Email: 394 Autolearn: 0 AvgScore: 5.05 AvgScanTime: 2.30 sec Spam: 103 Autolearn: 0 AvgScore: 14.76 AvgScanTime: 3.17 sec Ham: 291 Autolearn: 0 AvgScore: 1.61 AvgScanTime: 2.00 sec Time Spent Running SA: 0.25 hours Time Spent Processing Spam: 0.09 hours Time Spent Processing Ham: 0.16 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 97 73.10 94.17 65.64 2 T_SCC_BODY_TEXT_LINE 86 83.76 83.50 83.85 3 XM_B_Unicode 75 60.15 72.82 55.67 4 DCC_CHECK_NEGATIVE 74 80.46 71.84 83.51 5 XM_B_SpammyWords 59 30.46 57.28 20.96 6 BAYES_50 56 57.87 54.37 59.11 7 DKIM_SIGNED 48 41.12 46.60 39.18 8 XM_DK_Pass 47 37.56 45.63 34.71 9 DKIM_VALID 46 37.31 44.66 34.71 10 MIME_HTML_ONLY 42 32.99 40.78 30.24 11 RELAYCOUNTRY_US 42 39.09 40.78 38.49 12 XM_B_Unicode3 39 40.36 37.86 41.24 13 DKIM_VALID_AU 38 31.22 36.89 29.21 14 RELAYCOUNTRY_META 38 14.72 36.89 6.87 15 XMListUnsubscribeExists 35 25.63 33.98 22.68 16 LOC_TINY_FONT_1 35 17.26 33.98 11.34 17 XM_B_SpammyWords2 34 11.93 33.01 4.47 18 UNTRUSTED_Relay 32 10.66 31.07 3.44 19 XM_Body_Dirty_Words 32 12.18 31.07 5.50 20 DCC_CHECK 29 19.54 28.16 16.49 21 BASE64_LENGTH_79_INF 29 24.87 28.16 23.71 22 HTML_FONT_LOW_CONTRAST 26 34.77 25.24 38.14 23 DKIM_VALID_EF 26 23.35 25.24 22.68 24 ALL_TRUSTED 25 48.22 24.27 56.70 25 T_KAM_HTML_FONT_INVALID 24 28.43 23.30 30.24 26 RCVD_IN_PSBL 21 5.33 20.39 0.00 27 SHORT_URI_3 20 5.84 19.42 1.03 28 XMSubMetaSx_00 20 7.36 19.42 3.09 29 XMSubLong 20 28.17 19.42 31.27 30 TR_XM_DK_Unsub 19 14.21 18.45 12.71 31 RCVD_IN_MSPIKE_H2 19 13.45 18.45 11.68 32 RCVD_IN_VALIDITY_RPBL 18 4.57 17.48 0.00 33 XM_UB50 18 5.84 17.48 1.72 34 XM_Multi_Part_URI 18 15.48 17.48 14.78 35 XM_DK_Undo_02 17 5.84 16.50 2.06 36 BAYES_60 16 13.45 15.53 12.71 37 FVGT_m_MULTI_ODD 16 13.20 15.53 12.37 38 TR_XM_SpammyRelay 16 5.33 15.53 1.72 39 XM_B_SpammyTLD 16 4.82 15.53 1.03 40 RCVD_IN_MSPIKE_BL 15 3.81 14.56 0.00 41 TR_XM_DKIM_Undo 14 4.06 13.59 0.69 42 XMSexyCombo_05 14 5.08 13.59 2.06 43 BOTNET 13 3.30 12.62 0.00 44 UNPARSEABLE_RELAY 13 10.41 12.62 9.62 45 T_TM2_M_HEADER_IN_MSG 13 12.94 12.62 13.06 46 BAYES_99 13 5.33 12.62 2.75 47 TR_XM_MSPIKECOMBO 13 3.30 12.62 0.00 48 XMSexyCombo_01 13 3.81 12.62 0.69 49 MPART_ALT_DIFF 12 21.07 11.65 24.40 50 MISSING_HEADERS 12 3.55 11.65 0.69 51 FSL_BULK_SIG 12 8.88 11.65 7.90 52 REPLYTO_WITHOUT_TO_CC 12 3.05 11.65 0.00 53 SHORT_URI_4 11 2.79 10.68 0.00 54 TR_XM_Undi_Recip15 11 2.79 10.68 0.00 55 MIME_BASE64_TEXT 11 2.79 10.68 0.00 56 RCVD_IN_BL_SPAMCOP_NET 10 2.79 9.71 0.34 57 XMNumbers 10 5.84 9.71 4.47 58 URI_WP_HACKED 10 2.54 9.71 0.00 59 XM_DIRTYINTL 10 3.30 9.71 1.03 60 TR_Symld_Words 10 17.01 9.71 19.59 61 XM_UncommonTLD01 10 6.09 9.71 4.81 62 BAYES_80 9 5.33 8.74 4.12 63 XM_SendGrid 9 6.35 8.74 5.50 64 T_TooManySym_02 9 20.30 8.74 24.40 65 XM_SPF_SoftFail 9 3.05 8.74 1.03 66 SHORT_URI_2 9 4.57 8.74 3.09 67 T_TooManySym_01 9 21.32 8.74 25.77 68 XM_B_SpammyWords3 8 3.05 7.77 1.37 69 LotsOfNums_01 8 4.06 7.77 2.75 70 T_TooManySym_03 8 17.51 7.77 20.96 71 XM_UB60 8 2.28 7.77 0.34 72 HTML_IMAGE_RATIO_04 8 9.64 7.77 10.31 73 LOTS_OF_MONEY 8 3.81 7.77 2.41 74 TR_XM_BayesUnsub 8 2.79 7.77 1.03 75 XM_B_Unsub 8 3.05 7.77 1.37 76 RCVD_IN_MSPIKE_L4 8 2.03 7.77 0.00 77 TR_Mismatch_TLD_01 7 1.78 6.80 0.00 78 BOTNET_IPINHOSTNAME 7 3.81 6.80 2.75 79 SpammyFromTLD_01 7 2.54 6.80 1.03 80 ANY_BOUNCE_MESSAGE 7 18.27 6.80 22.34 81 BOUNCE_MESSAGE 7 18.27 6.80 22.34 82 XM_B_Phish_Phrases 6 2.03 5.83 0.69 83 MIME_HTML_MOSTLY 6 4.82 5.83 4.47 84 HTML_IMAGE_RATIO_06 6 8.63 5.83 9.62 85 XM_H_WindowsLiveMail 6 1.52 5.83 0.00 86 TR_XM_UnparsRelay 6 2.03 5.83 0.69 87 XM_Evil_Numbers_Gen 6 4.06 5.83 3.44 88 TooManyTo_001 6 4.31 5.83 3.78 89 BOTNET_NORDNS 6 1.52 5.83 0.00 90 TR_XM_SpammyWords4 6 2.03 5.83 0.69 91 TR_XM_DK_SendGrid 6 5.08 5.83 4.81 92 RCVD_IN_MSPIKE_WL 6 8.38 5.83 9.28 93 TR_XM_Base64_M1 5 1.52 4.85 0.34 94 T_TooManySym_04 5 7.61 4.85 8.59 95 KHOP_HELO_FCRDNS 5 1.52 4.85 0.34 96 SpammyFromTLD_02 5 1.52 4.85 0.34 97 RELAYCOUNTRY_AT 5 1.27 4.85 0.00 98 BAYES_95 5 3.81 4.85 3.44 99 BAYES_999 5 2.28 4.85 1.37 100 DATE_IN_PAST_03_06 5 1.27 4.85 0.00 101 MPART_ALT_DIFF_COUNT 5 1.27 4.85 0.00 102 TR_XM_RelayPhish 5 1.27 4.85 0.00 103 LONG_JUNK_URI2 5 1.27 4.85 0.00 104 XM_H_Undi_Recip 4 1.02 3.88 0.00 105 TR_XM_MaxWHORU 4 1.02 3.88 0.00 106 RELAYCOUNTRY_NL 4 1.27 3.88 0.34 107 HTML_IMAGE_RATIO_08 4 6.09 3.88 6.87 108 XM_B_Investor 4 2.79 3.88 2.41 109 LONG_JUNK_URI3 4 1.02 3.88 0.00 110 TM2_M_URI_OPT_OUT 4 16.50 3.88 20.96 111 XMSexyCombo_04 4 1.27 3.88 0.34 112 TR_XM_SPAMCOP 4 1.27 3.88 0.34 113 XM_CamelCaseFrm001 4 2.79 3.88 2.41 114 NO_DNS_FOR_FROM 4 1.02 3.88 0.00 115 TR_XM_InvalidRelay 4 1.02 3.88 0.00 116 TR_DCC_Bayes_99 3 1.02 2.91 0.34 117 RCVD_IN_MSPIKE_H3 3 4.31 2.91 4.81 118 FSL_HELO_NON_FQDN_1 3 0.76 2.91 0.00 119 DKIM_ADSP_NXDOMAIN 3 0.76 2.91 0.00 120 TR_Mismatch_TLD_02 3 0.76 2.91 0.00 121 RELAYCOUNTRY_ZA 3 0.76 2.91 0.00 122 URI_OPTOUT_3LD 3 0.76 2.91 0.00 123 URIBL_DBL_ABUSE_SPAM 3 0.76 2.91 0.00 124 URI_NOVOWEL 3 1.02 2.91 0.34 125 TR_XM_Undi_Recip11 3 0.76 2.91 0.00 126 RCVD_IN_MSPIKE_L5 3 0.76 2.91 0.00 127 XM_B_Phish66 3 0.76 2.91 0.00 128 RELAYCOUNTRY_CN 3 1.27 2.91 0.69 129 TR_XM_PhishingBody2 3 0.76 2.91 0.00 130 XMLngstWrd_03 3 0.76 2.91 0.00 131 XMLngstWrd_02 3 0.76 2.91 0.00 132 TR_XM_Undi_Recip5 3 0.76 2.91 0.00 133 XMLngstWrd_00 3 0.76 2.91 0.00 134 HELO_NODOT 3 0.76 2.91 0.00 135 XMBody_17 3 0.76 2.91 0.00 136 RELAYCOUNTRY_GB 3 1.52 2.91 1.03 137 TR_XM_SpammyWords5 3 0.76 2.91 0.00 138 TR_LOTS_OF_MONEY3 3 0.76 2.91 0.00 139 XMSubMetaSx_01 3 0.76 2.91 0.00 140 XMBounce_01 3 0.76 2.91 0.00 141 TR_XM_PhishingBody 3 1.02 2.91 0.34 142 XMLngstWrd_01 3 0.76 2.91 0.00 143 XMSexyCombo_02 3 0.76 2.91 0.00 144 TR_XM_SpammyWords2 3 1.02 2.91 0.34 145 TR_XM_Base64_M2 3 0.76 2.91 0.00 146 XMSubMetaSSx_00 3 0.76 2.91 0.00 147 HTTPS_HTTP_MISMATCH 3 1.02 2.91 0.34 148 TR_XM_SpammyWords3 3 0.76 2.91 0.00 149 HELO_LOCALHOST 3 0.76 2.91 0.00 150 RELAYCOUNTRY_IN 3 0.76 2.91 0.00 151 BAYES_40 3 1.78 2.91 1.37 152 TR_Caps_n_Bayes_80 2 0.51 1.94 0.00 153 RCVD_IN_MSPIKE_H4 2 1.27 1.94 1.03 154 XMHTML_After_End 2 0.76 1.94 0.34 155 XPRIO 2 0.51 1.94 0.00 156 RCVD_IN_MSPIKE_ZBI 2 0.51 1.94 0.00 157 XMSubPhish11 2 2.79 1.94 3.09 158 XM_UB99 2 0.51 1.94 0.00 159 DATE_IN_FUTURE_06_12 2 0.51 1.94 0.00 160 RELAYCOUNTRY_IS 2 0.51 1.94 0.00 161 FROM_MISSP_REPLYTO 2 0.51 1.94 0.00 162 HTML_FONT_SIZE_HUGE 2 0.76 1.94 0.34 163 TR_Sbj_FN_Bdy 2 0.51 1.94 0.00 164 XMReplyNow 2 0.51 1.94 0.00 165 XM_H_Long_From02 2 0.51 1.94 0.00 166 TR_XM_Undi_RecipCombo2 2 0.51 1.94 0.00 167 MIME_HEADER_CTYPE_ONLY 2 0.51 1.94 0.00 168 PLING_QUERY 2 2.28 1.94 2.41 169 SUBJ_ALL_CAPS 2 0.76 1.94 0.34 170 DKIM_INVALID 2 3.81 1.94 4.47 171 XM_Body_Dirty_Words_01 2 0.76 1.94 0.34 172 XMSubNoVowel 2 3.05 1.94 3.44 173 XMWhlSbjSex 2 0.51 1.94 0.00 174 TR_XM_Undi_Recip4 2 0.51 1.94 0.00 175 RELAYCOUNTRY_DE 2 1.02 1.94 0.69 176 UNDISC_MONEY 2 0.51 1.94 0.00 177 XMSubLongNoVowel 2 0.51 1.94 0.00 178 URG_BIZ 2 0.51 1.94 0.00 179 RELAYCOUNTRY_RU 2 0.51 1.94 0.00 180 HTML_MIME_NO_HTML_TAG 2 2.03 1.94 2.06 181 TR_XM_SB_Phish 2 2.79 1.94 3.09 182 XM_ShortIntro_01 2 1.02 1.94 0.69 183 XM_B_SpammyTLD2 2 0.51 1.94 0.00 184 MY_SERVERS_FOUND 2 2.03 1.94 2.06 185 RELAYCOUNTRY_BG 2 1.02 1.94 0.69 186 FORGED_MUA_OUTLOOK 2 0.51 1.94 0.00 187 RELAYCOUNTRY_PL 2 0.51 1.94 0.00 188 XM_Attn_01 2 0.51 1.94 0.00 189 RCVD_IN_MSPIKE_L3 2 0.51 1.94 0.00 190 MONEY_FRAUD_5 1 0.25 0.97 0.00 191 RELAYCOUNTRY_IE 1 0.25 0.97 0.00 192 TooManyTo_004 1 0.25 0.97 0.00 193 DATE_IN_FUTURE_03_06 1 0.25 0.97 0.00 194 NUMERIC_HTTP_ADDR 1 0.25 0.97 0.00 195 ADVANCE_FEE_3_NEW_MONEY 1 0.25 0.97 0.00 196 FSL_NEW_HELO_USER 1 0.25 0.97 0.00 197 ADVANCE_FEE_2_NEW_MONEY 1 0.25 0.97 0.00 198 TR_XM_COVIDMETA3 1 0.25 0.97 0.00 199 RELAYCOUNTRY_HU 1 0.25 0.97 0.00 200 TR_XM_Undi_Recip14 1 0.25 0.97 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 244 83.76 83.50 83.85 2 DCC_CHECK_NEGATIVE 243 80.46 71.84 83.51 3 HTML_MESSAGE 191 73.10 94.17 65.64 4 BAYES_50 172 57.87 54.37 59.11 5 ALL_TRUSTED 165 48.22 24.27 56.70 6 XM_B_Unicode 162 60.15 72.82 55.67 7 XM_B_Unicode3 120 40.36 37.86 41.24 8 DKIM_SIGNED 114 41.12 46.60 39.18 9 RELAYCOUNTRY_US 112 39.09 40.78 38.49 10 HTML_FONT_LOW_CONTRAST 111 34.77 25.24 38.14 11 DKIM_VALID 101 37.31 44.66 34.71 12 XM_DK_Pass 101 37.56 45.63 34.71 13 XMSubLong 91 28.17 19.42 31.27 14 T_KAM_HTML_FONT_INVALID 88 28.43 23.30 30.24 15 MIME_HTML_ONLY 88 32.99 40.78 30.24 16 DKIM_VALID_AU 85 31.22 36.89 29.21 17 T_TooManySym_01 75 21.32 8.74 25.77 18 T_TooManySym_02 71 20.30 8.74 24.40 19 MPART_ALT_DIFF 71 21.07 11.65 24.40 20 BASE64_LENGTH_79_INF 69 24.87 28.16 23.71 21 XMListUnsubscribeExists 66 25.63 33.98 22.68 22 DKIM_VALID_EF 66 23.35 25.24 22.68 23 ANY_BOUNCE_MESSAGE 65 18.27 6.80 22.34 24 BOUNCE_MESSAGE 65 18.27 6.80 22.34 25 T_TooManySym_03 61 17.51 7.77 20.96 26 XM_B_SpammyWords 61 30.46 57.28 20.96 27 TM2_M_URI_OPT_OUT 61 16.50 3.88 20.96 28 TR_Symld_Words 57 17.01 9.71 19.59 29 DCC_CHECK 48 19.54 28.16 16.49 30 XM_Multi_Part_URI 43 15.48 17.48 14.78 31 T_TM2_M_HEADER_IN_MSG 38 12.94 12.62 13.06 32 BAYES_60 37 13.45 15.53 12.71 33 TR_XM_DK_Unsub 37 14.21 18.45 12.71 34 FVGT_m_MULTI_ODD 36 13.20 15.53 12.37 35 RCVD_IN_MSPIKE_H2 34 13.45 18.45 11.68 36 LOC_TINY_FONT_1 33 17.26 33.98 11.34 37 HTML_IMAGE_RATIO_04 30 9.64 7.77 10.31 38 HTML_IMAGE_RATIO_06 28 8.63 5.83 9.62 39 UNPARSEABLE_RELAY 28 10.41 12.62 9.62 40 RCVD_IN_MSPIKE_WL 27 8.38 5.83 9.28 41 BAYES_05 26 6.60 0.00 8.93 42 T_TooManySym_04 25 7.61 4.85 8.59 43 FSL_BULK_SIG 23 8.88 11.65 7.90 44 HTML_IMAGE_RATIO_08 20 6.09 3.88 6.87 45 RELAYCOUNTRY_META 20 14.72 36.89 6.87 46 TVD_SPACE_RATIO 18 4.57 0.00 6.19 47 XM_SendGrid 16 6.35 8.74 5.50 48 XM_Body_Dirty_Words 16 12.18 31.07 5.50 49 RCVD_IN_MSPIKE_H3 14 4.31 2.91 4.81 50 XM_UncommonTLD01 14 6.09 9.71 4.81 51 TR_XM_DK_SendGrid 14 5.08 5.83 4.81 52 MIME_HTML_MOSTLY 13 4.82 5.83 4.47 53 SCC_BODY_URI_ONLY 13 3.55 0.97 4.47 54 T_REMOTE_IMAGE 13 3.30 0.00 4.47 55 XMNumbers 13 5.84 9.71 4.47 56 DKIM_INVALID 13 3.81 1.94 4.47 57 BAYES_00 13 3.30 0.00 4.47 58 XM_B_SpammyWords2 13 11.93 33.01 4.47 59 BAYES_80 12 5.33 8.74 4.12 60 XM_DKIMWhitelistDomains 12 3.05 0.00 4.12 61 XM_H_PHPMailer 11 3.05 0.97 3.78 62 TooManyTo_001 11 4.31 5.83 3.78 63 FORGED_HOTMAIL_RCVD2 10 2.54 0.00 3.44 64 XM_Evil_Numbers_Gen 10 4.06 5.83 3.44 65 RCVD_IN_MSPIKE_H5 10 2.79 0.97 3.44 66 BAYES_95 10 3.81 4.85 3.44 67 UNTRUSTED_Relay 10 10.66 31.07 3.44 68 XMSubEmpty 10 2.54 0.00 3.44 69 XMSubNoVowel 10 3.05 1.94 3.44 70 TR_XM_DK_Bayes 9 2.28 0.00 3.09 71 XMSubPhish11 9 2.79 1.94 3.09 72 TR_XM_SB_Phish 9 2.79 1.94 3.09 73 TR_XM_DK_Bayes1 9 2.28 0.00 3.09 74 MIME_QP_LONG_LINE 9 2.54 0.97 3.09 75 BAYES_20 9 2.54 0.97 3.09 76 XM_H_Long_From01 9 2.54 0.97 3.09 77 XMSubMetaSx_00 9 7.36 19.42 3.09 78 SHORT_URI_2 9 4.57 8.74 3.09 79 TO_MALFORMED 8 2.03 0.00 2.75 80 TR_XM_DK_Bayes2 8 2.03 0.00 2.75 81 SHORT_SHORTNER 8 2.03 0.00 2.75 82 BOTNET_IPINHOSTNAME 8 3.81 6.80 2.75 83 LotsOfNums_01 8 4.06 7.77 2.75 84 IN_ZIMBRA_NJ_WHITELIST 8 2.03 0.00 2.75 85 BAYES_99 8 5.33 12.62 2.75 86 TooManyTo_002 7 2.03 0.97 2.41 87 PLING_QUERY 7 2.28 1.94 2.41 88 XM_CamelCaseFrm001 7 2.79 3.88 2.41 89 LOTS_OF_MONEY 7 3.81 7.77 2.41 90 USER_IN_DEF_DKIM_WL 7 1.78 0.00 2.41 91 XM_B_Investor 7 2.79 3.88 2.41 92 HTML_IMAGE_RATIO_02 6 1.78 0.97 2.06 93 MSGID_NOFQDN1 6 1.52 0.00 2.06 94 FVGT_m_MULTI_ODD_EMAIL 6 1.52 0.00 2.06 95 HTML_IMAGE_ONLY_28 6 1.52 0.00 2.06 96 RCVD_IN_VALIDITY_SAFE 6 1.78 0.97 2.06 97 HTML_MIME_NO_HTML_TAG 6 2.03 1.94 2.06 98 XMNoVowels 6 1.52 0.00 2.06 99 XM_PDF 6 1.52 0.00 2.06 100 MY_SERVERS_FOUND 6 2.03 1.94 2.06 101 XM_DK_Undo_02 6 5.84 16.50 2.06 102 INVALID_MSGID 6 1.78 0.97 2.06 103 XMSexyCombo_05 6 5.08 13.59 2.06 104 MAILING_LIST_MULTI 5 1.27 0.00 1.72 105 SHOPIFY_IMG_NOT_RCVD_SFY 5 1.27 0.00 1.72 106 TR_XM_SpammyRelay 5 5.33 15.53 1.72 107 XM_UB50 5 5.84 17.48 1.72 108 XMStrtUSub 5 1.52 0.97 1.72 109 TVD_RCVD_IP 4 1.27 0.97 1.37 110 XM_B_SpammyWords3 4 3.05 7.77 1.37 111 XM_B_Unsub 4 3.05 7.77 1.37 112 BAYES_40 4 1.78 2.91 1.37 113 BAYES_999 4 2.28 4.85 1.37 114 XM_GoogleGroups 3 0.76 0.00 1.03 115 RELAYCOUNTRY_GB 3 1.52 2.91 1.03 116 XM_SPF_SoftFail 3 3.05 8.74 1.03 117 SpammyFromTLD_01 3 2.54 6.80 1.03 118 IN_HORDE_ADDRESS_BOOK 3 0.76 0.00 1.03 119 RCVD_IN_MSPIKE_H4 3 1.27 1.94 1.03 120 T_OBFU_PDF_ATTACH 3 0.76 0.00 1.03 121 RELAYCOUNTRY_CH 3 0.76 0.00 1.03 122 XM_B_SpammyTLD 3 4.82 15.53 1.03 123 RCVD_IN_VALIDITY_CERTIFIED 3 1.02 0.97 1.03 124 HK_RANDOM_ENVFROM 3 0.76 0.00 1.03 125 SHORT_URI_3 3 5.84 19.42 1.03 126 XM_DIRTYINTL 3 3.30 9.71 1.03 127 TR_XM_BayesUnsub 3 2.79 7.77 1.03 128 RELAYCOUNTRY_CA 2 0.51 0.00 0.69 129 XMGappySubj_01 2 0.51 0.00 0.69 130 XMCapTrack 2 0.51 0.00 0.69 131 TR_XM_UnparsRelay 2 2.03 5.83 0.69 132 XM_Ancestry_Forge 2 0.51 0.00 0.69 133 LONG_JUNK_URI 2 0.76 0.97 0.69 134 XMSpoofStaff2 2 0.51 0.00 0.69 135 XM_ZIP 2 0.51 0.00 0.69 136 HK_RANDOM_FROM 2 0.51 0.00 0.69 137 HTML_NONELEMENT_30_40 2 0.51 0.00 0.69 138 XM_B_Phish_Phrases 2 2.03 5.83 0.69 139 TR_XM_PSC1 2 0.51 0.00 0.69 140 MIME_CHARSET_FARAWAY 2 0.51 0.00 0.69 141 TR_XM_SpoofStaff 2 0.51 0.00 0.69 142 RELAYCOUNTRY_CN 2 1.27 2.91 0.69 143 TR_XM_DKIM_Undo 2 4.06 13.59 0.69 144 RCVD_IN_RP_SAFE 2 0.51 0.00 0.69 145 XM_H_SpoofStaff4 2 0.51 0.00 0.69 146 XMBody_95 2 0.76 0.97 0.69 147 MISSING_HEADERS 2 3.55 11.65 0.69 148 XMBSHREFv2 2 0.51 0.00 0.69 149 T_XMDrugObfuBody_08 2 0.51 0.00 0.69 150 XMSexyCombo_01 2 3.81 12.62 0.69 151 XM_ZohoDesk1 2 0.51 0.00 0.69 152 RELAYCOUNTRY_BG 2 1.02 1.94 0.69 153 XM_ShortIntro_01 2 1.02 1.94 0.69 154 RELAYCOUNTRY_AU 2 0.76 0.97 0.69 155 XMSubMetaSxObfu_02 2 0.51 0.00 0.69 156 CHARSET_FARAWAY_HEADER 2 0.51 0.00 0.69 157 XM_Body_Obfu01 2 0.51 0.00 0.69 158 RELAYCOUNTRY_DE 2 1.02 1.94 0.69 159 TR_XM_SpoofPhishAttach 2 0.51 0.00 0.69 160 TR_XM_SpammyWords4 2 2.03 5.83 0.69 161 FROM_EXCESS_BASE64 2 0.51 0.00 0.69 162 GMD_PDF_HORIZ 2 0.51 0.00 0.69 163 RELAYCOUNTRY_FR 2 0.51 0.00 0.69 164 HTML_FONT_SIZE_HUGE 1 0.76 1.94 0.34 165 XMDiploma_00 1 0.25 0.00 0.34 166 XMStockSpam_06 1 0.51 0.97 0.34 167 PDS_RDNS_DYNAMIC_FP 1 0.51 0.97 0.34 168 XM_OfRef7 1 0.25 0.00 0.34 169 XMBody_78 1 0.51 0.97 0.34 170 XM_UB60 1 2.28 7.77 0.34 171 KHOP_HELO_FCRDNS 1 1.52 4.85 0.34 172 RELAYCOUNTRY_SE 1 0.25 0.00 0.34 173 T_TVD_FUZZY_SECTOR 1 0.25 0.00 0.34 174 RELAYCOUNTRY_NL 1 1.27 3.88 0.34 175 DRUGS_MUSCLE 1 0.25 0.00 0.34 176 USER_IN_WHITELIST 1 0.25 0.00 0.34 177 XM_Dr_From 1 0.25 0.00 0.34 178 FORGED_GMAIL_RCVD 1 0.25 0.00 0.34 179 T_XMDrugObfuBody_00 1 0.51 0.97 0.34 180 RCVD_IN_IADB_DK 1 0.25 0.00 0.34 181 T_TooManySym_05 1 0.25 0.00 0.34 182 XM_OfRef6 1 0.25 0.00 0.34 183 RDNS_DYNAMIC 1 0.51 0.97 0.34 184 XM_B_COPY_HTML 1 0.25 0.00 0.34 185 MSGID_FROM_MTA_HEADER 1 0.25 0.00 0.34 186 XMHTML_After_End 1 0.76 1.94 0.34 187 XMBrknScrpt_02 1 0.25 0.00 0.34 188 TR_DCC_Bayes_99 1 1.02 2.91 0.34 189 DKIM_ADSP_CUSTOM_MED 1 0.25 0.00 0.34 190 HTML_TAG_BALANCE_CENTER 1 0.25 0.00 0.34 191 TR_XM_Base64_M1 1 1.52 4.85 0.34 192 HDRS_MISSP 1 0.25 0.00 0.34 193 RCVD_IN_BL_SPAMCOP_NET 1 2.79 9.71 0.34 194 TR_XM_NoHeaderRelay 1 0.51 0.97 0.34 195 XM_ProductURIs 1 0.25 0.00 0.34 196 XM_S_SubURI 1 0.25 0.00 0.34 197 URI_NOVOWEL 1 1.02 2.91 0.34 198 RCVD_IN_IADB_SPF 1 0.25 0.00 0.34 199 RCVD_IN_IADB_LISTED 1 0.25 0.00 0.34 200 GMD_PDF_SQUARE 1 0.25 0.00 0.34 ----------------------------------------------------------------------