25.48 1.41 119 BOTNET 2241 4.48 10.14 1.38 120 XM_B_Unsub2 2179 1.53 1.88 1.34 121 T_XMDrugObfuBody_08 2148 1.90 2.95 1.32 122 XM_B_Investor 2107 2.33 4.21 1.30 123 XM_GoogleGroups 2105 1.16 0.90 1.30 124 XMGappySubj_02 2057 0.84 0.06 1.27 125 XM_SPF_SoftFail 2029 1.79 2.77 1.25 126 TR_Symld_Words 2024 1.06 0.72 1.25 127 TooManyTo_003 2019 0.99 0.53 1.24 128 XM_H_Long_From02 2018 1.16 1.00 1.24 129 KHOP_HELO_FCRDNS 1964 1.25 1.32 1.21 130 XM_SendGrid 1936 1.27 1.42 1.19 131 T_TVD_MIME_NO_HEADERS 1889 0.76 0.02 1.16 132 XMBdyGiftCard01 1884 1.15 1.13 1.16 133 SUBJ_ALL_CAPS 1870 1.35 1.72 1.15 134 HTML_TAG_BALANCE_BODY 1850 1.69 2.69 1.14 135 XMBrknScrpt_02 1815 1.41 1.96 1.12 136 XM_OfRef6 1766 2.11 3.99 1.09 137 URI_HEX 1752 1.11 1.16 1.08 138 TVD_RCVD_IP 1707 1.02 0.96 1.05 139 RCVD_IN_IADB_OPTIN 1691 0.74 0.18 1.04 140 XM_UB50 1547 1.35 2.08 0.95 141 TooManyTo_004 1513 0.78 0.49 0.93 142 XMNoVowels 1499 0.84 0.70 0.92 143 XMBody_95 1450 0.61 0.11 0.89 144 TR_XM_DK_SendGrid 1406 0.97 1.15 0.87 145 DKIM_ADSP_CUSTOM_MED 1401 0.87 0.88 0.86 146 T_Symld_Words_02 1388 0.77 0.60 0.85 147 XM_B_FormFill 1338 0.53 0.01 0.82 148 MSGID_FROM_MTA_HEADER 1309 0.55 0.09 0.81 149 TooManyTo_005 1304 0.68 0.47 0.80 150 XMPhish30 1284 1.13 1.74 0.79 151 XM_H_PHPMailer 1282 0.83 0.91 0.79 152 T_TooManySym_04 1258 0.51 0.02 0.77 153 TM2_M_OBFU_COMMENT 1254 0.86 1.01 0.77 154 XM_B_SpammyWords4 1206 1.38 2.54 0.74 155 XMSubMetaI_00 1201 0.88 1.14 0.74 156 RCVD_IN_PSBL 1197 1.12 1.81 0.74 157 T_XMHurry_00 1193 1.48 2.85 0.73 158 RCVD_IN_PBL 1189 0.81 0.97 0.73 159 RCVD_IN_BL_SPAMCOP_NET 1169 3.96 9.87 0.72 160 XMBSHREFv2 1163 0.58 0.33 0.72 161 USER_IN_WHITELIST 1160 0.46 0.00 0.71 162 USER_IN_WELCOMELIST 1160 0.46 0.00 0.71 163 SpammyFromTLD_01 1139 1.01 1.57 0.70 164 XMSlimDrugH 1117 1.10 1.86 0.69 165 XM_B_DNDMA 1117 0.76 0.90 0.69 166 XMPhish14 1027 0.63 0.63 0.63 167 TR_MetaPhish_Combo_01 1005 0.65 0.70 0.62 168 PLING_QUERY 963 0.71 0.91 0.59 169 TR_XM_Base64_M1 958 0.71 0.92 0.59 170 HTML_IMAGE_ONLY_20 952 0.55 0.49 0.59 171 T_FILL_THIS_FORM_SHORT 903 1.18 2.31 0.56 172 XM_URI_RBL 896 1.36 2.84 0.55 173 TR_XM_SpammyWords2 889 5.18 13.63 0.55 174 XMGenDplmaNmb 880 0.69 0.96 0.54 175 HTML_FONT_FACE_BAD 872 0.68 0.94 0.54 176 FORGED_GMAIL_RCVD 871 0.57 0.63 0.54 177 NML_ADSP_CUSTOM_MED 852 0.60 0.74 0.52 178 XMBody_17 849 1.36 2.88 0.52 179 MIME_CHARSET_FARAWAY 848 0.62 0.79 0.52 180 DKIM_ADSP_NXDOMAIN 837 1.25 2.59 0.52 181 HTML_TAG_BALANCE_CENTER 819 0.46 0.37 0.50 182 TR_XM_SPAMCOP 814 2.91 7.31 0.50 183 DIET_1 810 1.28 2.71 0.50 184 URI_TRY_3LD 805 0.65 0.95 0.50 185 XMCapTrack 805 0.47 0.43 0.50 186 XM_ProductURIs 790 0.60 0.81 0.49 187 AD_PREFS 787 0.35 0.10 0.48 188 XM_S_SubURI 781 0.33 0.05 0.48 189 TO_NO_BRKTS_HTML_ONLY 774 0.88 1.61 0.48 190 HTML_EXTRA_CLOSE 762 0.35 0.14 0.47 191 RELAYCOUNTRY_AU 757 1.16 2.42 0.47 192 XMSubNoVowel 750 0.50 0.57 0.46 193 NO_DNS_FOR_FROM 746 1.21 2.58 0.46 194 XMLngstWrd_00 727 0.38 0.26 0.45 195 MPART_ALT_DIFF_COUNT 719 0.66 1.05 0.44 196 HTTPS_HTTP_MISMATCH 700 0.56 0.81 0.43 197 XM_ShortIntro_01 676 0.45 0.51 0.42 198 XMSubMetaSxObfu_02 636 0.39 0.38 0.39 199 SHOPIFY_IMG_NOT_RCVD_SFY 629 0.79 1.53 0.39 200 T_XMDrugObfuBody_00 629 0.86 1.71 0.39 ----------------------------------------------------------------------