Email: 646596 Autolearn: 0 AvgScore: 0.00 AvgScanTime: 2.14 sec Spam: 98642 Autolearn: 0 AvgScore: 11.78 AvgScanTime: 4.08 sec Ham: 547954 Autolearn: 0 AvgScore: -2.12 AvgScanTime: 1.79 sec Time Spent Running SA: 383.90 hours Time Spent Processing Spam: 111.88 hours Time Spent Processing Ham: 272.02 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 95628 98.03 96.94 98.23 2 HTML_MESSAGE 93658 89.99 94.95 89.10 3 DKIM_SIGNED 73082 73.31 74.09 73.17 4 XM_DK_Pass 70810 71.98 71.78 72.02 5 XM_B_Unicode 68015 70.09 68.95 70.29 6 RELAYCOUNTRY_US 64791 77.56 65.68 79.70 7 DKIM_VALID 57381 65.77 58.17 67.14 8 XMListUnsubscribeExists 55851 50.13 56.62 48.96 9 XM_DK_Undo_02 49977 16.86 50.67 10.78 10 DKIM_VALID_AU 43291 49.16 43.89 50.10 11 BAYES_50 40190 50.74 40.74 52.54 12 XM_B_Unicode3 36193 37.82 36.69 38.02 13 MIME_HTML_ONLY 34189 22.53 34.66 20.34 14 DKIM_VALID_EF 33799 27.40 34.26 26.16 15 BAYES_99 33516 10.96 33.98 6.82 16 XMSubLong 27892 21.31 28.28 20.06 17 BAYES_999 26867 8.71 27.24 5.37 18 LOC_TINY_FONT_1 26431 24.17 26.79 23.70 19 RELAYCOUNTRY_META 26244 8.83 26.61 5.63 20 BOTNET 24233 6.49 24.57 3.24 21 T_KAM_HTML_FONT_INVALID 22115 18.86 22.42 18.22 22 HTML_FONT_LOW_CONTRAST 22074 26.14 22.38 26.82 23 FVGT_m_MULTI_ODD 20280 22.05 20.56 22.32 24 RCVD_IN_MSPIKE_H2 20048 20.73 20.32 20.81 25 T_TM2_M_HEADER_IN_MSG 18480 26.31 18.73 27.68 26 XM_UncommonTLD01 17883 6.32 18.13 4.20 27 UNTRUSTED_Relay 16764 4.80 16.99 2.61 28 XM_Body_Dirty_Words 15775 13.54 15.99 13.09 29 TR_Mismatch_TLD_01 15763 2.97 15.98 0.63 30 DKIM_INVALID 15701 7.53 15.92 6.02 31 LOTS_OF_MONEY 15356 10.08 15.57 9.10 32 BOTNET_IPINHOSTNAME 13066 6.16 13.25 4.89 33 XM_Multi_Part_URI 12612 11.66 12.79 11.46 34 XM_B_Unsub 12542 11.22 12.71 10.95 35 MPART_ALT_DIFF 12334 6.52 12.50 5.44 36 NO_DNS_FOR_FROM 12241 4.85 12.41 3.49 37 MIME_HTML_MOSTLY 11907 4.30 12.07 2.90 38 ALL_TRUSTED 10881 14.90 11.03 15.59 39 T_TooManySym_01 10850 5.53 11.00 4.55 40 XM_B_Phish_Phrases 10562 7.78 10.71 7.26 41 HTML_IMAGE_RATIO_02 10316 7.88 10.46 7.42 42 SpammyFromTLD_01 10270 2.33 10.41 0.87 43 XMSexyCombo_05 9911 5.14 10.05 4.26 44 HTTPS_HTTP_MISMATCH 9163 2.35 9.29 1.10 45 RCVD_IN_MSPIKE_BL 9027 1.88 9.15 0.57 46 RCVD_IN_BL_SPAMCOP_NET 8952 2.52 9.08 1.34 47 T_TooManySym_02 8905 3.46 9.03 2.45 48 T_TooManySym_03 8338 2.16 8.45 1.03 49 XM_CamelCaseFrm001 8334 3.16 8.45 2.20 50 XMSubject_48 8255 1.66 8.37 0.45 51 XM_B_Crypto 8209 1.65 8.32 0.45 52 XMSubject_78 8150 1.67 8.26 0.48 53 BAD_ENC_HEADER 8114 1.60 8.23 0.41 54 BAYES_60 7930 6.81 8.04 6.58 55 DKIM_ADSP_NXDOMAIN 7876 1.43 7.98 0.25 56 URIBL_SBL_A 7603 1.45 7.71 0.32 57 PDS_OTHER_BAD_TLD 7486 1.80 7.59 0.76 58 RELAYCOUNTRY_CA 7126 2.61 7.22 1.78 59 TR_XM_MaxBayes 6956 1.16 7.05 0.10 60 XM_B_COVIDMETA 6790 2.92 6.88 2.21 61 XM_Evil_Numbers_Gen 6718 7.92 6.81 8.12 62 TR_XM_COVIDMETA4 6519 1.89 6.61 1.04 63 BAYES_80 6467 4.58 6.56 4.23 64 PDS_FROM_2_EMAILS 6286 1.05 6.37 0.09 65 PDS_NO_FULL_NAME_SPOOFED_URL 6266 1.02 6.35 0.06 66 PDS_SHORT_SPOOFED_URL 6266 1.02 6.35 0.07 67 TR_XM_PhishingBody 6032 3.68 6.12 3.24 68 LotsOfNums_01 6029 7.76 6.11 8.06 69 XMBody_17 5810 1.68 5.89 0.92 70 RCVD_IN_MSPIKE_L3 5753 1.25 5.83 0.42 71 RCVD_IN_RP_RNBL 5610 0.95 5.69 0.10 72 XM_UB50 5608 2.31 5.69 1.70 73 XM_UB99 5375 0.84 5.45 0.01 74 RELAYCOUNTRY_FR 5360 1.09 5.43 0.31 75 RCVD_IN_MSPIKE_WL 5353 20.37 5.43 23.06 76 XMSubMetaSx_00 5286 4.08 5.36 3.85 77 XM_SPF_SoftFail 5022 2.24 5.09 1.73 78 XM_H_Long_From01 4815 5.33 4.88 5.41 79 T_XMDrugObfuBody_08 4644 2.13 4.71 1.67 80 XMNumbers 4618 3.37 4.68 3.13 81 TooManyTo_001 4450 7.69 4.51 8.27 82 TR_XM_INV_DKIM 4374 0.83 4.43 0.18 83 HTML_IMAGE_RATIO_04 4324 5.23 4.38 5.38 84 XM_B_SpammyTLD 4256 2.29 4.31 1.92 85 XM_UB999 4024 0.63 4.08 0.00 86 BOTNET_NORDNS 4008 0.64 4.06 0.02 87 XM_OfRef6 3840 1.52 3.89 1.09 88 XM_B_Phish66 3840 2.17 3.89 1.86 89 XM_URI_RBL 3762 0.76 3.81 0.21 90 UNPARSEABLE_RELAY 3754 6.75 3.81 7.28 91 XM_DIRTYINTL 3690 1.08 3.74 0.60 92 BAYES_95 3643 2.57 3.69 2.37 93 XMStrtUSub 3448 4.31 3.50 4.45 94 TM2_M_URI_OPT_OUT 3256 3.14 3.30 3.11 95 KHOP_HELO_FCRDNS 3136 2.13 3.18 1.94 96 FROM_EXCESS_BASE64 3078 2.82 3.12 2.76 97 XM_SendGrid 3052 6.04 3.09 6.57 98 T_REMOTE_IMAGE 2887 3.48 2.93 3.58 99 TR_XM_MaxSPIKE 2866 0.45 2.91 0.01 100 RCVD_IN_MSPIKE_H4 2776 10.49 2.81 11.87 101 HTML_MIME_NO_HTML_TAG 2765 2.12 2.80 1.99 102 TR_XM_COVIDMETA1 2744 0.97 2.78 0.65 103 FROM_SUSPICIOUS_NTLD 2636 0.49 2.67 0.10 104 TR_LOTS_OF_MONEY3 2629 0.85 2.67 0.52 105 BAYES_40 2603 4.81 2.64 5.20 106 MIME_QP_LONG_LINE 2585 4.97 2.62 5.39 107 FROM_SUSPICIOUS_NTLD_FP 2564 0.47 2.60 0.09 108 SpammyFromTLD_02 2553 0.66 2.59 0.31 109 RCVD_IN_MSPIKE_H3 2537 9.34 2.57 10.56 110 RCVD_IN_PSBL 2510 0.46 2.54 0.08 111 TR_XM_PHPDW 2500 0.83 2.53 0.53 112 TR_XM_PHPForged 2487 0.82 2.52 0.51 113 T_XMHurry_00 2487 0.98 2.52 0.71 114 T_XMDrugObfuBody_14 2486 1.81 2.52 1.68 115 TR_XM_FormFill2 2482 0.81 2.52 0.51 116 XM_H_PHPOS 2477 0.81 2.51 0.50 117 DIET_1 2434 0.73 2.47 0.42 118 LongTLD 2417 0.55 2.45 0.21 119 HTML_IMAGE_RATIO_06 2367 3.49 2.40 3.69 120 XMSlimDrugH 2352 0.58 2.38 0.25 121 RCVD_IN_MSPIKE_L5 2304 0.44 2.34 0.10 122 XM_B_Unsub2 2274 2.71 2.31 2.78 123 DATE_IN_PAST_03_06 2115 0.42 2.14 0.11 124 SUBJ_ALL_CAPS 2036 1.78 2.06 1.72 125 DATE_IN_PAST_06_12 1990 0.45 2.02 0.17 126 DKIM_ADSP_CUSTOM_MED 1969 1.34 2.00 1.22 127 XMSexyCombo_01 1966 1.47 1.99 1.38 128 XM_UB60 1909 0.38 1.94 0.10 129 BAYES_20 1837 3.58 1.86 3.89 130 XMDiploma_00 1775 1.63 1.80 1.59 131 NML_ADSP_CUSTOM_MED 1718 1.03 1.74 0.90 132 URI_HEX 1706 1.48 1.73 1.43 133 HTML_IMAGE_RATIO_08 1674 2.05 1.70 2.11 134 MAILING_LIST_MULTI 1611 2.09 1.63 2.18 135 TR_XM_RelayPhish 1593 0.41 1.61 0.19 136 RDNS_DYNAMIC 1580 0.50 1.60 0.30 137 URI_WP_DIRINDEX 1537 0.29 1.56 0.06 138 XMStockSpam_06 1522 1.23 1.54 1.17 139 TM2_M_VERY_LONG_WORD 1505 1.23 1.53 1.18 140 TR_Symld_Words 1486 1.49 1.51 1.49 141 XM_UB80 1470 0.25 1.49 0.03 142 MIME_HTML_ONLY_MULTI 1430 2.87 1.45 3.13 143 RELAYCOUNTRY_DE 1411 0.54 1.43 0.37 144 XMHTML_After_End 1402 1.04 1.42 0.97 145 BAYES_00 1386 13.63 1.41 15.83 146 T_XMDrugObfuBody_00 1386 0.82 1.41 0.72 147 URI_WP_HACKED_2 1356 0.27 1.37 0.07 148 T_FILL_THIS_FORM_SHORT 1352 0.89 1.37 0.81 149 XMBrknScrpt_02 1338 0.98 1.36 0.91 150 FORGED_GMAIL_RCVD 1314 0.64 1.33 0.52 151 XMReplyNow 1314 0.31 1.33 0.13 152 URI_TRY_3LD 1288 1.39 1.31 1.40 153 MISSING_HEADERS 1284 1.30 1.30 1.30 154 TR_LOTS_OF_MONEY2 1283 0.47 1.30 0.32 155 T_MONEY_PERCENT 1283 0.47 1.30 0.32 156 XMBody_78 1280 0.57 1.30 0.44 157 RELAYCOUNTRY_GB 1278 1.13 1.30 1.10 158 XM_DK_Undo_01 1267 1.78 1.28 1.87 159 HK_RANDOM_REPLYTO 1226 0.36 1.24 0.20 160 XM_OfRef7 1197 0.30 1.21 0.14 161 TR_XM_DK_SendGrid 1158 3.20 1.17 3.57 162 XMHTMLBadTable_001 1155 0.61 1.17 0.51 163 DATE_IN_PAST_12_24 1137 0.22 1.15 0.05 164 XM_UB95 1122 0.19 1.14 0.02 165 XMGenDplmaNmb 1087 0.97 1.10 0.95 166 BAYES_05 1069 2.32 1.08 2.55 167 T_HTML_TAG_BALANCE_CENTER 1068 0.37 1.08 0.24 168 REMOVE_BEFORE_LINK 1039 0.44 1.05 0.32 169 DEAR_SOMETHING 1037 0.31 1.05 0.18 170 XM_H_PHPMailer 1036 0.65 1.05 0.58 171 URIBL_BLACK 1034 0.19 1.05 0.03 172 XMSubMetaSxObfu_03 1033 0.48 1.05 0.37 173 BODY_URI_ONLY 1028 0.21 1.04 0.05 174 TR_Sbj_FN_Bdy 1018 0.35 1.03 0.23 175 XMBdyGiftCard01 1018 0.96 1.03 0.94 176 XM_PDF 1015 3.72 1.03 4.21 177 REPLYTO_WITHOUT_TO_CC 1007 0.22 1.02 0.07 178 XMSubMetaI_00 1005 0.69 1.02 0.63 179 XM_HighProb1 970 0.16 0.98 0.01 180 FROM_MISSP_REPLYTO 938 0.15 0.95 0.00 181 XM_iOS_Forged_Message 936 0.18 0.95 0.05 182 URG_BIZ 930 0.20 0.94 0.07 183 XM_H_MailChimp 930 0.32 0.94 0.21 184 XMSexyCombo_04 922 0.70 0.93 0.66 185 TR_LOTS_OF_MONEY1 914 0.17 0.93 0.03 186 XM_H_PHPOS_M 905 0.32 0.92 0.21 187 ADMITS_SPAM 896 0.24 0.91 0.12 188 TR_XM_COVIDMETA3 895 0.17 0.91 0.04 189 RELAYCOUNTRY_CN 862 0.20 0.87 0.08 190 TR_Mismatch_TLD_02 860 0.21 0.87 0.09 191 LOW_PRICE 857 0.33 0.87 0.23 192 TO_NO_BRKTS_FROM_MSSP 850 0.15 0.86 0.02 193 RELAYCOUNTRY_IT 843 0.17 0.85 0.05 194 HELO_NODOT 842 1.51 0.85 1.63 195 HELO_NO_DOMAIN 842 1.51 0.85 1.63 196 TVD_RCVD_IP 838 1.88 0.85 2.07 197 XMPhish08 825 0.54 0.84 0.49 198 RELAYCOUNTRY_NG 822 0.13 0.83 0.00 199 TooManyTo_002 807 1.97 0.82 2.18 200 RELAYCOUNTRY_IN 806 0.23 0.82 0.12 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 538229 98.03 96.94 98.23 2 HTML_MESSAGE 488224 89.99 94.95 89.10 3 RELAYCOUNTRY_US 436716 77.56 65.68 79.70 4 DKIM_SIGNED 400921 73.31 74.09 73.17 5 XM_DK_Pass 394630 71.98 71.78 72.02 6 XM_B_Unicode 385161 70.09 68.95 70.29 7 DKIM_VALID 367915 65.77 58.17 67.14 8 BAYES_50 287890 50.74 40.74 52.54 9 DKIM_VALID_AU 274545 49.16 43.89 50.10 10 XMListUnsubscribeExists 268287 50.13 56.62 48.96 11 XM_B_Unicode3 208345 37.82 36.69 38.02 12 T_TM2_M_HEADER_IN_MSG 151653 26.31 18.73 27.68 13 HTML_FONT_LOW_CONTRAST 146961 26.14 22.38 26.82 14 DKIM_VALID_EF 143362 27.40 34.26 26.16 15 LOC_TINY_FONT_1 129840 24.17 26.79 23.70 16 RCVD_IN_MSPIKE_WL 126333 20.37 5.43 23.06 17 FVGT_m_MULTI_ODD 122280 22.05 20.56 22.32 18 RCVD_IN_MSPIKE_H2 114022 20.73 20.32 20.81 19 MIME_HTML_ONLY 111477 22.53 34.66 20.34 20 XMSubLong 109910 21.31 28.28 20.06 21 T_KAM_HTML_FONT_INVALID 99837 18.86 22.42 18.22 22 BAYES_00 86742 13.63 1.41 15.83 23 ALL_TRUSTED 85453 14.90 11.03 15.59 24 XM_Body_Dirty_Words 71746 13.54 15.99 13.09 25 RCVD_IN_MSPIKE_H4 65063 10.49 2.81 11.87 26 XM_Multi_Part_URI 62775 11.66 12.79 11.46 27 XM_B_Unsub 60013 11.22 12.71 10.95 28 XM_DK_Undo_02 59062 16.86 50.67 10.78 29 RCVD_IN_MSPIKE_H3 57859 9.34 2.57 10.56 30 TR_XM_DK_Bayes 54476 8.51 0.57 9.94 31 TR_XM_DK_Bayes1 49856 7.75 0.28 9.10 32 LOTS_OF_MONEY 49849 10.08 15.57 9.10 33 TooManyTo_001 45299 7.69 4.51 8.27 34 XM_Evil_Numbers_Gen 44476 7.92 6.81 8.12 35 LotsOfNums_01 44150 7.76 6.11 8.06 36 TR_XM_DK_Bayes2 43786 6.81 0.25 7.99 37 HTML_IMAGE_RATIO_02 40633 7.88 10.46 7.42 38 UNPARSEABLE_RELAY 39871 6.75 3.81 7.28 39 XM_B_Phish_Phrases 39772 7.78 10.71 7.26 40 RCVD_IN_RP_SAFE 38766 6.10 0.67 7.07 41 BAYES_99 37353 10.96 33.98 6.82 42 XM_DKIMWhitelistDomains 37030 5.73 0.01 6.76 43 RCVD_IN_RP_CERTIFIED 36296 5.67 0.35 6.62 44 BAYES_60 36075 6.81 8.04 6.58 45 XM_SendGrid 36006 6.04 3.09 6.57 46 IN_ZIMBRA_NJ_WHITELIST 34162 5.29 0.03 6.23 47 DKIM_INVALID 33006 7.53 15.92 6.02 48 RELAYCOUNTRY_META 30864 8.83 26.61 5.63 49 MPART_ALT_DIFF 29827 6.52 12.50 5.44 50 XM_H_Long_From01 29633 5.33 4.88 5.41 51 MIME_QP_LONG_LINE 29538 4.97 2.62 5.39 52 HTML_IMAGE_RATIO_04 29482 5.23 4.38 5.38 53 BAYES_999 29446 8.71 27.24 5.37 54 BAYES_40 28480 4.81 2.64 5.20 55 BOTNET_IPINHOSTNAME 26774 6.16 13.25 4.89 56 RCVD_IN_IADB_LISTED 26663 4.22 0.62 4.87 57 T_TooManySym_01 24920 5.53 11.00 4.55 58 XMStrtUSub 24399 4.31 3.50 4.45 59 XMSexyCombo_05 23333 5.14 10.05 4.26 60 BAYES_80 23171 4.58 6.56 4.23 61 XM_PDF 23060 3.72 1.03 4.21 62 RCVD_IN_IADB_SPF 23019 3.65 0.56 4.20 63 XM_UncommonTLD01 23008 6.32 18.13 4.20 64 BAYES_20 21292 3.58 1.86 3.89 65 XMSubMetaSx_00 21108 4.08 5.36 3.85 66 HTML_IMAGE_RATIO_06 20197 3.49 2.40 3.69 67 RCVD_IN_IADB_SENDERID 20189 3.21 0.54 3.68 68 RCVD_IN_IADB_DK 19919 3.16 0.54 3.64 69 T_REMOTE_IMAGE 19631 3.48 2.93 3.58 70 TR_XM_DK_SendGrid 19549 3.20 1.17 3.57 71 NO_DNS_FOR_FROM 19097 4.85 12.41 3.49 72 TR_XM_PhishingBody 17759 3.68 6.12 3.24 73 BOTNET 17728 6.49 24.57 3.24 74 XMNumbers 17178 3.37 4.68 3.13 75 MIME_HTML_ONLY_MULTI 17141 2.87 1.45 3.13 76 RCVD_IN_IADB_VOUCHED 17118 2.68 0.21 3.12 77 TM2_M_URI_OPT_OUT 17039 3.14 3.30 3.11 78 XM_H_Trusted_IP 15937 2.46 0.00 2.91 79 MIME_HTML_MOSTLY 15889 4.30 12.07 2.90 80 ANY_BOUNCE_MESSAGE 15399 2.49 0.71 2.81 81 BOUNCE_MESSAGE 15396 2.49 0.70 2.81 82 XM_B_Unsub2 15254 2.71 2.31 2.78 83 FROM_EXCESS_BASE64 15146 2.82 3.12 2.76 84 UNTRUSTED_Relay 14293 4.80 16.99 2.61 85 BAYES_05 13955 2.32 1.08 2.55 86 T_TooManySym_02 13438 3.46 9.03 2.45 87 BAYES_95 12992 2.57 3.69 2.37 88 XM_B_COVIDMETA 12119 2.92 6.88 2.21 89 XM_CamelCaseFrm001 12068 3.16 8.45 2.20 90 MAILING_LIST_MULTI 11923 2.09 1.63 2.18 91 TooManyTo_002 11919 1.97 0.82 2.18 92 HTML_IMAGE_RATIO_08 11567 2.05 1.70 2.11 93 TVD_RCVD_IP 11333 1.88 0.85 2.07 94 RCVD_IN_IADB_OPTIN 11007 1.73 0.20 2.01 95 HTML_MIME_NO_HTML_TAG 10928 2.12 2.80 1.99 96 KHOP_HELO_FCRDNS 10622 2.13 3.18 1.94 97 XM_B_SpammyTLD 10538 2.29 4.31 1.92 98 XM_DK_Undo_01 10254 1.78 1.28 1.87 99 HTML_FONT_FACE_BAD 10210 1.68 0.65 1.86 100 XM_B_Phish66 10208 2.17 3.89 1.86 101 RELAYCOUNTRY_CA 9727 2.61 7.22 1.78 102 XM_SPF_SoftFail 9479 2.24 5.09 1.73 103 SUBJ_ALL_CAPS 9445 1.78 2.06 1.72 104 XM_UB50 9305 2.31 5.69 1.70 105 T_XMDrugObfuBody_14 9216 1.81 2.52 1.68 106 T_XMDrugObfuBody_08 9138 2.13 4.71 1.67 107 HELO_NODOT 8951 1.51 0.85 1.63 108 HELO_NO_DOMAIN 8949 1.51 0.85 1.63 109 XMDiploma_00 8735 1.63 1.80 1.59 110 HELO_MISC_IP 8194 1.30 0.19 1.50 111 CK_HELO_DYNAMIC_SPLIT_IP 8194 1.31 0.25 1.50 112 TR_Symld_Words 8158 1.49 1.51 1.49 113 TooManyTo_003 8056 1.35 0.66 1.47 114 URI_HEX 7856 1.48 1.73 1.43 115 URI_TRY_3LD 7674 1.39 1.31 1.40 116 INVALID_MSGID 7561 1.20 0.19 1.38 117 XMSexyCombo_01 7545 1.47 1.99 1.38 118 IN_HORDE_ADDRESS_BOOK 7487 1.17 0.05 1.37 119 RCVD_IN_BL_SPAMCOP_NET 7326 2.52 9.08 1.34 120 MISSING_HEADERS 7128 1.30 1.30 1.30 121 TO_MALFORMED 6943 1.09 0.09 1.27 122 XMCapTrack 6807 1.14 0.59 1.24 123 DKIM_ADSP_CUSTOM_MED 6670 1.34 2.00 1.22 124 XM_GoogleGroups 6655 1.11 0.50 1.21 125 TM2_M_VERY_LONG_WORD 6468 1.23 1.53 1.18 126 XMStockSpam_06 6404 1.23 1.54 1.17 127 USER_IN_DEF_DKIM_WL 6345 0.98 0.00 1.16 128 XM_H_Long_From02 6231 1.06 0.61 1.14 129 TooManyTo_004 6153 1.04 0.56 1.12 130 HTTPS_HTTP_MISMATCH 6029 2.35 9.29 1.10 131 RELAYCOUNTRY_GB 6019 1.13 1.30 1.10 132 XM_OfRef6 5964 1.52 3.89 1.09 133 TR_XM_COVIDMETA4 5713 1.89 6.61 1.04 134 T_TooManySym_03 5617 2.16 8.45 1.03 135 XMSubNoVowel 5509 0.97 0.75 1.01 136 XMHTML_After_End 5334 1.04 1.42 0.97 137 XMGenDplmaNmb 5181 0.97 1.10 0.95 138 XMBdyGiftCard01 5170 0.96 1.03 0.94 139 TooManyTo_005 5129 0.86 0.45 0.94 140 XMBody_17 5039 1.68 5.89 0.92 141 XMBrknScrpt_02 4994 0.98 1.36 0.91 142 NML_ADSP_CUSTOM_MED 4933 1.03 1.74 0.90 143 TR_MetaPhish_Combo_01 4857 0.86 0.73 0.89 144 SpammyFromTLD_01 4787 2.33 10.41 0.87 145 PLING_QUERY 4622 0.79 0.47 0.84 146 T_FILL_THIS_FORM_SHORT 4433 0.89 1.37 0.81 147 PDS_OTHER_BAD_TLD 4181 1.80 7.59 0.76 148 XM_ProductURIs 4142 0.75 0.69 0.76 149 XMGappySubj_01 4132 0.66 0.12 0.75 150 T_XMDrugObfuBody_00 3926 0.82 1.41 0.72 151 T_XMHurry_00 3878 0.98 2.52 0.71 152 TR_MSPIKEBAYES00 3648 0.57 0.01 0.67 153 XMSexyCombo_04 3634 0.70 0.93 0.66 154 TR_XM_COVIDMETA1 3550 0.97 2.78 0.65 155 T_Symld_Words_02 3535 0.65 0.65 0.65 156 XM_E_Blogspot 3484 0.55 0.10 0.64 157 XMSubMetaI_00 3478 0.69 1.02 0.63 158 TR_Mismatch_TLD_01 3469 2.97 15.98 0.63 159 T_OBFU_PDF_ATTACH 3467 0.56 0.15 0.63 160 RCVD_IN_MSPIKE_H5 3411 0.53 0.04 0.62 161 XM_SPF_Unknown 3350 0.60 0.55 0.61 162 XM_DIRTYINTL 3304 1.08 3.74 0.60 163 XMNoVowels 3184 0.57 0.49 0.58 164 XM_ShortIntro_01 3183 0.54 0.33 0.58 165 XM_H_PHPMailer 3175 0.65 1.05 0.58 166 XMMoneyMeta_00 3169 0.59 0.67 0.58 167 RCVD_IN_MSPIKE_BL 3128 1.88 9.15 0.57 168 XM_RXBody 3103 0.52 0.29 0.57 169 RCVD_IN_SORBS_DUL 2880 0.49 0.27 0.53 170 TR_XM_PHPDW 2879 0.83 2.53 0.53 171 TR_LOTS_OF_MONEY3 2854 0.85 2.67 0.52 172 FORGED_GMAIL_RCVD 2823 0.64 1.33 0.52 173 XMPhish30 2814 0.54 0.68 0.51 174 TR_XM_PHPForged 2800 0.82 2.52 0.51 175 XMHTMLBadTable_001 2788 0.61 1.17 0.51 176 HTML_IMAGE_ONLY_20 2788 0.50 0.44 0.51 177 TR_XM_FormFill2 2783 0.81 2.52 0.51 178 XM_H_PHPOS 2756 0.81 2.51 0.50 179 XMPhish08 2685 0.54 0.84 0.49 180 HTML_IMAGE_ONLY_32 2682 0.44 0.16 0.49 181 TVD_SPACE_RATIO 2636 0.44 0.20 0.48 182 XMSubject_78 2626 1.67 8.26 0.48 183 XM_B_REG_HTML 2542 0.43 0.23 0.46 184 TM2_M_BODY_EMPTY 2502 0.42 0.19 0.46 185 RELAYCOUNTRY_AU 2486 0.46 0.53 0.45 186 XM_B_Crypto 2477 1.65 8.32 0.45 187 FROM_GOV_SPOOF 2459 0.43 0.30 0.45 188 XMSubject_48 2459 1.66 8.37 0.45 189 THIS_AD 2447 0.44 0.40 0.45 190 HTML_TAG_BALANCE_BODY 2445 0.46 0.53 0.45 191 MPART_ALT_DIFF_COUNT 2401 0.46 0.61 0.44 192 XMBody_78 2385 0.57 1.30 0.44 193 FROM_GOV_DKIM_AU 2333 0.38 0.12 0.43 194 DIET_1 2311 0.73 2.47 0.42 195 RCVD_IN_MSPIKE_L3 2308 1.25 5.83 0.42 196 SHORT_HELO_AND_INLINE_IMAGE 2269 0.37 0.10 0.41 197 HTML_IMAGE_ONLY_28 2263 0.40 0.31 0.41 198 BAD_ENC_HEADER 2260 1.60 8.23 0.41 199 TM2_M_A_HREF_HREF 2226 0.46 0.78 0.41 200 XM_Body_Obfu01 2182 0.44 0.68 0.40 ----------------------------------------------------------------------