Email: 125 Autolearn: 0 AvgScore: 3.26 AvgScanTime: 3.97 sec Spam: 34 Autolearn: 0 AvgScore: 13.59 AvgScanTime: 4.18 sec Ham: 91 Autolearn: 0 AvgScore: -0.60 AvgScanTime: 3.89 sec Time Spent Running SA: 0.14 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.10 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 28 90.40 82.35 93.41 2 HTML_MESSAGE 27 77.60 79.41 76.92 3 RELAYCOUNTRY_US 25 78.40 73.53 80.22 4 DKIM_SIGNED 24 73.60 70.59 74.73 5 XM_DK_Pass 23 71.20 67.65 72.53 6 DKIM_VALID 22 70.40 64.71 72.53 7 XMListUnsubscribeExists 19 43.20 55.88 38.46 8 BAYES_50 18 62.40 52.94 65.93 9 DKIM_VALID_AU 17 56.00 50.00 58.24 10 FVGT_m_MULTI_ODD 17 34.40 50.00 28.57 11 XM_B_Unicode 15 62.40 44.12 69.23 12 XM_UncommonTLD01 15 15.20 44.12 4.40 13 RELAYCOUNTRY_META 14 13.60 41.18 3.30 14 XM_B_Unicode3 12 40.80 35.29 42.86 15 RCVD_IN_MSPIKE_WL 11 18.40 32.35 13.19 16 XM_B_SpammyWords 11 43.20 32.35 47.25 17 RCVD_IN_MSPIKE_H3 11 15.20 32.35 8.79 18 MIME_HTML_ONLY 10 17.60 29.41 13.19 19 SpammyFromTLD_02 10 8.00 29.41 0.00 20 XM_DK_Undo_02 9 10.40 26.47 4.40 21 RCVD_IN_MSPIKE_H2 9 25.60 26.47 25.27 22 T_TM2_M_HEADER_IN_MSG 8 24.80 23.53 25.27 23 XMLngstWrd_01 8 7.20 23.53 1.10 24 HTML_MIME_NO_HTML_TAG 8 8.80 23.53 3.30 25 XMLngstWrd_04 8 7.20 23.53 1.10 26 XMLngstWrd_00 8 7.20 23.53 1.10 27 MIME_HTML_ONLY_MULTI 8 7.20 23.53 1.10 28 HTML_TITLE_SUBJ_DIFF 8 7.20 23.53 1.10 29 XMLngstWrd_03 8 7.20 23.53 1.10 30 MPART_ALT_DIFF 8 7.20 23.53 1.10 31 XMLngstWrd_02 8 7.20 23.53 1.10 32 XM_GoogleGroups 8 8.80 23.53 3.30 33 TM2_M_VERY_LONG_WORD 8 8.00 23.53 2.20 34 UPPERCASE_75_100 8 7.20 23.53 1.10 35 HTML_FONT_LOW_CONTRAST 7 29.60 20.59 32.97 36 BAYES_99 7 8.80 20.59 4.40 37 UNTRUSTED_Relay 7 5.60 20.59 0.00 38 DKIM_VALID_EF 7 35.20 20.59 40.66 39 UNPARSEABLE_RELAY 6 12.00 17.65 9.89 40 TooManyTo_001 6 14.40 17.65 13.19 41 DCC_CHECK 6 9.60 17.65 6.59 42 XMNumbers 6 13.60 17.65 12.09 43 TR_XM_DK_Unsub 5 17.60 14.71 18.68 44 TR_XM_UnparsRelay 5 5.60 14.71 2.20 45 LOTS_OF_MONEY 5 12.00 14.71 10.99 46 TR_XM_Undi_Recip5 5 4.00 14.71 0.00 47 XM_H_Undi_Recip 5 6.40 14.71 3.30 48 RELAYCOUNTRY_UA 5 4.00 14.71 0.00 49 TR_XM_DKIM_Undo 5 7.20 14.71 4.40 50 LOC_TINY_FONT_1 5 18.40 14.71 19.78 51 XM_Multi_Part_URI 5 15.20 14.71 15.38 52 RCVD_IN_VALIDITY_RPBL 5 4.00 14.71 0.00 53 UNDISC_MONEY 5 4.00 14.71 0.00 54 XM_Body_Dirty_Words 4 14.40 11.76 15.38 55 FORGED_MUA_OUTLOOK 4 3.20 11.76 0.00 56 XM_B_SpammyWords2 4 8.80 11.76 7.69 57 TR_Mismatch_TLD_02 4 3.20 11.76 0.00 58 NSL_RCVD_FROM_USER 4 3.20 11.76 0.00 59 XMSubLong 4 20.80 11.76 24.18 60 AXB_XMAILER_MIMEOLE_OL_024C2 4 3.20 11.76 0.00 61 BAYES_999 4 5.60 11.76 3.30 62 FSL_NEW_HELO_USER 4 3.20 11.76 0.00 63 BOTNET 4 3.20 11.76 0.00 64 FAKE_REPLY_C 4 3.20 11.76 0.00 65 RELAYCOUNTRY_SE 4 3.20 11.76 0.00 66 FSL_CTYPE_WIN1251 4 3.20 11.76 0.00 67 XM_UB80 4 3.20 11.76 0.00 68 BAYES_80 4 3.20 11.76 0.00 69 BAYES_60 4 12.00 11.76 12.09 70 RCVD_IN_BL_SPAMCOP_NET 4 3.20 11.76 0.00 71 XM_B_SpammyWords3 4 4.00 11.76 1.10 72 XM_SendGrid 3 6.40 8.82 5.49 73 SpammyFromTLD_01 3 2.40 8.82 0.00 74 TR_XM_SPAMCOP 3 2.40 8.82 0.00 75 BOTNET_IPINHOSTNAME 3 2.40 8.82 0.00 76 KHOP_HELO_FCRDNS 3 4.80 8.82 3.30 77 RELAYCOUNTRY_TR 2 1.60 5.88 0.00 78 TR_BOTNET_NEGATE 2 1.60 5.88 0.00 79 T_REMOTE_IMAGE 2 4.80 5.88 4.40 80 RDNS_DYNAMIC 2 2.40 5.88 1.10 81 TR_XM_BayesUnsub 2 6.40 5.88 6.59 82 LotsOfNums_01 2 5.60 5.88 5.49 83 XM_DIRTYINTL 2 2.40 5.88 1.10 84 TM2_M_URI_OPT_OUT 2 3.20 5.88 2.20 85 TR_DCC_Bayes_99 2 1.60 5.88 0.00 86 TR_XM_SpammyRelay 2 3.20 5.88 2.20 87 DKIM_INVALID 2 3.20 5.88 2.20 88 HTML_IMAGE_RATIO_02 2 8.00 5.88 8.79 89 XM_UB60 2 1.60 5.88 0.00 90 TR_XM_PhishingBody 2 2.40 5.88 1.10 91 T_KAM_HTML_FONT_INVALID 2 12.00 5.88 14.29 92 SHOPIFY_IMG_NOT_RCVD_SFY 2 2.40 5.88 1.10 93 PDS_RDNS_DYNAMIC_FP 2 1.60 5.88 0.00 94 XM_B_Unsub 2 6.40 5.88 6.59 95 TR_XM_SpammyWords5 2 6.40 5.88 6.59 96 RELAYCOUNTRY_RU 2 1.60 5.88 0.00 97 XM_B_SpammyTLD 2 3.20 5.88 2.20 98 DKIM_ADSP_NXDOMAIN 2 1.60 5.88 0.00 99 XM_B_Investor 2 3.20 5.88 2.20 100 RELAYCOUNTRY_GB 1 0.80 2.94 0.00 101 NOT_SPAM 1 0.80 2.94 0.00 102 MIME_HTML_MOSTLY 1 2.40 2.94 2.20 103 T_TooManySym_02 1 5.60 2.94 6.59 104 XM_B_SpammyWords4 1 1.60 2.94 1.10 105 URIBL_DBL_SPAM 1 0.80 2.94 0.00 106 TR_XM_SpammyWords4 1 5.60 2.94 6.59 107 MAILING_LIST_MULTI 1 3.20 2.94 3.30 108 OBFU_TEXT_ATTACH 1 0.80 2.94 0.00 109 XMBody_95 1 0.80 2.94 0.00 110 HTML_IMAGE_ONLY_28 1 0.80 2.94 0.00 111 TooManyTo_002 1 1.60 2.94 1.10 112 TVD_RCVD_SPACE_BRACKET 1 0.80 2.94 0.00 113 TR_XM_DK_SendGrid 1 3.20 2.94 3.30 114 XM_Body_Obfu01 1 0.80 2.94 0.00 115 XM_UB999 1 0.80 2.94 0.00 116 DATE_IN_FUTURE_06_12 1 0.80 2.94 0.00 117 XMHTMLBadTable_001 1 2.40 2.94 2.20 118 RCVD_IN_RP_RNBL 1 0.80 2.94 0.00 119 FROM_GOV_SPOOF 1 0.80 2.94 0.00 120 RCVD_IN_SORBS_DUL 1 0.80 2.94 0.00 121 XM_H_AmazonPhish 1 0.80 2.94 0.00 122 HTTP_EXCESSIVE_ESCAPES 1 0.80 2.94 0.00 123 HTML_IMAGE_RATIO_04 1 4.00 2.94 4.40 124 XM_Body_Dirty_Words_01 1 0.80 2.94 0.00 125 HTML_IMAGE_ONLY_16 1 0.80 2.94 0.00 126 DKIM_ADSP_ALL 1 0.80 2.94 0.00 127 T_TooManySym_01 1 7.20 2.94 8.79 128 FSL_BULK_SIG 1 0.80 2.94 0.00 129 RCVD_IN_MSPIKE_BL 1 0.80 2.94 0.00 130 XM_Attn_01 1 0.80 2.94 0.00 131 HTML_IMAGE_RATIO_08 1 1.60 2.94 1.10 132 XM_H_Long_From01 1 0.80 2.94 0.00 133 XM_Evil_Numbers_Gen 1 5.60 2.94 6.59 134 HTML_IMAGE_ONLY_24 1 0.80 2.94 0.00 135 MIME_BASE64_TEXT 1 0.80 2.94 0.00 136 FILL_THIS_FORM 1 0.80 2.94 0.00 137 T_XMDrugObfuBody_00 1 0.80 2.94 0.00 138 FILL_THIS_FORM_LONG 1 0.80 2.94 0.00 139 FROM_SUSPICIOUS_NTLD_FP 1 0.80 2.94 0.00 140 TooManyTo_003 1 1.60 2.94 1.10 141 HTML_IMAGE_ONLY_20 1 2.40 2.94 2.20 142 XMNoVowels 1 5.60 2.94 6.59 143 XM_ShortIntro_01 1 1.60 2.94 1.10 144 XMBrknScrpt_02 1 0.80 2.94 0.00 145 TR_XM_MSPIKECOMBO 1 0.80 2.94 0.00 146 XM_B_Phish66 1 1.60 2.94 1.10 147 SUBJ_OBFU_PUNCT_FEW 1 0.80 2.94 0.00 148 RELAYCOUNTRY_AU 1 0.80 2.94 0.00 149 XM_BadFromFormat 1 0.80 2.94 0.00 150 RELAYCOUNTRY_IN 1 0.80 2.94 0.00 151 TR_XM_Undi_Recip6 1 0.80 2.94 0.00 152 TO_EQ_FM_DOM_HTML_ONLY 1 0.80 2.94 0.00 153 CHARSET_FARAWAY_HEADER 1 0.80 2.94 0.00 154 TR_XM_MaxWHORU 1 0.80 2.94 0.00 155 TR_Symld_Words 1 0.80 2.94 0.00 156 HELO_DYNAMIC_SPLIT_IP 1 0.80 2.94 0.00 157 URI_OPTOUT_3LD 1 0.80 2.94 0.00 158 XMCapTrack 1 1.60 2.94 1.10 159 TooManyTo_004 1 0.80 2.94 0.00 160 XMSubNoVowel 1 2.40 2.94 2.20 161 TR_XM_Undi_Recip2 1 0.80 2.94 0.00 162 LongTLD 1 0.80 2.94 0.00 163 TR_XM_Undi_Recip11 1 0.80 2.94 0.00 164 XMSubMetaSx_00 1 1.60 2.94 1.10 165 MIME_CHARSET_FARAWAY 1 0.80 2.94 0.00 166 XM_SPF_SoftFail 1 1.60 2.94 1.10 167 RCVD_IN_MSPIKE_L3 1 0.80 2.94 0.00 168 TO_NO_BRKTS_DYNIP 1 0.80 2.94 0.00 169 PDS_OTHER_BAD_TLD 1 0.80 2.94 0.00 170 BOTNET_NORDNS 1 0.80 2.94 0.00 171 FROM_SUSPICIOUS_NTLD 1 0.80 2.94 0.00 172 HTML_OBFUSCATE_05_10 1 0.80 2.94 0.00 173 TR_XM_Undi_RecipCombo2 1 0.80 2.94 0.00 174 TR_XM_Undi_RecipCombo3 1 0.80 2.94 0.00 175 XMPhish08 1 0.80 2.94 0.00 176 RELAYCOUNTRY_JP 1 0.80 2.94 0.00 177 RELAYCOUNTRY_CA 1 1.60 2.94 1.10 178 TR_XM_NoHeaderRelay 1 0.80 2.94 0.00 179 BAYES_95 1 0.80 2.94 0.00 180 RCVD_IN_PSBL 1 0.80 2.94 0.00 181 MIME_QP_LONG_LINE 1 0.80 2.94 0.00 182 BOUNCE_MESSAGE 1 4.00 2.94 4.40 183 HTML_IMAGE_RATIO_06 1 6.40 2.94 7.69 184 XMSexyCombo_01 1 0.80 2.94 0.00 185 T_XMDrugObfuBody_08 1 5.60 2.94 6.59 186 XM_CamelCaseFrm001 1 5.60 2.94 6.59 187 DATE_IN_PAST_24_48 1 0.80 2.94 0.00 188 XM_UB99 1 0.80 2.94 0.00 189 NO_DNS_FOR_FROM 1 0.80 2.94 0.00 190 SUBJ_DOLLARS 1 0.80 2.94 0.00 191 ANY_BOUNCE_MESSAGE 1 4.00 2.94 4.40 192 LONG_JUNK_URI3 1 0.80 2.94 0.00 193 XMBody_17 1 0.80 2.94 0.00 194 XM_H_PHPMailer 1 4.80 2.94 5.49 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 85 90.40 82.35 93.41 2 RELAYCOUNTRY_US 73 78.40 73.53 80.22 3 HTML_MESSAGE 70 77.60 79.41 76.92 4 DKIM_SIGNED 68 73.60 70.59 74.73 5 DKIM_VALID 66 70.40 64.71 72.53 6 XM_DK_Pass 66 71.20 67.65 72.53 7 XM_B_Unicode 63 62.40 44.12 69.23 8 BAYES_50 60 62.40 52.94 65.93 9 DKIM_VALID_AU 53 56.00 50.00 58.24 10 XM_B_SpammyWords 43 43.20 32.35 47.25 11 XM_B_Unicode3 39 40.80 35.29 42.86 12 DKIM_VALID_EF 37 35.20 20.59 40.66 13 XMListUnsubscribeExists 35 43.20 55.88 38.46 14 HTML_FONT_LOW_CONTRAST 30 29.60 20.59 32.97 15 FVGT_m_MULTI_ODD 26 34.40 50.00 28.57 16 RCVD_IN_MSPIKE_H2 23 25.60 26.47 25.27 17 T_TM2_M_HEADER_IN_MSG 23 24.80 23.53 25.27 18 XMSubLong 22 20.80 11.76 24.18 19 LOC_TINY_FONT_1 18 18.40 14.71 19.78 20 ALL_TRUSTED 17 13.60 0.00 18.68 21 TR_XM_DK_Unsub 17 17.60 14.71 18.68 22 XM_Multi_Part_URI 14 15.20 14.71 15.38 23 XM_Body_Dirty_Words 14 14.40 11.76 15.38 24 T_KAM_HTML_FONT_INVALID 13 12.00 5.88 14.29 25 TooManyTo_001 12 14.40 17.65 13.19 26 RCVD_IN_MSPIKE_WL 12 18.40 32.35 13.19 27 USER_IN_DEF_DKIM_WL 12 9.60 0.00 13.19 28 MIME_HTML_ONLY 12 17.60 29.41 13.19 29 BAYES_00 11 8.80 0.00 12.09 30 BAYES_60 11 12.00 11.76 12.09 31 XMNumbers 11 13.60 17.65 12.09 32 LOTS_OF_MONEY 10 12.00 14.71 10.99 33 UNPARSEABLE_RELAY 9 12.00 17.65 9.89 34 TR_XM_DK_Bayes2 8 6.40 0.00 8.79 35 TR_XM_DK_Bayes 8 6.40 0.00 8.79 36 XMStrtUSub 8 6.40 0.00 8.79 37 TR_XM_DK_Bayes1 8 6.40 0.00 8.79 38 HTML_IMAGE_RATIO_02 8 8.00 5.88 8.79 39 RCVD_IN_MSPIKE_H3 8 15.20 32.35 8.79 40 T_TooManySym_01 8 7.20 2.94 8.79 41 IN_ZIMBRA_NJ_WHITELIST 7 5.60 0.00 7.69 42 HTML_IMAGE_RATIO_06 7 6.40 2.94 7.69 43 XM_B_SpammyWords2 7 8.80 11.76 7.69 44 XM_B_Unsub 6 6.40 5.88 6.59 45 TR_XM_SpammyWords5 6 6.40 5.88 6.59 46 DCC_CHECK 6 9.60 17.65 6.59 47 TR_XM_SpammyWords4 6 5.60 2.94 6.59 48 T_TooManySym_02 6 5.60 2.94 6.59 49 XMNoVowels 6 5.60 2.94 6.59 50 XM_CamelCaseFrm001 6 5.60 2.94 6.59 51 T_XMDrugObfuBody_08 6 5.60 2.94 6.59 52 XM_Evil_Numbers_Gen 6 5.60 2.94 6.59 53 TR_XM_BayesUnsub 6 6.40 5.88 6.59 54 PLING_QUERY 5 4.00 0.00 5.49 55 XM_SendGrid 5 6.40 8.82 5.49 56 XM_H_PHPMailer 5 4.80 2.94 5.49 57 LotsOfNums_01 5 5.60 5.88 5.49 58 HTML_IMAGE_RATIO_04 4 4.00 2.94 4.40 59 T_REMOTE_IMAGE 4 4.80 5.88 4.40 60 XM_UncommonTLD01 4 15.20 44.12 4.40 61 XM_DK_Undo_02 4 10.40 26.47 4.40 62 RCVD_IN_MSPIKE_H4 4 3.20 0.00 4.40 63 SHORT_URI_2 4 3.20 0.00 4.40 64 XM_DKIMWhitelistDomains 4 3.20 0.00 4.40 65 BAYES_99 4 8.80 20.59 4.40 66 SHORT_SHORTNER 4 3.20 0.00 4.40 67 ANY_BOUNCE_MESSAGE 4 4.00 2.94 4.40 68 XMStockSpam_06 4 3.20 0.00 4.40 69 BOUNCE_MESSAGE 4 4.00 2.94 4.40 70 TR_XM_DKIM_Undo 4 7.20 14.71 4.40 71 XM_H_Undi_Recip 3 6.40 14.71 3.30 72 MSGID_NOFQDN1 3 2.40 0.00 3.30 73 TM2_M_HAS_BSLASH_URI 3 2.40 0.00 3.30 74 INVALID_MSGID 3 2.40 0.00 3.30 75 TR_XM_DK_SendGrid 3 3.20 2.94 3.30 76 XM_PDF 3 2.40 0.00 3.30 77 IN_HORDE_ADDRESS_BOOK 3 2.40 0.00 3.30 78 MAILING_LIST_MULTI 3 3.20 2.94 3.30 79 RELAYCOUNTRY_META 3 13.60 41.18 3.30 80 BAYES_999 3 5.60 11.76 3.30 81 XM_GoogleGroups 3 8.80 23.53 3.30 82 TO_MALFORMED 3 2.40 0.00 3.30 83 HTML_MIME_NO_HTML_TAG 3 8.80 23.53 3.30 84 TVD_SPACE_RATIO 3 2.40 0.00 3.30 85 DEAR_FRIEND 3 2.40 0.00 3.30 86 KHOP_HELO_FCRDNS 3 4.80 8.82 3.30 87 T_TooManySym_03 2 1.60 0.00 2.20 88 BAYES_40 2 1.60 0.00 2.20 89 XM_B_Phish_Phrases 2 1.60 0.00 2.20 90 RCVD_IN_IADB_OPTIN_GT50 2 1.60 0.00 2.20 91 RCVD_IN_IADB_VOUCHED 2 1.60 0.00 2.20 92 XMSubNoVowel 2 2.40 2.94 2.20 93 XMHTMLBadTable_001 2 2.40 2.94 2.20 94 XMSubPhish11 2 1.60 0.00 2.20 95 RCVD_IN_IADB_SENDERID 2 1.60 0.00 2.20 96 TR_XM_UnparsRelay 2 5.60 14.71 2.20 97 TM2_M_A_HREF_HREF 2 1.60 0.00 2.20 98 RCVD_IN_IADB_OPTIN 2 1.60 0.00 2.20 99 HTML_FONT_SIZE_LARGE 2 1.60 0.00 2.20 100 MIME_HTML_MOSTLY 2 2.40 2.94 2.20 101 GMD_PDF_SQUARE 2 1.60 0.00 2.20 102 HTML_IMAGE_ONLY_20 2 2.40 2.94 2.20 103 XM_B_Investor 2 3.20 5.88 2.20 104 TM2_M_VERY_LONG_WORD 2 8.00 23.53 2.20 105 FVGT_m_MULTI_ODD_EMAIL 2 1.60 0.00 2.20 106 RCVD_IN_IADB_DK 2 1.60 0.00 2.20 107 RCVD_IN_IADB_SPF 2 1.60 0.00 2.20 108 MPART_ALT_DIFF_COUNT 2 1.60 0.00 2.20 109 XM_ProductURIs 2 1.60 0.00 2.20 110 TR_XM_SB_Phish 2 1.60 0.00 2.20 111 XM_H_Trusted_IP 2 1.60 0.00 2.20 112 DKIM_INVALID 2 3.20 5.88 2.20 113 TR_XM_SpammyRelay 2 3.20 5.88 2.20 114 BAYES_05 2 1.60 0.00 2.20 115 XM_B_SpammyTLD 2 3.20 5.88 2.20 116 RCVD_IN_IADB_LISTED 2 1.60 0.00 2.20 117 TM2_M_URI_OPT_OUT 2 3.20 5.88 2.20 118 LONG_JUNK_URI 1 0.80 0.00 1.10 119 T_XMDrugObfuBody_14 1 0.80 0.00 1.10 120 XMSubMetaSx_00 1 1.60 2.94 1.10 121 RDNS_DYNAMIC 1 2.40 5.88 1.10 122 TR_Mismatch_TLD_01 1 0.80 0.00 1.10 123 XMLngstWrd_03 1 7.20 23.53 1.10 124 HTML_TEXT_INVISIBLE_STYLE 1 0.80 0.00 1.10 125 TR_MetaPhish_Combo_01b 1 0.80 0.00 1.10 126 XMCapTrack 1 1.60 2.94 1.10 127 SHOPIFY_IMG_NOT_RCVD_SFY 1 2.40 5.88 1.10 128 XM_Dr_From 1 0.80 0.00 1.10 129 BAYES_20 1 0.80 0.00 1.10 130 HTML_TITLE_SUBJ_DIFF 1 7.20 23.53 1.10 131 TR_XM_COVIDMETA1 1 0.80 0.00 1.10 132 TR_MetaPhish_Combo_01 1 0.80 0.00 1.10 133 XMGappySubj_01 1 0.80 0.00 1.10 134 RELAYCOUNTRY_NL 1 0.80 0.00 1.10 135 TooManyTo_002 1 1.60 2.94 1.10 136 XM_B_SpammyWords4 1 1.60 2.94 1.10 137 XM_B_Phish66 1 1.60 2.94 1.10 138 XMLngstWrd_00 1 7.20 23.53 1.10 139 RELAYCOUNTRY_IT 1 0.80 0.00 1.10 140 MIME_HTML_ONLY_MULTI 1 7.20 23.53 1.10 141 T_OBFU_PDF_ATTACH 1 0.80 0.00 1.10 142 MIME_BOUND_DIGITS_15 1 0.80 0.00 1.10 143 XM_ShortIntro_01 1 1.60 2.94 1.10 144 TR_XM_PhishingBody 1 2.40 5.88 1.10 145 XMOemUri 1 0.80 0.00 1.10 146 XM_B_SpammyWords3 1 4.00 11.76 1.10 147 TooManyTo_003 1 1.60 2.94 1.10 148 TR_XM_SpammyWords2 1 0.80 0.00 1.10 149 UPPERCASE_75_100 1 7.20 23.53 1.10 150 XMLngstWrd_04 1 7.20 23.53 1.10 151 XM_OfRef6 1 0.80 0.00 1.10 152 TO_EQ_FM_DOM_HTML_IMG 1 0.80 0.00 1.10 153 XMLngstWrd_01 1 7.20 23.53 1.10 154 XM_TLDProd2 1 0.80 0.00 1.10 155 FROM_EXCESS_BASE64 1 0.80 0.00 1.10 156 RELAYCOUNTRY_CA 1 1.60 2.94 1.10 157 TR_XM_Spammywords 1 0.80 0.00 1.10 158 XMLngstWrd_02 1 7.20 23.53 1.10 159 WEIRD_PORT 1 0.80 0.00 1.10 160 HK_RANDOM_ENVFROM 1 0.80 0.00 1.10 161 XM_B_DNDMA 1 0.80 0.00 1.10 162 XM_S_SpammyWords 1 0.80 0.00 1.10 163 XMSubMetaSxObfu_03 1 0.80 0.00 1.10 164 HELO_NO_DOMAIN 1 0.80 0.00 1.10 165 HELO_NODOT 1 0.80 0.00 1.10 166 XM_DIRTYINTL 1 2.40 5.88 1.10 167 HTML_IMAGE_RATIO_08 1 1.60 2.94 1.10 168 XM_SPF_SoftFail 1 1.60 2.94 1.10 169 MPART_ALT_DIFF 1 7.20 23.53 1.10 170 GOOG_STO_NOIMG_HTML 1 0.80 0.00 1.10 ----------------------------------------------------------------------