Email: 244 Autolearn: 0 AvgScore: 3.33 AvgScanTime: 2.65 sec Spam: 53 Autolearn: 0 AvgScore: 15.87 AvgScanTime: 2.68 sec Ham: 191 Autolearn: 0 AvgScore: -0.15 AvgScanTime: 2.65 sec Time Spent Running SA: 0.18 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.14 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 47 61.07 88.68 53.40 2 T_SCC_BODY_TEXT_LINE 44 81.56 83.02 81.15 3 DKIM_SIGNED 41 59.02 77.36 53.93 4 RELAYCOUNTRY_US 41 63.11 77.36 59.16 5 XM_DK_Pass 36 54.92 67.92 51.31 6 DKIM_VALID 35 53.28 66.04 49.74 7 XM_B_SpammyWords 34 36.48 64.15 28.80 8 DCC_CHECK_NEGATIVE 34 84.84 64.15 90.58 9 XM_B_Unicode 29 47.13 54.72 45.03 10 DKIM_VALID_AU 26 41.80 49.06 39.79 11 BAYES_50 24 58.20 45.28 61.78 12 XMListUnsubscribeExists 22 31.97 41.51 29.32 13 XMSubLong 21 22.54 39.62 17.80 14 DKIM_VALID_EF 20 27.87 37.74 25.13 15 FVGT_m_MULTI_ODD 19 22.13 35.85 18.32 16 DCC_CHECK 19 15.16 35.85 9.42 17 RCVD_IN_MSPIKE_H2 18 22.13 33.96 18.85 18 MIME_HTML_ONLY 18 19.26 33.96 15.18 19 BAYES_99 16 8.61 30.19 2.62 20 XM_B_SpammyWords2 16 15.57 30.19 11.52 21 TR_XM_BayesUnsub 16 10.66 30.19 5.24 22 XM_B_Unsub 16 10.66 30.19 5.24 23 XM_B_Unicode3 16 25.00 30.19 23.56 24 T_KAM_HTML_FONT_INVALID 15 15.16 28.30 11.52 25 XM_UncommonTLD01 14 10.66 26.42 6.28 26 LOC_TINY_FONT_1 11 14.75 20.75 13.09 27 RELAYCOUNTRY_META 11 7.79 20.75 4.19 28 TR_XM_DK_Unsub 11 14.34 20.75 12.57 29 BAYES_999 11 5.74 20.75 1.57 30 UNPARSEABLE_RELAY 10 9.43 18.87 6.81 31 HTML_FONT_LOW_CONTRAST 10 22.54 18.87 23.56 32 SpammyFromTLD_01 9 4.92 16.98 1.57 33 MPART_ALT_DIFF 9 7.79 16.98 5.24 34 XM_DK_Undo_02 8 4.92 15.09 2.09 35 FSL_BULK_SIG 8 5.33 15.09 2.62 36 XMSubMetaSx_00 8 4.10 15.09 1.05 37 TR_XM_PhishingBody 7 3.69 13.21 1.05 38 RCVD_IN_MSPIKE_WL 7 13.52 13.21 13.61 39 XM_Body_Dirty_Words 7 4.92 13.21 2.62 40 RCVD_IN_MSPIKE_H3 7 11.89 13.21 11.52 41 TR_XM_SpammyWords2 7 2.87 13.21 0.00 42 XM_DK_Undo_01 7 2.87 13.21 0.00 43 XM_H_Long_From01 7 7.38 13.21 5.76 44 TR_XM_DKIM_Undo 7 3.28 13.21 0.52 45 XM_B_Investor 6 3.28 11.32 1.05 46 TR_XM_UnparsRelay 6 4.10 11.32 2.09 47 XM_SPF_SoftFail 6 4.51 11.32 2.62 48 DKIM_INVALID 6 5.74 11.32 4.19 49 XM_Multi_Part_URI 6 16.80 11.32 18.32 50 BAYES_95 6 3.69 11.32 1.57 51 UNTRUSTED_Relay 6 3.69 11.32 1.57 52 PDS_OTHER_BAD_TLD 6 2.46 11.32 0.00 53 HTML_MIME_NO_HTML_TAG 6 6.56 11.32 5.24 54 UPPERCASE_75_100 5 3.28 9.43 1.57 55 XMLngstWrd_04 5 3.28 9.43 1.57 56 XM_B_SpammyWords3 5 5.74 9.43 4.71 57 XMLngstWrd_03 5 3.28 9.43 1.57 58 XM_B_SpammyTLD 5 4.51 9.43 3.14 59 MIME_HTML_MOSTLY 5 4.51 9.43 3.14 60 TM2_M_VERY_LONG_WORD 5 3.69 9.43 2.09 61 XMLngstWrd_00 5 3.69 9.43 2.09 62 HTML_TITLE_SUBJ_DIFF 5 3.28 9.43 1.57 63 BAYES_60 5 9.84 9.43 9.95 64 TR_DCC_Bayes_99 5 2.05 9.43 0.00 65 XMLngstWrd_02 5 3.28 9.43 1.57 66 XMLngstWrd_01 5 3.28 9.43 1.57 67 MIME_HTML_ONLY_MULTI 5 4.51 9.43 3.14 68 XMSexyCombo_05 5 2.05 9.43 0.00 69 TR_Symld_Words 5 3.69 9.43 2.09 70 TR_XM_SpammyRelay 5 2.87 9.43 1.05 71 T_TooManySym_01 5 9.84 9.43 9.95 72 XM_GoogleGroups 5 3.69 9.43 2.09 73 TR_XM_INV_DKIM 5 2.05 9.43 0.00 74 TR_XM_Undi_Recip11 4 1.64 7.55 0.00 75 XM_Evil_Numbers_Gen 4 6.97 7.55 6.81 76 XM_SendGrid 4 4.10 7.55 3.14 77 XM_H_Undi_Recip 4 1.64 7.55 0.00 78 XMDiploma_00 4 2.05 7.55 0.52 79 URI_NOVOWEL 4 1.64 7.55 0.00 80 T_TM2_M_HEADER_IN_MSG 4 16.39 7.55 18.85 81 ALL_TRUSTED 4 31.56 7.55 38.22 82 UNSUB_GOOG_FORM 3 1.23 5.66 0.00 83 XM_DIRTYINTL 3 1.23 5.66 0.00 84 XM_B_Phish_Phrases 3 2.46 5.66 1.57 85 TR_MetaPhish_Combo_01 3 2.46 5.66 1.57 86 RCVD_IN_PSBL 3 1.64 5.66 0.52 87 XMPhish08 3 1.23 5.66 0.00 88 URIBL_DBL_SPAM 3 1.23 5.66 0.00 89 RCVD_IN_IADB_DK 3 1.64 5.66 0.52 90 SpammyFromTLD_02 3 1.23 5.66 0.00 91 TooManyTo_001 3 7.79 5.66 8.38 92 RCVD_IN_IADB_LISTED 3 1.64 5.66 0.52 93 XM_B_Phish66 3 2.05 5.66 1.05 94 RCVD_IN_IADB_SENDERID 3 1.64 5.66 0.52 95 T_XMDrugObfuBody_00 3 1.23 5.66 0.00 96 BOTNET 3 1.23 5.66 0.00 97 TM2_M_URI_OPT_OUT 3 15.16 5.66 17.80 98 XM_E_Blogspot 3 1.23 5.66 0.00 99 XMNumbers 3 6.97 5.66 7.33 100 RCVD_IN_IADB_SPF 3 1.64 5.66 0.52 101 T_TooManySym_02 3 6.56 5.66 6.81 102 XM_UB99 3 1.23 5.66 0.00 103 TR_MRelay_UG 3 1.23 5.66 0.00 104 TR_XM_Undi_Recip6 3 1.23 5.66 0.00 105 TR_XM_SEO4 2 0.82 3.77 0.00 106 BOTNET_NORDNS 2 0.82 3.77 0.00 107 XM_H_PHPMailer 2 4.10 3.77 4.19 108 TooManyTo_004 2 0.82 3.77 0.00 109 TooManyTo_003 2 0.82 3.77 0.00 110 XM_B_SEO 2 0.82 3.77 0.00 111 XM_B_Unsub2 2 1.23 3.77 0.52 112 TR_XM_SB_Phish 2 2.05 3.77 1.57 113 RCVD_IN_MSPIKE_BL 2 0.82 3.77 0.00 114 TR_XM_SpoofStaff 2 0.82 3.77 0.00 115 IMG_ONLY_FM_DOM_INFO 2 0.82 3.77 0.00 116 XMSubPhish11 2 2.05 3.77 1.57 117 LOTS_OF_MONEY 2 2.05 3.77 1.57 118 T_XMDrugObfuBody_14 2 0.82 3.77 0.00 119 XM_Body_Obfu01 2 0.82 3.77 0.00 120 TooManyTo_002 2 1.23 3.77 0.52 121 XM_UB50 2 2.05 3.77 1.57 122 BASE64_LENGTH_79_INF 2 1.64 3.77 1.05 123 RCVD_IN_IADB_VOUCHED 2 1.23 3.77 0.52 124 XMGenDplmaNmb 2 1.23 3.77 0.52 125 HTML_IMAGE_ONLY_24 2 0.82 3.77 0.00 126 XM_UB999 2 0.82 3.77 0.00 127 RCVD_IN_IADB_OPTIN_GT50 2 0.82 3.77 0.00 128 RCVD_IN_VALIDITY_RPBL 2 0.82 3.77 0.00 129 TR_XM_MSPIKECOMBO 2 0.82 3.77 0.00 130 RELAYCOUNTRY_AU 2 0.82 3.77 0.00 131 RCVD_IN_IADB_OPTIN 2 0.82 3.77 0.00 132 T_TooManySym_03 2 3.69 3.77 3.66 133 T_REMOTE_IMAGE 2 2.87 3.77 2.62 134 XMSpoofStaff2 2 0.82 3.77 0.00 135 SHORT_SHORTNER 1 3.28 1.89 3.66 136 DATE_IN_FUTURE_06_12 1 0.41 1.89 0.00 137 XMCapTrack 1 1.23 1.89 1.05 138 MIMEOLE_DIRECT_TO_MX 1 0.41 1.89 0.00 139 XM_B_FormFill 1 0.41 1.89 0.00 140 LONG_JUNK_URI3 1 0.41 1.89 0.00 141 PHP_SCRIPT 1 0.41 1.89 0.00 142 BAYES_80 1 1.64 1.89 1.57 143 TVD_SPACE_RATIO_MINFP 1 0.82 1.89 0.52 144 XMSexyCombo_01 1 0.82 1.89 0.52 145 XMPhishDuo 1 0.41 1.89 0.00 146 LotsOfNums_01 1 4.51 1.89 5.24 147 TR_Mismatch_TLD_02 1 0.41 1.89 0.00 148 RCVD_IN_BL_SPAMCOP_NET 1 0.41 1.89 0.00 149 LongTLD 1 0.41 1.89 0.00 150 FROM_GOV_SPOOF 1 2.46 1.89 2.62 151 XM_H_SpoofStaff4 1 0.41 1.89 0.00 152 HTML_OBFUSCATE_05_10 1 0.41 1.89 0.00 153 XM_B_SpammyTLD2 1 0.82 1.89 0.52 154 SUBJ_DOLLARS 1 0.41 1.89 0.00 155 XMSubLongNoVowel 1 0.41 1.89 0.00 156 TR_XM_NoHeaderRelay 1 0.82 1.89 0.52 157 LONG_IMG_URI 1 0.41 1.89 0.00 158 XMPhish19 1 0.41 1.89 0.00 159 TR_XM_DK_SendGrid 1 1.64 1.89 1.57 160 XMGappySubj_01 1 1.64 1.89 1.57 161 TO_NO_BRKTS_DYNIP 1 0.41 1.89 0.00 162 XM_UB80 1 0.41 1.89 0.00 163 SUSPICIOUS_RECIPS 1 0.41 1.89 0.00 164 DOS_OE_TO_MX 1 0.41 1.89 0.00 165 BOTNET_IPINHOSTNAME 1 2.87 1.89 3.14 166 RELAYCOUNTRY_IT 1 0.82 1.89 0.52 167 RELAYCOUNTRY_IN 1 0.41 1.89 0.00 168 TR_XM_MaxWHORU 1 0.41 1.89 0.00 169 TR_XM_FormFill2 1 0.82 1.89 0.52 170 OBFU_TEXT_ATTACH 1 0.41 1.89 0.00 171 HTML_IMAGE_RATIO_02 1 1.23 1.89 1.05 172 TR_XM_COVIDMETA1 1 0.41 1.89 0.00 173 RCVD_IN_MSPIKE_L4 1 0.41 1.89 0.00 174 RDNS_DYNAMIC 1 0.41 1.89 0.00 175 TR_XM_PHPForged 1 0.82 1.89 0.52 176 XM_H_PHPOS 1 0.82 1.89 0.52 177 TM2_M_HAS_BSLASH_URI 1 0.41 1.89 0.00 178 TR_Email_Ref 1 0.41 1.89 0.00 179 SHORT_URI_2 1 1.64 1.89 1.57 180 XMSexyCombo_02 1 0.41 1.89 0.00 181 HDR_ORDER_FTSDMCXX_NORDNS 1 0.41 1.89 0.00 182 XMSubNoVowel 1 0.41 1.89 0.00 183 XM_B_COVIDMETA 1 0.41 1.89 0.00 184 TR_XM_PSC1 1 0.41 1.89 0.00 185 RCVD_IN_MSPIKE_L3 1 0.41 1.89 0.00 186 TR_XM_InvalidRelay 1 0.41 1.89 0.00 187 HDR_ORDER_FTSDMCXX_DIRECT 1 0.41 1.89 0.00 188 XMPhish14 1 0.41 1.89 0.00 189 RELAYCOUNTRY_DE 1 0.82 1.89 0.52 190 MIME_QP_LONG_LINE 1 2.46 1.89 2.62 191 TooManyTo_005 1 0.41 1.89 0.00 192 XM_CamelCaseFrm001 1 2.05 1.89 2.09 193 NO_DNS_FOR_FROM 1 0.41 1.89 0.00 194 RELAYCOUNTRY_NL 1 0.41 1.89 0.00 195 TR_XM_Undi_Recip14 1 0.41 1.89 0.00 196 XMSexyCombo_04 1 0.41 1.89 0.00 197 FILL_THIS_FORM 1 0.41 1.89 0.00 198 FROM_EXCESS_BASE64 1 0.41 1.89 0.00 199 PDS_RDNS_DYNAMIC_FP 1 0.41 1.89 0.00 200 BAYES_40 1 3.28 1.89 3.66 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 173 84.84 64.15 90.58 2 T_SCC_BODY_TEXT_LINE 155 81.56 83.02 81.15 3 BAYES_50 118 58.20 45.28 61.78 4 RELAYCOUNTRY_US 113 63.11 77.36 59.16 5 DKIM_SIGNED 103 59.02 77.36 53.93 6 HTML_MESSAGE 102 61.07 88.68 53.40 7 XM_DK_Pass 98 54.92 67.92 51.31 8 DKIM_VALID 95 53.28 66.04 49.74 9 XM_B_Unicode 86 47.13 54.72 45.03 10 DKIM_VALID_AU 76 41.80 49.06 39.79 11 ALL_TRUSTED 73 31.56 7.55 38.22 12 XMListUnsubscribeExists 56 31.97 41.51 29.32 13 XM_B_SpammyWords 55 36.48 64.15 28.80 14 DKIM_VALID_EF 48 27.87 37.74 25.13 15 HTML_FONT_LOW_CONTRAST 45 22.54 18.87 23.56 16 XM_B_Unicode3 45 25.00 30.19 23.56 17 ANY_BOUNCE_MESSAGE 38 15.57 0.00 19.90 18 BOUNCE_MESSAGE 38 15.57 0.00 19.90 19 T_TM2_M_HEADER_IN_MSG 36 16.39 7.55 18.85 20 RCVD_IN_MSPIKE_H2 36 22.13 33.96 18.85 21 XM_Multi_Part_URI 35 16.80 11.32 18.32 22 FVGT_m_MULTI_ODD 35 22.13 35.85 18.32 23 XMSubLong 34 22.54 39.62 17.80 24 TM2_M_URI_OPT_OUT 34 15.16 5.66 17.80 25 MIME_HTML_ONLY 29 19.26 33.96 15.18 26 RCVD_IN_MSPIKE_WL 26 13.52 13.21 13.61 27 LOC_TINY_FONT_1 25 14.75 20.75 13.09 28 TR_XM_DK_Unsub 24 14.34 20.75 12.57 29 RCVD_IN_MSPIKE_H3 22 11.89 13.21 11.52 30 XM_B_SpammyWords2 22 15.57 30.19 11.52 31 T_KAM_HTML_FONT_INVALID 22 15.16 28.30 11.52 32 BAYES_05 21 8.61 0.00 10.99 33 BAYES_60 19 9.84 9.43 9.95 34 T_TooManySym_01 19 9.84 9.43 9.95 35 DCC_CHECK 18 15.16 35.85 9.42 36 SCC_BODY_URI_ONLY 16 6.56 0.00 8.38 37 TooManyTo_001 16 7.79 5.66 8.38 38 XMNumbers 14 6.97 5.66 7.33 39 XM_DKIMWhitelistDomains 14 5.74 0.00 7.33 40 UNPARSEABLE_RELAY 13 9.43 18.87 6.81 41 XM_Evil_Numbers_Gen 13 6.97 7.55 6.81 42 T_TooManySym_02 13 6.56 5.66 6.81 43 XMStrtUSub 13 5.33 0.00 6.81 44 XM_UncommonTLD01 12 10.66 26.42 6.28 45 USER_IN_DEF_DKIM_WL 12 4.92 0.00 6.28 46 XM_H_Long_From01 11 7.38 13.21 5.76 47 IN_ZIMBRA_NJ_WHITELIST 11 4.51 0.00 5.76 48 LotsOfNums_01 10 4.51 1.89 5.24 49 TR_XM_BayesUnsub 10 10.66 30.19 5.24 50 XM_B_Unsub 10 10.66 30.19 5.24 51 HTML_MIME_NO_HTML_TAG 10 6.56 11.32 5.24 52 BAYES_00 10 4.10 0.00 5.24 53 MPART_ALT_DIFF 10 7.79 16.98 5.24 54 XM_B_SpammyWords3 9 5.74 9.43 4.71 55 XMBSHREFv2 8 3.28 0.00 4.19 56 XM_H_PHPMailer 8 4.10 3.77 4.19 57 DKIM_INVALID 8 5.74 11.32 4.19 58 TVD_SPACE_RATIO 8 3.28 0.00 4.19 59 RELAYCOUNTRY_META 8 7.79 20.75 4.19 60 SHORT_SHORTNER 7 3.28 1.89 3.66 61 INVALID_MSGID 7 2.87 0.00 3.66 62 FVGT_m_MULTI_ODD_EMAIL 7 2.87 0.00 3.66 63 T_TooManySym_03 7 3.69 3.77 3.66 64 MSGID_NOFQDN1 7 2.87 0.00 3.66 65 BAYES_40 7 3.28 1.89 3.66 66 TO_MALFORMED 7 2.87 0.00 3.66 67 BOTNET_IPINHOSTNAME 6 2.87 1.89 3.14 68 RCVD_IN_VALIDITY_SAFE 6 2.46 0.00 3.14 69 MIME_HTML_MOSTLY 6 4.51 9.43 3.14 70 XM_B_SpammyTLD 6 4.51 9.43 3.14 71 XM_SendGrid 6 4.10 7.55 3.14 72 SUBJ_ALL_CAPS 6 2.46 0.00 3.14 73 MIME_HTML_ONLY_MULTI 6 4.51 9.43 3.14 74 TR_XM_SpammyWords5 6 2.87 1.89 3.14 75 RCVD_IN_VALIDITY_CERTIFIED 5 2.05 0.00 2.62 76 FSL_BULK_SIG 5 5.33 15.09 2.62 77 XM_SPF_SoftFail 5 4.51 11.32 2.62 78 FROM_GOV_SPOOF 5 2.46 1.89 2.62 79 XM_Body_Dirty_Words 5 4.92 13.21 2.62 80 BAYES_99 5 8.61 30.19 2.62 81 TVD_RCVD_IP 5 2.05 0.00 2.62 82 T_REMOTE_IMAGE 5 2.87 3.77 2.62 83 MIME_QP_LONG_LINE 5 2.46 1.89 2.62 84 BAYES_20 5 2.05 0.00 2.62 85 T_XMDrugObfuBody_06 4 1.64 0.00 2.09 86 TR_XM_UnparsRelay 4 4.10 11.32 2.09 87 XM_DK_Undo_02 4 4.92 15.09 2.09 88 RCVD_IN_RP_CERTIFIED 4 1.64 0.00 2.09 89 XMLngstWrd_00 4 3.69 9.43 2.09 90 TM2_M_VERY_LONG_WORD 4 3.69 9.43 2.09 91 MAILING_LIST_MULTI 4 2.05 1.89 2.09 92 HTML_IMAGE_RATIO_08 4 2.05 1.89 2.09 93 TR_Symld_Words 4 3.69 9.43 2.09 94 XM_GoogleGroups 4 3.69 9.43 2.09 95 XM_PDF 4 1.64 0.00 2.09 96 XMStockSpam_06 4 1.64 0.00 2.09 97 RCVD_IN_RP_SAFE 4 1.64 0.00 2.09 98 XM_CamelCaseFrm001 4 2.05 1.89 2.09 99 HTML_IMAGE_RATIO_04 4 2.05 1.89 2.09 100 TR_XM_DK_SendGrid 3 1.64 1.89 1.57 101 XMGappySubj_01 3 1.64 1.89 1.57 102 T_OBFU_PDF_ATTACH 3 1.23 0.00 1.57 103 XMSubPhish11 3 2.05 3.77 1.57 104 XM_B_Phish_Phrases 3 2.46 5.66 1.57 105 HTML_TITLE_SUBJ_DIFF 3 3.28 9.43 1.57 106 TR_MetaPhish_Combo_01 3 2.46 5.66 1.57 107 BAYES_95 3 3.69 11.32 1.57 108 UNTRUSTED_Relay 3 3.69 11.32 1.57 109 LOTS_OF_MONEY 3 2.05 3.77 1.57 110 RELAYCOUNTRY_GB 3 1.23 0.00 1.57 111 UPPERCASE_75_100 3 3.28 9.43 1.57 112 XMLngstWrd_03 3 3.28 9.43 1.57 113 TR_XM_DK_Bayes 3 1.23 0.00 1.57 114 XMLngstWrd_04 3 3.28 9.43 1.57 115 BAYES_80 3 1.64 1.89 1.57 116 TR_XM_DK_Bayes1 3 1.23 0.00 1.57 117 SpammyFromTLD_01 3 4.92 16.98 1.57 118 TR_XM_SB_Phish 3 2.05 3.77 1.57 119 BAYES_999 3 5.74 20.75 1.57 120 RCVD_IN_MSPIKE_H4 3 1.23 0.00 1.57 121 XM_H_Long_From02 3 1.64 1.89 1.57 122 SHORT_URI_2 3 1.64 1.89 1.57 123 XM_UB50 3 2.05 3.77 1.57 124 XMLngstWrd_01 3 3.28 9.43 1.57 125 XMLngstWrd_02 3 3.28 9.43 1.57 126 FROM_GOV_DKIM_AU 2 0.82 0.00 1.05 127 RELAYCOUNTRY_TR 2 0.82 0.00 1.05 128 HTML_IMAGE_RATIO_02 2 1.23 1.89 1.05 129 TR_XM_DK_Bayes2 2 0.82 0.00 1.05 130 XM_B_Investor 2 3.28 11.32 1.05 131 NML_ADSP_CUSTOM_MED 2 0.82 0.00 1.05 132 XMCapTrack 2 1.23 1.89 1.05 133 TR_XM_PhishingBody 2 3.69 13.21 1.05 134 LOCALPART_IN_SUBJECT 2 0.82 0.00 1.05 135 DKIM_ADSP_CUSTOM_MED 2 0.82 0.00 1.05 136 TR_XM_SpammyRelay 2 2.87 9.43 1.05 137 HTML_IMAGE_RATIO_06 2 0.82 0.00 1.05 138 HDRS_MISSP 2 0.82 0.00 1.05 139 XM_Ancestry_Forge 2 0.82 0.00 1.05 140 BASE64_LENGTH_79_INF 2 1.64 3.77 1.05 141 URI_TRY_3LD 2 0.82 0.00 1.05 142 XMSubMetaSx_00 2 4.10 15.09 1.05 143 HTML_IMAGE_ONLY_20 2 0.82 0.00 1.05 144 XM_B_Phish66 2 2.05 5.66 1.05 145 XM_WL_UtahGOV 1 0.41 0.00 0.52 146 TO_EQ_FM_HTML_ONLY 1 0.41 0.00 0.52 147 TR_XM_NoHeaderRelay 1 0.82 1.89 0.52 148 RCVD_IN_MSPIKE_H5 1 0.41 0.00 0.52 149 TR_XM_FormFill2 1 0.82 1.89 0.52 150 RELAYCOUNTRY_IT 1 0.82 1.89 0.52 151 XMManySubDom_07 1 0.41 0.00 0.52 152 XMReplyNow 1 0.41 0.00 0.52 153 XM_H_PHPOS 1 0.82 1.89 0.52 154 XM_S_SubURI 1 0.41 0.00 0.52 155 TR_XM_PHPForged 1 0.82 1.89 0.52 156 XM_H_Trusted_IP 1 0.41 0.00 0.52 157 RCVD_IN_PSBL 1 1.64 5.66 0.52 158 PP_MIME_FAKE_ASCII_TEXT 1 0.41 0.00 0.52 159 HTML_IMAGE_ONLY_28 1 0.41 0.00 0.52 160 TVD_SUBJ_ACC_NUM 1 0.41 0.00 0.52 161 XM_ShortIntro_01 1 0.41 0.00 0.52 162 MISSING_HEADERS 1 0.41 0.00 0.52 163 GMD_PDF_SQUARE 1 0.41 0.00 0.52 164 XMNoVowels 1 0.41 0.00 0.52 165 HTTPS_HTTP_MISMATCH 1 0.41 0.00 0.52 166 XMSexyCombo_01 1 0.82 1.89 0.52 167 INVALID_DATE 1 0.41 0.00 0.52 168 TVD_SPACE_RATIO_MINFP 1 0.82 1.89 0.52 169 CTE_8BIT_MISMATCH 1 0.41 0.00 0.52 170 XMSubject_78 1 0.41 0.00 0.52 171 HTML_TEXT_INVISIBLE_FONT 1 0.41 0.00 0.52 172 XMSubject_70 1 0.41 0.00 0.52 173 XMManySubDom_10 1 0.41 0.00 0.52 174 UPPERCASE_50_75 1 0.41 0.00 0.52 175 T_FILL_THIS_FORM_SHORT 1 0.41 0.00 0.52 176 XM_B_Unsub2 1 1.23 3.77 0.52 177 XM_B_SpammyTLD2 1 0.82 1.89 0.52 178 MPART_ALT_DIFF_COUNT 1 0.41 0.00 0.52 179 IN_HORDE_ADDRESS_BOOK 1 0.41 0.00 0.52 180 XM_S_SEO 1 0.41 0.00 0.52 181 DIET_1 1 0.41 0.00 0.52 182 TO_EQ_FM_DOM_HTML_IMG 1 0.41 0.00 0.52 183 RCVD_IN_IADB_SPF 1 1.64 5.66 0.52 184 TR_XM_DKIM_Undo 1 3.28 13.21 0.52 185 MIME_BASE64_TEXT 1 0.41 0.00 0.52 186 FROM_LOCAL_NOVOWEL 1 0.41 0.00 0.52 187 TRACKER_ID 1 0.41 0.00 0.52 188 REPLYTO_WITHOUT_TO_CC 1 0.41 0.00 0.52 189 PLING_QUERY 1 0.41 0.00 0.52 190 XMManySubDom_09 1 0.41 0.00 0.52 191 TR_XM_PHPDW 1 0.82 1.89 0.52 192 TO_EQ_FM_DOM_HTML_ONLY 1 0.82 1.89 0.52 193 XMDiploma_00 1 2.05 7.55 0.52 194 RCVD_IN_IADB_DK 1 1.64 5.66 0.52 195 RELAYCOUNTRY_FR 1 0.41 0.00 0.52 196 TR_MetaPhish_Combo_01b 1 0.41 0.00 0.52 197 XM_H_PHPOS_M 1 0.41 0.00 0.52 198 XMAsSeen 1 0.41 0.00 0.52 199 HTML_FONT_FACE_BAD 1 0.41 0.00 0.52 200 TooManyTo_002 1 1.23 3.77 0.52 ----------------------------------------------------------------------