Email: 226 Autolearn: 0 AvgScore: 2.47 AvgScanTime: 2.21 sec Spam: 52 Autolearn: 0 AvgScore: 13.98 AvgScanTime: 2.73 sec Ham: 174 Autolearn: 0 AvgScore: -0.97 AvgScanTime: 2.05 sec Time Spent Running SA: 0.14 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.10 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 45 66.37 86.54 60.34 2 DKIM_SIGNED 44 62.39 84.62 55.75 3 XM_DK_Pass 40 58.85 76.92 53.45 4 DKIM_VALID 39 57.52 75.00 52.30 5 RELAYCOUNTRY_US 36 60.62 69.23 58.05 6 XMListUnsubscribeExists 36 38.05 69.23 28.74 7 XM_B_Unicode 36 50.00 69.23 44.25 8 DCC_CHECK_NEGATIVE 31 82.30 59.62 89.08 9 XM_B_SpammyWords 31 35.84 59.62 28.74 10 DKIM_VALID_AU 27 42.48 51.92 39.66 11 RCVD_IN_MSPIKE_H2 26 28.76 50.00 22.41 12 BAYES_50 23 60.18 44.23 64.94 13 XM_DK_Undo_02 22 11.50 42.31 2.30 14 XM_B_Unicode3 22 27.43 42.31 22.99 15 FVGT_m_MULTI_ODD 21 23.01 40.38 17.82 16 DCC_CHECK 21 17.70 40.38 10.92 17 LOC_TINY_FONT_1 18 24.34 34.62 21.26 18 TR_XM_DKIM_Undo 15 7.96 28.85 1.72 19 UNTRUSTED_Relay 14 7.52 26.92 1.72 20 BOTNET 14 7.08 26.92 1.15 21 DKIM_VALID_EF 13 32.30 25.00 34.48 22 RELAYCOUNTRY_META 13 11.50 25.00 7.47 23 MIME_HTML_ONLY 13 26.11 25.00 26.44 24 T_KAM_HTML_FONT_INVALID 13 16.37 25.00 13.79 25 XM_B_SpammyWords2 13 11.50 25.00 7.47 26 T_TM2_M_HEADER_IN_MSG 13 20.80 25.00 19.54 27 BAYES_99 12 5.75 23.08 0.57 28 XM_B_SpammyTLD 12 7.96 23.08 3.45 29 XM_Body_Dirty_Words 11 8.41 21.15 4.60 30 XMSubLong 11 19.91 21.15 19.54 31 XM_Multi_Part_URI 11 20.80 21.15 20.69 32 BOTNET_IPINHOSTNAME 10 6.19 19.23 2.30 33 TR_XM_SpammyRelay 10 6.64 19.23 2.87 34 UNPARSEABLE_RELAY 10 15.04 19.23 13.79 35 XM_UB50 9 5.31 17.31 1.72 36 HTML_FONT_LOW_CONTRAST 9 16.81 17.31 16.67 37 BAYES_999 9 4.42 17.31 0.57 38 TR_XM_DK_Unsub 9 18.58 17.31 18.97 39 XM_UncommonTLD01 7 9.29 13.46 8.05 40 TM2_M_VERY_LONG_WORD 7 4.42 13.46 1.72 41 MPART_ALT_DIFF 7 5.31 13.46 2.87 42 XM_URI_RBL 7 3.98 13.46 1.15 43 XMGenDplmaNmb 6 3.54 11.54 1.15 44 XM_H_Long_From02 6 3.10 11.54 0.57 45 XMDiploma_00 6 3.54 11.54 1.15 46 MIME_CHARSET_FARAWAY 6 3.54 11.54 1.15 47 T_XMDrugObfuBody_08 6 3.10 11.54 0.57 48 XM_B_Investor 6 2.65 11.54 0.00 49 BAYES_80 5 2.21 9.62 0.00 50 XM_B_Unsub 5 5.31 9.62 4.02 51 XMSubMetaSx_00 5 2.21 9.62 0.00 52 HTML_IMAGE_RATIO_02 5 4.42 9.62 2.87 53 URI_NOVOWEL 5 2.21 9.62 0.00 54 SpammyFromTLD_01 5 3.54 9.62 1.72 55 DKIM_INVALID 5 4.87 9.62 3.45 56 LOTS_OF_MONEY 5 2.65 9.62 0.57 57 TR_XM_BayesUnsub 5 4.87 9.62 3.45 58 XMSexyCombo_05 5 2.65 9.62 0.57 59 MAILING_LIST_MULTI 5 4.42 9.62 2.87 60 RCVD_IN_MSPIKE_WL 5 14.60 9.62 16.09 61 RCVD_IN_MSPIKE_H3 4 11.95 7.69 13.22 62 MIME_HTML_MOSTLY 4 2.21 7.69 0.57 63 TR_DCC_Bayes_99 4 1.77 7.69 0.00 64 BAYES_60 4 7.96 7.69 8.05 65 XM_Evil_Numbers_Gen 4 4.87 7.69 4.02 66 BOTNET_NORDNS 4 1.77 7.69 0.00 67 FSL_BULK_SIG 4 3.54 7.69 2.30 68 HTML_IMAGE_RATIO_04 4 4.87 7.69 4.02 69 TR_XM_UnparsRelay 4 1.77 7.69 0.00 70 XMNumbers 4 5.75 7.69 5.17 71 TooManyTo_001 4 5.75 7.69 5.17 72 XM_GoogleGroups 3 3.10 5.77 2.30 73 DIET_1 3 1.77 5.77 0.57 74 FROM_SUSPICIOUS_NTLD 3 1.77 5.77 0.57 75 TR_XM_PHPDW 3 1.33 5.77 0.00 76 UPPERCASE_75_100 3 2.65 5.77 1.72 77 TR_XM_FormFill2 3 1.33 5.77 0.00 78 BAYES_05 3 8.85 5.77 9.77 79 RELAYCOUNTRY_IE 3 1.77 5.77 0.57 80 RCVD_IN_BL_SPAMCOP_NET 3 1.77 5.77 0.57 81 HTML_TITLE_SUBJ_DIFF 3 2.65 5.77 1.72 82 XM_H_PHPMailer 3 4.87 5.77 4.60 83 XMSubject_16 3 1.33 5.77 0.00 84 XMLngstWrd_03 3 2.65 5.77 1.72 85 BAYES_20 3 2.65 5.77 1.72 86 MIME_HTML_ONLY_MULTI 3 3.10 5.77 2.30 87 XM_UB80 3 1.33 5.77 0.00 88 XMLngstWrd_04 3 2.65 5.77 1.72 89 XMLngstWrd_01 3 2.65 5.77 1.72 90 RELAYCOUNTRY_AT 3 1.33 5.77 0.00 91 HTML_MIME_NO_HTML_TAG 3 3.10 5.77 2.30 92 PDS_OTHER_BAD_TLD 3 1.33 5.77 0.00 93 RCVD_IN_VALIDITY_SAFE 3 1.33 5.77 0.00 94 XMLngstWrd_02 3 2.65 5.77 1.72 95 XMSubNoVowel 3 1.77 5.77 0.57 96 XM_B_SpammyWords3 3 1.77 5.77 0.57 97 XM_H_PHPOS_M 3 1.33 5.77 0.00 98 TR_XM_PHPForged 3 1.33 5.77 0.00 99 SpammyFromTLD_02 3 2.21 5.77 1.15 100 RCVD_IN_VALIDITY_CERTIFIED 3 1.33 5.77 0.00 101 XM_H_PHPOS 3 1.33 5.77 0.00 102 HTML_IMAGE_RATIO_08 3 1.77 5.77 0.57 103 XMLngstWrd_00 3 2.65 5.77 1.72 104 T_TooManySym_02 2 5.75 3.85 6.32 105 XMSubLongNoVowel 2 0.88 3.85 0.00 106 NO_DNS_FOR_FROM 2 1.33 3.85 0.57 107 INVALID_MSGID 2 3.98 3.85 4.02 108 TR_XM_InvalidRelay 2 0.88 3.85 0.00 109 TooManyTo_002 2 2.65 3.85 2.30 110 T_FILL_THIS_FORM_SHORT 2 1.33 3.85 0.57 111 TR_XM_SpammyWords4 2 1.33 3.85 0.57 112 XM_Body_Dirty_Words_01 2 0.88 3.85 0.00 113 XMStrtUSub 2 7.08 3.85 8.05 114 XMSubject_78 2 0.88 3.85 0.00 115 TR_XM_FormFill 2 0.88 3.85 0.00 116 HELO_NODOT 2 1.33 3.85 0.57 117 XM_UB60 2 0.88 3.85 0.00 118 HELO_NO_DOMAIN 2 1.33 3.85 0.57 119 MIME_QP_LONG_LINE 2 1.33 3.85 0.57 120 XM_DIRTYINTL 2 1.77 3.85 1.15 121 TR_XM_INV_DKIM 2 0.88 3.85 0.00 122 T_TooManySym_01 2 6.19 3.85 6.90 123 XMSolicitRefs_0 2 0.88 3.85 0.00 124 RELAYCOUNTRY_FR 2 0.88 3.85 0.00 125 FSL_HELO_NON_FQDN_1 2 0.88 3.85 0.00 126 XMHTML_After_End 2 1.77 3.85 1.15 127 XMSubMetaSxObfu_03 2 0.88 3.85 0.00 128 TR_XM_SpammyWords5 2 0.88 3.85 0.00 129 HTML_FONT_FACE_BAD 2 1.77 3.85 1.15 130 DKIM_ADSP_NXDOMAIN 2 0.88 3.85 0.00 131 TR_XM_PhishingBody 2 0.88 3.85 0.00 132 XM_B_SEO 2 0.88 3.85 0.00 133 XM_SPF_SoftFail 2 2.21 3.85 1.72 134 LongTLD 2 1.33 3.85 0.57 135 XMSolicitRefs_4 2 0.88 3.85 0.00 136 SORTED_RECIPS 1 0.44 1.92 0.00 137 TM2_M_A_HREF_HREF 1 0.44 1.92 0.00 138 FILL_THIS_FORM_LONG 1 0.44 1.92 0.00 139 XM_Lotto 1 0.44 1.92 0.00 140 RCVD_IN_PSBL 1 0.44 1.92 0.00 141 XM_B_Phish66 1 0.44 1.92 0.00 142 NOT_SPAM 1 0.44 1.92 0.00 143 LotsOfNums_01 1 2.65 1.92 2.87 144 TR_BOTNET_NEGATE 1 0.88 1.92 0.57 145 T_XMHurry_01 1 0.44 1.92 0.00 146 XMCmmnCold 1 0.44 1.92 0.00 147 RCVD_IN_IADB_LISTED 1 0.88 1.92 0.57 148 TR_LOTS_OF_MONEY1 1 0.44 1.92 0.00 149 XMhairloss01 1 0.44 1.92 0.00 150 RCVD_IN_VALIDITY_RPBL 1 0.88 1.92 0.57 151 BAYES_00 1 8.41 1.92 10.34 152 TR_XM_SB_Phish 1 0.44 1.92 0.00 153 RCVD_IN_IADB_VOUCHED 1 0.88 1.92 0.57 154 XMSubEmpty 1 0.88 1.92 0.57 155 TR_Mismatch_TLD_02 1 0.44 1.92 0.00 156 FILL_THIS_FORM 1 0.44 1.92 0.00 157 KHOP_HELO_FCRDNS 1 0.88 1.92 0.57 158 MIXED_CENTER_CASE 1 0.44 1.92 0.00 159 TR_XM_DK_Bayes1 1 7.52 1.92 9.20 160 RELAYCOUNTRY_PL 1 0.44 1.92 0.00 161 T_TooManySym_03 1 2.65 1.92 2.87 162 TR_XM_Undi_RecipCombo3 1 0.44 1.92 0.00 163 XMPhish08 1 0.44 1.92 0.00 164 CHARSET_FARAWAY_HEADER 1 0.88 1.92 0.57 165 XM_H_Undi_Recip 1 0.44 1.92 0.00 166 XMReplyNow 1 0.44 1.92 0.00 167 LOADSA_MONEY_COMBO 1 0.44 1.92 0.00 168 TR_XM_RelayPhish 1 0.44 1.92 0.00 169 XM_B_Phish_Phrases 1 1.33 1.92 1.15 170 TR_XM_NoHeaderRelay 1 0.88 1.92 0.57 171 ADVANCE_FEE_3_NEW_FRM_MNY 1 0.44 1.92 0.00 172 TooManyTo_005 1 0.88 1.92 0.57 173 TR_LOTS_OF_MONEY2 1 0.44 1.92 0.00 174 T_XMHurry_00 1 0.88 1.92 0.57 175 XMSexyCombo_02 1 0.44 1.92 0.00 176 TR_XM_Undi_RecipCombo2 1 0.44 1.92 0.00 177 XMBody_03 1 0.44 1.92 0.00 178 ADVANCE_FEE_5_NEW_MONEY 1 0.44 1.92 0.00 179 RELAYCOUNTRY_AU 1 1.33 1.92 1.15 180 SHORT_URI_3 1 0.44 1.92 0.00 181 XMSexyCombo_01 1 0.44 1.92 0.00 182 T_TooManySym_04 1 0.44 1.92 0.00 183 TR_XM_SpammyWords2 1 0.44 1.92 0.00 184 RCVD_IN_MSPIKE_H4 1 0.44 1.92 0.00 185 T_REMOTE_IMAGE 1 3.54 1.92 4.02 186 XM_SendGrid 1 7.96 1.92 9.77 187 TR_XM_Undi_Recip2 1 0.44 1.92 0.00 188 RCVD_IN_RP_RNBL 1 0.44 1.92 0.00 189 XM_H_Long_From01 1 4.87 1.92 5.75 190 MONEY_FRAUD_8 1 0.44 1.92 0.00 191 TR_XM_Undi_Recip11 1 0.44 1.92 0.00 192 HTML_IMAGE_ONLY_24 1 0.44 1.92 0.00 193 LONG_JUNK_URI2 1 0.44 1.92 0.00 194 TR_XM_Undi_Recip5 1 0.44 1.92 0.00 195 URIBL_DBL_SPAM 1 0.44 1.92 0.00 196 RELAYCOUNTRY_BE 1 0.44 1.92 0.00 197 TooManyTo_003 1 0.88 1.92 0.57 198 SHORTENED_URL_HREF 1 0.44 1.92 0.00 199 URI_TRY_3LD 1 0.44 1.92 0.00 200 T_MONEY_PERCENT 1 0.44 1.92 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 155 82.30 59.62 89.08 2 BAYES_50 113 60.18 44.23 64.94 3 HTML_MESSAGE 105 66.37 86.54 60.34 4 RELAYCOUNTRY_US 101 60.62 69.23 58.05 5 DKIM_SIGNED 97 62.39 84.62 55.75 6 XM_DK_Pass 93 58.85 76.92 53.45 7 DKIM_VALID 91 57.52 75.00 52.30 8 XM_B_Unicode 77 50.00 69.23 44.25 9 DKIM_VALID_AU 69 42.48 51.92 39.66 10 ALL_TRUSTED 64 28.76 1.92 36.78 11 DKIM_VALID_EF 60 32.30 25.00 34.48 12 XM_B_SpammyWords 50 35.84 59.62 28.74 13 XMListUnsubscribeExists 50 38.05 69.23 28.74 14 TM2_M_URI_OPT_OUT 48 21.24 0.00 27.59 15 MIME_HTML_ONLY 46 26.11 25.00 26.44 16 BOUNCE_MESSAGE 42 18.58 0.00 24.14 17 ANY_BOUNCE_MESSAGE 42 18.58 0.00 24.14 18 XM_B_Unicode3 40 27.43 42.31 22.99 19 RCVD_IN_MSPIKE_H2 39 28.76 50.00 22.41 20 LOC_TINY_FONT_1 37 24.34 34.62 21.26 21 XM_Multi_Part_URI 36 20.80 21.15 20.69 22 T_TM2_M_HEADER_IN_MSG 34 20.80 25.00 19.54 23 XMSubLong 34 19.91 21.15 19.54 24 TR_XM_DK_Unsub 33 18.58 17.31 18.97 25 FVGT_m_MULTI_ODD 31 23.01 40.38 17.82 26 HTML_FONT_LOW_CONTRAST 29 16.81 17.31 16.67 27 RCVD_IN_MSPIKE_WL 28 14.60 9.62 16.09 28 UNPARSEABLE_RELAY 24 15.04 19.23 13.79 29 T_KAM_HTML_FONT_INVALID 24 16.37 25.00 13.79 30 RCVD_IN_MSPIKE_H3 23 11.95 7.69 13.22 31 DCC_CHECK 19 17.70 40.38 10.92 32 BAYES_00 18 8.41 1.92 10.34 33 XM_SendGrid 17 7.96 1.92 9.77 34 BAYES_05 17 8.85 5.77 9.77 35 TR_XM_DK_Bayes 16 7.52 1.92 9.20 36 TR_XM_DK_Bayes1 16 7.52 1.92 9.20 37 XM_UncommonTLD01 14 9.29 13.46 8.05 38 XM_DKIMWhitelistDomains 14 6.19 0.00 8.05 39 XMStrtUSub 14 7.08 3.85 8.05 40 BAYES_60 14 7.96 7.69 8.05 41 TR_XM_DK_Bayes2 13 5.75 0.00 7.47 42 XM_B_SpammyWords2 13 11.50 25.00 7.47 43 RELAYCOUNTRY_META 13 11.50 25.00 7.47 44 T_TooManySym_01 12 6.19 3.85 6.90 45 TR_XM_DK_SendGrid 12 5.75 1.92 6.90 46 XM_CamelCaseFrm001 12 5.75 1.92 6.90 47 T_TooManySym_02 11 5.75 3.85 6.32 48 IN_ZIMBRA_NJ_WHITELIST 10 4.42 0.00 5.75 49 XM_H_Long_From01 10 4.87 1.92 5.75 50 TooManyTo_001 9 5.75 7.69 5.17 51 XMNumbers 9 5.75 7.69 5.17 52 FROM_GOV_SPOOF 8 3.54 0.00 4.60 53 SHORT_SHORTNER 8 3.54 0.00 4.60 54 USER_IN_DEF_DKIM_WL 8 3.54 0.00 4.60 55 XM_H_PHPMailer 8 4.87 5.77 4.60 56 XM_Body_Dirty_Words 8 8.41 21.15 4.60 57 T_REMOTE_IMAGE 7 3.54 1.92 4.02 58 MSGID_NOFQDN1 7 3.10 0.00 4.02 59 HTML_IMAGE_RATIO_04 7 4.87 7.69 4.02 60 XM_B_Unsub 7 5.31 9.62 4.02 61 INVALID_MSGID 7 3.98 3.85 4.02 62 TVD_SPACE_RATIO 7 3.10 0.00 4.02 63 XM_Evil_Numbers_Gen 7 4.87 7.69 4.02 64 TO_MALFORMED 7 3.10 0.00 4.02 65 TM2_M_HAS_BSLASH_URI 6 3.10 1.92 3.45 66 XM_B_SpammyTLD 6 7.96 23.08 3.45 67 DKIM_INVALID 6 4.87 9.62 3.45 68 TR_XM_BayesUnsub 6 4.87 9.62 3.45 69 MAILING_LIST_MULTI 5 4.42 9.62 2.87 70 RELAYCOUNTRY_GB 5 2.21 0.00 2.87 71 BAYES_40 5 2.65 1.92 2.87 72 XM_DK_Undo_01 5 2.21 0.00 2.87 73 LotsOfNums_01 5 2.65 1.92 2.87 74 RCVD_IN_MSPIKE_H5 5 2.21 0.00 2.87 75 HTML_IMAGE_RATIO_02 5 4.42 9.62 2.87 76 TR_XM_SpammyRelay 5 6.64 19.23 2.87 77 MPART_ALT_DIFF 5 5.31 13.46 2.87 78 TR_MetaPhish_Combo_01b 5 2.21 0.00 2.87 79 T_TooManySym_03 5 2.65 1.92 2.87 80 HTML_MIME_NO_HTML_TAG 4 3.10 5.77 2.30 81 FVGT_m_MULTI_ODD_EMAIL 4 1.77 0.00 2.30 82 FSL_BULK_SIG 4 3.54 7.69 2.30 83 XM_ZIP 4 1.77 0.00 2.30 84 HTML_IMAGE_RATIO_06 4 1.77 0.00 2.30 85 XM_GoogleGroups 4 3.10 5.77 2.30 86 BOTNET_IPINHOSTNAME 4 6.19 19.23 2.30 87 XM_DK_Undo_02 4 11.50 42.31 2.30 88 TooManyTo_002 4 2.65 3.85 2.30 89 MIME_HTML_ONLY_MULTI 4 3.10 5.77 2.30 90 TR_Sbj_FN_Bdy 3 1.33 0.00 1.72 91 XM_B_Unsub2 3 1.33 0.00 1.72 92 TR_XM_DKIM_Undo 3 7.96 28.85 1.72 93 XMLngstWrd_02 3 2.65 5.77 1.72 94 XMNoVowels 3 1.33 0.00 1.72 95 XM_SPF_SoftFail 3 2.21 3.85 1.72 96 XMLngstWrd_00 3 2.65 5.77 1.72 97 UPPERCASE_75_100 3 2.65 5.77 1.72 98 XM_UB50 3 5.31 17.31 1.72 99 SpammyFromTLD_01 3 3.54 9.62 1.72 100 HTML_TITLE_SUBJ_DIFF 3 2.65 5.77 1.72 101 BAYES_95 3 1.33 0.00 1.72 102 TM2_M_VERY_LONG_WORD 3 4.42 13.46 1.72 103 UNTRUSTED_Relay 3 7.52 26.92 1.72 104 BAYES_20 3 2.65 5.77 1.72 105 XMGappySubj_01 3 1.33 0.00 1.72 106 XMLngstWrd_03 3 2.65 5.77 1.72 107 XMLngstWrd_01 3 2.65 5.77 1.72 108 XMLngstWrd_04 3 2.65 5.77 1.72 109 XM_PDF 3 1.33 0.00 1.72 110 XMHTML_After_End 2 1.77 3.85 1.15 111 XMDiploma_00 2 3.54 11.54 1.15 112 RELAYCOUNTRY_AU 2 1.33 1.92 1.15 113 BOTNET 2 7.08 26.92 1.15 114 TR_XM_PSC1 2 0.88 0.00 1.15 115 XM_H_SpoofStaff4 2 0.88 0.00 1.15 116 XM_URI_RBL 2 3.98 13.46 1.15 117 TR_XM_SpoofPhishAttach 2 0.88 0.00 1.15 118 DKIM_ADSP_CUSTOM_MED 2 0.88 0.00 1.15 119 SpammyFromTLD_02 2 2.21 5.77 1.15 120 MIME_CHARSET_FARAWAY 2 3.54 11.54 1.15 121 T_XMDrugObfuBody_14 2 0.88 0.00 1.15 122 TR_XM_SpoofStaff 2 0.88 0.00 1.15 123 HTML_FONT_FACE_BAD 2 1.77 3.85 1.15 124 TR_Symld_Words 2 0.88 0.00 1.15 125 RELAYCOUNTRY_NL 2 0.88 0.00 1.15 126 NML_ADSP_CUSTOM_MED 2 0.88 0.00 1.15 127 XM_ZohoDesk1 2 0.88 0.00 1.15 128 XM_Body_Obfu01 2 0.88 0.00 1.15 129 XMGenDplmaNmb 2 3.54 11.54 1.15 130 XMSpoofStaff2 2 0.88 0.00 1.15 131 IN_HORDE_ADDRESS_BOOK 2 0.88 0.00 1.15 132 SUBJ_ALL_CAPS 2 0.88 0.00 1.15 133 SHORT_URI_2 2 0.88 0.00 1.15 134 TR_MSPIKEBAYES00 2 0.88 0.00 1.15 135 XM_DIRTYINTL 2 1.77 3.85 1.15 136 XMBody_95 2 0.88 0.00 1.15 137 HTML_IMAGE_ONLY_08 2 0.88 0.00 1.15 138 XM_B_Phish_Phrases 2 1.33 1.92 1.15 139 RELAYCOUNTRY_GR 1 0.44 0.00 0.57 140 NICE_REPLY_A 1 0.44 0.00 0.57 141 XMSexyCombo_05 1 2.65 9.62 0.57 142 HDRS_MISSP 1 0.44 0.00 0.57 143 XMGappySubj_02 1 0.44 0.00 0.57 144 XM_B_SpammyWords3 1 1.77 5.77 0.57 145 TR_XM_Base64_M1 1 0.44 0.00 0.57 146 XM_B_DNDMA 1 0.44 0.00 0.57 147 XM_S_SubURI 1 0.44 0.00 0.57 148 XMSubNoVowel 1 1.77 5.77 0.57 149 RCVD_IN_IADB_SPF 1 0.44 0.00 0.57 150 CTE_8BIT_MISMATCH 1 0.44 0.00 0.57 151 RELAYCOUNTRY_TR 1 0.88 1.92 0.57 152 TR_Mismatch_TLD_01 1 0.44 0.00 0.57 153 HTML_IMAGE_RATIO_08 1 1.77 5.77 0.57 154 TooManyTo_003 1 0.88 1.92 0.57 155 TR_MetaPhish_Combo_01 1 0.44 0.00 0.57 156 TO_EQ_FM_DOM_HTML_IMG 1 0.44 0.00 0.57 157 TooManyTo_004 1 0.88 1.92 0.57 158 WEIRD_PORT 1 0.44 0.00 0.57 159 LongTLD 1 1.33 3.85 0.57 160 T_XMDrugObfuBody_08 1 3.10 11.54 0.57 161 XM_H_Trusted_IP 1 0.44 0.00 0.57 162 XMBrknScrpt_02 1 0.88 1.92 0.57 163 RELAYCOUNTRY_DE 1 0.44 0.00 0.57 164 RCVD_IN_IADB_OPTIN 1 0.44 0.00 0.57 165 FROM_SUSPICIOUS_NTLD 1 1.77 5.77 0.57 166 XMEqualsVooDoo_00 1 0.44 0.00 0.57 167 NO_DNS_FOR_FROM 1 1.33 3.85 0.57 168 MIME_BASE64_TEXT 1 0.44 0.00 0.57 169 TR_BOTNET_NEGATE 1 0.88 1.92 0.57 170 RCVD_IN_IADB_LISTED 1 0.88 1.92 0.57 171 XM_welchrandall_Whitelist 1 0.44 0.00 0.57 172 BAYES_99 1 5.75 23.08 0.57 173 RCVD_IN_IADB_DK 1 0.44 0.00 0.57 174 DIET_1 1 1.77 5.77 0.57 175 KHOP_HELO_FCRDNS 1 0.88 1.92 0.57 176 RCVD_IN_BL_SPAMCOP_NET 1 1.77 5.77 0.57 177 XMSubEmpty 1 0.88 1.92 0.57 178 RCVD_IN_IADB_SENDERID 1 0.44 0.00 0.57 179 T_FILL_THIS_FORM_SHORT 1 1.33 3.85 0.57 180 RCVD_IN_VALIDITY_RPBL 1 0.88 1.92 0.57 181 GOOG_STO_HTML_PHISH 1 0.44 0.00 0.57 182 PLING_QUERY 1 0.44 0.00 0.57 183 RELAYCOUNTRY_IE 1 1.77 5.77 0.57 184 RCVD_IN_IADB_VOUCHED 1 0.88 1.92 0.57 185 MIME_HTML_MOSTLY 1 2.21 7.69 0.57 186 TR_XM_SpammyWords4 1 1.33 3.85 0.57 187 GOOG_STO_NOIMG_HTML 1 0.44 0.00 0.57 188 XM_H_Long_From02 1 3.10 11.54 0.57 189 FROM_MISSPACED 1 0.44 0.00 0.57 190 CHARSET_FARAWAY_HEADER 1 0.88 1.92 0.57 191 FROM_WSP_TRAIL 1 0.44 0.00 0.57 192 BAYES_999 1 4.42 17.31 0.57 193 TR_XM_NoHeaderRelay 1 0.88 1.92 0.57 194 LOTS_OF_MONEY 1 2.65 9.62 0.57 195 RELAYCOUNTRY_SG 1 0.44 0.00 0.57 196 MIME_QP_LONG_LINE 1 1.33 3.85 0.57 197 T_XMHurry_00 1 0.88 1.92 0.57 198 TooManyTo_005 1 0.88 1.92 0.57 199 URI_NO_WWW_INFO_CGI 1 0.44 0.00 0.57 200 HELO_NO_DOMAIN 1 1.33 3.85 0.57 ----------------------------------------------------------------------