Email: 383 Autolearn: 0 AvgScore: 3.20 AvgScanTime: 2.06 sec Spam: 65 Autolearn: 0 AvgScore: 11.71 AvgScanTime: 2.28 sec Ham: 318 Autolearn: 0 AvgScore: 1.46 AvgScanTime: 2.02 sec Time Spent Running SA: 0.22 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.18 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 60 77.28 92.31 74.21 2 XM_DK_Pass 54 62.40 83.08 58.18 3 DKIM_VALID 54 61.88 83.08 57.55 4 DKIM_SIGNED 54 63.45 83.08 59.43 5 XM_B_Unicode 53 65.01 81.54 61.64 6 DCC_CHECK_NEGATIVE 51 82.25 78.46 83.02 7 T_SCC_BODY_TEXT_LINE 50 80.42 76.92 81.13 8 RELAYCOUNTRY_US 49 66.58 75.38 64.78 9 XMListUnsubscribeExists 41 42.56 63.08 38.36 10 HTML_FONT_LOW_CONTRAST 38 45.95 58.46 43.40 11 LOC_TINY_FONT_1 35 37.34 53.85 33.96 12 MIME_HTML_ONLY 35 34.73 53.85 30.82 13 DKIM_VALID_EF 35 44.91 53.85 43.08 14 DKIM_VALID_AU 31 34.99 47.69 32.39 15 T_TM2_M_HEADER_IN_MSG 31 35.25 47.69 32.70 16 RCVD_IN_MSPIKE_H2 29 31.33 44.62 28.62 17 XM_B_SpammyWords 27 31.59 41.54 29.56 18 TR_XM_DK_Unsub 25 30.55 38.46 28.93 19 XM_B_Unicode3 22 23.50 33.85 21.38 20 BAYES_60 22 12.79 33.85 8.49 21 BOTNET_IPINHOSTNAME 19 19.06 29.23 16.98 22 T_KAM_HTML_FONT_INVALID 18 13.05 27.69 10.06 23 T_XMHurry_00 18 20.10 27.69 18.55 24 TM2_M_URI_OPT_OUT 18 34.99 27.69 36.48 25 FVGT_m_MULTI_ODD 18 16.71 27.69 14.47 26 BAYES_80 15 5.48 23.08 1.89 27 XMSubLong 15 20.10 23.08 19.50 28 BAYES_50 15 56.14 23.08 62.89 29 MPART_ALT_DIFF 14 8.88 21.54 6.29 30 XM_Body_Dirty_Words 14 6.27 21.54 3.14 31 XM_DK_Undo_02 14 6.01 21.54 2.83 32 DCC_CHECK 14 17.75 21.54 16.98 33 XM_B_SpammyWords2 12 8.88 18.46 6.92 34 XM_Multi_Part_URI 11 15.40 16.92 15.09 35 RELAYCOUNTRY_META 11 5.22 16.92 2.83 36 T_TooManySym_01 11 11.23 16.92 10.06 37 BAYES_99 11 4.96 16.92 2.52 38 TR_XM_BayesUnsub 10 9.14 15.38 7.86 39 XM_B_Unsub 10 10.44 15.38 9.43 40 TR_XM_DKIM_Undo 10 3.66 15.38 1.26 41 TR_Symld_Words 10 7.83 15.38 6.29 42 XM_UncommonTLD01 9 4.44 13.85 2.52 43 MIME_HTML_MOSTLY 9 3.39 13.85 1.26 44 RCVD_IN_MSPIKE_WL 9 11.49 13.85 11.01 45 HTML_IMAGE_RATIO_06 8 5.74 12.31 4.40 46 LOTS_OF_MONEY 8 5.22 12.31 3.77 47 BAYES_999 8 3.66 12.31 1.89 48 TR_XM_SpammyWords4 7 2.61 10.77 0.94 49 UNPARSEABLE_RELAY 7 11.49 10.77 11.64 50 ALL_TRUSTED 7 28.20 10.77 31.76 51 T_TooManySym_02 7 8.88 10.77 8.49 52 BASE64_LENGTH_79_INF 7 5.22 10.77 4.09 53 T_TooManySym_03 7 6.27 10.77 5.35 54 TR_XM_SpammyRelay 6 2.61 9.23 1.26 55 XM_B_SpammyWords3 6 2.35 9.23 0.94 56 TM2_M_VERY_LONG_WORD 6 2.09 9.23 0.63 57 TR_XM_PhishingBody 6 2.09 9.23 0.63 58 TR_DCC_Bayes_99 6 1.83 9.23 0.31 59 TR_XM_UnparsRelay 6 3.39 9.23 2.20 60 HTML_IMAGE_RATIO_02 6 2.61 9.23 1.26 61 XMLngstWrd_00 5 1.57 7.69 0.31 62 XMLngstWrd_03 5 1.57 7.69 0.31 63 HTML_MIME_NO_HTML_TAG 5 2.61 7.69 1.57 64 MIME_HTML_ONLY_MULTI 5 2.35 7.69 1.26 65 XMBody_17 5 1.31 7.69 0.00 66 XMSubMetaSx_00 5 2.09 7.69 0.94 67 XM_SendGrid 5 5.74 7.69 5.35 68 XM_GoogleGroups 5 1.83 7.69 0.63 69 XM_OfRef6 5 1.31 7.69 0.00 70 XMLngstWrd_02 5 1.57 7.69 0.31 71 XMLngstWrd_01 5 1.57 7.69 0.31 72 XMLngstWrd_04 5 1.57 7.69 0.31 73 XMSexyCombo_05 5 1.57 7.69 0.31 74 HTML_TITLE_SUBJ_DIFF 5 1.57 7.69 0.31 75 UPPERCASE_75_100 5 1.57 7.69 0.31 76 SpammyFromTLD_02 4 1.31 6.15 0.31 77 XM_B_Phish_Phrases 4 2.35 6.15 1.57 78 XM_B_SpammyTLD 4 1.57 6.15 0.63 79 UNTRUSTED_Relay 4 3.66 6.15 3.14 80 TR_XM_DK_SendGrid 4 4.70 6.15 4.40 81 RCVD_IN_MSPIKE_H3 4 4.96 6.15 4.72 82 XM_DIRTYINTL 3 1.31 4.62 0.63 83 RCVD_IN_MSPIKE_H5 3 4.96 4.62 5.03 84 T_Symld_Words_02 3 0.78 4.62 0.00 85 HTML_IMAGE_RATIO_04 3 6.27 4.62 6.60 86 SpammyFromTLD_01 3 2.09 4.62 1.57 87 XM_B_Phish66 3 0.78 4.62 0.00 88 XMGppyBdWords 3 0.78 4.62 0.00 89 TR_XM_SpammyWords2 3 1.04 4.62 0.31 90 RELAYCOUNTRY_CA 3 0.78 4.62 0.00 91 TR_XM_NoHeaderRelay 3 1.31 4.62 0.63 92 T_XMDrugObfuBody_08 3 1.04 4.62 0.31 93 T_XMDrugObfuBody_14 3 0.78 4.62 0.00 94 UPPERCASE_50_75 2 0.52 3.08 0.00 95 RELAYCOUNTRY_GB 2 0.52 3.08 0.00 96 XM_UB80 2 0.52 3.08 0.00 97 XM_H_Long_From01 2 5.74 3.08 6.29 98 BOTNET 2 0.78 3.08 0.31 99 XMGappySubj_01 2 1.04 3.08 0.63 100 ANY_BOUNCE_MESSAGE 2 11.49 3.08 13.21 101 BOUNCE_MESSAGE 2 11.49 3.08 13.21 102 T_XMDrugObfuBody_00 2 0.52 3.08 0.00 103 XMBSHREFv2 2 0.78 3.08 0.31 104 EXCLAMACION_ES 2 1.04 3.08 0.63 105 XM_CamelCaseFrm001 2 2.35 3.08 2.20 106 T_XMDrugObfuBody_12 2 0.52 3.08 0.00 107 LotsOfNums_01 2 4.18 3.08 4.40 108 RCVD_IN_BL_SPAMCOP_NET 2 0.52 3.08 0.00 109 BAYES_95 2 0.78 3.08 0.31 110 MAILING_LIST_MULTI 2 0.78 3.08 0.31 111 LONG_JUNK_URI3 2 0.52 3.08 0.00 112 HTML_IMAGE_ONLY_28 2 1.83 3.08 1.57 113 URIBL_DBL_SPAM 2 0.52 3.08 0.00 114 XMPhish14 2 1.04 3.08 0.63 115 RCVD_IN_MSPIKE_H4 2 1.57 3.08 1.26 116 TooManyTo_001 2 2.87 3.08 2.83 117 TR_XM_RelayPhish 2 0.78 3.08 0.31 118 XM_Evil_Numbers_Gen 2 4.44 3.08 4.72 119 XMSexyCombo_01 2 0.52 3.08 0.00 120 XM_URI_RBL 1 0.26 1.54 0.00 121 XM_B_Unsub2 1 0.52 1.54 0.31 122 XM_Body_Dirty_Words_03 1 0.26 1.54 0.00 123 NOT_SPAM 1 0.26 1.54 0.00 124 URIBL_BLACK 1 0.26 1.54 0.00 125 URI_NOVOWEL 1 2.09 1.54 2.20 126 XMBody_78 1 0.26 1.54 0.00 127 SUBJ_DOLLARS 1 0.26 1.54 0.00 128 XMPhish08 1 0.26 1.54 0.00 129 XMSubMetaSxObfu_03 1 0.26 1.54 0.00 130 TR_XM_SB_Phish 1 0.78 1.54 0.63 131 XMSpoofStaff2 1 0.78 1.54 0.63 132 FILL_THIS_FORM_LONG 1 0.26 1.54 0.00 133 FSL_BULK_SIG 1 5.74 1.54 6.60 134 MIME_QP_LONG_LINE 1 7.05 1.54 8.18 135 URI_OPTOUT_3LD 1 0.26 1.54 0.00 136 TR_LOTS_OF_MONEY2 1 0.26 1.54 0.00 137 T_FILL_THIS_FORM_LOAN 1 0.26 1.54 0.00 138 XMBody_03 1 0.26 1.54 0.00 139 RELAYCOUNTRY_CH 1 0.26 1.54 0.00 140 LongTLD 1 0.52 1.54 0.31 141 XM_OfRef8 1 0.26 1.54 0.00 142 TR_XM_Undi_Recip2 1 0.26 1.54 0.00 143 XM_Body_Dirty_Words_02 1 0.26 1.54 0.00 144 UNDISC_MONEY 1 0.26 1.54 0.00 145 PDS_FRNOM_TODOM_NAKED_TO 1 0.26 1.54 0.00 146 XM_UB99 1 0.26 1.54 0.00 147 TR_XM_Undi_RecipCombo2 1 0.26 1.54 0.00 148 TR_Sbj_FN_Bdy 1 0.26 1.54 0.00 149 RELAYCOUNTRY_RU 1 0.26 1.54 0.00 150 TR_Mismatch_TLD_02 1 0.26 1.54 0.00 151 DC_PNG_UNO_LARGO 1 0.26 1.54 0.00 152 RELAYCOUNTRY_AU 1 0.78 1.54 0.63 153 XMHTML_After_End 1 0.52 1.54 0.31 154 XM_SPF_SoftFail 1 1.31 1.54 1.26 155 DRUGS_ERECTILE 1 0.26 1.54 0.00 156 PLING_QUERY 1 0.26 1.54 0.00 157 XM_UB50 1 2.09 1.54 2.20 158 TR_XM_Undi_Recip11 1 0.26 1.54 0.00 159 ADVANCE_FEE_2_NEW_FORM 1 0.26 1.54 0.00 160 XM_B_SexDrugs1 1 0.26 1.54 0.00 161 TR_XM_Undi_RecipCombo3 1 0.26 1.54 0.00 162 XM_OfRef7 1 0.26 1.54 0.00 163 TR_XM_Undi_Recip6 1 0.26 1.54 0.00 164 XM_H_Undi_Recip 1 0.26 1.54 0.00 165 TR_XM_Undi_Recip9 1 0.26 1.54 0.00 166 XMNumbers 1 4.44 1.54 5.03 167 PDS_FROM_NAME_TO_DOMAIN 1 0.26 1.54 0.00 168 TR_XM_SpoofStaff2 1 0.26 1.54 0.00 169 RELAYCOUNTRY_ZA 1 0.26 1.54 0.00 170 DATE_IN_PAST_03_06 1 0.26 1.54 0.00 171 TM2_M_A_HREF_HREF 1 0.26 1.54 0.00 172 TO_MALFORMED 1 1.31 1.54 1.26 173 DRUG_ED_SILD 1 0.26 1.54 0.00 174 FILL_THIS_FORM 1 0.52 1.54 0.31 175 XM_TLDProd2 1 0.52 1.54 0.31 176 T_TooManySym_04 1 1.83 1.54 1.89 177 XMBody_29 1 0.26 1.54 0.00 178 RELAYCOUNTRY_LT 1 0.26 1.54 0.00 179 TR_MetaPhish_Combo_01 1 0.52 1.54 0.31 180 PDS_OTHER_BAD_TLD 1 0.52 1.54 0.31 181 XM_HighProb1 1 0.26 1.54 0.00 182 RELAYCOUNTRY_EC 1 0.26 1.54 0.00 183 NORDNS_LOW_CONTRAST 1 0.26 1.54 0.00 184 AC_POST_EXTRAS 1 0.26 1.54 0.00 185 HTML_FONT_TINY_NORDNS 1 0.26 1.54 0.00 186 XM_B_SexDrugs2 1 0.26 1.54 0.00 187 TR_XM_SPAMCOP 1 0.26 1.54 0.00 188 TO_NO_BRKTS_HTML_IMG 1 0.26 1.54 0.00 189 FROM_EXCESS_BASE64 1 3.39 1.54 3.77 190 NORMAL_HTTP_TO_IP 1 0.26 1.54 0.00 191 BOTNET_NORDNS 1 0.26 1.54 0.00 192 XMBounce_01 1 0.26 1.54 0.00 193 XMMoneyMeta_00 1 0.26 1.54 0.00 194 FROM_NO_USER 1 0.26 1.54 0.00 195 XMSubPhish11 1 0.78 1.54 0.63 196 LOADSA_MONEY_COMBO 1 0.26 1.54 0.00 197 XM_ShortIntro_01 1 0.52 1.54 0.31 198 MIXED_CENTER_CASE 1 0.26 1.54 0.00 199 XFER_LOTSA_MONEY 1 0.26 1.54 0.00 200 RELAYCOUNTRY_SE 1 0.26 1.54 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 264 82.25 78.46 83.02 2 T_SCC_BODY_TEXT_LINE 258 80.42 76.92 81.13 3 HTML_MESSAGE 236 77.28 92.31 74.21 4 RELAYCOUNTRY_US 206 66.58 75.38 64.78 5 BAYES_50 200 56.14 23.08 62.89 6 XM_B_Unicode 196 65.01 81.54 61.64 7 DKIM_SIGNED 189 63.45 83.08 59.43 8 XM_DK_Pass 185 62.40 83.08 58.18 9 DKIM_VALID 183 61.88 83.08 57.55 10 HTML_FONT_LOW_CONTRAST 138 45.95 58.46 43.40 11 DKIM_VALID_EF 137 44.91 53.85 43.08 12 XMListUnsubscribeExists 122 42.56 63.08 38.36 13 TM2_M_URI_OPT_OUT 116 34.99 27.69 36.48 14 LOC_TINY_FONT_1 108 37.34 53.85 33.96 15 T_TM2_M_HEADER_IN_MSG 104 35.25 47.69 32.70 16 DKIM_VALID_AU 103 34.99 47.69 32.39 17 ALL_TRUSTED 101 28.20 10.77 31.76 18 MIME_HTML_ONLY 98 34.73 53.85 30.82 19 XM_B_SpammyWords 94 31.59 41.54 29.56 20 TR_XM_DK_Unsub 92 30.55 38.46 28.93 21 RCVD_IN_MSPIKE_H2 91 31.33 44.62 28.62 22 XM_B_Unicode3 68 23.50 33.85 21.38 23 XMSubLong 62 20.10 23.08 19.50 24 T_XMHurry_00 59 20.10 27.69 18.55 25 BOTNET_IPINHOSTNAME 54 19.06 29.23 16.98 26 DCC_CHECK 54 17.75 21.54 16.98 27 XM_Multi_Part_URI 48 15.40 16.92 15.09 28 FVGT_m_MULTI_ODD 46 16.71 27.69 14.47 29 BOUNCE_MESSAGE 42 11.49 3.08 13.21 30 ANY_BOUNCE_MESSAGE 42 11.49 3.08 13.21 31 UNPARSEABLE_RELAY 37 11.49 10.77 11.64 32 RCVD_IN_MSPIKE_WL 35 11.49 13.85 11.01 33 T_KAM_HTML_FONT_INVALID 32 13.05 27.69 10.06 34 T_TooManySym_01 32 11.23 16.92 10.06 35 XM_B_Unsub 30 10.44 15.38 9.43 36 T_TooManySym_02 27 8.88 10.77 8.49 37 BAYES_60 27 12.79 33.85 8.49 38 MIME_QP_LONG_LINE 26 7.05 1.54 8.18 39 SHORT_URI_2 26 6.79 0.00 8.18 40 TR_XM_BayesUnsub 25 9.14 15.38 7.86 41 BAYES_00 22 5.74 0.00 6.92 42 XM_B_SpammyWords2 22 8.88 18.46 6.92 43 HTML_IMAGE_RATIO_04 21 6.27 4.62 6.60 44 BAYES_05 21 5.48 0.00 6.60 45 FSL_BULK_SIG 21 5.74 1.54 6.60 46 BAYES_40 21 5.48 0.00 6.60 47 IN_ZIMBRA_NJ_WHITELIST 21 5.48 0.00 6.60 48 XM_H_Long_From01 20 5.74 3.08 6.29 49 MPART_ALT_DIFF 20 8.88 21.54 6.29 50 TR_Symld_Words 20 7.83 15.38 6.29 51 XM_H_PHPMailer 19 4.96 0.00 5.97 52 XMSubEmpty 18 4.70 0.00 5.66 53 XMSubNoVowel 18 4.70 0.00 5.66 54 XM_SendGrid 17 5.74 7.69 5.35 55 T_TooManySym_03 17 6.27 10.77 5.35 56 SHORT_SHORTNER 17 4.44 0.00 5.35 57 RCVD_IN_MSPIKE_H5 16 4.96 4.62 5.03 58 XMNumbers 16 4.44 1.54 5.03 59 T_REMOTE_IMAGE 15 3.92 0.00 4.72 60 RCVD_IN_MSPIKE_H3 15 4.96 6.15 4.72 61 SCC_BODY_URI_ONLY 15 3.92 0.00 4.72 62 XM_Evil_Numbers_Gen 15 4.44 3.08 4.72 63 XM_DKIMWhitelistDomains 15 3.92 0.00 4.72 64 HTML_IMAGE_RATIO_06 14 5.74 12.31 4.40 65 LotsOfNums_01 14 4.18 3.08 4.40 66 TR_XM_DK_SendGrid 14 4.70 6.15 4.40 67 TR_XM_DK_Bayes 13 3.39 0.00 4.09 68 BASE64_LENGTH_79_INF 13 5.22 10.77 4.09 69 XM_DK_Undo_01 13 3.66 1.54 4.09 70 TR_XM_DK_Bayes1 13 3.39 0.00 4.09 71 BAYES_20 12 3.13 0.00 3.77 72 LOTS_OF_MONEY 12 5.22 12.31 3.77 73 TR_XM_DK_Bayes2 12 3.13 0.00 3.77 74 FROM_EXCESS_BASE64 12 3.39 1.54 3.77 75 TR_XM_Base64_L1 12 3.13 0.00 3.77 76 XM_Body_Dirty_Words 10 6.27 21.54 3.14 77 UNTRUSTED_Relay 10 3.66 6.15 3.14 78 XMBrknScrpt_02 9 2.35 0.00 2.83 79 TooManyTo_001 9 2.87 3.08 2.83 80 RELAYCOUNTRY_META 9 5.22 16.92 2.83 81 XMSubMetaI_00 9 2.35 0.00 2.83 82 XM_DK_Undo_02 9 6.01 21.54 2.83 83 XM_B_DNDMA 8 2.09 0.00 2.52 84 XM_UncommonTLD01 8 4.44 13.85 2.52 85 BAYES_99 8 4.96 16.92 2.52 86 XM_CamelCaseFrm001 7 2.35 3.08 2.20 87 XM_UB50 7 2.09 1.54 2.20 88 TR_XM_UnparsRelay 7 3.39 9.23 2.20 89 USER_IN_DEF_DKIM_WL 7 1.83 0.00 2.20 90 KHOP_HELO_FCRDNS 7 1.83 0.00 2.20 91 TR_XM_SpammyWords5 7 1.83 0.00 2.20 92 URI_NOVOWEL 7 2.09 1.54 2.20 93 XMStrtUSub 7 1.83 0.00 2.20 94 TVD_SPACE_RATIO 6 1.57 0.00 1.89 95 XM_H_Trusted_IP 6 1.57 0.00 1.89 96 DKIM_INVALID 6 1.57 0.00 1.89 97 RCVD_IN_IADB_LISTED 6 1.57 0.00 1.89 98 BAYES_999 6 3.66 12.31 1.89 99 T_TooManySym_04 6 1.83 1.54 1.89 100 HTML_FONT_FACE_BAD 6 1.57 0.00 1.89 101 BAYES_80 6 5.48 23.08 1.89 102 RCVD_IN_IADB_SPF 5 1.31 0.00 1.57 103 SpammyFromTLD_01 5 2.09 4.62 1.57 104 XM_PDF 5 1.31 0.00 1.57 105 RCVD_IN_VALIDITY_SAFE 5 1.31 0.00 1.57 106 HTML_MIME_NO_HTML_TAG 5 2.61 7.69 1.57 107 SHORTENER_SHORT_SUBJ 5 1.31 0.00 1.57 108 XM_B_Phish_Phrases 5 2.35 6.15 1.57 109 TO_EQ_FM_DOM_HTML_IMG 5 1.31 0.00 1.57 110 FVGT_m_MULTI_ODD_EMAIL 5 1.31 0.00 1.57 111 SHORTENED_URL_HREF 5 1.31 0.00 1.57 112 RCVD_IN_IADB_SENDERID 5 1.31 0.00 1.57 113 TooManyTo_002 5 1.31 0.00 1.57 114 HTML_IMAGE_ONLY_28 5 1.83 3.08 1.57 115 XM_SPF_SoftFail 4 1.31 1.54 1.26 116 MIME_HTML_ONLY_MULTI 4 2.35 7.69 1.26 117 MIME_HTML_MOSTLY 4 3.39 13.85 1.26 118 TR_XM_SpammyRelay 4 2.61 9.23 1.26 119 HTML_IMAGE_RATIO_02 4 2.61 9.23 1.26 120 XM_ZIP 4 1.04 0.00 1.26 121 RCVD_IN_MSPIKE_H4 4 1.57 3.08 1.26 122 TR_XM_DKIM_Undo 4 3.66 15.38 1.26 123 TO_MALFORMED 4 1.31 1.54 1.26 124 RCVD_IN_IADB_VOUCHED 4 1.04 0.00 1.26 125 RCVD_IN_IADB_DK 4 1.04 0.00 1.26 126 XMSubMetaSx_00 3 2.09 7.69 0.94 127 XM_B_SpammyWords3 3 2.35 9.23 0.94 128 SHOPIFY_IMG_NOT_RCVD_SFY 3 0.78 0.00 0.94 129 XMBody_95 3 0.78 0.00 0.94 130 TR_XM_SpammyWords4 3 2.61 10.77 0.94 131 TR_MetaPhish_Combo_01b 3 0.78 0.00 0.94 132 INVALID_MSGID 3 0.78 0.00 0.94 133 RCVD_IN_VALIDITY_CERTIFIED 3 0.78 0.00 0.94 134 FROM_GOV_SPOOF 3 0.78 0.00 0.94 135 SUBJ_ALL_CAPS 3 0.78 0.00 0.94 136 TR_XM_PhishingBody 2 2.09 9.23 0.63 137 EXCLAMACION_ES 2 1.04 3.08 0.63 138 XM_GoogleGroups 2 1.83 7.69 0.63 139 RELAYCOUNTRY_DE 2 0.52 0.00 0.63 140 XMGappySubj_01 2 1.04 3.08 0.63 141 TM2_M_VERY_LONG_WORD 2 2.09 9.23 0.63 142 RELAYCOUNTRY_AU 2 0.78 1.54 0.63 143 XM_H_SpoofStaff4 2 0.52 0.00 0.63 144 XM_B_SpammyTLD 2 1.57 6.15 0.63 145 IN_HORDE_ADDRESS_BOOK 2 0.52 0.00 0.63 146 MSGID_FROM_MTA_HEADER 2 0.52 0.00 0.63 147 TR_XM_SB_Phish 2 0.78 1.54 0.63 148 XM_DIRTYINTL 2 1.31 4.62 0.63 149 HTML_IMAGE_RATIO_08 2 0.52 0.00 0.63 150 DATE_IN_PAST_12_24 2 0.52 0.00 0.63 151 XMSpoofStaff2 2 0.78 1.54 0.63 152 HDRS_MISSP 2 0.52 0.00 0.63 153 XMSubPhish11 2 0.78 1.54 0.63 154 RCVD_IN_RP_CERTIFIED 2 0.52 0.00 0.63 155 RCVD_IN_RP_SAFE 2 0.52 0.00 0.63 156 EM_ROLEX 2 0.52 0.00 0.63 157 TR_XM_SpoofStaff 2 0.78 1.54 0.63 158 RELAYCOUNTRY_NL 2 0.52 0.00 0.63 159 MSGID_NOFQDN1 2 0.52 0.00 0.63 160 NO_DNS_FOR_FROM 2 0.52 0.00 0.63 161 TR_XM_NoHeaderRelay 2 1.31 4.62 0.63 162 XMPhish14 2 1.04 3.08 0.63 163 XM_Body_Obfu01 2 0.52 0.00 0.63 164 XMCapTrack 2 0.52 0.00 0.63 165 TR_XM_PSC1 2 0.52 0.00 0.63 166 XM_ZohoDesk1 2 0.52 0.00 0.63 167 TR_XM_SpoofPhishAttach 2 0.52 0.00 0.63 168 RCVD_IN_IADB_OPTIN 2 0.52 0.00 0.63 169 TO_EQ_FM_DOM_HTML_ONLY 1 0.26 0.00 0.31 170 TVD_RCVD_IP 1 0.26 0.00 0.31 171 XMBSHREFv2 1 0.78 3.08 0.31 172 XMHTML_After_End 1 0.52 1.54 0.31 173 XM_UB60 1 0.26 0.00 0.31 174 XM_S_SubURI 1 0.26 0.00 0.31 175 RELAYCOUNTRY_AT 1 0.26 0.00 0.31 176 HTML_IMAGE_ONLY_12 1 0.26 0.00 0.31 177 RELAYCOUNTRY_RO 1 0.26 0.00 0.31 178 TR_DCC_Bayes_99 1 1.83 9.23 0.31 179 TR_XM_COVIDMETA4 1 0.26 0.00 0.31 180 XM_H_Long_From02 1 0.26 0.00 0.31 181 HTTPS_HTTP_MISMATCH 1 0.26 0.00 0.31 182 XMNoVowels 1 0.26 0.00 0.31 183 DKIM_ADSP_NXDOMAIN 1 0.26 0.00 0.31 184 HTML_IMAGE_ONLY_20 1 0.26 0.00 0.31 185 RCVD_IN_IADB_DOPTIN 1 0.26 0.00 0.31 186 HELO_NODOT 1 0.26 0.00 0.31 187 XM_Ancestry_Forge 1 0.26 0.00 0.31 188 LongTLD 1 0.52 1.54 0.31 189 BOTNET 1 0.78 3.08 0.31 190 SHORT_URI 1 0.26 0.00 0.31 191 URI_HEX 1 0.26 0.00 0.31 192 CHARSET_FARAWAY_HEADER 1 0.26 0.00 0.31 193 SpammyFromTLD_02 1 1.31 6.15 0.31 194 RELAYCOUNTRY_BE 1 0.26 0.00 0.31 195 SUBJ_YOUR_FAMILY 1 0.26 0.00 0.31 196 XMLngstWrd_00 1 1.57 7.69 0.31 197 TooManyTo_003 1 0.26 0.00 0.31 198 XM_B_Unsub2 1 0.52 1.54 0.31 199 RELAYCOUNTRY_IT 1 0.26 0.00 0.31 200 XM_Dr_From 1 0.26 0.00 0.31 ----------------------------------------------------------------------