Email: 344 Autolearn: 0 AvgScore: 3.78 AvgScanTime: 1.63 sec Spam: 102 Autolearn: 0 AvgScore: 14.88 AvgScanTime: 1.52 sec Ham: 242 Autolearn: 0 AvgScore: -0.90 AvgScanTime: 1.68 sec Time Spent Running SA: 0.16 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.11 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 98 84.30 96.08 79.34 2 T_SCC_BODY_TEXT_LINE 90 86.05 88.24 85.12 3 DCC_CHECK_NEGATIVE 82 77.33 80.39 76.03 4 BAYES_50 73 63.66 71.57 60.33 5 RELAYCOUNTRY_US 68 64.24 66.67 63.22 6 XM_B_SpammyWords 64 53.49 62.75 49.59 7 XM_B_Unicode 62 63.95 60.78 65.29 8 MIME_HTML_ONLY 47 41.57 46.08 39.67 9 XM_B_Unicode3 46 43.31 45.10 42.56 10 LOTS_OF_MONEY 41 14.53 40.20 3.72 11 XM_UncommonTLD01 40 15.99 39.22 6.20 12 DKIM_SIGNED 40 51.74 39.22 57.02 13 XM_DK_Pass 39 50.00 38.24 54.96 14 T_TM2_M_HEADER_IN_MSG 39 23.55 38.24 17.36 15 DKIM_VALID 39 49.71 38.24 54.55 16 TR_XM_SpammyWords4 37 11.92 36.27 1.65 17 FSL_HELO_NON_FQDN_1 35 10.17 34.31 0.00 18 HELO_NODOT 35 10.17 34.31 0.00 19 MISSING_HEADERS 35 10.17 34.31 0.00 20 TR_LOTS_OF_MONEY1 35 10.17 34.31 0.00 21 DEAR_BENEFICIARY 35 10.17 34.31 0.00 22 SUBJ_ALL_CAPS 35 10.47 34.31 0.41 23 TR_XM_SpammyWords5 34 9.88 33.33 0.00 24 DKIM_VALID_AU 34 44.48 33.33 49.17 25 MIMEOLE_DIRECT_TO_MX 34 9.88 33.33 0.00 26 DOS_OE_TO_MX 34 9.88 33.33 0.00 27 FROM_MISSP_XPRIO 33 9.59 32.35 0.00 28 FSL_NEW_HELO_USER 33 9.59 32.35 0.00 29 TO_NO_BRKTS_MSFT 33 9.59 32.35 0.00 30 FAKE_REPLY_C 33 9.59 32.35 0.00 31 FORGED_MUA_OUTLOOK 33 9.59 32.35 0.00 32 FSL_CTYPE_WIN1251 33 9.59 32.35 0.00 33 AXB_XMAILER_MIMEOLE_OL_024C2 33 9.59 32.35 0.00 34 FROM_MISSPACED 33 9.59 32.35 0.00 35 FROM_MISSP_EH_MATCH 33 9.59 32.35 0.00 36 NSL_RCVD_HELO_USER 33 9.59 32.35 0.00 37 FORGED_OUTLOOK_HTML 33 9.59 32.35 0.00 38 TO_NO_BRKTS_FROM_MSSP 33 9.59 32.35 0.00 39 MONEY_FROM_MISSP 33 9.59 32.35 0.00 40 FORGED_OUTLOOK_TAGS 33 9.59 32.35 0.00 41 FROM_MISSP_REPLYTO 33 9.59 32.35 0.00 42 HELO_NO_DOMAIN 33 9.59 32.35 0.00 43 ADVANCE_FEE_5_NEW_MONEY 33 9.59 32.35 0.00 44 REPLYTO_WITHOUT_TO_CC 33 9.59 32.35 0.00 45 TVD_PH_BODY_ACCOUNTS_PRE 33 9.59 32.35 0.00 46 FROM_MISSP_MSFT 33 9.59 32.35 0.00 47 XPRIO 29 8.43 28.43 0.00 48 XMSubLong 26 31.40 25.49 33.88 49 MPART_ALT_DIFF 25 19.77 24.51 17.77 50 ALL_TRUSTED 24 31.69 23.53 35.12 51 XMListUnsubscribeExists 23 27.03 22.55 28.93 52 HTML_FONT_LOW_CONTRAST 23 30.81 22.55 34.30 53 MIME_HTML_MOSTLY 23 10.17 22.55 4.96 54 XM_B_SpammyTLD 22 10.76 21.57 6.20 55 DCC_CHECK 20 22.67 19.61 23.97 56 HTML_SHORT_LINK_IMG_1 18 7.56 17.65 3.31 57 HTML_IMAGE_ONLY_08 18 7.56 17.65 3.31 58 UNICODE_OBFU_ASC 18 7.27 17.65 2.89 59 XM_SPF_SoftFail 18 6.40 17.65 1.65 60 XM_B_SpammyTLD2 18 5.23 17.65 0.00 61 URI_HEX 18 7.27 17.65 2.89 62 XM_DK_Undo_02 17 6.69 16.67 2.48 63 T_KAM_HTML_FONT_INVALID 16 23.55 15.69 26.86 64 RCVD_IN_MSPIKE_H2 16 19.77 15.69 21.49 65 DKIM_VALID_EF 15 29.94 14.71 36.36 66 LOC_TINY_FONT_1 13 14.83 12.75 15.70 67 FVGT_m_MULTI_ODD 13 11.92 12.75 11.57 68 XM_Multi_Part_URI 12 9.59 11.76 8.68 69 RELAYCOUNTRY_META 12 4.94 11.76 2.07 70 XM_B_SpammyWords2 11 10.17 10.78 9.92 71 TR_XM_BayesUnsub 10 6.40 9.80 4.96 72 XM_B_Unsub 10 7.27 9.80 6.20 73 TR_XM_DKIM_Undo 10 3.20 9.80 0.41 74 BOTNET 9 3.20 8.82 0.83 75 T_TooManySym_01 9 16.57 8.82 19.83 76 BAYES_99 9 4.36 8.82 2.48 77 XMSubMetaSx_00 9 5.23 8.82 3.72 78 XMSexyCombo_05 8 3.78 7.84 2.07 79 XM_Body_Dirty_Words 8 6.10 7.84 5.37 80 FSL_BULK_SIG 8 9.30 7.84 9.92 81 BAYES_60 8 11.34 7.84 12.81 82 TM2_M_URI_OPT_OUT 7 15.99 6.86 19.83 83 UNTRUSTED_Relay 7 2.91 6.86 1.24 84 XMStrtUSub 7 9.01 6.86 9.92 85 XM_H_Long_From01 7 5.52 6.86 4.96 86 TR_DCC_Bayes_99 7 2.33 6.86 0.41 87 T_TooManySym_02 6 15.41 5.88 19.42 88 TR_XM_SpammyRelay 6 2.03 5.88 0.41 89 UNPARSEABLE_RELAY 6 9.59 5.88 11.16 90 TR_Symld_Words 6 11.63 5.88 14.05 91 XM_CamelCaseFrm001 5 5.52 4.90 5.79 92 BAYES_999 5 3.20 4.90 2.48 93 XM_SendGrid 5 8.14 4.90 9.50 94 HTML_IMAGE_RATIO_08 5 12.50 4.90 15.70 95 BASE64_LENGTH_79_INF 5 11.63 4.90 14.46 96 BOTNET_IPINHOSTNAME 5 4.36 4.90 4.13 97 XM_B_SpammyWords3 5 2.62 4.90 1.65 98 HTML_IMAGE_RATIO_04 5 2.91 4.90 2.07 99 RCVD_IN_BL_SPAMCOP_NET 5 1.45 4.90 0.00 100 BAYES_40 5 6.69 4.90 7.44 101 T_TooManySym_03 5 12.79 4.90 16.12 102 BAYES_80 5 2.33 4.90 1.24 103 TR_XM_DK_Unsub 5 13.66 4.90 17.36 104 MPART_ALT_DIFF_COUNT 4 1.16 3.92 0.00 105 XM_Evil_Numbers_Gen 4 6.98 3.92 8.26 106 T_XMDrugObfuBody_08 3 1.45 2.94 0.83 107 RELAYCOUNTRY_IE 3 0.87 2.94 0.00 108 LotsOfNums_01 3 2.91 2.94 2.89 109 XM_DIRTYINTL 3 1.16 2.94 0.41 110 XMSubLongNoVowel 3 0.87 2.94 0.00 111 TooManyTo_001 3 4.07 2.94 4.55 112 RCVD_IN_PSBL 3 1.16 2.94 0.41 113 RELAYCOUNTRY_AU 3 1.16 2.94 0.41 114 FROM_EXCESS_BASE64 3 5.81 2.94 7.02 115 XM_UB60 3 0.87 2.94 0.00 116 TR_XM_Base64_L1 3 1.45 2.94 0.83 117 TR_XM_SpammyWords2 3 1.16 2.94 0.41 118 HTML_IMAGE_RATIO_02 3 2.91 2.94 2.89 119 XMSubNoVowel 3 0.87 2.94 0.00 120 TR_XM_UnparsRelay 3 2.33 2.94 2.07 121 TR_XM_Base64_L2 3 0.87 2.94 0.00 122 XM_UB50 3 1.74 2.94 1.24 123 FROM_GOV_DKIM_AU 3 0.87 2.94 0.00 124 URIBL_DBL_SPAM 3 0.87 2.94 0.00 125 T_REMOTE_IMAGE 2 4.36 1.96 5.37 126 TR_XM_DK_SendGrid 2 6.10 1.96 7.85 127 ADVANCE_FEE_3_NEW_MONEY 2 0.58 1.96 0.00 128 BOTNET_NORDNS 2 0.58 1.96 0.00 129 XM_B_TRADE_HTML 2 0.58 1.96 0.00 130 HELO_LOCALHOST 2 0.58 1.96 0.00 131 TM2_M_VERY_LONG_WORD 2 0.87 1.96 0.41 132 PDS_OTHER_BAD_TLD 2 0.58 1.96 0.00 133 TR_XM_DK_Bayes 2 6.10 1.96 7.85 134 RELAYCOUNTRY_AT 2 0.58 1.96 0.00 135 T_XMDrugObfuBody_14 2 0.87 1.96 0.41 136 RCVD_IN_RP_SAFE 2 0.58 1.96 0.00 137 RCVD_IN_RP_CERTIFIED 2 0.58 1.96 0.00 138 XM_Attn_01 2 0.58 1.96 0.00 139 T_TooManySym_04 2 3.20 1.96 3.72 140 XM_B_COPY_HTML 2 0.58 1.96 0.00 141 FROM_SUSPICIOUS_NTLD 2 0.58 1.96 0.00 142 HTML_MIME_NO_HTML_TAG 2 2.33 1.96 2.48 143 XMSubMetaSSx_00 2 0.87 1.96 0.41 144 XMSexyCombo_01 2 0.58 1.96 0.00 145 SpammyFromTLD_02 2 0.87 1.96 0.41 146 RELAYCOUNTRY_NL 2 0.87 1.96 0.41 147 TR_XM_NoHeaderRelay 2 0.58 1.96 0.00 148 BAYES_00 2 7.27 1.96 9.50 149 XM_B_Phish_Phrases 2 1.16 1.96 0.83 150 HTML_IMAGE_ONLY_12 2 2.62 1.96 2.89 151 XMSubMetaSx_01 2 0.58 1.96 0.00 152 TR_XM_DK_Bayes2 2 6.10 1.96 7.85 153 HK_SCAM 2 0.58 1.96 0.00 154 URI_PHISH 2 0.58 1.96 0.00 155 TR_XM_SPAMCOP 2 0.58 1.96 0.00 156 RCVD_IN_VALIDITY_SAFE 2 1.74 1.96 1.65 157 XM_Body_Obfu01 2 0.58 1.96 0.00 158 TR_XM_DK_Bayes1 2 6.10 1.96 7.85 159 HTTPS_HTTP_MISMATCH 2 0.87 1.96 0.41 160 XMBody_95 2 0.58 1.96 0.00 161 RCVD_IN_VALIDITY_CERTIFIED 2 1.45 1.96 1.24 162 RCVD_IN_MSPIKE_WL 2 6.40 1.96 8.26 163 XMBody_78 2 0.58 1.96 0.00 164 XM_B_REG_HTML 2 0.58 1.96 0.00 165 DEAR_FRIEND 1 0.29 0.98 0.00 166 NORDNS_LOW_CONTRAST 1 0.29 0.98 0.00 167 XMMoneyMeta_01 1 0.29 0.98 0.00 168 XM_XX_Yahoo 1 0.29 0.98 0.00 169 THIS_AD 1 0.29 0.98 0.00 170 RCVD_IN_IADB_SPF 1 1.74 0.98 2.07 171 HDR_ORDER_FTSDMCXX_DIRECT 1 0.29 0.98 0.00 172 HDR_ORDER_FTSDMCXX_NORDNS 1 0.29 0.98 0.00 173 RCVD_IN_IADB_DK 1 1.16 0.98 1.24 174 TR_XM_RelayPhish 1 0.29 0.98 0.00 175 RCVD_IN_MSPIKE_H4 1 0.29 0.98 0.00 176 BOUNCE_MESSAGE 1 0.58 0.98 0.41 177 TVD_SPACE_RATIO_MINFP 1 0.29 0.98 0.00 178 ANY_BOUNCE_MESSAGE 1 0.58 0.98 0.41 179 PRICES_ARE_AFFORDABLE 1 0.29 0.98 0.00 180 DKIM_INVALID 1 2.03 0.98 2.48 181 XMSexyCombo_02 1 0.29 0.98 0.00 182 TooManyTo_005 1 0.58 0.98 0.41 183 NO_DNS_FOR_FROM 1 0.29 0.98 0.00 184 NUMERIC_HTTP_ADDR 1 0.29 0.98 0.00 185 XM_H_PHPMailer 1 6.98 0.98 9.50 186 SHORT_URI_2 1 1.74 0.98 2.07 187 TM2_M_HAS_BSLASH_URI 1 2.03 0.98 2.48 188 RCVD_IN_IADB_SENDERID 1 1.74 0.98 2.07 189 XMBounce_01 1 0.29 0.98 0.00 190 TO_EQ_FM_DOM_HTML_ONLY 1 0.29 0.98 0.00 191 TooManyTo_002 1 1.74 0.98 2.07 192 RELAYCOUNTRY_NG 1 0.29 0.98 0.00 193 XMBounce_02 1 0.29 0.98 0.00 194 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.29 0.98 0.00 195 SUSPICIOUS_RECIPS 1 0.29 0.98 0.00 196 HTML_OBFUSCATE_05_10 1 0.29 0.98 0.00 197 RCVD_IN_VALIDITY_RPBL 1 0.29 0.98 0.00 198 SHORT_SHORTNER 1 5.23 0.98 7.02 199 XMMoneyMeta_00 1 0.58 0.98 0.41 200 FVGT_m_MULTI_ODD_EMAIL 1 1.45 0.98 1.65 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 206 86.05 88.24 85.12 2 HTML_MESSAGE 192 84.30 96.08 79.34 3 DCC_CHECK_NEGATIVE 184 77.33 80.39 76.03 4 XM_B_Unicode 158 63.95 60.78 65.29 5 RELAYCOUNTRY_US 153 64.24 66.67 63.22 6 BAYES_50 146 63.66 71.57 60.33 7 DKIM_SIGNED 138 51.74 39.22 57.02 8 XM_DK_Pass 133 50.00 38.24 54.96 9 DKIM_VALID 132 49.71 38.24 54.55 10 XM_B_SpammyWords 120 53.49 62.75 49.59 11 DKIM_VALID_AU 119 44.48 33.33 49.17 12 XM_B_Unicode3 103 43.31 45.10 42.56 13 MIME_HTML_ONLY 96 41.57 46.08 39.67 14 DKIM_VALID_EF 88 29.94 14.71 36.36 15 ALL_TRUSTED 85 31.69 23.53 35.12 16 HTML_FONT_LOW_CONTRAST 83 30.81 22.55 34.30 17 XMSubLong 82 31.40 25.49 33.88 18 XMListUnsubscribeExists 70 27.03 22.55 28.93 19 T_KAM_HTML_FONT_INVALID 65 23.55 15.69 26.86 20 DCC_CHECK 58 22.67 19.61 23.97 21 RCVD_IN_MSPIKE_H2 52 19.77 15.69 21.49 22 T_TooManySym_01 48 16.57 8.82 19.83 23 TM2_M_URI_OPT_OUT 48 15.99 6.86 19.83 24 T_TooManySym_02 47 15.41 5.88 19.42 25 MPART_ALT_DIFF 43 19.77 24.51 17.77 26 T_TM2_M_HEADER_IN_MSG 42 23.55 38.24 17.36 27 TR_XM_DK_Unsub 42 13.66 4.90 17.36 28 T_TooManySym_03 39 12.79 4.90 16.12 29 LOC_TINY_FONT_1 38 14.83 12.75 15.70 30 HTML_IMAGE_RATIO_08 38 12.50 4.90 15.70 31 BASE64_LENGTH_79_INF 35 11.63 4.90 14.46 32 TR_Symld_Words 34 11.63 5.88 14.05 33 BAYES_60 31 11.34 7.84 12.81 34 FVGT_m_MULTI_ODD 28 11.92 12.75 11.57 35 UNPARSEABLE_RELAY 27 9.59 5.88 11.16 36 FSL_BULK_SIG 24 9.30 7.84 9.92 37 XM_B_SpammyWords2 24 10.17 10.78 9.92 38 XMStrtUSub 24 9.01 6.86 9.92 39 BAYES_00 23 7.27 1.96 9.50 40 XM_H_PHPMailer 23 6.98 0.98 9.50 41 XM_SendGrid 23 8.14 4.90 9.50 42 XM_Multi_Part_URI 21 9.59 11.76 8.68 43 XM_DKIMWhitelistDomains 20 5.81 0.00 8.26 44 RCVD_IN_MSPIKE_WL 20 6.40 1.96 8.26 45 XM_Evil_Numbers_Gen 20 6.98 3.92 8.26 46 TR_XM_DK_Bayes1 19 6.10 1.96 7.85 47 TR_XM_DK_Bayes2 19 6.10 1.96 7.85 48 TR_XM_DK_SendGrid 19 6.10 1.96 7.85 49 TR_XM_DK_Bayes 19 6.10 1.96 7.85 50 RCVD_IN_MSPIKE_H3 18 5.52 0.98 7.44 51 BAYES_40 18 6.69 4.90 7.44 52 USER_IN_DEF_DKIM_WL 17 5.23 0.98 7.02 53 FROM_EXCESS_BASE64 17 5.81 2.94 7.02 54 SHORT_SHORTNER 17 5.23 0.98 7.02 55 XM_B_Unsub 15 7.27 9.80 6.20 56 XM_UncommonTLD01 15 15.99 39.22 6.20 57 XM_B_SpammyTLD 15 10.76 21.57 6.20 58 XM_CamelCaseFrm001 14 5.52 4.90 5.79 59 XM_Body_Dirty_Words 13 6.10 7.84 5.37 60 T_REMOTE_IMAGE 13 4.36 1.96 5.37 61 XM_H_Long_From01 12 5.52 6.86 4.96 62 TR_XM_BayesUnsub 12 6.40 9.80 4.96 63 MIME_HTML_MOSTLY 12 10.17 22.55 4.96 64 SCC_BODY_URI_ONLY 12 3.49 0.00 4.96 65 TooManyTo_001 11 4.07 2.94 4.55 66 MSGID_NOFQDN1 10 2.91 0.00 4.13 67 BOTNET_IPINHOSTNAME 10 4.36 4.90 4.13 68 INVALID_MSGID 10 2.91 0.00 4.13 69 MIME_QP_LONG_LINE 10 3.20 0.98 4.13 70 TO_MALFORMED 10 2.91 0.00 4.13 71 XMSubMetaSx_00 9 5.23 8.82 3.72 72 T_TooManySym_04 9 3.20 1.96 3.72 73 LOTS_OF_MONEY 9 14.53 40.20 3.72 74 BAYES_20 9 2.62 0.00 3.72 75 XMNumbers 8 2.62 0.98 3.31 76 HTML_IMAGE_RATIO_06 8 2.33 0.00 3.31 77 HTML_SHORT_LINK_IMG_1 8 7.56 17.65 3.31 78 HTML_IMAGE_ONLY_08 8 7.56 17.65 3.31 79 HTML_IMAGE_RATIO_02 7 2.91 2.94 2.89 80 HTML_IMAGE_ONLY_12 7 2.62 1.96 2.89 81 MSGID_FROM_MTA_HEADER 7 2.03 0.00 2.89 82 URI_HEX 7 7.27 17.65 2.89 83 UNICODE_OBFU_ASC 7 7.27 17.65 2.89 84 LotsOfNums_01 7 2.91 2.94 2.89 85 IN_ZIMBRA_NJ_WHITELIST 7 2.03 0.00 2.89 86 BAYES_99 6 4.36 8.82 2.48 87 TVD_SPACE_RATIO 6 1.74 0.00 2.48 88 TR_XM_PhishingBody 6 1.74 0.00 2.48 89 TM2_M_HAS_BSLASH_URI 6 2.03 0.98 2.48 90 HTML_MIME_NO_HTML_TAG 6 2.33 1.96 2.48 91 BAYES_999 6 3.20 4.90 2.48 92 XM_DK_Undo_02 6 6.69 16.67 2.48 93 DKIM_INVALID 6 2.03 0.98 2.48 94 PLING_QUERY 5 1.45 0.00 2.07 95 FROM_GOV_SPOOF 5 1.74 0.98 2.07 96 TR_XM_UnparsRelay 5 2.33 2.94 2.07 97 RCVD_IN_IADB_LISTED 5 1.74 0.98 2.07 98 USER_IN_WHITELIST 5 1.45 0.00 2.07 99 IN_HORDE_ADDRESS_BOOK 5 1.45 0.00 2.07 100 HTML_IMAGE_RATIO_04 5 2.91 4.90 2.07 101 RELAYCOUNTRY_META 5 4.94 11.76 2.07 102 XMBody_17 5 1.45 0.00 2.07 103 RCVD_IN_IADB_SENDERID 5 1.74 0.98 2.07 104 TooManyTo_002 5 1.74 0.98 2.07 105 SHORT_URI_2 5 1.74 0.98 2.07 106 USER_IN_WELCOMELIST 5 1.45 0.00 2.07 107 XMSexyCombo_05 5 3.78 7.84 2.07 108 RCVD_IN_IADB_SPF 5 1.74 0.98 2.07 109 BAYES_95 4 1.16 0.00 1.65 110 RCVD_IN_VALIDITY_SAFE 4 1.74 1.96 1.65 111 XM_B_SpammyWords3 4 2.62 4.90 1.65 112 TR_XM_SpammyWords4 4 11.92 36.27 1.65 113 XM_SPF_SoftFail 4 6.40 17.65 1.65 114 FVGT_m_MULTI_ODD_EMAIL 4 1.45 0.98 1.65 115 MAILING_LIST_MULTI 4 1.16 0.00 1.65 116 TR_XM_Base64_M1 3 0.87 0.00 1.24 117 XMGappySubj_01 3 0.87 0.00 1.24 118 BAYES_80 3 2.33 4.90 1.24 119 XM_B_Phish66 3 0.87 0.00 1.24 120 RCVD_IN_VALIDITY_CERTIFIED 3 1.45 1.96 1.24 121 RCVD_IN_IADB_VOUCHED 3 0.87 0.00 1.24 122 XM_UB50 3 1.74 2.94 1.24 123 XM_TLDProd2 3 0.87 0.00 1.24 124 SpammyFromTLD_01 3 0.87 0.00 1.24 125 T_XMDrugObfuBody_00 3 0.87 0.00 1.24 126 XM_B_Unsub2 3 0.87 0.00 1.24 127 UNTRUSTED_Relay 3 2.91 6.86 1.24 128 RCVD_IN_IADB_DK 3 1.16 0.98 1.24 129 HTML_IMAGE_ONLY_28 3 0.87 0.00 1.24 130 XMGenDplmaNmb 2 0.58 0.00 0.83 131 XM_H_Trusted_IP 2 0.58 0.00 0.83 132 XMHTML_After_End 2 0.87 0.98 0.83 133 FONT_INVIS_NORDNS 2 0.58 0.00 0.83 134 TR_XM_Base64_C 2 0.58 0.00 0.83 135 XMSolicitRefs_0 2 0.58 0.00 0.83 136 HTML_FONT_FACE_BAD 2 0.58 0.00 0.83 137 MIME_HTML_ONLY_MULTI 2 0.58 0.00 0.83 138 XM_PDF 2 0.58 0.00 0.83 139 XM_B_SEO 2 0.58 0.00 0.83 140 TooManyTo_003 2 0.87 0.98 0.83 141 XM_B_Investor 2 0.87 0.98 0.83 142 XMBSHREFv2 2 0.58 0.00 0.83 143 XMPhish30 2 0.58 0.00 0.83 144 XM_B_Phish_Phrases 2 1.16 1.96 0.83 145 XM_OfRef6 2 0.58 0.00 0.83 146 RCVD_IN_MSPIKE_H5 2 0.58 0.00 0.83 147 TR_XM_Base64_L1 2 1.45 2.94 0.83 148 BAYES_05 2 0.58 0.00 0.83 149 RELAYCOUNTRY_BG 2 0.58 0.00 0.83 150 LONG_JUNK_URI 2 0.58 0.00 0.83 151 TVD_RCVD_IP 2 0.58 0.00 0.83 152 XMSubPhish11 2 0.58 0.00 0.83 153 XMDiploma_00 2 0.58 0.00 0.83 154 XM_ZIP 2 0.58 0.00 0.83 155 BOTNET 2 3.20 8.82 0.83 156 T_XMDrugObfuBody_08 2 1.45 2.94 0.83 157 XMHTMLBadTable_001 2 0.58 0.00 0.83 158 TR_XM_SB_Phish 2 0.58 0.00 0.83 159 TR_BOTNET_NEGATE 2 0.58 0.00 0.83 160 TR_MetaPhish_Combo_01 1 0.58 0.98 0.41 161 KHOP_HELO_FCRDNS 1 0.29 0.00 0.41 162 HTML_IMAGE_ONLY_20 1 0.29 0.00 0.41 163 DC_PNG_UNO_LARGO 1 0.29 0.00 0.41 164 BUG6152_INVALID_DATE_TZ_ABSURD 1 0.29 0.00 0.41 165 XMOemUri 1 0.29 0.00 0.41 166 TR_XM_SpammyWords2 1 1.16 2.94 0.41 167 CTE_8BIT_MISMATCH 1 0.29 0.00 0.41 168 TR_DCC_Bayes_99 1 2.33 6.86 0.41 169 TR_XM_DKIM_Undo 1 3.20 9.80 0.41 170 SUBJ_ALL_CAPS 1 10.47 34.31 0.41 171 XMBody_29 1 0.29 0.00 0.41 172 BOGUS_MIME_VERSION 1 0.29 0.00 0.41 173 HDRS_MISSP 1 0.29 0.00 0.41 174 PDS_RDNS_DYNAMIC_FP 1 0.29 0.00 0.41 175 HTTPS_HTTP_MISMATCH 1 0.87 1.96 0.41 176 INVALID_DATE 1 0.29 0.00 0.41 177 LongTLD 1 0.58 0.98 0.41 178 DATE_IN_PAST_03_06 1 0.58 0.98 0.41 179 RELAYCOUNTRY_NL 1 0.87 1.96 0.41 180 TooManyTo_004 1 0.58 0.98 0.41 181 HK_RANDOM_FROM 1 0.29 0.00 0.41 182 XM_S_SubURI 1 0.29 0.00 0.41 183 T_DOC_ATTACH_NO_EXT 1 0.29 0.00 0.41 184 XM_Dr_From 1 0.29 0.00 0.41 185 TO_NO_BRKTS_HTML_ONLY 1 0.29 0.00 0.41 186 RCVD_IN_IADB_OPTIN 1 0.29 0.00 0.41 187 HK_RANDOM_ENVFROM 1 0.29 0.00 0.41 188 DKIM_ADSP_CUSTOM_MED 1 0.29 0.00 0.41 189 TR_Mismatch_TLD_02 1 0.58 0.98 0.41 190 TR_XM_SEO4 1 0.29 0.00 0.41 191 RELAYCOUNTRY_KH 1 0.29 0.00 0.41 192 XM_GoogleGroups 1 0.29 0.00 0.41 193 TooManyTo_005 1 0.58 0.98 0.41 194 TR_XM_SpammyRelay 1 2.03 5.88 0.41 195 HTML_SINGLET_MANY 1 0.29 0.00 0.41 196 TR_MSPIKEBAYES00 1 0.29 0.00 0.41 197 TO_EQ_FM_DOM_HTML_IMG 1 0.29 0.00 0.41 198 XMMoneyMeta_00 1 0.58 0.98 0.41 199 RELAYCOUNTRY_AU 1 1.16 2.94 0.41 200 HTML_ENTITY_ASCII_TINY 1 0.29 0.00 0.41 ----------------------------------------------------------------------