Email: 289 Autolearn: 0 AvgScore: 2.17 AvgScanTime: 4.95 sec Spam: 59 Autolearn: 0 AvgScore: 15.49 AvgScanTime: 4.49 sec Ham: 230 Autolearn: 0 AvgScore: -1.25 AvgScanTime: 5.07 sec Time Spent Running SA: 0.40 hours Time Spent Processing Spam: 0.07 hours Time Spent Processing Ham: 0.32 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 52 68.51 88.14 63.48 2 DKIM_SIGNED 48 66.44 81.36 62.61 3 XM_DK_Pass 46 62.28 77.97 58.26 4 RELAYCOUNTRY_US 44 68.51 74.58 66.96 5 DKIM_VALID 44 61.25 74.58 57.83 6 DCC_CHECK_NEGATIVE 43 89.27 72.88 93.48 7 XM_B_Unicode 38 48.10 64.41 43.91 8 XM_B_SpammyWords 34 40.14 57.63 35.65 9 DKIM_VALID_AU 33 48.79 55.93 46.96 10 XMListUnsubscribeExists 27 27.34 45.76 22.61 11 FVGT_m_MULTI_ODD 26 21.11 44.07 15.22 12 BAYES_50 26 55.71 44.07 58.70 13 XM_B_Unicode3 24 25.61 40.68 21.74 14 DKIM_VALID_EF 23 37.72 38.98 37.39 15 XM_DK_Undo_02 21 7.96 35.59 0.87 16 RCVD_IN_MSPIKE_H2 20 19.38 33.90 15.65 17 XM_B_SpammyWords2 19 17.99 32.20 14.35 18 T_KAM_HTML_FONT_INVALID 19 15.92 32.20 11.74 19 RELAYCOUNTRY_META 18 10.38 30.51 5.22 20 HTML_FONT_LOW_CONTRAST 17 19.03 28.81 16.52 21 BAYES_99 17 6.57 28.81 0.87 22 LOC_TINY_FONT_1 17 16.96 28.81 13.91 23 DCC_CHECK 16 10.03 27.12 5.65 24 XMSubLong 15 21.45 25.42 20.43 25 TR_XM_DKIM_Undo 14 5.19 23.73 0.43 26 XM_B_Unsub 13 14.53 22.03 12.61 27 UNTRUSTED_Relay 13 5.88 22.03 1.74 28 XM_Body_Dirty_Words 13 10.03 22.03 6.96 29 MIME_HTML_ONLY 12 15.22 20.34 13.91 30 XM_Multi_Part_URI 12 15.22 20.34 13.91 31 TR_XM_BayesUnsub 12 12.80 20.34 10.87 32 XM_H_Long_From01 11 10.03 18.64 7.83 33 UNPARSEABLE_RELAY 11 12.80 18.64 11.30 34 TR_XM_SpammyWords5 10 3.81 16.95 0.43 35 XM_B_SpammyTLD 10 5.54 16.95 2.61 36 BOTNET 9 3.11 15.25 0.00 37 XM_UB50 9 4.15 15.25 1.30 38 TR_XM_SpammyWords4 9 4.15 15.25 1.30 39 LOTS_OF_MONEY 9 5.88 15.25 3.48 40 FSL_BULK_SIG 8 4.50 13.56 2.17 41 T_TM2_M_HEADER_IN_MSG 8 19.72 13.56 21.30 42 BAYES_999 8 3.46 13.56 0.87 43 BOTNET_IPINHOSTNAME 7 3.11 11.86 0.87 44 XM_UncommonTLD01 7 11.07 11.86 10.87 45 XM_B_SpammyWords3 7 3.81 11.86 1.74 46 RCVD_IN_MSPIKE_WL 7 13.49 11.86 13.91 47 TR_XM_Undi_Recip11 7 2.42 11.86 0.00 48 TR_XM_UnparsRelay 7 3.11 11.86 0.87 49 XM_H_Undi_Recip 7 2.77 11.86 0.43 50 TR_XM_SpammyRelay 7 3.81 11.86 1.74 51 XMLngstWrd_00 6 3.46 10.17 1.74 52 UPPERCASE_75_100 6 3.81 10.17 2.17 53 TM2_M_VERY_LONG_WORD 6 3.46 10.17 1.74 54 RCVD_IN_VALIDITY_RPBL 6 2.42 10.17 0.43 55 MPART_ALT_DIFF 6 3.81 10.17 2.17 56 RCVD_IN_MSPIKE_H3 6 11.07 10.17 11.30 57 XM_DK_Undo_01 6 2.08 10.17 0.00 58 XMLngstWrd_01 6 3.46 10.17 1.74 59 PDS_OTHER_BAD_TLD 6 2.08 10.17 0.00 60 XMLngstWrd_03 5 3.11 8.47 1.74 61 HTML_MIME_NO_HTML_TAG 5 7.96 8.47 7.83 62 MIME_CHARSET_FARAWAY 5 2.42 8.47 0.87 63 KHOP_HELO_FCRDNS 5 3.46 8.47 2.17 64 RELAYCOUNTRY_CN 5 1.73 8.47 0.00 65 BAYES_60 5 11.42 8.47 12.17 66 XMSlimDrugH 5 2.08 8.47 0.43 67 SUBJ_ALL_CAPS 5 2.42 8.47 0.87 68 HTML_TITLE_SUBJ_DIFF 5 3.11 8.47 1.74 69 MIME_HTML_ONLY_MULTI 5 3.11 8.47 1.74 70 HTML_FONT_FACE_BAD 5 2.42 8.47 0.87 71 XM_GoogleGroups 5 3.46 8.47 2.17 72 XMLngstWrd_04 5 3.11 8.47 1.74 73 XM_SendGrid 5 7.61 8.47 7.39 74 TR_XM_DK_Unsub 5 9.00 8.47 9.13 75 XMLngstWrd_02 5 3.11 8.47 1.74 76 TR_Sbj_FN_Bdy 4 1.38 6.78 0.00 77 HK_RANDOM_ENVFROM 4 1.38 6.78 0.00 78 BAYES_80 4 2.42 6.78 1.30 79 XMSexyCombo_05 4 2.08 6.78 0.87 80 DEAR_SOMETHING 4 1.38 6.78 0.00 81 XMNumbers 4 4.50 6.78 3.91 82 FILL_THIS_FORM_LONG 4 1.38 6.78 0.00 83 RCVD_IN_BL_SPAMCOP_NET 4 1.73 6.78 0.43 84 T_XMDrugObfuBody_08 4 2.08 6.78 0.87 85 XMSolicitRefs_0 4 1.73 6.78 0.43 86 ADVANCE_FEE_2_NEW_FRM_MNY 4 1.38 6.78 0.00 87 TR_XM_Undi_Recip5 4 1.38 6.78 0.00 88 TR_XM_InvalidRelay 4 1.38 6.78 0.00 89 MIME_HTML_MOSTLY 4 2.08 6.78 0.87 90 DKIM_INVALID 4 5.19 6.78 4.78 91 INVALID_MSGID 4 5.54 6.78 5.22 92 TR_XM_Undi_Recip6 4 1.38 6.78 0.00 93 BAYES_95 4 2.08 6.78 0.87 94 T_XMDrugObfuBody_14 4 2.77 6.78 1.74 95 XMDateMe_00 4 1.38 6.78 0.00 96 TR_XM_Undi_Recip9 4 1.38 6.78 0.00 97 TR_XM_Undi_RecipCombo2 4 1.38 6.78 0.00 98 HTML_IMAGE_RATIO_02 4 3.11 6.78 2.17 99 HK_RANDOM_FROM 4 1.38 6.78 0.00 100 XM_OfRef6 4 2.42 6.78 1.30 101 XM_OfRef8 4 1.38 6.78 0.00 102 XM_OfRef7 4 1.38 6.78 0.00 103 FILL_THIS_FORM 4 1.73 6.78 0.43 104 TR_MRelay_UG 3 1.04 5.08 0.00 105 T_FILL_THIS_FORM_LOAN 3 1.04 5.08 0.00 106 RELAYCOUNTRY_FR 3 1.73 5.08 0.87 107 HTML_IMAGE_RATIO_08 3 2.42 5.08 1.74 108 XM_Evil_Numbers_Gen 3 6.57 5.08 6.96 109 TooManyTo_001 3 4.84 5.08 4.78 110 XM_B_Phish_Phrases 3 3.46 5.08 3.04 111 RCVD_IN_MSPIKE_BL 3 1.04 5.08 0.00 112 TR_DCC_Bayes_99 3 1.04 5.08 0.00 113 LONG_HEX_URI 3 1.04 5.08 0.00 114 FROM_SUSPICIOUS_NTLD_FP 3 1.04 5.08 0.00 115 T_REMOTE_IMAGE 3 3.81 5.08 3.48 116 UNDISC_MONEY 3 1.04 5.08 0.00 117 TR_XM_MSPIKECOMBO 3 1.04 5.08 0.00 118 FROM_SUSPICIOUS_NTLD 3 1.04 5.08 0.00 119 UNSUB_GOOG_FORM 3 1.04 5.08 0.00 120 MIME_QP_LONG_LINE 3 3.46 5.08 3.04 121 XMSubMetaSx_00 3 2.42 5.08 1.74 122 TR_Symld_Words 3 3.81 5.08 3.48 123 TR_Caps_n_Bayes_80 3 1.04 5.08 0.00 124 XMSexyCombo_01 3 2.08 5.08 1.30 125 HTML_IMAGE_RATIO_04 3 2.42 5.08 1.74 126 SUBJ_YOUR_FAMILY 3 1.04 5.08 0.00 127 RCVD_IN_PSBL 3 1.04 5.08 0.00 128 T_XMDrugObfuBody_00 2 0.69 3.39 0.00 129 XM_DIRTYINTL 2 2.08 3.39 1.74 130 XM_Body_Dirty_Words_01 2 0.69 3.39 0.00 131 BOTNET_NORDNS 2 0.69 3.39 0.00 132 XM_B_SpammyWords4 2 1.04 3.39 0.43 133 LotsOfNums_01 2 2.77 3.39 2.61 134 RELAYCOUNTRY_CL 2 0.69 3.39 0.00 135 SpammyFromTLD_01 2 1.04 3.39 0.43 136 HTML_IMAGE_RATIO_06 2 2.42 3.39 2.17 137 XM_B_Investor 2 1.73 3.39 1.30 138 T_MONEY_PERCENT 2 0.69 3.39 0.00 139 XMStrtUSub 2 4.15 3.39 4.35 140 XM_UB99 2 0.69 3.39 0.00 141 XM_ProductURIs 2 1.04 3.39 0.43 142 LONG_JUNK_URI2 2 0.69 3.39 0.00 143 XM_UB999 2 0.69 3.39 0.00 144 TR_LOTS_OF_MONEY2 2 0.69 3.39 0.00 145 RDNS_DYNAMIC 2 0.69 3.39 0.00 146 DATE_IN_FUTURE_03_06 2 0.69 3.39 0.00 147 TR_XM_Undi_RecipCombo3 2 0.69 3.39 0.00 148 XMSubMetaSx_01 2 1.04 3.39 0.43 149 TO_NO_BRKTS_DYNIP 2 0.69 3.39 0.00 150 INVESTMENT_ADVICE 2 1.04 3.39 0.43 151 TR_XM_PhishingBody 2 1.73 3.39 1.30 152 XM_Nigeria_01 2 0.69 3.39 0.00 153 MAILING_LIST_MULTI 2 3.11 3.39 3.04 154 BAYES_40 2 4.84 3.39 5.22 155 PDS_RDNS_DYNAMIC_FP 2 0.69 3.39 0.00 156 RCVD_IN_MSPIKE_L4 2 0.69 3.39 0.00 157 XM_SPF_SoftFail 2 2.08 3.39 1.74 158 XMReplyNow 2 0.69 3.39 0.00 159 RELAYCOUNTRY_RU 2 0.69 3.39 0.00 160 TR_XM_SpammyWords2 2 0.69 3.39 0.00 161 XM_RXBody 2 0.69 3.39 0.00 162 XMSexyCombo_02 2 1.04 3.39 0.43 163 TR_XM_MaxSPIKE 1 0.35 1.69 0.00 164 MSGID_FROM_MTA_HEADER 1 0.69 1.69 0.43 165 RELAYCOUNTRY_PL 1 0.35 1.69 0.00 166 NOT_SPAM 1 0.35 1.69 0.00 167 CHARSET_FARAWAY_HEADER 1 0.69 1.69 0.43 168 FSL_CTYPE_WIN1251 1 0.35 1.69 0.00 169 MONEY_FROM_MISSP 1 0.35 1.69 0.00 170 MISSING_HEADERS 1 0.69 1.69 0.43 171 FROM_MISSPACED 1 0.35 1.69 0.00 172 FROM_MISSP_MSFT 1 0.35 1.69 0.00 173 TooManyTo_004 1 1.04 1.69 0.87 174 TR_XM_SpammyWords3 1 0.35 1.69 0.00 175 TR_XM_DK_Bayes1 1 6.57 1.69 7.83 176 XM_BadFromFormat 1 0.35 1.69 0.00 177 REPLYTO_WITHOUT_TO_CC 1 0.35 1.69 0.00 178 BAYES_00 1 9.00 1.69 10.87 179 FROM_GOV_DKIM_AU 1 4.15 1.69 4.78 180 HTTPS_HTTP_MISMATCH 1 0.69 1.69 0.43 181 TR_Caps_n_Bayes_99 1 0.35 1.69 0.00 182 XFER_LOTSA_MONEY 1 0.35 1.69 0.00 183 XMWghtMeta_00 1 0.35 1.69 0.00 184 RCVD_IN_IADB_LISTED 1 1.04 1.69 0.87 185 DATE_IN_FUTURE_12_24 1 0.35 1.69 0.00 186 TR_XM_MSPIKECOMBO2 1 0.35 1.69 0.00 187 XM_B_SpammyTLD2 1 0.35 1.69 0.00 188 URI_NOVOWEL 1 0.35 1.69 0.00 189 FORGED_MUA_OUTLOOK 1 0.35 1.69 0.00 190 LOADSA_MONEY_COMBO 1 0.35 1.69 0.00 191 XM_H_NotFromAmazon 1 0.35 1.69 0.00 192 TR_Caps_n_Bayes_95 1 0.35 1.69 0.00 193 TVD_RCVD_IP 1 1.04 1.69 0.87 194 XMPhish08 1 0.35 1.69 0.00 195 FROM_MISSP_EH_MATCH 1 0.35 1.69 0.00 196 IN_ZIMBRA_BLACKLIST 1 0.35 1.69 0.00 197 FROM_MISSP_XPRIO 1 0.35 1.69 0.00 198 TR_XM_DK_Bayes 1 6.57 1.69 7.83 199 HTML_SHORT_LINK_IMG_1 1 0.35 1.69 0.00 200 HTML_FONT_TINY_NORDNS 1 0.69 1.69 0.43 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 215 89.27 72.88 93.48 2 RELAYCOUNTRY_US 154 68.51 74.58 66.96 3 HTML_MESSAGE 146 68.51 88.14 63.48 4 DKIM_SIGNED 144 66.44 81.36 62.61 5 BAYES_50 135 55.71 44.07 58.70 6 XM_DK_Pass 134 62.28 77.97 58.26 7 DKIM_VALID 133 61.25 74.58 57.83 8 DKIM_VALID_AU 108 48.79 55.93 46.96 9 XM_B_Unicode 101 48.10 64.41 43.91 10 DKIM_VALID_EF 86 37.72 38.98 37.39 11 XM_B_SpammyWords 82 40.14 57.63 35.65 12 ALL_TRUSTED 68 23.53 0.00 29.57 13 XMListUnsubscribeExists 52 27.34 45.76 22.61 14 XM_B_Unicode3 50 25.61 40.68 21.74 15 T_TM2_M_HEADER_IN_MSG 49 19.72 13.56 21.30 16 XMSubLong 47 21.45 25.42 20.43 17 HTML_FONT_LOW_CONTRAST 38 19.03 28.81 16.52 18 BOUNCE_MESSAGE 38 13.15 0.00 16.52 19 ANY_BOUNCE_MESSAGE 38 13.15 0.00 16.52 20 RCVD_IN_MSPIKE_H2 36 19.38 33.90 15.65 21 FVGT_m_MULTI_ODD 35 21.11 44.07 15.22 22 TM2_M_URI_OPT_OUT 34 11.76 0.00 14.78 23 XM_B_SpammyWords2 33 17.99 32.20 14.35 24 MIME_HTML_ONLY 32 15.22 20.34 13.91 25 RCVD_IN_MSPIKE_WL 32 13.49 11.86 13.91 26 XM_Multi_Part_URI 32 15.22 20.34 13.91 27 T_TooManySym_01 32 11.42 1.69 13.91 28 LOC_TINY_FONT_1 32 16.96 28.81 13.91 29 XM_B_Unsub 29 14.53 22.03 12.61 30 BAYES_60 28 11.42 8.47 12.17 31 XM_DKIMWhitelistDomains 27 9.34 0.00 11.74 32 T_KAM_HTML_FONT_INVALID 27 15.92 32.20 11.74 33 RCVD_IN_MSPIKE_H3 26 11.07 10.17 11.30 34 UNPARSEABLE_RELAY 26 12.80 18.64 11.30 35 XM_UncommonTLD01 25 11.07 11.86 10.87 36 BAYES_00 25 9.00 1.69 10.87 37 TR_XM_BayesUnsub 25 12.80 20.34 10.87 38 IN_ZIMBRA_NJ_WHITELIST 21 7.27 0.00 9.13 39 TR_XM_DK_Unsub 21 9.00 8.47 9.13 40 HTML_MIME_NO_HTML_TAG 18 7.96 8.47 7.83 41 TR_XM_DK_Bayes1 18 6.57 1.69 7.83 42 TR_XM_DK_Bayes 18 6.57 1.69 7.83 43 XM_H_Long_From01 18 10.03 18.64 7.83 44 T_TooManySym_02 17 5.88 0.00 7.39 45 XM_SendGrid 17 7.61 8.47 7.39 46 XM_Evil_Numbers_Gen 16 6.57 5.08 6.96 47 XM_Body_Dirty_Words 16 10.03 22.03 6.96 48 BAYES_05 16 5.54 0.00 6.96 49 TR_XM_DK_Bayes2 16 5.88 1.69 6.96 50 XM_B_Unsub2 15 5.19 0.00 6.52 51 DCC_CHECK 13 10.03 27.12 5.65 52 INVALID_MSGID 12 5.54 6.78 5.22 53 RELAYCOUNTRY_META 12 10.38 30.51 5.22 54 BAYES_40 12 4.84 3.39 5.22 55 TooManyTo_001 11 4.84 5.08 4.78 56 XM_H_PHPMailer 11 3.81 0.00 4.78 57 FROM_GOV_DKIM_AU 11 4.15 1.69 4.78 58 MSGID_NOFQDN1 11 3.81 0.00 4.78 59 DKIM_INVALID 11 5.19 6.78 4.78 60 TO_MALFORMED 11 4.15 1.69 4.78 61 XMStrtUSub 10 4.15 3.39 4.35 62 XMNumbers 9 4.50 6.78 3.91 63 T_TooManySym_03 9 3.11 0.00 3.91 64 SHORT_SHORTNER 8 2.77 0.00 3.48 65 T_REMOTE_IMAGE 8 3.81 5.08 3.48 66 TR_Symld_Words 8 3.81 5.08 3.48 67 LOTS_OF_MONEY 8 5.88 15.25 3.48 68 PLING_QUERY 8 2.77 0.00 3.48 69 XM_B_Phish_Phrases 7 3.46 5.08 3.04 70 MIME_QP_LONG_LINE 7 3.46 5.08 3.04 71 BAYES_20 7 2.42 0.00 3.04 72 MAILING_LIST_MULTI 7 3.11 3.39 3.04 73 SHORT_URI_2 6 2.08 0.00 2.61 74 TVD_SPACE_RATIO 6 2.08 0.00 2.61 75 LotsOfNums_01 6 2.77 3.39 2.61 76 TR_XM_DK_SendGrid 6 2.42 1.69 2.61 77 XM_PDF 6 2.08 0.00 2.61 78 TO_EQ_FM_DOM_HTML_IMG 6 2.08 0.00 2.61 79 XM_CamelCaseFrm001 6 2.08 0.00 2.61 80 XM_B_SpammyTLD 6 5.54 16.95 2.61 81 FSL_BULK_SIG 5 4.50 13.56 2.17 82 KHOP_HELO_FCRDNS 5 3.46 8.47 2.17 83 UPPERCASE_75_100 5 3.81 10.17 2.17 84 HTML_IMAGE_RATIO_06 5 2.42 3.39 2.17 85 MPART_ALT_DIFF 5 3.81 10.17 2.17 86 XM_GoogleGroups 5 3.46 8.47 2.17 87 T_XMHurry_00 5 2.08 1.69 2.17 88 XM_H_Long_From02 5 1.73 0.00 2.17 89 RCVD_IN_MSPIKE_H5 5 1.73 0.00 2.17 90 HTML_IMAGE_RATIO_02 5 3.11 6.78 2.17 91 XM_DIRTYINTL 4 2.08 3.39 1.74 92 FVGT_m_MULTI_ODD_EMAIL 4 1.38 0.00 1.74 93 XMLngstWrd_00 4 3.46 10.17 1.74 94 HTML_IMAGE_RATIO_08 4 2.42 5.08 1.74 95 TM2_M_VERY_LONG_WORD 4 3.46 10.17 1.74 96 XMLngstWrd_03 4 3.11 8.47 1.74 97 TooManyTo_002 4 1.73 1.69 1.74 98 UNTRUSTED_Relay 4 5.88 22.03 1.74 99 USER_IN_DEF_DKIM_WL 4 1.38 0.00 1.74 100 XM_B_SpammyWords3 4 3.81 11.86 1.74 101 XMHTML_ManyTags1 4 1.38 0.00 1.74 102 AC_HTML_NONSENSE_TAGS 4 1.38 0.00 1.74 103 XM_ZIP 4 1.38 0.00 1.74 104 MIME_HTML_ONLY_MULTI 4 3.11 8.47 1.74 105 HTML_TITLE_SUBJ_DIFF 4 3.11 8.47 1.74 106 XMLngstWrd_04 4 3.11 8.47 1.74 107 T_XMDrugObfuBody_14 4 2.77 6.78 1.74 108 HTML_IMAGE_RATIO_04 4 2.42 5.08 1.74 109 XMLngstWrd_01 4 3.46 10.17 1.74 110 XMSubMetaSx_00 4 2.42 5.08 1.74 111 XM_SPF_SoftFail 4 2.08 3.39 1.74 112 TR_XM_SpammyRelay 4 3.81 11.86 1.74 113 XMLngstWrd_02 4 3.11 8.47 1.74 114 BAYES_80 3 2.42 6.78 1.30 115 XMGappySubj_01 3 1.04 0.00 1.30 116 TR_MetaPhish_Combo_01b 3 1.04 0.00 1.30 117 IN_HORDE_ADDRESS_BOOK 3 1.04 0.00 1.30 118 XM_B_Investor 3 1.73 3.39 1.30 119 XM_Dr_From 3 1.04 0.00 1.30 120 XM_UB50 3 4.15 15.25 1.30 121 XMSexyCombo_01 3 2.08 5.08 1.30 122 TR_XM_PhishingBody 3 1.73 3.39 1.30 123 RELAYCOUNTRY_AU 3 1.38 1.69 1.30 124 TR_XM_SpammyWords4 3 4.15 15.25 1.30 125 XM_OfRef6 3 2.42 6.78 1.30 126 RCVD_IN_RP_CERTIFIED 2 0.69 0.00 0.87 127 FROM_EXCESS_BASE64 2 0.69 0.00 0.87 128 TR_XM_FormFill2 2 0.69 0.00 0.87 129 XMSexyCombo_05 2 2.08 6.78 0.87 130 XM_H_SpoofStaff4 2 0.69 0.00 0.87 131 RELAYCOUNTRY_FR 2 1.73 5.08 0.87 132 BOTNET_IPINHOSTNAME 2 3.11 11.86 0.87 133 XMSubMetaD_03 2 0.69 0.00 0.87 134 RCVD_IN_IADB_LISTED 2 1.04 1.69 0.87 135 MIME_CHARSET_FARAWAY 2 2.42 8.47 0.87 136 XM_H_PHPOS_M 2 0.69 0.00 0.87 137 RELAYCOUNTRY_BG 2 0.69 0.00 0.87 138 TVD_RCVD_IP 2 1.04 1.69 0.87 139 TR_XM_MaxWHORU 2 0.69 0.00 0.87 140 TooManyTo_004 2 1.04 1.69 0.87 141 T_XMDrugObfuBody_08 2 2.08 6.78 0.87 142 TR_XM_PHPDW 2 0.69 0.00 0.87 143 FONT_INVIS_LONG_LINE 2 0.69 0.00 0.87 144 SUBJ_ALL_CAPS 2 2.42 8.47 0.87 145 HTML_COMMENT_SAVED_URL 2 0.69 0.00 0.87 146 MIME_HTML_MOSTLY 2 2.08 6.78 0.87 147 XMPhish14 2 0.69 0.00 0.87 148 LONG_JUNK_URI 2 1.04 1.69 0.87 149 XMSpoofStaff2 2 0.69 0.00 0.87 150 RCVD_IN_IADB_DK 2 0.69 0.00 0.87 151 TR_Mismatch_TLD_01 2 0.69 0.00 0.87 152 DKIM_ADSP_CUSTOM_MED 2 0.69 0.00 0.87 153 DKIM_ADSP_ALL 2 0.69 0.00 0.87 154 TooManyTo_003 2 1.04 1.69 0.87 155 HTML_FONT_FACE_BAD 2 2.42 8.47 0.87 156 RCVD_IN_VALIDITY_SAFE 2 0.69 0.00 0.87 157 TR_XM_PSC1 2 0.69 0.00 0.87 158 NO_DNS_FOR_FROM 2 0.69 0.00 0.87 159 FROM_OFFERS 2 0.69 0.00 0.87 160 TR_XM_PHPForged 2 0.69 0.00 0.87 161 CTE_8BIT_MISMATCH 2 0.69 0.00 0.87 162 RELAYCOUNTRY_IE 2 0.69 0.00 0.87 163 BAYES_99 2 6.57 28.81 0.87 164 BAYES_95 2 2.08 6.78 0.87 165 XM_H_PHPOS 2 0.69 0.00 0.87 166 FROM_GOV_SPOOF 2 0.69 0.00 0.87 167 T_TooManySym_04 2 0.69 0.00 0.87 168 XM_Body_Obfu01 2 0.69 0.00 0.87 169 HTML_IMAGE_ONLY_12 2 1.04 1.69 0.87 170 TR_XM_SpoofStaff 2 0.69 0.00 0.87 171 XM_DK_Undo_02 2 7.96 35.59 0.87 172 TR_XM_UnparsRelay 2 3.11 11.86 0.87 173 RCVD_IN_IADB_SPF 2 0.69 0.00 0.87 174 XM_H_Trusted_IP 2 0.69 0.00 0.87 175 BAYES_999 2 3.46 13.56 0.87 176 RCVD_IN_RP_SAFE 2 0.69 0.00 0.87 177 TooManyTo_005 2 0.69 0.00 0.87 178 TR_XM_SpoofPhishAttach 2 0.69 0.00 0.87 179 RCVD_IN_IADB_SENDERID 2 0.69 0.00 0.87 180 XM_ZohoDesk1 2 0.69 0.00 0.87 181 TR_XM_SB_Phish 1 0.35 0.00 0.43 182 MISSING_HEADERS 1 0.69 1.69 0.43 183 MSGID_FROM_MTA_HEADER 1 0.69 1.69 0.43 184 CHARSET_FARAWAY_HEADER 1 0.69 1.69 0.43 185 TR_XM_PhishingBody2 1 0.35 0.00 0.43 186 HTML_IMAGE_ONLY_28 1 0.35 0.00 0.43 187 XMSubMetaSSx_00 1 0.35 0.00 0.43 188 NML_ADSP_CUSTOM_MED 1 0.35 0.00 0.43 189 RELAYCOUNTRY_ES 1 0.35 0.00 0.43 190 NUMERIC_HTTP_ADDR 1 0.35 0.00 0.43 191 TR_XM_SpammyWords5 1 3.81 16.95 0.43 192 HTTPS_HTTP_MISMATCH 1 0.69 1.69 0.43 193 XM_B_SpammyWords4 1 1.04 3.39 0.43 194 XM_ProductURIs 1 1.04 3.39 0.43 195 HDRS_MISSP 1 0.69 1.69 0.43 196 RELAYCOUNTRY_IN 1 0.69 1.69 0.43 197 SpammyFromTLD_01 1 1.04 3.39 0.43 198 XMBody_95 1 0.35 0.00 0.43 199 RCVD_IN_BL_SPAMCOP_NET 1 1.73 6.78 0.43 200 HTML_FONT_TINY_NORDNS 1 0.69 1.69 0.43 ----------------------------------------------------------------------