Email: 236 Autolearn: 0 AvgScore: 2.59 AvgScanTime: 4.08 sec Spam: 46 Autolearn: 0 AvgScore: 14.39 AvgScanTime: 4.53 sec Ham: 190 Autolearn: 0 AvgScore: -0.26 AvgScanTime: 3.97 sec Time Spent Running SA: 0.27 hours Time Spent Processing Spam: 0.06 hours Time Spent Processing Ham: 0.21 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 42 85.17 91.30 83.68 2 HTML_MESSAGE 42 69.07 91.30 63.68 3 DKIM_SIGNED 37 66.53 80.43 63.16 4 XM_B_Unicode 36 54.66 78.26 48.95 5 DKIM_VALID 36 63.56 78.26 60.00 6 XM_DK_Pass 36 63.98 78.26 60.53 7 RELAYCOUNTRY_US 33 63.14 71.74 61.05 8 DKIM_VALID_AU 26 50.00 56.52 48.42 9 XMListUnsubscribeExists 26 35.59 56.52 30.53 10 DCC_CHECK 25 28.39 54.35 22.11 11 XM_B_SpammyWords 24 35.17 52.17 31.05 12 DCC_CHECK_NEGATIVE 21 71.61 45.65 77.89 13 LOC_TINY_FONT_1 20 22.88 43.48 17.89 14 BAYES_50 19 52.12 41.30 54.74 15 XM_DK_Undo_02 18 8.90 39.13 1.58 16 DKIM_VALID_EF 16 34.75 34.78 34.74 17 XM_B_Unicode3 16 29.24 34.78 27.89 18 HTML_FONT_LOW_CONTRAST 15 21.61 32.61 18.95 19 RELAYCOUNTRY_META 15 13.56 32.61 8.95 20 XM_Multi_Part_URI 14 18.64 30.43 15.79 21 T_KAM_HTML_FONT_INVALID 14 16.95 30.43 13.68 22 XM_B_SpammyWords2 14 15.68 30.43 12.11 23 BAYES_99 14 7.20 30.43 1.58 24 RCVD_IN_MSPIKE_H2 13 16.53 28.26 13.68 25 FVGT_m_MULTI_ODD 13 19.49 28.26 17.37 26 UNTRUSTED_Relay 11 6.78 23.91 2.63 27 XM_UncommonTLD01 10 10.59 21.74 7.89 28 XM_Body_Dirty_Words 9 11.44 19.57 9.47 29 BOTNET 9 4.24 19.57 0.53 30 LOTS_OF_MONEY 8 7.20 17.39 4.74 31 XMSubLong 8 19.07 17.39 19.47 32 BAYES_999 8 4.66 17.39 1.58 33 TR_XM_SpammyRelay 8 7.20 17.39 4.74 34 TR_DCC_Bayes_99 8 3.39 17.39 0.00 35 TR_XM_BayesUnsub 7 9.75 15.22 8.42 36 MIME_HTML_MOSTLY 7 5.51 15.22 3.16 37 XM_B_Unsub 7 11.02 15.22 10.00 38 UNPARSEABLE_RELAY 7 11.44 15.22 10.53 39 TR_XM_DKIM_Undo 7 3.39 15.22 0.53 40 FSL_BULK_SIG 7 13.98 15.22 13.68 41 BOTNET_IPINHOSTNAME 7 8.90 15.22 7.37 42 MIME_HTML_ONLY 6 13.98 13.04 14.21 43 TR_XM_DK_Unsub 6 12.71 13.04 12.63 44 XM_B_SpammyTLD 6 3.39 13.04 1.05 45 RCVD_IN_MSPIKE_WL 5 11.86 10.87 12.11 46 XM_B_SpammyWords3 5 3.39 10.87 1.58 47 TooManyTo_001 5 8.47 10.87 7.89 48 T_XMDrugObfuBody_14 5 4.66 10.87 3.16 49 BOTNET_NORDNS 5 2.12 10.87 0.00 50 BAYES_60 5 13.14 10.87 13.68 51 XM_UB50 5 3.39 10.87 1.58 52 RCVD_IN_VALIDITY_RPBL 4 1.69 8.70 0.00 53 TR_XM_SpammyWords2 4 1.69 8.70 0.00 54 T_TM2_M_HEADER_IN_MSG 4 16.10 8.70 17.89 55 XM_B_Investor 4 2.54 8.70 1.05 56 BAYES_80 4 4.24 8.70 3.16 57 TR_XM_PhishingBody 4 2.97 8.70 1.58 58 XM_SPF_SoftFail 4 2.12 8.70 0.53 59 XMSubMetaSx_00 4 3.39 8.70 2.11 60 XM_SendGrid 4 5.51 8.70 4.74 61 HTML_IMAGE_RATIO_02 4 3.39 8.70 2.11 62 MPART_ALT_DIFF 4 2.12 8.70 0.53 63 T_XMDrugObfuBody_08 4 2.12 8.70 0.53 64 XM_B_Phish_Phrases 3 3.81 6.52 3.16 65 RCVD_IN_PSBL 3 1.69 6.52 0.53 66 TR_XM_SpammyWords4 3 2.54 6.52 1.58 67 SpammyFromTLD_01 3 2.12 6.52 1.05 68 XM_B_Phish66 3 1.27 6.52 0.00 69 SpammyFromTLD_02 3 1.27 6.52 0.00 70 XMSolicitRefs_0 3 1.27 6.52 0.00 71 FROM_SUSPICIOUS_NTLD 3 1.27 6.52 0.00 72 RCVD_IN_BL_SPAMCOP_NET 3 1.27 6.52 0.00 73 XM_DIRTYINTL 3 4.24 6.52 3.68 74 TR_XM_UnparsRelay 3 2.97 6.52 2.11 75 TR_XM_InvalidRelay 3 1.27 6.52 0.00 76 XM_OfRef6 3 1.27 6.52 0.00 77 XMSexyCombo_05 3 1.69 6.52 0.53 78 URIBL_DBL_SPAM 3 1.27 6.52 0.00 79 DEAR_FRIEND 2 0.85 4.35 0.00 80 TVD_RCVD_IP 2 1.69 4.35 1.05 81 RELAYCOUNTRY_JP 2 0.85 4.35 0.00 82 RCVD_IN_MSPIKE_H5 2 3.81 4.35 3.68 83 HTML_FONT_TINY_NORDNS 2 0.85 4.35 0.00 84 PLING_QUERY 2 0.85 4.35 0.00 85 MIME_CHARSET_FARAWAY 2 1.69 4.35 1.05 86 SUBJ_DOLLARS 2 0.85 4.35 0.00 87 CHARSET_FARAWAY_HEADER 2 1.27 4.35 0.53 88 RELAYCOUNTRY_NL 2 1.27 4.35 0.53 89 TO_NO_BRKTS_FROM_MSSP 2 0.85 4.35 0.00 90 FILL_THIS_FORM 2 0.85 4.35 0.00 91 RDNS_DYNAMIC 2 1.27 4.35 0.53 92 PDS_RDNS_DYNAMIC_FP 2 1.27 4.35 0.53 93 TR_XM_SpammyWords5 2 1.69 4.35 1.05 94 XM_CamelCaseFrm001 2 5.93 4.35 6.32 95 XMacai 2 0.85 4.35 0.00 96 BAYES_95 2 2.97 4.35 2.63 97 KHOP_HELO_FCRDNS 2 2.54 4.35 2.11 98 TR_Mismatch_TLD_02 2 0.85 4.35 0.00 99 XM_BadFromFormat 2 0.85 4.35 0.00 100 XMGppyBdWords 2 0.85 4.35 0.00 101 XMNumbers 2 5.51 4.35 5.79 102 T_XMHurry_00 2 1.69 4.35 1.05 103 PDS_OTHER_BAD_TLD 2 1.27 4.35 0.53 104 FILL_THIS_FORM_LONG 2 0.85 4.35 0.00 105 XMSubNoVowel 2 1.69 4.35 1.05 106 XM_H_Undi_Recip 2 0.85 4.35 0.00 107 XM_H_Long_From01 2 8.47 4.35 9.47 108 XM_Evil_Numbers_Gen 2 5.93 4.35 6.32 109 RELAYCOUNTRY_CN 2 0.85 4.35 0.00 110 XMBrknScrpt_02 2 0.85 4.35 0.00 111 XM_UB60 2 0.85 4.35 0.00 112 RCVD_IN_MSPIKE_H3 2 5.08 4.35 5.26 113 XMDiploma_00 2 1.27 4.35 0.53 114 XM_UB80 2 0.85 4.35 0.00 115 FROM_SUSPICIOUS_NTLD_FP 2 0.85 4.35 0.00 116 TO_NO_BRKTS_MSFT 2 0.85 4.35 0.00 117 XM_ShortIntro_01 2 1.27 4.35 0.53 118 XMBody_03 1 0.42 2.17 0.00 119 TO_NO_BRKTS_DYNIP 1 0.85 2.17 0.53 120 RELAYCOUNTRY_CO 1 0.42 2.17 0.00 121 RELAYCOUNTRY_AT 1 0.42 2.17 0.00 122 TR_XM_Undi_Recip6 1 0.42 2.17 0.00 123 HTML_IMAGE_RATIO_04 1 3.81 2.17 4.21 124 URI_NOVOWEL 1 0.42 2.17 0.00 125 FSL_NEW_HELO_USER 1 0.42 2.17 0.00 126 RELAYCOUNTRY_GB 1 0.42 2.17 0.00 127 TR_Sbj_FN_Bdy 1 0.42 2.17 0.00 128 T_TooManySym_01 1 5.93 2.17 6.84 129 HTML_IMAGE_RATIO_06 1 3.81 2.17 4.21 130 FORM_FRAUD 1 0.42 2.17 0.00 131 XMHTML_After_End 1 0.85 2.17 0.53 132 TR_XM_Undi_Recip2 1 0.42 2.17 0.00 133 XMBody_106 1 0.42 2.17 0.00 134 RELAYCOUNTRY_PL 1 0.42 2.17 0.00 135 TM2_M_URI_OPT_OUT 1 13.14 2.17 15.79 136 DKIM_INVALID 1 2.97 2.17 3.16 137 TR_XM_Base64_M1 1 0.42 2.17 0.00 138 TooManyTo_002 1 2.97 2.17 3.16 139 T_MONEY_PERCENT 1 0.42 2.17 0.00 140 RELAYCOUNTRY_IN 1 0.42 2.17 0.00 141 XMReplyNow 1 0.42 2.17 0.00 142 BAYES_40 1 4.24 2.17 4.74 143 TR_XM_DK_SendGrid 1 3.39 2.17 3.68 144 FROM_EXCESS_BASE64 1 0.85 2.17 0.53 145 NSL_RCVD_FROM_USER 1 0.42 2.17 0.00 146 FROM_MISSPACED 1 0.42 2.17 0.00 147 RELAYCOUNTRY_UA 1 0.42 2.17 0.00 148 FROM_MISSP_USER 1 0.42 2.17 0.00 149 TooManyTo_005 1 0.85 2.17 0.53 150 FROM_MISSP_MSFT 1 0.42 2.17 0.00 151 MONEY_FROM_MISSP 1 0.42 2.17 0.00 152 XMPhish08 1 0.42 2.17 0.00 153 XM_H_PHPMailer 1 4.24 2.17 4.74 154 FROM_MISSP_XPRIO 1 0.42 2.17 0.00 155 HTML_IMAGE_ONLY_16 1 0.42 2.17 0.00 156 NO_DNS_FOR_FROM 1 0.42 2.17 0.00 157 BAYES_20 1 1.69 2.17 1.58 158 RELAYCOUNTRY_CL 1 0.42 2.17 0.00 159 RELAYCOUNTRY_CA 1 3.81 2.17 4.21 160 MONEY_FRAUD_5 1 0.42 2.17 0.00 161 URG_BIZ 1 0.42 2.17 0.00 162 RCVD_IN_MSPIKE_H4 1 2.97 2.17 3.16 163 XM_OfRef7 1 0.42 2.17 0.00 164 TR_LOTS_OF_MONEY2 1 0.42 2.17 0.00 165 XMSubject_11 1 0.42 2.17 0.00 166 XMSubEmpty 1 0.42 2.17 0.00 167 TR_XM_Base64_M2 1 0.42 2.17 0.00 168 RCVD_IN_RP_RNBL 1 0.42 2.17 0.00 169 HTML_SHORT_LINK_IMG_2 1 0.42 2.17 0.00 170 DEAR_SOMETHING 1 0.42 2.17 0.00 171 XMSubject_78 1 0.42 2.17 0.00 172 ADVANCE_FEE_5_NEW_FRM_MNY 1 0.42 2.17 0.00 173 T_REMOTE_IMAGE 1 4.66 2.17 5.26 174 T_FILL_THIS_FORM_LOAN 1 0.42 2.17 0.00 175 XMGenDplmaNmb 1 0.42 2.17 0.00 176 RELAYCOUNTRY_ES 1 0.42 2.17 0.00 177 XMSubMetaSxObfu_02 1 0.42 2.17 0.00 178 FORGED_MUA_OUTLOOK 1 0.42 2.17 0.00 179 FROM_MISSP_REPLYTO 1 0.42 2.17 0.00 180 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.42 2.17 0.00 181 FROM_MISSP_DYNIP 1 0.42 2.17 0.00 182 HTML_MIME_NO_HTML_TAG 1 0.85 2.17 0.53 183 SHORTENED_URL_HREF 1 0.42 2.17 0.00 184 XMBody_17 1 0.42 2.17 0.00 185 HTML_FONT_FACE_BAD 1 1.27 2.17 1.05 186 RELAYCOUNTRY_ID 1 0.42 2.17 0.00 187 RELAYCOUNTRY_HK 1 0.42 2.17 0.00 188 XM_Body_Dirty_Words_01 1 0.42 2.17 0.00 189 RELAYCOUNTRY_KR 1 0.42 2.17 0.00 190 FSL_CTYPE_WIN1251 1 0.42 2.17 0.00 191 MILLION_HUNDRED 1 0.42 2.17 0.00 192 TooManyTo_003 1 1.69 2.17 1.58 193 LongTLD 1 0.42 2.17 0.00 194 FROM_MISSP_EH_MATCH 1 0.42 2.17 0.00 195 T_TooManySym_02 1 4.66 2.17 5.26 196 ADVANCE_FEE_4_NEW_MONEY 1 0.42 2.17 0.00 197 TooManyTo_004 1 1.69 2.17 1.58 198 TM2_M_VERY_LONG_WORD 1 0.42 2.17 0.00 199 NORDNS_LOW_CONTRAST 1 0.42 2.17 0.00 200 TR_XM_MaxWHORU 1 0.42 2.17 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 159 85.17 91.30 83.68 2 DCC_CHECK_NEGATIVE 148 71.61 45.65 77.89 3 HTML_MESSAGE 121 69.07 91.30 63.68 4 DKIM_SIGNED 120 66.53 80.43 63.16 5 RELAYCOUNTRY_US 116 63.14 71.74 61.05 6 XM_DK_Pass 115 63.98 78.26 60.53 7 DKIM_VALID 114 63.56 78.26 60.00 8 BAYES_50 104 52.12 41.30 54.74 9 XM_B_Unicode 93 54.66 78.26 48.95 10 DKIM_VALID_AU 92 50.00 56.52 48.42 11 DKIM_VALID_EF 66 34.75 34.78 34.74 12 ALL_TRUSTED 60 25.42 0.00 31.58 13 XM_B_SpammyWords 59 35.17 52.17 31.05 14 XMListUnsubscribeExists 58 35.59 56.52 30.53 15 XM_B_Unicode3 53 29.24 34.78 27.89 16 DCC_CHECK 42 28.39 54.35 22.11 17 XMSubLong 37 19.07 17.39 19.47 18 HTML_FONT_LOW_CONTRAST 36 21.61 32.61 18.95 19 T_TM2_M_HEADER_IN_MSG 34 16.10 8.70 17.89 20 LOC_TINY_FONT_1 34 22.88 43.48 17.89 21 FVGT_m_MULTI_ODD 33 19.49 28.26 17.37 22 BOUNCE_MESSAGE 31 13.14 0.00 16.32 23 ANY_BOUNCE_MESSAGE 31 13.14 0.00 16.32 24 TM2_M_URI_OPT_OUT 30 13.14 2.17 15.79 25 XM_Multi_Part_URI 30 18.64 30.43 15.79 26 MIME_HTML_ONLY 27 13.98 13.04 14.21 27 BAYES_60 26 13.14 10.87 13.68 28 T_KAM_HTML_FONT_INVALID 26 16.95 30.43 13.68 29 RCVD_IN_MSPIKE_H2 26 16.53 28.26 13.68 30 FSL_BULK_SIG 26 13.98 15.22 13.68 31 TR_XM_DK_Unsub 24 12.71 13.04 12.63 32 RCVD_IN_MSPIKE_WL 23 11.86 10.87 12.11 33 XM_B_SpammyWords2 23 15.68 30.43 12.11 34 XM_DKIMWhitelistDomains 21 8.90 0.00 11.05 35 UNPARSEABLE_RELAY 20 11.44 15.22 10.53 36 BAYES_00 20 8.47 0.00 10.53 37 XM_B_Unsub 19 11.02 15.22 10.00 38 XM_H_Long_From01 18 8.47 4.35 9.47 39 XM_Body_Dirty_Words 18 11.44 19.57 9.47 40 RELAYCOUNTRY_META 17 13.56 32.61 8.95 41 TR_XM_DK_Bayes1 16 6.78 0.00 8.42 42 TR_XM_BayesUnsub 16 9.75 15.22 8.42 43 TR_XM_DK_Bayes 16 6.78 0.00 8.42 44 TR_XM_DK_Bayes2 16 6.78 0.00 8.42 45 XM_UncommonTLD01 15 10.59 21.74 7.89 46 TooManyTo_001 15 8.47 10.87 7.89 47 BAYES_05 14 5.93 0.00 7.37 48 SCC_BODY_URI_ONLY 14 5.93 0.00 7.37 49 XM_B_Unsub2 14 5.93 0.00 7.37 50 BOTNET_IPINHOSTNAME 14 8.90 15.22 7.37 51 T_TooManySym_01 13 5.93 2.17 6.84 52 XM_CamelCaseFrm001 12 5.93 4.35 6.32 53 XM_Evil_Numbers_Gen 12 5.93 4.35 6.32 54 IN_ZIMBRA_NJ_WHITELIST 12 5.08 0.00 6.32 55 LotsOfNums_01 11 4.66 0.00 5.79 56 MIME_QP_LONG_LINE 11 4.66 0.00 5.79 57 MSGID_NOFQDN1 11 4.66 0.00 5.79 58 INVALID_MSGID 11 4.66 0.00 5.79 59 XMNumbers 11 5.51 4.35 5.79 60 T_REMOTE_IMAGE 10 4.66 2.17 5.26 61 TO_MALFORMED 10 4.24 0.00 5.26 62 T_TooManySym_02 10 4.66 2.17 5.26 63 RCVD_IN_MSPIKE_H3 10 5.08 4.35 5.26 64 LOTS_OF_MONEY 9 7.20 17.39 4.74 65 XM_H_PHPMailer 9 4.24 2.17 4.74 66 BAYES_40 9 4.24 2.17 4.74 67 XM_SendGrid 9 5.51 8.70 4.74 68 TR_XM_SpammyRelay 9 7.20 17.39 4.74 69 XMStrtUSub 8 3.39 0.00 4.21 70 HTML_IMAGE_RATIO_06 8 3.81 2.17 4.21 71 SHORT_SHORTNER 8 3.39 0.00 4.21 72 HTML_IMAGE_RATIO_04 8 3.81 2.17 4.21 73 RELAYCOUNTRY_CA 8 3.81 2.17 4.21 74 HTML_IMAGE_ONLY_28 8 3.39 0.00 4.21 75 RCVD_IN_IADB_SENDERID 7 2.97 0.00 3.68 76 MAILING_LIST_MULTI 7 2.97 0.00 3.68 77 RCVD_IN_MSPIKE_H5 7 3.81 4.35 3.68 78 RCVD_IN_IADB_SPF 7 2.97 0.00 3.68 79 RCVD_IN_IADB_LISTED 7 2.97 0.00 3.68 80 TR_XM_DK_SendGrid 7 3.39 2.17 3.68 81 RCVD_IN_IADB_DK 7 2.97 0.00 3.68 82 XM_DIRTYINTL 7 4.24 6.52 3.68 83 DKIM_INVALID 6 2.97 2.17 3.16 84 XM_B_Phish_Phrases 6 3.81 6.52 3.16 85 MIME_HTML_MOSTLY 6 5.51 15.22 3.16 86 RCVD_IN_MSPIKE_H4 6 2.97 2.17 3.16 87 T_XMDrugObfuBody_14 6 4.66 10.87 3.16 88 TooManyTo_002 6 2.97 2.17 3.16 89 BAYES_80 6 4.24 8.70 3.16 90 TVD_SPACE_RATIO 6 2.54 0.00 3.16 91 BAYES_95 5 2.97 4.35 2.63 92 FVGT_m_MULTI_ODD_EMAIL 5 2.12 0.00 2.63 93 UNTRUSTED_Relay 5 6.78 23.91 2.63 94 T_TooManySym_03 5 2.54 2.17 2.63 95 XMSubMetaI_00 4 1.69 0.00 2.11 96 XM_Body_Obfu01 4 1.69 0.00 2.11 97 KHOP_HELO_FCRDNS 4 2.54 4.35 2.11 98 XM_ZIP 4 1.69 0.00 2.11 99 SHORT_URI_2 4 1.69 0.00 2.11 100 RCVD_IN_IADB_VOUCHED 4 1.69 0.00 2.11 101 XMSubMetaSx_00 4 3.39 8.70 2.11 102 XM_H_Trusted_IP 4 1.69 0.00 2.11 103 IN_HORDE_ADDRESS_BOOK 4 1.69 0.00 2.11 104 XM_PDF 4 1.69 0.00 2.11 105 HTML_IMAGE_RATIO_02 4 3.39 8.70 2.11 106 TR_XM_UnparsRelay 4 2.97 6.52 2.11 107 TR_XM_SpammyWords4 3 2.54 6.52 1.58 108 BAYES_20 3 1.69 2.17 1.58 109 XM_B_SpammyWords3 3 3.39 10.87 1.58 110 XMNoVowels 3 1.27 0.00 1.58 111 RELAYCOUNTRY_DE 3 1.27 0.00 1.58 112 XM_UB50 3 3.39 10.87 1.58 113 BAYES_999 3 4.66 17.39 1.58 114 TR_XM_PhishingBody 3 2.97 8.70 1.58 115 XM_DK_Undo_02 3 8.90 39.13 1.58 116 BAYES_99 3 7.20 30.43 1.58 117 TooManyTo_004 3 1.69 2.17 1.58 118 TooManyTo_003 3 1.69 2.17 1.58 119 TR_Symld_Words 3 1.27 0.00 1.58 120 MIME_CHARSET_FARAWAY 2 1.69 4.35 1.05 121 RELAYCOUNTRY_BG 2 0.85 0.00 1.05 122 USER_IN_DEF_DKIM_WL 2 0.85 0.00 1.05 123 SpammyFromTLD_01 2 2.12 6.52 1.05 124 XM_B_Investor 2 2.54 8.70 1.05 125 TVD_RCVD_IP 2 1.69 4.35 1.05 126 TR_XM_SpoofStaff 2 0.85 0.00 1.05 127 RELAYCOUNTRY_AU 2 0.85 0.00 1.05 128 XM_GoogleGroups 2 0.85 0.00 1.05 129 XM_H_SpoofStaff4 2 0.85 0.00 1.05 130 XMPhish30 2 0.85 0.00 1.05 131 XMSubMetaI_01 2 0.85 0.00 1.05 132 T_OBFU_PDF_ATTACH 2 0.85 0.00 1.05 133 TR_XM_SpammyWords5 2 1.69 4.35 1.05 134 XMSubMetaD_03 2 0.85 0.00 1.05 135 XMMoneyMeta_00 2 0.85 0.00 1.05 136 TR_XM_PSC1 2 0.85 0.00 1.05 137 XM_ZohoDesk1 2 0.85 0.00 1.05 138 TR_XM_SpoofPhishAttach 2 0.85 0.00 1.05 139 RELAYCOUNTRY_IE 2 0.85 0.00 1.05 140 URI_HEX 2 0.85 0.00 1.05 141 XMSubNoVowel 2 1.69 4.35 1.05 142 XMHTMLBadTable_001 2 0.85 0.00 1.05 143 HTTPS_HTTP_MISMATCH 2 0.85 0.00 1.05 144 T_XMHurry_00 2 1.69 4.35 1.05 145 LONG_JUNK_URI 2 0.85 0.00 1.05 146 URI_TRY_3LD 2 0.85 0.00 1.05 147 XMCapTrack 2 0.85 0.00 1.05 148 XMGappySubj_01 2 0.85 0.00 1.05 149 SUBJ_ALL_CAPS 2 0.85 0.00 1.05 150 WEIRD_PORT 2 0.85 0.00 1.05 151 XMSpoofStaff2 2 0.85 0.00 1.05 152 HTML_IMAGE_ONLY_20 2 0.85 0.00 1.05 153 XM_Dr_From 2 0.85 0.00 1.05 154 NUMERIC_HTTP_ADDR 2 0.85 0.00 1.05 155 URI_PHISH 2 0.85 0.00 1.05 156 XM_B_SpammyTLD 2 3.39 13.04 1.05 157 RCVD_IN_IADB_OPTIN 2 0.85 0.00 1.05 158 HTML_FONT_FACE_BAD 2 1.27 2.17 1.05 159 XMGoogleMoney 1 0.42 0.00 0.53 160 TM2_M_A_HREF_HREF 1 0.42 0.00 0.53 161 DATE_IN_PAST_03_06 1 0.42 0.00 0.53 162 CHARSET_FARAWAY_HEADER 1 1.27 4.35 0.53 163 XMHTML_After_End 1 0.85 2.17 0.53 164 NML_ADSP_CUSTOM_MED 1 0.42 0.00 0.53 165 HDRS_MISSP 1 0.42 0.00 0.53 166 T_PDS_PRO_TLD 1 0.42 0.00 0.53 167 HELO_NODOT 1 0.42 0.00 0.53 168 DATE_IN_PAST_06_12 1 0.42 0.00 0.53 169 TO_NO_BRKTS_DYNIP 1 0.85 2.17 0.53 170 RCVD_IN_PSBL 1 1.69 6.52 0.53 171 XM_H_AmazonPhish 1 0.42 0.00 0.53 172 RCVD_IN_VALIDITY_CERTIFIED 1 0.42 0.00 0.53 173 XM_S_SubURI 1 0.42 0.00 0.53 174 TooManyTo_005 1 0.85 2.17 0.53 175 DKIM_ADSP_CUSTOM_MED 1 0.42 0.00 0.53 176 RDNS_DYNAMIC 1 1.27 4.35 0.53 177 PDS_RDNS_DYNAMIC_FP 1 1.27 4.35 0.53 178 FROM_EXCESS_BASE64 1 0.85 2.17 0.53 179 RCVD_IN_MSPIKE_BL 1 0.42 0.00 0.53 180 T_XMDrugObfuBody_00 1 0.42 0.00 0.53 181 RELAYCOUNTRY_NL 1 1.27 4.35 0.53 182 FROM_GOV_DKIM_AU 1 0.42 0.00 0.53 183 RELAYCOUNTRY_RO 1 0.42 0.00 0.53 184 XM_H_PHPOS 1 0.42 0.00 0.53 185 XM_TLDProd2 1 0.42 0.00 0.53 186 HTML_MIME_NO_HTML_TAG 1 0.85 2.17 0.53 187 HTML_IMAGE_RATIO_08 1 0.42 0.00 0.53 188 CTE_8BIT_MISMATCH 1 0.42 0.00 0.53 189 TR_XM_DKIM_Undo 1 3.39 15.22 0.53 190 RCVD_IN_VALIDITY_SAFE 1 0.42 0.00 0.53 191 HTML_SINGLET_MANY 1 0.42 0.00 0.53 192 XM_SPF_SoftFail 1 2.12 8.70 0.53 193 PDS_OTHER_BAD_TLD 1 1.27 4.35 0.53 194 XM_DK_Undo_01 1 0.42 0.00 0.53 195 INVESTMENT_ADVICE 1 0.42 0.00 0.53 196 HELO_NO_DOMAIN 1 0.42 0.00 0.53 197 XMSexyCombo_01 1 0.42 0.00 0.53 198 TR_XM_FormFill2 1 0.42 0.00 0.53 199 XMBSHREFv2 1 0.42 0.00 0.53 200 FSL_HELO_NON_FQDN_1 1 0.42 0.00 0.53 ----------------------------------------------------------------------