Email: 423 Autolearn: 0 AvgScore: 3.45 AvgScanTime: 4.21 sec Spam: 154 Autolearn: 0 AvgScore: 17.55 AvgScanTime: 4.25 sec Ham: 269 Autolearn: 0 AvgScore: -4.62 AvgScanTime: 4.18 sec Time Spent Running SA: 0.49 hours Time Spent Processing Spam: 0.18 hours Time Spent Processing Ham: 0.31 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 149 58.63 96.75 36.80 2 XM_DK_Pass 144 78.01 93.51 69.14 3 DKIM_SIGNED 144 78.96 93.51 70.63 4 XM_B_SpammyWords 141 74.47 91.56 64.68 5 XM_B_Unicode 140 56.03 90.91 36.06 6 DKIM_VALID 140 76.83 90.91 68.77 7 XMListUnsubscribeExists 135 44.21 87.66 19.33 8 XM_B_SpammyWords2 132 36.64 85.71 8.55 9 T_SCC_BODY_TEXT_LINE 131 83.22 85.06 82.16 10 DCC_CHECK_NEGATIVE 127 87.71 82.47 90.71 11 XM_DK_Undo_02 127 31.21 82.47 1.86 12 TR_XM_DKIM_Undo 123 30.02 79.87 1.49 13 XM_Multi_Part_URI 120 35.70 77.92 11.52 14 DKIM_VALID_EF 106 35.70 68.83 16.73 15 RELAYCOUNTRY_META 101 25.06 65.58 1.86 16 TR_XM_SpammyRelay 100 23.88 64.94 0.37 17 MIME_HTML_ONLY 99 30.02 64.29 10.41 18 T_TM2_M_HEADER_IN_MSG 99 30.97 64.29 11.90 19 TR_XM_DK_Unsub 97 28.13 62.99 8.18 20 XM_UncommonTLD01 97 25.77 62.99 4.46 21 SpammyFromTLD_01 97 22.93 62.99 0.00 22 RELAYCOUNTRY_CA 95 22.46 61.69 0.00 23 TR_Mismatch_TLD_02 93 21.99 60.39 0.00 24 RCVD_IN_BL_SPAMCOP_NET 91 21.75 59.09 0.37 25 BAYES_99 84 20.57 54.55 1.12 26 TR_XM_SpammyWords2 77 18.20 50.00 0.00 27 BAYES_999 76 18.44 49.35 0.74 28 RCVD_IN_MSPIKE_WL 76 21.04 49.35 4.83 29 RCVD_IN_MSPIKE_H3 75 20.09 48.70 3.72 30 TR_XM_SPAMCOP 69 16.31 44.81 0.00 31 TR_XM_BayesRelay 56 13.24 36.36 0.00 32 RELAYCOUNTRY_US 49 57.68 31.82 72.49 33 XM_B_Unicode3 40 22.22 25.97 20.07 34 FVGT_m_MULTI_ODD 35 17.49 22.73 14.50 35 T_KAM_HTML_FONT_INVALID 32 14.42 20.78 10.78 36 LOTS_OF_MONEY 30 8.98 19.48 2.97 37 BOTNET 29 7.33 18.83 0.74 38 BOTNET_IPINHOSTNAME 29 8.04 18.83 1.86 39 HK_RANDOM_REPLYTO 27 6.38 17.53 0.00 40 DCC_CHECK 27 12.29 17.53 9.29 41 UNPARSEABLE_RELAY 27 9.69 17.53 5.20 42 TR_XM_SpammyWords4 27 7.80 17.53 2.23 43 DKIM_VALID_AU 26 45.15 16.88 61.34 44 XM_B_SpammyWords3 25 7.09 16.23 1.86 45 T_XMDrugObfuBody_08 25 7.09 16.23 1.86 46 XM_DK_Undo_01 25 8.98 16.23 4.83 47 XM_H_Long_From02 24 6.38 15.58 1.12 48 BAYES_50 24 54.61 15.58 76.95 49 XM_B_Investor 24 7.09 15.58 2.23 50 MIME_CHARSET_FARAWAY 23 6.15 14.94 1.12 51 TR_LOTS_OF_MONEY3 23 6.15 14.94 1.12 52 XMGenDplmaNmb 23 6.15 14.94 1.12 53 MAILING_LIST_MULTI 23 7.80 14.94 3.72 54 XMDiploma_00 23 6.15 14.94 1.12 55 BAYES_00 20 6.62 12.99 2.97 56 TR_XM_DK_Bayes 20 6.15 12.99 2.23 57 TR_XM_DK_Bayes1 20 6.15 12.99 2.23 58 RCVD_IN_MSPIKE_H2 17 35.93 11.04 50.19 59 LOC_TINY_FONT_1 14 9.46 9.09 9.67 60 HTML_FONT_LOW_CONTRAST 11 15.13 7.14 19.70 61 XM_Body_Dirty_Words 10 5.67 6.49 5.20 62 XMSubLong 9 40.66 5.84 60.59 63 BAYES_80 9 3.07 5.84 1.49 64 XM_B_Unsub 8 5.67 5.19 5.95 65 BAYES_95 8 2.13 5.19 0.37 66 TR_XM_BayesUnsub 8 5.20 5.19 5.20 67 MPART_ALT_DIFF 6 5.44 3.90 6.32 68 MIME_HTML_MOSTLY 6 2.84 3.90 2.23 69 XM_H_PHPOS 5 1.18 3.25 0.00 70 TR_XM_PHPForged 5 1.18 3.25 0.00 71 XM_B_SpammyTLD 5 27.66 3.25 41.64 72 UNTRUSTED_Relay 5 1.65 3.25 0.74 73 TR_XM_FormFill2 5 1.18 3.25 0.00 74 TR_XM_PHPDW 5 1.18 3.25 0.00 75 DKIM_INVALID 4 2.13 2.60 1.86 76 TooManyTo_001 4 2.84 2.60 2.97 77 BAYES_60 4 4.49 2.60 5.58 78 XM_B_Phish_Phrases 4 1.42 2.60 0.74 79 TM2_M_VERY_LONG_WORD 4 1.65 2.60 1.12 80 TR_XM_PhishingBody 4 0.95 2.60 0.00 81 XMStockSpam_06 4 0.95 2.60 0.00 82 DATE_IN_PAST_03_06 3 0.71 1.95 0.00 83 TR_XM_SB_Phish 3 2.36 1.95 2.60 84 XMSubPhish11 3 2.36 1.95 2.60 85 TR_XM_UnparsRelay 3 0.95 1.95 0.37 86 CK_HELO_GENERIC 3 0.71 1.95 0.00 87 URI_NOVOWEL 3 1.18 1.95 0.74 88 BAYES_05 3 4.26 1.95 5.58 89 RCVD_IN_VALIDITY_RPBL 3 0.71 1.95 0.00 90 XM_CamelCaseFrm001 3 0.95 1.95 0.37 91 LotsOfNums_01 2 1.65 1.30 1.86 92 XMStrtUSub 2 2.13 1.30 2.60 93 XM_ShortIntro_01 2 0.71 1.30 0.37 94 TR_Symld_Words 2 2.84 1.30 3.72 95 XMSubMetaSSxObfu_00 2 0.47 1.30 0.00 96 URIBL_DBL_ABUSE_SPAM 2 0.47 1.30 0.00 97 ALL_TRUSTED 2 17.26 1.30 26.39 98 XMNumbers 2 3.31 1.30 4.46 99 T_XMDrugObfuBody_00 2 0.71 1.30 0.37 100 XM_DIRTYINTL 2 0.47 1.30 0.00 101 T_XMHurry_00 2 0.95 1.30 0.74 102 XM_UB80 2 0.47 1.30 0.00 103 RELAYCOUNTRY_AU 2 0.47 1.30 0.00 104 XM_Body_Obfu01 2 0.71 1.30 0.37 105 RCVD_IN_PSBL 2 0.47 1.30 0.00 106 TooManyTo_003 2 0.71 1.30 0.37 107 TR_XM_COVIDMETA1 2 0.47 1.30 0.00 108 TR_DCC_Bayes_99 2 1.18 1.30 1.12 109 HTML_MIME_NO_HTML_TAG 2 0.95 1.30 0.74 110 RELAYCOUNTRY_AT 2 0.47 1.30 0.00 111 XM_B_Phish66 2 0.47 1.30 0.00 112 HTML_IMAGE_RATIO_02 2 1.42 1.30 1.49 113 TR_XM_SpammyWords5 2 1.89 1.30 2.23 114 XM_Evil_Numbers_Gen 2 2.60 1.30 3.35 115 XM_H_Long_From01 2 27.19 1.30 42.01 116 TooManyTo_002 2 0.95 1.30 0.74 117 TooManyTo_004 2 0.71 1.30 0.37 118 HTTPS_HTTP_MISMATCH 2 0.47 1.30 0.00 119 LONG_JUNK_URI3 2 0.47 1.30 0.00 120 XMSexyCombo_01 1 0.24 0.65 0.00 121 TR_XM_Undi_Recip2 1 0.24 0.65 0.00 122 FROM_GOV_SPOOF 1 0.24 0.65 0.00 123 LongTLD 1 0.24 0.65 0.00 124 T_Symld_Words_02 1 0.24 0.65 0.00 125 XMNoVowels 1 0.24 0.65 0.00 126 FROM_LOCAL_NOVOWEL 1 0.24 0.65 0.00 127 NUMERIC_HTTP_ADDR 1 0.24 0.65 0.00 128 TO_EQ_FM_DOM_HTML_ONLY 1 0.24 0.65 0.00 129 XMSexyCombo_05 1 0.95 0.65 1.12 130 T_REMOTE_IMAGE 1 0.95 0.65 1.12 131 TM2_M_HAS_BSLASH_URI 1 0.24 0.65 0.00 132 XMSubNoVowel 1 0.24 0.65 0.00 133 PDS_RDNS_DYNAMIC_FP 1 0.24 0.65 0.00 134 OBFU_TEXT_ATTACH 1 0.24 0.65 0.00 135 T_XMDrugObfuBody_03 1 0.24 0.65 0.00 136 URIBL_BLACK 1 0.24 0.65 0.00 137 XM_H_Undi_Recip 1 0.24 0.65 0.00 138 HK_SCAM 1 0.24 0.65 0.00 139 RDNS_DYNAMIC 1 0.71 0.65 0.74 140 XMSubMetaSx_00 1 0.95 0.65 1.12 141 T_TooManySym_01 1 6.86 0.65 10.41 142 HTML_IMAGE_ONLY_20 1 0.24 0.65 0.00 143 XMSexyCombo_04 1 0.24 0.65 0.00 144 XM_E_Blogspot 1 0.24 0.65 0.00 145 ADVANCE_FEE_5_NEW_MONEY 1 0.24 0.65 0.00 146 XM_OfRef6 1 0.47 0.65 0.37 147 T_MONEY_PERCENT 1 0.47 0.65 0.37 148 HTML_IMAGE_RATIO_04 1 2.13 0.65 2.97 149 BAYES_40 1 2.60 0.65 3.72 150 TR_XM_SEO4 1 0.24 0.65 0.00 151 TR_XM_MaxWHORU 1 0.24 0.65 0.00 152 WEIRD_PORT 1 0.47 0.65 0.37 153 HELO_NO_DOMAIN 1 0.47 0.65 0.37 154 FSL_BULK_SIG 1 1.18 0.65 1.49 155 NO_DNS_FOR_FROM 1 0.47 0.65 0.37 156 MY_SERVERS_FOUND 1 0.47 0.65 0.37 157 XM_B_DNDMA 1 1.42 0.65 1.86 158 SpammyFromTLD_02 1 26.00 0.65 40.52 159 T_DOS_OUTLOOK_TO_MX_IMAGE 1 0.24 0.65 0.00 160 HELO_NODOT 1 0.47 0.65 0.37 161 TR_XM_Undi_Recip11 1 0.24 0.65 0.00 162 TR_XM_DK_SendGrid 1 0.95 0.65 1.12 163 HTML_IMAGE_RATIO_08 1 3.31 0.65 4.83 164 UNCLAIMED_MONEY 1 0.24 0.65 0.00 165 TM2_M_URI_OPT_OUT 1 8.98 0.65 13.75 166 FVGT_m_MULTI_ODD_EMAIL 1 0.71 0.65 0.74 167 SHORT_HELO_AND_INLINE_IMAGE 1 0.47 0.65 0.37 168 T_TooManySym_02 1 5.91 0.65 8.92 169 FROM_EXCESS_BASE64 1 0.24 0.65 0.00 170 TR_XM_Undi_RecipCombo2 1 0.24 0.65 0.00 171 RELAYCOUNTRY_GB 1 0.47 0.65 0.37 172 MONEY_FRAUD_8 1 0.24 0.65 0.00 173 NAME_EMAIL_DIFF 1 0.24 0.65 0.00 174 XM_SendGrid 1 1.65 0.65 2.23 175 HTTP_EXCESSIVE_ESCAPES 1 0.24 0.65 0.00 176 XM_SPF_SoftFail 1 0.95 0.65 1.12 177 PDS_OTHER_BAD_TLD 1 0.24 0.65 0.00 178 XMSubject_70 1 0.24 0.65 0.00 179 XM_H_PHPMailer 1 2.13 0.65 2.97 180 SCC_BODY_URI_ONLY 1 2.60 0.65 3.72 181 DIET_1 1 0.24 0.65 0.00 182 NOT_SPAM 1 0.24 0.65 0.00 183 XM_UB99 1 0.24 0.65 0.00 184 XMPhish08 1 0.24 0.65 0.00 185 TR_BOTNET_NEGATE 1 0.47 0.65 0.37 186 XMBody_03 1 0.24 0.65 0.00 187 KHOP_HELO_FCRDNS 1 0.47 0.65 0.37 188 XMBrknScrpt_02 1 1.42 0.65 1.86 189 TR_LOTS_OF_MONEY2 1 0.47 0.65 0.37 190 XM_TLDProd2 1 0.71 0.65 0.74 191 T_SHARE_50_50 1 0.24 0.65 0.00 192 BOTNET_NORDNS 1 0.24 0.65 0.00 193 URI_HEX 1 0.24 0.65 0.00 194 VFY_ACCT_NORDNS 1 0.24 0.65 0.00 195 XMPhish11 1 0.24 0.65 0.00 196 GOOG_REDIR_SHORT 1 0.24 0.65 0.00 197 TooManyTo_005 1 0.47 0.65 0.37 198 T_XMDrugObfuBody_14 1 1.42 0.65 1.86 199 MIME_QP_LONG_LINE 1 0.95 0.65 1.12 200 XM_B_SEO 1 0.24 0.65 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 244 87.71 82.47 90.71 2 T_SCC_BODY_TEXT_LINE 221 83.22 85.06 82.16 3 BAYES_50 207 54.61 15.58 76.95 4 RELAYCOUNTRY_US 195 57.68 31.82 72.49 5 DKIM_SIGNED 190 78.96 93.51 70.63 6 XM_DK_Pass 186 78.01 93.51 69.14 7 DKIM_VALID 185 76.83 90.91 68.77 8 XM_B_SpammyWords 174 74.47 91.56 64.68 9 DKIM_VALID_AU 165 45.15 16.88 61.34 10 XMSubLong 163 40.66 5.84 60.59 11 RCVD_IN_MSPIKE_H2 135 35.93 11.04 50.19 12 XM_H_Long_From01 113 27.19 1.30 42.01 13 XMGappySubj_01 112 26.48 0.00 41.64 14 XM_B_SpammyTLD 112 27.66 3.25 41.64 15 SpammyFromTLD_02 109 26.00 0.65 40.52 16 FROM_GOV_DKIM_AU 108 25.53 0.00 40.15 17 HTML_MESSAGE 99 58.63 96.75 36.80 18 XM_B_Unicode 97 56.03 90.91 36.06 19 IN_ZIMBRA_NJ_WHITELIST 92 21.75 0.00 34.20 20 USER_IN_DEF_DKIM_WL 90 21.28 0.00 33.46 21 ALL_TRUSTED 71 17.26 1.30 26.39 22 XM_B_Unicode3 54 22.22 25.97 20.07 23 HTML_FONT_LOW_CONTRAST 53 15.13 7.14 19.70 24 XMListUnsubscribeExists 52 44.21 87.66 19.33 25 DKIM_VALID_EF 45 35.70 68.83 16.73 26 FVGT_m_MULTI_ODD 39 17.49 22.73 14.50 27 TM2_M_URI_OPT_OUT 37 8.98 0.65 13.75 28 BOUNCE_MESSAGE 34 8.04 0.00 12.64 29 ANY_BOUNCE_MESSAGE 34 8.04 0.00 12.64 30 T_TM2_M_HEADER_IN_MSG 32 30.97 64.29 11.90 31 XM_Multi_Part_URI 31 35.70 77.92 11.52 32 T_KAM_HTML_FONT_INVALID 29 14.42 20.78 10.78 33 MIME_HTML_ONLY 28 30.02 64.29 10.41 34 T_TooManySym_01 28 6.86 0.65 10.41 35 LOC_TINY_FONT_1 26 9.46 9.09 9.67 36 DCC_CHECK 25 12.29 17.53 9.29 37 T_TooManySym_02 24 5.91 0.65 8.92 38 XM_B_SpammyWords2 23 36.64 85.71 8.55 39 TR_XM_DK_Unsub 22 28.13 62.99 8.18 40 MPART_ALT_DIFF 17 5.44 3.90 6.32 41 XM_B_Unsub 16 5.67 5.19 5.95 42 BAYES_05 15 4.26 1.95 5.58 43 BAYES_60 15 4.49 2.60 5.58 44 TR_XM_BayesUnsub 14 5.20 5.19 5.20 45 UNPARSEABLE_RELAY 14 9.69 17.53 5.20 46 XM_Body_Dirty_Words 14 5.67 6.49 5.20 47 HTML_IMAGE_RATIO_08 13 3.31 0.65 4.83 48 T_TooManySym_03 13 3.07 0.00 4.83 49 RCVD_IN_MSPIKE_WL 13 21.04 49.35 4.83 50 XM_DK_Undo_01 13 8.98 16.23 4.83 51 XM_UncommonTLD01 12 25.77 62.99 4.46 52 XMNumbers 12 3.31 1.30 4.46 53 SCC_BODY_URI_ONLY 10 2.60 0.65 3.72 54 MAILING_LIST_MULTI 10 7.80 14.94 3.72 55 BASE64_LENGTH_79_INF 10 2.36 0.00 3.72 56 TR_Symld_Words 10 2.84 1.30 3.72 57 BAYES_40 10 2.60 0.65 3.72 58 RCVD_IN_MSPIKE_H3 10 20.09 48.70 3.72 59 XM_Evil_Numbers_Gen 9 2.60 1.30 3.35 60 SHORT_SHORTNER 8 1.89 0.00 2.97 61 XM_H_PHPMailer 8 2.13 0.65 2.97 62 LOTS_OF_MONEY 8 8.98 19.48 2.97 63 INVALID_MSGID 8 1.89 0.00 2.97 64 TooManyTo_001 8 2.84 2.60 2.97 65 BAYES_00 8 6.62 12.99 2.97 66 HTML_IMAGE_RATIO_04 8 2.13 0.65 2.97 67 TO_MALFORMED 7 1.65 0.00 2.60 68 XMSubPhish11 7 2.36 1.95 2.60 69 XMStrtUSub 7 2.13 1.30 2.60 70 TR_XM_SB_Phish 7 2.36 1.95 2.60 71 MSGID_NOFQDN1 7 1.65 0.00 2.60 72 TR_XM_SpammyWords5 6 1.89 1.30 2.23 73 MIME_HTML_MOSTLY 6 2.84 3.90 2.23 74 XM_SendGrid 6 1.65 0.65 2.23 75 XM_B_Investor 6 7.09 15.58 2.23 76 TR_XM_SpammyWords4 6 7.80 17.53 2.23 77 BAYES_20 6 1.65 0.65 2.23 78 XM_DKIMWhitelistDomains 6 1.42 0.00 2.23 79 TR_XM_DK_Bayes 6 6.15 12.99 2.23 80 SHORT_URI_2 6 1.42 0.00 2.23 81 TR_XM_DK_Bayes1 6 6.15 12.99 2.23 82 XMBrknScrpt_02 5 1.42 0.65 1.86 83 TVD_SPACE_RATIO 5 1.18 0.00 1.86 84 RELAYCOUNTRY_META 5 25.06 65.58 1.86 85 XM_DK_Undo_02 5 31.21 82.47 1.86 86 BOTNET_IPINHOSTNAME 5 8.04 18.83 1.86 87 T_XMDrugObfuBody_14 5 1.42 0.65 1.86 88 LotsOfNums_01 5 1.65 1.30 1.86 89 DKIM_INVALID 5 2.13 2.60 1.86 90 HTML_FONT_FACE_BAD 5 1.18 0.00 1.86 91 XM_B_SpammyWords3 5 7.09 16.23 1.86 92 T_XMDrugObfuBody_08 5 7.09 16.23 1.86 93 HTML_IMAGE_RATIO_06 5 1.18 0.00 1.86 94 XM_B_DNDMA 5 1.42 0.65 1.86 95 HTML_IMAGE_RATIO_02 4 1.42 1.30 1.49 96 BAYES_80 4 3.07 5.84 1.49 97 XM_H_Trusted_IP 4 0.95 0.00 1.49 98 TR_XM_DKIM_Undo 4 30.02 79.87 1.49 99 XM_E_Weebly 4 0.95 0.00 1.49 100 FSL_BULK_SIG 4 1.18 0.65 1.49 101 XM_SPF_SoftFail 3 0.95 0.65 1.12 102 TM2_M_VERY_LONG_WORD 3 1.65 2.60 1.12 103 XMBody_95 3 0.71 0.00 1.12 104 TR_LOTS_OF_MONEY3 3 6.15 14.94 1.12 105 XMSubMetaI_00 3 0.71 0.00 1.12 106 XMGenDplmaNmb 3 6.15 14.94 1.12 107 FILL_THIS_FORM 3 0.71 0.00 1.12 108 XMDiploma_00 3 6.15 14.94 1.12 109 TR_XM_DK_Bayes2 3 0.71 0.00 1.12 110 MIME_QP_LONG_LINE 3 0.95 0.65 1.12 111 XM_B_Unsub2 3 0.95 0.65 1.12 112 XMSubMetaSx_00 3 0.95 0.65 1.12 113 T_TooManySym_04 3 0.71 0.00 1.12 114 BAYES_99 3 20.57 54.55 1.12 115 MIME_CHARSET_FARAWAY 3 6.15 14.94 1.12 116 XMSexyCombo_05 3 0.95 0.65 1.12 117 T_REMOTE_IMAGE 3 0.95 0.65 1.12 118 XM_H_Long_From02 3 6.38 15.58 1.12 119 TR_DCC_Bayes_99 3 1.18 1.30 1.12 120 XMLngstWrd_00 3 0.71 0.00 1.12 121 TR_XM_DK_SendGrid 3 0.95 0.65 1.12 122 HTML_MIME_NO_HTML_TAG 2 0.95 1.30 0.74 123 XMCapTrack 2 0.47 0.00 0.74 124 XM_TLDProd2 2 0.71 0.65 0.74 125 TooManyTo_002 2 0.95 1.30 0.74 126 UNTRUSTED_Relay 2 1.65 3.25 0.74 127 RCVD_IN_MSPIKE_H5 2 0.47 0.00 0.74 128 BAYES_999 2 18.44 49.35 0.74 129 FVGT_m_MULTI_ODD_EMAIL 2 0.71 0.65 0.74 130 RELAYCOUNTRY_FR 2 0.47 0.00 0.74 131 RCVD_IN_VALIDITY_SAFE 2 0.47 0.00 0.74 132 URI_NOVOWEL 2 1.18 1.95 0.74 133 XM_B_Phish_Phrases 2 1.42 2.60 0.74 134 HTML_IMAGE_ONLY_16 2 0.47 0.00 0.74 135 IN_HORDE_ADDRESS_BOOK 2 0.71 0.65 0.74 136 BOTNET 2 7.33 18.83 0.74 137 XMSlimDrugH 2 0.47 0.00 0.74 138 XM_Ancestry_Forge 2 0.47 0.00 0.74 139 RCVD_IN_IADB_LISTED 2 0.47 0.00 0.74 140 RDNS_DYNAMIC 2 0.71 0.65 0.74 141 T_FILL_THIS_FORM_SHORT 2 0.47 0.00 0.74 142 RCVD_IN_IADB_SPF 2 0.47 0.00 0.74 143 USER_IN_WELCOMELIST 2 0.47 0.00 0.74 144 T_PDS_PRO_TLD 2 0.47 0.00 0.74 145 USER_IN_WHITELIST 2 0.47 0.00 0.74 146 T_XMHurry_00 2 0.95 1.30 0.74 147 TO_EQ_FM_DOM_HTML_IMG 1 0.24 0.00 0.37 148 XM_UB60 1 0.24 0.00 0.37 149 TR_BOTNET_NEGATE 1 0.47 0.65 0.37 150 KHOP_HELO_FCRDNS 1 0.47 0.65 0.37 151 TR_LOTS_OF_MONEY2 1 0.47 0.65 0.37 152 SHORT_HELO_AND_INLINE_IMAGE 1 0.47 0.65 0.37 153 HTML_SHORT_LINK_IMG_2 1 0.24 0.00 0.37 154 RELAYCOUNTRY_GB 1 0.47 0.65 0.37 155 DC_PNG_UNO_LARGO 1 0.24 0.00 0.37 156 TR_MSPIKEBAYES00 1 0.47 0.65 0.37 157 XM_Dr_From 1 0.47 0.65 0.37 158 XMSubject_78 1 0.24 0.00 0.37 159 XM_UB50 1 0.47 0.65 0.37 160 XM_B_REG_HTML 1 0.24 0.00 0.37 161 LONG_JUNK_URI 1 0.24 0.00 0.37 162 RCVD_IN_MSPIKE_H4 1 0.47 0.65 0.37 163 XM_CamelCaseFrm001 1 0.95 1.95 0.37 164 XMEqualsVooDoo_00 1 0.24 0.00 0.37 165 LONGLN_LOW_CONTRAST 1 0.24 0.00 0.37 166 TooManyTo_004 1 0.71 1.30 0.37 167 RCVD_IN_RP_CERTIFIED 1 0.24 0.00 0.37 168 XMLngstWrd_02 1 0.24 0.00 0.37 169 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.24 0.00 0.37 170 TooManyTo_005 1 0.47 0.65 0.37 171 RCVD_IN_IADB_VOUCHED 1 0.24 0.00 0.37 172 AD_PREFS 1 0.24 0.00 0.37 173 XM_S_SubURI 1 0.24 0.00 0.37 174 URI_TRY_3LD 1 0.24 0.00 0.37 175 XMHTMLBadTable_001 1 0.24 0.00 0.37 176 MIME_HTML_ONLY_MULTI 1 0.24 0.00 0.37 177 CTE_8BIT_MISMATCH 1 0.24 0.00 0.37 178 XM_OfRef6 1 0.47 0.65 0.37 179 XMMoneyMeta_00 1 0.24 0.00 0.37 180 TR_XM_UnparsRelay 1 0.95 1.95 0.37 181 T_MONEY_PERCENT 1 0.47 0.65 0.37 182 RCVD_IN_RP_SAFE 1 0.24 0.00 0.37 183 HK_RANDOM_FROM 1 0.24 0.00 0.37 184 XM_ShortIntro_01 1 0.71 1.30 0.37 185 XMSubMetaSSx_00 1 0.24 0.00 0.37 186 XM_GoogleGroups 1 0.24 0.00 0.37 187 XMSubMetaSxObfu_03 1 0.24 0.00 0.37 188 XM_WL_UtahGOV 1 0.24 0.00 0.37 189 TR_XM_SpammyRelay 1 23.88 64.94 0.37 190 DKIM_ADSP_NXDOMAIN 1 0.24 0.00 0.37 191 HELO_NODOT 1 0.47 0.65 0.37 192 RELAYCOUNTRY_PK 1 0.24 0.00 0.37 193 XM_Body_Obfu01 1 0.71 1.30 0.37 194 BAYES_95 1 2.13 5.19 0.37 195 TooManyTo_003 1 0.71 1.30 0.37 196 RCVD_IN_VALIDITY_CERTIFIED 1 0.24 0.00 0.37 197 XMGappySubj_02 1 0.24 0.00 0.37 198 RCVD_IN_IADB_SENDERID 1 0.24 0.00 0.37 199 T_XMDrugObfuBody_00 1 0.71 1.30 0.37 200 TR_Mismatch_TLD_01 1 0.24 0.00 0.37 ----------------------------------------------------------------------