Email: 221 Autolearn: 0 AvgScore: 3.01 AvgScanTime: 4.68 sec Spam: 58 Autolearn: 0 AvgScore: 12.67 AvgScanTime: 4.38 sec Ham: 163 Autolearn: 0 AvgScore: -0.43 AvgScanTime: 4.79 sec Time Spent Running SA: 0.29 hours Time Spent Processing Spam: 0.07 hours Time Spent Processing Ham: 0.22 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 53 80.09 91.38 76.07 2 T_SCC_BODY_TEXT_LINE 46 78.73 79.31 78.53 3 DKIM_SIGNED 45 72.40 77.59 70.55 4 XM_B_Unicode 44 63.80 75.86 59.51 5 RELAYCOUNTRY_US 44 73.30 75.86 72.39 6 XM_DK_Pass 44 69.68 75.86 67.48 7 DKIM_VALID 43 68.33 74.14 66.26 8 DKIM_VALID_AU 39 58.37 67.24 55.21 9 DCC_CHECK_NEGATIVE 36 78.73 62.07 84.66 10 XM_B_SpammyWords 35 46.15 60.34 41.10 11 XMListUnsubscribeExists 32 41.18 55.17 36.20 12 LOC_TINY_FONT_1 30 35.29 51.72 29.45 13 XM_B_Unicode3 30 40.72 51.72 36.81 14 HTML_FONT_LOW_CONTRAST 27 32.13 46.55 26.99 15 BAYES_50 22 55.20 37.93 61.35 16 DCC_CHECK 22 21.27 37.93 15.34 17 RELAYCOUNTRY_META 18 11.76 31.03 4.91 18 XMSubLong 17 25.79 29.31 24.54 19 BAYES_99 16 8.60 27.59 1.84 20 T_KAM_HTML_FONT_INVALID 14 19.46 24.14 17.79 21 XM_DK_Undo_02 13 7.24 22.41 1.84 22 XM_Body_Dirty_Words 13 15.38 22.41 12.88 23 MIME_HTML_ONLY 13 19.91 22.41 19.02 24 DKIM_VALID_EF 13 28.96 22.41 31.29 25 RCVD_IN_MSPIKE_H2 12 18.55 20.69 17.79 26 XM_B_SpammyWords2 12 14.48 20.69 12.27 27 BAYES_80 11 7.24 18.97 3.07 28 FVGT_m_MULTI_ODD 11 18.55 18.97 18.40 29 UNTRUSTED_Relay 11 8.14 18.97 4.29 30 XM_B_Unsub 10 11.76 17.24 9.82 31 TR_XM_BayesUnsub 10 9.95 17.24 7.36 32 BAYES_999 10 5.43 17.24 1.23 33 TR_XM_SpammyRelay 10 6.79 17.24 3.07 34 XMBody_78 8 5.88 13.79 3.07 35 UNPARSEABLE_RELAY 8 14.03 13.79 14.11 36 KHOP_HELO_FCRDNS 7 4.07 12.07 1.23 37 TR_XM_DKIM_Undo 7 3.62 12.07 0.61 38 BOTNET 6 2.71 10.34 0.00 39 XM_UB50 6 4.98 10.34 3.07 40 XM_B_Investor 6 4.07 10.34 1.84 41 XM_Multi_Part_URI 6 11.76 10.34 12.27 42 RCVD_IN_MSPIKE_WL 6 12.22 10.34 12.88 43 MPART_ALT_DIFF 6 5.43 10.34 3.68 44 TR_XM_UnparsRelay 5 3.62 8.62 1.84 45 XM_UncommonTLD01 5 7.24 8.62 6.75 46 TR_XM_InvalidRelay 5 2.71 8.62 0.61 47 TR_XM_NoHeaderRelay 5 2.71 8.62 0.61 48 LOTS_OF_MONEY 5 6.33 8.62 5.52 49 TR_XM_DK_Unsub 5 10.41 8.62 11.04 50 MIME_HTML_MOSTLY 5 4.52 8.62 3.07 51 TR_DCC_Bayes_99 5 2.26 8.62 0.00 52 XM_SPF_SoftFail 5 2.26 8.62 0.00 53 HTML_IMAGE_RATIO_04 5 6.33 8.62 5.52 54 RCVD_IN_BL_SPAMCOP_NET 4 1.81 6.90 0.00 55 HTML_MIME_NO_HTML_TAG 4 4.98 6.90 4.29 56 XM_B_SpammyWords3 4 5.43 6.90 4.91 57 XM_DIRTYINTL 4 3.17 6.90 1.84 58 SUBJ_ALL_CAPS 4 3.17 6.90 1.84 59 FSL_BULK_SIG 4 7.69 6.90 7.98 60 TR_XM_SpammyWords4 4 4.52 6.90 3.68 61 RELAYCOUNTRY_IN 4 1.81 6.90 0.00 62 TR_XM_SpammyWords5 4 3.17 6.90 1.84 63 BAYES_60 4 10.41 6.90 11.66 64 XMSexyCombo_05 4 2.71 6.90 1.23 65 LotsOfNums_01 4 7.24 6.90 7.36 66 XM_H_Long_From01 4 6.79 6.90 6.75 67 RELAYCOUNTRY_PL 3 1.36 5.17 0.00 68 XM_Evil_Numbers_Gen 3 8.14 5.17 9.20 69 BAYES_95 3 2.71 5.17 1.84 70 T_TM2_M_HEADER_IN_MSG 3 17.19 5.17 21.47 71 XM_UB99 3 1.36 5.17 0.00 72 XM_B_SpammyTLD 3 3.17 5.17 2.45 73 HTML_IMAGE_RATIO_02 3 4.52 5.17 4.29 74 XM_B_Phish_Phrases 3 4.98 5.17 4.91 75 TM2_M_URI_OPT_OUT 3 2.71 5.17 1.84 76 RELAYCOUNTRY_GB 3 1.36 5.17 0.00 77 RCVD_IN_MSPIKE_BL 3 1.36 5.17 0.00 78 TR_XM_PhishingBody 3 3.62 5.17 3.07 79 TR_XM_MSPIKECOMBO 3 1.36 5.17 0.00 80 XMHTML_After_End 3 1.36 5.17 0.00 81 SpammyFromTLD_01 3 1.36 5.17 0.00 82 MIME_QP_LONG_LINE 3 3.62 5.17 3.07 83 RELAYCOUNTRY_FR 2 1.36 3.45 0.61 84 RCVD_IN_MSPIKE_L4 2 0.90 3.45 0.00 85 RCVD_IN_MSPIKE_H5 2 3.17 3.45 3.07 86 XMNoVowels 2 2.26 3.45 1.84 87 BOTNET_IPINHOSTNAME 2 3.62 3.45 3.68 88 RELAYCOUNTRY_NG 2 0.90 3.45 0.00 89 XM_DK_Undo_01 2 1.36 3.45 0.61 90 RCVD_IN_MSPIKE_H3 2 7.69 3.45 9.20 91 XM_SendGrid 2 7.24 3.45 8.59 92 HTML_IMAGE_RATIO_08 2 2.71 3.45 2.45 93 MIME_HTML_ONLY_MULTI 2 3.17 3.45 3.07 94 PDS_OTHER_BAD_TLD 2 0.90 3.45 0.00 95 NORDNS_LOW_CONTRAST 2 1.36 3.45 0.61 96 TR_Caps_n_Bayes_99 2 0.90 3.45 0.00 97 TR_XM_MSPIKECOMBO2 2 0.90 3.45 0.00 98 XM_H_Undi_Recip 2 1.81 3.45 1.23 99 URIBL_DBL_ABUSE_SPAM 2 0.90 3.45 0.00 100 UNSUB_GOOG_FORM 2 0.90 3.45 0.00 101 RCVD_IN_PSBL 2 1.36 3.45 0.61 102 DKIM_INVALID 2 4.07 3.45 4.29 103 T_XMDrugObfuBody_14 2 2.71 3.45 2.45 104 RELAYCOUNTRY_AU 2 1.81 3.45 1.23 105 URI_NOVOWEL 2 1.36 3.45 0.61 106 XM_S_SEO 2 0.90 3.45 0.00 107 RCVD_IN_MSPIKE_H4 2 1.36 3.45 0.61 108 XMNumbers 2 5.88 3.45 6.75 109 TR_XM_SEO4 2 1.36 3.45 0.61 110 BOTNET_NORDNS 2 0.90 3.45 0.00 111 SCC_BODY_URI_ONLY 2 4.98 3.45 5.52 112 XM_UB95 1 0.45 1.72 0.00 113 XM_PDF 1 1.36 1.72 1.23 114 RCVD_IN_IADB_DK 1 1.36 1.72 1.23 115 REMOVE_BEFORE_LINK 1 0.45 1.72 0.00 116 T_MONEY_PERCENT 1 0.45 1.72 0.00 117 RELAYCOUNTRY_MY 1 0.45 1.72 0.00 118 MIXED_CENTER_CASE 1 0.90 1.72 0.61 119 HELO_LOCALHOST 1 0.45 1.72 0.00 120 TR_Mismatch_TLD_02 1 0.45 1.72 0.00 121 FROM_MISSP_MSFT 1 0.45 1.72 0.00 122 XM_BadFromFormat 1 0.45 1.72 0.00 123 HTML_IMAGE_ONLY_32 1 1.81 1.72 1.84 124 TooManyTo_001 1 7.24 1.72 9.20 125 LOADSA_MONEY_COMBO 1 0.45 1.72 0.00 126 TR_XM_COVIDMETA4 1 0.45 1.72 0.00 127 URI_NO_WWW_INFO_CGI 1 0.45 1.72 0.00 128 XM_RECPTID 1 0.45 1.72 0.00 129 DKIM_ADSP_NXDOMAIN 1 0.45 1.72 0.00 130 RCVD_IN_IADB_LISTED 1 1.81 1.72 1.84 131 INVALID_MSGID 1 4.98 1.72 6.13 132 BAYES_40 1 5.43 1.72 6.75 133 FVGT_m_MULTI_ODD_EMAIL 1 2.26 1.72 2.45 134 T_REMOTE_IMAGE 1 4.07 1.72 4.91 135 MONEY_FROM_MISSP 1 0.45 1.72 0.00 136 TR_LOTS_OF_MONEY1 1 0.45 1.72 0.00 137 FSL_CTYPE_WIN1251 1 0.45 1.72 0.00 138 FROM_MISSP_EH_MATCH 1 0.45 1.72 0.00 139 XMSubMetaI_00 1 0.45 1.72 0.00 140 MSOE_MID_WRONG_CASE 1 0.45 1.72 0.00 141 FROM_EXCESS_BASE64 1 0.90 1.72 0.61 142 XM_B_Phish66 1 0.90 1.72 0.61 143 XMPhish30 1 0.90 1.72 0.61 144 MSGID_NOFQDN1 1 4.98 1.72 6.13 145 FAKE_REPLY_C 1 0.45 1.72 0.00 146 XM_Body_Dirty_Words_01 1 0.90 1.72 0.61 147 XM_UB60 1 0.45 1.72 0.00 148 TR_XM_SpammyWords2 1 0.90 1.72 0.61 149 FORGED_MUA_OUTLOOK 1 0.45 1.72 0.00 150 TR_XM_MaxWHORU 1 0.45 1.72 0.00 151 TO_NO_BRKTS_DYNIP 1 0.45 1.72 0.00 152 NO_DNS_FOR_FROM 1 0.90 1.72 0.61 153 DATE_IN_FUTURE_03_06 1 0.45 1.72 0.00 154 TooManyTo_002 1 4.07 1.72 4.91 155 PDS_RDNS_DYNAMIC_FP 1 0.45 1.72 0.00 156 FROM_MISSPACED 1 0.45 1.72 0.00 157 TooManyTo_003 1 1.36 1.72 1.23 158 LONG_JUNK_URI 1 0.90 1.72 0.61 159 HELO_NODOT 1 0.90 1.72 0.61 160 XM_CamelCaseFrm001 1 2.71 1.72 3.07 161 RELAYCOUNTRY_ES 1 0.45 1.72 0.00 162 TO_NO_BRKTS_FROM_MSSP 1 0.45 1.72 0.00 163 XM_Body_Obfu01 1 1.81 1.72 1.84 164 TR_LOTS_OF_MONEY2 1 0.45 1.72 0.00 165 FSL_HELO_NON_FQDN_1 1 0.90 1.72 0.61 166 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.45 1.72 0.00 167 XMBody_03 1 0.90 1.72 0.61 168 REPLYTO_WITHOUT_TO_CC 1 0.45 1.72 0.00 169 XMPhish08 1 0.90 1.72 0.61 170 XMStockSpam_06 1 0.45 1.72 0.00 171 NORMAL_HTTP_TO_IP 1 0.45 1.72 0.00 172 HEADER_SPAM 1 0.45 1.72 0.00 173 MISSING_HEADERS 1 1.36 1.72 1.23 174 BAYES_20 1 2.26 1.72 2.45 175 RELAYCOUNTRY_ID 1 0.45 1.72 0.00 176 OBFU_TEXT_ATTACH 1 0.45 1.72 0.00 177 TR_XM_DK_SendGrid 1 4.52 1.72 5.52 178 XMClaimOffer 1 0.45 1.72 0.00 179 RAND_HEADER_MANY 1 0.45 1.72 0.00 180 RELAYCOUNTRY_CA 1 0.90 1.72 0.61 181 TR_MetaPhish_Combo_01 1 0.90 1.72 0.61 182 XMFrmHeader_28 1 0.45 1.72 0.00 183 FONT_INVIS_NORDNS 1 0.45 1.72 0.00 184 XM_UB999 1 0.45 1.72 0.00 185 NOT_SPAM 1 0.45 1.72 0.00 186 RELAYCOUNTRY_KZ 1 0.45 1.72 0.00 187 TM2_M_VERY_LONG_WORD 1 1.36 1.72 1.23 188 WEIRD_PORT 1 0.45 1.72 0.00 189 RCVD_IN_VALIDITY_RPBL 1 0.45 1.72 0.00 190 RELAYCOUNTRY_PK 1 0.45 1.72 0.00 191 XFER_LOTSA_MONEY 1 0.45 1.72 0.00 192 TO_NO_BRKTS_MSFT 1 0.45 1.72 0.00 193 XM_URI_RBL 1 0.90 1.72 0.61 194 FROM_MISSP_REPLYTO 1 0.45 1.72 0.00 195 AXB_XMAILER_MIMEOLE_OL_024C2 1 0.45 1.72 0.00 196 RELAYCOUNTRY_KR 1 0.45 1.72 0.00 197 RCVD_IN_IADB_SENDERID 1 1.36 1.72 1.23 198 IMPOTENCE 1 0.45 1.72 0.00 199 LONG_JUNK_URI3 1 0.90 1.72 0.61 200 SpammyFromTLD_02 1 0.45 1.72 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 138 78.73 62.07 84.66 2 T_SCC_BODY_TEXT_LINE 128 78.73 79.31 78.53 3 HTML_MESSAGE 124 80.09 91.38 76.07 4 RELAYCOUNTRY_US 118 73.30 75.86 72.39 5 DKIM_SIGNED 115 72.40 77.59 70.55 6 XM_DK_Pass 110 69.68 75.86 67.48 7 DKIM_VALID 108 68.33 74.14 66.26 8 BAYES_50 100 55.20 37.93 61.35 9 XM_B_Unicode 97 63.80 75.86 59.51 10 DKIM_VALID_AU 90 58.37 67.24 55.21 11 XM_B_SpammyWords 67 46.15 60.34 41.10 12 XM_B_Unicode3 60 40.72 51.72 36.81 13 XMListUnsubscribeExists 59 41.18 55.17 36.20 14 DKIM_VALID_EF 51 28.96 22.41 31.29 15 LOC_TINY_FONT_1 48 35.29 51.72 29.45 16 HTML_FONT_LOW_CONTRAST 44 32.13 46.55 26.99 17 XMSubLong 40 25.79 29.31 24.54 18 T_TM2_M_HEADER_IN_MSG 35 17.19 5.17 21.47 19 ALL_TRUSTED 35 15.84 0.00 21.47 20 MIME_HTML_ONLY 31 19.91 22.41 19.02 21 FVGT_m_MULTI_ODD 30 18.55 18.97 18.40 22 RCVD_IN_MSPIKE_H2 29 18.55 20.69 17.79 23 T_KAM_HTML_FONT_INVALID 29 19.46 24.14 17.79 24 DCC_CHECK 25 21.27 37.93 15.34 25 UNPARSEABLE_RELAY 23 14.03 13.79 14.11 26 XM_Body_Dirty_Words 21 15.38 22.41 12.88 27 RCVD_IN_MSPIKE_WL 21 12.22 10.34 12.88 28 XM_B_SpammyWords2 20 14.48 20.69 12.27 29 XM_Multi_Part_URI 20 11.76 10.34 12.27 30 T_TooManySym_01 20 9.05 0.00 12.27 31 BAYES_60 19 10.41 6.90 11.66 32 TR_XM_DK_Unsub 18 10.41 8.62 11.04 33 T_TooManySym_02 17 7.69 0.00 10.43 34 BAYES_00 17 7.69 0.00 10.43 35 XM_B_Unsub 16 11.76 17.24 9.82 36 TR_XM_DK_Bayes 15 6.79 0.00 9.20 37 XM_Evil_Numbers_Gen 15 8.14 5.17 9.20 38 TooManyTo_001 15 7.24 1.72 9.20 39 RCVD_IN_MSPIKE_H3 15 7.69 3.45 9.20 40 TR_XM_DK_Bayes1 14 6.33 0.00 8.59 41 XM_SendGrid 14 7.24 3.45 8.59 42 XM_DKIMWhitelistDomains 14 6.33 0.00 8.59 43 TR_XM_DK_Bayes2 13 5.88 0.00 7.98 44 IN_ZIMBRA_NJ_WHITELIST 13 5.88 0.00 7.98 45 FSL_BULK_SIG 13 7.69 6.90 7.98 46 TR_XM_BayesUnsub 12 9.95 17.24 7.36 47 LotsOfNums_01 12 7.24 6.90 7.36 48 BAYES_40 11 5.43 1.72 6.75 49 USER_IN_DEF_DKIM_WL 11 4.98 0.00 6.75 50 XM_UncommonTLD01 11 7.24 8.62 6.75 51 XM_H_Long_From01 11 6.79 6.90 6.75 52 XMNumbers 11 5.88 3.45 6.75 53 INVALID_MSGID 10 4.98 1.72 6.13 54 MSGID_NOFQDN1 10 4.98 1.72 6.13 55 XMStrtUSub 10 4.52 0.00 6.13 56 HTML_IMAGE_RATIO_06 10 4.98 1.72 6.13 57 TO_MALFORMED 10 4.52 0.00 6.13 58 LOTS_OF_MONEY 9 6.33 8.62 5.52 59 TR_XM_DK_SendGrid 9 4.52 1.72 5.52 60 HTML_IMAGE_RATIO_04 9 6.33 8.62 5.52 61 SCC_BODY_URI_ONLY 9 4.98 3.45 5.52 62 T_REMOTE_IMAGE 8 4.07 1.72 4.91 63 XM_B_SpammyWords3 8 5.43 6.90 4.91 64 XM_B_Phish_Phrases 8 4.98 5.17 4.91 65 TooManyTo_002 8 4.07 1.72 4.91 66 RELAYCOUNTRY_META 8 11.76 31.03 4.91 67 BOUNCE_MESSAGE 8 3.62 0.00 4.91 68 ANY_BOUNCE_MESSAGE 8 3.62 0.00 4.91 69 T_TooManySym_03 7 3.17 0.00 4.29 70 HTML_MIME_NO_HTML_TAG 7 4.98 6.90 4.29 71 HTML_IMAGE_RATIO_02 7 4.52 5.17 4.29 72 TVD_SPACE_RATIO 7 3.17 0.00 4.29 73 DKIM_INVALID 7 4.07 3.45 4.29 74 XMSubMetaSx_00 7 3.62 1.72 4.29 75 UNTRUSTED_Relay 7 8.14 18.97 4.29 76 BOTNET_IPINHOSTNAME 6 3.62 3.45 3.68 77 MAILING_LIST_MULTI 6 2.71 0.00 3.68 78 TR_XM_SpammyWords4 6 4.52 6.90 3.68 79 MPART_ALT_DIFF 6 5.43 10.34 3.68 80 RCVD_IN_MSPIKE_H5 5 3.17 3.45 3.07 81 XM_UB50 5 4.98 10.34 3.07 82 XM_CamelCaseFrm001 5 2.71 1.72 3.07 83 BAYES_80 5 7.24 18.97 3.07 84 TR_XM_PhishingBody 5 3.62 5.17 3.07 85 MIME_HTML_MOSTLY 5 4.52 8.62 3.07 86 MIME_HTML_ONLY_MULTI 5 3.17 3.45 3.07 87 MIME_QP_LONG_LINE 5 3.62 5.17 3.07 88 XMBody_78 5 5.88 13.79 3.07 89 TR_XM_SpammyRelay 5 6.79 17.24 3.07 90 FVGT_m_MULTI_ODD_EMAIL 4 2.26 1.72 2.45 91 XM_ZIP 4 1.81 0.00 2.45 92 XMGappySubj_01 4 1.81 0.00 2.45 93 XM_OfRef6 4 1.81 0.00 2.45 94 XM_H_Trusted_IP 4 1.81 0.00 2.45 95 XM_B_SpammyTLD 4 3.17 5.17 2.45 96 T_XMDrugObfuBody_14 4 2.71 3.45 2.45 97 BAYES_20 4 2.26 1.72 2.45 98 HTML_IMAGE_RATIO_08 4 2.71 3.45 2.45 99 XM_H_PHPMailer 4 1.81 0.00 2.45 100 HTML_IMAGE_ONLY_28 4 2.26 1.72 2.45 101 TR_XM_SB_Phish 4 1.81 0.00 2.45 102 XMSubPhish11 4 1.81 0.00 2.45 103 XMNoVowels 3 2.26 3.45 1.84 104 RCVD_IN_IADB_LISTED 3 1.81 1.72 1.84 105 XM_DIRTYINTL 3 3.17 6.90 1.84 106 XM_DK_Undo_02 3 7.24 22.41 1.84 107 HTML_IMAGE_ONLY_32 3 1.81 1.72 1.84 108 RCVD_IN_RP_CERTIFIED 3 1.36 0.00 1.84 109 TR_XM_UnparsRelay 3 3.62 8.62 1.84 110 HTML_FONT_FACE_BAD 3 1.36 0.00 1.84 111 BAYES_95 3 2.71 5.17 1.84 112 XM_Body_Obfu01 3 1.81 1.72 1.84 113 TM2_M_URI_OPT_OUT 3 2.71 5.17 1.84 114 FROM_GOV_SPOOF 3 1.36 0.00 1.84 115 RCVD_IN_RP_SAFE 3 1.36 0.00 1.84 116 TR_Symld_Words 3 1.36 0.00 1.84 117 XM_B_Investor 3 4.07 10.34 1.84 118 SUBJ_ALL_CAPS 3 3.17 6.90 1.84 119 XM_B_SpammyWords4 3 1.36 0.00 1.84 120 BAYES_99 3 8.60 27.59 1.84 121 RCVD_IN_IADB_SPF 3 1.81 1.72 1.84 122 TR_XM_SpammyWords5 3 3.17 6.90 1.84 123 XMBody_95 3 1.36 0.00 1.84 124 XMBody_17 2 0.90 0.00 1.23 125 IN_HORDE_ADDRESS_BOOK 2 0.90 0.00 1.23 126 TR_XM_Undi_Recip2 2 0.90 0.00 1.23 127 RCVD_IN_VALIDITY_CERTIFIED 2 0.90 0.00 1.23 128 RELAYCOUNTRY_CN 2 0.90 0.00 1.23 129 HDRS_MISSP 2 0.90 0.00 1.23 130 XM_B_SEO 2 0.90 0.00 1.23 131 TR_XM_SpoofStaff 2 0.90 0.00 1.23 132 TR_XM_SpoofPhishAttach 2 0.90 0.00 1.23 133 XM_H_PHPOS_M 2 0.90 0.00 1.23 134 SHORT_SHORTNER 2 0.90 0.00 1.23 135 XM_PDF 2 1.36 1.72 1.23 136 RCVD_IN_IADB_DK 2 1.36 1.72 1.23 137 TR_XM_PSC1 2 0.90 0.00 1.23 138 XM_H_PHPOS 2 0.90 0.00 1.23 139 RCVD_IN_VALIDITY_SAFE 2 0.90 0.00 1.23 140 T_Symld_Words_02 2 0.90 0.00 1.23 141 TR_XM_PHPForged 2 0.90 0.00 1.23 142 URI_HEX 2 0.90 0.00 1.23 143 TooManyTo_003 2 1.36 1.72 1.23 144 KHOP_HELO_FCRDNS 2 4.07 12.07 1.23 145 TM2_M_VERY_LONG_WORD 2 1.36 1.72 1.23 146 XM_H_Undi_Recip 2 1.81 3.45 1.23 147 XMSpoofStaff2 2 0.90 0.00 1.23 148 RELAYCOUNTRY_AU 2 1.81 3.45 1.23 149 XM_H_SpoofStaff4 2 0.90 0.00 1.23 150 RELAYCOUNTRY_SG 2 0.90 0.00 1.23 151 XM_ZohoDesk1 2 0.90 0.00 1.23 152 MISSING_HEADERS 2 1.36 1.72 1.23 153 TR_XM_FormFill2 2 0.90 0.00 1.23 154 TooManyTo_005 2 0.90 0.00 1.23 155 TR_XM_PHPDW 2 0.90 0.00 1.23 156 XM_GoogleGroups 2 0.90 0.00 1.23 157 TooManyTo_004 2 1.36 1.72 1.23 158 BAYES_999 2 5.43 17.24 1.23 159 RCVD_IN_IADB_SENDERID 2 1.36 1.72 1.23 160 XMSexyCombo_05 2 2.71 6.90 1.23 161 XMPhish14 2 0.90 0.00 1.23 162 SHORT_URI_2 2 0.90 0.00 1.23 163 TO_EQ_FM_DIRECT_MX 1 0.45 0.00 0.61 164 BAYES_05 1 0.45 0.00 0.61 165 XMHTMLBadTable_001 1 0.45 0.00 0.61 166 XMSubMetaSxObfu_02 1 0.45 0.00 0.61 167 MIXED_CENTER_CASE 1 0.90 1.72 0.61 168 RELAYCOUNTRY_FR 1 1.36 3.45 0.61 169 TR_LOTS_OF_MONEY3 1 0.45 0.00 0.61 170 HTML_IMAGE_ONLY_16 1 0.45 0.00 0.61 171 T_OBFU_PDF_ATTACH 1 0.45 0.00 0.61 172 TVD_RCVD_IP 1 0.45 0.00 0.61 173 REMOVE_ES_01 1 0.45 0.00 0.61 174 FORGED_RELAY_MUA_TO_MX 1 0.45 0.00 0.61 175 MY_SERVERS_FOUND 1 0.45 0.00 0.61 176 HELO_NO_DOMAIN 1 0.45 0.00 0.61 177 BODY_URI_ONLY 1 0.45 0.00 0.61 178 XMCapTrack 1 0.45 0.00 0.61 179 XM_B_DNDMA 1 0.45 0.00 0.61 180 XM_DK_Undo_01 1 1.36 3.45 0.61 181 LONG_JUNK_URI 1 0.90 1.72 0.61 182 HELO_NODOT 1 0.90 1.72 0.61 183 T_FILL_THIS_FORM_SHORT 1 0.45 0.00 0.61 184 XMSubMetaSxObfu_03 1 0.45 0.00 0.61 185 XMPhish08 1 0.90 1.72 0.61 186 TR_XM_NoHeaderRelay 1 2.71 8.62 0.61 187 TR_XM_DKIM_Undo 1 3.62 12.07 0.61 188 XMBody_03 1 0.90 1.72 0.61 189 XM_ShortIntro_01 1 0.45 0.00 0.61 190 TR_XM_Base64_C 1 0.45 0.00 0.61 191 FSL_HELO_NON_FQDN_1 1 0.90 1.72 0.61 192 TR_XM_InvalidRelay 1 2.71 8.62 0.61 193 NO_DNS_FOR_FROM 1 0.90 1.72 0.61 194 TR_XM_SpammyWords2 1 0.90 1.72 0.61 195 RCVD_IN_IADB_VOUCHED 1 0.45 0.00 0.61 196 XMPhish30 1 0.90 1.72 0.61 197 XM_Body_Dirty_Words_01 1 0.90 1.72 0.61 198 XMBSHREFv2 1 0.45 0.00 0.61 199 FROM_EXCESS_BASE64 1 0.90 1.72 0.61 200 EXCLAMACION_ES 1 0.45 0.00 0.61 ----------------------------------------------------------------------