Email: 231 Autolearn: 0 AvgScore: 3.48 AvgScanTime: 4.15 sec Spam: 62 Autolearn: 0 AvgScore: 13.65 AvgScanTime: 4.60 sec Ham: 169 Autolearn: 0 AvgScore: -0.25 AvgScanTime: 3.99 sec Time Spent Running SA: 0.27 hours Time Spent Processing Spam: 0.08 hours Time Spent Processing Ham: 0.19 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 57 69.26 91.94 60.95 2 RELAYCOUNTRY_US 48 68.40 77.42 65.09 3 XM_B_Unicode 46 62.77 74.19 58.58 4 DKIM_SIGNED 45 62.34 72.58 58.58 5 XM_DK_Pass 45 59.74 72.58 55.03 6 DKIM_VALID 44 59.31 70.97 55.03 7 DKIM_VALID_AU 35 47.19 56.45 43.79 8 XM_B_SpammyWords 35 50.22 56.45 47.93 9 XM_B_Unicode3 33 29.44 53.23 20.71 10 XMListUnsubscribeExists 33 37.23 53.23 31.36 11 DCC_CHECK 31 24.24 50.00 14.79 12 DCC_CHECK_NEGATIVE 31 75.76 50.00 85.21 13 FVGT_m_MULTI_ODD 29 28.57 46.77 21.89 14 XM_DK_Undo_02 26 14.29 41.94 4.14 15 BAYES_50 24 59.74 38.71 67.46 16 XM_B_SpammyWords2 23 22.51 37.10 17.16 17 LOC_TINY_FONT_1 22 19.48 35.48 13.61 18 RCVD_IN_MSPIKE_WL 20 27.71 32.26 26.04 19 XM_Multi_Part_URI 19 16.88 30.65 11.83 20 TR_XM_DKIM_Undo 19 9.52 30.65 1.78 21 DKIM_VALID_EF 18 29.87 29.03 30.18 22 HTML_FONT_LOW_CONTRAST 18 25.11 29.03 23.67 23 BAYES_99 17 8.23 27.42 1.18 24 BOTNET 17 9.52 27.42 2.96 25 MIME_HTML_ONLY 15 16.88 24.19 14.20 26 RELAYCOUNTRY_META 14 10.39 22.58 5.92 27 RCVD_IN_MSPIKE_H2 14 21.21 22.58 20.71 28 RCVD_IN_MSPIKE_H3 13 19.05 20.97 18.34 29 FSL_BULK_SIG 12 6.06 19.35 1.18 30 T_KAM_HTML_FONT_INVALID 12 16.45 19.35 15.38 31 UNPARSEABLE_RELAY 12 10.39 19.35 7.10 32 XM_UncommonTLD01 11 8.66 17.74 5.33 33 RCVD_IN_BL_SPAMCOP_NET 11 4.76 17.74 0.00 34 XM_H_Long_From01 10 9.09 16.13 6.51 35 XM_B_Unsub 10 10.82 16.13 8.88 36 BOTNET_IPINHOSTNAME 10 8.23 16.13 5.33 37 TR_XM_BayesUnsub 10 9.96 16.13 7.69 38 UNTRUSTED_Relay 9 6.49 14.52 3.55 39 LOTS_OF_MONEY 9 6.93 14.52 4.14 40 XM_Body_Dirty_Words 9 11.26 14.52 10.06 41 RCVD_IN_MSPIKE_BL 9 4.33 14.52 0.59 42 BAYES_999 9 4.76 14.52 1.18 43 TR_XM_MSPIKECOMBO 9 4.33 14.52 0.59 44 T_REMOTE_IMAGE 9 5.63 14.52 2.37 45 XMDiploma_00 8 5.63 12.90 2.96 46 XMGenDplmaNmb 8 5.19 12.90 2.37 47 XM_B_SpammyTLD 8 5.19 12.90 2.37 48 TR_XM_DK_Unsub 8 12.12 12.90 11.83 49 TR_XM_SpammyRelay 8 5.19 12.90 2.37 50 MAILING_LIST_MULTI 7 5.63 11.29 3.55 51 HTML_FONT_TINY_NORDNS 7 3.46 11.29 0.59 52 RELAYCOUNTRY_RU 7 3.03 11.29 0.00 53 T_XMDrugObfuBody_08 7 5.63 11.29 3.55 54 SpammyFromTLD_01 6 2.60 9.68 0.00 55 RCVD_IN_MSPIKE_H4 6 5.19 9.68 3.55 56 XM_UB50 6 4.76 9.68 2.96 57 BAYES_80 6 3.90 9.68 1.78 58 XM_H_Long_From02 6 4.76 9.68 2.96 59 XMSubLong 6 16.88 9.68 19.53 60 T_TM2_M_HEADER_IN_MSG 6 22.51 9.68 27.22 61 TR_XM_SpammyWords2 6 2.60 9.68 0.00 62 RCVD_IN_MSPIKE_L4 6 2.60 9.68 0.00 63 MIME_HTML_MOSTLY 6 4.76 9.68 2.96 64 MPART_ALT_DIFF_COUNT 6 3.03 9.68 0.59 65 TR_XM_UnparsRelay 5 2.60 8.06 0.59 66 XM_B_SpammyWords3 5 5.19 8.06 4.14 67 BOTNET_NORDNS 5 2.16 8.06 0.00 68 TR_XM_SpammyWords3 5 2.16 8.06 0.00 69 BAYES_95 5 3.46 8.06 1.78 70 HTML_IMAGE_RATIO_02 5 4.33 8.06 2.96 71 HDRS_MISSP 5 2.60 8.06 0.59 72 MIME_QP_LONG_LINE 5 3.90 8.06 2.37 73 MIME_CHARSET_FARAWAY 5 3.46 8.06 1.78 74 TR_LOTS_OF_MONEY2 5 3.03 8.06 1.18 75 MISSING_MIME_HB_SEP 5 2.16 8.06 0.00 76 TR_DCC_Bayes_99 5 2.16 8.06 0.00 77 DATE_IN_PAST_03_06 5 2.16 8.06 0.00 78 XM_B_DynamicLink 5 2.16 8.06 0.00 79 T_MONEY_PERCENT 5 3.03 8.06 1.18 80 MIME_HTML_ONLY_MULTI 4 3.46 6.45 2.37 81 HTML_MIME_NO_HTML_TAG 4 4.76 6.45 4.14 82 TM2_M_VERY_LONG_WORD 4 3.03 6.45 1.78 83 XMNumbers 4 7.36 6.45 7.69 84 MPART_ALT_DIFF 4 4.33 6.45 3.55 85 XM_Body_Obfu01 4 3.03 6.45 1.78 86 XM_Evil_Numbers_Gen 4 6.49 6.45 6.51 87 XMSexyCombo_05 4 1.73 6.45 0.00 88 SpammyFromTLD_02 4 1.73 6.45 0.00 89 TR_XM_SpammyWords4 4 3.90 6.45 2.96 90 BAYES_60 4 7.36 6.45 7.69 91 DATE_IN_FUTURE_06_12 3 1.30 4.84 0.00 92 UPPERCASE_75_100 3 2.16 4.84 1.18 93 HTML_IMAGE_RATIO_06 3 5.19 4.84 5.33 94 XMLngstWrd_00 3 2.60 4.84 1.78 95 ALL_TRUSTED 3 23.38 4.84 30.18 96 TR_XM_PhishingBody 3 2.60 4.84 1.78 97 HTML_TITLE_SUBJ_DIFF 3 2.16 4.84 1.18 98 XMLngstWrd_03 3 2.16 4.84 1.18 99 TR_XM_DK_Bayes1 3 5.63 4.84 5.92 100 XM_CamelCaseFrm001 3 6.06 4.84 6.51 101 XMNoVowels 3 1.73 4.84 0.59 102 NORDNS_LOW_CONTRAST 3 1.73 4.84 0.59 103 RCVD_IN_MSPIKE_L3 3 1.73 4.84 0.59 104 XM_B_Investor 3 1.73 4.84 0.59 105 XMLngstWrd_02 3 2.16 4.84 1.18 106 TR_XM_DK_Bayes 3 5.63 4.84 5.92 107 XM_SendGrid 3 2.60 4.84 1.78 108 TR_XM_SPAMCOP 3 1.30 4.84 0.00 109 XMLngstWrd_04 3 2.16 4.84 1.18 110 BAYES_00 3 7.79 4.84 8.88 111 XMLngstWrd_01 3 2.16 4.84 1.18 112 XM_GoogleGroups 3 3.03 4.84 2.37 113 TooManyTo_003 2 2.16 3.23 1.78 114 XM_H_PHPOS 2 1.73 3.23 1.18 115 TM2_M_URI_OPT_OUT 2 1.30 3.23 0.59 116 TR_XM_PHPForged 2 1.73 3.23 1.18 117 TR_XM_SpammyWords5 2 3.03 3.23 2.96 118 HTML_SHORT_LINK_IMG_1 2 0.87 3.23 0.00 119 XM_ShortIntro_01 2 1.30 3.23 0.59 120 TooManyTo_002 2 2.16 3.23 1.78 121 TooManyTo_001 2 5.19 3.23 5.92 122 T_XMDrugObfuBody_14 2 1.30 3.23 0.59 123 XM_H_NotFromAmazon 2 0.87 3.23 0.00 124 TooManyTo_004 2 1.73 3.23 1.18 125 RELAYCOUNTRY_CA 2 1.30 3.23 0.59 126 NML_ADSP_CUSTOM_MED 2 0.87 3.23 0.00 127 FROM_ADDR_WS 2 0.87 3.23 0.00 128 TR_XM_PHPDW 2 2.16 3.23 1.78 129 XMSubMetaSx_00 2 3.03 3.23 2.96 130 NO_DNS_FOR_FROM 2 0.87 3.23 0.00 131 HTML_IMAGE_RATIO_08 2 1.73 3.23 1.18 132 XM_SPF_SoftFail 2 2.60 3.23 2.37 133 DKIM_ADSP_CUSTOM_MED 2 0.87 3.23 0.00 134 TR_XM_MaxWHORU 2 0.87 3.23 0.00 135 XM_UB60 2 0.87 3.23 0.00 136 HTML_IMAGE_ONLY_08 2 0.87 3.23 0.00 137 TVD_SPACE_RATIO 2 3.90 3.23 4.14 138 BAYES_40 2 3.46 3.23 3.55 139 TR_XM_MSPIKECOMBO2 2 0.87 3.23 0.00 140 LotsOfNums_01 2 3.46 3.23 3.55 141 XM_B_Phish66 2 1.30 3.23 0.59 142 TR_XM_FormFill2 2 1.73 3.23 1.18 143 XM_H_Undi_Recip 2 1.30 3.23 0.59 144 FORGED_GMAIL_RCVD 2 0.87 3.23 0.00 145 MIME_BASE64_TEXT 1 0.43 1.61 0.00 146 TooManyTo_005 1 1.30 1.61 1.18 147 RCVD_IN_IADB_SENDERID 1 2.16 1.61 2.37 148 HTML_IMAGE_ONLY_16 1 0.43 1.61 0.00 149 RCVD_IN_PSBL 1 1.30 1.61 1.18 150 RELAYCOUNTRY_TR 1 0.43 1.61 0.00 151 RCVD_IN_IADB_DK 1 1.30 1.61 1.18 152 RDNS_DYNAMIC 1 0.43 1.61 0.00 153 SHORT_URI 1 0.43 1.61 0.00 154 XMSubMetaI_00 1 0.43 1.61 0.00 155 T_TooManySym_02 1 7.79 1.61 10.06 156 TO_EQ_FM_DOM_HTML_ONLY 1 0.43 1.61 0.00 157 RCVD_IN_VALIDITY_CERTIFIED 1 2.60 1.61 2.96 158 HK_RANDOM_ENVFROM 1 0.43 1.61 0.00 159 RELAYCOUNTRY_GB 1 0.43 1.61 0.00 160 LOADSA_MONEY_COMBO 1 0.87 1.61 0.59 161 RCVD_IN_VALIDITY_SAFE 1 2.60 1.61 2.96 162 KHOP_HELO_FCRDNS 1 1.30 1.61 1.18 163 TR_XM_Undi_Recip2 1 0.87 1.61 0.59 164 URIBL_BLACK 1 0.43 1.61 0.00 165 MIMEOLE_DIRECT_TO_MX 1 0.43 1.61 0.00 166 HTTPS_HTTP_MISMATCH 1 1.30 1.61 1.18 167 RELAYCOUNTRY_DE 1 0.43 1.61 0.00 168 HTTP_EXCESSIVE_ESCAPES 1 0.43 1.61 0.00 169 CK_HELO_GENERIC 1 0.87 1.61 0.59 170 RELAYCOUNTRY_IR 1 0.43 1.61 0.00 171 PDS_RDNS_DYNAMIC_FP 1 0.43 1.61 0.00 172 XM_B_SpammyWords4 1 0.43 1.61 0.00 173 RCVD_IN_VALIDITY_RPBL 1 0.43 1.61 0.00 174 HELO_DYNAMIC_IPADDR 1 0.43 1.61 0.00 175 FROM_LOCAL_NOVOWEL 1 0.43 1.61 0.00 176 LONG_JUNK_URI2 1 0.43 1.61 0.00 177 SHORT_URI_2 1 3.03 1.61 3.55 178 TR_XM_Undi_Recip6 1 0.43 1.61 0.00 179 FROM_EXCESS_BASE64 1 0.87 1.61 0.59 180 XM_UB80 1 0.43 1.61 0.00 181 DIET_1 1 0.43 1.61 0.00 182 HTML_IMAGE_RATIO_04 1 1.73 1.61 1.78 183 RCVD_IN_IADB_LISTED 1 2.60 1.61 2.96 184 XM_H_WindowsLiveMail 1 0.43 1.61 0.00 185 XFER_LOTSA_MONEY 1 0.87 1.61 0.59 186 TR_XM_Base64_L1 1 0.43 1.61 0.00 187 PDS_OTHER_BAD_TLD 1 0.43 1.61 0.00 188 HTML_IMAGE_ONLY_24 1 0.43 1.61 0.00 189 XMSubMetaSxObfu_02 1 0.43 1.61 0.00 190 RELAYCOUNTRY_JP 1 0.43 1.61 0.00 191 HK_RANDOM_FROM 1 0.43 1.61 0.00 192 XMPhish08 1 0.43 1.61 0.00 193 OBFU_TEXT_ATTACH 1 0.43 1.61 0.00 194 FROM_GOV_SPOOF 1 1.73 1.61 1.78 195 BAYES_05 1 3.03 1.61 3.55 196 XMBody_03 1 0.43 1.61 0.00 197 XM_B_COVIDMETA 1 0.43 1.61 0.00 198 XM_TLDProd2 1 0.87 1.61 0.59 199 RELAYCOUNTRY_ZA 1 0.43 1.61 0.00 200 TR_XM_DK_SendGrid 1 0.43 1.61 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 144 75.76 50.00 85.21 2 BAYES_50 114 59.74 38.71 67.46 3 RELAYCOUNTRY_US 110 68.40 77.42 65.09 4 HTML_MESSAGE 103 69.26 91.94 60.95 5 DKIM_SIGNED 99 62.34 72.58 58.58 6 XM_B_Unicode 99 62.77 74.19 58.58 7 XM_DK_Pass 93 59.74 72.58 55.03 8 DKIM_VALID 93 59.31 70.97 55.03 9 XM_B_SpammyWords 81 50.22 56.45 47.93 10 DKIM_VALID_AU 74 47.19 56.45 43.79 11 XMListUnsubscribeExists 53 37.23 53.23 31.36 12 DKIM_VALID_EF 51 29.87 29.03 30.18 13 ALL_TRUSTED 51 23.38 4.84 30.18 14 T_TM2_M_HEADER_IN_MSG 46 22.51 9.68 27.22 15 RCVD_IN_MSPIKE_WL 44 27.71 32.26 26.04 16 HTML_FONT_LOW_CONTRAST 40 25.11 29.03 23.67 17 FVGT_m_MULTI_ODD 37 28.57 46.77 21.89 18 RCVD_IN_MSPIKE_H2 35 21.21 22.58 20.71 19 XM_B_Unicode3 35 29.44 53.23 20.71 20 XMSubLong 33 16.88 9.68 19.53 21 RCVD_IN_MSPIKE_H3 31 19.05 20.97 18.34 22 XM_B_SpammyWords2 29 22.51 37.10 17.16 23 T_KAM_HTML_FONT_INVALID 26 16.45 19.35 15.38 24 XM_H_PHPMailer 26 11.26 0.00 15.38 25 DCC_CHECK 25 24.24 50.00 14.79 26 SHORT_SHORTNER 24 10.39 0.00 14.20 27 MIME_HTML_ONLY 24 16.88 24.19 14.20 28 T_TooManySym_01 23 10.39 1.61 13.61 29 LOC_TINY_FONT_1 23 19.48 35.48 13.61 30 TR_XM_DK_Unsub 20 12.12 12.90 11.83 31 XM_Multi_Part_URI 20 16.88 30.65 11.83 32 XM_Body_Dirty_Words 17 11.26 14.52 10.06 33 T_TooManySym_02 17 7.79 1.61 10.06 34 XM_B_Unsub 15 10.82 16.13 8.88 35 BAYES_00 15 7.79 4.84 8.88 36 XM_DKIMWhitelistDomains 14 6.06 0.00 8.28 37 TR_XM_BayesUnsub 13 9.96 16.13 7.69 38 BAYES_60 13 7.36 6.45 7.69 39 XMNumbers 13 7.36 6.45 7.69 40 UNPARSEABLE_RELAY 12 10.39 19.35 7.10 41 XMStrtUSub 11 5.19 1.61 6.51 42 XM_CamelCaseFrm001 11 6.06 4.84 6.51 43 XM_Evil_Numbers_Gen 11 6.49 6.45 6.51 44 USER_IN_DEF_DKIM_WL 11 4.76 0.00 6.51 45 XM_H_Long_From01 11 9.09 16.13 6.51 46 TR_XM_DK_Bayes1 10 5.63 4.84 5.92 47 TR_XM_DK_Bayes 10 5.63 4.84 5.92 48 RELAYCOUNTRY_META 10 10.39 22.58 5.92 49 TooManyTo_001 10 5.19 3.23 5.92 50 BOTNET_IPINHOSTNAME 9 8.23 16.13 5.33 51 IN_ZIMBRA_NJ_WHITELIST 9 3.90 0.00 5.33 52 HTML_IMAGE_RATIO_06 9 5.19 4.84 5.33 53 XM_UncommonTLD01 9 8.66 17.74 5.33 54 TR_XM_DK_Bayes2 9 3.90 0.00 5.33 55 INVALID_MSGID 8 3.46 0.00 4.73 56 TO_MALFORMED 8 3.46 0.00 4.73 57 RCVD_IN_MSPIKE_H5 7 3.46 1.61 4.14 58 URI_NOVOWEL 7 3.03 0.00 4.14 59 TVD_SPACE_RATIO 7 3.90 3.23 4.14 60 XM_DK_Undo_02 7 14.29 41.94 4.14 61 XM_B_SpammyWords3 7 5.19 8.06 4.14 62 BAYES_20 7 3.03 0.00 4.14 63 BOUNCE_MESSAGE 7 3.03 0.00 4.14 64 REPLYTO_WITHOUT_TO_CC 7 3.03 0.00 4.14 65 HTML_MIME_NO_HTML_TAG 7 4.76 6.45 4.14 66 ANY_BOUNCE_MESSAGE 7 3.03 0.00 4.14 67 LOTS_OF_MONEY 7 6.93 14.52 4.14 68 MISSING_HEADERS 7 3.03 0.00 4.14 69 BAYES_05 6 3.03 1.61 3.55 70 XM_B_Phish_Phrases 6 3.03 1.61 3.55 71 DKIM_INVALID 6 3.03 1.61 3.55 72 LotsOfNums_01 6 3.46 3.23 3.55 73 BAYES_40 6 3.46 3.23 3.55 74 T_XMDrugObfuBody_08 6 5.63 11.29 3.55 75 SUBJ_ALL_CAPS 6 2.60 0.00 3.55 76 RCVD_IN_MSPIKE_H4 6 5.19 9.68 3.55 77 MSGID_NOFQDN1 6 2.60 0.00 3.55 78 SHORT_URI_2 6 3.03 1.61 3.55 79 UNTRUSTED_Relay 6 6.49 14.52 3.55 80 MAILING_LIST_MULTI 6 5.63 11.29 3.55 81 FVGT_m_MULTI_ODD_EMAIL 6 2.60 0.00 3.55 82 MPART_ALT_DIFF 6 4.33 6.45 3.55 83 XM_H_Long_From02 5 4.76 9.68 2.96 84 T_TooManySym_03 5 2.16 0.00 2.96 85 XMSubMetaSx_00 5 3.03 3.23 2.96 86 MIME_HTML_MOSTLY 5 4.76 9.68 2.96 87 BOTNET 5 9.52 27.42 2.96 88 RCVD_IN_IADB_VOUCHED 5 2.60 1.61 2.96 89 TR_XM_SpammyWords4 5 3.90 6.45 2.96 90 XMDiploma_00 5 5.63 12.90 2.96 91 TR_XM_SpammyWords5 5 3.03 3.23 2.96 92 RCVD_IN_VALIDITY_CERTIFIED 5 2.60 1.61 2.96 93 RCVD_IN_VALIDITY_SAFE 5 2.60 1.61 2.96 94 RCVD_IN_IADB_LISTED 5 2.60 1.61 2.96 95 XM_UB50 5 4.76 9.68 2.96 96 HTML_IMAGE_RATIO_02 5 4.33 8.06 2.96 97 XM_PDF 5 2.16 0.00 2.96 98 MIME_QP_LONG_LINE 4 3.90 8.06 2.37 99 XM_B_SpammyTLD 4 5.19 12.90 2.37 100 XM_ZIP 4 1.73 0.00 2.37 101 XM_SPF_SoftFail 4 2.60 3.23 2.37 102 RCVD_IN_IADB_SPF 4 2.16 1.61 2.37 103 T_REMOTE_IMAGE 4 5.63 14.52 2.37 104 TR_XM_SpammyRelay 4 5.19 12.90 2.37 105 XM_GoogleGroups 4 3.03 4.84 2.37 106 XMGappySubj_01 4 1.73 0.00 2.37 107 RCVD_IN_IADB_SENDERID 4 2.16 1.61 2.37 108 XMGenDplmaNmb 4 5.19 12.90 2.37 109 MIME_HTML_ONLY_MULTI 4 3.46 6.45 2.37 110 TR_XM_PHPDW 3 2.16 3.23 1.78 111 FROM_GOV_SPOOF 3 1.73 1.61 1.78 112 TR_Symld_Words 3 1.73 1.61 1.78 113 XM_Body_Obfu01 3 3.03 6.45 1.78 114 RCVD_IN_IADB_OPTIN 3 1.73 1.61 1.78 115 MIME_CHARSET_FARAWAY 3 3.46 8.06 1.78 116 TO_EQ_FM_DOM_HTML_IMG 3 1.30 0.00 1.78 117 XM_SendGrid 3 2.60 4.84 1.78 118 TR_XM_DKIM_Undo 3 9.52 30.65 1.78 119 XMSubject_78 3 1.30 0.00 1.78 120 TooManyTo_003 3 2.16 3.23 1.78 121 XM_DK_Undo_01 3 1.30 0.00 1.78 122 XMSexyCombo_01 3 1.30 0.00 1.78 123 HTML_FONT_FACE_BAD 3 1.30 0.00 1.78 124 XMLngstWrd_00 3 2.60 4.84 1.78 125 HTML_IMAGE_RATIO_04 3 1.73 1.61 1.78 126 TooManyTo_002 3 2.16 3.23 1.78 127 TM2_M_VERY_LONG_WORD 3 3.03 6.45 1.78 128 XM_H_Trusted_IP 3 1.30 0.00 1.78 129 TR_XM_PhishingBody 3 2.60 4.84 1.78 130 BAYES_95 3 3.46 8.06 1.78 131 IN_HORDE_ADDRESS_BOOK 3 1.30 0.00 1.78 132 BAYES_80 3 3.90 9.68 1.78 133 XMLngstWrd_03 2 2.16 4.84 1.18 134 TR_BOTNET_NEGATE 2 0.87 0.00 1.18 135 RELAYCOUNTRY_IN 2 0.87 0.00 1.18 136 XMSubPhish11 2 0.87 0.00 1.18 137 HTML_IMAGE_RATIO_08 2 1.73 3.23 1.18 138 XM_H_SpoofStaff4 2 0.87 0.00 1.18 139 TVD_RCVD_IP 2 0.87 0.00 1.18 140 HTML_IMAGE_ONLY_20 2 1.30 1.61 1.18 141 SUBJ_DOLLARS 2 0.87 0.00 1.18 142 TR_LOTS_OF_MONEY2 2 3.03 8.06 1.18 143 XM_DIRTYINTL 2 1.30 1.61 1.18 144 BAYES_999 2 4.76 14.52 1.18 145 XMLngstWrd_02 2 2.16 4.84 1.18 146 XM_B_Unsub2 2 0.87 0.00 1.18 147 XMLngstWrd_01 2 2.16 4.84 1.18 148 T_MONEY_PERCENT 2 3.03 8.06 1.18 149 XMSubMetaSxObfu_00 2 0.87 0.00 1.18 150 XMLngstWrd_04 2 2.16 4.84 1.18 151 TR_XM_FormFill2 2 1.73 3.23 1.18 152 TR_XM_PHPForged 2 1.73 3.23 1.18 153 RELAYCOUNTRY_BG 2 0.87 0.00 1.18 154 UPPERCASE_75_100 2 2.16 4.84 1.18 155 TR_XM_PSC1 2 0.87 0.00 1.18 156 TooManyTo_005 2 1.30 1.61 1.18 157 XM_H_PHPOS 2 1.73 3.23 1.18 158 RCVD_IN_IADB_DK 2 1.30 1.61 1.18 159 FSL_BULK_SIG 2 6.06 19.35 1.18 160 TR_XM_SpoofStaff 2 0.87 0.00 1.18 161 RCVD_IN_PSBL 2 1.30 1.61 1.18 162 HTTPS_HTTP_MISMATCH 2 1.30 1.61 1.18 163 BAYES_99 2 8.23 27.42 1.18 164 XM_ZohoDesk1 2 0.87 0.00 1.18 165 TR_XM_SpoofPhishAttach 2 0.87 0.00 1.18 166 KHOP_HELO_FCRDNS 2 1.30 1.61 1.18 167 LONG_JUNK_URI 2 0.87 0.00 1.18 168 EXCLAMACION_ES 2 0.87 0.00 1.18 169 XMSpoofStaff2 2 0.87 0.00 1.18 170 HTML_TITLE_SUBJ_DIFF 2 2.16 4.84 1.18 171 TooManyTo_004 2 1.73 3.23 1.18 172 TR_MetaPhish_Combo_01b 2 0.87 0.00 1.18 173 TR_XM_SB_Phish 2 0.87 0.00 1.18 174 T_OBFU_PDF_ATTACH 2 0.87 0.00 1.18 175 XM_H_PHPOS_M 2 0.87 0.00 1.18 176 NICE_REPLY_A 1 0.43 0.00 0.59 177 XM_Dr_From 1 0.43 0.00 0.59 178 XM_TLDProd2 1 0.87 1.61 0.59 179 XMSolicitRefs_0 1 0.43 0.00 0.59 180 MY_SERVERS_FOUND 1 0.43 0.00 0.59 181 RELAYCOUNTRY_FR 1 0.87 1.61 0.59 182 NORDNS_LOW_CONTRAST 1 1.73 4.84 0.59 183 FROM_GOV_DKIM_AU 1 0.43 0.00 0.59 184 RCVD_IN_MSPIKE_L3 1 1.73 4.84 0.59 185 GB_FAKE_RF_SHORT 1 0.43 0.00 0.59 186 XM_WL_UtahGOV 1 0.43 0.00 0.59 187 XMSubMetaSxObfu_03 1 0.43 0.00 0.59 188 XMNoVowels 1 1.73 4.84 0.59 189 XMSubject_70 1 0.43 0.00 0.59 190 XM_S_SubURI 1 0.43 0.00 0.59 191 XMSubMetaSx_01 1 0.43 0.00 0.59 192 RCVD_IN_RP_RNBL 1 0.87 1.61 0.59 193 TR_XM_MSPIKECOMBO 1 4.33 14.52 0.59 194 XM_B_Investor 1 1.73 4.84 0.59 195 CTE_8BIT_MISMATCH 1 0.43 0.00 0.59 196 XMBody_95 1 0.43 0.00 0.59 197 XM_URI_RBL 1 0.43 0.00 0.59 198 T_XMHurry_00 1 0.87 1.61 0.59 199 HTML_FONT_TINY_NORDNS 1 3.46 11.29 0.59 200 RCVD_IN_MSPIKE_BL 1 4.33 14.52 0.59 ----------------------------------------------------------------------