Email: 305 Autolearn: 0 AvgScore: 2.31 AvgScanTime: 2.29 sec Spam: 50 Autolearn: 0 AvgScore: 12.68 AvgScanTime: 2.85 sec Ham: 255 Autolearn: 0 AvgScore: 0.28 AvgScanTime: 2.18 sec Time Spent Running SA: 0.19 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 48 60.98 96.00 54.12 2 DKIM_SIGNED 46 56.39 92.00 49.41 3 XM_DK_Pass 46 55.08 92.00 47.84 4 DKIM_VALID 45 54.43 90.00 47.45 5 RELAYCOUNTRY_US 44 58.36 88.00 52.55 6 XM_B_SpammyWords 40 31.80 80.00 22.35 7 T_SCC_BODY_TEXT_LINE 39 82.95 78.00 83.92 8 XM_B_Unicode 37 42.62 74.00 36.47 9 DCC_CHECK_NEGATIVE 36 73.11 72.00 73.33 10 FVGT_m_MULTI_ODD 33 26.89 66.00 19.22 11 XM_DK_Undo_02 31 16.39 62.00 7.45 12 XMListUnsubscribeExists 29 31.48 58.00 26.27 13 TR_XM_DKIM_Undo 27 9.51 54.00 0.78 14 XM_B_Unicode3 27 30.16 54.00 25.49 15 UNPARSEABLE_RELAY 24 15.74 48.00 9.41 16 DKIM_VALID_AU 23 40.66 46.00 39.61 17 XM_B_SpammyWords2 23 15.41 46.00 9.41 18 RCVD_IN_MSPIKE_H2 22 16.07 44.00 10.59 19 XM_Multi_Part_URI 22 27.87 44.00 24.71 20 BAYES_50 20 52.13 40.00 54.51 21 T_KAM_HTML_FONT_INVALID 20 19.02 40.00 14.90 22 DKIM_VALID_EF 18 26.89 36.00 25.10 23 BOTNET_IPINHOSTNAME 16 15.08 32.00 11.76 24 BAYES_99 15 10.49 30.00 6.67 25 XM_B_SpammyTLD 15 6.56 30.00 1.96 26 XM_OfRef6 14 6.23 28.00 1.96 27 BOTNET 14 5.57 28.00 1.18 28 DCC_CHECK 14 26.89 28.00 26.67 29 XM_H_Long_From02 13 5.57 26.00 1.57 30 MAILING_LIST_MULTI 13 7.21 26.00 3.53 31 MIME_CHARSET_FARAWAY 13 6.56 26.00 2.75 32 LOC_TINY_FONT_1 12 18.36 24.00 17.25 33 BAYES_999 12 9.51 24.00 6.67 34 RCVD_IN_MSPIKE_WL 11 22.30 22.00 22.35 35 MIME_HTML_ONLY 11 9.18 22.00 6.67 36 BAYES_80 10 4.92 20.00 1.96 37 HTML_FONT_LOW_CONTRAST 10 15.74 20.00 14.90 38 TR_XM_UnparsRelay 9 3.93 18.00 1.18 39 MIME_HTML_MOSTLY 9 4.92 18.00 2.35 40 XM_B_Unsub 8 8.85 16.00 7.45 41 XMSubLong 8 16.39 16.00 16.47 42 XM_H_Long_From01 8 5.90 16.00 3.92 43 RELAYCOUNTRY_META 8 5.57 16.00 3.53 44 TR_XM_BayesUnsub 8 8.20 16.00 6.67 45 LOTS_OF_MONEY 7 8.52 14.00 7.45 46 MPART_ALT_DIFF 6 3.61 12.00 1.96 47 XM_Body_Dirty_Words 6 6.56 12.00 5.49 48 RCVD_IN_MSPIKE_H5 5 9.84 10.00 9.80 49 TR_XM_SpammyRelay 5 2.95 10.00 1.57 50 UNTRUSTED_Relay 5 3.28 10.00 1.96 51 HTML_IMAGE_RATIO_02 5 2.62 10.00 1.18 52 RCVD_IN_MSPIKE_H4 5 4.26 10.00 3.14 53 TR_XM_SpammyWords4 5 3.28 10.00 1.96 54 BAYES_60 4 7.87 8.00 7.84 55 XMNumbers 4 4.59 8.00 3.92 56 TR_XM_SpammyWords5 4 3.61 8.00 2.75 57 XM_UB80 4 1.31 8.00 0.00 58 RELAYCOUNTRY_IN 4 1.64 8.00 0.39 59 URI_NOVOWEL 4 1.64 8.00 0.39 60 XM_SendGrid 4 4.92 8.00 4.31 61 SpammyFromTLD_01 4 2.30 8.00 1.18 62 TR_XM_DK_Unsub 4 9.18 8.00 9.41 63 XM_B_SpammyWords3 4 2.95 8.00 1.96 64 LotsOfNums_01 4 6.89 8.00 6.67 65 LONG_JUNK_URI 4 1.64 8.00 0.39 66 XM_Evil_Numbers_Gen 3 3.93 6.00 3.53 67 RCVD_IN_BL_SPAMCOP_NET 3 0.98 6.00 0.00 68 TR_XM_PhishingBody 3 1.64 6.00 0.78 69 USER_IN_DEF_DKIM_WL 3 6.56 6.00 6.67 70 HTML_IMAGE_ONLY_20 3 1.64 6.00 0.78 71 HTML_MIME_NO_HTML_TAG 3 1.97 6.00 1.18 72 TR_DCC_Bayes_99 3 1.31 6.00 0.39 73 XM_B_Phish_Phrases 3 2.30 6.00 1.57 74 XM_Nigeria_01 3 0.98 6.00 0.00 75 PDS_OTHER_BAD_TLD 3 1.64 6.00 0.78 76 XM_B_Phish66 3 1.64 6.00 0.78 77 XM_CamelCaseFrm001 3 2.62 6.00 1.96 78 T_REMOTE_IMAGE 3 3.93 6.00 3.53 79 T_XMHurry_00 3 0.98 6.00 0.00 80 T_TM2_M_HEADER_IN_MSG 3 15.41 6.00 17.25 81 FSL_BULK_SIG 3 17.38 6.00 19.61 82 T_XMDrugObfuBody_08 2 1.31 4.00 0.78 83 XM_SPF_SoftFail 2 0.98 4.00 0.39 84 XM_B_SpammyWords4 2 0.66 4.00 0.00 85 XM_B_DNDMA 2 0.98 4.00 0.39 86 XM_H_Undi_Recip 2 0.66 4.00 0.00 87 CK_HELO_GENERIC 2 1.31 4.00 0.78 88 TR_XM_Undi_Recip6 2 0.66 4.00 0.00 89 TR_XM_Spammywords 2 0.66 4.00 0.00 90 XM_B_SpammyWords5 2 0.66 4.00 0.00 91 TR_XM_Undi_Recip11 2 0.66 4.00 0.00 92 XMSubMetaSx_00 2 1.97 4.00 1.57 93 XM_B_Investor 2 0.98 4.00 0.39 94 MIME_BASE64_TEXT 2 0.98 4.00 0.39 95 HTML_IMAGE_ONLY_24 2 0.98 4.00 0.39 96 TR_XM_NoHeaderRelay 2 0.66 4.00 0.00 97 TVD_RCVD_SPACE_BRACKET 2 0.66 4.00 0.00 98 HTTP_EXCESSIVE_ESCAPES 2 0.66 4.00 0.00 99 HTML_IMAGE_RATIO_04 2 4.59 4.00 4.71 100 MPART_ALT_DIFF_COUNT 2 0.66 4.00 0.00 101 XM_S_SpammyWords 2 0.66 4.00 0.00 102 BODY_SINGLE_WORD 1 0.33 2.00 0.00 103 TM2_M_VERY_LONG_WORD 1 1.31 2.00 1.18 104 URIBL_DBL_ABUSE_SPAM 1 0.33 2.00 0.00 105 BAYES_05 1 15.41 2.00 18.04 106 UNDISC_MONEY 1 0.33 2.00 0.00 107 ADVANCE_FEE_5_NEW_MONEY 1 0.33 2.00 0.00 108 XFER_LOTSA_MONEY 1 0.33 2.00 0.00 109 UNSUB_GOOG_FORM 1 0.33 2.00 0.00 110 XMStockSpam_06 1 0.33 2.00 0.00 111 TO_NO_BRKTS_HTML_ONLY 1 0.33 2.00 0.00 112 XM_URI_RBL 1 0.33 2.00 0.00 113 MISSING_HEADERS 1 0.33 2.00 0.00 114 RELAYCOUNTRY_CO 1 0.33 2.00 0.00 115 DEAR_BENEFICIARY 1 0.33 2.00 0.00 116 RELAYCOUNTRY_DE 1 0.98 2.00 0.78 117 NAME_EMAIL_DIFF 1 0.33 2.00 0.00 118 TR_XM_DK_SendGrid 1 2.62 2.00 2.75 119 TR_XM_SpammyWords2 1 0.33 2.00 0.00 120 XMFrmHeader_28 1 0.33 2.00 0.00 121 XM_UB60 1 0.66 2.00 0.39 122 XMDateMe_00 1 0.33 2.00 0.00 123 XM_HighProb1 1 0.33 2.00 0.00 124 XM_DK_Undo_01 1 0.66 2.00 0.39 125 FROM_GOV_SPOOF 1 1.64 2.00 1.57 126 MONEY_FRAUD_8 1 0.33 2.00 0.00 127 DKIM_INVALID 1 1.97 2.00 1.96 128 XM_B_Unsub2 1 3.28 2.00 3.53 129 TR_XM_SPAMCOP 1 0.33 2.00 0.00 130 RELAYCOUNTRY_JP 1 0.33 2.00 0.00 131 XMSubMetaI_00 1 0.66 2.00 0.39 132 XMSubEmpty 1 0.33 2.00 0.00 133 T_TooManySym_02 1 4.26 2.00 4.71 134 RELAYCOUNTRY_VN 1 0.33 2.00 0.00 135 TR_XM_SEO 1 0.33 2.00 0.00 136 NO_DNS_FOR_FROM 1 0.33 2.00 0.00 137 TR_XM_SEO4 1 0.33 2.00 0.00 138 TR_MRelay_UG 1 0.33 2.00 0.00 139 BODY_SINGLE_URI 1 0.33 2.00 0.00 140 TooManyTo_001 1 3.61 2.00 3.92 141 RELAYCOUNTRY_AT 1 0.33 2.00 0.00 142 XMSubMetaSxObfu_04 1 0.33 2.00 0.00 143 TR_Sbj_FN_Bdy 1 0.33 2.00 0.00 144 RCVD_IN_RP_RNBL 1 0.33 2.00 0.00 145 XM_S_SEO 1 0.33 2.00 0.00 146 XM_B_SEO 1 0.33 2.00 0.00 147 RCVD_IN_MSPIKE_H3 1 8.20 2.00 9.41 148 XMSubNoVowel 1 0.98 2.00 0.78 149 TR_XM_Undi_RecipCombo2 1 0.33 2.00 0.00 150 XM_H_PHPMailer 1 0.66 2.00 0.39 151 XM_ProductURIs 1 0.66 2.00 0.39 152 XMBody_106 1 0.33 2.00 0.00 153 TR_Symld_Words 1 1.31 2.00 1.18 154 TO_EQ_FM_DOM_HTML_ONLY 1 0.33 2.00 0.00 155 HTML_IMAGE_ONLY_04 1 0.33 2.00 0.00 156 T_XMDrugObfuBody_14 1 0.66 2.00 0.39 157 XMStrtUSub 1 2.30 2.00 2.35 158 TR_XM_SEO3 1 0.33 2.00 0.00 159 XMSexyCombo_05 1 1.31 2.00 1.18 160 TR_XM_InvalidRelay 1 0.33 2.00 0.00 161 TR_XM_MaxWHORU 1 0.33 2.00 0.00 162 MIME_QP_LONG_LINE 1 2.95 2.00 3.14 163 RCVD_IN_VALIDITY_RPBL 1 0.33 2.00 0.00 164 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.33 2.00 0.00 165 LOADSA_MONEY_COMBO 1 0.33 2.00 0.00 166 TR_XM_Undi_Recip5 1 0.33 2.00 0.00 167 ALL_TRUSTED 1 37.38 2.00 44.31 168 XM_DIRTYINTL 1 0.98 2.00 0.78 169 T_TooManySym_01 1 5.25 2.00 5.88 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 214 82.95 78.00 83.92 2 DCC_CHECK_NEGATIVE 187 73.11 72.00 73.33 3 BAYES_50 139 52.13 40.00 54.51 4 HTML_MESSAGE 138 60.98 96.00 54.12 5 RELAYCOUNTRY_US 134 58.36 88.00 52.55 6 DKIM_SIGNED 126 56.39 92.00 49.41 7 XM_DK_Pass 122 55.08 92.00 47.84 8 DKIM_VALID 121 54.43 90.00 47.45 9 ALL_TRUSTED 113 37.38 2.00 44.31 10 DKIM_VALID_AU 101 40.66 46.00 39.61 11 ANY_BOUNCE_MESSAGE 99 32.46 0.00 38.82 12 BOUNCE_MESSAGE 99 32.46 0.00 38.82 13 TM2_M_URI_OPT_OUT 95 31.15 0.00 37.25 14 XM_B_Unicode 93 42.62 74.00 36.47 15 DCC_CHECK 68 26.89 28.00 26.67 16 XMListUnsubscribeExists 67 31.48 58.00 26.27 17 XM_B_Unicode3 65 30.16 54.00 25.49 18 DKIM_VALID_EF 64 26.89 36.00 25.10 19 XM_Multi_Part_URI 63 27.87 44.00 24.71 20 XM_B_SpammyWords 57 31.80 80.00 22.35 21 RCVD_IN_MSPIKE_WL 57 22.30 22.00 22.35 22 FSL_BULK_SIG 50 17.38 6.00 19.61 23 FVGT_m_MULTI_ODD 49 26.89 66.00 19.22 24 BAYES_05 46 15.41 2.00 18.04 25 T_TM2_M_HEADER_IN_MSG 44 15.41 6.00 17.25 26 LOC_TINY_FONT_1 44 18.36 24.00 17.25 27 XMSubLong 42 16.39 16.00 16.47 28 HTML_FONT_LOW_CONTRAST 38 15.74 20.00 14.90 29 T_KAM_HTML_FONT_INVALID 38 19.02 40.00 14.90 30 BOTNET_IPINHOSTNAME 30 15.08 32.00 11.76 31 RCVD_IN_MSPIKE_H2 27 16.07 44.00 10.59 32 RCVD_IN_MSPIKE_H5 25 9.84 10.00 9.80 33 XM_B_SpammyWords2 24 15.41 46.00 9.41 34 TR_XM_DK_Unsub 24 9.18 8.00 9.41 35 RCVD_IN_MSPIKE_H3 24 8.20 2.00 9.41 36 UNPARSEABLE_RELAY 24 15.74 48.00 9.41 37 BAYES_60 20 7.87 8.00 7.84 38 XM_DKIMWhitelistDomains 20 6.56 0.00 7.84 39 XM_B_Unsub 19 8.85 16.00 7.45 40 LOTS_OF_MONEY 19 8.52 14.00 7.45 41 XM_DK_Undo_02 19 16.39 62.00 7.45 42 USER_IN_DEF_DKIM_WL 17 6.56 6.00 6.67 43 BAYES_99 17 10.49 30.00 6.67 44 TR_XM_BayesUnsub 17 8.20 16.00 6.67 45 MIME_HTML_ONLY 17 9.18 22.00 6.67 46 LotsOfNums_01 17 6.89 8.00 6.67 47 BAYES_999 17 9.51 24.00 6.67 48 T_TooManySym_01 15 5.25 2.00 5.88 49 XM_Body_Dirty_Words 14 6.56 12.00 5.49 50 BAYES_00 13 4.26 0.00 5.10 51 HTML_IMAGE_RATIO_04 12 4.59 4.00 4.71 52 T_TooManySym_02 12 4.26 2.00 4.71 53 IN_ZIMBRA_NJ_WHITELIST 12 3.93 0.00 4.71 54 XM_SendGrid 11 4.92 8.00 4.31 55 XM_UncommonTLD01 10 3.28 0.00 3.92 56 TooManyTo_001 10 3.61 2.00 3.92 57 XM_H_Long_From01 10 5.90 16.00 3.92 58 XMNumbers 10 4.59 8.00 3.92 59 XM_Evil_Numbers_Gen 9 3.93 6.00 3.53 60 RELAYCOUNTRY_META 9 5.57 16.00 3.53 61 XM_B_Unsub2 9 3.28 2.00 3.53 62 T_REMOTE_IMAGE 9 3.93 6.00 3.53 63 MAILING_LIST_MULTI 9 7.21 26.00 3.53 64 RCVD_IN_MSPIKE_H4 8 4.26 10.00 3.14 65 MIME_QP_LONG_LINE 8 2.95 2.00 3.14 66 MIME_CHARSET_FARAWAY 7 6.56 26.00 2.75 67 TR_XM_DK_Bayes1 7 2.30 0.00 2.75 68 XM_ZIP 7 2.30 0.00 2.75 69 TR_XM_SpammyWords5 7 3.61 8.00 2.75 70 TR_XM_DK_SendGrid 7 2.62 2.00 2.75 71 TR_XM_DK_Bayes 7 2.30 0.00 2.75 72 BAYES_40 7 2.30 0.00 2.75 73 INVALID_MSGID 7 2.30 0.00 2.75 74 MIME_HTML_MOSTLY 6 4.92 18.00 2.35 75 XMStrtUSub 6 2.30 2.00 2.35 76 MSGID_NOFQDN1 6 1.97 0.00 2.35 77 T_TooManySym_03 6 1.97 0.00 2.35 78 TVD_SPACE_RATIO 6 1.97 0.00 2.35 79 TO_MALFORMED 6 1.97 0.00 2.35 80 BAYES_80 5 4.92 20.00 1.96 81 DKIM_INVALID 5 1.97 2.00 1.96 82 HTML_IMAGE_RATIO_06 5 1.64 0.00 1.96 83 SUBJ_ALL_CAPS 5 1.64 0.00 1.96 84 XM_OfRef6 5 6.23 28.00 1.96 85 HTML_FONT_FACE_BAD 5 1.64 0.00 1.96 86 TR_XM_DK_Bayes2 5 1.64 0.00 1.96 87 TR_XM_SpammyWords4 5 3.28 10.00 1.96 88 XM_CamelCaseFrm001 5 2.62 6.00 1.96 89 MPART_ALT_DIFF 5 3.61 12.00 1.96 90 XM_B_SpammyTLD 5 6.56 30.00 1.96 91 UNTRUSTED_Relay 5 3.28 10.00 1.96 92 BAYES_20 5 1.64 0.00 1.96 93 SCC_BODY_URI_ONLY 5 1.64 0.00 1.96 94 XM_B_SpammyWords3 5 2.95 8.00 1.96 95 HTML_IMAGE_RATIO_08 5 1.64 0.00 1.96 96 TR_XM_SpammyRelay 4 2.95 10.00 1.57 97 FROM_GOV_SPOOF 4 1.64 2.00 1.57 98 DEAR_FRIEND 4 1.31 0.00 1.57 99 TVD_RCVD_IP 4 1.31 0.00 1.57 100 XMSubMetaSx_00 4 1.97 4.00 1.57 101 XMBSHREFv2 4 1.31 0.00 1.57 102 XM_H_Long_From02 4 5.57 26.00 1.57 103 FVGT_m_MULTI_ODD_EMAIL 4 1.31 0.00 1.57 104 XM_B_Phish_Phrases 4 2.30 6.00 1.57 105 XM_H_Trusted_IP 4 1.31 0.00 1.57 106 XMGappySubj_01 3 0.98 0.00 1.18 107 HTML_IMAGE_ONLY_28 3 0.98 0.00 1.18 108 HTML_IMAGE_RATIO_02 3 2.62 10.00 1.18 109 TM2_M_VERY_LONG_WORD 3 1.31 2.00 1.18 110 TR_XM_UnparsRelay 3 3.93 18.00 1.18 111 XMSubPhish11 3 0.98 0.00 1.18 112 BOTNET 3 5.57 28.00 1.18 113 BAYES_95 3 0.98 0.00 1.18 114 XM_UB50 3 0.98 0.00 1.18 115 RELAYCOUNTRY_AU 3 0.98 0.00 1.18 116 TR_XM_SB_Phish 3 0.98 0.00 1.18 117 HTML_MIME_NO_HTML_TAG 3 1.97 6.00 1.18 118 TooManyTo_002 3 0.98 0.00 1.18 119 IN_HORDE_ADDRESS_BOOK 3 0.98 0.00 1.18 120 RCVD_IN_PSBL 3 0.98 0.00 1.18 121 XMCapTrack 3 0.98 0.00 1.18 122 TR_Symld_Words 3 1.31 2.00 1.18 123 XMSexyCombo_05 3 1.31 2.00 1.18 124 SpammyFromTLD_01 3 2.30 8.00 1.18 125 HTML_IMAGE_ONLY_32 2 0.66 0.00 0.78 126 XM_Body_Obfu01 2 0.66 0.00 0.78 127 RCVD_IN_IADB_SENDERID 2 0.66 0.00 0.78 128 TR_XM_DKIM_Undo 2 9.51 54.00 0.78 129 HTML_IMAGE_ONLY_20 2 1.64 6.00 0.78 130 TR_XM_PSC1 2 0.66 0.00 0.78 131 T_XMDrugObfuBody_08 2 1.31 4.00 0.78 132 PDS_OTHER_BAD_TLD 2 1.64 6.00 0.78 133 XMSpoofStaff2 2 0.66 0.00 0.78 134 RELAYCOUNTRY_FR 2 0.66 0.00 0.78 135 XMSubNoVowel 2 0.98 2.00 0.78 136 NUMERIC_HTTP_ADDR 2 0.66 0.00 0.78 137 XM_ZohoDesk1 2 0.66 0.00 0.78 138 TR_XM_SpoofPhishAttach 2 0.66 0.00 0.78 139 RCVD_IN_IADB_LISTED 2 0.66 0.00 0.78 140 XM_H_SpoofStaff4 2 0.66 0.00 0.78 141 XMGenDplmaNmb 2 0.66 0.00 0.78 142 XMSubMetaD_03 2 0.66 0.00 0.78 143 RCVD_IN_IADB_SPF 2 0.66 0.00 0.78 144 TR_XM_PhishingBody 2 1.64 6.00 0.78 145 RELAYCOUNTRY_DE 2 0.98 2.00 0.78 146 CK_HELO_GENERIC 2 1.31 4.00 0.78 147 EXCLAMACION_ES 2 0.66 0.00 0.78 148 XM_DIRTYINTL 2 0.98 2.00 0.78 149 XMDiploma_00 2 0.66 0.00 0.78 150 XM_B_Phish66 2 1.64 6.00 0.78 151 XM_Ancestry_Forge 2 0.66 0.00 0.78 152 RCVD_IN_IADB_DK 2 0.66 0.00 0.78 153 XMHTML_After_End 2 0.66 0.00 0.78 154 TR_XM_SpoofStaff 2 0.66 0.00 0.78 155 FILL_THIS_FORM 1 0.33 0.00 0.39 156 TooManyTo_004 1 0.33 0.00 0.39 157 XM_DK_Undo_01 1 0.66 2.00 0.39 158 HK_RANDOM_ENVFROM 1 0.33 0.00 0.39 159 TO_NO_BRKTS_FROM_MSSP 1 0.33 0.00 0.39 160 XMSubMetaI_00 1 0.66 2.00 0.39 161 URI_NOVOWEL 1 1.64 8.00 0.39 162 HELO_NODOT 1 0.33 0.00 0.39 163 HTML_IMAGE_ONLY_08 1 0.33 0.00 0.39 164 TR_MSPIKEBAYES00 1 0.33 0.00 0.39 165 XMHTMLBadTable_001 1 0.33 0.00 0.39 166 FROM_GOV_DKIM_AU 1 0.33 0.00 0.39 167 XM_SPF_SoftFail 1 0.98 4.00 0.39 168 TR_XM_PHPDW 1 0.33 0.00 0.39 169 TooManyTo_003 1 0.33 0.00 0.39 170 RCVD_IN_RP_SAFE 1 0.33 0.00 0.39 171 CTE_8BIT_MISMATCH 1 0.33 0.00 0.39 172 TR_XM_PHPForged 1 0.33 0.00 0.39 173 FROM_SUSPICIOUS_NTLD_FP 1 0.33 0.00 0.39 174 XMSubject_78 1 0.33 0.00 0.39 175 RCVD_IN_IADB_OPTIN_GT50 1 0.33 0.00 0.39 176 RCVD_IN_SORBS_DUL 1 0.33 0.00 0.39 177 CONTENT_AFTER_HTML 1 0.33 0.00 0.39 178 HTTPS_HTTP_MISMATCH 1 0.33 0.00 0.39 179 XMLngstWrd_00 1 0.33 0.00 0.39 180 RCVD_IN_VALIDITY_CERTIFIED 1 0.33 0.00 0.39 181 TR_XM_COVIDMETA5 1 0.33 0.00 0.39 182 FROM_SUSPICIOUS_NTLD 1 0.33 0.00 0.39 183 HTML_IMAGE_ONLY_24 1 0.98 4.00 0.39 184 MIME_BASE64_TEXT 1 0.98 4.00 0.39 185 HK_RANDOM_FROM 1 0.33 0.00 0.39 186 XMSubMetaSxObfu_02 1 0.33 0.00 0.39 187 RCVD_IN_IADB_OPTIN 1 0.33 0.00 0.39 188 XM_H_PHPOS_M 1 0.33 0.00 0.39 189 MIME_HTML_ONLY_MULTI 1 0.33 0.00 0.39 190 RCVD_IN_VALIDITY_SAFE 1 0.33 0.00 0.39 191 FROM_STARTS_WITH_NUMS 1 0.33 0.00 0.39 192 RCVD_IN_RP_CERTIFIED 1 0.33 0.00 0.39 193 HDRS_MISSP 1 0.33 0.00 0.39 194 XM_OfRef7 1 0.33 0.00 0.39 195 XM_ShortIntro_01 1 0.33 0.00 0.39 196 XMReplyNow 1 0.33 0.00 0.39 197 SHORT_HELO_AND_INLINE_IMAGE 1 0.33 0.00 0.39 198 RELAYCOUNTRY_IN 1 1.64 8.00 0.39 199 XM_UB60 1 0.66 2.00 0.39 200 XM_S_SubURI 1 0.33 0.00 0.39 ----------------------------------------------------------------------