Email: 157 Autolearn: 0 AvgScore: 2.83 AvgScanTime: 1.99 sec Spam: 38 Autolearn: 0 AvgScore: 13.63 AvgScanTime: 2.33 sec Ham: 119 Autolearn: 0 AvgScore: -0.61 AvgScanTime: 1.88 sec Time Spent Running SA: 0.09 hours Time Spent Processing Spam: 0.02 hours Time Spent Processing Ham: 0.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 36 75.80 94.74 69.75 2 DKIM_SIGNED 35 73.89 92.11 68.07 3 XM_DK_Pass 34 70.70 89.47 64.71 4 DKIM_VALID 33 69.43 86.84 63.87 5 T_SCC_BODY_TEXT_LINE 31 82.17 81.58 82.35 6 XMListUnsubscribeExists 26 44.59 68.42 36.97 7 DKIM_VALID_AU 25 54.14 65.79 50.42 8 RELAYCOUNTRY_US 25 70.06 65.79 71.43 9 XM_B_SpammyWords 25 42.04 65.79 34.45 10 XM_B_Unicode 24 59.87 63.16 58.82 11 DCC_CHECK 20 27.39 52.63 19.33 12 DKIM_VALID_EF 19 42.04 50.00 39.50 13 DCC_CHECK_NEGATIVE 18 72.61 47.37 80.67 14 LOC_TINY_FONT_1 17 27.39 44.74 21.85 15 HTML_FONT_LOW_CONTRAST 15 27.39 39.47 23.53 16 BAYES_50 14 57.96 36.84 64.71 17 RELAYCOUNTRY_META 14 18.47 36.84 12.61 18 XM_B_SpammyWords2 13 17.83 34.21 12.61 19 UNTRUSTED_Relay 13 12.74 34.21 5.88 20 TR_XM_DK_Unsub 13 25.48 34.21 22.69 21 XMSubLong 12 25.48 31.58 23.53 22 XM_B_Unicode3 12 29.30 31.58 28.57 23 BAYES_99 11 10.83 28.95 5.04 24 XM_DK_Undo_02 10 12.74 26.32 8.40 25 RCVD_IN_MSPIKE_H2 10 19.11 26.32 16.81 26 XM_Multi_Part_URI 10 17.20 26.32 14.29 27 FVGT_m_MULTI_ODD 10 31.21 26.32 32.77 28 BAYES_999 9 8.92 23.68 4.20 29 TR_XM_SpammyRelay 9 10.19 23.68 5.88 30 UNPARSEABLE_RELAY 9 14.65 23.68 11.76 31 MIME_HTML_MOSTLY 8 7.01 21.05 2.52 32 MPART_ALT_DIFF 8 5.10 21.05 0.00 33 TR_DCC_Bayes_99 7 6.37 18.42 2.52 34 SpammyFromTLD_01 7 6.37 18.42 2.52 35 T_KAM_HTML_FONT_INVALID 7 20.38 18.42 21.01 36 TR_XM_DKIM_Undo 6 4.46 15.79 0.84 37 URI_NOVOWEL 6 3.82 15.79 0.00 38 RELAYCOUNTRY_IN 6 3.82 15.79 0.00 39 XM_B_Investor 6 4.46 15.79 0.84 40 BAYES_95 6 4.46 15.79 0.84 41 MIME_HTML_ONLY 6 12.10 15.79 10.92 42 XM_B_Unsub 5 8.28 13.16 6.72 43 TR_XM_BayesUnsub 5 5.10 13.16 2.52 44 XM_UncommonTLD01 5 10.19 13.16 9.24 45 XM_Body_Dirty_Words 5 10.83 13.16 10.08 46 XM_UB95 5 3.18 13.16 0.00 47 FSL_BULK_SIG 5 7.64 13.16 5.88 48 TR_XM_SpammyWords2 4 2.55 10.53 0.00 49 T_XMDrugObfuBody_00 4 3.82 10.53 1.68 50 XMStrtUSub 4 7.64 10.53 6.72 51 XM_SendGrid 4 7.64 10.53 6.72 52 RELAYCOUNTRY_DE 4 2.55 10.53 0.00 53 ACT_NOW_CAPS 4 3.18 10.53 0.84 54 TR_XM_NoHeaderRelay 4 3.18 10.53 0.84 55 BAYES_80 4 4.46 10.53 2.52 56 XM_UB50 4 6.37 10.53 5.04 57 LotsOfNums_01 3 3.82 7.89 2.52 58 LOTS_OF_MONEY 3 3.18 7.89 1.68 59 TR_XM_InvalidRelay 3 1.91 7.89 0.00 60 TR_XM_SpammyWords4 3 3.18 7.89 1.68 61 SpammyFromTLD_02 3 3.18 7.89 1.68 62 XMNumbers 3 8.28 7.89 8.40 63 T_TM2_M_HEADER_IN_MSG 3 24.20 7.89 29.41 64 HTML_IMAGE_RATIO_06 3 3.82 7.89 2.52 65 TR_LOTS_OF_MONEY2 3 1.91 7.89 0.00 66 LONG_JUNK_URI3 3 3.18 7.89 1.68 67 RCVD_IN_MSPIKE_WL 3 21.66 7.89 26.05 68 XMSexyCombo_05 3 3.82 7.89 2.52 69 T_XMDrugObfuBody_08 3 1.91 7.89 0.00 70 XM_B_SpammyWords3 3 2.55 7.89 0.84 71 TR_XM_UnparsRelay 3 3.18 7.89 1.68 72 T_MONEY_PERCENT 3 1.91 7.89 0.00 73 RCVD_IN_MSPIKE_H5 2 10.83 5.26 12.61 74 XM_B_Phish66 2 3.18 5.26 2.52 75 TR_XM_PhishingBody 2 3.18 5.26 2.52 76 XM_DIRTYINTL 2 3.82 5.26 3.36 77 TR_XM_DK_SendGrid 2 2.55 5.26 1.68 78 XMSubNoVowel 2 1.27 5.26 0.00 79 SUBJ_ALL_CAPS 2 1.27 5.26 0.00 80 XM_UB99 2 1.27 5.26 0.00 81 TR_XM_SpammyWords5 2 2.55 5.26 1.68 82 HTML_IMAGE_RATIO_02 2 3.18 5.26 2.52 83 DKIM_INVALID 2 4.46 5.26 4.20 84 KHOP_HELO_FCRDNS 2 2.55 5.26 1.68 85 XM_UB999 2 1.27 5.26 0.00 86 TM2_M_VERY_LONG_WORD 2 2.55 5.26 1.68 87 BOTNET 2 2.55 5.26 1.68 88 RELAYCOUNTRY_FR 2 1.91 5.26 0.84 89 NO_DNS_FOR_FROM 2 1.91 5.26 0.84 90 TR_XM_MaxWHORU 2 1.27 5.26 0.00 91 XM_SPF_SoftFail 2 3.18 5.26 2.52 92 XMSubEmpty 2 1.27 5.26 0.00 93 XM_B_SpammyTLD 2 3.18 5.26 2.52 94 TVD_SPACE_RATIO 2 5.10 5.26 5.04 95 BAYES_20 2 1.91 5.26 0.84 96 XM_B_Phish_Phrases 2 3.18 5.26 2.52 97 RELAYCOUNTRY_RU 2 1.27 5.26 0.00 98 TooManyTo_003 1 1.91 2.63 1.68 99 LONGLN_LOW_CONTRAST 1 0.64 2.63 0.00 100 FROM_MISSP_USER 1 0.64 2.63 0.00 101 T_REMOTE_IMAGE 1 2.55 2.63 2.52 102 XM_B_SEO 1 0.64 2.63 0.00 103 BANG_GUAR 1 0.64 2.63 0.00 104 HK_SCAM 1 0.64 2.63 0.00 105 DKIM_ADSP_NXDOMAIN 1 0.64 2.63 0.00 106 TR_MetaPhish_Combo_01 1 1.91 2.63 1.68 107 TM2_M_URI_OPT_OUT 1 0.64 2.63 0.00 108 AXB_XMAILER_MIMEOLE_OL_024C2 1 0.64 2.63 0.00 109 TooManyTo_004 1 1.27 2.63 0.84 110 RELAYCOUNTRY_KR 1 1.27 2.63 0.84 111 TR_LOTS_OF_MONEY3 1 0.64 2.63 0.00 112 TO_NO_BRKTS_FROM_MSSP 1 0.64 2.63 0.00 113 SHORT_URI 1 0.64 2.63 0.00 114 TR_XM_INV_DKIM 1 0.64 2.63 0.00 115 HDR_ORDER_FTSDMCXX_NORDNS 1 0.64 2.63 0.00 116 FORGED_GMAIL_RCVD 1 0.64 2.63 0.00 117 FORM_FRAUD_5 1 0.64 2.63 0.00 118 URG_BIZ 1 0.64 2.63 0.00 119 PDS_RDNS_DYNAMIC_FP 1 0.64 2.63 0.00 120 TO_NO_BRKTS_MSFT 1 0.64 2.63 0.00 121 TooManyTo_002 1 2.55 2.63 2.52 122 FORGED_MUA_OUTLOOK 1 0.64 2.63 0.00 123 DATE_IN_PAST_06_12 1 0.64 2.63 0.00 124 XFER_LOTSA_MONEY 1 0.64 2.63 0.00 125 XM_Combo_Sbj 1 1.27 2.63 0.84 126 RDNS_DYNAMIC 1 0.64 2.63 0.00 127 HTML_IMAGE_RATIO_08 1 1.27 2.63 0.84 128 XM_ShortIntro_01 1 0.64 2.63 0.00 129 XM_S_SpammyWords 1 0.64 2.63 0.00 130 RCVD_IN_MSPIKE_H4 1 3.18 2.63 3.36 131 MONEY_FRAUD_8 1 0.64 2.63 0.00 132 MIXED_CENTER_CASE 1 0.64 2.63 0.00 133 T_FILL_THIS_FORM_SHORT 1 1.27 2.63 0.84 134 BOTNET_IPINHOSTNAME 1 6.37 2.63 7.56 135 TVD_PH_SEC 1 0.64 2.63 0.00 136 HELO_NO_DOMAIN 1 1.27 2.63 0.84 137 FSL_NEW_HELO_USER 1 0.64 2.63 0.00 138 XMBody_03 1 0.64 2.63 0.00 139 MILLION_HUNDRED 1 0.64 2.63 0.00 140 XM_UB80 1 1.27 2.63 0.84 141 FROM_MISSP_XPRIO 1 0.64 2.63 0.00 142 DEAR_SOMETHING 1 1.27 2.63 0.84 143 PDS_OTHER_BAD_TLD 1 0.64 2.63 0.00 144 MONEY_FROM_MISSP 1 0.64 2.63 0.00 145 OBFU_TEXT_ATTACH 1 0.64 2.63 0.00 146 RCVD_IN_VALIDITY_CERTIFIED 1 0.64 2.63 0.00 147 DKIM_ADSP_CUSTOM_MED 1 0.64 2.63 0.00 148 XM_B_Unsub2 1 0.64 2.63 0.00 149 HTML_IMAGE_RATIO_04 1 3.18 2.63 3.36 150 FONT_INVIS_HTML_NOHTML 1 0.64 2.63 0.00 151 NML_ADSP_CUSTOM_MED 1 0.64 2.63 0.00 152 XMBody_78 1 0.64 2.63 0.00 153 XMGppyBdWords 1 0.64 2.63 0.00 154 XM_DK_Undo_01 1 1.27 2.63 0.84 155 INVALID_DATE 1 0.64 2.63 0.00 156 FSL_CTYPE_WIN1251 1 0.64 2.63 0.00 157 SCC_BODY_URI_ONLY 1 5.73 2.63 6.72 158 FROM_MISSP_MSFT 1 0.64 2.63 0.00 159 RELAYCOUNTRY_CN 1 1.27 2.63 0.84 160 BOTNET_NORDNS 1 0.64 2.63 0.00 161 RELAYCOUNTRY_NL 1 1.91 2.63 1.68 162 DEAR_FRIEND 1 0.64 2.63 0.00 163 MONEY_FORM_SHORT 1 0.64 2.63 0.00 164 XMSubMetaSx_00 1 3.18 2.63 3.36 165 XMBody_17 1 3.18 2.63 3.36 166 FROM_EXCESS_BASE64 1 1.27 2.63 0.84 167 TR_XM_SPAMCOP 1 0.64 2.63 0.00 168 FONT_INVIS_LONG_LINE 1 0.64 2.63 0.00 169 FROM_MISSP_REPLYTO 1 0.64 2.63 0.00 170 XM_Dr_From 1 1.27 2.63 0.84 171 XM_UB60 1 0.64 2.63 0.00 172 XM_H_Long_From02 1 0.64 2.63 0.00 173 LOADSA_MONEY_COMBO 1 0.64 2.63 0.00 174 TR_XM_FormFill 1 0.64 2.63 0.00 175 TR_XM_MaxBayes 1 0.64 2.63 0.00 176 ADVANCE_FEE_5_NEW_MONEY 1 0.64 2.63 0.00 177 HELO_NODOT 1 1.27 2.63 0.84 178 HTML_MIME_NO_HTML_TAG 1 2.55 2.63 2.52 179 XM_BadFromFormat 1 0.64 2.63 0.00 180 XM_OfRef6 1 0.64 2.63 0.00 181 XMSubject_70 1 0.64 2.63 0.00 182 RCVD_IN_VALIDITY_SAFE 1 1.27 2.63 0.84 183 TR_XM_Base64_L1 1 0.64 2.63 0.00 184 NSL_RCVD_FROM_USER 1 0.64 2.63 0.00 185 XMHTML_After_End 1 1.27 2.63 0.84 186 FROM_SUSPICIOUS_NTLD_FP 1 0.64 2.63 0.00 187 TO_NO_BRKTS_DYNIP 1 0.64 2.63 0.00 188 LongTLD 1 0.64 2.63 0.00 189 BAYES_60 1 10.83 2.63 13.45 190 TR_Caps_n_Bayes_99 1 0.64 2.63 0.00 191 RCVD_IN_BL_SPAMCOP_NET 1 1.91 2.63 1.68 192 LONG_INVISIBLE_TEXT 1 0.64 2.63 0.00 193 FSL_HELO_NON_FQDN_1 1 0.64 2.63 0.00 194 FROM_SUSPICIOUS_NTLD 1 0.64 2.63 0.00 195 URIBL_SBL_A 1 0.64 2.63 0.00 196 HK_RANDOM_REPLYTO 1 0.64 2.63 0.00 197 XM_CamelCaseFrm001 1 1.27 2.63 0.84 198 TooManyTo_001 1 5.73 2.63 6.72 199 TR_XM_SEO4 1 0.64 2.63 0.00 200 XM_H_Long_From01 1 2.55 2.63 2.52 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 98 82.17 81.58 82.35 2 DCC_CHECK_NEGATIVE 96 72.61 47.37 80.67 3 RELAYCOUNTRY_US 85 70.06 65.79 71.43 4 HTML_MESSAGE 83 75.80 94.74 69.75 5 DKIM_SIGNED 81 73.89 92.11 68.07 6 BAYES_50 77 57.96 36.84 64.71 7 XM_DK_Pass 77 70.70 89.47 64.71 8 DKIM_VALID 76 69.43 86.84 63.87 9 XM_B_Unicode 70 59.87 63.16 58.82 10 DKIM_VALID_AU 60 54.14 65.79 50.42 11 DKIM_VALID_EF 47 42.04 50.00 39.50 12 XMListUnsubscribeExists 44 44.59 68.42 36.97 13 XM_B_SpammyWords 41 42.04 65.79 34.45 14 FVGT_m_MULTI_ODD 39 31.21 26.32 32.77 15 T_TM2_M_HEADER_IN_MSG 35 24.20 7.89 29.41 16 XM_B_Unicode3 34 29.30 31.58 28.57 17 RCVD_IN_MSPIKE_WL 31 21.66 7.89 26.05 18 HTML_FONT_LOW_CONTRAST 28 27.39 39.47 23.53 19 XMSubLong 28 25.48 31.58 23.53 20 TR_XM_DK_Unsub 27 25.48 34.21 22.69 21 LOC_TINY_FONT_1 26 27.39 44.74 21.85 22 T_KAM_HTML_FONT_INVALID 25 20.38 18.42 21.01 23 ALL_TRUSTED 24 15.29 0.00 20.17 24 DCC_CHECK 23 27.39 52.63 19.33 25 RCVD_IN_MSPIKE_H2 20 19.11 26.32 16.81 26 XM_Multi_Part_URI 17 17.20 26.32 14.29 27 BAYES_60 16 10.83 2.63 13.45 28 RELAYCOUNTRY_META 15 18.47 36.84 12.61 29 RCVD_IN_MSPIKE_H5 15 10.83 5.26 12.61 30 XM_B_SpammyWords2 15 17.83 34.21 12.61 31 XM_DKIMWhitelistDomains 15 9.55 0.00 12.61 32 T_TooManySym_01 14 8.92 0.00 11.76 33 UNPARSEABLE_RELAY 14 14.65 23.68 11.76 34 T_TooManySym_02 13 8.28 0.00 10.92 35 MIME_HTML_ONLY 13 12.10 15.79 10.92 36 XM_Body_Dirty_Words 12 10.83 13.16 10.08 37 RCVD_IN_MSPIKE_H3 12 7.64 0.00 10.08 38 XM_UncommonTLD01 11 10.19 13.16 9.24 39 XMNumbers 10 8.28 7.89 8.40 40 IN_ZIMBRA_NJ_WHITELIST 10 6.37 0.00 8.40 41 XM_DK_Undo_02 10 12.74 26.32 8.40 42 BAYES_00 9 5.73 0.00 7.56 43 BOTNET_IPINHOSTNAME 9 6.37 2.63 7.56 44 TooManyTo_001 8 5.73 2.63 6.72 45 USER_IN_DEF_DKIM_WL 8 5.10 0.00 6.72 46 SCC_BODY_URI_ONLY 8 5.73 2.63 6.72 47 XMStrtUSub 8 7.64 10.53 6.72 48 XM_SendGrid 8 7.64 10.53 6.72 49 XM_B_Unsub 8 8.28 13.16 6.72 50 FSL_BULK_SIG 7 7.64 13.16 5.88 51 XM_H_PHPMailer 7 4.46 0.00 5.88 52 TR_XM_SpammyRelay 7 10.19 23.68 5.88 53 UNTRUSTED_Relay 7 12.74 34.21 5.88 54 XM_UB50 6 6.37 10.53 5.04 55 BAYES_99 6 10.83 28.95 5.04 56 MAILING_LIST_MULTI 6 3.82 0.00 5.04 57 TVD_SPACE_RATIO 6 5.10 5.26 5.04 58 BAYES_40 6 3.82 0.00 5.04 59 SHORT_SHORTNER 6 3.82 0.00 5.04 60 INVALID_MSGID 6 3.82 0.00 5.04 61 MIME_CHARSET_FARAWAY 5 3.18 0.00 4.20 62 TO_MALFORMED 5 3.18 0.00 4.20 63 ANY_BOUNCE_MESSAGE 5 3.18 0.00 4.20 64 BOUNCE_MESSAGE 5 3.18 0.00 4.20 65 MSGID_NOFQDN1 5 3.18 0.00 4.20 66 XM_Evil_Numbers_Gen 5 3.18 0.00 4.20 67 DKIM_INVALID 5 4.46 5.26 4.20 68 TR_XM_DK_Bayes2 5 3.18 0.00 4.20 69 TVD_RCVD_IP 5 3.18 0.00 4.20 70 TR_XM_DK_Bayes1 5 3.18 0.00 4.20 71 XMGappySubj_01 5 3.18 0.00 4.20 72 FVGT_m_MULTI_ODD_EMAIL 5 3.18 0.00 4.20 73 XM_PDF 5 3.18 0.00 4.20 74 BAYES_999 5 8.92 23.68 4.20 75 T_TooManySym_03 5 3.18 0.00 4.20 76 TR_XM_DK_Bayes 5 3.18 0.00 4.20 77 RCVD_IN_IADB_SPF 4 2.55 0.00 3.36 78 XM_ZIP 4 2.55 0.00 3.36 79 XMBSHREFv2 4 2.55 0.00 3.36 80 RELAYCOUNTRY_CA 4 2.55 0.00 3.36 81 XMBody_17 4 3.18 2.63 3.36 82 RCVD_IN_IADB_SENDERID 4 2.55 0.00 3.36 83 HTML_IMAGE_RATIO_04 4 3.18 2.63 3.36 84 XMSubMetaSx_00 4 3.18 2.63 3.36 85 RCVD_IN_IADB_DK 4 2.55 0.00 3.36 86 RCVD_IN_MSPIKE_H4 4 3.18 2.63 3.36 87 T_XMDrugObfuBody_14 4 2.55 0.00 3.36 88 FROM_GOV_SPOOF 4 2.55 0.00 3.36 89 XM_DIRTYINTL 4 3.82 5.26 3.36 90 RCVD_IN_IADB_LISTED 4 2.55 0.00 3.36 91 SHORT_URI_2 4 2.55 0.00 3.36 92 RCVD_IN_IADB_OPTIN_GT50 3 1.91 0.00 2.52 93 BAYES_80 3 4.46 10.53 2.52 94 XM_H_Long_From01 3 2.55 2.63 2.52 95 XM_B_Phish_Phrases 3 3.18 5.26 2.52 96 HTML_MIME_NO_HTML_TAG 3 2.55 2.63 2.52 97 XM_B_SpammyTLD 3 3.18 5.26 2.52 98 HTML_FONT_FACE_BAD 3 1.91 0.00 2.52 99 XM_SPF_SoftFail 3 3.18 5.26 2.52 100 XMSexyCombo_05 3 3.82 7.89 2.52 101 HTML_IMAGE_RATIO_02 3 3.18 5.26 2.52 102 RCVD_IN_IADB_VOUCHED 3 1.91 0.00 2.52 103 HTML_IMAGE_RATIO_06 3 3.82 7.89 2.52 104 SpammyFromTLD_01 3 6.37 18.42 2.52 105 XMDiploma_00 3 1.91 0.00 2.52 106 TR_DCC_Bayes_99 3 6.37 18.42 2.52 107 RCVD_IN_IADB_OPTIN 3 1.91 0.00 2.52 108 TR_XM_PhishingBody 3 3.18 5.26 2.52 109 CHARSET_FARAWAY_HEADER 3 1.91 0.00 2.52 110 MIME_HTML_MOSTLY 3 7.01 21.05 2.52 111 XMGappySubj_02 3 1.91 0.00 2.52 112 XM_B_Phish66 3 3.18 5.26 2.52 113 TooManyTo_002 3 2.55 2.63 2.52 114 TR_XM_BayesUnsub 3 5.10 13.16 2.52 115 T_REMOTE_IMAGE 3 2.55 2.63 2.52 116 LotsOfNums_01 3 3.82 7.89 2.52 117 T_XMHurry_00 3 1.91 0.00 2.52 118 HDRS_MISSP 2 1.27 0.00 1.68 119 RCVD_IN_BL_SPAMCOP_NET 2 1.91 2.63 1.68 120 FROM_GOV_DKIM_AU 2 1.27 0.00 1.68 121 XM_H_SpoofStaff4 2 1.27 0.00 1.68 122 XM_Body_Obfu01 2 1.27 0.00 1.68 123 MIME_QP_LONG_LINE 2 1.27 0.00 1.68 124 HTML_IMAGE_ONLY_16 2 1.27 0.00 1.68 125 XMSpoofStaff2 2 1.27 0.00 1.68 126 TR_XM_SpoofStaff 2 1.27 0.00 1.68 127 HTML_IMAGE_ONLY_24 2 1.27 0.00 1.68 128 TR_XM_UnparsRelay 2 3.18 7.89 1.68 129 TM2_M_VERY_LONG_WORD 2 2.55 5.26 1.68 130 LONG_JUNK_URI3 2 3.18 7.89 1.68 131 IMG_ONLY_FM_DOM_INFO 2 1.27 0.00 1.68 132 KHOP_HELO_FCRDNS 2 2.55 5.26 1.68 133 RELAYCOUNTRY_NL 2 1.91 2.63 1.68 134 BOTNET 2 2.55 5.26 1.68 135 TR_XM_SpammyWords5 2 2.55 5.26 1.68 136 RCVD_IN_PSBL 2 1.27 0.00 1.68 137 TR_XM_PSC1 2 1.27 0.00 1.68 138 TR_XM_DK_SendGrid 2 2.55 5.26 1.68 139 T_XMDrugObfuBody_00 2 3.82 10.53 1.68 140 TR_XM_SpammyWords4 2 3.18 7.89 1.68 141 XM_H_Trusted_IP 2 1.27 0.00 1.68 142 SpammyFromTLD_02 2 3.18 7.89 1.68 143 TR_XM_SpoofPhishAttach 2 1.27 0.00 1.68 144 XM_ZohoDesk1 2 1.27 0.00 1.68 145 LOTS_OF_MONEY 2 3.18 7.89 1.68 146 TooManyTo_003 2 1.91 2.63 1.68 147 TR_Symld_Words 2 1.27 0.00 1.68 148 TR_MetaPhish_Combo_01 2 1.91 2.63 1.68 149 RELAYCOUNTRY_AU 1 0.64 0.00 0.84 150 HTTPS_HTTP_MISMATCH 1 0.64 0.00 0.84 151 TR_XM_RelayPhish 1 0.64 0.00 0.84 152 XMDiploma_06 1 0.64 0.00 0.84 153 XM_CamelCaseFrm001 1 1.27 2.63 0.84 154 XM_B_SpammyWords4 1 0.64 0.00 0.84 155 BAYES_20 1 1.91 5.26 0.84 156 RCVD_IN_VALIDITY_SAFE 1 1.27 2.63 0.84 157 RCVD_IN_SORBS_DUL 1 0.64 0.00 0.84 158 HELO_NODOT 1 1.27 2.63 0.84 159 RELAYCOUNTRY_TW 1 0.64 0.00 0.84 160 TR_XM_NoHeaderRelay 1 3.18 10.53 0.84 161 XMNoVowels 1 0.64 0.00 0.84 162 FILL_THIS_FORM 1 0.64 0.00 0.84 163 XMGenDplmaNmb 1 0.64 0.00 0.84 164 XMHTML_After_End 1 1.27 2.63 0.84 165 XMBody_29 1 0.64 0.00 0.84 166 XMMoneyMeta_00 1 0.64 0.00 0.84 167 OOOBOUNCE_MESSAGE 1 0.64 0.00 0.84 168 XM_Dr_From 1 1.27 2.63 0.84 169 GMD_PDF_HORIZ 1 0.64 0.00 0.84 170 XM_B_SpammyWords3 1 2.55 7.89 0.84 171 NO_DNS_FOR_FROM 1 1.91 5.26 0.84 172 XM_B_SpammyTLD2 1 0.64 0.00 0.84 173 FROM_EXCESS_BASE64 1 1.27 2.63 0.84 174 LONG_HEX_URI 1 0.64 0.00 0.84 175 RELAYCOUNTRY_LT 1 0.64 0.00 0.84 176 XMSubMetaSxObfu_02 1 0.64 0.00 0.84 177 RELAYCOUNTRY_CN 1 1.27 2.63 0.84 178 XMBrknScrpt_02 1 0.64 0.00 0.84 179 XM_DK_Undo_01 1 1.27 2.63 0.84 180 RELAYCOUNTRY_FR 1 1.91 5.26 0.84 181 BAYES_95 1 4.46 15.79 0.84 182 ACT_NOW_CAPS 1 3.18 10.53 0.84 183 UPPERCASE_75_100 1 0.64 0.00 0.84 184 XMMoneyMeta_01 1 0.64 0.00 0.84 185 XM_B_Investor 1 4.46 15.79 0.84 186 RELAYCOUNTRY_LV 1 0.64 0.00 0.84 187 HELO_NO_DOMAIN 1 1.27 2.63 0.84 188 RCVD_IN_RP_SAFE 1 0.64 0.00 0.84 189 RELAYCOUNTRY_IE 1 0.64 0.00 0.84 190 DEAR_SOMETHING 1 1.27 2.63 0.84 191 XM_UB80 1 1.27 2.63 0.84 192 TO_EQ_FM_DOM_HTML_ONLY 1 0.64 0.00 0.84 193 XM_Combo_Sbj 1 1.27 2.63 0.84 194 CTE_8BIT_MISMATCH 1 0.64 0.00 0.84 195 SHORT_URI_3 1 0.64 0.00 0.84 196 T_FILL_THIS_FORM_SHORT 1 1.27 2.63 0.84 197 XMSexyCombo_01 1 0.64 0.00 0.84 198 TR_XM_DKIM_Undo 1 4.46 15.79 0.84 199 SUBJ_OBFU_PUNCT_FEW 1 0.64 0.00 0.84 200 HTML_IMAGE_RATIO_08 1 1.27 2.63 0.84 ----------------------------------------------------------------------