Email: 366974 Autolearn: 0 AvgScore: 0.28 AvgScanTime: 2.27 sec Spam: 61764 Autolearn: 0 AvgScore: 12.25 AvgScanTime: 4.11 sec Ham: 305210 Autolearn: 0 AvgScore: -2.14 AvgScanTime: 1.90 sec Time Spent Running SA: 231.83 hours Time Spent Processing Spam: 70.57 hours Time Spent Processing Ham: 161.25 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 60392 98.75 97.78 98.95 2 HTML_MESSAGE 56163 87.67 90.93 87.01 3 DKIM_SIGNED 48593 80.41 78.68 80.76 4 XM_DK_Pass 47456 79.22 76.83 79.70 5 XM_B_Unicode 44042 72.68 71.31 72.96 6 XMListUnsubscribeExists 43002 61.16 69.62 59.45 7 RELAYCOUNTRY_US 42372 80.41 68.60 82.79 8 DKIM_VALID 39598 73.47 64.11 75.37 9 XM_DK_Undo_02 36317 21.81 58.80 14.33 10 DKIM_VALID_AU 28527 57.55 46.19 59.85 11 BAYES_99 26318 15.56 42.61 10.08 12 XM_B_Unicode3 22870 43.41 37.03 44.70 13 MIME_HTML_ONLY 22822 26.20 36.95 24.02 14 BAYES_999 22197 12.68 35.94 7.98 15 BAYES_50 20729 48.79 33.56 51.87 16 RELAYCOUNTRY_META 20187 9.70 32.68 5.05 17 BOTNET 19938 8.26 32.28 3.40 18 DKIM_VALID_EF 19364 27.57 31.35 26.81 19 LOC_TINY_FONT_1 18860 31.01 30.54 31.10 20 T_KAM_HTML_FONT_INVALID 15521 19.17 25.13 17.96 21 HTML_FONT_LOW_CONTRAST 15051 31.27 24.37 32.67 22 FVGT_m_MULTI_ODD 14882 24.03 24.09 24.01 23 RCVD_IN_MSPIKE_H2 14440 24.93 23.38 25.24 24 XM_UncommonTLD01 13708 6.90 22.19 3.80 25 UNTRUSTED_Relay 13461 5.27 21.79 1.93 26 XMSubLong 12750 21.98 20.64 22.26 27 T_TM2_M_HEADER_IN_MSG 12205 21.25 19.76 21.55 28 BOTNET_IPINHOSTNAME 11458 8.45 18.55 6.41 29 XM_Body_Dirty_Words 11411 15.76 18.48 15.21 30 LOTS_OF_MONEY 9308 9.91 15.07 8.86 31 XM_Multi_Part_URI 9240 15.02 14.96 15.03 32 DKIM_INVALID 8995 6.93 14.56 5.39 33 HTML_IMAGE_RATIO_02 8505 10.70 13.77 10.08 34 XMSexyCombo_05 7905 6.86 12.80 5.66 35 RCVD_IN_MSPIKE_BL 7803 2.64 12.63 0.62 36 RCVD_IN_RP_RNBL 7615 2.18 12.33 0.13 37 XM_B_Unsub 7265 10.88 11.76 10.71 38 NO_DNS_FOR_FROM 7159 4.55 11.59 3.13 39 RELAYCOUNTRY_CA 6267 3.40 10.15 2.03 40 XM_UB50 6047 2.58 9.79 1.11 41 XM_CamelCaseFrm001 5935 3.84 9.61 2.67 42 URIBL_SBL_A 5424 1.69 8.78 0.25 43 XMSubMetaSx_00 5401 5.03 8.74 4.28 44 XM_B_Phish_Phrases 5399 8.51 8.74 8.46 45 RCVD_IN_BL_SPAMCOP_NET 5348 2.64 8.66 1.42 46 XM_Evil_Numbers_Gen 5243 10.13 8.49 10.47 47 RCVD_IN_MSPIKE_L3 5134 1.76 8.31 0.43 48 TR_XM_MaxBayes 4910 1.39 7.95 0.06 49 LotsOfNums_01 4840 9.03 7.84 9.27 50 SpammyFromTLD_01 4725 1.80 7.65 0.62 51 BAYES_60 4342 6.79 7.03 6.74 52 BOTNET_NORDNS 4224 1.18 6.84 0.04 53 BAYES_80 4133 5.04 6.69 4.70 54 XM_H_Long_From01 3855 5.89 6.24 5.82 55 XM_SPF_SoftFail 3710 2.05 6.01 1.24 56 XM_DIRTYINTL 3604 1.54 5.84 0.68 57 RCVD_IN_MSPIKE_WL 3589 20.59 5.81 23.59 58 T_XMDrugObfuBody_08 3354 2.77 5.43 2.23 59 FROM_EXCESS_BASE64 3301 4.49 5.34 4.31 60 RELAYCOUNTRY_FR 3231 1.11 5.23 0.28 61 XM_OfRef6 3229 1.99 5.23 1.34 62 RCVD_IN_PSBL 3133 0.94 5.07 0.11 63 MPART_ALT_DIFF 3079 5.59 4.99 5.71 64 TR_XM_INV_DKIM 3015 1.03 4.88 0.25 65 TR_XM_PhishingBody 2958 3.29 4.79 2.98 66 MIME_HTML_MOSTLY 2913 3.22 4.72 2.92 67 HTML_IMAGE_RATIO_04 2859 6.39 4.63 6.75 68 XM_UB99 2766 0.76 4.48 0.01 69 TR_XM_MaxSPIKE 2734 0.77 4.43 0.03 70 TooManyTo_001 2712 6.44 4.39 6.85 71 XMBody_17 2686 1.56 4.35 0.99 72 TR_XM_COVIDMETA4 2679 1.45 4.34 0.87 73 XM_B_SpammyTLD 2667 2.68 4.32 2.35 74 UNPARSEABLE_RELAY 2642 8.51 4.28 9.36 75 XMNumbers 2558 3.60 4.14 3.49 76 XM_B_COVIDMETA 2542 2.43 4.12 2.09 77 XMStrtUSub 2477 4.71 4.01 4.85 78 BAYES_95 2348 3.16 3.80 3.02 79 RCVD_IN_MSPIKE_H3 2323 12.36 3.76 14.10 80 XM_UB999 2265 0.62 3.67 0.00 81 T_TooManySym_01 2197 5.74 3.56 6.19 82 T_REMOTE_IMAGE 2093 3.54 3.39 3.57 83 TR_Mismatch_TLD_01 2041 0.80 3.30 0.30 84 XMSlimDrugH 2040 0.86 3.30 0.37 85 XM_SendGrid 2036 7.62 3.30 8.50 86 SpammyFromTLD_02 2000 0.75 3.24 0.24 87 RCVD_IN_MSPIKE_L5 1959 0.65 3.17 0.14 88 XM_OfRef7 1911 0.75 3.09 0.28 89 KHOP_HELO_FCRDNS 1902 1.50 3.08 1.18 90 XMHTML_After_End 1891 1.27 3.06 0.91 91 HTML_IMAGE_RATIO_06 1857 3.74 3.01 3.89 92 TR_XM_PHPDW 1800 0.90 2.91 0.50 93 SUBJ_ALL_CAPS 1790 1.71 2.90 1.47 94 TR_XM_PHPForged 1738 0.86 2.81 0.47 95 TR_XM_FormFill2 1724 0.86 2.79 0.46 96 XM_H_PHPOS 1720 0.85 2.78 0.46 97 XMSubNoVowel 1716 1.10 2.78 0.76 98 XM_B_Phish66 1656 1.59 2.68 1.37 99 T_XMHurry_00 1634 1.07 2.65 0.75 100 URI_PHP_REDIR 1624 0.52 2.63 0.09 101 XM_UB60 1590 0.53 2.57 0.12 102 TM2_M_URI_OPT_OUT 1560 3.98 2.53 4.28 103 BAYES_40 1542 4.00 2.50 4.30 104 XM_URI_RBL 1523 0.61 2.47 0.23 105 XMSexyCombo_01 1437 1.19 2.33 0.96 106 DATE_IN_PAST_06_12 1414 0.68 2.29 0.36 107 DATE_IN_PAST_03_06 1410 0.53 2.28 0.17 108 XM_RXBody 1402 1.97 2.27 1.91 109 MIME_QP_LONG_LINE 1397 4.46 2.26 4.91 110 XMSubEmpty 1396 0.55 2.26 0.21 111 TR_LOTS_OF_MONEY3 1388 0.85 2.25 0.57 112 HTML_IMAGE_ONLY_16 1339 0.62 2.17 0.30 113 T_PDS_OTHER_BAD_TLD 1311 1.04 2.12 0.83 114 HK_RANDOM_REPLYTO 1307 0.53 2.12 0.21 115 FROM_SUSPICIOUS_NTLD 1301 0.44 2.11 0.11 116 TR_XM_RelayPhish 1279 0.48 2.07 0.16 117 LongTLD 1279 0.49 2.07 0.17 118 RCVD_IN_RP_SAFE 1253 9.76 2.03 11.33 119 XM_UB80 1245 0.37 2.02 0.04 120 BODY_URI_ONLY 1242 0.39 2.01 0.06 121 TR_Mismatch_TLD_02 1232 0.41 1.99 0.09 122 RCVD_IN_MSPIKE_H4 1224 7.42 1.98 8.53 123 T_XMDrugObfuBody_14 1220 1.48 1.98 1.38 124 FROM_SUSPICIOUS_NTLD_FP 1184 0.41 1.92 0.10 125 HTML_IMAGE_RATIO_08 1181 2.47 1.91 2.58 126 HTML_TITLE_SUBJ_DIFF 1166 0.38 1.89 0.08 127 MIME_HTML_ONLY_MULTI 1164 3.14 1.88 3.39 128 BAYES_20 1161 3.00 1.88 3.22 129 RELAYCOUNTRY_KR 1150 0.33 1.86 0.02 130 T_TooManySym_02 1123 2.62 1.82 2.78 131 T_FILL_THIS_FORM_SHORT 1109 0.82 1.80 0.62 132 FILL_THIS_FORM 1101 0.57 1.78 0.32 133 XMBdyGiftCard01 1073 1.73 1.74 1.73 134 XM_B_Unsub2 1066 1.44 1.73 1.38 135 URI_NO_WWW_INFO_CGI 1065 0.32 1.72 0.03 136 T_Symld_Words_02 1062 0.85 1.72 0.68 137 TR_XM_COVIDMETA1 1059 0.77 1.71 0.58 138 RELAYCOUNTRY_NL 1049 0.51 1.70 0.27 139 XMBrknScrpt_02 1022 1.19 1.65 1.09 140 T_MONEY_PERCENT 1002 0.46 1.62 0.22 141 TR_LOTS_OF_MONEY2 1002 0.46 1.62 0.22 142 XMDiploma_00 972 1.45 1.57 1.43 143 HTML_SHORT_LINK_IMG_2 963 0.32 1.56 0.07 144 XM_SPF_Unknown 956 0.63 1.55 0.44 145 URI_TRY_3LD 921 1.77 1.49 1.82 146 HTML_MIME_NO_HTML_TAG 917 1.65 1.48 1.69 147 RELAYCOUNTRY_NG 897 0.24 1.45 0.00 148 RELAYCOUNTRY_DE 890 0.60 1.44 0.43 149 TM2_M_VERY_LONG_WORD 880 1.61 1.42 1.65 150 DKIM_ADSP_CUSTOM_MED 873 1.10 1.41 1.04 151 MAILING_LIST_MULTI 868 1.85 1.41 1.94 152 XMSubMetaSxObfu_03 867 0.57 1.40 0.41 153 URI_HEX 862 1.63 1.40 1.67 154 T_TooManySym_03 835 0.92 1.35 0.83 155 RELAYCOUNTRY_GB 832 0.80 1.35 0.69 156 MPART_ALT_DIFF_COUNT 830 0.78 1.34 0.67 157 XM_H_PHPMailer 821 0.70 1.33 0.57 158 XMMoneyMeta_00 818 0.43 1.32 0.25 159 XMStockSpam_06 816 1.82 1.32 1.92 160 DKIM_ADSP_NXDOMAIN 806 0.59 1.30 0.44 161 MISSING_HEADERS 777 0.44 1.26 0.27 162 XMSubMetaI_00 769 1.01 1.25 0.97 163 NML_ADSP_CUSTOM_MED 766 0.82 1.24 0.73 164 XM_ProductURIs 766 1.33 1.24 1.35 165 CTYPE_NULL 746 0.21 1.21 0.01 166 ALL_TRUSTED 730 11.12 1.18 13.13 167 RCVD_IN_RP_CERTIFIED 721 9.08 1.17 10.69 168 T_XMDrugObfuBody_00 711 0.86 1.15 0.80 169 XMSexyCombo_04 710 0.36 1.15 0.19 170 URIBL_BLACK 709 0.21 1.15 0.02 171 RELAYCOUNTRY_AT 708 0.38 1.15 0.23 172 REPLYTO_WITHOUT_TO_CC 705 0.25 1.14 0.07 173 DATE_IN_PAST_12_24 689 0.29 1.12 0.12 174 DIET_1 683 0.56 1.11 0.45 175 FORGED_GMAIL_RCVD 681 0.64 1.10 0.55 176 ADVANCE_FEE_2_NEW_MONEY 677 0.19 1.10 0.01 177 XM_H_PHPOS_M 665 0.39 1.08 0.25 178 BAYES_05 649 2.13 1.05 2.35 179 XMReplyNow 645 0.26 1.04 0.10 180 RCVD_IN_MSPIKE_L4 642 0.21 1.04 0.04 181 RELAYCOUNTRY_CN 639 0.21 1.03 0.04 182 RDNS_DYNAMIC 636 0.58 1.03 0.49 183 XM_UB95 633 0.20 1.02 0.03 184 XM_DK_Undo_01 624 1.41 1.01 1.49 185 TR_XM_COVIDMETA3 622 0.19 1.01 0.02 186 MSGID_FROM_MTA_HEADER 619 0.31 1.00 0.17 187 TR_Symld_Words 611 1.27 0.99 1.33 188 XMSolicitRefs_0 611 0.43 0.99 0.31 189 XMURI4U 597 0.17 0.97 0.01 190 MONEY_FRAUD_3 596 0.17 0.96 0.00 191 SCRIPT_GIBBERISH 588 0.17 0.95 0.01 192 XMNoVowels 584 0.48 0.95 0.39 193 XMBody_78 576 0.69 0.93 0.64 194 RELAYCOUNTRY_RU 571 0.18 0.92 0.03 195 INVESTMENT_ADVICE 548 0.24 0.89 0.11 196 XM_XX_Yahoo 543 0.20 0.88 0.07 197 HTTPS_HTTP_MISMATCH 539 0.51 0.87 0.43 198 TR_XM_FormFill 533 0.18 0.86 0.04 199 HK_SCAM 532 0.18 0.86 0.05 200 XMPhish30 523 0.67 0.85 0.63 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 302003 98.75 97.78 98.95 2 HTML_MESSAGE 265548 87.67 90.93 87.01 3 RELAYCOUNTRY_US 252698 80.41 68.60 82.79 4 DKIM_SIGNED 246473 80.41 78.68 80.76 5 XM_DK_Pass 243261 79.22 76.83 79.70 6 DKIM_VALID 230027 73.47 64.11 75.37 7 XM_B_Unicode 222674 72.68 71.31 72.96 8 DKIM_VALID_AU 182680 57.55 46.19 59.85 9 XMListUnsubscribeExists 181450 61.16 69.62 59.45 10 BAYES_50 158302 48.79 33.56 51.87 11 XM_B_Unicode3 136424 43.41 37.03 44.70 12 HTML_FONT_LOW_CONTRAST 99697 31.27 24.37 32.67 13 LOC_TINY_FONT_1 94929 31.01 30.54 31.10 14 DKIM_VALID_EF 81818 27.57 31.35 26.81 15 RCVD_IN_MSPIKE_H2 77047 24.93 23.38 25.24 16 MIME_HTML_ONLY 73319 26.20 36.95 24.02 17 FVGT_m_MULTI_ODD 73291 24.03 24.09 24.01 18 RCVD_IN_MSPIKE_WL 71989 20.59 5.81 23.59 19 XMSubLong 67929 21.98 20.64 22.26 20 T_TM2_M_HEADER_IN_MSG 65778 21.25 19.76 21.55 21 T_KAM_HTML_FONT_INVALID 54828 19.17 25.13 17.96 22 XM_Body_Dirty_Words 46429 15.76 18.48 15.21 23 XM_Multi_Part_URI 45864 15.02 14.96 15.03 24 XM_DK_Undo_02 43730 21.81 58.80 14.33 25 RCVD_IN_MSPIKE_H3 43032 12.36 3.76 14.10 26 BAYES_00 41858 11.54 0.81 13.71 27 ALL_TRUSTED 40063 11.12 1.18 13.13 28 RCVD_IN_RP_SAFE 34566 9.76 2.03 11.33 29 XM_B_Unsub 32673 10.88 11.76 10.71 30 RCVD_IN_RP_CERTIFIED 32614 9.08 1.17 10.69 31 XM_Evil_Numbers_Gen 31941 10.13 8.49 10.47 32 BAYES_99 30773 15.56 42.61 10.08 33 HTML_IMAGE_RATIO_02 30756 10.70 13.77 10.08 34 XM_DKIMWhitelistDomains 30355 8.27 0.01 9.95 35 UNPARSEABLE_RELAY 28581 8.51 4.28 9.36 36 LotsOfNums_01 28297 9.03 7.84 9.27 37 TR_XM_DK_Bayes 28293 7.79 0.45 9.27 38 LOTS_OF_MONEY 27046 9.91 15.07 8.86 39 TR_XM_DK_Bayes1 26316 7.22 0.28 8.62 40 RCVD_IN_MSPIKE_H4 26022 7.42 1.98 8.53 41 XM_SendGrid 25935 7.62 3.30 8.50 42 XM_B_Phish_Phrases 25818 8.51 8.74 8.46 43 BAYES_999 24346 12.68 35.94 7.98 44 TR_XM_DK_Bayes2 23750 6.50 0.16 7.78 45 TooManyTo_001 20914 6.44 4.39 6.85 46 HTML_IMAGE_RATIO_04 20596 6.39 4.63 6.75 47 BAYES_60 20561 6.79 7.03 6.74 48 BOTNET_IPINHOSTNAME 19559 8.45 18.55 6.41 49 T_TooManySym_01 18879 5.74 3.56 6.19 50 XM_H_Long_From01 17758 5.89 6.24 5.82 51 MPART_ALT_DIFF 17432 5.59 4.99 5.71 52 XMSexyCombo_05 17268 6.86 12.80 5.66 53 DKIM_INVALID 16446 6.93 14.56 5.39 54 RELAYCOUNTRY_META 15402 9.70 32.68 5.05 55 MIME_QP_LONG_LINE 14988 4.46 2.26 4.91 56 TR_XM_DK_SendGrid 14939 4.20 0.79 4.89 57 XMStrtUSub 14807 4.71 4.01 4.85 58 IN_ZIMBRA_NJ_WHITELIST 14419 3.93 0.02 4.72 59 BAYES_80 14353 5.04 6.69 4.70 60 FROM_EXCESS_BASE64 13162 4.49 5.34 4.31 61 BAYES_40 13123 4.00 2.50 4.30 62 XMSubMetaSx_00 13073 5.03 8.74 4.28 63 TM2_M_URI_OPT_OUT 13053 3.98 2.53 4.28 64 RCVD_IN_IADB_LISTED 11961 3.40 0.82 3.92 65 HTML_IMAGE_RATIO_06 11863 3.74 3.01 3.89 66 XM_UncommonTLD01 11599 6.90 22.19 3.80 67 T_REMOTE_IMAGE 10905 3.54 3.39 3.57 68 ANY_BOUNCE_MESSAGE 10759 2.98 0.27 3.53 69 BOUNCE_MESSAGE 10743 2.97 0.27 3.52 70 XMNumbers 10649 3.60 4.14 3.49 71 RCVD_IN_IADB_SPF 10488 2.98 0.75 3.44 72 BOTNET 10373 8.26 32.28 3.40 73 MIME_HTML_ONLY_MULTI 10342 3.14 1.88 3.39 74 BAYES_20 9843 3.00 1.88 3.22 75 NO_DNS_FOR_FROM 9544 4.55 11.59 3.13 76 RCVD_IN_IADB_SENDERID 9505 2.71 0.74 3.11 77 RCVD_IN_IADB_DK 9236 2.64 0.74 3.03 78 BAYES_95 9232 3.16 3.80 3.02 79 TR_XM_PhishingBody 9110 3.29 4.79 2.98 80 MIME_HTML_MOSTLY 8909 3.22 4.72 2.92 81 T_TooManySym_02 8485 2.62 1.82 2.78 82 XM_CamelCaseFrm001 8139 3.84 9.61 2.67 83 HTML_IMAGE_RATIO_08 7868 2.47 1.91 2.58 84 TVD_RCVD_IP 7751 2.20 0.54 2.54 85 INVALID_MSGID 7303 2.00 0.08 2.39 86 XM_B_SpammyTLD 7173 2.68 4.32 2.35 87 BAYES_05 7163 2.13 1.05 2.35 88 RCVD_IN_IADB_VOUCHED 6958 1.93 0.18 2.28 89 T_XMDrugObfuBody_08 6805 2.77 5.43 2.23 90 XM_H_Trusted_IP 6533 1.78 0.00 2.14 91 TO_MALFORMED 6490 1.78 0.06 2.13 92 XM_B_COVIDMETA 6390 2.43 4.12 2.09 93 RELAYCOUNTRY_CA 6196 3.40 10.15 2.03 94 MAILING_LIST_MULTI 5910 1.85 1.41 1.94 95 UNTRUSTED_Relay 5876 5.27 21.79 1.93 96 XMStockSpam_06 5858 1.82 1.32 1.92 97 XM_RXBody 5825 1.97 2.27 1.91 98 URI_TRY_3LD 5560 1.77 1.49 1.82 99 XM_PDF 5319 1.51 0.35 1.74 100 XMBdyGiftCard01 5290 1.73 1.74 1.73 101 HTML_MIME_NO_HTML_TAG 5155 1.65 1.48 1.69 102 URI_HEX 5106 1.63 1.40 1.67 103 TM2_M_VERY_LONG_WORD 5040 1.61 1.42 1.65 104 HTML_FONT_FACE_BAD 4758 1.39 0.57 1.56 105 IN_HORDE_ADDRESS_BOOK 4608 1.26 0.03 1.51 106 XM_DK_Undo_01 4558 1.41 1.01 1.49 107 USER_IN_DEF_DKIM_WL 4519 1.23 0.00 1.48 108 SUBJ_ALL_CAPS 4473 1.71 2.90 1.47 109 XMDiploma_00 4352 1.45 1.57 1.43 110 RCVD_IN_BL_SPAMCOP_NET 4325 2.64 8.66 1.42 111 RCVD_IN_IADB_OPTIN 4251 1.20 0.26 1.39 112 XM_B_Unsub2 4226 1.44 1.73 1.38 113 T_XMDrugObfuBody_14 4220 1.48 1.98 1.38 114 XM_B_Phish66 4177 1.59 2.68 1.37 115 XM_ProductURIs 4109 1.33 1.24 1.35 116 XM_OfRef6 4091 1.99 5.23 1.34 117 TR_Symld_Words 4057 1.27 0.99 1.33 118 XM_GoogleGroups 3810 1.12 0.46 1.25 119 TooManyTo_002 3809 1.11 0.44 1.25 120 XM_SPF_SoftFail 3796 2.05 6.01 1.24 121 KHOP_HELO_FCRDNS 3601 1.50 3.08 1.18 122 XM_H_Long_From02 3540 1.06 0.57 1.16 123 XM_UB50 3403 2.58 9.79 1.11 124 XMBrknScrpt_02 3334 1.19 1.65 1.09 125 XMGappySubj_01 3221 0.90 0.16 1.06 126 TR_MetaPhish_Combo_01 3196 1.00 0.76 1.05 127 DKIM_ADSP_CUSTOM_MED 3173 1.10 1.41 1.04 128 XMBody_17 3028 1.56 4.35 0.99 129 XMSubMetaI_00 2947 1.01 1.25 0.97 130 XMSexyCombo_01 2944 1.19 2.33 0.96 131 RCVD_IN_MSPIKE_H5 2935 0.81 0.07 0.96 132 TooManyTo_003 2832 0.83 0.34 0.93 133 XMHTML_After_End 2773 1.27 3.06 0.91 134 TR_MSPIKEBAYES00 2682 0.73 0.00 0.88 135 TR_XM_COVIDMETA4 2643 1.45 4.34 0.87 136 XMGenDplmaNmb 2601 0.84 0.78 0.85 137 T_TooManySym_03 2536 0.92 1.35 0.83 138 T_PDS_OTHER_BAD_TLD 2522 1.04 2.12 0.83 139 T_XMDrugObfuBody_00 2429 0.86 1.15 0.80 140 TooManyTo_004 2419 0.71 0.31 0.79 141 XM_B_REG_HTML 2345 0.72 0.48 0.77 142 XMSubNoVowel 2329 1.10 2.78 0.76 143 T_XMHurry_00 2290 1.07 2.65 0.75 144 NML_ADSP_CUSTOM_MED 2237 0.82 1.24 0.73 145 HTML_TAG_BALANCE_BODY 2163 0.67 0.48 0.71 146 TooManyTo_005 2113 0.62 0.26 0.69 147 RELAYCOUNTRY_GB 2104 0.80 1.35 0.69 148 T_Symld_Words_02 2062 0.85 1.72 0.68 149 XM_DIRTYINTL 2062 1.54 5.84 0.68 150 MPART_ALT_DIFF_COUNT 2042 0.78 1.34 0.67 151 XMhairloss01 1991 0.55 0.05 0.65 152 XMBody_78 1962 0.69 0.93 0.64 153 XMPhish30 1924 0.67 0.85 0.63 154 T_MANY_PILL_PRICE 1916 0.52 0.01 0.63 155 RCVD_IN_MSPIKE_BL 1903 2.64 12.63 0.62 156 SpammyFromTLD_01 1896 1.80 7.65 0.62 157 T_FILL_THIS_FORM_SHORT 1885 0.82 1.80 0.62 158 T_XMDrugObfuBody_03 1825 0.53 0.21 0.60 159 HELO_NODOT 1793 0.62 0.78 0.59 160 HELO_NO_DOMAIN 1791 0.62 0.78 0.59 161 TR_XM_COVIDMETA1 1778 0.77 1.71 0.58 162 USER_IN_WHITELIST 1766 0.48 0.00 0.58 163 XMSubMetaSxObfu_02 1760 0.52 0.23 0.58 164 XM_H_PHPMailer 1738 0.70 1.33 0.57 165 TR_LOTS_OF_MONEY3 1731 0.85 2.25 0.57 166 XMHTMLBadTable_001 1689 0.56 0.59 0.55 167 XMPhish08 1685 0.59 0.78 0.55 168 FORGED_GMAIL_RCVD 1675 0.64 1.10 0.55 169 XMBody_95 1554 0.43 0.04 0.51 170 SUBJ_DOLLARS 1516 0.46 0.26 0.50 171 TR_XM_PHPDW 1515 0.90 2.91 0.50 172 NUMERIC_HTTP_ADDR 1514 0.47 0.33 0.50 173 XM_B_COPY_HTML 1507 0.49 0.49 0.49 174 RDNS_DYNAMIC 1481 0.58 1.03 0.49 175 TR_XM_PHPForged 1433 0.86 2.81 0.47 176 TR_XM_FormFill2 1417 0.86 2.79 0.46 177 HTML_IMAGE_ONLY_20 1413 0.46 0.46 0.46 178 XM_H_PHPOS 1405 0.85 2.78 0.46 179 XMLngstWrd_00 1400 0.43 0.28 0.46 180 XM_Combo_Sbj 1395 0.43 0.30 0.46 181 DIET_1 1372 0.56 1.11 0.45 182 XMSubGiftCard1 1357 0.50 0.75 0.44 183 DKIM_ADSP_NXDOMAIN 1347 0.59 1.30 0.44 184 XM_SPF_Unknown 1344 0.63 1.55 0.44 185 HTTPS_HTTP_MISMATCH 1325 0.51 0.87 0.43 186 RCVD_IN_MSPIKE_L3 1322 1.76 8.31 0.43 187 RELAYCOUNTRY_DE 1302 0.60 1.44 0.43 188 XMPhish14 1296 0.45 0.57 0.42 189 XMCapTrack 1294 0.40 0.26 0.42 190 PLING_QUERY 1278 0.38 0.18 0.42 191 XMLngstWrd_01 1249 0.39 0.27 0.41 192 XMSubMetaSxObfu_03 1239 0.57 1.40 0.41 193 XMBSHREFv2 1219 0.36 0.18 0.40 194 URI_NOVOWEL 1197 0.44 0.70 0.39 195 HTML_TEXT_INVISIBLE_STYLE 1194 0.35 0.13 0.39 196 XMNoVowels 1187 0.48 0.95 0.39 197 XM_ShortIntro_01 1171 0.42 0.62 0.38 198 TM2_M_A_HREF_HREF 1150 0.38 0.38 0.38 199 SHOPIFY_IMG_NOT_RCVD_SFY 1150 0.40 0.54 0.38 200 XMSlimDrugH 1118 0.86 3.30 0.37 ----------------------------------------------------------------------