Email: 157 Autolearn: 0 AvgScore: 1.78 AvgScanTime: 4.28 sec Spam: 26 Autolearn: 0 AvgScore: 15.19 AvgScanTime: 4.65 sec Ham: 131 Autolearn: 0 AvgScore: -0.88 AvgScanTime: 4.21 sec Time Spent Running SA: 0.19 hours Time Spent Processing Spam: 0.03 hours Time Spent Processing Ham: 0.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 25 78.34 96.15 74.81 2 RELAYCOUNTRY_US 22 70.70 84.62 67.94 3 T_SCC_BODY_TEXT_LINE 22 85.35 84.62 85.50 4 DKIM_SIGNED 18 61.15 69.23 59.54 5 DCC_CHECK_NEGATIVE 18 75.80 69.23 77.10 6 DKIM_VALID 18 56.05 69.23 53.44 7 XM_DK_Pass 18 56.69 69.23 54.20 8 DKIM_VALID_AU 15 43.95 57.69 41.22 9 XM_B_SpammyWords 15 41.40 57.69 38.17 10 XM_B_Unicode 15 58.60 57.69 58.78 11 XMListUnsubscribeExists 13 40.13 50.00 38.17 12 BAYES_50 13 70.06 50.00 74.05 13 MIME_HTML_ONLY 11 26.11 42.31 22.90 14 RCVD_IN_MSPIKE_H2 10 15.92 38.46 11.45 15 XM_B_Unicode3 9 37.58 34.62 38.17 16 XM_Multi_Part_URI 8 12.10 30.77 8.40 17 HTML_FONT_LOW_CONTRAST 8 38.22 30.77 39.69 18 DCC_CHECK 8 24.20 30.77 22.90 19 DKIM_VALID_EF 8 24.84 30.77 23.66 20 XM_B_SpammyWords2 7 10.19 26.92 6.87 21 FVGT_m_MULTI_ODD 7 16.56 26.92 14.50 22 RELAYCOUNTRY_META 7 12.10 26.92 9.16 23 BAYES_99 6 5.10 23.08 1.53 24 LOC_TINY_FONT_1 6 22.29 23.08 22.14 25 TooManyTo_001 6 12.10 23.08 9.92 26 UNPARSEABLE_RELAY 6 16.56 23.08 15.27 27 XM_Body_Dirty_Words 6 8.92 23.08 6.11 28 XM_UncommonTLD01 5 8.92 19.23 6.87 29 XMSubLong 5 35.03 19.23 38.17 30 XM_DK_Undo_02 5 6.37 19.23 3.82 31 XM_B_SpammyTLD 4 3.82 15.38 1.53 32 T_KAM_HTML_FONT_INVALID 4 8.92 15.38 7.63 33 TR_XM_UnparsRelay 4 3.18 15.38 0.76 34 RCVD_IN_PSBL 4 3.18 15.38 0.76 35 BOTNET 3 3.82 11.54 2.29 36 SpammyFromTLD_02 3 1.91 11.54 0.00 37 T_TM2_M_HEADER_IN_MSG 3 20.38 11.54 22.14 38 MAILING_LIST_MULTI 3 3.18 11.54 1.53 39 TR_XM_BayesUnsub 3 11.46 11.54 11.45 40 TR_XM_PhishingBody 3 2.55 11.54 0.76 41 URIBL_DBL_SPAM 3 1.91 11.54 0.00 42 PDS_OTHER_BAD_TLD 3 1.91 11.54 0.00 43 TR_Symld_Words 3 2.55 11.54 0.76 44 XM_B_Unsub 3 12.10 11.54 12.21 45 RCVD_IN_VALIDITY_RPBL 3 1.91 11.54 0.00 46 TR_XM_DK_Unsub 3 8.92 11.54 8.40 47 XM_SendGrid 3 4.46 11.54 3.05 48 BAYES_999 3 2.55 11.54 0.76 49 XM_DK_Undo_01 3 2.55 11.54 0.76 50 TR_XM_SpammyWords5 3 1.91 11.54 0.00 51 BAYES_60 3 10.19 11.54 9.92 52 RCVD_IN_MSPIKE_WL 3 16.56 11.54 17.56 53 XM_H_Long_From01 3 5.10 11.54 3.82 54 UNTRUSTED_Relay 3 2.55 11.54 0.76 55 BAYES_95 3 2.55 11.54 0.76 56 XM_B_SpammyWords3 3 3.82 11.54 2.29 57 TR_XM_SpammyRelay 3 3.82 11.54 2.29 58 TR_XM_SpammyWords4 3 9.55 11.54 9.16 59 TM2_M_VERY_LONG_WORD 3 1.91 11.54 0.00 60 TR_XM_MSPIKECOMBO 3 1.91 11.54 0.00 61 RCVD_IN_MSPIKE_BL 3 1.91 11.54 0.00 62 LOTS_OF_MONEY 3 12.10 11.54 12.21 63 XMNumbers 3 7.01 11.54 6.11 64 XM_UB50 2 1.27 7.69 0.00 65 MPART_ALT_DIFF 2 3.18 7.69 2.29 66 TR_XM_Undi_Recip11 2 1.27 7.69 0.00 67 T_REMOTE_IMAGE 2 5.10 7.69 4.58 68 XM_B_Phish66 2 1.27 7.69 0.00 69 XMSubMetaSx_00 2 4.46 7.69 3.82 70 XM_H_Undi_Recip 2 1.27 7.69 0.00 71 RCVD_IN_MSPIKE_H5 2 8.28 7.69 8.40 72 XM_B_Phish_Phrases 2 1.91 7.69 0.76 73 TR_XM_DK_SendGrid 2 1.91 7.69 0.76 74 RCVD_IN_MSPIKE_L4 2 1.27 7.69 0.00 75 TooManyTo_003 2 1.27 7.69 0.00 76 HTML_IMAGE_RATIO_02 2 1.27 7.69 0.00 77 TR_DCC_Bayes_99 2 1.27 7.69 0.00 78 RELAYCOUNTRY_CA 2 7.01 7.69 6.87 79 URIBL_DBL_ABUSE_SPAM 2 1.27 7.69 0.00 80 TR_XM_DKIM_Undo 2 1.27 7.69 0.00 81 XMGenDplmaNmb 2 3.82 7.69 3.05 82 TooManyTo_004 2 1.27 7.69 0.00 83 XMDiploma_00 2 3.82 7.69 3.05 84 BOTNET_IPINHOSTNAME 2 3.18 7.69 2.29 85 TooManyTo_002 2 1.27 7.69 0.00 86 HK_SCAM 1 0.64 3.85 0.00 87 XMLngstWrd_00 1 0.64 3.85 0.00 88 LONG_JUNK_URI2 1 0.64 3.85 0.00 89 XMSexyCombo_01 1 0.64 3.85 0.00 90 RCVD_IN_MSPIKE_H3 1 6.37 3.85 6.87 91 XFER_LOTSA_MONEY 1 0.64 3.85 0.00 92 HTML_FONT_TINY_NORDNS 1 1.91 3.85 1.53 93 UNDISC_MONEY 1 0.64 3.85 0.00 94 TR_XM_Undi_Recip6 1 0.64 3.85 0.00 95 MPART_ALT_DIFF_COUNT 1 1.27 3.85 0.76 96 FROM_SUSPICIOUS_NTLD 1 0.64 3.85 0.00 97 XMWinner 1 0.64 3.85 0.00 98 UNSUB_GOOG_FORM 1 0.64 3.85 0.00 99 TR_XM_Undi_Recip5 1 0.64 3.85 0.00 100 XM_TLDProd2 1 0.64 3.85 0.00 101 TR_XM_NoHeaderRelay 1 1.91 3.85 1.53 102 RCVD_IN_MSPIKE_L5 1 0.64 3.85 0.00 103 LONG_JUNK_URI 1 1.27 3.85 0.76 104 GAPPY_SUBJECT 1 0.64 3.85 0.00 105 T_XMHurry_00 1 0.64 3.85 0.00 106 XM_B_DNDMA 1 0.64 3.85 0.00 107 XMSexyCombo_05 1 1.91 3.85 1.53 108 MISSING_MIME_HB_SEP 1 0.64 3.85 0.00 109 XM_CamelCaseFrm001 1 1.27 3.85 0.76 110 BOTNET_NORDNS 1 0.64 3.85 0.00 111 URI_WP_HACKED 1 0.64 3.85 0.00 112 TR_MRelay_UG 1 0.64 3.85 0.00 113 RDNS_DYNAMIC 1 0.64 3.85 0.00 114 FROM_GOV_SPOOF 1 1.91 3.85 1.53 115 XMSexyCombo_02 1 0.64 3.85 0.00 116 SORTED_RECIPS 1 0.64 3.85 0.00 117 XM_H_FedEx_Spoof 1 0.64 3.85 0.00 118 RELAYCOUNTRY_FI 1 0.64 3.85 0.00 119 PLING_QUERY 1 0.64 3.85 0.00 120 NORDNS_LOW_CONTRAST 1 1.91 3.85 1.53 121 TR_XM_COVIDMETA1 1 0.64 3.85 0.00 122 SUBJ_ALL_CAPS 1 2.55 3.85 2.29 123 DATE_IN_FUTURE_06_12 1 0.64 3.85 0.00 124 OBFU_TEXT_ATTACH 1 0.64 3.85 0.00 125 XM_UB99 1 0.64 3.85 0.00 126 XMBrknScrpt_02 1 0.64 3.85 0.00 127 HTML_IMAGE_ONLY_28 1 0.64 3.85 0.00 128 TooManyTo_005 1 0.64 3.85 0.00 129 PDS_BTC_ID 1 0.64 3.85 0.00 130 XM_Body_Dirty_Words_03 1 0.64 3.85 0.00 131 XM_B_REG_HTML 1 0.64 3.85 0.00 132 XMRcvdHeader_05 1 0.64 3.85 0.00 133 KHOP_HELO_FCRDNS 1 0.64 3.85 0.00 134 T_TooManySym_02 1 8.92 3.85 9.92 135 LotsOfNums_01 1 5.73 3.85 6.11 136 TR_Sbj_FN_Bdy 1 0.64 3.85 0.00 137 RELAYCOUNTRY_RO 1 0.64 3.85 0.00 138 FROM_SUSPICIOUS_NTLD_FP 1 0.64 3.85 0.00 139 XMBdyGiftCard01 1 1.27 3.85 0.76 140 NO_DNS_FOR_FROM 1 0.64 3.85 0.00 141 RCVD_IN_BL_SPAMCOP_NET 1 0.64 3.85 0.00 142 LOADSA_MONEY_COMBO 1 0.64 3.85 0.00 143 SpammyFromTLD_01 1 0.64 3.85 0.00 144 RELAYCOUNTRY_ES 1 0.64 3.85 0.00 145 TO_NO_BRKTS_DYNIP 1 0.64 3.85 0.00 146 TO_MALFORMED 1 5.10 3.85 5.34 147 XM_Body_Dirty_Words_05 1 0.64 3.85 0.00 148 RELAYCOUNTRY_ID 1 0.64 3.85 0.00 149 XMReplyNow 1 6.37 3.85 6.87 150 MSGID_FROM_MTA_HEADER 1 4.46 3.85 4.58 151 MIME_BASE64_TEXT 1 0.64 3.85 0.00 152 RELAYCOUNTRY_BR 1 0.64 3.85 0.00 153 T_TooManySym_01 1 8.92 3.85 9.92 154 XM_SPF_SoftFail 1 1.91 3.85 1.53 155 TR_XM_MaxWHORU 1 0.64 3.85 0.00 156 MIME_HTML_ONLY_MULTI 1 1.91 3.85 1.53 157 HTML_IMAGE_ONLY_04 1 0.64 3.85 0.00 158 TO_EQ_FM_DOM_HTML_ONLY 1 0.64 3.85 0.00 159 XMCapTrack 1 0.64 3.85 0.00 160 XM_B_SexDrugs1 1 0.64 3.85 0.00 161 HTML_IMAGE_RATIO_06 1 4.46 3.85 4.58 162 TVD_RCVD_SPACE_BRACKET 1 0.64 3.85 0.00 163 XM_WhatsAppForged 1 0.64 3.85 0.00 164 XM_TLDProd1 1 0.64 3.85 0.00 165 XM_UB999 1 0.64 3.85 0.00 166 TR_XM_SpammyWords3 1 0.64 3.85 0.00 167 HK_RANDOM_ENVFROM 1 0.64 3.85 0.00 168 XM_Body_Obfu01 1 3.18 3.85 3.05 169 XMPhish11 1 0.64 3.85 0.00 170 BAYES_80 1 1.91 3.85 1.53 171 TM2_M_HAS_BSLASH_URI 1 0.64 3.85 0.00 172 BITCOIN_SPAM_10 1 0.64 3.85 0.00 173 XMLngstWrd_01 1 0.64 3.85 0.00 174 XM_DIRTYINTL 1 1.27 3.85 0.76 175 XM_Body_Dirty_Words_02 1 0.64 3.85 0.00 176 RELAYCOUNTRY_JP 1 0.64 3.85 0.00 177 URI_NOVOWEL 1 1.27 3.85 0.76 178 SUSPICIOUS_RECIPS 1 0.64 3.85 0.00 179 HDRS_MISSP 1 1.91 3.85 1.53 180 XM_Body_Dirty_Words_01 1 0.64 3.85 0.00 181 HTTP_EXCESSIVE_ESCAPES 1 0.64 3.85 0.00 182 XM_H_Long_From02 1 0.64 3.85 0.00 183 ADVANCE_FEE_5_NEW_MONEY 1 0.64 3.85 0.00 184 PDS_RDNS_DYNAMIC_FP 1 0.64 3.85 0.00 185 HTML_IMAGE_ONLY_24 1 1.27 3.85 0.76 186 XM_ProductURIs 1 0.64 3.85 0.00 187 XM_Body_Dirty_Words_04 1 0.64 3.85 0.00 188 XM_B_COPY_HTML 1 0.64 3.85 0.00 189 XM_B_Investor 1 1.27 3.85 0.76 190 XM_B_SexDrugs2 1 0.64 3.85 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 112 85.35 84.62 85.50 2 DCC_CHECK_NEGATIVE 101 75.80 69.23 77.10 3 HTML_MESSAGE 98 78.34 96.15 74.81 4 BAYES_50 97 70.06 50.00 74.05 5 RELAYCOUNTRY_US 89 70.70 84.62 67.94 6 DKIM_SIGNED 78 61.15 69.23 59.54 7 XM_B_Unicode 77 58.60 57.69 58.78 8 XM_DK_Pass 71 56.69 69.23 54.20 9 DKIM_VALID 70 56.05 69.23 53.44 10 DKIM_VALID_AU 54 43.95 57.69 41.22 11 HTML_FONT_LOW_CONTRAST 52 38.22 30.77 39.69 12 XMListUnsubscribeExists 50 40.13 50.00 38.17 13 XMSubLong 50 35.03 19.23 38.17 14 XM_B_SpammyWords 50 41.40 57.69 38.17 15 XM_B_Unicode3 50 37.58 34.62 38.17 16 ALL_TRUSTED 37 23.57 0.00 28.24 17 DKIM_VALID_EF 31 24.84 30.77 23.66 18 DCC_CHECK 30 24.20 30.77 22.90 19 MIME_HTML_ONLY 30 26.11 42.31 22.90 20 LOC_TINY_FONT_1 29 22.29 23.08 22.14 21 T_TM2_M_HEADER_IN_MSG 29 20.38 11.54 22.14 22 RCVD_IN_MSPIKE_WL 23 16.56 11.54 17.56 23 UNPARSEABLE_RELAY 20 16.56 23.08 15.27 24 FVGT_m_MULTI_ODD 19 16.56 26.92 14.50 25 XM_DKIMWhitelistDomains 18 11.46 0.00 13.74 26 FSL_BULK_SIG 17 10.83 0.00 12.98 27 XM_B_Unsub 16 12.10 11.54 12.21 28 LOTS_OF_MONEY 16 12.10 11.54 12.21 29 TR_XM_BayesUnsub 15 11.46 11.54 11.45 30 RCVD_IN_MSPIKE_H2 15 15.92 38.46 11.45 31 BAYES_60 13 10.19 11.54 9.92 32 T_TooManySym_02 13 8.92 3.85 9.92 33 TooManyTo_001 13 12.10 23.08 9.92 34 T_TooManySym_01 13 8.92 3.85 9.92 35 RELAYCOUNTRY_META 12 12.10 26.92 9.16 36 USER_IN_DEF_DKIM_WL 12 7.64 0.00 9.16 37 TR_XM_SpammyWords4 12 9.55 11.54 9.16 38 TR_XM_DK_Unsub 11 8.92 11.54 8.40 39 XM_Multi_Part_URI 11 12.10 30.77 8.40 40 RCVD_IN_MSPIKE_H5 11 8.28 7.69 8.40 41 T_KAM_HTML_FONT_INVALID 10 8.92 15.38 7.63 42 XM_B_SpammyWords2 9 10.19 26.92 6.87 43 RCVD_IN_MSPIKE_H3 9 6.37 3.85 6.87 44 XM_UncommonTLD01 9 8.92 19.23 6.87 45 RELAYCOUNTRY_CA 9 7.01 7.69 6.87 46 XMReplyNow 9 6.37 3.85 6.87 47 LotsOfNums_01 8 5.73 3.85 6.11 48 DKIM_INVALID 8 5.10 0.00 6.11 49 XMNumbers 8 7.01 11.54 6.11 50 XM_Body_Dirty_Words 8 8.92 23.08 6.11 51 BAYES_00 8 5.10 0.00 6.11 52 XMGappySubj_01 8 5.10 0.00 6.11 53 MSGID_NOFQDN1 7 4.46 0.00 5.34 54 BOUNCE_MESSAGE 7 4.46 0.00 5.34 55 INVALID_MSGID 7 4.46 0.00 5.34 56 ANY_BOUNCE_MESSAGE 7 4.46 0.00 5.34 57 TO_MALFORMED 7 5.10 3.85 5.34 58 IN_ZIMBRA_NJ_WHITELIST 7 4.46 0.00 5.34 59 XMStrtUSub 6 3.82 0.00 4.58 60 T_REMOTE_IMAGE 6 5.10 7.69 4.58 61 MIME_QP_LONG_LINE 6 3.82 0.00 4.58 62 HTML_MIME_NO_HTML_TAG 6 3.82 0.00 4.58 63 TVD_SPACE_RATIO 6 3.82 0.00 4.58 64 SCC_BODY_URI_ONLY 6 3.82 0.00 4.58 65 HTML_IMAGE_RATIO_06 6 4.46 3.85 4.58 66 MSGID_FROM_MTA_HEADER 6 4.46 3.85 4.58 67 XM_H_Long_From01 5 5.10 11.54 3.82 68 XMSubMetaSx_00 5 4.46 7.69 3.82 69 TR_XM_SB_Phish 5 3.18 0.00 3.82 70 XM_DK_Undo_02 5 6.37 19.23 3.82 71 XMSubPhish11 5 3.18 0.00 3.82 72 TR_XM_DK_Bayes 4 2.55 0.00 3.05 73 RCVD_IN_IADB_SPF 4 2.55 0.00 3.05 74 XM_SendGrid 4 4.46 11.54 3.05 75 HTML_IMAGE_RATIO_04 4 2.55 0.00 3.05 76 TR_XM_DK_Bayes2 4 2.55 0.00 3.05 77 BAYES_40 4 2.55 0.00 3.05 78 XMDiploma_00 4 3.82 7.69 3.05 79 RCVD_IN_IADB_LISTED 4 2.55 0.00 3.05 80 XMGenDplmaNmb 4 3.82 7.69 3.05 81 XMGappySubj_02 4 2.55 0.00 3.05 82 XM_B_Unsub2 4 2.55 0.00 3.05 83 XM_Body_Obfu01 4 3.18 3.85 3.05 84 XM_ZIP 4 2.55 0.00 3.05 85 TR_XM_DK_Bayes1 4 2.55 0.00 3.05 86 SUBJ_ALL_CAPS 3 2.55 3.85 2.29 87 T_TooManySym_03 3 1.91 0.00 2.29 88 XMSubMetaSSx_00 3 1.91 0.00 2.29 89 RCVD_IN_MSPIKE_H4 3 1.91 0.00 2.29 90 MPART_ALT_DIFF 3 3.18 7.69 2.29 91 BAYES_20 3 1.91 0.00 2.29 92 RCVD_IN_IADB_DK 3 1.91 0.00 2.29 93 BOTNET 3 3.82 11.54 2.29 94 BOTNET_IPINHOSTNAME 3 3.18 7.69 2.29 95 HTML_FONT_FACE_BAD 3 1.91 0.00 2.29 96 RCVD_IN_IADB_VOUCHED 3 1.91 0.00 2.29 97 XM_H_Trusted_IP 3 1.91 0.00 2.29 98 XM_B_SpammyWords3 3 3.82 11.54 2.29 99 TR_XM_SpammyRelay 3 3.82 11.54 2.29 100 XMBody_17 3 1.91 0.00 2.29 101 TR_XM_PSC1 2 1.27 0.00 1.53 102 NORDNS_LOW_CONTRAST 2 1.91 3.85 1.53 103 XM_B_SpammyTLD 2 3.82 15.38 1.53 104 RCVD_IN_VALIDITY_SAFE 2 1.27 0.00 1.53 105 FROM_GOV_SPOOF 2 1.91 3.85 1.53 106 BAYES_99 2 5.10 23.08 1.53 107 TR_XM_SpoofStaff 2 1.27 0.00 1.53 108 XMSexyCombo_05 2 1.91 3.85 1.53 109 HTML_IMAGE_ONLY_12 2 1.27 0.00 1.53 110 TR_XM_SpoofPhishAttach 2 1.27 0.00 1.53 111 TR_XM_NoHeaderRelay 2 1.91 3.85 1.53 112 HTML_FONT_TINY_NORDNS 2 1.91 3.85 1.53 113 TM2_M_URI_OPT_OUT 2 1.27 0.00 1.53 114 MAILING_LIST_MULTI 2 3.18 11.54 1.53 115 IN_HORDE_ADDRESS_BOOK 2 1.27 0.00 1.53 116 RCVD_IN_IADB_SENDERID 2 1.27 0.00 1.53 117 XM_H_SpoofStaff4 2 1.27 0.00 1.53 118 XM_Evil_Numbers_Gen 2 1.27 0.00 1.53 119 FVGT_m_MULTI_ODD_EMAIL 2 1.27 0.00 1.53 120 SHORTENED_URL_HREF 2 1.27 0.00 1.53 121 HDRS_MISSP 2 1.91 3.85 1.53 122 XMSpoofStaff2 2 1.27 0.00 1.53 123 RCVD_IN_IADB_OPTIN 2 1.27 0.00 1.53 124 XM_ZohoDesk1 2 1.27 0.00 1.53 125 XMStockSpam_06 2 1.27 0.00 1.53 126 XM_PDF 2 1.27 0.00 1.53 127 BAYES_80 2 1.91 3.85 1.53 128 XM_SPF_SoftFail 2 1.91 3.85 1.53 129 MIME_HTML_ONLY_MULTI 2 1.91 3.85 1.53 130 RCVD_IN_VALIDITY_CERTIFIED 2 1.27 0.00 1.53 131 XM_S_SpammyWords 1 0.64 0.00 0.76 132 TR_XM_UnparsRelay 1 3.18 15.38 0.76 133 BAYES_05 1 0.64 0.00 0.76 134 XM_OfRef6 1 0.64 0.00 0.76 135 BAYES_999 1 2.55 11.54 0.76 136 XM_DK_Undo_01 1 2.55 11.54 0.76 137 TR_XM_Spammywords 1 0.64 0.00 0.76 138 TR_Symld_Words 1 2.55 11.54 0.76 139 XMSolicitRefs_0 1 0.64 0.00 0.76 140 XM_UB60 1 0.64 0.00 0.76 141 TR_XM_PhishingBody 1 2.55 11.54 0.76 142 JOIN_MILLIONS 1 0.64 0.00 0.76 143 XM_CamelCaseFrm001 1 1.27 3.85 0.76 144 TR_Mismatch_TLD_01 1 0.64 0.00 0.76 145 DRUGS_DIET 1 0.64 0.00 0.76 146 LONG_JUNK_URI 1 1.27 3.85 0.76 147 TVD_RCVD_IP 1 0.64 0.00 0.76 148 HTML_IMAGE_RATIO_08 1 0.64 0.00 0.76 149 MPART_ALT_DIFF_COUNT 1 1.27 3.85 0.76 150 HTML_EXTRA_CLOSE 1 0.64 0.00 0.76 151 OOOBOUNCE_MESSAGE 1 0.64 0.00 0.76 152 XM_LIGHT_HEAVY 1 0.64 0.00 0.76 153 XMSubMetaSxObfu_03 1 0.64 0.00 0.76 154 XM_ShortIntro_01 1 0.64 0.00 0.76 155 XM_S_SubURI 1 0.64 0.00 0.76 156 HTML_IMAGE_ONLY_24 1 1.27 3.85 0.76 157 XM_Dr_From 1 0.64 0.00 0.76 158 XM_B_Investor 1 1.27 3.85 0.76 159 RCVD_IN_PSBL 1 3.18 15.38 0.76 160 RELAYCOUNTRY_AU 1 0.64 0.00 0.76 161 XM_DIRTYINTL 1 1.27 3.85 0.76 162 TR_LOTS_OF_MONEY3 1 0.64 0.00 0.76 163 URI_NOVOWEL 1 1.27 3.85 0.76 164 DRUGS_ERECTILE 1 0.64 0.00 0.76 165 XMSubMetaD_00 1 0.64 0.00 0.76 166 RELAYCOUNTRY_BG 1 0.64 0.00 0.76 167 XM_S_SpammyWords2 1 0.64 0.00 0.76 168 RELAYCOUNTRY_DE 1 0.64 0.00 0.76 169 TR_MetaPhish_Combo_01 1 0.64 0.00 0.76 170 XM_B_DynamicLink 1 0.64 0.00 0.76 171 XM_B_SpammyWords4 1 0.64 0.00 0.76 172 MIME_HTML_MOSTLY 1 0.64 0.00 0.76 173 XMPhish08 1 0.64 0.00 0.76 174 XM_B_Phish_Phrases 1 1.91 7.69 0.76 175 TR_XM_DK_SendGrid 1 1.91 7.69 0.76 176 CTE_8BIT_MISMATCH 1 0.64 0.00 0.76 177 XMBSHREFv2 1 0.64 0.00 0.76 178 T_OBFU_PDF_ATTACH 1 0.64 0.00 0.76 179 XMBdyGiftCard01 1 1.27 3.85 0.76 180 BAYES_95 1 2.55 11.54 0.76 181 UNTRUSTED_Relay 1 2.55 11.54 0.76 182 BANG_GUAR 1 0.64 0.00 0.76 ----------------------------------------------------------------------