Email: 393 Autolearn: 0 AvgScore: 1.91 AvgScanTime: 12.76 sec Spam: 68 Autolearn: 0 AvgScore: 12.72 AvgScanTime: 9.79 sec Ham: 325 Autolearn: 0 AvgScore: -0.36 AvgScanTime: 13.39 sec Time Spent Running SA: 1.39 hours Time Spent Processing Spam: 0.18 hours Time Spent Processing Ham: 1.21 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 62 70.74 91.18 66.46 2 DCC_CHECK_NEGATIVE 57 93.38 83.82 95.38 3 RELAYCOUNTRY_US 53 57.00 77.94 52.62 4 DKIM_SIGNED 50 41.22 73.53 34.46 5 XM_DK_Pass 49 39.19 72.06 32.31 6 DKIM_VALID 48 38.42 70.59 31.69 7 XMListUnsubscribeExists 47 27.74 69.12 19.08 8 XM_B_Unicode 44 62.85 64.71 62.46 9 XM_B_SpammyWords 40 44.27 58.82 41.23 10 DKIM_VALID_AU 38 28.75 55.88 23.08 11 BAYES_50 36 53.69 52.94 53.85 12 XM_B_Unicode3 27 45.80 39.71 47.08 13 LOC_TINY_FONT_1 27 19.59 39.71 15.38 14 XM_B_SpammyWords2 27 15.78 39.71 10.77 15 FVGT_m_MULTI_ODD 25 16.54 36.76 12.31 16 MIME_HTML_ONLY 22 31.30 32.35 31.08 17 XM_Body_Dirty_Words 21 9.67 30.88 5.23 18 T_KAM_HTML_FONT_INVALID 21 23.66 30.88 22.15 19 HTML_FONT_LOW_CONTRAST 21 27.99 30.88 27.38 20 XMSubLong 19 30.03 27.94 30.46 21 XM_UncommonTLD01 18 7.89 26.47 4.00 22 RCVD_IN_MSPIKE_H2 16 13.23 23.53 11.08 23 RELAYCOUNTRY_META 16 6.36 23.53 2.77 24 XMLngstWrd_01 15 4.33 22.06 0.62 25 XM_DK_Undo_02 15 4.83 22.06 1.23 26 XMLngstWrd_00 15 4.58 22.06 0.92 27 MPART_ALT_DIFF 15 22.14 22.06 22.15 28 TR_XM_DKIM_Undo 14 3.56 20.59 0.00 29 BAYES_99 14 8.14 20.59 5.54 30 XMLngstWrd_03 13 3.82 19.12 0.62 31 XMLngstWrd_04 13 3.82 19.12 0.62 32 XMLngstWrd_02 13 3.82 19.12 0.62 33 BAYES_999 12 4.07 17.65 1.23 34 TR_XM_SpammyWords2 11 2.80 16.18 0.00 35 DKIM_VALID_EF 11 15.78 16.18 15.69 36 DCC_CHECK 11 6.62 16.18 4.62 37 RCVD_IN_MSPIKE_WL 10 7.63 14.71 6.15 38 RCVD_IN_MSPIKE_H3 10 5.34 14.71 3.38 39 HTML_MIME_NO_HTML_TAG 10 4.58 14.71 2.46 40 BOTNET_IPINHOSTNAME 10 3.31 14.71 0.92 41 SpammyFromTLD_01 9 2.80 13.24 0.62 42 TM2_M_VERY_LONG_WORD 9 3.56 13.24 1.54 43 XM_Evil_Numbers_Gen 8 4.58 11.76 3.08 44 TR_XM_DK_Unsub 8 7.89 11.76 7.08 45 BOTNET 8 2.54 11.76 0.62 46 TR_XM_PhishingBody 8 2.80 11.76 0.92 47 MIME_HTML_ONLY_MULTI 8 8.40 11.76 7.69 48 XMSexyCombo_05 7 4.58 10.29 3.38 49 UNTRUSTED_Relay 7 4.58 10.29 3.38 50 UPPERCASE_75_100 7 2.29 10.29 0.62 51 BAYES_80 7 3.05 10.29 1.54 52 HTML_TITLE_SUBJ_DIFF 7 2.29 10.29 0.62 53 LOTS_OF_MONEY 7 4.33 10.29 3.08 54 MIME_QP_LONG_LINE 7 2.04 10.29 0.31 55 XM_GoogleGroups 7 2.29 10.29 0.62 56 XM_B_SpammyTLD 7 2.54 10.29 0.92 57 TR_XM_SpammyWords4 7 3.05 10.29 1.54 58 SpammyFromTLD_02 7 1.78 10.29 0.00 59 XM_B_SpammyWords3 6 3.31 8.82 2.15 60 RCVD_IN_IADB_LISTED 6 2.29 8.82 0.92 61 TR_XM_SpammyRelay 6 2.29 8.82 0.92 62 XM_B_Phish_Phrases 6 3.56 8.82 2.46 63 XMSubMetaSx_00 6 4.83 8.82 4.00 64 HTML_IMAGE_RATIO_08 6 9.41 8.82 9.54 65 TM2_M_URI_OPT_OUT 6 23.41 8.82 26.46 66 XM_DK_Undo_01 6 2.04 8.82 0.62 67 T_TooManySym_03 5 13.23 7.35 14.46 68 RCVD_IN_IADB_SENDERID 5 2.04 7.35 0.92 69 RCVD_IN_IADB_SPF 5 2.04 7.35 0.92 70 T_TooManySym_02 5 19.85 7.35 22.46 71 LotsOfNums_01 5 5.85 7.35 5.54 72 XMSexyCombo_01 5 1.53 7.35 0.31 73 RCVD_IN_IADB_DK 5 2.04 7.35 0.92 74 ALL_TRUSTED 5 37.15 7.35 43.38 75 XMNumbers 5 11.20 7.35 12.00 76 XM_XX_Yahoo 5 1.27 7.35 0.00 77 XM_B_Investor 5 2.04 7.35 0.92 78 BAYES_95 5 3.05 7.35 2.15 79 T_TM2_M_HEADER_IN_MSG 5 15.52 7.35 17.23 80 TR_Symld_Words 5 11.70 7.35 12.62 81 T_TooManySym_01 5 22.39 7.35 25.54 82 T_REMOTE_IMAGE 5 3.05 7.35 2.15 83 BASE64_LENGTH_79_INF 4 10.43 5.88 11.38 84 XM_UB50 4 2.80 5.88 2.15 85 RCVD_IN_PSBL 4 1.02 5.88 0.00 86 BAYES_60 4 6.36 5.88 6.46 87 XMBody_78 4 2.29 5.88 1.54 88 MIME_HTML_MOSTLY 4 4.33 5.88 4.00 89 XMPhish14 4 1.27 5.88 0.31 90 XM_DIRTYINTL 4 1.27 5.88 0.31 91 KHOP_HELO_FCRDNS 4 2.54 5.88 1.85 92 XM_H_Long_From02 3 0.76 4.41 0.00 93 TR_DCC_Bayes_99 3 0.76 4.41 0.00 94 XM_Multi_Part_URI 3 11.70 4.41 13.23 95 T_XMHurry_00 3 1.02 4.41 0.31 96 TR_Mismatch_TLD_01 3 1.02 4.41 0.31 97 XM_H_PHPOS 3 0.76 4.41 0.00 98 XM_B_Phish66 3 1.27 4.41 0.62 99 TR_XM_PHPDW 3 0.76 4.41 0.00 100 URI_NOVOWEL 3 1.27 4.41 0.62 101 TR_XM_PHPForged 3 0.76 4.41 0.00 102 RELAYCOUNTRY_IN 3 0.76 4.41 0.00 103 TR_XM_SpammyWords5 3 2.04 4.41 1.54 104 RELAYCOUNTRY_CA 3 0.76 4.41 0.00 105 URIBL_DBL_SPAM 3 0.76 4.41 0.00 106 MPART_ALT_DIFF_COUNT 3 1.02 4.41 0.31 107 RCVD_IN_VALIDITY_RPBL 3 0.76 4.41 0.00 108 TR_XM_FormFill2 3 0.76 4.41 0.00 109 XMDateMe_00 3 0.76 4.41 0.00 110 RELAYCOUNTRY_FI 2 0.51 2.94 0.00 111 HTTP_EXCESSIVE_ESCAPES 2 0.51 2.94 0.00 112 MISSING_MIME_HB_SEP 2 0.51 2.94 0.00 113 XMReplyNow 2 0.51 2.94 0.00 114 DIET_1 2 1.78 2.94 1.54 115 HTML_IMAGE_ONLY_04 2 0.51 2.94 0.00 116 UNPARSEABLE_RELAY 2 9.67 2.94 11.08 117 XM_Combo_Sbj 2 2.80 2.94 2.77 118 XMSubPhish11 2 3.82 2.94 4.00 119 T_TooManySym_04 2 4.58 2.94 4.92 120 RELAYCOUNTRY_AU 2 0.76 2.94 0.31 121 MSGID_FROM_MTA_HEADER 2 0.76 2.94 0.31 122 XM_UB95 2 0.51 2.94 0.00 123 TR_XM_MSPIKECOMBO 2 0.51 2.94 0.00 124 HDRS_MISSP 2 0.51 2.94 0.00 125 DKIM_INVALID 2 2.80 2.94 2.77 126 LONG_JUNK_URI2 2 0.51 2.94 0.00 127 T_XMDrugObfuBody_08 2 0.76 2.94 0.31 128 XM_B_Unsub 2 8.40 2.94 9.54 129 GAPPY_SUBJECT 2 0.51 2.94 0.00 130 TO_MALFORMED 2 3.05 2.94 3.08 131 XM_OfRef6 2 0.76 2.94 0.31 132 HTML_IMAGE_RATIO_06 2 3.05 2.94 3.08 133 LONG_JUNK_URI 2 0.51 2.94 0.00 134 XM_SPF_SoftFail 2 0.76 2.94 0.31 135 HTML_IMAGE_ONLY_24 2 0.76 2.94 0.31 136 XM_B_DNDMA 2 0.76 2.94 0.31 137 TR_XM_SB_Phish 2 3.82 2.94 4.00 138 XM_CamelCaseFrm001 2 1.02 2.94 0.62 139 HTTPS_HTTP_MISMATCH 2 0.76 2.94 0.31 140 TR_XM_BayesUnsub 2 6.62 2.94 7.38 141 RCVD_IN_MSPIKE_BL 2 0.51 2.94 0.00 142 RCVD_IN_BL_SPAMCOP_NET 2 0.51 2.94 0.00 143 XMCapTrack 2 0.51 2.94 0.00 144 LongTLD 1 0.25 1.47 0.00 145 PDS_LITECOIN_ID 1 0.25 1.47 0.00 146 TR_Caps_n_Bayes_95 1 0.25 1.47 0.00 147 TooManyTo_001 1 4.83 1.47 5.54 148 TR_LOTS_OF_MONEY2 1 0.51 1.47 0.31 149 XM_UB80 1 0.25 1.47 0.00 150 BITCOIN_SPAM_10 1 0.25 1.47 0.00 151 XMRefNum 1 0.25 1.47 0.00 152 BOTNET_NORDNS 1 0.25 1.47 0.00 153 MY_SERVERS_FOUND 1 0.25 1.47 0.00 154 TR_UG_Sexy_Spam 1 0.25 1.47 0.00 155 HELO_DYNAMIC_IPADDR2 1 0.25 1.47 0.00 156 XM_B_REG_HTML 1 0.25 1.47 0.00 157 TR_XM_MaxWHORU 1 1.02 1.47 0.92 158 TR_XM_Undi_Recip5 1 0.25 1.47 0.00 159 FSL_BULK_SIG 1 1.02 1.47 0.92 160 MARKETING_PARTNERS 1 0.25 1.47 0.00 161 BAYES_05 1 6.62 1.47 7.69 162 INVALID_MSGID 1 3.05 1.47 3.38 163 MONEY_FRAUD_5 1 0.25 1.47 0.00 164 TR_Sbj_FN_Bdy 1 0.51 1.47 0.31 165 TR_XM_PhishingBody2 1 0.25 1.47 0.00 166 PDS_BTC_ID 1 0.25 1.47 0.00 167 RELAYCOUNTRY_CN 1 0.25 1.47 0.00 168 RCVD_IN_MSPIKE_L4 1 0.25 1.47 0.00 169 SUBJ_ALL_CAPS 1 1.02 1.47 0.92 170 RCVD_IN_RP_RNBL 1 0.25 1.47 0.00 171 XMStrtUSub 1 1.78 1.47 1.85 172 TR_XM_SPAMCOP 1 0.25 1.47 0.00 173 XMStockSpam_06 1 0.25 1.47 0.00 174 ADVANCE_FEE_2_NEW_MONEY 1 0.25 1.47 0.00 175 XM_H_Undi_Recip 1 0.25 1.47 0.00 176 XMNoVowels 1 0.76 1.47 0.62 177 HTML_FONT_TINY_NORDNS 1 0.25 1.47 0.00 178 URI_PHP_REDIR 1 0.25 1.47 0.00 179 FORM_FRAUD_5 1 0.25 1.47 0.00 180 XM_OfRef7 1 0.25 1.47 0.00 181 BOUNCE_MESSAGE 1 10.94 1.47 12.92 182 XM_H_Long_From01 1 2.29 1.47 2.46 183 URI_HEX 1 0.51 1.47 0.31 184 TR_XM_Undi_Recip11 1 0.25 1.47 0.00 185 RELAYCOUNTRY_DE 1 0.25 1.47 0.00 186 XMSubject_78 1 1.53 1.47 1.54 187 NO_DNS_FOR_FROM 1 1.27 1.47 1.23 188 TR_XM_Undi_Recip2 1 0.25 1.47 0.00 189 MSGID_DOLLARS_URI_IMG 1 0.25 1.47 0.00 190 T_FILL_THIS_FORM_SHORT 1 0.51 1.47 0.31 191 HELO_DYNAMIC_IPADDR 1 0.25 1.47 0.00 192 T_OBFU_JPG_ATTACH 1 0.25 1.47 0.00 193 TR_XM_UnparsRelay 1 1.02 1.47 0.92 194 RCVD_IN_MSPIKE_L3 1 0.25 1.47 0.00 195 RELAYCOUNTRY_GB 1 0.76 1.47 0.62 196 XM_B_MarketingDB 1 0.25 1.47 0.00 197 TVD_RCVD_SPACE_BRACKET 1 0.25 1.47 0.00 198 XMPhish11 1 0.25 1.47 0.00 199 URI_OPTOUT_3LD 1 0.25 1.47 0.00 200 FAKE_REPLY_C 1 0.25 1.47 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 310 93.38 83.82 95.38 2 HTML_MESSAGE 216 70.74 91.18 66.46 3 XM_B_Unicode 203 62.85 64.71 62.46 4 BAYES_50 175 53.69 52.94 53.85 5 RELAYCOUNTRY_US 171 57.00 77.94 52.62 6 XM_B_Unicode3 153 45.80 39.71 47.08 7 ALL_TRUSTED 141 37.15 7.35 43.38 8 XM_B_SpammyWords 134 44.27 58.82 41.23 9 DKIM_SIGNED 112 41.22 73.53 34.46 10 XM_DK_Pass 105 39.19 72.06 32.31 11 DKIM_VALID 103 38.42 70.59 31.69 12 MIME_HTML_ONLY 101 31.30 32.35 31.08 13 XMSubLong 99 30.03 27.94 30.46 14 HTML_FONT_LOW_CONTRAST 89 27.99 30.88 27.38 15 TM2_M_URI_OPT_OUT 86 23.41 8.82 26.46 16 T_TooManySym_01 83 22.39 7.35 25.54 17 DKIM_VALID_AU 75 28.75 55.88 23.08 18 T_TooManySym_02 73 19.85 7.35 22.46 19 T_KAM_HTML_FONT_INVALID 72 23.66 30.88 22.15 20 MPART_ALT_DIFF 72 22.14 22.06 22.15 21 XMListUnsubscribeExists 62 27.74 69.12 19.08 22 T_TM2_M_HEADER_IN_MSG 56 15.52 7.35 17.23 23 DKIM_VALID_EF 51 15.78 16.18 15.69 24 LOC_TINY_FONT_1 50 19.59 39.71 15.38 25 T_TooManySym_03 47 13.23 7.35 14.46 26 XM_Multi_Part_URI 43 11.70 4.41 13.23 27 BOUNCE_MESSAGE 42 10.94 1.47 12.92 28 ANY_BOUNCE_MESSAGE 42 10.94 1.47 12.92 29 TR_Symld_Words 41 11.70 7.35 12.62 30 FVGT_m_MULTI_ODD 40 16.54 36.76 12.31 31 XMNumbers 39 11.20 7.35 12.00 32 XM_H_Trusted_IP 39 9.92 0.00 12.00 33 BASE64_LENGTH_79_INF 37 10.43 5.88 11.38 34 UNPARSEABLE_RELAY 36 9.67 2.94 11.08 35 RCVD_IN_MSPIKE_H2 36 13.23 23.53 11.08 36 XM_B_SpammyWords2 35 15.78 39.71 10.77 37 XM_B_Unsub 31 8.40 2.94 9.54 38 HTML_IMAGE_RATIO_08 31 9.41 8.82 9.54 39 BAYES_00 31 7.89 0.00 9.54 40 BAYES_05 25 6.62 1.47 7.69 41 MIME_HTML_ONLY_MULTI 25 8.40 11.76 7.69 42 TR_XM_BayesUnsub 24 6.62 2.94 7.38 43 BAYES_40 23 5.85 0.00 7.08 44 TR_XM_DK_Unsub 23 7.89 11.76 7.08 45 BAYES_60 21 6.36 5.88 6.46 46 XM_SendGrid 21 5.60 1.47 6.46 47 XMSubNoVowel 21 5.34 0.00 6.46 48 RCVD_IN_MSPIKE_WL 20 7.63 14.71 6.15 49 BAYES_20 20 5.34 1.47 6.15 50 XM_H_PHPMailer 19 5.09 1.47 5.85 51 TooManyTo_001 18 4.83 1.47 5.54 52 LotsOfNums_01 18 5.85 7.35 5.54 53 BAYES_99 18 8.14 20.59 5.54 54 XM_Body_Dirty_Words 17 9.67 30.88 5.23 55 T_TooManySym_04 16 4.58 2.94 4.92 56 DCC_CHECK 15 6.62 16.18 4.62 57 SHORT_SHORTNER 14 3.56 0.00 4.31 58 TVD_SPACE_RATIO 14 3.56 0.00 4.31 59 TR_XM_DK_SendGrid 14 3.56 0.00 4.31 60 XMSubPhish11 13 3.82 2.94 4.00 61 XM_UncommonTLD01 13 7.89 26.47 4.00 62 XMSubMetaSx_00 13 4.83 8.82 4.00 63 TR_XM_SB_Phish 13 3.82 2.94 4.00 64 MIME_HTML_MOSTLY 13 4.33 5.88 4.00 65 XMSexyCombo_05 11 4.58 10.29 3.38 66 UNTRUSTED_Relay 11 4.58 10.29 3.38 67 INVALID_MSGID 11 3.05 1.47 3.38 68 RCVD_IN_MSPIKE_H3 11 5.34 14.71 3.38 69 HTML_IMAGE_RATIO_02 10 2.54 0.00 3.08 70 XM_Evil_Numbers_Gen 10 4.58 11.76 3.08 71 IN_ZIMBRA_NJ_WHITELIST 10 2.54 0.00 3.08 72 TO_MALFORMED 10 3.05 2.94 3.08 73 TR_XM_DK_Bayes 10 2.54 0.00 3.08 74 XM_ProductURIs 10 2.80 1.47 3.08 75 HTML_IMAGE_RATIO_06 10 3.05 2.94 3.08 76 LOTS_OF_MONEY 10 4.33 10.29 3.08 77 TR_XM_DK_Bayes1 10 2.54 0.00 3.08 78 XM_Combo_Sbj 9 2.80 2.94 2.77 79 DKIM_INVALID 9 2.80 2.94 2.77 80 MIME_CHARSET_FARAWAY 9 2.29 0.00 2.77 81 RELAYCOUNTRY_META 9 6.36 23.53 2.77 82 XMGappySubj_01 8 2.04 0.00 2.46 83 XM_H_Long_From01 8 2.29 1.47 2.46 84 XM_B_Phish_Phrases 8 3.56 8.82 2.46 85 HTML_MIME_NO_HTML_TAG 8 4.58 14.71 2.46 86 SHORT_URI_2 7 1.78 0.00 2.15 87 XM_B_SpammyWords3 7 3.31 8.82 2.15 88 XM_DKIMWhitelistDomains 7 1.78 0.00 2.15 89 XM_UB50 7 2.80 5.88 2.15 90 BAYES_95 7 3.05 7.35 2.15 91 MSGID_NOFQDN1 7 1.78 0.00 2.15 92 RCVD_IN_MSPIKE_H5 7 1.78 0.00 2.15 93 T_REMOTE_IMAGE 7 3.05 7.35 2.15 94 XMStrtUSub 6 1.78 1.47 1.85 95 CHARSET_FARAWAY_HEADER 6 1.53 0.00 1.85 96 KHOP_HELO_FCRDNS 6 2.54 5.88 1.85 97 DIET_1 5 1.78 2.94 1.54 98 HTML_IMAGE_RATIO_04 5 1.27 0.00 1.54 99 TR_XM_DK_Bayes2 5 1.27 0.00 1.54 100 FVGT_m_MULTI_ODD_EMAIL 5 1.27 0.00 1.54 101 USER_IN_DEF_DKIM_WL 5 1.27 0.00 1.54 102 TR_MetaPhish_Combo_01b 5 1.27 0.00 1.54 103 XMSubject_78 5 1.53 1.47 1.54 104 BAYES_80 5 3.05 10.29 1.54 105 XMBody_78 5 2.29 5.88 1.54 106 TR_XM_SpammyWords5 5 2.04 4.41 1.54 107 MAILING_LIST_MULTI 5 1.27 0.00 1.54 108 TM2_M_VERY_LONG_WORD 5 3.56 13.24 1.54 109 TR_XM_SpammyWords4 5 3.05 10.29 1.54 110 T_XMDrugObfuBody_14 5 1.53 1.47 1.54 111 XM_DK_Undo_02 4 4.83 22.06 1.23 112 NO_DNS_FOR_FROM 4 1.27 1.47 1.23 113 XMSubMetaSxObfu_03 4 1.02 0.00 1.23 114 BAYES_999 4 4.07 17.65 1.23 115 XMSubGarbage 4 1.02 0.00 1.23 116 XMBody_95 4 1.02 0.00 1.23 117 FROM_GOV_SPOOF 3 0.76 0.00 0.92 118 SUBJ_ALL_CAPS 3 1.02 1.47 0.92 119 RCVD_IN_IADB_SPF 3 2.04 7.35 0.92 120 TR_XM_MaxWHORU 3 1.02 1.47 0.92 121 RCVD_IN_IADB_SENDERID 3 2.04 7.35 0.92 122 HTML_FONT_FACE_BAD 3 0.76 0.00 0.92 123 FSL_BULK_SIG 3 1.02 1.47 0.92 124 RCVD_IN_IADB_LISTED 3 2.29 8.82 0.92 125 RCVD_IN_IADB_DK 3 2.04 7.35 0.92 126 HTML_IMAGE_ONLY_20 3 0.76 0.00 0.92 127 TR_XM_UnparsRelay 3 1.02 1.47 0.92 128 TR_XM_SpammyRelay 3 2.29 8.82 0.92 129 BOTNET_IPINHOSTNAME 3 3.31 14.71 0.92 130 TooManyTo_002 3 0.76 0.00 0.92 131 XM_B_Investor 3 2.04 7.35 0.92 132 TR_XM_PhishingBody 3 2.80 11.76 0.92 133 XMLngstWrd_00 3 4.58 22.06 0.92 134 DKIM_ADSP_NXDOMAIN 3 1.02 1.47 0.92 135 RCVD_IN_IADB_VOUCHED 3 1.02 1.47 0.92 136 XM_B_SpammyTLD 3 2.54 10.29 0.92 137 TooManyTo_003 3 0.76 0.00 0.92 138 RCVD_IN_MSPIKE_H4 2 0.51 0.00 0.62 139 UPPERCASE_75_100 2 2.29 10.29 0.62 140 RCVD_IN_IADB_OPTIN 2 0.51 0.00 0.62 141 TooManyTo_005 2 0.51 0.00 0.62 142 XM_B_Phish66 2 1.27 4.41 0.62 143 XMNoVowels 2 0.76 1.47 0.62 144 RELAYCOUNTRY_FR 2 0.51 0.00 0.62 145 HELO_NODOT 2 0.51 0.00 0.62 146 XMLngstWrd_01 2 4.33 22.06 0.62 147 FORGED_GMAIL_RCVD 2 0.51 0.00 0.62 148 RELAYCOUNTRY_GB 2 0.76 1.47 0.62 149 BOTNET 2 2.54 11.76 0.62 150 TR_XM_NoHeadersAttach 2 0.51 0.00 0.62 151 TR_XM_NoHeaderRelay 2 0.51 0.00 0.62 152 TVD_SPACE_RATIO_MINFP 2 0.51 0.00 0.62 153 URI_NOVOWEL 2 1.27 4.41 0.62 154 MISSING_HEADERS 2 0.51 0.00 0.62 155 HELO_NO_DOMAIN 2 0.51 0.00 0.62 156 XMWhlSbjSex 2 0.76 1.47 0.62 157 TooManyTo_004 2 0.51 0.00 0.62 158 RDNS_DYNAMIC 2 0.76 1.47 0.62 159 XM_S_SubURI 2 0.51 0.00 0.62 160 XMLngstWrd_03 2 3.82 19.12 0.62 161 SpammyFromTLD_01 2 2.80 13.24 0.62 162 NML_ADSP_CUSTOM_MED 2 0.51 0.00 0.62 163 T_HTML_ATTACH 2 0.76 1.47 0.62 164 HTML_TITLE_SUBJ_DIFF 2 2.29 10.29 0.62 165 RELAYCOUNTRY_JP 2 0.51 0.00 0.62 166 TR_MetaPhish_Combo_01 2 0.51 0.00 0.62 167 XMLngstWrd_04 2 3.82 19.12 0.62 168 XMLngstWrd_02 2 3.82 19.12 0.62 169 XM_DK_Undo_01 2 2.04 8.82 0.62 170 XM_GoogleGroups 2 2.29 10.29 0.62 171 XM_CamelCaseFrm001 2 1.02 2.94 0.62 172 DKIM_ADSP_CUSTOM_MED 2 0.51 0.00 0.62 173 XMSlimDrugH 1 0.25 0.00 0.31 174 TR_XM_Base64_M1 1 0.25 0.00 0.31 175 DATE_IN_PAST_03_06 1 0.25 0.00 0.31 176 TVD_RCVD_IP 1 0.25 0.00 0.31 177 TR_LOTS_OF_MONEY2 1 0.51 1.47 0.31 178 XM_RXBody 1 0.25 0.00 0.31 179 RELAYCOUNTRY_AU 1 0.76 2.94 0.31 180 XMGenDplmaNmb 1 0.25 0.00 0.31 181 TR_Mismatch_TLD_01 1 1.02 4.41 0.31 182 TR_Sbj_FN_Bdy 1 0.51 1.47 0.31 183 INVALID_DATE 1 0.25 0.00 0.31 184 T_XMHurry_00 1 1.02 4.41 0.31 185 USER_IN_WELCOMELIST 1 0.25 0.00 0.31 186 CTE_8BIT_MISMATCH 1 0.25 0.00 0.31 187 CK_HELO_GENERIC 1 0.25 0.00 0.31 188 IN_HORDE_ADDRESS_BOOK 1 0.25 0.00 0.31 189 T_XMDrugObfuBody_01 1 0.25 0.00 0.31 190 URI_HEX 1 0.51 1.47 0.31 191 XMDiploma_00 1 0.25 0.00 0.31 192 FIN_FREE 1 0.25 0.00 0.31 193 RCVD_IN_IADB_OPTIN_GT50 1 0.25 0.00 0.31 194 TO_NO_BRKTS_HTML_ONLY 1 0.25 0.00 0.31 195 MSGID_FROM_MTA_HEADER 1 0.76 2.94 0.31 196 XMSexyCombo_01 1 1.53 7.35 0.31 197 T_FILL_THIS_FORM_SHORT 1 0.51 1.47 0.31 198 XM_B_SpammyWords4 1 0.25 0.00 0.31 199 XMSubEmpty 1 0.25 0.00 0.31 200 HTML_IMAGE_ONLY_12 1 0.25 0.00 0.31 ----------------------------------------------------------------------