Email: 197 Autolearn: 0 AvgScore: 3.09 AvgScanTime: 1.01 sec Spam: 56 Autolearn: 0 AvgScore: 16.48 AvgScanTime: 0.92 sec Ham: 141 Autolearn: 0 AvgScore: -2.23 AvgScanTime: 1.04 sec Time Spent Running SA: 0.06 hours Time Spent Processing Spam: 0.01 hours Time Spent Processing Ham: 0.04 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 56 100.00 100.00 100.00 2 DKIM_SIGNED 54 84.77 96.43 80.14 3 XM_DK_Pass 54 83.76 96.43 78.72 4 DKIM_VALID 54 65.48 96.43 53.19 5 RELAYCOUNTRY_US 48 82.74 85.71 81.56 6 DKIM_VALID_AU 43 52.79 76.79 43.26 7 HTML_MESSAGE 41 79.70 73.21 82.27 8 RCVD_IN_MSPIKE_H2 36 36.55 64.29 25.53 9 XM_B_SpammyWords 35 36.55 62.50 26.24 10 XM_B_Unicode 33 64.47 58.93 66.67 11 XMListUnsubscribeExists 30 53.30 53.57 53.19 12 DKIM_VALID_EF 29 34.01 51.79 26.95 13 BAYES_50 25 40.61 44.64 39.01 14 XM_B_SpammyWords2 23 16.24 41.07 6.38 15 MIME_HTML_ONLY 21 18.27 37.50 10.64 16 XM_B_Unicode3 21 40.10 37.50 41.13 17 XM_DK_Undo_02 21 20.81 37.50 14.18 18 XMSubLong 18 35.03 32.14 36.17 19 LOTS_OF_MONEY 18 11.17 32.14 2.84 20 FVGT_m_MULTI_ODD 18 20.81 32.14 16.31 21 TR_XM_SpammyWords4 17 9.64 30.36 1.42 22 TR_XM_DKIM_Undo 17 9.64 30.36 1.42 23 HTML_FONT_LOW_CONTRAST 17 41.62 30.36 46.10 24 RELAYCOUNTRY_META 16 11.68 28.57 4.96 25 XM_Body_Dirty_Words 16 12.18 28.57 5.67 26 TR_XM_Undi_Recip5 15 7.61 26.79 0.00 27 RCVD_IN_MSPIKE_WL 15 16.75 26.79 12.77 28 XM_H_Undi_Recip 15 7.61 26.79 0.00 29 TR_XM_Undi_Recip11 15 7.61 26.79 0.00 30 BAYES_99 15 11.68 26.79 5.67 31 TR_XM_Undi_RecipCombo2 14 7.11 25.00 0.00 32 TR_XM_Undi_Recip2 14 7.11 25.00 0.00 33 TR_XM_SpammyWords5 14 7.61 25.00 0.71 34 UNDISC_MONEY 14 7.11 25.00 0.00 35 SUBJ_ALL_CAPS 13 8.63 23.21 2.84 36 XM_OfRef6 13 6.60 23.21 0.00 37 XM_OfRef7 13 6.60 23.21 0.00 38 MONEY_FRAUD_3 12 6.09 21.43 0.00 39 XM_OfRef8 12 6.09 21.43 0.00 40 FILL_THIS_FORM 12 6.60 21.43 0.71 41 MONEY_FORM 12 6.09 21.43 0.00 42 TR_XM_Undi_Recip12 12 6.09 21.43 0.00 43 DEAR_SOMETHING 12 6.09 21.43 0.00 44 TR_XM_Undi_RecipCombo4 12 6.09 21.43 0.00 45 ADVANCE_FEE_4_NEW_FRM_MNY 12 6.09 21.43 0.00 46 TR_Sbj_FN_Bdy 12 6.60 21.43 0.71 47 TR_XM_Undi_Recip9 12 6.09 21.43 0.00 48 TR_XM_Undi_RecipCombo3 12 6.09 21.43 0.00 49 MONEY_ATM_CARD 12 6.09 21.43 0.00 50 LOC_TINY_FONT_1 11 30.96 19.64 35.46 51 XM_UncommonTLD01 11 8.12 19.64 3.55 52 RCVD_IN_MSPIKE_H3 11 11.17 19.64 7.80 53 TR_Caps_n_Bayes_99 11 5.58 19.64 0.00 54 XMSexyCombo_05 11 6.09 19.64 0.71 55 HTML_MIME_NO_HTML_TAG 11 8.12 19.64 3.55 56 BAYES_999 11 8.63 19.64 4.26 57 HTML_TITLE_SUBJ_DIFF 10 5.58 17.86 0.71 58 TR_XM_SpammyWords2 10 5.08 17.86 0.00 59 XM_GoogleGroups 10 5.58 17.86 0.71 60 MIME_HTML_ONLY_MULTI 10 6.09 17.86 1.42 61 XMLngstWrd_02 10 5.58 17.86 0.71 62 TR_XM_Undi_RecipCombo5 10 5.08 17.86 0.00 63 TR_XM_Undi_Recip6 10 5.08 17.86 0.00 64 MPART_ALT_DIFF 10 6.09 17.86 1.42 65 XMLngstWrd_04 10 5.58 17.86 0.71 66 XMLngstWrd_00 10 6.09 17.86 1.42 67 UPPERCASE_75_100 10 5.58 17.86 0.71 68 XMLngstWrd_01 10 5.58 17.86 0.71 69 TM2_M_VERY_LONG_WORD 10 6.09 17.86 1.42 70 XMLngstWrd_03 10 5.58 17.86 0.71 71 T_TM2_M_HEADER_IN_MSG 9 17.77 16.07 18.44 72 XM_B_Unsub 8 16.24 14.29 17.02 73 XM_Multi_Part_URI 8 28.93 14.29 34.75 74 TR_XM_BayesUnsub 8 9.14 14.29 7.09 75 SpammyFromTLD_02 8 4.06 14.29 0.00 76 UNPARSEABLE_RELAY 7 9.14 12.50 7.80 77 BOTNET_IPINHOSTNAME 7 12.69 12.50 12.77 78 TR_XM_SpammyRelay 7 6.09 12.50 3.55 79 BAYES_80 7 4.06 12.50 0.71 80 BAYES_60 6 8.12 10.71 7.09 81 XM_Evil_Numbers_Gen 5 9.14 8.93 9.22 82 XM_DIRTYINTL 5 3.05 8.93 0.71 83 XM_B_SpammyWords3 5 3.55 8.93 1.42 84 BOTNET 5 8.63 8.93 8.51 85 TR_XM_UnparsRelay 5 4.06 8.93 2.13 86 TR_XM_NoHeaderRelay 4 2.03 7.14 0.00 87 RELAYCOUNTRY_DE 4 2.03 7.14 0.00 88 UNTRUSTED_Relay 4 2.54 7.14 0.71 89 T_KAM_HTML_FONT_INVALID 4 11.68 7.14 13.48 90 XMNumbers 3 7.11 5.36 7.80 91 HTML_IMAGE_RATIO_04 3 4.57 5.36 4.26 92 XM_B_Phish_Phrases 3 3.55 5.36 2.84 93 RELAYCOUNTRY_AU 3 2.54 5.36 1.42 94 RCVD_IN_MSPIKE_H4 3 4.57 5.36 4.26 95 BAYES_95 3 2.54 5.36 1.42 96 XM_B_SpammyTLD 3 3.05 5.36 2.13 97 TM2_M_URI_OPT_OUT 3 1.52 5.36 0.00 98 XM_SendGrid 3 5.08 5.36 4.96 99 SpammyFromTLD_01 2 1.52 3.57 0.71 100 TVD_RCVD_IP 2 4.57 3.57 4.96 101 RDNS_DYNAMIC 2 1.02 3.57 0.00 102 SHOPIFY_IMG_NOT_RCVD_SFY 2 1.52 3.57 0.71 103 PDS_RDNS_DYNAMIC_FP 2 1.02 3.57 0.00 104 TR_LOTS_OF_MONEY2 2 1.52 3.57 0.71 105 XM_Attn_01 2 1.52 3.57 0.71 106 TR_XM_PhishingBody 2 6.09 3.57 7.09 107 MIME_QP_LONG_LINE 2 3.55 3.57 3.55 108 XM_H_Long_From01 2 4.06 3.57 4.26 109 XM_SPF_SoftFail 2 1.52 3.57 0.71 110 XM_UB99 2 1.02 3.57 0.00 111 T_MONEY_PERCENT 2 1.52 3.57 0.71 112 RELAYCOUNTRY_TR 2 1.02 3.57 0.00 113 MAILING_LIST_MULTI 2 2.03 3.57 1.42 114 RCVD_IN_BL_SPAMCOP_NET 2 1.02 3.57 0.00 115 XM_B_SpammyWords4 2 1.02 3.57 0.00 116 HELO_DYNAMIC_SPLIT_IP 2 1.02 3.57 0.00 117 T_XMDrugObfuBody_08 2 1.52 3.57 0.71 118 XMPhish08 2 1.02 3.57 0.00 119 XM_B_Investor 2 1.02 3.57 0.00 120 TR_Caps_n_Bayes_95 2 1.02 3.57 0.00 121 RELAYCOUNTRY_IE 2 1.52 3.57 0.71 122 URI_TRY_3LD 2 1.02 3.57 0.00 123 LotsOfNums_01 2 21.83 3.57 29.08 124 TR_XM_SPAMCOP 2 1.02 3.57 0.00 125 HTML_IMAGE_RATIO_02 2 2.54 3.57 2.13 126 XMSubMetaD_00 2 1.02 3.57 0.00 127 XM_RECPTID 1 0.51 1.79 0.00 128 MILLION_USD 1 0.51 1.79 0.00 129 FUZZY_BITCOIN 1 0.51 1.79 0.00 130 XMSubMetaSSx_00 1 0.51 1.79 0.00 131 FORM_FRAUD_5 1 0.51 1.79 0.00 132 NML_ADSP_CUSTOM_MED 1 1.52 1.79 1.42 133 DRUGS_MUSCLE 1 0.51 1.79 0.00 134 FORGED_GMAIL_RCVD 1 0.51 1.79 0.00 135 XM_TLDProd1 1 0.51 1.79 0.00 136 XM_H_PHPOS 1 1.02 1.79 0.71 137 HTML_IMAGE_ONLY_28 1 1.02 1.79 0.71 138 TM2_M_A_HREF_HREF 1 0.51 1.79 0.00 139 XM_URI_RBL 1 1.52 1.79 1.42 140 MIME_HTML_MOSTLY 1 1.02 1.79 0.71 141 RCVD_IN_MSPIKE_H5 1 1.02 1.79 0.71 142 HELO_NO_DOMAIN 1 1.02 1.79 0.71 143 RELAYCOUNTRY_NL 1 0.51 1.79 0.00 144 HTML_IMAGE_ONLY_08 1 0.51 1.79 0.00 145 XM_CamelCaseFrm001 1 1.52 1.79 1.42 146 BOTNET_NORDNS 1 0.51 1.79 0.00 147 XMClaimOffer 1 0.51 1.79 0.00 148 XM_DK_Undo_01 1 1.52 1.79 1.42 149 KHOP_HELO_FCRDNS 1 0.51 1.79 0.00 150 DKIM_ADSP_CUSTOM_MED 1 1.52 1.79 1.42 151 XMCmmnCold 1 0.51 1.79 0.00 152 TR_XM_FormFill2 1 1.02 1.79 0.71 153 CK_HELO_GENERIC 1 0.51 1.79 0.00 154 RELAYCOUNTRY_GB 1 1.02 1.79 0.71 155 XMNoVowels 1 1.02 1.79 0.71 156 FSL_HELO_NON_FQDN_1 1 0.51 1.79 0.00 157 XMSubMetaSx_00 1 2.54 1.79 2.84 158 XMBody_17 1 0.51 1.79 0.00 159 NOT_SPAM 1 0.51 1.79 0.00 160 T_XMDrugObfuBody_14 1 1.02 1.79 0.71 161 DIET_1 1 1.02 1.79 0.71 162 XM_UB999 1 0.51 1.79 0.00 163 TR_MetaPhish_Combo_01 1 0.51 1.79 0.00 164 T_FILL_THIS_FORM_SHORT 1 1.52 1.79 1.42 165 RELAYCOUNTRY_RU 1 0.51 1.79 0.00 166 MONEY_FORM_SHORT 1 0.51 1.79 0.00 167 XM_H_PHPMailer 1 1.02 1.79 0.71 168 TR_XM_PHPDW 1 1.02 1.79 0.71 169 DEAR_BENEFICIARY 1 0.51 1.79 0.00 170 XM_TLDProd2 1 0.51 1.79 0.00 171 T_XMDrugObfuBody_00 1 0.51 1.79 0.00 172 XMHTML_After_End 1 0.51 1.79 0.00 173 HELO_NODOT 1 1.02 1.79 0.71 174 MONEY_FRAUD_8 1 0.51 1.79 0.00 175 XMSubject_63 1 0.51 1.79 0.00 176 RELAYCOUNTRY_BR 1 0.51 1.79 0.00 177 HTML_IMAGE_RATIO_06 1 2.03 1.79 2.13 178 XM_H_PHPOS_M 1 0.51 1.79 0.00 179 XM_UB50 1 1.02 1.79 0.71 180 ADVANCE_FEE_5_NEW_MONEY 1 0.51 1.79 0.00 181 XM_RXBody 1 1.02 1.79 0.71 182 RELAYCOUNTRY_CA 1 1.52 1.79 1.42 183 TR_XM_RelayPhish 1 0.51 1.79 0.00 184 IMPOTENCE 1 0.51 1.79 0.00 185 T_TooManySym_01 1 5.58 1.79 7.09 186 DRUG_ED_SILD 1 0.51 1.79 0.00 187 DEAR_FRIEND 1 0.51 1.79 0.00 188 MONEY_NOHTML 1 0.51 1.79 0.00 189 XM_UB60 1 0.51 1.79 0.00 190 DRUGS_ERECTILE 1 0.51 1.79 0.00 191 XMSexyCombo_01 1 0.51 1.79 0.00 192 XMSubMetaSSx_01 1 0.51 1.79 0.00 193 TR_XM_PHPForged 1 1.02 1.79 0.71 194 TR_XM_BayesRelay 1 0.51 1.79 0.00 195 URI_TRUNCATED 1 0.51 1.79 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 141 100.00 100.00 100.00 2 HTML_MESSAGE 116 79.70 73.21 82.27 3 RELAYCOUNTRY_US 115 82.74 85.71 81.56 4 DKIM_SIGNED 113 84.77 96.43 80.14 5 XM_DK_Pass 111 83.76 96.43 78.72 6 XM_B_Unicode 94 64.47 58.93 66.67 7 XMListUnsubscribeExists 75 53.30 53.57 53.19 8 DKIM_VALID 75 65.48 96.43 53.19 9 HTML_FONT_LOW_CONTRAST 65 41.62 30.36 46.10 10 DKIM_VALID_AU 61 52.79 76.79 43.26 11 XM_B_Unicode3 58 40.10 37.50 41.13 12 BAYES_50 55 40.61 44.64 39.01 13 BAYES_00 54 27.41 0.00 38.30 14 XMSubLong 51 35.03 32.14 36.17 15 LOC_TINY_FONT_1 50 30.96 19.64 35.46 16 TR_XM_DK_Bayes 50 25.38 0.00 35.46 17 XM_Multi_Part_URI 49 28.93 14.29 34.75 18 LotsOfNums_01 41 21.83 3.57 29.08 19 DKIM_INVALID 38 19.29 0.00 26.95 20 DKIM_VALID_EF 38 34.01 51.79 26.95 21 XM_B_SpammyWords 37 36.55 62.50 26.24 22 RCVD_IN_MSPIKE_H2 36 36.55 64.29 25.53 23 T_TM2_M_HEADER_IN_MSG 26 17.77 16.07 18.44 24 XM_B_Unsub 24 16.24 14.29 17.02 25 XM_B_REG_HTML 23 11.68 0.00 16.31 26 FVGT_m_MULTI_ODD 23 20.81 32.14 16.31 27 ALL_TRUSTED 20 10.15 0.00 14.18 28 XM_DK_Undo_02 20 20.81 37.50 14.18 29 TR_XM_DK_Bayes1 19 9.64 0.00 13.48 30 T_KAM_HTML_FONT_INVALID 19 11.68 7.14 13.48 31 TR_XM_DK_Bayes2 18 9.14 0.00 12.77 32 USER_IN_DEF_DKIM_WL 18 9.14 0.00 12.77 33 BOTNET_IPINHOSTNAME 18 12.69 12.50 12.77 34 RCVD_IN_MSPIKE_WL 18 16.75 26.79 12.77 35 MIME_HTML_ONLY 15 18.27 37.50 10.64 36 XM_DKIMWhitelistDomains 15 7.61 0.00 10.64 37 XMStrtUSub 13 6.60 0.00 9.22 38 XM_Evil_Numbers_Gen 13 9.14 8.93 9.22 39 BOTNET 12 8.63 8.93 8.51 40 UNPARSEABLE_RELAY 11 9.14 12.50 7.80 41 XMNumbers 11 7.11 5.36 7.80 42 IN_ZIMBRA_NJ_WHITELIST 11 5.58 0.00 7.80 43 RCVD_IN_MSPIKE_H3 11 11.17 19.64 7.80 44 BAYES_60 10 8.12 10.71 7.09 45 TR_XM_PhishingBody 10 6.09 3.57 7.09 46 TR_XM_BayesUnsub 10 9.14 14.29 7.09 47 XM_B_Phish66 10 5.08 0.00 7.09 48 T_TooManySym_02 10 5.08 0.00 7.09 49 T_TooManySym_01 10 5.58 1.79 7.09 50 FROM_GOV_DKIM_AU 9 4.57 0.00 6.38 51 XM_B_SpammyWords2 9 16.24 41.07 6.38 52 XMBSHREFv2 8 4.06 0.00 5.67 53 XM_Body_Dirty_Words 8 12.18 28.57 5.67 54 BAYES_99 8 11.68 26.79 5.67 55 TVD_RCVD_IP 7 4.57 3.57 4.96 56 RELAYCOUNTRY_META 7 11.68 28.57 4.96 57 TooManyTo_001 7 3.55 0.00 4.96 58 XM_SendGrid 7 5.08 5.36 4.96 59 HTML_IMAGE_RATIO_04 6 4.57 5.36 4.26 60 XM_H_Long_From01 6 4.06 3.57 4.26 61 RCVD_IN_MSPIKE_H4 6 4.57 5.36 4.26 62 BAYES_999 6 8.63 19.64 4.26 63 TR_XM_DK_SendGrid 6 3.05 0.00 4.26 64 XM_UncommonTLD01 5 8.12 19.64 3.55 65 TR_Symld_Words 5 2.54 0.00 3.55 66 MIME_QP_LONG_LINE 5 3.55 3.57 3.55 67 HTML_MIME_NO_HTML_TAG 5 8.12 19.64 3.55 68 TR_XM_SpammyRelay 5 6.09 12.50 3.55 69 SUBJ_ALL_CAPS 4 8.63 23.21 2.84 70 XMSubMetaSx_00 4 2.54 1.79 2.84 71 XM_B_Phish_Phrases 4 3.55 5.36 2.84 72 BAYES_20 4 2.03 0.00 2.84 73 XM_H_Trusted_IP 4 2.03 0.00 2.84 74 UPGRADE_MAILBOX 4 2.03 0.00 2.84 75 LOTS_OF_MONEY 4 11.17 32.14 2.84 76 INVALID_MSGID 4 2.03 0.00 2.84 77 BAYES_05 4 2.03 0.00 2.84 78 RCVD_IN_PSBL 3 1.52 0.00 2.13 79 HTML_IMAGE_ONLY_20 3 1.52 0.00 2.13 80 TO_MALFORMED 3 1.52 0.00 2.13 81 RCVD_IN_IADB_SPF 3 1.52 0.00 2.13 82 HTML_FONT_FACE_BAD 3 1.52 0.00 2.13 83 RCVD_IN_IADB_LISTED 3 1.52 0.00 2.13 84 HTML_IMAGE_RATIO_06 3 2.03 1.79 2.13 85 XM_B_Unsub2 3 1.52 0.00 2.13 86 MSGID_NOFQDN1 3 1.52 0.00 2.13 87 TR_XM_UnparsRelay 3 4.06 8.93 2.13 88 XM_B_SpammyTLD 3 3.05 5.36 2.13 89 T_TooManySym_03 3 1.52 0.00 2.13 90 TVD_SPACE_RATIO 3 1.52 0.00 2.13 91 HTML_IMAGE_RATIO_02 3 2.54 3.57 2.13 92 BAYES_40 3 1.52 0.00 2.13 93 RCVD_IN_IADB_SENDERID 3 1.52 0.00 2.13 94 T_REMOTE_IMAGE 3 1.52 0.00 2.13 95 RCVD_IN_IADB_DK 3 1.52 0.00 2.13 96 XMGappySubj_01 3 1.52 0.00 2.13 97 XM_DK_Undo_01 2 1.52 1.79 1.42 98 T_XMHurry_00 2 1.02 0.00 1.42 99 XM_CamelCaseFrm001 2 1.52 1.79 1.42 100 XMSubPhish11 2 1.02 0.00 1.42 101 XM_URI_RBL 2 1.52 1.79 1.42 102 NML_ADSP_CUSTOM_MED 2 1.52 1.79 1.42 103 MPART_ALT_DIFF 2 6.09 17.86 1.42 104 TR_XM_Base64_M1 2 1.02 0.00 1.42 105 XM_B_SpammyWords3 2 3.55 8.93 1.42 106 HTML_IMAGE_RATIO_08 2 1.02 0.00 1.42 107 TR_XM_Base64_M2 2 1.02 0.00 1.42 108 XMSubMetaSxObfu_02 2 1.02 0.00 1.42 109 TR_XM_Base64_M3 2 1.02 0.00 1.42 110 MIME_HTML_ONLY_MULTI 2 6.09 17.86 1.42 111 DKIM_ADSP_CUSTOM_MED 2 1.52 1.79 1.42 112 TR_XM_SpammyWords4 2 9.64 30.36 1.42 113 RELAYCOUNTRY_AU 2 2.54 5.36 1.42 114 TR_XM_DKIM_Undo 2 9.64 30.36 1.42 115 BOUNCE_MESSAGE 2 1.02 0.00 1.42 116 XMBody_29 2 1.02 0.00 1.42 117 FROM_EXCESS_BASE64 2 1.02 0.00 1.42 118 MAILING_LIST_MULTI 2 2.03 3.57 1.42 119 TR_XM_SB_Phish 2 1.02 0.00 1.42 120 T_FILL_THIS_FORM_SHORT 2 1.52 1.79 1.42 121 XMBody_95 2 1.02 0.00 1.42 122 FVGT_m_MULTI_ODD_EMAIL 2 1.02 0.00 1.42 123 ANY_BOUNCE_MESSAGE 2 1.02 0.00 1.42 124 RCVD_IN_VALIDITY_SAFE 2 1.02 0.00 1.42 125 XMLngstWrd_00 2 6.09 17.86 1.42 126 TooManyTo_002 2 1.02 0.00 1.42 127 HELO_STATIC_HOST 2 1.02 0.00 1.42 128 RCVD_IN_VALIDITY_CERTIFIED 2 1.02 0.00 1.42 129 XMStockSpam_06 2 1.02 0.00 1.42 130 RELAYCOUNTRY_CA 2 1.52 1.79 1.42 131 TM2_M_VERY_LONG_WORD 2 6.09 17.86 1.42 132 BAYES_95 2 2.54 5.36 1.42 133 XM_ZIP 2 1.02 0.00 1.42 134 XMNoSubject 1 0.51 0.00 0.71 135 RELAYCOUNTRY_FR 1 0.51 0.00 0.71 136 HELO_NO_DOMAIN 1 1.02 1.79 0.71 137 RCVD_IN_MSPIKE_H5 1 1.02 1.79 0.71 138 MIME_HTML_MOSTLY 1 1.02 1.79 0.71 139 TR_LOTS_OF_MONEY2 1 1.52 3.57 0.71 140 TO_NO_BRKTS_HTML_ONLY 1 0.51 0.00 0.71 141 SHOPIFY_IMG_NOT_RCVD_SFY 1 1.52 3.57 0.71 142 FILL_THIS_FORM 1 6.60 21.43 0.71 143 SpammyFromTLD_01 1 1.52 3.57 0.71 144 XMSubMetaSxObfu_03 1 0.51 0.00 0.71 145 HTML_TEXT_INVISIBLE_FONT 1 0.51 0.00 0.71 146 XM_GoogleGroups 1 5.58 17.86 0.71 147 HTML_IMAGE_ONLY_28 1 1.02 1.79 0.71 148 XM_H_PHPOS 1 1.02 1.79 0.71 149 CTE_8BIT_MISMATCH 1 0.51 0.00 0.71 150 TR_MSPIKEBAYES00 1 0.51 0.00 0.71 151 HTML_TITLE_SUBJ_DIFF 1 5.58 17.86 0.71 152 LOCALPART_IN_SUBJECT 1 0.51 0.00 0.71 153 XM_PDF 1 0.51 0.00 0.71 154 XMNoVowels 1 1.02 1.79 0.71 155 XM_SPF_SoftFail 1 1.52 3.57 0.71 156 RELAYCOUNTRY_GB 1 1.02 1.79 0.71 157 XM_S_SubURI 1 0.51 0.00 0.71 158 T_MONEY_PERCENT 1 1.52 3.57 0.71 159 DIET_1 1 1.02 1.79 0.71 160 T_XMDrugObfuBody_14 1 1.02 1.79 0.71 161 XMLngstWrd_02 1 5.58 17.86 0.71 162 USER_IN_WHITELIST 1 0.51 0.00 0.71 163 XM_Attn_01 1 1.52 3.57 0.71 164 TR_XM_FormFill2 1 1.02 1.79 0.71 165 USER_IN_WELCOMELIST 1 0.51 0.00 0.71 166 XM_DIRTYINTL 1 3.05 8.93 0.71 167 XMSubject_78 1 0.51 0.00 0.71 168 MPART_ALT_DIFF_COUNT 1 0.51 0.00 0.71 169 XMLngstWrd_01 1 5.58 17.86 0.71 170 UPPERCASE_75_100 1 5.58 17.86 0.71 171 FROM_GOV_SPOOF 1 0.51 0.00 0.71 172 T_XMDrugObfuBody_08 1 1.52 3.57 0.71 173 TR_Sbj_FN_Bdy 1 6.60 21.43 0.71 174 SHORT_HELO_AND_INLINE_IMAGE 1 0.51 0.00 0.71 175 T_OBFU_PDF_ATTACH 1 0.51 0.00 0.71 176 DKIM_ADSP_NXDOMAIN 1 0.51 0.00 0.71 177 XMSexyCombo_05 1 6.09 19.64 0.71 178 HELO_NODOT 1 1.02 1.79 0.71 179 UNTRUSTED_Relay 1 2.54 7.14 0.71 180 XMLngstWrd_04 1 5.58 17.86 0.71 181 XM_H_Long_From02 1 0.51 0.00 0.71 182 TR_XM_SpammyWords5 1 7.61 25.00 0.71 183 HTML_IMAGE_ONLY_32 1 0.51 0.00 0.71 184 TR_XM_PHPDW 1 1.02 1.79 0.71 185 J_POPCORN_WO_D 1 0.51 0.00 0.71 186 XM_H_PHPMailer 1 1.02 1.79 0.71 187 XM_Dr_From 1 0.51 0.00 0.71 188 XMSubEmpty 1 0.51 0.00 0.71 189 T_XMHurry_01 1 0.51 0.00 0.71 190 XMLngstWrd_03 1 5.58 17.86 0.71 191 TR_XM_PHPForged 1 1.02 1.79 0.71 192 NO_DNS_FOR_FROM 1 0.51 0.00 0.71 193 BAYES_80 1 4.06 12.50 0.71 194 RELAYCOUNTRY_IE 1 1.52 3.57 0.71 195 MISSING_SUBJECT 1 0.51 0.00 0.71 196 XM_UB50 1 1.02 1.79 0.71 197 NICE_REPLY_A 1 0.51 0.00 0.71 198 XM_RXBody 1 1.02 1.79 0.71 199 HDRS_MISSP 1 0.51 0.00 0.71 200 NORDNS_LOW_CONTRAST 1 0.51 0.00 0.71 ----------------------------------------------------------------------