Email: 127 Autolearn: 0 AvgScore: 4.10 AvgScanTime: 4.10 sec Spam: 46 Autolearn: 0 AvgScore: 13.50 AvgScanTime: 4.00 sec Ham: 81 Autolearn: 0 AvgScore: -1.23 AvgScanTime: 4.15 sec Time Spent Running SA: 0.14 hours Time Spent Processing Spam: 0.05 hours Time Spent Processing Ham: 0.09 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 44 85.83 95.65 80.25 2 XM_DK_Pass 38 72.44 82.61 66.67 3 DKIM_SIGNED 38 74.02 82.61 69.14 4 DKIM_VALID 36 68.50 78.26 62.96 5 RELAYCOUNTRY_US 35 77.95 76.09 79.01 6 DCC_CHECK_NEGATIVE 32 78.74 69.57 83.95 7 DKIM_VALID_AU 30 56.69 65.22 51.85 8 XM_B_Unicode 28 62.99 60.87 64.20 9 XM_B_SpammyWords 26 48.03 56.52 43.21 10 XMListUnsubscribeExists 24 44.09 52.17 39.51 11 LOC_TINY_FONT_1 21 29.92 45.65 20.99 12 XM_B_Unicode3 19 41.73 41.30 41.98 13 MIME_HTML_ONLY 17 30.71 36.96 27.16 14 XMSubLong 17 33.86 36.96 32.10 15 BAYES_50 17 47.24 36.96 53.09 16 HTML_FONT_LOW_CONTRAST 16 29.13 34.78 25.93 17 RELAYCOUNTRY_META 16 15.75 34.78 4.94 18 FVGT_m_MULTI_ODD 15 22.05 32.61 16.05 19 XM_DK_Undo_02 14 14.17 30.43 4.94 20 DCC_CHECK 14 21.26 30.43 16.05 21 DKIM_VALID_EF 13 27.56 28.26 27.16 22 XM_B_SpammyWords2 13 22.83 28.26 19.75 23 RCVD_IN_MSPIKE_WL 12 31.50 26.09 34.57 24 BAYES_99 12 13.39 26.09 6.17 25 XM_Body_Dirty_Words 11 16.54 23.91 12.35 26 XM_B_Unsub 11 13.39 23.91 7.41 27 BAYES_999 10 11.02 21.74 4.94 28 TR_XM_SpammyRelay 10 10.24 21.74 3.70 29 BAYES_80 10 7.87 21.74 0.00 30 UNTRUSTED_Relay 10 8.66 21.74 1.23 31 RCVD_IN_MSPIKE_H3 10 21.26 21.74 20.99 32 XM_Multi_Part_URI 10 14.96 21.74 11.11 33 RCVD_IN_MSPIKE_H2 9 15.75 19.57 13.58 34 TR_XM_DKIM_Undo 9 8.66 19.57 2.47 35 XM_UncommonTLD01 8 10.24 17.39 6.17 36 TR_XM_BayesUnsub 8 7.87 17.39 2.47 37 TR_DCC_Bayes_99 6 4.72 13.04 0.00 38 XMNoVowels 6 4.72 13.04 0.00 39 T_KAM_HTML_FONT_INVALID 6 14.96 13.04 16.05 40 RCVD_IN_BL_SPAMCOP_NET 6 4.72 13.04 0.00 41 FROM_EXCESS_BASE64 6 4.72 13.04 0.00 42 BOTNET 6 4.72 13.04 0.00 43 XMBody_78 6 6.30 13.04 2.47 44 MPART_ALT_DIFF 5 11.02 10.87 11.11 45 XM_B_SpammyWords3 5 6.30 10.87 3.70 46 MIME_HTML_ONLY_MULTI 5 11.02 10.87 11.11 47 HTML_MIME_NO_HTML_TAG 5 6.30 10.87 3.70 48 TooManyTo_001 5 7.09 10.87 4.94 49 PDS_OTHER_BAD_TLD 5 3.94 10.87 0.00 50 NO_DNS_FOR_FROM 5 3.94 10.87 0.00 51 RCVD_IN_PSBL 5 3.94 10.87 0.00 52 XMLngstWrd_02 4 3.15 8.70 0.00 53 HTML_IMAGE_ONLY_12 4 3.94 8.70 1.23 54 XM_GoogleGroups 4 3.94 8.70 1.23 55 T_XMHurry_00 4 3.15 8.70 0.00 56 UPPERCASE_75_100 4 3.15 8.70 0.00 57 TR_XM_Spammywords 4 3.15 8.70 0.00 58 XM_B_Investor 4 3.94 8.70 1.23 59 MIME_HTML_MOSTLY 4 3.94 8.70 1.23 60 TM2_M_VERY_LONG_WORD 4 4.72 8.70 2.47 61 BOTNET_IPINHOSTNAME 4 7.09 8.70 6.17 62 XMNumbers 4 5.51 8.70 3.70 63 HTML_IMAGE_RATIO_02 4 3.15 8.70 0.00 64 FSL_BULK_SIG 4 3.15 8.70 0.00 65 XMLngstWrd_01 4 3.15 8.70 0.00 66 LotsOfNums_01 4 7.87 8.70 7.41 67 HTML_TITLE_SUBJ_DIFF 4 3.15 8.70 0.00 68 TR_XM_PhishingBody 4 4.72 8.70 2.47 69 HTML_SHORT_LINK_IMG_2 4 3.15 8.70 0.00 70 XMLngstWrd_04 4 3.15 8.70 0.00 71 DKIM_ADSP_NXDOMAIN 4 3.15 8.70 0.00 72 TR_XM_DK_Unsub 4 9.45 8.70 9.88 73 TR_XM_SpammyWords5 4 3.15 8.70 0.00 74 SpammyFromTLD_01 4 3.15 8.70 0.00 75 RELAYCOUNTRY_RU 4 3.15 8.70 0.00 76 RCVD_IN_SORBS_DUL 4 3.15 8.70 0.00 77 TR_XM_NoHeaderRelay 4 3.15 8.70 0.00 78 UNPARSEABLE_RELAY 4 4.72 8.70 2.47 79 KHOP_HELO_FCRDNS 4 5.51 8.70 3.70 80 XMLngstWrd_03 4 3.15 8.70 0.00 81 XM_S_SpammyWords 4 3.15 8.70 0.00 82 XMLngstWrd_00 4 3.94 8.70 1.23 83 BAYES_40 3 6.30 6.52 6.17 84 XM_UB50 3 2.36 6.52 0.00 85 HTML_TAG_BALANCE_CENTER 3 2.36 6.52 0.00 86 TR_Symld_Words 3 3.15 6.52 1.23 87 TR_XM_SpammyWords2 3 3.94 6.52 2.47 88 SCRIPT_GIBBERISH 3 2.36 6.52 0.00 89 XM_B_Phish66 3 3.94 6.52 2.47 90 T_Symld_Words_02 3 3.15 6.52 1.23 91 XMSubMetaSx_00 3 6.30 6.52 6.17 92 RCVD_IN_MSPIKE_H4 2 6.30 4.35 7.41 93 TR_XM_INV_DKIM 2 1.57 4.35 0.00 94 TooManyTo_003 2 1.57 4.35 0.00 95 XM_Evil_Numbers_Gen 2 4.72 4.35 4.94 96 XM_SendGrid 2 2.36 4.35 1.23 97 SpammyFromTLD_02 2 1.57 4.35 0.00 98 TR_XM_SPAMCOP 2 1.57 4.35 0.00 99 XM_B_SpammyTLD 2 3.94 4.35 3.70 100 TooManyTo_004 2 1.57 4.35 0.00 101 HTML_IMAGE_RATIO_06 2 7.87 4.35 9.88 102 XM_SPF_SoftFail 2 1.57 4.35 0.00 103 LOTS_OF_MONEY 2 4.72 4.35 4.94 104 TR_XM_UnparsRelay 2 1.57 4.35 0.00 105 T_TM2_M_HEADER_IN_MSG 2 19.69 4.35 28.40 106 DKIM_INVALID 2 5.51 4.35 6.17 107 MISSING_HEADERS 2 1.57 4.35 0.00 108 RELAYCOUNTRY_NZ 2 1.57 4.35 0.00 109 BAYES_60 2 10.24 4.35 13.58 110 TR_XM_SpammyWords4 2 3.94 4.35 3.70 111 TooManyTo_002 2 1.57 4.35 0.00 112 XM_UB99 2 1.57 4.35 0.00 113 TR_XM_MaxWHORU 2 1.57 4.35 0.00 114 XMSexyCombo_05 2 2.36 4.35 1.23 115 TO_NO_BRKTS_HTML_IMG 1 0.79 2.17 0.00 116 XMPhish08 1 0.79 2.17 0.00 117 FILL_THIS_FORM 1 0.79 2.17 0.00 118 TR_XM_FormFill2 1 0.79 2.17 0.00 119 RELAYCOUNTRY_AU 1 1.57 2.17 1.23 120 RCVD_IN_VALIDITY_CERTIFIED 1 0.79 2.17 0.00 121 RELAYCOUNTRY_AT 1 0.79 2.17 0.00 122 XM_UB999 1 0.79 2.17 0.00 123 TM2_M_URI_OPT_OUT 1 0.79 2.17 0.00 124 BAYES_20 1 5.51 2.17 7.41 125 XM_H_Long_From02 1 0.79 2.17 0.00 126 RELAYCOUNTRY_SE 1 0.79 2.17 0.00 127 SUBJ_BUY 1 0.79 2.17 0.00 128 T_XMDrugObfuBody_00 1 1.57 2.17 1.23 129 XMStrtUSub 1 4.72 2.17 6.17 130 RELAYCOUNTRY_CA 1 1.57 2.17 1.23 131 RELAYCOUNTRY_BM 1 0.79 2.17 0.00 132 FROM_GOV_SPOOF 1 1.57 2.17 1.23 133 TR_XM_Base64_L1 1 0.79 2.17 0.00 134 TooManyTo_005 1 0.79 2.17 0.00 135 TR_Mismatch_TLD_02 1 0.79 2.17 0.00 136 XMStockSpam_06 1 0.79 2.17 0.00 137 RELAYCOUNTRY_ID 1 0.79 2.17 0.00 138 TR_XM_PHPForged 1 0.79 2.17 0.00 139 TR_XM_MSPIKECOMBO 1 0.79 2.17 0.00 140 PDS_RDNS_DYNAMIC_FP 1 0.79 2.17 0.00 141 RCVD_IN_MSPIKE_BL 1 0.79 2.17 0.00 142 XM_DK_Undo_01 1 0.79 2.17 0.00 143 SUBJ_OBFU_PUNCT_FEW 1 0.79 2.17 0.00 144 TR_XM_Base64_M2 1 0.79 2.17 0.00 145 T_TooManySym_02 1 7.09 2.17 9.88 146 XM_LIGHT_HEAVY 1 0.79 2.17 0.00 147 T_TooManySym_01 1 9.45 2.17 13.58 148 TR_XM_Base64_M1 1 0.79 2.17 0.00 149 HTML_IMAGE_RATIO_08 1 0.79 2.17 0.00 150 XM_B_Phish_Phrases 1 7.09 2.17 9.88 151 HTML_IMAGE_RATIO_04 1 3.15 2.17 3.70 152 FUZZY_XPILL 1 0.79 2.17 0.00 153 HTML_IMAGE_ONLY_28 1 0.79 2.17 0.00 154 XM_OfRef6 1 0.79 2.17 0.00 155 RELAYCOUNTRY_TR 1 0.79 2.17 0.00 156 FONT_INVIS_MSGID 1 0.79 2.17 0.00 157 CHARSET_FARAWAY_HEADER 1 0.79 2.17 0.00 158 RCVD_IN_MSPIKE_L4 1 0.79 2.17 0.00 159 RCVD_IN_VALIDITY_SAFE 1 0.79 2.17 0.00 160 BAYES_95 1 1.57 2.17 1.23 161 XM_B_Crypto 1 0.79 2.17 0.00 162 TO_EQ_FM_DIRECT_MX 1 0.79 2.17 0.00 163 TR_XM_DK_SendGrid 1 0.79 2.17 0.00 164 XM_UB80 1 0.79 2.17 0.00 165 RELAYCOUNTRY_PL 1 0.79 2.17 0.00 166 XM_H_Undi_Recip 1 0.79 2.17 0.00 167 RELAYCOUNTRY_NL 1 1.57 2.17 1.23 168 HTML_TAG_BALANCE_BODY 1 0.79 2.17 0.00 169 TR_XM_Crypto3 1 0.79 2.17 0.00 170 XM_ShortIntro_01 1 0.79 2.17 0.00 171 XM_H_Long_From01 1 5.51 2.17 7.41 172 XM_H_PHPOS_M 1 0.79 2.17 0.00 173 TR_XM_MSPIKECOMBO2 1 0.79 2.17 0.00 174 XMSubNoVowel 1 1.57 2.17 1.23 175 XMSexyCombo_01 1 0.79 2.17 0.00 176 T_XMDrugObfuBody_14 1 3.94 2.17 4.94 177 XM_Combo_Sbj 1 0.79 2.17 0.00 178 FILL_THIS_FORM_LONG 1 0.79 2.17 0.00 179 XM_H_PHPOS 1 0.79 2.17 0.00 180 URIBL_DBL_SPAM 1 0.79 2.17 0.00 181 RDNS_DYNAMIC 1 0.79 2.17 0.00 182 T_HTML_TAG_BALANCE_CENTER 1 0.79 2.17 0.00 183 XM_UB95 1 0.79 2.17 0.00 184 TR_BOTNET_NEGATE 1 0.79 2.17 0.00 185 OBFU_TEXT_ATTACH 1 0.79 2.17 0.00 186 XMMoneyMeta_00 1 1.57 2.17 1.23 187 TR_XM_PHPDW 1 0.79 2.17 0.00 188 NOT_SPAM 1 0.79 2.17 0.00 189 RELAYCOUNTRY_CN 1 0.79 2.17 0.00 190 TO_EQ_FM_DOM_HTML_ONLY 1 0.79 2.17 0.00 191 XMBody_95 1 0.79 2.17 0.00 192 TO_NO_BRKTS_DYNIP 1 0.79 2.17 0.00 193 T_REMOTE_IMAGE 1 2.36 2.17 2.47 194 HTML_IMAGE_ONLY_16 1 0.79 2.17 0.00 195 RCVD_IN_VALIDITY_RPBL 1 0.79 2.17 0.00 196 T_XMDrugObfuBody_08 1 0.79 2.17 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 68 78.74 69.57 83.95 2 HTML_MESSAGE 65 85.83 95.65 80.25 3 RELAYCOUNTRY_US 64 77.95 76.09 79.01 4 DKIM_SIGNED 56 74.02 82.61 69.14 5 XM_DK_Pass 54 72.44 82.61 66.67 6 XM_B_Unicode 52 62.99 60.87 64.20 7 DKIM_VALID 51 68.50 78.26 62.96 8 BAYES_50 43 47.24 36.96 53.09 9 DKIM_VALID_AU 42 56.69 65.22 51.85 10 XM_B_SpammyWords 35 48.03 56.52 43.21 11 XM_B_Unicode3 34 41.73 41.30 41.98 12 XMListUnsubscribeExists 32 44.09 52.17 39.51 13 RCVD_IN_MSPIKE_WL 28 31.50 26.09 34.57 14 XMSubLong 26 33.86 36.96 32.10 15 T_TM2_M_HEADER_IN_MSG 23 19.69 4.35 28.40 16 DKIM_VALID_EF 22 27.56 28.26 27.16 17 MIME_HTML_ONLY 22 30.71 36.96 27.16 18 HTML_FONT_LOW_CONTRAST 21 29.13 34.78 25.93 19 LOC_TINY_FONT_1 17 29.92 45.65 20.99 20 RCVD_IN_MSPIKE_H3 17 21.26 21.74 20.99 21 XM_B_SpammyWords2 16 22.83 28.26 19.75 22 ALL_TRUSTED 14 11.02 0.00 17.28 23 FVGT_m_MULTI_ODD 13 22.05 32.61 16.05 24 DCC_CHECK 13 21.26 30.43 16.05 25 T_KAM_HTML_FONT_INVALID 13 14.96 13.04 16.05 26 T_TooManySym_01 11 9.45 2.17 13.58 27 RCVD_IN_MSPIKE_H2 11 15.75 19.57 13.58 28 BAYES_60 11 10.24 4.35 13.58 29 XM_Body_Dirty_Words 10 16.54 23.91 12.35 30 USER_IN_DEF_DKIM_WL 10 7.87 0.00 12.35 31 XM_Multi_Part_URI 9 14.96 21.74 11.11 32 BAYES_00 9 7.09 0.00 11.11 33 MPART_ALT_DIFF 9 11.02 10.87 11.11 34 MIME_HTML_ONLY_MULTI 9 11.02 10.87 11.11 35 T_TooManySym_02 8 7.09 2.17 9.88 36 XM_B_Phish_Phrases 8 7.09 2.17 9.88 37 HTML_IMAGE_RATIO_06 8 7.87 4.35 9.88 38 TR_XM_DK_Unsub 8 9.45 8.70 9.88 39 XM_DKIMWhitelistDomains 8 6.30 0.00 9.88 40 LotsOfNums_01 6 7.87 8.70 7.41 41 XM_B_Unsub 6 13.39 23.91 7.41 42 TR_XM_DK_Bayes 6 4.72 0.00 7.41 43 RCVD_IN_MSPIKE_H4 6 6.30 4.35 7.41 44 XM_H_Long_From01 6 5.51 2.17 7.41 45 IN_ZIMBRA_NJ_WHITELIST 6 4.72 0.00 7.41 46 BAYES_20 6 5.51 2.17 7.41 47 BAYES_99 5 13.39 26.09 6.17 48 TR_XM_DK_Bayes1 5 3.94 0.00 6.17 49 BOTNET_IPINHOSTNAME 5 7.09 8.70 6.17 50 RCVD_IN_MSPIKE_H5 5 3.94 0.00 6.17 51 XMSubMetaSx_00 5 6.30 6.52 6.17 52 XM_UncommonTLD01 5 10.24 17.39 6.17 53 TO_MALFORMED 5 3.94 0.00 6.17 54 XMStrtUSub 5 4.72 2.17 6.17 55 DKIM_INVALID 5 5.51 4.35 6.17 56 BAYES_40 5 6.30 6.52 6.17 57 TO_EQ_FM_DOM_HTML_IMG 4 3.15 0.00 4.94 58 RELAYCOUNTRY_META 4 15.75 34.78 4.94 59 TR_XM_DK_Bayes2 4 3.15 0.00 4.94 60 XM_Evil_Numbers_Gen 4 4.72 4.35 4.94 61 T_XMDrugObfuBody_14 4 3.94 2.17 4.94 62 MSGID_NOFQDN1 4 3.15 0.00 4.94 63 RCVD_IN_IADB_LISTED 4 3.15 0.00 4.94 64 BAYES_999 4 11.02 21.74 4.94 65 TooManyTo_001 4 7.09 10.87 4.94 66 RCVD_IN_IADB_SENDERID 4 3.15 0.00 4.94 67 XM_DK_Undo_02 4 14.17 30.43 4.94 68 INVALID_MSGID 4 3.15 0.00 4.94 69 RCVD_IN_IADB_SPF 4 3.15 0.00 4.94 70 LOTS_OF_MONEY 4 4.72 4.35 4.94 71 KHOP_HELO_FCRDNS 3 5.51 8.70 3.70 72 XM_TLDProd2 3 2.36 0.00 3.70 73 XM_B_SpammyTLD 3 3.94 4.35 3.70 74 HTML_IMAGE_RATIO_04 3 3.15 2.17 3.70 75 TR_XM_SpammyRelay 3 10.24 21.74 3.70 76 XMNumbers 3 5.51 8.70 3.70 77 HTML_MIME_NO_HTML_TAG 3 6.30 10.87 3.70 78 TR_XM_SpammyWords4 3 3.94 4.35 3.70 79 XM_B_SpammyWords3 3 6.30 10.87 3.70 80 BASE64_LENGTH_79_INF 3 2.36 0.00 3.70 81 XM_PDF 3 2.36 0.00 3.70 82 TVD_SPACE_RATIO 3 2.36 0.00 3.70 83 RCVD_IN_IADB_DK 3 2.36 0.00 3.70 84 TR_Mismatch_TLD_01 2 1.57 0.00 2.47 85 MAILING_LIST_MULTI 2 1.57 0.00 2.47 86 UNPARSEABLE_RELAY 2 4.72 8.70 2.47 87 FVGT_m_MULTI_ODD_EMAIL 2 1.57 0.00 2.47 88 TR_XM_DKIM_Undo 2 8.66 19.57 2.47 89 T_REMOTE_IMAGE 2 2.36 2.17 2.47 90 XM_CamelCaseFrm001 2 1.57 0.00 2.47 91 XMBody_78 2 6.30 13.04 2.47 92 ANY_BOUNCE_MESSAGE 2 1.57 0.00 2.47 93 NUMERIC_HTTP_ADDR 2 1.57 0.00 2.47 94 TR_XM_SpammyWords2 2 3.94 6.52 2.47 95 XM_TLDProd1 2 1.57 0.00 2.47 96 MIME_QP_LONG_LINE 2 1.57 0.00 2.47 97 TR_XM_PhishingBody 2 4.72 8.70 2.47 98 RCVD_IN_IADB_OPTIN 2 1.57 0.00 2.47 99 TR_XM_BayesUnsub 2 7.87 17.39 2.47 100 TM2_M_VERY_LONG_WORD 2 4.72 8.70 2.47 101 XM_ZIP 2 1.57 0.00 2.47 102 RCVD_IN_IADB_VOUCHED 2 1.57 0.00 2.47 103 XMSubMetaSxObfu_02 2 1.57 0.00 2.47 104 IN_HORDE_ADDRESS_BOOK 2 1.57 0.00 2.47 105 T_TooManySym_03 2 1.57 0.00 2.47 106 BOUNCE_MESSAGE 2 1.57 0.00 2.47 107 XM_H_Trusted_IP 2 1.57 0.00 2.47 108 XM_B_Phish66 2 3.94 6.52 2.47 109 TR_XM_SB_Phish 1 0.79 0.00 1.23 110 TR_MSPIKEBAYES00 1 0.79 0.00 1.23 111 TR_MetaPhish_Combo_01 1 0.79 0.00 1.23 112 HDRS_MISSP 1 0.79 0.00 1.23 113 XMGappySubj_01 1 0.79 0.00 1.23 114 XMMoneyMeta_00 1 1.57 2.17 1.23 115 HTML_IMAGE_ONLY_20 1 0.79 0.00 1.23 116 XMCapTrack 1 0.79 0.00 1.23 117 XMSubject_78 1 0.79 0.00 1.23 118 XMBSHREFv2 1 0.79 0.00 1.23 119 XMSubMetaSxObfu_00 1 0.79 0.00 1.23 120 XMLngstWrd_00 1 3.94 8.70 1.23 121 T_FILL_THIS_FORM_SHORT 1 0.79 0.00 1.23 122 XMSexyCombo_05 1 2.36 4.35 1.23 123 XMSubNoVowel 1 1.57 2.17 1.23 124 XMSubMetaSxObfu_03 1 0.79 0.00 1.23 125 HTTPS_HTTP_MISMATCH 1 0.79 0.00 1.23 126 HTML_FONT_FACE_BAD 1 0.79 0.00 1.23 127 XMBrknScrpt_02 1 0.79 0.00 1.23 128 XM_B_SEO 1 0.79 0.00 1.23 129 NML_ADSP_CUSTOM_MED 1 0.79 0.00 1.23 130 XM_Dr_From 1 0.79 0.00 1.23 131 XM_SendGrid 1 2.36 4.35 1.23 132 DKIM_ADSP_CUSTOM_MED 1 0.79 0.00 1.23 133 RELAYCOUNTRY_BG 1 0.79 0.00 1.23 134 XM_URI_RBL 1 0.79 0.00 1.23 135 BAYES_05 1 0.79 0.00 1.23 136 XMBody_17 1 0.79 0.00 1.23 137 XM_B_Investor 1 3.94 8.70 1.23 138 LOW_PRICE 1 0.79 0.00 1.23 139 TR_Symld_Words 1 3.15 6.52 1.23 140 BAYES_95 1 1.57 2.17 1.23 141 T_XMDrugObfuBody_00 1 1.57 2.17 1.23 142 XMSubPhish11 1 0.79 0.00 1.23 143 MIME_HTML_MOSTLY 1 3.94 8.70 1.23 144 T_Symld_Words_02 1 3.15 6.52 1.23 145 RELAYCOUNTRY_NL 1 1.57 2.17 1.23 146 RELAYCOUNTRY_CA 1 1.57 2.17 1.23 147 FROM_GOV_SPOOF 1 1.57 2.17 1.23 148 TR_LOTS_OF_MONEY3 1 0.79 0.00 1.23 149 URI_NOVOWEL 1 0.79 0.00 1.23 150 TVD_RCVD_IP 1 0.79 0.00 1.23 151 HTML_IMAGE_ONLY_12 1 3.94 8.70 1.23 152 XM_Body_Obfu01 1 0.79 0.00 1.23 153 RELAYCOUNTRY_AU 1 1.57 2.17 1.23 154 XM_GoogleGroups 1 3.94 8.70 1.23 155 XM_DIRTYINTL 1 0.79 0.00 1.23 156 XMSubMetaSx_01 1 0.79 0.00 1.23 157 TR_MetaPhish_Combo_01b 1 0.79 0.00 1.23 158 UNTRUSTED_Relay 1 8.66 21.74 1.23 159 LONG_JUNK_URI 1 0.79 0.00 1.23 ----------------------------------------------------------------------