Email: 337 Autolearn: 0 AvgScore: 2.27 AvgScanTime: 3.86 sec Spam: 78 Autolearn: 0 AvgScore: 14.92 AvgScanTime: 4.21 sec Ham: 259 Autolearn: 0 AvgScore: -1.54 AvgScanTime: 3.75 sec Time Spent Running SA: 0.36 hours Time Spent Processing Spam: 0.09 hours Time Spent Processing Ham: 0.27 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 71 66.77 91.03 59.46 2 T_SCC_BODY_TEXT_LINE 65 83.09 83.33 83.01 3 DKIM_SIGNED 61 62.02 78.21 57.14 4 DKIM_VALID 59 59.05 75.64 54.05 5 XM_DK_Pass 59 60.83 75.64 56.37 6 XM_B_Unicode 57 47.77 73.08 40.15 7 XM_B_SpammyWords 55 33.23 70.51 22.01 8 DCC_CHECK_NEGATIVE 45 77.15 57.69 83.01 9 DKIM_VALID_AU 43 45.70 55.13 42.86 10 XMListUnsubscribeExists 42 34.42 53.85 28.57 11 RELAYCOUNTRY_US 42 54.90 53.85 55.21 12 XM_B_Unicode3 36 26.41 46.15 20.46 13 BAYES_50 36 57.57 46.15 61.00 14 RELAYCOUNTRY_META 35 16.62 44.87 8.11 15 DCC_CHECK 33 22.85 42.31 16.99 16 LOC_TINY_FONT_1 30 23.44 38.46 18.92 17 HTML_FONT_LOW_CONTRAST 27 25.52 34.62 22.78 18 XM_B_SpammyWords2 27 11.57 34.62 4.63 19 MIME_HTML_ONLY 24 16.32 30.77 11.97 20 XMSubLong 24 19.29 30.77 15.83 21 UNTRUSTED_Relay 24 11.28 30.77 5.41 22 TR_XM_SpammyRelay 24 9.20 30.77 2.70 23 T_KAM_HTML_FONT_INVALID 23 16.02 29.49 11.97 24 XM_DK_Undo_02 22 8.31 28.21 2.32 25 FVGT_m_MULTI_ODD 21 21.07 26.92 19.31 26 RCVD_IN_MSPIKE_WL 20 21.07 25.64 19.69 27 T_TM2_M_HEADER_IN_MSG 19 17.51 24.36 15.44 28 DKIM_VALID_EF 17 24.04 21.79 24.71 29 XM_B_SpammyWords3 17 6.53 21.79 1.93 30 RCVD_IN_MSPIKE_H2 16 16.62 20.51 15.44 31 TR_XM_DKIM_Undo 16 4.75 20.51 0.00 32 BOTNET 16 5.93 20.51 1.54 33 UNPARSEABLE_RELAY 15 13.65 19.23 11.97 34 TR_XM_BayesUnsub 15 8.90 19.23 5.79 35 XM_B_Unsub 15 11.28 19.23 8.88 36 RCVD_IN_MSPIKE_H3 15 10.68 19.23 8.11 37 XM_Body_Dirty_Words 15 10.68 19.23 8.11 38 BOTNET_IPINHOSTNAME 13 7.12 16.67 4.25 39 XM_Multi_Part_URI 13 10.09 16.67 8.11 40 XM_Evil_Numbers_Gen 13 5.93 16.67 2.70 41 XM_UncommonTLD01 13 7.12 16.67 4.25 42 LOTS_OF_MONEY 12 6.23 15.38 3.47 43 XM_UB50 12 7.12 15.38 4.63 44 BAYES_80 12 6.53 15.38 3.86 45 TR_XM_SpammyWords4 11 3.86 14.10 0.77 46 BAYES_99 10 3.56 12.82 0.77 47 MIME_HTML_MOSTLY 9 3.86 11.54 1.54 48 RELAYCOUNTRY_AT 9 3.26 11.54 0.77 49 TR_BOTNET_NEGATE 8 2.37 10.26 0.00 50 MPART_ALT_DIFF 8 3.26 10.26 1.16 51 RELAYCOUNTRY_CA 8 2.67 10.26 0.39 52 RCVD_IN_MSPIKE_BL 8 2.67 10.26 0.39 53 TooManyTo_001 8 8.01 10.26 7.34 54 FSL_BULK_SIG 8 10.39 10.26 10.42 55 TR_XM_SpammyWords5 8 2.67 10.26 0.39 56 BAYES_60 8 8.31 10.26 7.72 57 TR_MetaPhish_Combo_01 7 3.26 8.97 1.54 58 XMSexyCombo_05 7 3.26 8.97 1.54 59 TR_XM_MSPIKECOMBO 7 2.37 8.97 0.39 60 TR_XM_DK_Unsub 7 10.68 8.97 11.20 61 T_XMDrugObfuBody_14 7 2.67 8.97 0.77 62 XMNumbers 7 6.23 8.97 5.41 63 BAYES_999 7 2.67 8.97 0.77 64 XM_B_SpammyTLD 7 3.86 8.97 2.32 65 TR_XM_NoHeaderRelay 7 2.37 8.97 0.39 66 HTML_MIME_NO_HTML_TAG 6 2.97 7.69 1.54 67 TR_XM_UnparsRelay 6 1.78 7.69 0.00 68 T_XMDrugObfuBody_08 6 15.73 7.69 18.15 69 RCVD_IN_BL_SPAMCOP_NET 6 2.08 7.69 0.39 70 TR_XM_SpammyWords3 6 2.08 7.69 0.39 71 RCVD_IN_PSBL 6 2.97 7.69 1.54 72 XM_DIRTYINTL 6 3.26 7.69 1.93 73 XM_B_Phish_Phrases 6 2.97 7.69 1.54 74 XM_SPF_SoftFail 6 3.86 7.69 2.70 75 TR_XM_PhishingBody 6 3.26 7.69 1.93 76 XM_H_Long_From01 6 4.45 7.69 3.47 77 TooManyTo_004 5 3.86 6.41 3.09 78 TooManyTo_002 5 4.15 6.41 3.47 79 TooManyTo_003 5 3.86 6.41 3.09 80 XMSubMetaSx_00 5 2.97 6.41 1.93 81 BOTNET_NORDNS 5 1.48 6.41 0.00 82 SpammyFromTLD_01 5 1.48 6.41 0.00 83 TR_XM_RelayPhish 5 1.48 6.41 0.00 84 RCVD_IN_VALIDITY_RPBL 5 1.78 6.41 0.39 85 TR_XM_PHPDW 5 2.08 6.41 0.77 86 T_US_DOLLARS_3 5 1.48 6.41 0.00 87 XMBody_03 5 1.48 6.41 0.00 88 TR_XM_FormFill2 4 1.78 5.13 0.77 89 SHOPIFY_IMG_NOT_RCVD_SFY 4 1.48 5.13 0.39 90 XM_H_PHPOS 4 1.78 5.13 0.77 91 XMBody_17 4 1.48 5.13 0.39 92 T_REMOTE_IMAGE 4 3.86 5.13 3.47 93 MIME_HTML_ONLY_MULTI 4 1.48 5.13 0.39 94 BAYES_20 4 8.61 5.13 9.65 95 TooManyTo_005 4 1.19 5.13 0.00 96 RCVD_IN_MSPIKE_H4 4 3.86 5.13 3.47 97 HTML_IMAGE_RATIO_08 4 1.48 5.13 0.39 98 TR_XM_SpammyWords2 4 1.19 5.13 0.00 99 TR_XM_PHPForged 4 1.78 5.13 0.77 100 XMPhish14 4 2.08 5.13 1.16 101 RCVD_IN_VALIDITY_CERTIFIED 3 0.89 3.85 0.00 102 RELAYCOUNTRY_DE 3 0.89 3.85 0.00 103 DEAR_FRIEND 3 0.89 3.85 0.00 104 XM_B_DNDMA 3 0.89 3.85 0.00 105 LotsOfNums_01 3 5.34 3.85 5.79 106 XMReplyNow 3 0.89 3.85 0.00 107 PRICES_ARE_AFFORDABLE 3 0.89 3.85 0.00 108 HTML_IMAGE_ONLY_28 3 2.67 3.85 2.32 109 TR_XM_SPAMCOP 3 0.89 3.85 0.00 110 XMSubGiftCard1 3 0.89 3.85 0.00 111 XM_H_Undi_Recip 3 2.08 3.85 1.54 112 DOS_RCVD_IP_TWICE_B 3 1.19 3.85 0.39 113 ANY_BOUNCE_MESSAGE 3 22.85 3.85 28.57 114 MONEY_FORM 3 0.89 3.85 0.00 115 RCVD_IN_VALIDITY_SAFE 3 0.89 3.85 0.00 116 BAYES_95 3 2.37 3.85 1.93 117 FILL_THIS_FORM_LONG 3 0.89 3.85 0.00 118 TR_XM_Undi_Recip11 3 0.89 3.85 0.00 119 FILL_THIS_FORM 3 1.19 3.85 0.39 120 XMDiploma_00 3 1.48 3.85 0.77 121 BAYES_40 3 5.64 3.85 6.18 122 RELAYCOUNTRY_AU 3 2.67 3.85 2.32 123 XM_UB80 3 0.89 3.85 0.00 124 BOUNCE_MESSAGE 3 22.85 3.85 28.57 125 XMSubGiftCard2 3 0.89 3.85 0.00 126 ALL_TRUSTED 3 29.08 3.85 36.68 127 RCVD_IN_MSPIKE_L4 3 0.89 3.85 0.00 128 DKIM_ADSP_CUSTOM_MED 2 2.08 2.56 1.93 129 TR_Mismatch_TLD_02 2 1.19 2.56 0.77 130 RCVD_IN_IADB_OPTIN_GT50 2 0.59 2.56 0.00 131 TR_DCC_Bayes_99 2 0.59 2.56 0.00 132 PDS_RDNS_DYNAMIC_FP 2 0.59 2.56 0.00 133 RCVD_IN_IADB_SPF 2 1.48 2.56 1.16 134 FORGED_GMAIL_RCVD 2 0.59 2.56 0.00 135 NML_ADSP_CUSTOM_MED 2 1.78 2.56 1.54 136 RCVD_IN_IADB_DK 2 1.19 2.56 0.77 137 DIET_1 2 0.59 2.56 0.00 138 XMSubMetaSSx_00 2 1.19 2.56 0.77 139 XMSubPhish8 2 0.59 2.56 0.00 140 XM_Lotto 2 0.59 2.56 0.00 141 XM_B_SexDrugs1 2 0.59 2.56 0.00 142 TR_XM_SB_Phish 2 1.19 2.56 0.77 143 RELAYCOUNTRY_ID 2 0.59 2.56 0.00 144 LOADSA_MONEY_COMBO 2 0.59 2.56 0.00 145 XMSexyCombo_01 2 0.89 2.56 0.39 146 SHORTENED_URL_HREF 2 0.59 2.56 0.00 147 XM_B_Investor 2 0.89 2.56 0.39 148 XMSubPhish11 2 1.19 2.56 0.77 149 LOTTO_DEPT 2 0.59 2.56 0.00 150 RELAYCOUNTRY_NL 2 0.59 2.56 0.00 151 RELAYCOUNTRY_PL 2 0.59 2.56 0.00 152 XM_Body_Dirty_Words_03 2 0.59 2.56 0.00 153 XM_H_PHPMailer 2 2.37 2.56 2.32 154 TR_XM_InvalidRelay 2 0.59 2.56 0.00 155 TR_XMSubLong 2 0.59 2.56 0.00 156 XFER_LOTSA_MONEY 2 0.59 2.56 0.00 157 MPART_ALT_DIFF_COUNT 2 0.89 2.56 0.39 158 RCVD_IN_IADB_OPTIN 2 0.89 2.56 0.39 159 HTML_IMAGE_ONLY_24 2 0.89 2.56 0.39 160 DKIM_INVALID 2 2.97 2.56 3.09 161 XM_B_SexDrugs2 2 0.59 2.56 0.00 162 TR_XM_COVIDMETA3 2 0.59 2.56 0.00 163 KHOP_HELO_FCRDNS 2 1.19 2.56 0.77 164 RELAYCOUNTRY_PT 2 0.59 2.56 0.00 165 RCVD_IN_IADB_SENDERID 2 1.19 2.56 0.77 166 XM_B_COVIDMETA 2 0.59 2.56 0.00 167 XM_Body_Dirty_Words_02 2 0.59 2.56 0.00 168 XM_Body_Dirty_Words_01 2 0.59 2.56 0.00 169 HTML_FONT_TINY_NORDNS 2 0.59 2.56 0.00 170 XM_Nigeria_01 2 0.59 2.56 0.00 171 MONEY_FRAUD_8 2 0.59 2.56 0.00 172 LOTTO_AGENT 2 0.59 2.56 0.00 173 TR_Mismatch_TLD_01 2 0.59 2.56 0.00 174 XMStrtUSub 2 3.26 2.56 3.47 175 HTML_IMAGE_RATIO_02 2 1.48 2.56 1.16 176 XM_B_Unsub2 2 1.48 2.56 1.16 177 RCVD_IN_IADB_VOUCHED 2 0.89 2.56 0.39 178 XMPhish08 2 0.59 2.56 0.00 179 XM_E_Blogspot 2 0.59 2.56 0.00 180 RCVD_IN_MSPIKE_L5 2 0.59 2.56 0.00 181 RCVD_IN_IADB_LISTED 2 1.48 2.56 1.16 182 IMG_ONLY_FM_DOM_INFO 2 0.59 2.56 0.00 183 XM_DK_Undo_01 2 0.89 2.56 0.39 184 ADVANCE_FEE_5_NEW_FRM_MNY 2 0.59 2.56 0.00 185 XMBody_78 2 2.67 2.56 2.70 186 MONEY_FRAUD_3 2 0.59 2.56 0.00 187 RELAYCOUNTRY_IN 2 0.59 2.56 0.00 188 RCVD_IN_MSPIKE_L3 2 0.89 2.56 0.39 189 RDNS_DYNAMIC 2 0.59 2.56 0.00 190 PLING_QUERY 2 0.89 2.56 0.39 191 SUBJ_ALL_CAPS 2 1.19 2.56 0.77 192 NOT_SPAM 1 0.30 1.28 0.00 193 SCC_SPAMMER_ADDR_2 1 0.30 1.28 0.00 194 STY_INVIS_DIRECT 1 0.59 1.28 0.39 195 DATE_IN_FUTURE_06_12 1 0.30 1.28 0.00 196 XM_H_Long_From02 1 1.19 1.28 1.16 197 HTML_IMAGE_RATIO_04 1 2.97 1.28 3.47 198 TR_XM_Undi_RecipCombo2 1 0.30 1.28 0.00 199 XMStockSpam_06 1 0.30 1.28 0.00 200 TR_XM_Base64_M1 1 0.59 1.28 0.39 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 215 83.09 83.33 83.01 2 DCC_CHECK_NEGATIVE 215 77.15 57.69 83.01 3 BAYES_50 158 57.57 46.15 61.00 4 HTML_MESSAGE 154 66.77 91.03 59.46 5 DKIM_SIGNED 148 62.02 78.21 57.14 6 XM_DK_Pass 146 60.83 75.64 56.37 7 RELAYCOUNTRY_US 143 54.90 53.85 55.21 8 DKIM_VALID 140 59.05 75.64 54.05 9 DKIM_VALID_AU 111 45.70 55.13 42.86 10 XM_B_Unicode 104 47.77 73.08 40.15 11 ALL_TRUSTED 95 29.08 3.85 36.68 12 XMListUnsubscribeExists 74 34.42 53.85 28.57 13 BOUNCE_MESSAGE 74 22.85 3.85 28.57 14 ANY_BOUNCE_MESSAGE 74 22.85 3.85 28.57 15 DKIM_VALID_EF 64 24.04 21.79 24.71 16 HTML_FONT_LOW_CONTRAST 59 25.52 34.62 22.78 17 XM_B_SpammyWords 57 33.23 70.51 22.01 18 XM_B_Unicode3 53 26.41 46.15 20.46 19 RCVD_IN_MSPIKE_WL 51 21.07 25.64 19.69 20 FVGT_m_MULTI_ODD 50 21.07 26.92 19.31 21 LOC_TINY_FONT_1 49 23.44 38.46 18.92 22 T_XMDrugObfuBody_08 47 15.73 7.69 18.15 23 DCC_CHECK 44 22.85 42.31 16.99 24 SCC_BODY_URI_ONLY 42 12.46 0.00 16.22 25 XMSubLong 41 19.29 30.77 15.83 26 T_TM2_M_HEADER_IN_MSG 40 17.51 24.36 15.44 27 RCVD_IN_MSPIKE_H2 40 16.62 20.51 15.44 28 UNPARSEABLE_RELAY 31 13.65 19.23 11.97 29 MIME_HTML_ONLY 31 16.32 30.77 11.97 30 T_KAM_HTML_FONT_INVALID 31 16.02 29.49 11.97 31 TR_XM_DK_Unsub 29 10.68 8.97 11.20 32 FSL_BULK_SIG 27 10.39 10.26 10.42 33 BAYES_20 25 8.61 5.13 9.65 34 XM_B_Unsub 23 11.28 19.23 8.88 35 XM_DKIMWhitelistDomains 21 6.23 0.00 8.11 36 XM_Body_Dirty_Words 21 10.68 19.23 8.11 37 XM_Multi_Part_URI 21 10.09 16.67 8.11 38 RELAYCOUNTRY_META 21 16.62 44.87 8.11 39 RCVD_IN_MSPIKE_H3 21 10.68 19.23 8.11 40 RCVD_IN_MSPIKE_H5 21 6.53 1.28 8.11 41 BAYES_60 20 8.31 10.26 7.72 42 TooManyTo_001 19 8.01 10.26 7.34 43 BAYES_00 16 5.04 1.28 6.18 44 BAYES_40 16 5.64 3.85 6.18 45 LotsOfNums_01 15 5.34 3.85 5.79 46 TR_XM_BayesUnsub 15 8.90 19.23 5.79 47 XMNumbers 14 6.23 8.97 5.41 48 UNTRUSTED_Relay 14 11.28 30.77 5.41 49 XM_B_SpammyWords2 12 11.57 34.62 4.63 50 MAILING_LIST_MULTI 12 3.86 1.28 4.63 51 XM_UB50 12 7.12 15.38 4.63 52 IN_ZIMBRA_NJ_WHITELIST 12 3.56 0.00 4.63 53 MIME_QP_LONG_LINE 11 3.26 0.00 4.25 54 BOTNET_IPINHOSTNAME 11 7.12 16.67 4.25 55 T_TooManySym_01 11 3.56 1.28 4.25 56 XM_UncommonTLD01 11 7.12 16.67 4.25 57 USER_IN_DEF_DKIM_WL 11 3.26 0.00 4.25 58 BAYES_80 10 6.53 15.38 3.86 59 TR_XM_DK_Bayes1 10 3.26 1.28 3.86 60 TR_XM_DK_Bayes 10 3.26 1.28 3.86 61 T_REMOTE_IMAGE 9 3.86 5.13 3.47 62 HTML_IMAGE_RATIO_04 9 2.97 1.28 3.47 63 TooManyTo_002 9 4.15 6.41 3.47 64 LOTS_OF_MONEY 9 6.23 15.38 3.47 65 XMStrtUSub 9 3.26 2.56 3.47 66 TR_XM_DK_Bayes2 9 2.97 1.28 3.47 67 XM_H_Long_From01 9 4.45 7.69 3.47 68 RCVD_IN_MSPIKE_H4 9 3.86 5.13 3.47 69 T_TooManySym_02 8 2.67 1.28 3.09 70 DKIM_INVALID 8 2.97 2.56 3.09 71 RELAYCOUNTRY_TW 8 2.37 0.00 3.09 72 TooManyTo_004 8 3.86 6.41 3.09 73 TooManyTo_003 8 3.86 6.41 3.09 74 BAYES_05 7 2.37 1.28 2.70 75 XM_SPF_SoftFail 7 3.86 7.69 2.70 76 XM_Evil_Numbers_Gen 7 5.93 16.67 2.70 77 TR_XM_SpammyRelay 7 9.20 30.77 2.70 78 XMBody_78 7 2.67 2.56 2.70 79 XM_PDF 7 2.08 0.00 2.70 80 HTML_IMAGE_ONLY_28 6 2.67 3.85 2.32 81 XM_H_PHPMailer 6 2.37 2.56 2.32 82 XM_DK_Undo_02 6 8.31 28.21 2.32 83 INVALID_MSGID 6 2.08 1.28 2.32 84 RELAYCOUNTRY_AU 6 2.67 3.85 2.32 85 HTML_IMAGE_RATIO_06 6 2.08 1.28 2.32 86 XM_B_SpammyTLD 6 3.86 8.97 2.32 87 DKIM_ADSP_CUSTOM_MED 5 2.08 2.56 1.93 88 TVD_SPACE_RATIO 5 1.78 1.28 1.93 89 IN_HORDE_ADDRESS_BOOK 5 1.48 0.00 1.93 90 XMSubMetaSx_00 5 2.97 6.41 1.93 91 XM_B_SpammyWords3 5 6.53 21.79 1.93 92 TR_XM_PhishingBody 5 3.26 7.69 1.93 93 XM_DIRTYINTL 5 3.26 7.69 1.93 94 BAYES_95 5 2.37 3.85 1.93 95 TO_MALFORMED 5 1.48 0.00 1.93 96 XMBody_95 4 1.19 0.00 1.54 97 XM_ProductURIs 4 1.48 1.28 1.54 98 XM_H_Undi_Recip 4 2.08 3.85 1.54 99 NML_ADSP_CUSTOM_MED 4 1.78 2.56 1.54 100 XM_SendGrid 4 1.19 0.00 1.54 101 XMSexyCombo_05 4 3.26 8.97 1.54 102 TR_MetaPhish_Combo_01 4 3.26 8.97 1.54 103 HTML_MIME_NO_HTML_TAG 4 2.97 7.69 1.54 104 XM_ShortIntro_01 4 1.19 0.00 1.54 105 TR_XM_DK_SendGrid 4 1.19 0.00 1.54 106 BOTNET 4 5.93 20.51 1.54 107 HK_RANDOM_ENVFROM 4 1.19 0.00 1.54 108 XM_ZIP 4 1.19 0.00 1.54 109 MIME_HTML_MOSTLY 4 3.86 11.54 1.54 110 XMHTML_After_End 4 1.19 0.00 1.54 111 RCVD_IN_PSBL 4 2.97 7.69 1.54 112 XM_B_Phish_Phrases 4 2.97 7.69 1.54 113 HTML_IMAGE_ONLY_20 3 0.89 0.00 1.16 114 HK_RANDOM_FROM 3 0.89 0.00 1.16 115 URI_NOVOWEL 3 0.89 0.00 1.16 116 USER_IN_WHITELIST 3 0.89 0.00 1.16 117 XM_H_Long_From02 3 1.19 1.28 1.16 118 RCVD_IN_IADB_SPF 3 1.48 2.56 1.16 119 MPART_ALT_DIFF 3 3.26 10.26 1.16 120 XMGappySubj_01 3 0.89 0.00 1.16 121 HTML_IMAGE_RATIO_02 3 1.48 2.56 1.16 122 XM_B_Unsub2 3 1.48 2.56 1.16 123 XMPhish14 3 2.08 5.13 1.16 124 RCVD_IN_IADB_LISTED 3 1.48 2.56 1.16 125 XM_Body_Obfu01 3 0.89 0.00 1.16 126 USER_IN_WELCOMELIST 3 0.89 0.00 1.16 127 TVD_RCVD_IP 3 1.19 1.28 1.16 128 LONG_JUNK_URI3 3 0.89 0.00 1.16 129 FROM_GOV_DKIM_AU 2 0.59 0.00 0.77 130 XMSubPhish11 2 1.19 2.56 0.77 131 T_TooManySym_03 2 0.59 0.00 0.77 132 BAYES_99 2 3.56 12.82 0.77 133 XM_ZohoDesk1 2 0.59 0.00 0.77 134 XMBSHREFv2 2 0.59 0.00 0.77 135 XMGenDplmaNmb 2 0.89 1.28 0.77 136 XMSolicitRefs_0 2 0.59 0.00 0.77 137 MSGID_NOFQDN1 2 0.59 0.00 0.77 138 T_XMDrugObfuBody_14 2 2.67 8.97 0.77 139 TR_XM_PHPDW 2 2.08 6.41 0.77 140 XM_B_Phish66 2 0.59 0.00 0.77 141 TR_XM_Spammywords 2 0.59 0.00 0.77 142 XMSubject_60 2 0.59 0.00 0.77 143 TR_Mismatch_TLD_02 2 1.19 2.56 0.77 144 TR_XM_Undi_Recip14 2 0.59 0.00 0.77 145 TR_XM_FormFill2 2 1.78 5.13 0.77 146 GMD_PDF_SQUARE 2 0.59 0.00 0.77 147 RCVD_IN_IADB_DK 2 1.19 2.56 0.77 148 XM_H_SpoofStaff4 2 0.59 0.00 0.77 149 XMSpoofStaff2 2 0.59 0.00 0.77 150 XMSubMetaSSx_00 2 1.19 2.56 0.77 151 XM_GoogleGroups 2 0.89 1.28 0.77 152 XM_H_PHPOS 2 1.78 5.13 0.77 153 TR_Symld_Words 2 0.89 1.28 0.77 154 TR_XM_SB_Phish 2 1.19 2.56 0.77 155 XM_H_PHPOS_M 2 0.89 1.28 0.77 156 XMDiploma_00 2 1.48 3.85 0.77 157 TR_XM_PHPForged 2 1.78 5.13 0.77 158 XMSubNoVowel 2 0.59 0.00 0.77 159 MISSING_HEADERS 2 0.59 0.00 0.77 160 RELAYCOUNTRY_AT 2 3.26 11.54 0.77 161 XMLngstWrd_00 2 0.59 0.00 0.77 162 TR_XM_PSC1 2 0.59 0.00 0.77 163 SUBJ_ALL_CAPS 2 1.19 2.56 0.77 164 XMGappySubj_02 2 0.59 0.00 0.77 165 RCVD_IN_IADB_SENDERID 2 1.19 2.56 0.77 166 KHOP_HELO_FCRDNS 2 1.19 2.56 0.77 167 FROM_GOV_SPOOF 2 0.89 1.28 0.77 168 TR_XM_SpoofStaff 2 0.59 0.00 0.77 169 XM_CamelCaseFrm001 2 0.59 0.00 0.77 170 XM_S_SpammyWords 2 0.59 0.00 0.77 171 TR_XM_SpammyWords4 2 3.86 14.10 0.77 172 BAYES_999 2 2.67 8.97 0.77 173 TR_XM_SpoofPhishAttach 2 0.59 0.00 0.77 174 XM_B_Investor 1 0.89 2.56 0.39 175 XMSexyCombo_01 1 0.89 2.56 0.39 176 XM_H_Trusted_IP 1 0.30 0.00 0.39 177 XMBody_17 1 1.48 5.13 0.39 178 TR_XM_Undi_Recip2 1 0.30 0.00 0.39 179 MIME_HTML_ONLY_MULTI 1 1.48 5.13 0.39 180 DRUGS_DIET 1 0.30 0.00 0.39 181 FILL_THIS_FORM_LOAN 1 0.30 0.00 0.39 182 TVD_PH_BODY_ACCOUNTS_PRE 1 0.30 0.00 0.39 183 RCVD_IN_MSPIKE_BL 1 2.67 10.26 0.39 184 XMLngstWrd_03 1 0.30 0.00 0.39 185 MPART_ALT_DIFF_COUNT 1 0.89 2.56 0.39 186 RCVD_IN_IADB_OPTIN 1 0.89 2.56 0.39 187 RCVD_DOTEDU_SHORT 1 0.30 0.00 0.39 188 DRUG_ED_CAPS 1 0.30 0.00 0.39 189 RCVD_IN_VALIDITY_RPBL 1 1.78 6.41 0.39 190 HTML_IMAGE_ONLY_24 1 0.89 2.56 0.39 191 XMRcvdHeader_15 1 0.30 0.00 0.39 192 XMLngstWrd_02 1 0.30 0.00 0.39 193 XMLngstWrd_04 1 0.30 0.00 0.39 194 TO_NO_BRKTS_HTML_ONLY 1 0.30 0.00 0.39 195 HDRS_MISSP 1 0.30 0.00 0.39 196 XMBdyGiftCard01 1 0.30 0.00 0.39 197 T_XMDrugObfuBody_00 1 0.30 0.00 0.39 198 RELAYCOUNTRY_FR 1 0.30 0.00 0.39 199 FROM_EXCESS_BASE64 1 0.30 0.00 0.39 200 STY_INVIS_DIRECT 1 0.59 1.28 0.39 ----------------------------------------------------------------------