Email: 467479 Autolearn: 0 AvgScore: 3.76 AvgScanTime: 1.54 sec Spam: 148522 Autolearn: 0 AvgScore: 13.55 AvgScanTime: 1.71 sec Ham: 318957 Autolearn: 0 AvgScore: -0.80 AvgScanTime: 1.47 sec Time Spent Running SA: 200.47 hours Time Spent Processing Spam: 70.46 hours Time Spent Processing Ham: 130.02 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 141041 88.96 94.96 86.17 2 DKIM_SIGNED 135919 81.19 91.51 76.38 3 XM_DK_Pass 132763 79.20 89.39 74.45 4 DKIM_VALID 131153 78.17 88.31 73.46 5 XM_B_Unicode 127146 75.88 85.61 71.35 6 RELAYCOUNTRY_US 121658 81.45 81.91 81.23 7 DCC_CHECK 111741 49.99 75.24 38.24 8 XMListUnsubscribeExists 109260 58.04 73.56 50.81 9 XM_B_SpammyWords 108645 55.34 73.15 47.05 10 DKIM_VALID_AU 101122 61.83 68.09 58.92 11 RCVD_IN_MSPIKE_H2 77289 44.72 52.04 41.32 12 XM_B_Unicode3 68569 43.61 46.17 42.42 13 XM_DK_Undo_02 66420 18.74 44.72 6.64 14 XM_B_SpammyWords2 61957 27.40 41.72 20.74 15 LOC_TINY_FONT_1 60413 30.22 40.68 25.34 16 BAYES_50 60260 53.02 40.57 58.82 17 HTML_FONT_LOW_CONTRAST 54973 31.40 37.01 28.79 18 FVGT_m_MULTI_ODD 53657 30.14 36.13 27.35 19 TR_XM_DKIM_Undo 53425 14.44 35.97 4.42 20 DKIM_VALID_EF 52073 30.91 35.06 28.98 21 BAYES_99 49995 13.97 33.66 4.80 22 T_KAM_HTML_FONT_INVALID 47077 24.13 31.70 20.61 23 MIME_HTML_ONLY 43844 23.37 29.52 20.50 24 BAYES_999 39608 11.06 26.67 3.80 25 TR_DCC_Bayes_99 37128 9.31 25.00 2.00 26 DCC_CHECK_NEGATIVE 36754 49.97 24.75 61.71 27 XM_Body_Dirty_Words 35723 16.29 24.05 12.67 28 T_TM2_M_HEADER_IN_MSG 33828 26.72 22.78 28.55 29 XMSubLong 33176 23.08 22.34 23.43 30 XM_Multi_Part_URI 30352 15.87 20.44 13.74 31 RELAYCOUNTRY_META 26826 8.01 18.06 3.34 32 BOTNET_IPINHOSTNAME 23070 8.41 15.53 5.10 33 XM_B_Unsub 22841 11.06 15.38 9.05 34 TR_XM_BayesUnsub 22109 9.77 14.89 7.38 35 TR_XM_SpammyRelay 20679 5.44 13.92 1.48 36 LOTS_OF_MONEY 20671 8.54 13.92 6.04 37 RCVD_IN_MSPIKE_WL 20369 16.63 13.71 17.99 38 XM_B_SpammyWords3 18390 7.48 12.38 5.20 39 TR_XM_SpammyWords4 18222 6.59 12.27 3.94 40 TR_XM_SpammyWords2 18117 4.50 12.20 0.92 41 UNPARSEABLE_RELAY 16546 9.56 11.14 8.82 42 RCVD_IN_MSPIKE_H3 16290 11.30 10.97 11.45 43 XMSexyCombo_05 14259 5.59 9.60 3.72 44 RCVD_IN_BL_SPAMCOP_NET 14018 3.35 9.44 0.52 45 FSL_BULK_SIG 13712 5.46 9.23 3.70 46 XM_Evil_Numbers_Gen 13487 9.07 9.08 9.07 47 BAYES_80 13074 5.81 8.80 4.41 48 BOTNET 12899 3.91 8.68 1.69 49 RELAYCOUNTRY_CA 12254 3.27 8.25 0.94 50 BAYES_60 11687 8.92 7.87 9.41 51 MPART_ALT_DIFF 10921 5.69 7.35 4.91 52 TR_XM_SPAMCOP 10910 2.49 7.35 0.23 53 UNTRUSTED_Relay 10734 3.15 7.23 1.24 54 XM_UncommonTLD01 10632 4.82 7.16 3.73 55 LotsOfNums_01 10455 8.22 7.04 8.76 56 TR_XM_PhishingBody 10223 4.54 6.88 3.45 57 XM_SendGrid 9868 6.05 6.64 5.78 58 HTML_IMAGE_RATIO_02 9589 6.44 6.46 6.44 59 TR_XM_UnparsRelay 9546 3.17 6.43 1.66 60 XMSubMetaSx_00 9204 4.42 6.20 3.59 61 XM_B_Phish_Phrases 8616 4.85 5.80 4.41 62 XM_H_Long_From01 8007 5.54 5.39 5.60 63 XM_B_Investor 7890 2.63 5.31 1.39 64 BAYES_95 7313 3.40 4.92 2.69 65 XM_B_SpammyTLD 7266 3.34 4.89 2.62 66 TooManyTo_001 7244 7.07 4.88 8.10 67 HTML_IMAGE_RATIO_04 7240 5.40 4.87 5.65 68 MIME_HTML_MOSTLY 7207 3.39 4.85 2.71 69 T_XMDrugObfuBody_08 6969 2.57 4.69 1.59 70 XM_OfRef6 6960 2.21 4.69 1.05 71 T_XMDrugObfuBody_14 6729 2.60 4.53 1.70 72 XM_B_Phish66 6494 2.63 4.37 1.82 73 RCVD_IN_MSPIKE_BL 6436 1.71 4.33 0.49 74 TR_XM_MSPIKECOMBO 6403 1.70 4.31 0.49 75 TR_XM_DK_SendGrid 6277 4.10 4.23 4.04 76 T_FILL_THIS_FORM_SHORT 6236 1.97 4.20 0.94 77 XMBody_17 6020 1.59 4.05 0.45 78 MIME_HTML_ONLY_MULTI 5870 3.15 3.95 2.77 79 XM_SPF_SoftFail 5838 2.59 3.93 1.96 80 XMStrtUSub 5616 4.46 3.78 4.78 81 URIBL_DBL_SPAM 5601 1.20 3.77 0.01 82 XMNumbers 5491 4.10 3.70 4.28 83 HTML_IMAGE_RATIO_06 5440 4.05 3.66 4.23 84 TR_XM_SpammyWords5 5337 1.96 3.59 1.20 85 RCVD_IN_VALIDITY_SAFE 5173 4.43 3.48 4.86 86 XM_DIRTYINTL 5163 1.28 3.48 0.26 87 MIME_QP_LONG_LINE 5122 4.56 3.45 5.07 88 TR_XM_SpammyWords3 5032 1.26 3.39 0.27 89 XM_UB50 4933 1.61 3.32 0.81 90 TM2_M_VERY_LONG_WORD 4879 1.89 3.29 1.24 91 URI_PHP_REDIR 4856 1.04 3.27 0.01 92 DKIM_INVALID 4766 3.01 3.21 2.92 93 XMDiploma_00 4588 2.12 3.09 1.67 94 URI_NOVOWEL 4517 2.40 3.04 2.10 95 TM2_M_URI_OPT_OUT 4464 2.12 3.01 1.71 96 SpammyFromTLD_02 4190 1.20 2.82 0.44 97 RCVD_IN_VALIDITY_CERTIFIED 4140 3.82 2.79 4.30 98 FROM_EXCESS_BASE64 4079 2.86 2.75 2.91 99 USER_IN_DEF_DKIM_WL 4073 10.27 2.74 13.78 100 TR_XM_FormFill 3894 0.84 2.62 0.01 101 RCVD_IN_MSPIKE_H4 3865 4.34 2.60 5.15 102 XM_B_Unsub2 3859 2.18 2.60 1.98 103 TR_XM_SB_Phish 3675 2.28 2.47 2.19 104 XM_DK_Undo_01 3649 1.78 2.46 1.47 105 HK_RANDOM_REPLYTO 3506 0.82 2.36 0.10 106 HTML_IMAGE_RATIO_08 3484 2.46 2.35 2.51 107 SpammyFromTLD_01 3416 1.21 2.30 0.70 108 XM_CamelCaseFrm001 3411 2.13 2.30 2.05 109 TR_XM_NoHeaderRelay 3386 0.81 2.28 0.12 110 XMSubPhish11 3360 2.18 2.26 2.14 111 T_TooManySym_01 3301 5.80 2.22 7.47 112 RCVD_IN_IADB_LISTED 3211 4.00 2.16 4.85 113 XM_B_SpammyWords4 3091 1.06 2.08 0.58 114 XMSexyCombo_01 3032 1.30 2.04 0.96 115 RCVD_IN_MSPIKE_L5 3025 0.66 2.04 0.02 116 T_REMOTE_IMAGE 2978 3.27 2.01 3.86 117 RCVD_IN_MSPIKE_L3 2958 0.91 1.99 0.41 118 XM_B_COVIDMETA 2930 0.93 1.97 0.45 119 RCVD_IN_IADB_SPF 2892 3.58 1.95 4.35 120 HTTPS_HTTP_MISMATCH 2801 1.10 1.89 0.74 121 RCVD_IN_IADB_DK 2740 3.22 1.84 3.86 122 XMBdyGiftCard01 2738 1.28 1.84 1.01 123 MAILING_LIST_MULTI 2725 2.27 1.83 2.47 124 RCVD_IN_IADB_SENDERID 2707 3.27 1.82 3.95 125 HTML_MIME_NO_HTML_TAG 2704 2.02 1.82 2.12 126 FONT_INVIS_LONG_LINE 2702 0.61 1.82 0.05 127 TR_LOTS_OF_MONEY3 2515 0.71 1.69 0.25 128 XM_URI_RBL 2481 0.63 1.67 0.14 129 T_XMHurry_00 2446 0.83 1.65 0.45 130 PDS_OTHER_BAD_TLD 2392 0.74 1.61 0.34 131 XMBrknScrpt_02 2385 0.96 1.61 0.67 132 RELAYCOUNTRY_IN 2355 0.55 1.59 0.07 133 RELAYCOUNTRY_AU 2331 0.70 1.57 0.29 134 XMStockSpam_06 2314 1.75 1.56 1.84 135 ALL_TRUSTED 2298 11.53 1.55 16.18 136 BAYES_40 2276 3.80 1.53 4.85 137 SUBJ_ALL_CAPS 2246 1.50 1.51 1.49 138 TR_XM_Base64_M1 2208 1.15 1.49 0.99 139 TR_Mismatch_TLD_02 2184 0.52 1.47 0.07 140 FROM_SUSPICIOUS_NTLD 2174 0.50 1.46 0.05 141 T_XMDrugObfuBody_00 2163 1.09 1.46 0.92 142 TR_XM_PHPDW 2144 0.78 1.44 0.47 143 URI_HEX 2124 1.32 1.43 1.26 144 XM_H_Undi_Recip 2098 0.60 1.41 0.22 145 FROM_SUSPICIOUS_NTLD_FP 2094 0.48 1.41 0.04 146 XM_UB99 2066 0.44 1.39 0.00 147 HTML_TAG_BALANCE_BODY 2063 0.90 1.39 0.67 148 XMGenDplmaNmb 2049 0.95 1.38 0.75 149 TR_XM_PHPForged 2017 0.72 1.36 0.42 150 KHOP_HELO_FCRDNS 2004 1.25 1.35 1.20 151 LongTLD 2002 0.66 1.35 0.33 152 XM_B_SEO 1979 0.52 1.33 0.14 153 TR_XM_FormFill2 1976 0.71 1.33 0.43 154 XM_H_PHPOS 1968 0.71 1.33 0.42 155 TR_XM_BayesRelay 1908 0.41 1.28 0.00 156 XMHTML_After_End 1899 1.06 1.28 0.96 157 URIBL_BLACK 1886 0.44 1.27 0.06 158 XMPhish30 1882 0.95 1.27 0.80 159 XMSubMetaI_00 1857 0.83 1.25 0.63 160 TR_XM_SEO4 1835 0.45 1.24 0.08 161 MPART_ALT_DIFF_COUNT 1831 0.80 1.23 0.60 162 XMReplyNow 1803 0.55 1.21 0.23 163 T_Symld_Words_02 1776 0.63 1.20 0.36 164 TR_XM_COVIDMETA1 1776 0.52 1.20 0.21 165 URI_TRY_3LD 1775 0.86 1.20 0.70 166 RCVD_IN_PSBL 1774 0.58 1.19 0.30 167 RCVD_IN_VALIDITY_RPBL 1744 0.41 1.17 0.06 168 SHOPIFY_IMG_NOT_RCVD_SFY 1742 0.51 1.17 0.20 169 RELAYCOUNTRY_FR 1702 0.52 1.15 0.23 170 TR_Symld_Words 1647 1.49 1.11 1.67 171 BAYES_20 1643 2.81 1.11 3.61 172 TR_XM_COVIDMETA4 1624 0.46 1.09 0.16 173 XM_Body_Dirty_Words_01 1617 0.44 1.09 0.14 174 XM_UB999 1593 0.34 1.07 0.00 175 BOTNET_NORDNS 1576 0.34 1.06 0.01 176 TR_XM_Undi_Recip5 1575 0.34 1.06 0.01 177 TR_MetaPhish_Combo_01 1546 0.84 1.04 0.74 178 TR_XM_MSPIKECOMBO2 1530 0.34 1.03 0.02 179 TM2_M_OBFU_COMMENT 1522 0.45 1.02 0.19 180 TR_XM_InvalidRelay 1515 0.34 1.02 0.02 181 DIET_1 1506 0.53 1.01 0.31 182 XM_ProductURIs 1500 0.60 1.01 0.41 183 XM_UB60 1479 0.36 1.00 0.06 184 UNDISC_MONEY 1395 0.30 0.94 0.01 185 BAYES_00 1388 6.67 0.93 9.34 186 XM_B_DNDMA 1375 0.61 0.93 0.47 187 REMOVE_BEFORE_LINK 1361 0.41 0.92 0.18 188 XM_GoogleGroups 1359 1.13 0.92 1.23 189 RCVD_IN_IADB_VOUCHED 1324 2.26 0.89 2.90 190 XM_B_COPY_HTML 1320 0.79 0.89 0.74 191 XMHTMLBadTable_001 1281 0.61 0.86 0.49 192 XM_OfRef7 1278 0.37 0.86 0.13 193 TR_XM_MaxSPIKE 1234 0.28 0.83 0.02 194 XMSlimDrugH 1215 0.56 0.82 0.43 195 XMSubMetaSxObfu_03 1149 0.78 0.77 0.78 196 XM_B_REG_HTML 1142 0.45 0.77 0.31 197 SUBJ_DOLLARS 1124 0.40 0.76 0.24 198 TR_Mismatch_TLD_01 1122 0.39 0.76 0.22 199 T_MONEY_PERCENT 1119 0.32 0.75 0.11 200 TR_LOTS_OF_MONEY2 1119 0.32 0.75 0.11 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 274851 88.96 94.96 86.17 2 RELAYCOUNTRY_US 259098 81.45 81.91 81.23 3 DKIM_SIGNED 243624 81.19 91.51 76.38 4 XM_DK_Pass 237462 79.20 89.39 74.45 5 DKIM_VALID 234296 78.17 88.31 73.46 6 XM_B_Unicode 227576 75.88 85.61 71.35 7 DCC_CHECK_NEGATIVE 196827 49.97 24.75 61.71 8 DKIM_VALID_AU 187929 61.83 68.09 58.92 9 BAYES_50 187619 53.02 40.57 58.82 10 XMListUnsubscribeExists 162048 58.04 73.56 50.81 11 XM_B_SpammyWords 150074 55.34 73.15 47.05 12 XM_B_Unicode3 135294 43.61 46.17 42.42 13 RCVD_IN_MSPIKE_H2 131788 44.72 52.04 41.32 14 DCC_CHECK 121960 49.99 75.24 38.24 15 DKIM_VALID_EF 92422 30.91 35.06 28.98 16 HTML_FONT_LOW_CONTRAST 91829 31.40 37.01 28.79 17 T_TM2_M_HEADER_IN_MSG 91076 26.72 22.78 28.55 18 FVGT_m_MULTI_ODD 87234 30.14 36.13 27.35 19 LOC_TINY_FONT_1 80839 30.22 40.68 25.34 20 XMSubLong 74730 23.08 22.34 23.43 21 XM_B_SpammyWords2 66143 27.40 41.72 20.74 22 T_KAM_HTML_FONT_INVALID 65727 24.13 31.70 20.61 23 MIME_HTML_ONLY 65395 23.37 29.52 20.50 24 RCVD_IN_MSPIKE_WL 57367 16.63 13.71 17.99 25 ALL_TRUSTED 51617 11.53 1.55 16.18 26 USER_IN_DEF_DKIM_WL 43959 10.27 2.74 13.78 27 XM_Multi_Part_URI 43825 15.87 20.44 13.74 28 XM_Body_Dirty_Words 40408 16.29 24.05 12.67 29 RCVD_IN_MSPIKE_H3 36528 11.30 10.97 11.45 30 XM_DKIMWhitelistDomains 33589 7.22 0.11 10.53 31 BAYES_60 30020 8.92 7.87 9.41 32 BAYES_00 29779 6.67 0.93 9.34 33 XM_Evil_Numbers_Gen 28918 9.07 9.08 9.07 34 XM_B_Unsub 28860 11.06 15.38 9.05 35 UNPARSEABLE_RELAY 28139 9.56 11.14 8.82 36 LotsOfNums_01 27956 8.22 7.04 8.76 37 TooManyTo_001 25823 7.07 4.88 8.10 38 T_TooManySym_01 23825 5.80 2.22 7.47 39 TR_XM_BayesUnsub 23546 9.77 14.89 7.38 40 XM_DK_Undo_02 21168 18.74 44.72 6.64 41 IN_ZIMBRA_NJ_WHITELIST 20754 4.46 0.08 6.51 42 HTML_IMAGE_RATIO_02 20527 6.44 6.46 6.44 43 TR_XM_DK_Bayes 20076 4.49 0.61 6.29 44 TR_XM_DK_Bayes1 19733 4.40 0.55 6.19 45 LOTS_OF_MONEY 19258 8.54 13.92 6.04 46 XM_SendGrid 18420 6.05 6.64 5.78 47 HTML_IMAGE_RATIO_04 18023 5.40 4.87 5.65 48 XM_H_Long_From01 17872 5.54 5.39 5.60 49 TR_XM_DK_Bayes2 17532 3.89 0.43 5.50 50 XM_B_SpammyWords3 16572 7.48 12.38 5.20 51 RCVD_IN_MSPIKE_H4 16419 4.34 2.60 5.15 52 BOTNET_IPINHOSTNAME 16268 8.41 15.53 5.10 53 MIME_QP_LONG_LINE 16175 4.56 3.45 5.07 54 MPART_ALT_DIFF 15667 5.69 7.35 4.91 55 RCVD_IN_VALIDITY_SAFE 15516 4.43 3.48 4.86 56 BAYES_40 15474 3.80 1.53 4.85 57 RCVD_IN_IADB_LISTED 15465 4.00 2.16 4.85 58 BAYES_99 15321 13.97 33.66 4.80 59 XM_PDF 15281 3.49 0.69 4.79 60 XMStrtUSub 15241 4.46 3.78 4.78 61 T_TooManySym_02 14130 3.25 0.71 4.43 62 TR_XM_DKIM_Undo 14093 14.44 35.97 4.42 63 XM_B_Phish_Phrases 14066 4.85 5.80 4.41 64 BAYES_80 14066 5.81 8.80 4.41 65 RCVD_IN_IADB_SPF 13865 3.58 1.95 4.35 66 RCVD_IN_VALIDITY_CERTIFIED 13721 3.82 2.79 4.30 67 XMNumbers 13654 4.10 3.70 4.28 68 HTML_IMAGE_RATIO_06 13506 4.05 3.66 4.23 69 TR_XM_DK_SendGrid 12882 4.10 4.23 4.04 70 RCVD_IN_IADB_SENDERID 12602 3.27 1.82 3.95 71 TR_XM_SpammyWords4 12572 6.59 12.27 3.94 72 T_REMOTE_IMAGE 12308 3.27 2.01 3.86 73 RCVD_IN_IADB_DK 12298 3.22 1.84 3.86 74 BAYES_999 12106 11.06 26.67 3.80 75 XM_UncommonTLD01 11891 4.82 7.16 3.73 76 XMSexyCombo_05 11863 5.59 9.60 3.72 77 FSL_BULK_SIG 11792 5.46 9.23 3.70 78 BAYES_20 11502 2.81 1.11 3.61 79 XMSubMetaSx_00 11463 4.42 6.20 3.59 80 TR_XM_PhishingBody 11013 4.54 6.88 3.45 81 RELAYCOUNTRY_META 10638 8.01 18.06 3.34 82 DKIM_INVALID 9328 3.01 3.21 2.92 83 FROM_EXCESS_BASE64 9289 2.86 2.75 2.91 84 RCVD_IN_IADB_VOUCHED 9256 2.26 0.89 2.90 85 MIME_HTML_ONLY_MULTI 8851 3.15 3.95 2.77 86 MIME_HTML_MOSTLY 8658 3.39 4.85 2.71 87 BAYES_95 8591 3.40 4.92 2.69 88 XM_B_SpammyTLD 8369 3.34 4.89 2.62 89 HTML_IMAGE_RATIO_08 7998 2.46 2.35 2.51 90 MAILING_LIST_MULTI 7866 2.27 1.83 2.47 91 TooManyTo_002 6982 1.71 0.68 2.19 92 TR_XM_SB_Phish 6974 2.28 2.47 2.19 93 INVALID_MSGID 6932 1.54 0.19 2.17 94 HTML_FONT_FACE_BAD 6900 1.68 0.63 2.16 95 XMSubPhish11 6841 2.18 2.26 2.14 96 HTML_MIME_NO_HTML_TAG 6748 2.02 1.82 2.12 97 URI_NOVOWEL 6710 2.40 3.04 2.10 98 XM_H_Trusted_IP 6589 1.41 0.00 2.07 99 BAYES_05 6585 1.60 0.60 2.06 100 XM_CamelCaseFrm001 6537 2.13 2.30 2.05 101 MSGID_NOFQDN1 6382 1.38 0.06 2.00 102 TR_DCC_Bayes_99 6376 9.31 25.00 2.00 103 XM_B_Unsub2 6311 2.18 2.60 1.98 104 XM_SPF_SoftFail 6255 2.59 3.93 1.96 105 IN_HORDE_ADDRESS_BOOK 6186 1.37 0.14 1.94 106 BOUNCE_MESSAGE 6057 1.48 0.58 1.90 107 ANY_BOUNCE_MESSAGE 6057 1.48 0.58 1.90 108 TO_MALFORMED 5957 1.28 0.02 1.87 109 RCVD_IN_IADB_OPTIN 5950 1.43 0.50 1.87 110 XMStockSpam_06 5863 1.75 1.56 1.84 111 T_TooManySym_03 5815 1.33 0.28 1.82 112 XM_B_Phish66 5792 2.63 4.37 1.82 113 TVD_RCVD_IP 5628 1.27 0.22 1.76 114 TVD_SPACE_RATIO 5470 1.19 0.07 1.71 115 TM2_M_URI_OPT_OUT 5455 2.12 3.01 1.71 116 T_XMDrugObfuBody_14 5437 2.60 4.53 1.70 117 BOTNET 5400 3.91 8.68 1.69 118 TR_Symld_Words 5332 1.49 1.11 1.67 119 XMDiploma_00 5329 2.12 3.09 1.67 120 TR_XM_UnparsRelay 5283 3.17 6.43 1.66 121 T_XMDrugObfuBody_08 5066 2.57 4.69 1.59 122 HELO_NODOT 4773 1.18 0.49 1.50 123 HELO_NO_DOMAIN 4772 1.18 0.49 1.50 124 SUBJ_ALL_CAPS 4760 1.50 1.51 1.49 125 TR_XM_SpammyRelay 4732 5.44 13.92 1.48 126 XM_H_Long_From02 4679 1.24 0.75 1.47 127 XM_DK_Undo_01 4676 1.78 2.46 1.47 128 TooManyTo_003 4545 1.15 0.56 1.42 129 XM_B_Investor 4423 2.63 5.31 1.39 130 RCVD_IN_MSPIKE_H5 4420 0.99 0.14 1.39 131 XMBSHREFv2 4299 1.02 0.31 1.35 132 URI_HEX 4034 1.32 1.43 1.26 133 XMGappySubj_01 3980 0.91 0.17 1.25 134 UNTRUSTED_Relay 3971 3.15 7.23 1.24 135 TM2_M_VERY_LONG_WORD 3964 1.89 3.29 1.24 136 XM_GoogleGroups 3917 1.13 0.92 1.23 137 TR_XM_SpammyWords5 3841 1.96 3.59 1.20 138 KHOP_HELO_FCRDNS 3830 1.25 1.35 1.20 139 XM_OfRef6 3359 2.21 4.69 1.05 140 XMCapTrack 3269 0.83 0.41 1.02 141 XMBdyGiftCard01 3229 1.28 1.84 1.01 142 TooManyTo_004 3213 0.84 0.49 1.01 143 TR_XM_Base64_M1 3165 1.15 1.49 0.99 144 XMHTML_After_End 3076 1.06 1.28 0.96 145 XMBody_95 3057 0.71 0.18 0.96 146 XMSexyCombo_01 3052 1.30 2.04 0.96 147 RELAYCOUNTRY_CA 3014 3.27 8.25 0.94 148 T_FILL_THIS_FORM_SHORT 2986 1.97 4.20 0.94 149 RCVD_IN_RP_SAFE 2979 0.87 0.73 0.93 150 FVGT_m_MULTI_ODD_EMAIL 2950 0.68 0.15 0.92 151 T_XMDrugObfuBody_00 2926 1.09 1.46 0.92 152 TR_XM_SpammyWords2 2919 4.50 12.20 0.92 153 DKIM_ADSP_CUSTOM_MED 2752 0.78 0.62 0.86 154 RCVD_IN_RP_CERTIFIED 2603 0.75 0.60 0.82 155 XM_UB50 2592 1.61 3.32 0.81 156 XMPhish30 2553 0.95 1.27 0.80 157 TooManyTo_005 2527 0.68 0.45 0.79 158 XMSubMetaSxObfu_03 2501 0.78 0.77 0.78 159 HTML_IMAGE_ONLY_20 2494 0.66 0.41 0.78 160 FROM_GOV_DKIM_AU 2452 0.59 0.21 0.77 161 XMGenDplmaNmb 2391 0.95 1.38 0.75 162 TR_MetaPhish_Combo_01 2373 0.84 1.04 0.74 163 HTTPS_HTTP_MISMATCH 2360 1.10 1.89 0.74 164 XM_B_COPY_HTML 2356 0.79 0.89 0.74 165 SpammyFromTLD_01 2240 1.21 2.30 0.70 166 URI_TRY_3LD 2224 0.86 1.20 0.70 167 T_OBFU_PDF_ATTACH 2195 0.51 0.13 0.69 168 HTML_TAG_BALANCE_BODY 2145 0.90 1.39 0.67 169 XMBrknScrpt_02 2125 0.96 1.61 0.67 170 XM_H_PHPMailer 2021 0.65 0.67 0.63 171 XMSubMetaI_00 2010 0.83 1.25 0.63 172 XMSubNoVowel 1992 0.61 0.59 0.62 173 MPART_ALT_DIFF_COUNT 1927 0.80 1.23 0.60 174 XM_RXBody 1905 0.56 0.47 0.60 175 XM_ShortIntro_01 1880 0.56 0.51 0.59 176 XM_B_SpammyWords4 1856 1.06 2.08 0.58 177 XMSubMetaSx_01 1846 0.48 0.26 0.58 178 NML_ADSP_CUSTOM_MED 1824 0.55 0.50 0.57 179 XMSexyCombo_04 1815 0.59 0.65 0.57 180 XMLngstWrd_00 1798 0.62 0.73 0.56 181 T_MANY_PILL_PRICE 1764 0.38 0.00 0.55 182 XMSexyCombo_02 1733 0.47 0.31 0.54 183 TR_XM_Base64_L1 1722 0.58 0.67 0.54 184 RCVD_IN_BL_SPAMCOP_NET 1655 3.35 9.44 0.52 185 TM2_M_BODY_EMPTY 1627 0.38 0.11 0.51 186 XMNoVowels 1586 0.47 0.40 0.50 187 XMPhish14 1568 0.54 0.64 0.49 188 RCVD_IN_MSPIKE_BL 1559 1.71 4.33 0.49 189 TR_XM_MSPIKECOMBO 1558 1.70 4.31 0.49 190 XMHTMLBadTable_001 1553 0.61 0.86 0.49 191 XMLngstWrd_01 1544 0.55 0.70 0.48 192 FORGED_GMAIL_RCVD 1538 0.48 0.48 0.48 193 RELAYCOUNTRY_GB 1508 0.55 0.73 0.47 194 USER_IN_WHITELIST 1508 0.32 0.00 0.47 195 USER_IN_WELCOMELIST 1508 0.32 0.00 0.47 196 TR_XM_PHPDW 1502 0.78 1.44 0.47 197 XM_B_DNDMA 1491 0.61 0.93 0.47 198 XMSubMetaSxObfu_02 1480 0.45 0.43 0.46 199 SHORT_HELO_AND_INLINE_IMAGE 1448 0.33 0.07 0.45 200 MISSING_HEADERS 1441 0.40 0.29 0.45 ----------------------------------------------------------------------