Email: 179 Autolearn: 0 AvgScore: -0.32 AvgScanTime: 5.45 sec Spam: 32 Autolearn: 0 AvgScore: 12.38 AvgScanTime: 5.06 sec Ham: 147 Autolearn: 0 AvgScore: -3.09 AvgScanTime: 5.53 sec Time Spent Running SA: 0.27 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.23 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 28 86.03 87.50 85.71 2 RELAYCOUNTRY_US 28 84.36 87.50 83.67 3 DKIM_SIGNED 27 77.65 84.38 76.19 4 HTML_MESSAGE 27 79.33 84.38 78.23 5 XM_DK_Pass 26 74.30 81.25 72.79 6 DKIM_VALID 26 73.74 81.25 72.11 7 DCC_CHECK_NEGATIVE 26 84.36 81.25 85.03 8 XM_B_Unicode 24 62.01 75.00 59.18 9 DKIM_VALID_AU 20 63.13 62.50 63.27 10 XM_DK_Undo_02 18 12.85 56.25 3.40 11 XM_B_SpammyWords 18 41.34 56.25 38.10 12 XMListUnsubscribeExists 17 44.69 53.12 42.86 13 BAYES_50 16 61.45 50.00 63.95 14 XM_B_Unicode3 14 36.87 43.75 35.37 15 TR_XM_DKIM_Undo 11 8.38 34.38 2.72 16 LOC_TINY_FONT_1 10 31.28 31.25 31.29 17 DKIM_VALID_EF 10 45.81 31.25 48.98 18 XMSubLong 10 33.52 31.25 34.01 19 XM_B_SpammyWords2 10 21.23 31.25 19.05 20 RCVD_IN_MSPIKE_H2 9 20.11 28.12 18.37 21 BAYES_99 9 6.70 28.12 2.04 22 XM_Multi_Part_URI 8 16.20 25.00 14.29 23 UNPARSEABLE_RELAY 8 18.44 25.00 17.01 24 MIME_HTML_ONLY 8 24.58 25.00 24.49 25 BOTNET 7 5.03 21.88 1.36 26 XM_B_Unsub 6 13.97 18.75 12.93 27 HTML_FONT_LOW_CONTRAST 6 31.84 18.75 34.69 28 XM_Body_Dirty_Words 6 9.50 18.75 7.48 29 DCC_CHECK 6 15.64 18.75 14.97 30 XM_SendGrid 5 15.08 15.62 14.97 31 BAYES_999 5 3.91 15.62 1.36 32 XM_UncommonTLD01 5 7.26 15.62 5.44 33 RELAYCOUNTRY_META 5 8.38 15.62 6.80 34 TR_XM_DK_Unsub 5 22.91 15.62 24.49 35 TR_XM_BayesUnsub 5 11.73 15.62 10.88 36 XM_Evil_Numbers_Gen 5 10.61 15.62 9.52 37 T_KAM_HTML_FONT_INVALID 5 16.20 15.62 16.33 38 FVGT_m_MULTI_ODD 5 24.02 15.62 25.85 39 T_TM2_M_HEADER_IN_MSG 5 18.99 15.62 19.73 40 BOTNET_IPINHOSTNAME 5 7.26 15.62 5.44 41 BAYES_80 5 5.03 15.62 2.72 42 SpammyFromTLD_01 4 2.23 12.50 0.00 43 RCVD_IN_MSPIKE_WL 3 26.82 9.38 30.61 44 URIBL_DBL_SPAM 3 1.68 9.38 0.00 45 XM_H_Long_From01 3 5.03 9.38 4.08 46 TR_XM_UnparsRelay 3 2.79 9.38 1.36 47 HTML_IMAGE_RATIO_04 3 10.61 9.38 10.88 48 XM_B_SpammyWords3 3 2.23 9.38 0.68 49 HTTPS_HTTP_MISMATCH 3 1.68 9.38 0.00 50 TR_XM_DK_SendGrid 3 12.29 9.38 12.93 51 XM_B_Investor 3 3.91 9.38 2.72 52 XMSubMetaSx_00 3 4.47 9.38 3.40 53 XMNumbers 2 8.94 6.25 9.52 54 XMSubLongNoVowel 2 1.12 6.25 0.00 55 LotsOfNums_01 2 5.03 6.25 4.76 56 HTML_EXTRA_CLOSE 2 1.12 6.25 0.00 57 XMHTML_After_End 2 1.12 6.25 0.00 58 XM_B_Phish_Phrases 2 1.12 6.25 0.00 59 LOTS_OF_MONEY 2 6.15 6.25 6.12 60 RCVD_IN_MSPIKE_H3 2 10.06 6.25 10.88 61 UNTRUSTED_Relay 2 2.79 6.25 2.04 62 URIBL_BLACK 2 1.12 6.25 0.00 63 TR_XM_SpammyRelay 2 4.47 6.25 4.08 64 TR_XM_SpammyWords2 2 1.12 6.25 0.00 65 XM_SPF_SoftFail 2 1.68 6.25 0.68 66 TR_XM_MaxWHORU 2 1.12 6.25 0.00 67 TooManyTo_001 2 5.59 6.25 5.44 68 TR_XM_BayesRelay 2 1.12 6.25 0.00 69 RCVD_IN_BL_SPAMCOP_NET 2 1.12 6.25 0.00 70 ALL_TRUSTED 2 11.17 6.25 12.24 71 MPART_ALT_DIFF_COUNT 2 1.12 6.25 0.00 72 XM_B_DNDMA 2 5.59 6.25 5.44 73 XMDateMe_00 2 1.12 6.25 0.00 74 FSL_BULK_SIG 2 5.59 6.25 5.44 75 TR_Symld_Words 2 4.47 6.25 4.08 76 XMSubNoVowel 2 3.35 6.25 2.72 77 TR_XM_SpammyWords4 2 4.47 6.25 4.08 78 XMCapTrack 2 1.12 6.25 0.00 79 TR_XM_SPAMCOP 2 1.12 6.25 0.00 80 FROM_GOV_DKIM_AU 2 1.12 6.25 0.00 81 XMSexyCombo_01 2 1.12 6.25 0.00 82 NO_DNS_FOR_FROM 2 1.12 6.25 0.00 83 TR_DCC_Bayes_99 2 1.12 6.25 0.00 84 TR_XM_INV_DKIM 1 0.56 3.12 0.00 85 TR_XM_Undi_Recip11 1 0.56 3.12 0.00 86 BAYES_20 1 2.79 3.12 2.72 87 XM_OfRef6 1 1.12 3.12 0.68 88 RELAYCOUNTRY_FR 1 1.12 3.12 0.68 89 BOUNCE_MESSAGE 1 2.23 3.12 2.04 90 TR_XM_Undi_Recip5 1 0.56 3.12 0.00 91 XM_B_SEO 1 1.12 3.12 0.68 92 MIME_QP_LONG_LINE 1 2.79 3.12 2.72 93 MSGID_FROM_MTA_HEADER 1 1.68 3.12 1.36 94 XM_Body_Dirty_Words_01 1 0.56 3.12 0.00 95 TR_XM_SEO4 1 0.56 3.12 0.00 96 XM_B_Unsub2 1 0.56 3.12 0.00 97 XM_BadFromFormat 1 0.56 3.12 0.00 98 XM_PDF 1 1.12 3.12 0.68 99 OBFU_TEXT_ATTACH 1 0.56 3.12 0.00 100 HTML_FONT_FACE_BAD 1 1.12 3.12 0.68 101 HTML_IMAGE_ONLY_04 1 0.56 3.12 0.00 102 UNDISC_MONEY 1 0.56 3.12 0.00 103 XM_DIRTYINTL 1 2.23 3.12 2.04 104 TooManyTo_002 1 3.35 3.12 3.40 105 XM_H_Undi_Recip 1 1.12 3.12 0.68 106 DRUGS_DIET 1 0.56 3.12 0.00 107 DRUGS_MUSCLE 1 0.56 3.12 0.00 108 PDS_RDNS_DYNAMIC_FP 1 0.56 3.12 0.00 109 TooManyTo_003 1 1.12 3.12 0.68 110 XMSubMetaI_00 1 0.56 3.12 0.00 111 TR_XM_InvalidRelay 1 0.56 3.12 0.00 112 XM_B_SpammyWords4 1 0.56 3.12 0.00 113 RCVD_IN_MSPIKE_H5 1 14.53 3.12 17.01 114 T_TooManySym_02 1 6.70 3.12 7.48 115 T_DOC_ATTACH_NO_EXT 1 0.56 3.12 0.00 116 TooManyTo_004 1 1.12 3.12 0.68 117 NORDNS_LOW_CONTRAST 1 1.12 3.12 0.68 118 TO_NO_BRKTS_DYNIP 1 0.56 3.12 0.00 119 TVD_VISIT_PHARMA 1 0.56 3.12 0.00 120 HDRS_MISSP 1 1.68 3.12 1.36 121 TR_XM_RelayPhish 1 0.56 3.12 0.00 122 T_XMDrugObfuBody_14 1 2.79 3.12 2.72 123 GMD_PDF_SQUARE 1 0.56 3.12 0.00 124 BAYES_00 1 11.17 3.12 12.93 125 KHOP_HELO_FCRDNS 1 1.68 3.12 1.36 126 RELAYCOUNTRY_IN 1 1.12 3.12 0.68 127 PRICES_ARE_AFFORDABLE 1 0.56 3.12 0.00 128 DEAR_FRIEND 1 0.56 3.12 0.00 129 SCC_BODY_URI_ONLY 1 4.47 3.12 4.76 130 TR_XM_SpammyWords5 1 5.03 3.12 5.44 131 ONLINE_PHARMACY 1 0.56 3.12 0.00 132 XM_UB999 1 0.56 3.12 0.00 133 RELAYCOUNTRY_PS 1 0.56 3.12 0.00 134 XMStrtUSub 1 5.59 3.12 6.12 135 XM_B_SpammyTLD 1 1.12 3.12 0.68 136 XM_UB99 1 0.56 3.12 0.00 137 RELAYCOUNTRY_AT 1 1.68 3.12 1.36 138 MIME_HEADER_CTYPE_ONLY 1 0.56 3.12 0.00 139 DKIM_INVALID 1 3.91 3.12 4.08 140 ANY_BOUNCE_MESSAGE 1 2.23 3.12 2.04 141 XMSexyCombo_05 1 0.56 3.12 0.00 142 HTML_IMAGE_RATIO_06 1 3.35 3.12 3.40 143 FROM_GOV_SPOOF 1 2.23 3.12 2.04 144 RDNS_DYNAMIC 1 0.56 3.12 0.00 145 PP_MIME_FAKE_ASCII_TEXT 1 0.56 3.12 0.00 146 XMSubject_32 1 0.56 3.12 0.00 147 DATE_IN_PAST_24_48 1 0.56 3.12 0.00 148 XM_S_SEO 1 1.12 3.12 0.68 149 TR_XM_DK_Bayes1 1 9.50 3.12 10.88 150 INVESTMENT_ADVICE 1 0.56 3.12 0.00 151 XM_ShortIntro_01 1 0.56 3.12 0.00 152 TR_XM_Undi_RecipCombo2 1 0.56 3.12 0.00 153 DIET_1 1 1.12 3.12 0.68 154 XMSexyCombo_04 1 0.56 3.12 0.00 155 HTML_FONT_TINY_NORDNS 1 1.12 3.12 0.68 156 T_FILL_THIS_FORM_SHORT 1 1.68 3.12 1.36 157 XM_H_PHPMailer 1 1.68 3.12 1.36 158 XMSubMetaI_01 1 0.56 3.12 0.00 159 XMSolicitRefs_0 1 0.56 3.12 0.00 160 TR_XM_DK_Bayes 1 9.50 3.12 10.88 161 XMSubMetaD_03 1 0.56 3.12 0.00 162 TO_EQ_FM_DOM_HTML_ONLY 1 0.56 3.12 0.00 163 RELAYCOUNTRY_FI 1 0.56 3.12 0.00 164 TO_MALFORMED 1 3.35 3.12 3.40 165 XM_UB50 1 2.23 3.12 2.04 166 TR_XM_SEO 1 1.12 3.12 0.68 167 T_XMDrugObfuBody_00 1 0.56 3.12 0.00 168 TR_XM_Undi_Recip2 1 1.12 3.12 0.68 169 T_OBFU_PDF_ATTACH 1 0.56 3.12 0.00 170 T_TooManySym_01 1 10.06 3.12 11.56 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 126 86.03 87.50 85.71 2 DCC_CHECK_NEGATIVE 125 84.36 81.25 85.03 3 RELAYCOUNTRY_US 123 84.36 87.50 83.67 4 HTML_MESSAGE 115 79.33 84.38 78.23 5 DKIM_SIGNED 112 77.65 84.38 76.19 6 XM_DK_Pass 107 74.30 81.25 72.79 7 DKIM_VALID 106 73.74 81.25 72.11 8 BAYES_50 94 61.45 50.00 63.95 9 DKIM_VALID_AU 93 63.13 62.50 63.27 10 XM_B_Unicode 87 62.01 75.00 59.18 11 DKIM_VALID_EF 72 45.81 31.25 48.98 12 XMListUnsubscribeExists 63 44.69 53.12 42.86 13 XM_B_SpammyWords 56 41.34 56.25 38.10 14 XM_B_Unicode3 52 36.87 43.75 35.37 15 HTML_FONT_LOW_CONTRAST 51 31.84 18.75 34.69 16 XMSubLong 50 33.52 31.25 34.01 17 LOC_TINY_FONT_1 46 31.28 31.25 31.29 18 RCVD_IN_MSPIKE_WL 45 26.82 9.38 30.61 19 FVGT_m_MULTI_ODD 38 24.02 15.62 25.85 20 TR_XM_DK_Unsub 36 22.91 15.62 24.49 21 MIME_HTML_ONLY 36 24.58 25.00 24.49 22 T_TM2_M_HEADER_IN_MSG 29 18.99 15.62 19.73 23 XM_B_SpammyWords2 28 21.23 31.25 19.05 24 RCVD_IN_MSPIKE_H2 27 20.11 28.12 18.37 25 UNPARSEABLE_RELAY 25 18.44 25.00 17.01 26 RCVD_IN_MSPIKE_H5 25 14.53 3.12 17.01 27 T_KAM_HTML_FONT_INVALID 24 16.20 15.62 16.33 28 XM_SendGrid 22 15.08 15.62 14.97 29 DCC_CHECK 22 15.64 18.75 14.97 30 XM_Multi_Part_URI 21 16.20 25.00 14.29 31 XM_B_Unsub 19 13.97 18.75 12.93 32 TR_XM_DK_SendGrid 19 12.29 9.38 12.93 33 BAYES_00 19 11.17 3.12 12.93 34 IN_ZIMBRA_NJ_WHITELIST 19 10.61 0.00 12.93 35 ALL_TRUSTED 18 11.17 6.25 12.24 36 T_TooManySym_01 17 10.06 3.12 11.56 37 TR_XM_BayesUnsub 16 11.73 15.62 10.88 38 TR_XM_DK_Bayes2 16 8.94 0.00 10.88 39 TR_XM_DK_Bayes1 16 9.50 3.12 10.88 40 TR_XM_DK_Bayes 16 9.50 3.12 10.88 41 HTML_IMAGE_RATIO_04 16 10.61 9.38 10.88 42 RCVD_IN_MSPIKE_H3 16 10.06 6.25 10.88 43 XM_DKIMWhitelistDomains 15 8.38 0.00 10.20 44 XMNumbers 14 8.94 6.25 9.52 45 XM_Evil_Numbers_Gen 14 10.61 15.62 9.52 46 BAYES_60 13 7.26 0.00 8.84 47 TM2_M_URI_OPT_OUT 12 6.70 0.00 8.16 48 T_TooManySym_02 11 6.70 3.12 7.48 49 XM_Body_Dirty_Words 11 9.50 18.75 7.48 50 RELAYCOUNTRY_META 10 8.38 15.62 6.80 51 PLING_QUERY 9 5.03 0.00 6.12 52 LOTS_OF_MONEY 9 6.15 6.25 6.12 53 XMStrtUSub 9 5.59 3.12 6.12 54 USER_IN_DEF_DKIM_WL 9 5.03 0.00 6.12 55 TooManyTo_001 8 5.59 6.25 5.44 56 XM_B_DNDMA 8 5.59 6.25 5.44 57 XM_UncommonTLD01 8 7.26 15.62 5.44 58 TR_XM_SpammyWords5 8 5.03 3.12 5.44 59 XM_DK_Undo_01 8 4.47 0.00 5.44 60 FSL_BULK_SIG 8 5.59 6.25 5.44 61 XMBrknScrpt_02 8 4.47 0.00 5.44 62 BAYES_40 8 4.47 0.00 5.44 63 BOTNET_IPINHOSTNAME 8 7.26 15.62 5.44 64 LotsOfNums_01 7 5.03 6.25 4.76 65 T_REMOTE_IMAGE 7 3.91 0.00 4.76 66 SCC_BODY_URI_ONLY 7 4.47 3.12 4.76 67 XM_H_Long_From01 6 5.03 9.38 4.08 68 HTML_IMAGE_RATIO_02 6 3.35 0.00 4.08 69 TR_XM_SpammyWords4 6 4.47 6.25 4.08 70 TR_Symld_Words 6 4.47 6.25 4.08 71 TVD_SPACE_RATIO 6 3.35 0.00 4.08 72 MIME_HTML_MOSTLY 6 3.35 0.00 4.08 73 TR_XM_SpammyRelay 6 4.47 6.25 4.08 74 DKIM_INVALID 6 3.91 3.12 4.08 75 XM_H_Trusted_IP 5 2.79 0.00 3.40 76 XM_DK_Undo_02 5 12.85 56.25 3.40 77 T_TooManySym_03 5 2.79 0.00 3.40 78 XMSubMetaSx_00 5 4.47 9.38 3.40 79 TO_MALFORMED 5 3.35 3.12 3.40 80 TooManyTo_002 5 3.35 3.12 3.40 81 MSGID_NOFQDN1 5 2.79 0.00 3.40 82 HTML_IMAGE_RATIO_06 5 3.35 3.12 3.40 83 RCVD_IN_VALIDITY_SAFE 5 2.79 0.00 3.40 84 INVALID_MSGID 5 2.79 0.00 3.40 85 SUBJ_ALL_CAPS 4 2.23 0.00 2.72 86 TR_XM_DKIM_Undo 4 8.38 34.38 2.72 87 RCVD_IN_VALIDITY_CERTIFIED 4 2.23 0.00 2.72 88 T_XMDrugObfuBody_14 4 2.79 3.12 2.72 89 RCVD_IN_MSPIKE_H4 4 2.23 0.00 2.72 90 XM_B_Investor 4 3.91 9.38 2.72 91 XM_ZIP 4 2.23 0.00 2.72 92 XMSubNoVowel 4 3.35 6.25 2.72 93 BAYES_20 4 2.79 3.12 2.72 94 MIME_QP_LONG_LINE 4 2.79 3.12 2.72 95 FVGT_m_MULTI_ODD_EMAIL 4 2.23 0.00 2.72 96 HTML_MIME_NO_HTML_TAG 4 2.23 0.00 2.72 97 BAYES_80 4 5.03 15.62 2.72 98 HTML_IMAGE_ONLY_20 4 2.23 0.00 2.72 99 TR_XM_PhishingBody 3 1.68 0.00 2.04 100 BOUNCE_MESSAGE 3 2.23 3.12 2.04 101 MPART_ALT_DIFF 3 1.68 0.00 2.04 102 RCVD_IN_IADB_SPF 3 1.68 0.00 2.04 103 XM_DIRTYINTL 3 2.23 3.12 2.04 104 UNTRUSTED_Relay 3 2.79 6.25 2.04 105 RCVD_IN_IADB_LISTED 3 1.68 0.00 2.04 106 RCVD_IN_IADB_SENDERID 3 1.68 0.00 2.04 107 RCVD_IN_IADB_DK 3 1.68 0.00 2.04 108 FROM_GOV_SPOOF 3 2.23 3.12 2.04 109 XM_UB50 3 2.23 3.12 2.04 110 SHOPIFY_IMG_NOT_RCVD_SFY 3 1.68 0.00 2.04 111 MAILING_LIST_MULTI 3 1.68 0.00 2.04 112 TVD_RCVD_IP 3 1.68 0.00 2.04 113 XM_CamelCaseFrm001 3 1.68 0.00 2.04 114 ANY_BOUNCE_MESSAGE 3 2.23 3.12 2.04 115 IN_HORDE_ADDRESS_BOOK 3 1.68 0.00 2.04 116 HTML_IMAGE_ONLY_28 3 1.68 0.00 2.04 117 BAYES_99 3 6.70 28.12 2.04 118 XM_H_SpoofStaff4 2 1.12 0.00 1.36 119 XMGappySubj_01 2 1.12 0.00 1.36 120 RCVD_IN_RP_SAFE 2 1.12 0.00 1.36 121 XM_Ancestry_Forge 2 1.12 0.00 1.36 122 MIME_HTML_ONLY_MULTI 2 1.12 0.00 1.36 123 XMBody_95 2 1.12 0.00 1.36 124 XM_ZohoDesk1 2 1.12 0.00 1.36 125 XMSubPhish11 2 1.12 0.00 1.36 126 TR_XM_PSC1 2 1.12 0.00 1.36 127 HDRS_MISSP 2 1.68 3.12 1.36 128 XMSpoofStaff2 2 1.12 0.00 1.36 129 XM_Dr_From 2 1.12 0.00 1.36 130 LONG_JUNK_URI 2 1.12 0.00 1.36 131 TR_XM_SpoofStaff 2 1.12 0.00 1.36 132 RELAYCOUNTRY_AU 2 1.12 0.00 1.36 133 T_MONEY_PERCENT 2 1.12 0.00 1.36 134 TR_LOTS_OF_MONEY2 2 1.12 0.00 1.36 135 SpammyFromTLD_02 2 1.12 0.00 1.36 136 BAYES_05 2 1.12 0.00 1.36 137 XMSubMetaSSx_00 2 1.12 0.00 1.36 138 RCVD_IN_RP_CERTIFIED 2 1.12 0.00 1.36 139 T_FILL_THIS_FORM_FRAUD_PHISH 2 1.12 0.00 1.36 140 BAYES_999 2 3.91 15.62 1.36 141 TR_XM_UnparsRelay 2 2.79 9.38 1.36 142 MSGID_FROM_MTA_HEADER 2 1.68 3.12 1.36 143 BOTNET 2 5.03 21.88 1.36 144 TR_XM_SB_Phish 2 1.12 0.00 1.36 145 TR_XM_SpoofPhishAttach 2 1.12 0.00 1.36 146 RELAYCOUNTRY_AT 2 1.68 3.12 1.36 147 KHOP_HELO_FCRDNS 2 1.68 3.12 1.36 148 XMNoVowels 2 1.12 0.00 1.36 149 XM_ProductURIs 2 1.12 0.00 1.36 150 T_FILL_THIS_FORM_SHORT 2 1.68 3.12 1.36 151 XM_B_Phish66 2 1.12 0.00 1.36 152 XM_Body_Obfu01 2 1.12 0.00 1.36 153 XM_H_PHPMailer 2 1.68 3.12 1.36 154 RELAYCOUNTRY_BG 2 1.12 0.00 1.36 155 HTML_SHORT_LINK_IMG_3 1 0.56 0.00 0.68 156 RCVD_IN_IADB_OPTIN 1 0.56 0.00 0.68 157 XM_PDF 1 1.12 3.12 0.68 158 HTML_FONT_FACE_BAD 1 1.12 3.12 0.68 159 XM_B_SEO 1 1.12 3.12 0.68 160 XMBody_17 1 0.56 0.00 0.68 161 XMDiploma_00 1 0.56 0.00 0.68 162 TooManyTo_003 1 1.12 3.12 0.68 163 NICE_REPLY_A 1 0.56 0.00 0.68 164 XM_H_Undi_Recip 1 1.12 3.12 0.68 165 RELAYCOUNTRY_IE 1 0.56 0.00 0.68 166 URI_HEX 1 0.56 0.00 0.68 167 TooManyTo_004 1 1.12 3.12 0.68 168 HTML_IMAGE_ONLY_16 1 0.56 0.00 0.68 169 XMGenDplmaNmb 1 0.56 0.00 0.68 170 HELO_NO_DOMAIN 1 0.56 0.00 0.68 171 XM_B_SpammyTLD 1 1.12 3.12 0.68 172 TR_XMSubLong 1 0.56 0.00 0.68 173 USER_IN_WELCOMELIST 1 0.56 0.00 0.68 174 HELO_NODOT 1 0.56 0.00 0.68 175 XM_S_SEO 1 1.12 3.12 0.68 176 NUMERIC_HTTP_ADDR 1 0.56 0.00 0.68 177 URI_TRY_3LD 1 0.56 0.00 0.68 178 RCVD_IN_IADB_VOUCHED 1 0.56 0.00 0.68 179 TR_XM_PHPDW 1 0.56 0.00 0.68 180 HTML_FONT_TINY_NORDNS 1 1.12 3.12 0.68 181 XM_Sft_Ad_L33t 1 0.56 0.00 0.68 182 SHORT_URI_3 1 0.56 0.00 0.68 183 T_STY_INVIS_DIRECT 1 0.56 0.00 0.68 184 T_PDS_PRO_TLD 1 0.56 0.00 0.68 185 XMSubMetaSxObfu_03 1 0.56 0.00 0.68 186 RELAYCOUNTRY_FR 1 1.12 3.12 0.68 187 XM_OfRef6 1 1.12 3.12 0.68 188 HTML_IMAGE_ONLY_08 1 0.56 0.00 0.68 189 XMPhish14 1 0.56 0.00 0.68 190 T_MANY_PILL_PRICE 1 0.56 0.00 0.68 191 TooManyTo_005 1 0.56 0.00 0.68 192 MIME_CHARSET_FARAWAY 1 0.56 0.00 0.68 193 XM_GoogleGroups 1 0.56 0.00 0.68 194 EM_ROLEX 1 0.56 0.00 0.68 195 TR_Mismatch_TLD_02 1 0.56 0.00 0.68 196 USER_IN_WHITELIST 1 0.56 0.00 0.68 197 T_XMDrugObfuBody_08 1 0.56 0.00 0.68 198 XM_Combo_Sbj 1 0.56 0.00 0.68 199 XM_B_SpammyWords3 1 2.23 9.38 0.68 200 NORDNS_LOW_CONTRAST 1 1.12 3.12 0.68 ----------------------------------------------------------------------