Email: 242 Autolearn: 0 AvgScore: 1.27 AvgScanTime: 3.64 sec Spam: 34 Autolearn: 0 AvgScore: 12.62 AvgScanTime: 2.98 sec Ham: 208 Autolearn: 0 AvgScore: -0.59 AvgScanTime: 3.74 sec Time Spent Running SA: 0.24 hours Time Spent Processing Spam: 0.03 hours Time Spent Processing Ham: 0.22 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 30 92.56 88.24 93.27 2 HTML_MESSAGE 30 70.66 88.24 67.79 3 T_SCC_BODY_TEXT_LINE 27 82.64 79.41 83.17 4 DKIM_SIGNED 24 65.29 70.59 64.42 5 XM_DK_Pass 24 63.22 70.59 62.02 6 DKIM_VALID 24 50.00 70.59 46.63 7 RELAYCOUNTRY_US 24 71.49 70.59 71.63 8 XM_B_Unicode 23 60.74 67.65 59.62 9 DKIM_VALID_AU 15 32.64 44.12 30.77 10 XM_B_SpammyWords 14 41.32 41.18 41.35 11 XM_B_Unicode3 14 41.74 41.18 41.83 12 FVGT_m_MULTI_ODD 13 27.27 38.24 25.48 13 XMListUnsubscribeExists 12 37.19 35.29 37.50 14 XM_DK_Undo_02 11 7.85 32.35 3.85 15 RCVD_IN_MSPIKE_H2 11 19.42 32.35 17.31 16 XM_B_Unsub 11 12.81 32.35 9.62 17 TR_XM_BayesUnsub 11 11.16 32.35 7.69 18 T_KAM_HTML_FONT_INVALID 11 16.12 32.35 13.46 19 RELAYCOUNTRY_META 11 6.61 32.35 2.40 20 BAYES_50 10 45.87 29.41 48.56 21 BAYES_99 10 6.20 29.41 2.40 22 BAYES_999 9 5.37 26.47 1.92 23 UNPARSEABLE_RELAY 9 12.81 26.47 10.58 24 MIME_HTML_ONLY 9 21.49 26.47 20.67 25 LOC_TINY_FONT_1 9 33.06 26.47 34.13 26 XM_Body_Dirty_Words 8 9.50 23.53 7.21 27 DKIM_VALID_EF 8 27.27 23.53 27.88 28 TR_XM_UnparsRelay 8 4.55 23.53 1.44 29 XM_Multi_Part_URI 7 28.51 20.59 29.81 30 HTML_FONT_LOW_CONTRAST 7 32.23 20.59 34.13 31 UNTRUSTED_Relay 7 3.31 20.59 0.48 32 XM_B_SpammyWords2 7 15.70 20.59 14.90 33 BAYES_80 6 4.13 17.65 1.92 34 T_TM2_M_HEADER_IN_MSG 6 17.77 17.65 17.79 35 BAYES_95 5 2.89 14.71 0.96 36 LOTS_OF_MONEY 5 4.96 14.71 3.37 37 XM_H_Long_From01 5 4.55 14.71 2.88 38 BOTNET 5 2.89 14.71 0.96 39 XMSubLong 4 36.36 11.76 40.38 40 XM_H_Undi_Recip 4 2.07 11.76 0.48 41 T_REMOTE_IMAGE 4 7.02 11.76 6.25 42 TR_DCC_Bayes_99 4 1.65 11.76 0.00 43 BOTNET_IPINHOSTNAME 4 4.55 11.76 3.37 44 UNSUB_GOOG_FORM 4 1.65 11.76 0.00 45 XM_DK_Undo_01 4 1.65 11.76 0.00 46 DCC_CHECK 4 7.44 11.76 6.73 47 XM_DIRTYINTL 3 2.07 8.82 0.96 48 KHOP_HELO_FCRDNS 3 1.24 8.82 0.00 49 XM_UncommonTLD01 3 7.02 8.82 6.73 50 TM2_M_VERY_LONG_WORD 3 1.65 8.82 0.48 51 XMCapTrack 3 1.24 8.82 0.00 52 TR_XM_DKIM_Undo 3 2.07 8.82 0.96 53 HTML_IMAGE_RATIO_02 3 2.89 8.82 1.92 54 TR_XM_SpammyRelay 3 2.48 8.82 1.44 55 MIME_HTML_MOSTLY 3 2.48 8.82 1.44 56 SUBJ_ALL_CAPS 3 1.65 8.82 0.48 57 TR_XM_SpammyWords4 3 1.65 8.82 0.48 58 XM_Evil_Numbers_Gen 3 4.13 8.82 3.37 59 TR_Caps_n_Bayes_99 2 0.83 5.88 0.00 60 TR_XM_NoHeaderRelay 2 1.24 5.88 0.48 61 XMLngstWrd_01 2 0.83 5.88 0.00 62 XM_UB80 2 0.83 5.88 0.00 63 MISSING_MIME_HB_SEP 2 0.83 5.88 0.00 64 TR_XM_MSPIKECOMBO 2 0.83 5.88 0.00 65 TO_MALFORMED 2 4.96 5.88 4.81 66 LONG_JUNK_URI2 2 0.83 5.88 0.00 67 TR_XM_PhishingBody 2 2.07 5.88 1.44 68 T_XMDrugObfuBody_14 2 1.65 5.88 0.96 69 BAYES_60 2 10.33 5.88 11.06 70 XM_B_SpammyTLD 2 2.89 5.88 2.40 71 XMStockSpam_06 2 2.07 5.88 1.44 72 LONG_JUNK_URI 2 0.83 5.88 0.00 73 FROM_EXCESS_BASE64 2 1.24 5.88 0.48 74 BOTNET_NORDNS 2 0.83 5.88 0.00 75 MSGID_FROM_MTA_HEADER 2 1.24 5.88 0.48 76 T_STY_INVIS_DIRECT 2 0.83 5.88 0.00 77 RCVD_IN_MSPIKE_BL 2 0.83 5.88 0.00 78 HDRS_MISSP 2 1.65 5.88 0.96 79 XMLngstWrd_00 2 1.24 5.88 0.48 80 RELAYCOUNTRY_FR 2 1.24 5.88 0.48 81 XM_SPF_SoftFail 2 2.07 5.88 1.44 82 RCVD_IN_VALIDITY_RPBL 2 0.83 5.88 0.00 83 XM_UB99 2 0.83 5.88 0.00 84 ANY_BOUNCE_MESSAGE 2 12.40 5.88 13.46 85 XM_B_SpammyWords3 2 9.50 5.88 10.10 86 DATE_IN_PAST_06_12 2 0.83 5.88 0.00 87 SCC_BODY_URI_ONLY 2 3.72 5.88 3.37 88 ALL_TRUSTED 2 23.55 5.88 26.44 89 URIBL_DBL_SPAM 2 0.83 5.88 0.00 90 XMSexyCombo_05 2 2.07 5.88 1.44 91 HTML_IMAGE_ONLY_04 2 0.83 5.88 0.00 92 RELAYCOUNTRY_FI 2 0.83 5.88 0.00 93 XM_UB999 2 0.83 5.88 0.00 94 MPART_ALT_DIFF_COUNT 2 1.24 5.88 0.48 95 BOUNCE_MESSAGE 2 12.40 5.88 13.46 96 FROM_SUSPICIOUS_NTLD_FP 1 0.41 2.94 0.00 97 RELAYCOUNTRY_MY 1 0.41 2.94 0.00 98 XMDateMe_00 1 1.24 2.94 0.96 99 RCVD_IN_MSPIKE_L5 1 0.41 2.94 0.00 100 XM_H_PHPOS 1 0.41 2.94 0.00 101 XMBrknScrpt_02 1 1.24 2.94 0.96 102 FORGED_OUTLOOK_HTML 1 0.41 2.94 0.00 103 TR_XM_PHPDW 1 0.41 2.94 0.00 104 T_PDS_PRO_TLD 1 0.41 2.94 0.00 105 FROM_MISSP_MSFT 1 0.41 2.94 0.00 106 RCVD_IN_MSPIKE_WL 1 13.64 2.94 15.38 107 RCVD_IN_PSBL 1 0.41 2.94 0.00 108 XM_CamelCaseFrm001 1 1.24 2.94 0.96 109 LONG_JUNK_URI3 1 0.41 2.94 0.00 110 NSL_RCVD_FROM_USER 1 0.41 2.94 0.00 111 TO_NO_BRKTS_FROM_MSSP 1 0.83 2.94 0.48 112 FROM_MISSP_EH_MATCH 1 0.41 2.94 0.00 113 HELO_DYNAMIC_IPADDR 1 0.41 2.94 0.00 114 FORGED_OUTLOOK_TAGS 1 0.41 2.94 0.00 115 ADVANCE_FEE_4_NEW_MONEY 1 0.41 2.94 0.00 116 PHP_SCRIPT 1 0.41 2.94 0.00 117 AXB_XMAILER_MIMEOLE_OL_024C2 1 0.41 2.94 0.00 118 TR_XM_DK_Bayes 1 17.77 2.94 20.19 119 TR_XM_BayesRelay 1 0.41 2.94 0.00 120 FORGED_MUA_OUTLOOK 1 0.41 2.94 0.00 121 TR_Symld_Words 1 2.89 2.94 2.88 122 NUMERIC_HTTP_ADDR 1 1.24 2.94 0.96 123 XM_Body_Dirty_Words_02 1 0.41 2.94 0.00 124 T_XMDrugObfuBody_03 1 0.41 2.94 0.00 125 TO_NO_BRKTS_MSFT 1 0.41 2.94 0.00 126 XM_SendGrid 1 5.79 2.94 6.25 127 T_FILL_THIS_FORM_SHORT 1 0.41 2.94 0.00 128 TR_XM_MaxWHORU 1 0.41 2.94 0.00 129 T_TooManySym_01 1 7.44 2.94 8.17 130 TR_XM_Base64_M1 1 0.41 2.94 0.00 131 NOT_SPAM 1 0.41 2.94 0.00 132 RDNS_DYNAMIC 1 0.41 2.94 0.00 133 XM_UB50 1 0.83 2.94 0.48 134 TR_XM_DK_Bayes1 1 4.55 2.94 4.81 135 PDS_RDNS_DYNAMIC_FP 1 0.41 2.94 0.00 136 RCVD_IN_MSPIKE_L3 1 0.41 2.94 0.00 137 TooManyTo_003 1 0.41 2.94 0.00 138 XMStrtUSub 1 11.98 2.94 13.46 139 LotsOfNums_01 1 16.94 2.94 19.23 140 HTML_IMAGE_ONLY_28 1 0.41 2.94 0.00 141 MISSING_HEADERS 1 0.41 2.94 0.00 142 XMPhish08 1 0.41 2.94 0.00 143 FROM_MISSPACED 1 0.41 2.94 0.00 144 TR_XM_FormFill 1 0.41 2.94 0.00 145 RCVD_IN_MSPIKE_H3 1 6.20 2.94 6.73 146 TO_NO_BRKTS_DYNIP 1 0.41 2.94 0.00 147 FROM_GOV_SPOOF 1 2.89 2.94 2.88 148 XFER_LOTSA_MONEY 1 0.41 2.94 0.00 149 BAYES_00 1 20.25 2.94 23.08 150 NO_DNS_FOR_FROM 1 0.41 2.94 0.00 151 PHP_ORIG_SCRIPT 1 0.41 2.94 0.00 152 XMSubMetaSx_00 1 1.24 2.94 0.96 153 XMNumbers 1 4.96 2.94 5.29 154 TR_UG_Sexy_Spam 1 0.41 2.94 0.00 155 TO_EQ_FM_DOM_HTML_ONLY 1 0.41 2.94 0.00 156 TooManyTo_001 1 2.48 2.94 2.40 157 XM_B_SexDrugs1 1 0.41 2.94 0.00 158 TR_XM_DK_Unsub 1 6.61 2.94 7.21 159 HELO_LOCALHOST 1 0.41 2.94 0.00 160 XMBody_78 1 0.41 2.94 0.00 161 FSL_HELO_NON_FQDN_1 1 0.41 2.94 0.00 162 OBFU_TEXT_ATTACH 1 0.41 2.94 0.00 163 XMSolicitRefs_0 1 0.41 2.94 0.00 164 XM_UB60 1 0.41 2.94 0.00 165 FROM_SUSPICIOUS_NTLD 1 0.41 2.94 0.00 166 TR_XM_FormFill2 1 0.41 2.94 0.00 167 DEAR_BENEFICIARY 1 0.41 2.94 0.00 168 LOADSA_MONEY_COMBO 1 0.41 2.94 0.00 169 TR_LOTS_OF_MONEY3 1 0.41 2.94 0.00 170 XM_Body_Dirty_Words_01 1 0.41 2.94 0.00 171 RELAYCOUNTRY_BE 1 0.41 2.94 0.00 172 TR_XM_InvalidRelay 1 0.41 2.94 0.00 173 MONEY_FROM_MISSP 1 0.41 2.94 0.00 174 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.83 2.94 0.48 175 TR_XM_SpammyWords5 1 1.24 2.94 0.96 176 URI_HEX 1 0.41 2.94 0.00 177 HELO_NODOT 1 0.41 2.94 0.00 178 URIBL_BLACK 1 0.41 2.94 0.00 179 HK_SCAM 1 0.41 2.94 0.00 180 RELAYCOUNTRY_CA 1 1.24 2.94 0.96 181 TooManyTo_004 1 0.41 2.94 0.00 182 RELAYCOUNTRY_HK 1 0.41 2.94 0.00 183 SHORT_URI_3 1 0.41 2.94 0.00 184 FSL_BULK_SIG 1 3.72 2.94 3.85 185 TooManyTo_002 1 0.41 2.94 0.00 186 ADVANCE_FEE_3_NEW_MONEY 1 0.41 2.94 0.00 187 RCVD_IN_VALIDITY_SAFE 1 1.24 2.94 0.96 188 FORM_FRAUD_3 1 0.41 2.94 0.00 189 XMSubMetaSxObfu_02 1 0.41 2.94 0.00 190 RELAYCOUNTRY_VN 1 0.41 2.94 0.00 191 FROM_MISSP_USER 1 0.41 2.94 0.00 192 TR_XM_SpammyWords2 1 0.41 2.94 0.00 193 TR_LOTS_OF_MONEY1 1 0.41 2.94 0.00 194 XM_E_VN 1 0.41 2.94 0.00 195 FSL_NEW_HELO_USER 1 0.41 2.94 0.00 196 XM_B_Phish66 1 0.41 2.94 0.00 197 TR_XM_DK_Bayes2 1 2.07 2.94 1.92 198 NORMAL_HTTP_TO_IP 1 0.41 2.94 0.00 199 DATE_IN_FUTURE_06_12 1 0.41 2.94 0.00 200 T_TooManySym_02 1 6.61 2.94 7.21 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 194 92.56 88.24 93.27 2 T_SCC_BODY_TEXT_LINE 173 82.64 79.41 83.17 3 RELAYCOUNTRY_US 149 71.49 70.59 71.63 4 HTML_MESSAGE 141 70.66 88.24 67.79 5 DKIM_SIGNED 134 65.29 70.59 64.42 6 XM_DK_Pass 129 63.22 70.59 62.02 7 XM_B_Unicode 124 60.74 67.65 59.62 8 BAYES_50 101 45.87 29.41 48.56 9 DKIM_VALID 97 50.00 70.59 46.63 10 XM_B_Unicode3 87 41.74 41.18 41.83 11 XM_B_SpammyWords 86 41.32 41.18 41.35 12 XMSubLong 84 36.36 11.76 40.38 13 XMListUnsubscribeExists 78 37.19 35.29 37.50 14 LOC_TINY_FONT_1 71 33.06 26.47 34.13 15 HTML_FONT_LOW_CONTRAST 71 32.23 20.59 34.13 16 DKIM_VALID_AU 64 32.64 44.12 30.77 17 XM_Multi_Part_URI 62 28.51 20.59 29.81 18 DKIM_VALID_EF 58 27.27 23.53 27.88 19 ALL_TRUSTED 55 23.55 5.88 26.44 20 FVGT_m_MULTI_ODD 53 27.27 38.24 25.48 21 BAYES_00 48 20.25 2.94 23.08 22 MIME_HTML_ONLY 43 21.49 26.47 20.67 23 TR_XM_DK_Bayes 42 17.77 2.94 20.19 24 LotsOfNums_01 40 16.94 2.94 19.23 25 DKIM_INVALID 37 15.29 0.00 17.79 26 T_TM2_M_HEADER_IN_MSG 37 17.77 17.65 17.79 27 RCVD_IN_MSPIKE_H2 36 19.42 32.35 17.31 28 RCVD_IN_MSPIKE_WL 32 13.64 2.94 15.38 29 XM_B_SpammyWords2 31 15.70 20.59 14.90 30 BOUNCE_MESSAGE 28 12.40 5.88 13.46 31 T_KAM_HTML_FONT_INVALID 28 16.12 32.35 13.46 32 ANY_BOUNCE_MESSAGE 28 12.40 5.88 13.46 33 XMStrtUSub 28 11.98 2.94 13.46 34 XM_B_REG_HTML 24 9.92 0.00 11.54 35 TM2_M_URI_OPT_OUT 24 9.92 0.00 11.54 36 BAYES_60 23 10.33 5.88 11.06 37 UNPARSEABLE_RELAY 22 12.81 26.47 10.58 38 XM_B_SpammyWords3 21 9.50 5.88 10.10 39 XM_B_Unsub 20 12.81 32.35 9.62 40 XM_DKIMWhitelistDomains 18 7.44 0.00 8.65 41 T_TooManySym_01 17 7.44 2.94 8.17 42 TR_XM_BayesUnsub 16 11.16 32.35 7.69 43 TR_XM_COVIDMETA4 16 6.61 0.00 7.69 44 RCVD_IN_MSPIKE_H5 16 6.61 0.00 7.69 45 T_TooManySym_02 15 6.61 2.94 7.21 46 TR_XM_DK_Unsub 15 6.61 2.94 7.21 47 MPART_ALT_DIFF 15 6.20 0.00 7.21 48 XM_Body_Dirty_Words 15 9.50 23.53 7.21 49 DCC_CHECK 14 7.44 11.76 6.73 50 RCVD_IN_MSPIKE_H3 14 6.20 2.94 6.73 51 XM_UncommonTLD01 14 7.02 8.82 6.73 52 XM_SendGrid 13 5.79 2.94 6.25 53 T_REMOTE_IMAGE 13 7.02 11.76 6.25 54 USER_IN_DEF_DKIM_WL 12 4.96 0.00 5.77 55 BAYES_05 11 4.55 0.00 5.29 56 XMNumbers 11 4.96 2.94 5.29 57 INVALID_MSGID 11 4.55 0.00 5.29 58 MSGID_NOFQDN1 10 4.13 0.00 4.81 59 TR_XM_DK_Bayes1 10 4.55 2.94 4.81 60 TO_MALFORMED 10 4.96 5.88 4.81 61 IN_ZIMBRA_NJ_WHITELIST 9 3.72 0.00 4.33 62 UPGRADE_MAILBOX 9 3.72 0.00 4.33 63 FSL_BULK_SIG 8 3.72 2.94 3.85 64 BAYES_40 8 3.31 0.00 3.85 65 HTML_IMAGE_RATIO_04 8 3.31 0.00 3.85 66 XM_DK_Undo_02 8 7.85 32.35 3.85 67 XM_Evil_Numbers_Gen 7 4.13 8.82 3.37 68 SCC_BODY_URI_ONLY 7 3.72 5.88 3.37 69 LOTS_OF_MONEY 7 4.96 14.71 3.37 70 TVD_SPACE_RATIO 7 2.89 0.00 3.37 71 HTML_IMAGE_RATIO_06 7 2.89 0.00 3.37 72 BOTNET_IPINHOSTNAME 7 4.55 11.76 3.37 73 XM_H_Long_From01 6 4.55 14.71 2.88 74 FROM_GOV_SPOOF 6 2.89 2.94 2.88 75 BAYES_20 6 2.48 0.00 2.88 76 SHORT_SHORTNER 6 2.48 0.00 2.88 77 TR_Symld_Words 6 2.89 2.94 2.88 78 XM_H_PHPMailer 6 2.48 0.00 2.88 79 RELAYCOUNTRY_META 5 6.61 32.35 2.40 80 HTML_MIME_NO_HTML_TAG 5 2.07 0.00 2.40 81 BAYES_99 5 6.20 29.41 2.40 82 TooManyTo_001 5 2.48 2.94 2.40 83 T_TooManySym_03 5 2.07 0.00 2.40 84 XM_B_SpammyTLD 5 2.89 5.88 2.40 85 TR_XM_DK_SendGrid 5 2.07 0.00 2.40 86 TR_XM_DK_Bayes2 4 2.07 2.94 1.92 87 FVGT_m_MULTI_ODD_EMAIL 4 1.65 0.00 1.92 88 HTML_IMAGE_RATIO_02 4 2.89 8.82 1.92 89 HTML_FONT_FACE_BAD 4 1.65 0.00 1.92 90 XMGappySubj_01 4 1.65 0.00 1.92 91 XM_H_Trusted_IP 4 1.65 0.00 1.92 92 BAYES_80 4 4.13 17.65 1.92 93 BAYES_999 4 5.37 26.47 1.92 94 MIME_HTML_ONLY_MULTI 3 1.24 0.00 1.44 95 XMSexyCombo_05 3 2.07 5.88 1.44 96 MIME_HTML_MOSTLY 3 2.48 8.82 1.44 97 TR_XM_SpammyRelay 3 2.48 8.82 1.44 98 XM_SPF_SoftFail 3 2.07 5.88 1.44 99 HTML_IMAGE_RATIO_08 3 1.24 0.00 1.44 100 TR_XM_UnparsRelay 3 4.55 23.53 1.44 101 XMStockSpam_06 3 2.07 5.88 1.44 102 TR_XM_PhishingBody 3 2.07 5.88 1.44 103 RCVD_IN_MSPIKE_H4 2 0.83 0.00 0.96 104 BOTNET 2 2.89 14.71 0.96 105 IN_HORDE_ADDRESS_BOOK 2 0.83 0.00 0.96 106 RCVD_IN_VALIDITY_SAFE 2 1.24 2.94 0.96 107 XM_B_Unsub2 2 0.83 0.00 0.96 108 RELAYCOUNTRY_CA 2 1.24 2.94 0.96 109 XMPhish30 2 0.83 0.00 0.96 110 TR_XM_DKIM_Undo 2 2.07 8.82 0.96 111 TR_XM_SpammyWords5 2 1.24 2.94 0.96 112 HDRS_MISSP 2 1.65 5.88 0.96 113 RCVD_IN_VALIDITY_CERTIFIED 2 0.83 0.00 0.96 114 XMSubMetaSx_00 2 1.24 2.94 0.96 115 SpammyFromTLD_01 2 0.83 0.00 0.96 116 SHORT_URI_2 2 0.83 0.00 0.96 117 XM_B_DNDMA 2 0.83 0.00 0.96 118 WEIRD_PORT 2 0.83 0.00 0.96 119 BAYES_95 2 2.89 14.71 0.96 120 XM_ZIP 2 0.83 0.00 0.96 121 MIME_QP_LONG_LINE 2 0.83 0.00 0.96 122 T_XMDrugObfuBody_14 2 1.65 5.88 0.96 123 XM_PDF 2 0.83 0.00 0.96 124 XMDiploma_00 2 0.83 0.00 0.96 125 NUMERIC_HTTP_ADDR 2 1.24 2.94 0.96 126 XM_CamelCaseFrm001 2 1.24 2.94 0.96 127 XMBrknScrpt_02 2 1.24 2.94 0.96 128 XM_DIRTYINTL 2 2.07 8.82 0.96 129 XMDateMe_00 2 1.24 2.94 0.96 130 XMPhish14 1 0.41 0.00 0.48 131 RCVD_DOTEDU_SHORT 1 0.41 0.00 0.48 132 MPART_ALT_DIFF_COUNT 1 1.24 5.88 0.48 133 TR_XM_SPAMCOP 1 0.41 0.00 0.48 134 TR_XM_SpammyWords4 1 1.65 8.82 0.48 135 HTML_FONT_TINY_NORDNS 1 0.41 0.00 0.48 136 MAILING_LIST_MULTI 1 0.41 0.00 0.48 137 T_XMDrugObfuBody_08 1 0.41 0.00 0.48 138 SUBJ_ALL_CAPS 1 1.65 8.82 0.48 139 TO_NO_BRKTS_HTML_IMG 1 0.41 0.00 0.48 140 TR_XM_Spammywords 1 0.41 0.00 0.48 141 UNTRUSTED_Relay 1 3.31 20.59 0.48 142 USER_IN_WELCOMELIST 1 0.41 0.00 0.48 143 T_XMHurry_00 1 0.41 0.00 0.48 144 XMSubMetaSxObfu_03 1 0.41 0.00 0.48 145 URI_NOVOWEL 1 0.41 0.00 0.48 146 XMSubject_48 1 0.41 0.00 0.48 147 RELAYCOUNTRY_FR 1 1.24 5.88 0.48 148 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.83 2.94 0.48 149 XMHTML_After_End 1 0.41 0.00 0.48 150 XMLngstWrd_00 1 1.24 5.88 0.48 151 SHORTENED_URL_HREF 1 0.41 0.00 0.48 152 LongTLD 1 0.41 0.00 0.48 153 FROM_GOV_DKIM_AU 1 0.41 0.00 0.48 154 USER_IN_WHITELIST 1 0.41 0.00 0.48 155 XM_B_Phish_Phrases 1 0.41 0.00 0.48 156 MSGID_FROM_MTA_HEADER 1 1.24 5.88 0.48 157 XM_Lotto 1 0.41 0.00 0.48 158 XM_S_SubURI 1 0.41 0.00 0.48 159 RELAYCOUNTRY_AU 1 0.41 0.00 0.48 160 FROM_EXCESS_BASE64 1 1.24 5.88 0.48 161 PDS_OTHER_BAD_TLD 1 0.41 0.00 0.48 162 XMHTMLBadTable_001 1 0.41 0.00 0.48 163 HTML_FONT_SIZE_HUGE 1 0.41 0.00 0.48 164 DRUG_ED_SILD 1 0.41 0.00 0.48 165 RCVD_IN_BL_SPAMCOP_NET 1 0.41 0.00 0.48 166 XM_S_SpammyWords 1 0.41 0.00 0.48 167 XM_B_Investor 1 0.41 0.00 0.48 168 RELAYCOUNTRY_IE 1 0.41 0.00 0.48 169 XM_UB50 1 0.83 2.94 0.48 170 XMSubPhish11 1 0.41 0.00 0.48 171 XMSubMetaD_00 1 0.41 0.00 0.48 172 CTE_8BIT_MISMATCH 1 0.41 0.00 0.48 173 XMSubject_78 1 0.41 0.00 0.48 174 XMReplyNow 1 0.41 0.00 0.48 175 HTML_IMAGE_ONLY_24 1 0.41 0.00 0.48 176 XM_Dr_From 1 0.41 0.00 0.48 177 TM2_M_OBFU_COMMENT 1 0.41 0.00 0.48 178 TM2_M_VERY_LONG_WORD 1 1.65 8.82 0.48 179 XM_E_Blogspot 1 0.41 0.00 0.48 180 TR_Mismatch_TLD_01 1 0.41 0.00 0.48 181 TR_XM_SB_Phish 1 0.41 0.00 0.48 182 XM_B_COPY_HTML 1 0.41 0.00 0.48 183 URI_TRUNCATED 1 0.41 0.00 0.48 184 XMClaimOffer 1 0.41 0.00 0.48 185 TO_NO_BRKTS_FROM_MSSP 1 0.83 2.94 0.48 186 TR_XM_NoHeaderRelay 1 1.24 5.88 0.48 187 TO_NO_BRKTS_HTML_ONLY 1 0.41 0.00 0.48 188 XMBSHREFv2 1 0.41 0.00 0.48 189 XMSubject_09 1 0.41 0.00 0.48 190 NORDNS_LOW_CONTRAST 1 0.41 0.00 0.48 191 XM_H_Undi_Recip 1 2.07 11.76 0.48 192 XM_Body_Obfu01 1 0.41 0.00 0.48 ----------------------------------------------------------------------